Overview

overview

8

Static

static

7

243ea96b2f...6e.apk

android_x86

8

243ea96b2f...6e.apk

android_x64

6

Resubmissions

21-07-2022 15:41

220721-s4qhgaghgk 10

20-07-2022 04:03

220720-emcndscbgn 8

17-06-2022 11:30

220617-nl5gfsbgfl 8

Analysis

  • max time kernel
    1903151s
  • max time network
    82s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    17-06-2022 11:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    243ea96b2f8f70abc127c8bc1759929e3ad9efc1dec5b51f5788e9896b6d516e.apk

  • Size

    2.9MB

  • MD5

    5d892168472ed4a87a60721c02330f15

  • SHA1

    97ead8dec0bf601ba452b9e45bb33cb4a3bf830f

  • SHA256

    243ea96b2f8f70abc127c8bc1759929e3ad9efc1dec5b51f5788e9896b6d516e

  • SHA512

    e8aa2aecbde4c0385b5027a0920cb4dd3d19267e2ef2155f74d8b90425697c7a5421f31a3d12ee5f6fb904ad82514c9de7f2d1e7d53e43f50aa2b179434ec60a

Score
8/10
bankerevasionransomware

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
    banker
  • Requests cell location 2 IoCs

    Uses Android APIs to to get current cell location.

  • Acquires the wake lock. 1 IoCs
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs
    evasion
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • com.androidservices.support
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
    • Requests cell location
    • Acquires the wake lock.
    • Loads dropped Dex/Jar
    • Removes a system notification.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5218

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.androidservices.support/app_pi/pi_3cba
    Filesize

    392KB

    MD5

    6b72cafaa2301583badd821337613585

    SHA1

    e1d5e8887175d184fb360fa2e8e961df1d47bacf

    SHA256

    b61befbb415d6af7da005ad5d12a06913f792df7a83dccf2ab1970f0e2e0a183

    SHA512

    8eff4bc5ab8ba1f7044766fa7ffefb82c53677c6d6aa331b21f0fc29c0693edc37aa00d6a9b43eb8c7624787642fa1141c7d6d53d5bf2715482d2915d9bdff7b

    Download Submit

  • /data/user/0/com.androidservices.support/app_pi/pi_3cba
    Filesize

    1.1MB

    MD5

    64552c7387d8f64195bcd3f04719dfd8

    SHA1

    d480c2cc31dcb2c40dfb2f9c0f2de3a69814990d

    SHA256

    2c311fda021ccc6f879e89e4b1fa89f86d5088537166f0f2a64c8ef37fcade8f

    SHA512

    79e02d85f234216f326f793677a84a4b6be77131910e1adb56bfb5c09679ea185d9307b957f1e16e12e3c74dbc28335d7e22647bcc02df1d8ae1698b4604a84b

    Download Submit

  • /data/user/0/com.androidservices.support/app_vd/be17d937-aa58-4dd1-aaf1-a00d70712473___F
    Filesize

    163B

    MD5

    56938c012ee2a828b691e1521059c602

    SHA1

    1a086ef331892d0e953cd8cdee31f1f15b6ab9bf

    SHA256

    2f194bc460354706e5a65ce53c88b9cb4271e6d218d03b63fcf2a03e9718e5de

    SHA512

    0f0aee079fd5a0239796161879f3fbea1e90d32d372463a1fd992f567ab925f845acb72349a548c1eec227c4ae66043cac7591375a302d53e3bc6deb88b1fb2a

    Download Submit

  • /data/user/0/com.androidservices.support/app_webview/Cookies
    Filesize

    64KB

    MD5

    cb7543c4df600f2af58097cce0e334ba

    SHA1

    83cc92f38c27fdb4fa519b1ce2f37912f24af1f0

    SHA256

    64c022ae708f94ffde986e105d88f708884de325720bfb9925c4160a6d417233

    SHA512

    ad51cad0472327bd68aa2d791341cfafed58971752352537bb603ed18b15a3f9185e9150983a28ecd09606e8dcaef6d1c9d93213dd246ef7720f39842eb3d980

    Download Submit

  • /data/user/0/com.androidservices.support/app_webview/Cookies-journal
    Filesize

    1KB

    MD5

    f088282d5b9f7333885ed77bc3c8c521

    SHA1

    2af7dad224d56c1596f0259f1610e1d240293d16

    SHA256

    5b1da3fa1463d1367c18cda1397d479d089c38ca53bf184e91e3cbd5a011a8b1

    SHA512

    67722b4cc4eec3645974ad5f4054693e1180e83fd2432b3af91949ce8e89dfe85e58a3fad2377ac2cc176af2ebe90fc81a560566c9eec3fa58b348ae7a1f9b4d

