Analysis
-
max time kernel
3060739s -
max time network
160s -
platform
android_x64 -
resource
android-x64-arm64-20220621-en -
submitted
30-06-2022 17:23
Static task
static1
Behavioral task
behavioral1
Sample
111cfd455f836794e40c6b088ab8e73f8e673a79c18e559adcffa89630a51042.apk
Resource
android-x86-arm-20220621-en
Behavioral task
behavioral2
Sample
111cfd455f836794e40c6b088ab8e73f8e673a79c18e559adcffa89630a51042.apk
Resource
android-x64-20220621-en
Behavioral task
behavioral3
Sample
111cfd455f836794e40c6b088ab8e73f8e673a79c18e559adcffa89630a51042.apk
Resource
android-x64-arm64-20220621-en
General
-
Target
111cfd455f836794e40c6b088ab8e73f8e673a79c18e559adcffa89630a51042.apk
-
Size
9.6MB
-
MD5
7d56ecfd936eb03a020c9fc5c4ada352
-
SHA1
93fc21384378cb86a4641eddc82e25abeb6360bb
-
SHA256
111cfd455f836794e40c6b088ab8e73f8e673a79c18e559adcffa89630a51042
-
SHA512
e3bd22cf3a0d5f4645a7e8791ed78b13cb9fa7f6e4d1d4d291b8653da875462104958f2929fdf8b5305b695a455017eb563acd4a291d13368e8183471b79ba4e
Malware Config
Signatures
-
Removes a system notification. 1 IoCs
Processes:
com.red.rainbowdescription ioc process Framework service call android.app.INotificationManager.cancelNotificationWithTag com.red.rainbow -
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.red.rainbowdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.red.rainbow
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.red.rainbow/databases/contacts.dbFilesize
64KB
MD5f5d8f092d8d32d4b5f509133e8b38d23
SHA17d8659e0ce392f68c8dcabb400b567070042468b
SHA256c97e132c0844706f8e21cb492c53da619b01673091047eaa2ba63a18ae311f06
SHA512c6442b9177dc36c87526e9fd21aeb6fa68e6387fc60c75c3dca2872869de48eb732f77180addeed34fc71069c84fca0db058aefccdadbb6c00305baa068fa436
-
/data/user/0/com.red.rainbow/databases/contacts.db-journalFilesize
1KB
MD514b608315718cf7e1b0b67a33d9b6df3
SHA153cf1a071f597e6adf100e8203635feb3f8acaa0
SHA25636abfe5e2f1445ee9b983d263c43ae7c52702ce8bbdc7aaf257e710158cd3557
SHA512c612e74fb6039f641163765c01807a1f8c981d83ccaffe955651199e2533d4e108f8da768b40271cbf23e3e4e13e05bc55669e384be03ebea8712a4a05d35e3b