Analysis

  • max time kernel
    2297279s
  • max time network
    158s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    03-05-2022 07:56

General

  • Target

    psk.apk

  • Size

    1.9MB

  • MD5

    49305965693a47cac8fe54d325d50d1f

  • SHA1

    7b7fbbe3f02ead6e985cf4619948ce003b4eb3f3

  • SHA256

    0dc975df4f929ed0422fb5c9a9582d3d5e11ab176cc3176e269b2a456d48d571

  • SHA512

    afdccaa0a03046355adfed5526cdec0881f68b6073eb0a574b21b08cc9abafda4ac8fe0ec6382881fb641a38b33b9f5f617ff822db7d8ef4bd5c32fbeec70322

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.mazocexayori.kute
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:6191

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.mazocexayori.kute/app_DynamicOptDex/UjucuA.json
    Filesize

    455KB

    MD5

    dd7df6c80724b39b9b028400c5f3c6f1

    SHA1

    66439f9f7aea2c686d663f50853ce39e24f12751

    SHA256

    8c49479ae97821063c9d7caefb17757db99f5d10aa110704f596b22a82439d97

    SHA512

    5cc610ee7b9a57ff4d5b5b0dc95938046a76233feda9ae98b9f7ee98ee97b02e6385a5c56410b31489cf1093ed2ad87f3add08e45cd9dad1f0584af15f2ff584

  • /data/user/0/com.mazocexayori.kute/app_DynamicOptDex/UjucuA.json
    Filesize

    899KB

    MD5

    469e764d83595045fb5f0d08b03adb3a

    SHA1

    9b31424e2be9320e4484235691c2e39aaf870271

    SHA256

    d4e5fc87c9c19bcaa58bd78327d7eb240c983435cd6eaa772424c4166248177c

    SHA512

    7caca18d874d3731cc7a5ebfc9f1ddfe87793557e00b5592e909f333f6e1a1dbb12040132d51ba02567360720d54e716102c212f711b9a80ceec8c3f1194e56f

  • /data/user/0/com.mazocexayori.kute/app_DynamicOptDex/oat/UjucuA.json.cur.prof
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.mazocexayori.kute/app_webview/.com.google.Chrome.GRnxBK
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.mazocexayori.kute/app_webview/GPUCache/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.mazocexayori.kute/app_webview/GPUCache/index-dir/temp-index
    Filesize

    96B

    MD5

    cdb3f880cc49547e998f776668ab5f85

    SHA1

    3459331fe4fc9c9f7da330335fb3ce4850a55be2

    SHA256

    80d6d52d3b18345cd407b87e110b14ae35fb9bf82caa45b8d4c434cb0ffd6cc0

    SHA512

    cd272b6d473b6a729c27b7065278364d39003f52f772daf7d875dbf12d12324fd50798fb7896be240b70e78991accb4aea57b1ec1046e27ac4eb8d34ca9b401f

  • /data/user/0/com.mazocexayori.kute/app_webview/Web Data
    Filesize

    112KB

    MD5

    b663831f8cc130493476d94f2d7a5330

    SHA1

    043a1956ab8e40821d67043f8a9110a8eb36fb93

    SHA256

    c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

    SHA512

    e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

  • /data/user/0/com.mazocexayori.kute/app_webview/Web Data-journal
    Filesize

    1KB

    MD5

    d73fefa045da5f3dfe643020232e3c86

    SHA1

    2bd5d2bbe71e0ffa93512f2423150a378119b0b9

    SHA256

    e27bbe0abbb8012040bfd0e676c65a686f0915ce4c9e2fc9613970e16dd44b7f

    SHA512

    265d30a6464e173e90e59a0f9406314923800231b5280850e0066c36f01a3814bd0087a8eb9026a353691a930c660fd402be7cc30da68ec054b3d46b7724f04a

  • /data/user/0/com.mazocexayori.kute/app_webview/metrics_guid
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.mazocexayori.kute/app_webview/metrics_guid
    Filesize

    36B

    MD5

    82e7600c7e8a88e4c9c66a6bce3621d4

    SHA1

    550a1019eb3f1aa217e641b399b4a88be71f0006

    SHA256

    cfba429715dca78c6a49caa2f898310b8488c1fa4046849c976f92a5345ce36a

    SHA512

    4aa8336ee97096e11f1e0f1d9f33704215094b997fb8924299127697be5a6529fe8643a06bd8dee4af94e660e630b09a2a487af7e913c920580496a9fc8c69b6

  • /data/user/0/com.mazocexayori.kute/app_webview/variations_seed_new
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.mazocexayori.kute/app_webview/variations_stamp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.mazocexayori.kute/app_webview/webview_data.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.mazocexayori.kute/cache/WebView/Crashpad/settings.dat
    Filesize

    40B

    MD5

    4bc553adb246c048234642680e068f44

    SHA1

    9c5ebae82f5298382279bb4177742f3073030910

    SHA256

    8e39b29b079becac80d83a3686510fddb753bd54130df0467821b46304fb0cd5

    SHA512

    61374c1f5f9c93fb9a9261722f0bf1ed9c249b4bda567fdb5a7f7311514a8ae0958a5cd1fd212bc6450486b910696834ab661b6b869ba935e521f6a35cb0f4d9

  • /data/user/0/com.mazocexayori.kute/cache/org.chromium.android_webview/Code Cache/js/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.mazocexayori.kute/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
    Filesize

    96B

    MD5

    6968b25f1619634c818125518e06a1bc

    SHA1

    5862b6947c5e649a8f1b750074fb84d533c58a67

    SHA256

    48b8b0144026eadf3120cf89a33a12d2f07aa70cd7c5b00f1e62ed73a43c4a0e

    SHA512

    1f2b92f85f903531386e4c8cd922a222bd6b894c98a915137cb0dfbbd482e9a2f39263d025266faa4ae31f5688910146e1b9e497bb735607a8d403fc938e23a8

  • /data/user/0/com.mazocexayori.kute/shared_prefs/WebViewChromiumPrefs.xml
    Filesize

    127B

    MD5

    6ef709b8536878951e87c29a1518fc2b

    SHA1

    24376c70b00152501b3d98df61fa7db435339172

    SHA256

    10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

    SHA512

    96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9