    Download Submit

  • /data/user/0/com.androidservices.support/app_webview/GPUCache/index
    Filesize

    20B

    MD5

    93027d42b314432c4216e6cfca48b384

    SHA1

    43448dd8102979c3926828182579691945eedd4e

    SHA256

    3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

    SHA512

    a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

    Download Submit

  • /data/user/0/com.androidservices.support/app_webview/GPUCache/index-dir/temp-index
    Filesize

    48B

    MD5

    c69d93b786d5896c05d4c7f3195e008c

    SHA1

    2ecaf4dc41dd9faa023c9a58b406b68ed7d0b3ef

    SHA256

    950ce3668a1263112d8e4f2c9691590d3cfdb46987a83f901ee60c187812e7c3

    SHA512

    dd0b9399e6964fbd9de4b575111582528477ac9a9a05a9574f7d3db59f6f567de8eaec372a80565b97ca208fbf49e7474349e96069d2eff3cabbb3eeefc442aa

    Download Submit

  • /data/user/0/com.androidservices.support/app_webview/Web Data
    Filesize

    104KB

    MD5

    dc79f9ce5f3ab5270b33e61119dfc959

    SHA1

    1844bf222a5144b513dcf2fb50a18c011701c647

    SHA256

    47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

    SHA512

    18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

    Download Submit

  • /data/user/0/com.androidservices.support/app_webview/Web Data-journal
    Filesize

    1KB

    MD5

    01d242507b9bcacf28b23bc1b67eb40f

    SHA1

    c33b38ac02cbc348536dc97e1058c06f12274426

    SHA256

    99177885460fa64beffb7f9e6a3da91230141fb831f272b8a6402df0d99f079d

    SHA512

    fb0208936372e065e868e1fc696f917dd90c1c9acfa466ad95865356cdc84b283345289890997cbac4258c1a4486d79e82e07cf87befead8f73655ed22baca47

    Download Submit

  • /data/user/0/com.androidservices.support/app_webview/metrics_guid
    Filesize

    36B

    MD5

    69ddf25c6c1512a5bbfd5746b5d9bf52

    SHA1

    ad2e991effad8ec0ced8d4d1a59c2c62b1297ac7

    SHA256

    349c4650052da0a840ae10b862c7718ae43b768b3bfffb73d499d9a916bc9b9a

    SHA512

    9d085755a1ef54ca5eb2737d57feff4a813a3360db2005493eb203817f73229f83c287d875c61acce3652e63107431937d134192782cbe24e9819021696f68a9

    Download Submit

  • /data/user/0/com.androidservices.support/cache/org.chromium.android_webview/77e371dbde913892_0
    Filesize

    120B

    MD5

    35340ddd7450297e868dea2dfc20bda6

    SHA1

    7adfcae40837950a3e579473e30f7793c8abf830

    SHA256

    cad5eef60009183c2a4b80358e751fccf675bbb7dc7485d06088c41fbd5da7a5

    SHA512

    06c0e466bc6c0bf8f643c2a2168450f032602a9384b51f6f2555fb0ece0dd334fb03c04b3485b90341910e604cebacc2dc4f8f35ff8f9a29d82b5f670e535f05

    Download Submit

  • /data/user/0/com.androidservices.support/cache/org.chromium.android_webview/index
    Filesize

    20B

    MD5

    93027d42b314432c4216e6cfca48b384

    SHA1

    43448dd8102979c3926828182579691945eedd4e

    SHA256

    3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

    SHA512

    a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

    Download Submit

  • /data/user/0/com.androidservices.support/cache/org.chromium.android_webview/index-dir/temp-index
    Filesize

    48B

    MD5

    82121083ecd65f054c8e026ca5e73906

    SHA1

    72289a32136a194d1bbe7d2df6b13e0afc3ec641

    SHA256

    b9c481cd676f8684e4c81582d3f3963f64f0b3f605236d326b3f581315ae41f3

    SHA512

    9bd146f4ff56119139e0af829af3adcfa01fc26890fcb03e3ef7d65e064586892d33fdfdd96904856be6473c5d7aff8b51e543b1919819cf2c286d831e972246

    Download Submit

  • /data/user/0/com.androidservices.support/cache/org.chromium.android_webview/index-dir/temp-index
    Filesize

    48B

    MD5

    3a1108b7c4a4a195b5bb0b25c6045732

    SHA1

    5b73076712ea392ef0463393fa19bec4a8f6959b

    SHA256

    9a0d3a7147dd204a5aee9de815f5a26c98413eb1698e7fd40877527a38665fe7

    SHA512

    0b8922c647b613af01f8a7373a846a0858ef35e3e3fb4da0bc1ef91b3b0bef11e75ef030f1d5538ecf081d0b517fe25ba63caf39e042ce4e9ddfb38056a682e2

