Analysis
- max time kernel
1257588s - max time network
63s - platform
android_x64 - resource
android-x64 - submitted
04/10/2021, 10:57
Static task
static1
Behavioral task
behavioral1
Sample
NTTsecurity.apk
Resource
android-x64
0 signatures
0 seconds
General
- Target NTTsecurity.apk
- Size 1.9MB
- Sample211004-m19jaagcbr
- SHA256 73c19a778500c6fb04f60d60527ea76a870590ed9e0f6014cb03419d02ff0457
- MD5 4609172d3aeb3dd270cc9afbeff2940c
- SHA1 cbb8e106862623cedb664b0d7ed7b44b283563cd
- SHA512 38ec29e51f27201b3c8371b4d9c1fd5fc6a7d1ea78353aea2acfb8d3caea6e9f4a9267dc110ea453802f90aceb9b1fb7e4d65e963fee28b9b72248716d0479f7
- MD5 SHA1 SHA512
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /product/app/webview/webview.apk 3575 com.zcpiidaj.bbbqizlc /product/app/webview/webview.apk 3575 com.zcpiidaj.bbbqizlc - Uses reflection 2 IoCs
description pid Process Invokes method android.content.Context.bindServiceAsUser 3575 com.zcpiidaj.bbbqizlc Invokes method android.content.Context.bindServiceAsUser 3575 com.zcpiidaj.bbbqizlc