Overview

overview

10

Static

static

7

04def74bb3...33.apk

android_x86

8

04def74bb3...33.apk

android_x64

10

04def74bb3...33.apk

android_x64

1

Analysis

  • max time kernel
    3891389s
  • max time network
    174s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    21-05-2022 18:44

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    04def74bb308de8783bc281fbe85ae09a475953426c23dc4ea9a38891fc7d833.apk

  • Size

    3.2MB

  • MD5

    8dfdcf563d1dfac09b256d615c1f4a37

  • SHA1

    c0622ff1f85b80f567c6f63e9e87dfb72c6c6e38

  • SHA256

    04def74bb308de8783bc281fbe85ae09a475953426c23dc4ea9a38891fc7d833

  • SHA512

    34f5d38707365050ef71f9324b72bc9e20750e71e2b846f837253e050861c8b980caca28cac9c17b9ef2eb74d8959aaef1ed5426f07ee34b36f5d262677295a6

Score
8/10

Malware Config

Signatures

  • Makes use of the framework's Accessibility service. 1 IoCs
  • Acquires the wake lock. 1 IoCs
  • Loads dropped Dex/Jar 3 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • kba.rynjocxnskapj.ekmbyjxa
    1⤵
    • Makes use of the framework's Accessibility service.
    • Acquires the wake lock.
    • Loads dropped Dex/Jar
    PID:5424
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/kba.rynjocxnskapj.ekmbyjxa/app_DynamicOptDex/YJEGXDB.json --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/kba.rynjocxnskapj.ekmbyjxa/app_DynamicOptDex/oat/x86/YJEGXDB.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:5549

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/kba.rynjocxnskapj.ekmbyjxa/app_DynamicOptDex/YJEGXDB.json
    Filesize

    2.0MB

    MD5

    ab57a0360265bb32dfda286c9736cf83

    SHA1

    3d976ef66fd91e8ed8ec05805c170e02ae2e7b82

    SHA256

    608cb9f17ac9994039902deca4055c38a48cbef2694c745a4dafd8410994423e

    SHA512

    0b6768aa49d83cb39cb8ca3b86f3b242d235fcaf7dbba9118fd7e53acad5a91d292d1cc09730c5a3c831534bd71d879955079cb560ca80ba684c250add30e1d3

    Download Submit
  • /data/user/0/kba.rynjocxnskapj.ekmbyjxa/app_DynamicOptDex/YJEGXDB.json
    Filesize

    2.0MB

    MD5

    a782b4a0228e013cabf6c96c4ed27f14

    SHA1

    1645aa43094225fb3797cf28ed6eb0a4989aa6ae

    SHA256

    c8cd8f03440f3b0eee26dc567add1c597eaac7514f4edeecf8370d05e1d26fb9

    SHA512

    9f453f687e75286c5dd6adaf75fb02c0d7bf196a8ef122659b561bb54a1fc409a66e3b7089f1cd4b325a3f8970715690b851f464a69eb3187ef91b6e279c212d

    Download Submit
  • /data/user/0/kba.rynjocxnskapj.ekmbyjxa/app_DynamicOptDex/YJEGXDB.json
    Filesize

    2.0MB

    MD5

    37a9f090b29dcbb0c3c7f0899a688073

    SHA1

    6ae6fe22ae509d956e7bc26c4559b968e9a42c15

    SHA256

    223a3594e45902b183b957775af58397ca9352a33766f01547c74bc6cd12d828

    SHA512

    b374d4c162d61dbe93a1c2058466737f485e360b298fbb74359580f8cf9ff90f66a87129469b7e1638cd335fbaaf810f7d2a72d65dc2adf75bb7b227b6eadb22

    Download Submit
  • /data/user/0/kba.rynjocxnskapj.ekmbyjxa/app_DynamicOptDex/YJEGXDB.json
    Filesize

    2.0MB

    MD5

    a782b4a0228e013cabf6c96c4ed27f14

    SHA1

    1645aa43094225fb3797cf28ed6eb0a4989aa6ae

    SHA256

    c8cd8f03440f3b0eee26dc567add1c597eaac7514f4edeecf8370d05e1d26fb9

    SHA512

    9f453f687e75286c5dd6adaf75fb02c0d7bf196a8ef122659b561bb54a1fc409a66e3b7089f1cd4b325a3f8970715690b851f464a69eb3187ef91b6e279c212d

    Download Submit
  • /data/user/0/kba.rynjocxnskapj.ekmbyjxa/app_DynamicOptDex/YJEGXDB.json.x86.flock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit
  • /data/user/0/kba.rynjocxnskapj.ekmbyjxa/app_DynamicOptDex/oat/YJEGXDB.json.cur.prof
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit
  • /data/user/0/kba.rynjocxnskapj.ekmbyjxa/app_DynamicOptDex/oat/x86/YJEGXDB.odex
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit
  • /data/user/0/kba.rynjocxnskapj.ekmbyjxa/app_DynamicOptDex/oat/x86/YJEGXDB.vdex
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit