Analysis
-
max time kernel
3869025s -
max time network
163s -
platform
android_x64 -
resource
android-x64-20220310-en -
submitted
21-05-2022 11:30
Static task
static1
Behavioral task
behavioral1
Sample
476923e2741988bb859efab9891ea3aac6d492ebfd84fe9aa2baeaedcbbc8313.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
476923e2741988bb859efab9891ea3aac6d492ebfd84fe9aa2baeaedcbbc8313.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
476923e2741988bb859efab9891ea3aac6d492ebfd84fe9aa2baeaedcbbc8313.apk
Resource
android-x64-arm64-20220310-en
General
-
Target
476923e2741988bb859efab9891ea3aac6d492ebfd84fe9aa2baeaedcbbc8313.apk
-
Size
278KB
-
MD5
d47807b804e3d8ef9d8288e9dae94e86
-
SHA1
2264b485bf5bf57e62701f84a125cee194f9e8c1
-
SHA256
476923e2741988bb859efab9891ea3aac6d492ebfd84fe9aa2baeaedcbbc8313
-
SHA512
73418d51252cbc7b32cc4f88e6ad6340a17ff73037d4faacab80ce073e5f81ffaa709db0a57f9c91f3525fed1393172522cdac5633013af59dc463e4ec980dfc
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.iuyx.wkycioc pid process /data/user/0/com.iuyx.wkyc/files/dex 6174 com.iuyx.wkyc /data/user/0/com.iuyx.wkyc/files/dex 6174 com.iuyx.wkyc -
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.iuyx.wkycdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.iuyx.wkyc
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.iuyx.wkyc/files/dexFilesize
483KB
MD5f0fc1f06cebc07ea5b09afc7511efc46
SHA1ccec243918ed10b35e9d2505f6afa50c68646134
SHA2562f5ecebbbfff491695627134e222062147c765022d4a7bd7a0718a4d83b1b163
SHA51267c7df715c0b5086b984c5d7c102a8235886c191f1a00d51c666f09cc4653b8f809b75d59caea531a667db9676160d8405786bce72bbc8f4f4ebd8718ebacc29
-
/data/user/0/com.iuyx.wkyc/files/dexFilesize
483KB
MD5f0fc1f06cebc07ea5b09afc7511efc46
SHA1ccec243918ed10b35e9d2505f6afa50c68646134
SHA2562f5ecebbbfff491695627134e222062147c765022d4a7bd7a0718a4d83b1b163
SHA51267c7df715c0b5086b984c5d7c102a8235886c191f1a00d51c666f09cc4653b8f809b75d59caea531a667db9676160d8405786bce72bbc8f4f4ebd8718ebacc29
-
/data/user/0/com.iuyx.wkyc/files/dexFilesize
483KB
MD5f0fc1f06cebc07ea5b09afc7511efc46
SHA1ccec243918ed10b35e9d2505f6afa50c68646134
SHA2562f5ecebbbfff491695627134e222062147c765022d4a7bd7a0718a4d83b1b163
SHA51267c7df715c0b5086b984c5d7c102a8235886c191f1a00d51c666f09cc4653b8f809b75d59caea531a667db9676160d8405786bce72bbc8f4f4ebd8718ebacc29
-
/data/user/0/com.iuyx.wkyc/files/oat/dex.cur.profMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e