    Download Submit

  • /data/user/0/com.androidservices.support/databases/com.google.android.datatransport.events
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    Download Submit

  • /data/user/0/com.androidservices.support/databases/com.google.android.datatransport.events-journal
    Filesize

    524B

    MD5

    1c9c474a1bec2cba8be75612b6f21dab

    SHA1

    f8faa6410a073975ba803780307caa1adab02bb3

    SHA256

    d2d8010737a8c9b4755035096748f0aabf8501504c200c1865b7bb5295250c63

    SHA512

    adb004201b55d4cde1e610a8375ddb55e9f510c12cca67c1c84f3f72c070c725d403a4acb08a48db7e379506969efc0e3bf2f5ddacddf080b7dc42659f46865e

    Download Submit

  • /data/user/0/com.androidservices.support/databases/com.google.android.datatransport.events-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    Download Submit

  • /data/user/0/com.androidservices.support/databases/com.google.android.datatransport.events-wal
    Filesize

    52KB

    MD5

    e3bf80107580241ccb9e32ed8faed14d

    SHA1

    77994a248905fa976441b37c23b7c1671a2b5e80

    SHA256

    f67fdd67c7aede8a5404f6d570c082bcdd760273436d21c552cc8041766383bb

    SHA512

    10e8f5b4c5f68703ad9177f7f0e8d73441268b7f229a2402d9406262698aa7c0a9d12ea8a41194122dc0e83b49fb28c6a22648232cb7a944fa62fb55bb62ead3

    Download Submit

  • /data/user/0/com.androidservices.support/shared_prefs/WebViewChromiumPrefs.xml
    Filesize

    127B

    MD5

    21223e9184445fe043476484cd8cb1f9

    SHA1

    2b4813f849121d60ba35eb0889080668bb62c778

    SHA256

    bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

    SHA512

    be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

    Download Submit

  • /data/user/0/com.androidservices.support/shared_prefs/com.androidservices.support_preferences.xml
    Filesize

    125B

    MD5

    2d7d726cfcd049773cbe255d441e0e47

    SHA1

    f862bdfd2424de3d501652421f248376aab956fd

    SHA256

    491aaeb48793f57e3172c7a106c52088aba5c99fdde334004fbbf6e4abab9b82

    SHA512

    4e8f0fcb2aee0dbd80aabf708464405bc13c21e07f902c145710a72b4feb8ef4c6dd0aac6d420ef983f66e6ce585067f54eb03a964ecad4cf2d43f5d2577b8f4

    Download Submit

  • /data/user/0/com.androidservices.support/shared_prefs/com.androidservices.support_preferences.xml
    Filesize

    171B

    MD5

    cb0151ed01304253749d6ea688f01c5e

    SHA1

    9b9510fd821338cf6ebdb23b81575c777bc7772f

    SHA256

    1c87d7543c9a6c59bd64489f1621485fa47dedcf540f063c857ffb4da5e38a49

    SHA512

    cfe8ba76b6f3d654527b16167149d5e10c0315f109757b61829790ba48e64b8e6e1fc0c9e36548b81d4762b0c460a6ef525ab732e6878a18e87edd631914dd62

    Download Submit

  • /data/user/0/com.androidservices.support/shared_prefs/com.androidservices.support_preferences.xml
    Filesize

    302B

    MD5

    2715356d22e4b496ce694742ecc27d0b

    SHA1

    fc74d388b448cd2eb4f38cad7aade1172a4d597e

    SHA256

    80ba8dd68f9ac4574514b87172af18b1f5a323b6d26eaa9d67a3b619c9b485e3

    SHA512

    a61dc43c7bdcd1a13a0453e3e24f2741dceb3db086e40c687e9fc2b64c921ccf9727399fc171d0fb4c7845ed8a6a33ea95c5b558b593a86be6533974fc1e4d9f

    Download Submit

  • /data/user_de/0/com.androidservices.support/shared_prefs/move_to_de_records.xml
    Filesize

    128B

    MD5

    0e777fa46dc7b378b14a465da934467c

    SHA1

    ab7497b8b32d70c9fc2a5203ab618920d0601253

    SHA256

    63b2de8ef589db15b161ed905df89532d0b8ecdaeccf08f4771a4a2206089eac

    SHA512

    f43b46b82842ea2823ebcef50b7677e44c18675b88596e7abc6c090759af93b784c81e74f0f43b7649fa36c5582dc33338c6eeb7f5ef42d8967ad81d54e601e6

    Download Submit