Analysis

  • max time kernel
    2200476s
  • max time network
    85s
  • platform
    android_x64
  • resource
    android-x64
  • submitted
    15-10-2021 08:51

General

  • Target

    e6fa66fc4795131cfbb97668279b84fbf389cc0ff736ae77ec351caa15a45038.apk

  • Size

    4.1MB

  • MD5

    532cfe30d666611e34eb49ae310c81cf

  • SHA1

    4e446a48e0a4097371442a2cf88a202226828d10

  • SHA256

    e6fa66fc4795131cfbb97668279b84fbf389cc0ff736ae77ec351caa15a45038

  • SHA512

    dd991e6e4accde9f70e5da9f8c2bab220905ec4083f0ae81e9c7a02b1b3cc9f9f571d95a89774539ef9e0795bb8399ae028e56766d155251938b8d6becb27589

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses reflection 1 IoCs

Processes

  • com.baidu.searchbox
    1⤵
    • Loads dropped Dex/Jar
    • Uses reflection
    PID:3591

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.baidu.searchbox/Yfzjhhjpkv/bzxjopjhbhhbhjg/base.apk.jdkhjbg1.xbY
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.baidu.searchbox/Yfzjhhjpkv/bzxjopjhbhhbhjg/shhjhpja.kvsg
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.baidu.searchbox/Yfzjhhjpkv/bzxjopjhbhhbhjg/tmp-base.apk.jdkhjbg141455658041007763.xbY
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.baidu.searchbox/shared_prefs/Voicemail.xml
    MD5

    78549fd7c671b0d2855ee2a4e03eabaa

    SHA1

    54174e0b5bfc77dc8280b3ee12c16607a9e3a41a

    SHA256

    e4743e4c26558d778f2cf052bdff7fe8097723e89d68102c3c6f34025a8983eb

    SHA512

    d8223a035a66a4d1fc13d50587feffe18bfdcc082714a62c45e0d7d7b286d2f866ce6e18db9f8ecf98d188bd3d043e35e20b0da2580646bdb8c6c5d8bc6dd7ee

  • /data/user/0/com.baidu.searchbox/shared_prefs/multidex.version.xml
    MD5

    c721803a8bac2207b62bac8a812557f5

    SHA1

    0c7c157f76c85e11fb915f02862a26a8d7349510

    SHA256

    a83541f8194a0484045ccea57e4990956bfa7d358f219fc12e7dc59306671cf4

    SHA512

    07b4558776b91689bed32669af11e056c0723a9f2e0bfca9644c53f7f6cf433d9435fdfe3500e7e519b854c85103baa682516b5d594ceef830bc850fc32c1c88