Resubmissions

24-11-2022 17:19

221124-vvwn8shb86 10

04-10-2021 10:57

211004-m19jaagcbr 7

Analysis

  • max time kernel
    1257588s
  • max time network
    63s
  • platform
    android_x64
  • resource
    android-x64
  • submitted
    04-10-2021 10:57

General

  • Target

    NTTsecurity.apk

  • Size

    1.9MB

  • MD5

    4609172d3aeb3dd270cc9afbeff2940c

  • SHA1

    cbb8e106862623cedb664b0d7ed7b44b283563cd

  • SHA256

    73c19a778500c6fb04f60d60527ea76a870590ed9e0f6014cb03419d02ff0457

  • SHA512

    38ec29e51f27201b3c8371b4d9c1fd5fc6a7d1ea78353aea2acfb8d3caea6e9f4a9267dc110ea453802f90aceb9b1fb7e4d65e963fee28b9b72248716d0479f7

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses reflection 2 IoCs

Processes

  • com.zcpiidaj.bbbqizlc
    1⤵
    • Loads dropped Dex/Jar
    • Uses reflection
    PID:3575

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.zcpiidaj.bbbqizlc/app_webview/.org.chromium.Chromium.ccv4bZ
    MD5

    4f00f7ae14f7a7be44934dd243403a75

    SHA1

    9a780fb2025c2b85a5345107a2a9e908b807789f

    SHA256

    0977d6a989c3515c37e100628e6dddd0a34f30faafb035c5f06c68f51e00399c

    SHA512

    b395a962aae3383dbae1dbdd0c9957cea07c207dd215ef58fcbd855e9bfcf9f79e3e12f8a61e4a3cc6a1a91591dc2b2e52516e678aa060081743a00c176c6b66

  • /data/user/0/com.zcpiidaj.bbbqizlc/app_webview/Web Data
    MD5

    dfea4f9a562d22c658ec695eca31ea04

    SHA1

    2e48be6baf86078d93f14fc38fe9f395c1c54261

    SHA256

    a01b4f35e09bbcdf9753512d4d3ac0b82c8e2f09e2176fa4a5c2523909795b2b

    SHA512

    8e0aab3c5f29a8737b4713b4a1622aa71b3574feabfb41a098f1326b80472c3fea053e759036c44df71aee1a8a1e9caf93f17a9eec88ab278062d7ed48907789

  • /data/user/0/com.zcpiidaj.bbbqizlc/app_webview/Web Data-journal
    MD5

    b31dc3807f1c2b267f13973fced9a34e

    SHA1

    432ff9998f0eb053129afb1d2d4860d31544364e

    SHA256

    5a0c45add4f4c2f0f86c9b94729942e67d33f07461c75d2d315e2999ff4d4bf4

    SHA512

    acc643c0f103e6f6163d7ec0c9a8163967c6bbfc2742c6366b2c7cf6840d9e479e38f7cf13d44c2a3312d4a1e0eaf0be013c736525fdf4722b273ab84c6e7a70

  • /data/user/0/com.zcpiidaj.bbbqizlc/app_webview/metrics_guid
    MD5

    6eb4fc0f5f52e7f13e6332a6e0f0d64c

    SHA1

    7603adcf7b3499f9b2a51f58e4177f56346b4513

    SHA256

    48cec8f3fc487aed8c727b1b193176133afaf1def3fb896ebee222802d83db80

    SHA512

    da0de9320416df33789d6cde35cc7efa5a526ac9391bfe4d660ec2d2db938569f91e0f00080fd01c94b5e5b75b41db5207cbeb8d75497c1a0889c54997a198ce

  • /data/user/0/com.zcpiidaj.bbbqizlc/app_webview/metrics_guid
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.zcpiidaj.bbbqizlc/app_webview/variations_seed_new
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.zcpiidaj.bbbqizlc/app_webview/variations_stamp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.zcpiidaj.bbbqizlc/app_webview/webview_data.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.zcpiidaj.bbbqizlc/cache/WebView/Crashpad/settings.dat
    MD5

    6994e6f9d2654aa1300d011de0a7f60c

    SHA1

    4cf169f96fb81fd367ef61204d8b71d1ef92f9d3

    SHA256

    2f584f5d56698101d355d84942581cc03a8e3031f583015f05139748bc228b4b

    SHA512

    f56eaa93d423fce68ca7f73a54640594adbaad50bae3829a0880ca47fbd9c93c32d13e398a59f0a9a12ad4c545b2b5eba3e1e39d260dc00ac8a789b345817b2b

  • /data/user/0/com.zcpiidaj.bbbqizlc/cache/org.chromium.android_webview/Code Cache/js/index
    MD5

    54cb446f628b2ea4a5bce5769910512e

    SHA1

    c27ca848427fe87f5cf4d0e0e3cd57151b0d820d

    SHA256

    fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d

    SHA512

    8f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0

  • /data/user/0/com.zcpiidaj.bbbqizlc/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
    MD5

    d13df38fed421a68f004c8a6ff0e0dba

    SHA1

    52dccd2463a79e2edbf810001c23e51979e71c8c

    SHA256

    9d30a8ddcaaac4365df8f9992c959a0d335eba5716570e421eed7e72b02b7744

    SHA512

    30b3196963bd28a520abe7eddeb350c4188957d28094a7987e42c075ca9b6b43a4a9beca0809514e4b4455846f9af83632d74a085e2d290f9929f28dac9c0105

  • /data/user/0/com.zcpiidaj.bbbqizlc/shared_prefs/WebViewChromiumPrefs.xml
    MD5

    1357a1d7af06755d561a7ed916373baf

    SHA1

    4a0a0d8b4b81bba92924dd7cf53a44d438312729

    SHA256

    647f3960ac648b24a8d9fa17f93f625437bd6f385636c56f10fefdd9cd447597

    SHA512

    61f15a595e21cb7cbf0b1a5268da72b39ce767e43195b4b1a607125e6e1d3237aa382cffbeb122bee9111f01a61ed4aebc2bef6fa646891f43154b01c32d05d4

  • /product/app/webview/webview.apk
    MD5

    19348d3403a82b3d2699cde7ba4ca32e

    SHA1

    ba0dc4b3f7cd53cae12af24769fa5ad3e09ed6b8

    SHA256

    26e52a3475549c9264f88db866f8c18ad5b88f2abff1b355c829276d15cd2e7a

    SHA512

    c56f21dc208763af7c33a995ed5464848d22d25cd5c2f8a18740dca62993d830b28a0c026c9dc4c822dcbec062508fc3c5ee5a673608bcce28f2bcc0d25bd752

  • /product/app/webview/webview.apk
    MD5

    7c7c60d6b4967ecfac6fb3e8a2724567

    SHA1

    093f749d2b4e7f787052bbddcc518280d13a0ee1

    SHA256

    1e554335439e0ef9b992ea32b80eef74a7f51c5bcc1039799d423361c71b9bad

    SHA512

    4ae8cd5901988b2f562e7ad1c166ab2ad8c3f81a5ddb622d188457626d2ce99c34493ab75b5d6aa9ad525339146d6c5606d652e222f4248d5244f5e5216aa5c0