Analysis
-
max time kernel
3871335s -
max time network
167s -
platform
android_x64 -
resource
android-x64-arm64-20220310-en -
submitted
21-05-2022 12:29
Static task
static1
Behavioral task
behavioral1
Sample
745bbad538ff7fa16ae6f81c6943cf0e4ab6d0f4c96e66bb39ecb31aa3d48992.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
745bbad538ff7fa16ae6f81c6943cf0e4ab6d0f4c96e66bb39ecb31aa3d48992.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
745bbad538ff7fa16ae6f81c6943cf0e4ab6d0f4c96e66bb39ecb31aa3d48992.apk
Resource
android-x64-arm64-20220310-en
General
-
Target
745bbad538ff7fa16ae6f81c6943cf0e4ab6d0f4c96e66bb39ecb31aa3d48992.apk
-
Size
1MB
-
MD5
024a4506743df5696c480c74ecc8ea79
-
SHA1
847624b56729e624fb6df1e71244035e8d90d5ff
-
SHA256
745bbad538ff7fa16ae6f81c6943cf0e4ab6d0f4c96e66bb39ecb31aa3d48992
-
SHA512
ee666e33afc751508aafb88021162a652612b9d7c453b8375ce9e1c2eb4b94057037897330ca2d16ec6a84cc2a42b607da0463ad61837cf264b929fbb1219054
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
Processes:
tv.rgmiphjh.hojvks.pqvhopjptrioc pid process /data/user/0/tv.rgmiphjh.hojvks.pqvhopjptr/files/box103.zip 6829 tv.rgmiphjh.hojvks.pqvhopjptr -
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
tv.rgmiphjh.hojvks.pqvhopjptrdescription ioc process Framework API call javax.crypto.Cipher.doFinal tv.rgmiphjh.hojvks.pqvhopjptr
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/tv.rgmiphjh.hojvks.pqvhopjptr/files/box103.zipFilesize
99KB
MD5de0369e91e8750498c052d3e3b76a1bd
SHA11d11fd45fc4039ee44b6b622f9129490f3caa002
SHA256ff855b405d145a8b7638321622b491cd4100bbbf87e41da3ae2beaeac5a674cb
SHA512d1b76f5f06eb77062712b15aad13c5fe1cd62b784363bcea4387b58404d41ea9b4140f86c83b24b728a505f7761e0bf19d5489a70a89920a23b84c900e335a02
-
/data/user/0/tv.rgmiphjh.hojvks.pqvhopjptr/files/box103.zipFilesize
216KB
MD58f58fe61fb21dc8c0de80540ad59819b
SHA1f0655393cf146a804b9e273ddd8f979a53d6d553
SHA256b34cfeba8eb839bed4a62f01d5f9741fb5666a0773463cb9fdeb3abeb6266674
SHA512422abc44768551f9ea604b3fe8b6373cfd1c725f4ca96fd1e6cea6769575be4f6ab1ac3e7f95d0795446727490cff24d72f3ff89d932812e122381b5cb6c3c11
-
/data/user/0/tv.rgmiphjh.hojvks.pqvhopjptr/files/oat/box103.zip.cur.profMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e