Analysis
-
max time kernel
3866422s -
max time network
122s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
21-05-2022 11:27
General
-
Target
6dc103a02df579a9fd667672b964f9d3ea860c3275eaa8530fc44a1376937c15.apk
-
Size
2.6MB
-
MD5
7754887b45ad387228fd485ffb659476
-
SHA1
5f02ab9b0e6eb0c4beca5b7de128735f357f30ed
-
SHA256
6dc103a02df579a9fd667672b964f9d3ea860c3275eaa8530fc44a1376937c15
-
SHA512
653c218fb5d682d86fcdab88b61de62708c00e105efdfe7b26bdb24c7b505c7ff85e848009280b1af221d628502d9b4cd13aa007e657ce18b92b17db86af1a35
Malware Config
Signatures
-
Loads dropped Dex/Jar 3 IoCs
Runs executable file dropped to the device during analysis.
-
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
Processes
-
tro.jgb.oawllkyljojmwzkuxcqxd1⤵
- Loads dropped Dex/Jar
- Listens for changes in the sensor environment (might be used to detect emulation).
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/tro.jgb.oawllkyljojmwzkuxcqxd/app_DynamicOptDex/RxGML.jsonFilesize
1.1MB
MD53c38342a75b0ce6314ff72bf395be057
SHA1cbe3d153e6f0eca3a6c8a5966a93d78653a8bd89
SHA256c0258820c90459aefb72595bd717f5c7cc036f3866acbcb4ddeb54444e8a35cb
SHA5122aadf0ce2b6ae8c867f46411ac9c6aa99da331b8a51d5a4328fc28f7fae49ef5436fb641a53eace8a447e2be284ecefe9a135de2801b44cea5a42ad640035282
-
/data/user/0/tro.jgb.oawllkyljojmwzkuxcqxd/app_DynamicOptDex/RxGML.jsonFilesize
1.1MB
MD5dcf31b242cdd9100a3cd425007b216fc
SHA15110f68eed71905e94961b731870d2742b79e3b0
SHA256475763a1fa838191bed9831fde887f944b9fd882656f3fb8ebbd5bb8b9d67f54
SHA512da7a734da4df75d61f19049b13b839d0b0da48c0d5c74fe50533f653d5ebd04f0ae3da695f4275ac8e27498c7f0bafcb4b75453ee0da2e32dec193a5aa31ec81
-
/data/user/0/tro.jgb.oawllkyljojmwzkuxcqxd/app_DynamicOptDex/RxGML.jsonFilesize
1.1MB
MD53c38342a75b0ce6314ff72bf395be057
SHA1cbe3d153e6f0eca3a6c8a5966a93d78653a8bd89
SHA256c0258820c90459aefb72595bd717f5c7cc036f3866acbcb4ddeb54444e8a35cb
SHA5122aadf0ce2b6ae8c867f46411ac9c6aa99da331b8a51d5a4328fc28f7fae49ef5436fb641a53eace8a447e2be284ecefe9a135de2801b44cea5a42ad640035282
-
/data/user/0/tro.jgb.oawllkyljojmwzkuxcqxd/app_DynamicOptDex/RxGML.jsonFilesize
1.1MB
MD53c38342a75b0ce6314ff72bf395be057
SHA1cbe3d153e6f0eca3a6c8a5966a93d78653a8bd89
SHA256c0258820c90459aefb72595bd717f5c7cc036f3866acbcb4ddeb54444e8a35cb
SHA5122aadf0ce2b6ae8c867f46411ac9c6aa99da331b8a51d5a4328fc28f7fae49ef5436fb641a53eace8a447e2be284ecefe9a135de2801b44cea5a42ad640035282
-
/data/user/0/tro.jgb.oawllkyljojmwzkuxcqxd/app_DynamicOptDex/oat/RxGML.json.cur.profMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e