Analysis

  • max time kernel
    3869072s
  • max time network
    149s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    21-05-2022 11:30

General

  • Target

    21a6a5d138fcdfcd7808972705ca8bafd0c72b2eb65d18cf7b691f29c13bb3aa.apk

  • Size

    279KB

  • MD5

    fe5c3d944b65dc076d9721c6395aed82

  • SHA1

    3a5c69350685a1463a1432b0764835498100b227

  • SHA256

    21a6a5d138fcdfcd7808972705ca8bafd0c72b2eb65d18cf7b691f29c13bb3aa

  • SHA512

    df65eda61e045de29a39f8e6729f3b329e9068b469586e6222d26850ce99d1dc79dcd407200560bf32cd4fe9681723b885065805d261df4dbe78d0399eb5ee85

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.ntet.uanq
    1⤵
    • Acquires the wake lock.
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5041

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.ntet.uanq/files/dex
    Filesize

    483KB

    MD5

    f0fc1f06cebc07ea5b09afc7511efc46

    SHA1

    ccec243918ed10b35e9d2505f6afa50c68646134

    SHA256

    2f5ecebbbfff491695627134e222062147c765022d4a7bd7a0718a4d83b1b163

    SHA512

    67c7df715c0b5086b984c5d7c102a8235886c191f1a00d51c666f09cc4653b8f809b75d59caea531a667db9676160d8405786bce72bbc8f4f4ebd8718ebacc29

  • /data/user/0/com.ntet.uanq/files/dex
    Filesize

    483KB

    MD5

    f0fc1f06cebc07ea5b09afc7511efc46

    SHA1

    ccec243918ed10b35e9d2505f6afa50c68646134

    SHA256

    2f5ecebbbfff491695627134e222062147c765022d4a7bd7a0718a4d83b1b163

    SHA512

    67c7df715c0b5086b984c5d7c102a8235886c191f1a00d51c666f09cc4653b8f809b75d59caea531a667db9676160d8405786bce72bbc8f4f4ebd8718ebacc29

  • /data/user/0/com.ntet.uanq/files/dex
    Filesize

    483KB

    MD5

    f0fc1f06cebc07ea5b09afc7511efc46

    SHA1

    ccec243918ed10b35e9d2505f6afa50c68646134

    SHA256

    2f5ecebbbfff491695627134e222062147c765022d4a7bd7a0718a4d83b1b163

    SHA512

    67c7df715c0b5086b984c5d7c102a8235886c191f1a00d51c666f09cc4653b8f809b75d59caea531a667db9676160d8405786bce72bbc8f4f4ebd8718ebacc29

  • /data/user/0/com.ntet.uanq/files/dex.x86.flock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.ntet.uanq/files/oat/dex.cur.prof
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e