Analysis
-
max time kernel
1257588s -
max time network
63s -
platform
android_x64 -
resource
android-x64 -
submitted
04-10-2021 10:57
Static task
static1
Behavioral task
behavioral1
Sample
NTTsecurity.apk
Resource
android-x64
General
-
Target
NTTsecurity.apk
-
Size
1.9MB
-
MD5
4609172d3aeb3dd270cc9afbeff2940c
-
SHA1
cbb8e106862623cedb664b0d7ed7b44b283563cd
-
SHA256
73c19a778500c6fb04f60d60527ea76a870590ed9e0f6014cb03419d02ff0457
-
SHA512
38ec29e51f27201b3c8371b4d9c1fd5fc6a7d1ea78353aea2acfb8d3caea6e9f4a9267dc110ea453802f90aceb9b1fb7e4d65e963fee28b9b72248716d0479f7
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.zcpiidaj.bbbqizlcioc pid process /product/app/webview/webview.apk 3575 com.zcpiidaj.bbbqizlc /product/app/webview/webview.apk 3575 com.zcpiidaj.bbbqizlc -
Uses reflection 2 IoCs
Processes:
com.zcpiidaj.bbbqizlcdescription pid process Invokes method android.content.Context.bindServiceAsUser 3575 com.zcpiidaj.bbbqizlc Invokes method android.content.Context.bindServiceAsUser 3575 com.zcpiidaj.bbbqizlc
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
MD5
4f00f7ae14f7a7be44934dd243403a75
SHA19a780fb2025c2b85a5345107a2a9e908b807789f
SHA2560977d6a989c3515c37e100628e6dddd0a34f30faafb035c5f06c68f51e00399c
SHA512b395a962aae3383dbae1dbdd0c9957cea07c207dd215ef58fcbd855e9bfcf9f79e3e12f8a61e4a3cc6a1a91591dc2b2e52516e678aa060081743a00c176c6b66
-
MD5
dfea4f9a562d22c658ec695eca31ea04
SHA12e48be6baf86078d93f14fc38fe9f395c1c54261
SHA256a01b4f35e09bbcdf9753512d4d3ac0b82c8e2f09e2176fa4a5c2523909795b2b
SHA5128e0aab3c5f29a8737b4713b4a1622aa71b3574feabfb41a098f1326b80472c3fea053e759036c44df71aee1a8a1e9caf93f17a9eec88ab278062d7ed48907789
-
MD5
b31dc3807f1c2b267f13973fced9a34e
SHA1432ff9998f0eb053129afb1d2d4860d31544364e
SHA2565a0c45add4f4c2f0f86c9b94729942e67d33f07461c75d2d315e2999ff4d4bf4
SHA512acc643c0f103e6f6163d7ec0c9a8163967c6bbfc2742c6366b2c7cf6840d9e479e38f7cf13d44c2a3312d4a1e0eaf0be013c736525fdf4722b273ab84c6e7a70
-
MD5
6eb4fc0f5f52e7f13e6332a6e0f0d64c
SHA17603adcf7b3499f9b2a51f58e4177f56346b4513
SHA25648cec8f3fc487aed8c727b1b193176133afaf1def3fb896ebee222802d83db80
SHA512da0de9320416df33789d6cde35cc7efa5a526ac9391bfe4d660ec2d2db938569f91e0f00080fd01c94b5e5b75b41db5207cbeb8d75497c1a0889c54997a198ce
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
6994e6f9d2654aa1300d011de0a7f60c
SHA14cf169f96fb81fd367ef61204d8b71d1ef92f9d3
SHA2562f584f5d56698101d355d84942581cc03a8e3031f583015f05139748bc228b4b
SHA512f56eaa93d423fce68ca7f73a54640594adbaad50bae3829a0880ca47fbd9c93c32d13e398a59f0a9a12ad4c545b2b5eba3e1e39d260dc00ac8a789b345817b2b
-
MD5
54cb446f628b2ea4a5bce5769910512e
SHA1c27ca848427fe87f5cf4d0e0e3cd57151b0d820d
SHA256fbcfe23a2ecb82b7100c50811691dde0a33aa3da8d176be9882a9db485dc0f2d
SHA5128f6ed2e91aed9bd415789b1dbe591e7eab29f3f1b48fdfa5e864d7bf4ae554acc5d82b4097a770dabc228523253623e4296c5023cf48252e1b94382c43123cb0
-
/data/user/0/com.zcpiidaj.bbbqizlc/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
MD5d13df38fed421a68f004c8a6ff0e0dba
SHA152dccd2463a79e2edbf810001c23e51979e71c8c
SHA2569d30a8ddcaaac4365df8f9992c959a0d335eba5716570e421eed7e72b02b7744
SHA51230b3196963bd28a520abe7eddeb350c4188957d28094a7987e42c075ca9b6b43a4a9beca0809514e4b4455846f9af83632d74a085e2d290f9929f28dac9c0105
-
MD5
1357a1d7af06755d561a7ed916373baf
SHA14a0a0d8b4b81bba92924dd7cf53a44d438312729
SHA256647f3960ac648b24a8d9fa17f93f625437bd6f385636c56f10fefdd9cd447597
SHA51261f15a595e21cb7cbf0b1a5268da72b39ce767e43195b4b1a607125e6e1d3237aa382cffbeb122bee9111f01a61ed4aebc2bef6fa646891f43154b01c32d05d4
-
MD5
19348d3403a82b3d2699cde7ba4ca32e
SHA1ba0dc4b3f7cd53cae12af24769fa5ad3e09ed6b8
SHA25626e52a3475549c9264f88db866f8c18ad5b88f2abff1b355c829276d15cd2e7a
SHA512c56f21dc208763af7c33a995ed5464848d22d25cd5c2f8a18740dca62993d830b28a0c026c9dc4c822dcbec062508fc3c5ee5a673608bcce28f2bcc0d25bd752
-
MD5
7c7c60d6b4967ecfac6fb3e8a2724567
SHA1093f749d2b4e7f787052bbddcc518280d13a0ee1
SHA2561e554335439e0ef9b992ea32b80eef74a7f51c5bcc1039799d423361c71b9bad
SHA5124ae8cd5901988b2f562e7ad1c166ab2ad8c3f81a5ddb622d188457626d2ce99c34493ab75b5d6aa9ad525339146d6c5606d652e222f4248d5244f5e5216aa5c0