Analysis
-
max time kernel
2201655s -
platform
android_x86 -
resource
android-x86-arm -
submitted
15-10-2021 09:12
Static task
static1
Behavioral task
behavioral1
Sample
e6fa66fc4795131cfbb97668279b84fbf389cc0ff736ae77ec351caa15a45038.apk
Resource
android-x86-arm
General
-
Target
e6fa66fc4795131cfbb97668279b84fbf389cc0ff736ae77ec351caa15a45038.apk
-
Size
4.1MB
-
MD5
532cfe30d666611e34eb49ae310c81cf
-
SHA1
4e446a48e0a4097371442a2cf88a202226828d10
-
SHA256
e6fa66fc4795131cfbb97668279b84fbf389cc0ff736ae77ec351caa15a45038
-
SHA512
dd991e6e4accde9f70e5da9f8c2bab220905ec4083f0ae81e9c7a02b1b3cc9f9f571d95a89774539ef9e0795bb8399ae028e56766d155251938b8d6becb27589
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
Processes:
/system/bin/dex2oatcom.baidu.searchboxioc pid process /data/user/0/com.baidu.searchbox/Yfzjhhjpkv/bzxjopjhbhhbhjg/base.apk.jdkhjbg1.xbY 4879 /system/bin/dex2oat /data/user/0/com.baidu.searchbox/Yfzjhhjpkv/bzxjopjhbhhbhjg/base.apk.jdkhjbg1.xbY 4847 com.baidu.searchbox -
Requests enabling of the accessibility settings. 1 IoCs
Processes:
com.baidu.searchboxdescription ioc process Intent action android.settings.ACCESSIBILITY_SETTINGS com.baidu.searchbox -
Uses reflection 1 IoCs
Processes:
com.baidu.searchboxdescription pid process Invokes method android.view.ViewGroup.makeOptionalFitsSystemWindows 4847 com.baidu.searchbox
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.baidu.searchbox/Yfzjhhjpkv/bzxjopjhbhhbhjg/base.apk.jdkhjbg1.xbYMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.baidu.searchbox/Yfzjhhjpkv/bzxjopjhbhhbhjg/base.apk.jdkhjbg1.xbYMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.baidu.searchbox/Yfzjhhjpkv/bzxjopjhbhhbhjg/base.apk.jdkhjbg1.xbY.x86.flockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.baidu.searchbox/Yfzjhhjpkv/bzxjopjhbhhbhjg/oat/x86/base.apk.jdkhjbg1.odexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.baidu.searchbox/Yfzjhhjpkv/bzxjopjhbhhbhjg/oat/x86/base.apk.jdkhjbg1.vdexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.baidu.searchbox/Yfzjhhjpkv/bzxjopjhbhhbhjg/shhjhpja.kvsgMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.baidu.searchbox/Yfzjhhjpkv/bzxjopjhbhhbhjg/tmp-base.apk.jdkhjbg1044054683438137580.xbYMD5
4abc051680e6bc42e5511881aa42a4f8
SHA11df59fe6dff5a23758d60ffc3ec6a1aa9d22e850
SHA25630ef4a8e31f60021308fa315614927aa8d23c69fbca9dd970626a6b020d2f8b4
SHA512f75df9c3a854939f2de67b91fe77b9b139bf2db6c9ec518a00801cb3468e784b18e73e86e7237897bfc931597e5a1122a70c1e27a9260c1930023dfca756f893
-
/data/user/0/com.baidu.searchbox/shared_prefs/Voicemail.xmlMD5
a49699b77af2755765a72f9a777a97ac
SHA17933a6a86711669fe1f0ca89aa4a54ada25255fd
SHA25613870389131a4afd72536ed37f9e11c366b258118bba924fa2279b842cb99992
SHA5127dd22a59d65722f378a8df7926eba28f1c32e5d19fae41579e813c60d50e080efc1977e0db0bc5d6e2804b9fe1aa2b851d2906dde903d71060f39248f9247ba9
-
/data/user/0/com.baidu.searchbox/shared_prefs/multidex.version.xmlMD5
b9b9014488dd4836f3a33c2ca0d5fa53
SHA1347753bcf5ad2f941649585ef3307214eb461903
SHA256ab6b2b3526af9117f8bb1c0274bf65890c419d3e5bf5479fe7d2518e0acae298
SHA512bec92db017b78bca8564b1af8493eff533478eb73d2e22425ffe47edc03664d2e6d653c17e687f6f0c0bec5b2f60a48797d38a700ec9d7c557949ee6f5befa2a