Analysis

  • max time kernel
    2200496s
  • max time network
    138s
  • platform
    android_x64
  • resource
    android-x64-arm64
  • submitted
    15-10-2021 08:51

General

  • Target

    1547e5669f2cbb2391c6f6790298eda5502dde28819985f131138a2d25fc0f89.apk

  • Size

    4.1MB

  • MD5

    45767dc1a56de15fcb761395114b18b7

  • SHA1

    e7d930b1c824ecbade93df44f6139d6e2334427b

  • SHA256

    1547e5669f2cbb2391c6f6790298eda5502dde28819985f131138a2d25fc0f89

  • SHA512

    7e2bd248bb48548f4cbb2edb8b286cdfd6532438d196c054d901b1e1bed9e4ffbe5c39f9e81db8b54fc3a1e6e695462ad1b68887c8829f3bf0beee7d7644beeb

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses reflection 1 IoCs

Processes

  • com.baidu.searchbox
    1⤵
    • Loads dropped Dex/Jar
    • Uses reflection
    PID:4859

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.baidu.searchbox/hhjsGGofgz/hclmgvlGfsmphbh/base.apk.vaahjhh1.axY
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.baidu.searchbox/hhjsGGofgz/hclmgvlGfsmphbh/hhnjbbkv.hfnv
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.baidu.searchbox/hhjsGGofgz/hclmgvlGfsmphbh/tmp-base.apk.vaahjhh4664033461871754365.axY
    MD5

    a728e9558ac38fb0c295941f09ec9ad2

    SHA1

    728a1ac7bb6dc23983cdea72309e196f6a4fe8a1

    SHA256

    c8acadfdd77f8c17b8387a3bd959c47809152c7e0b22c6ff1d7a27c22eeb9c68

    SHA512

    84c651e2f358da34bc44b37dfcfaea25c5cd7697a578d19875ac2f044374ac008da23fae6d89e7b5541a9ffdfe94b7d47425362892005dafb3996a8d362b6bb7

  • /data/user/0/com.baidu.searchbox/shared_prefs/Voicemail.xml
    MD5

    d89d689afc5c2384f340bbdfffea0513

    SHA1

    984a964254a56558526ebda69b05fa1ffdfea564

    SHA256

    62b5176d1bf42ef8964029d62a9ccd1859277f02e6a88318525bad07e4c0b035

    SHA512

    f9d68aee3e282bc0ffcc605430a9b6f149500fef1422d114fefd3ba307cedf7dc6bf2ba9428e850e42966df83f0a53c0a7cc2553e41eb788b54408ca8c1630ec

  • /data/user/0/com.baidu.searchbox/shared_prefs/multidex.version.xml
    MD5

    dd84dbec79931a078518c06523e2c7ed

    SHA1

    b7a61f14120e4add4ab20e7b3bbcb5ff0c8a5f76

    SHA256

    4ca1781f9cc546970cb56e6cb19ec6ed1cefe5767c7fb473759104e9a9c09f19

    SHA512

    664d7cc340341be30f00b70baaa172b83bf61176ee9425d4d0b0f17b31dbf35d1c89dcebc78460f74bb6adf3b460c97df1976d55d393fc24a023edd06bfa475f