Analysis

  • max time kernel
    3060739s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220621-en
  • submitted
    30-06-2022 17:23

General

  • Target

    111cfd455f836794e40c6b088ab8e73f8e673a79c18e559adcffa89630a51042.apk

  • Size

    9.6MB

  • MD5

    7d56ecfd936eb03a020c9fc5c4ada352

  • SHA1

    93fc21384378cb86a4641eddc82e25abeb6360bb

  • SHA256

    111cfd455f836794e40c6b088ab8e73f8e673a79c18e559adcffa89630a51042

  • SHA512

    e3bd22cf3a0d5f4645a7e8791ed78b13cb9fa7f6e4d1d4d291b8653da875462104958f2929fdf8b5305b695a455017eb563acd4a291d13368e8183471b79ba4e

Score
5/10

Malware Config

Signatures

  • Removes a system notification. 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.red.rainbow
    1⤵
    • Removes a system notification.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5021
  • com.red.rainbow:remote
    1⤵
      PID:5422

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.red.rainbow/databases/contacts.db
      Filesize

      64KB

      MD5

      f5d8f092d8d32d4b5f509133e8b38d23

      SHA1

      7d8659e0ce392f68c8dcabb400b567070042468b

      SHA256

      c97e132c0844706f8e21cb492c53da619b01673091047eaa2ba63a18ae311f06

      SHA512

      c6442b9177dc36c87526e9fd21aeb6fa68e6387fc60c75c3dca2872869de48eb732f77180addeed34fc71069c84fca0db058aefccdadbb6c00305baa068fa436

    • /data/user/0/com.red.rainbow/databases/contacts.db-journal
      Filesize

      1KB

      MD5

      14b608315718cf7e1b0b67a33d9b6df3

      SHA1

      53cf1a071f597e6adf100e8203635feb3f8acaa0

      SHA256

      36abfe5e2f1445ee9b983d263c43ae7c52702ce8bbdc7aaf257e710158cd3557

      SHA512

      c612e74fb6039f641163765c01807a1f8c981d83ccaffe955651199e2533d4e108f8da768b40271cbf23e3e4e13e05bc55669e384be03ebea8712a4a05d35e3b