Analysis

  • max time kernel
    3086581s
  • max time network
    146s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220621-en
  • submitted
    01-07-2022 03:40

General

  • Target

    b933b72b42e3b2f13a20202be10c451c9af8ce815377d01169f3258ff5d2dede.apk

  • Size

    436KB

  • MD5

    63a50e71520fdf39af82153458a48789

  • SHA1

    376b0977b336256574543a6d2cd36212cd566395

  • SHA256

    b933b72b42e3b2f13a20202be10c451c9af8ce815377d01169f3258ff5d2dede

  • SHA512

    273927100fbf00e21c89b69d421b8f6b8556b2fef15cae3688949b886f0ddace8a77cf2f2f169e80c57b55288429a816379b4b3131e73946f864be2bff8a9e35

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.wwmt.dwal
    1⤵
    • Acquires the wake lock.
    • Loads dropped Dex/Jar
    PID:4185
    • ping -c 4
      2⤵
        PID:7077

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.wwmt.dwal/files/dex
      Filesize

      766KB

      MD5

      87c507e8caa6f65f96df854d77ce615f

      SHA1

      013f2f4ec099064557c48972f90039fbb4a703ab

      SHA256

      54706114ae6a0be60adc9620e5ce8deb61ed7cf578e7a372257e57e289cc2dea

      SHA512

      568351784b329fd04f7a7c50be7834985d047f990fd7c2a30933db0d5f52da5bdbbb9eb193e129569c06c2f7f731e399723b6b628a65cd59a13372ea09cf3a4c

    • /data/user/0/com.wwmt.dwal/files/dex
      Filesize

      766KB

      MD5

      87c507e8caa6f65f96df854d77ce615f

      SHA1

      013f2f4ec099064557c48972f90039fbb4a703ab

      SHA256

      54706114ae6a0be60adc9620e5ce8deb61ed7cf578e7a372257e57e289cc2dea

      SHA512

      568351784b329fd04f7a7c50be7834985d047f990fd7c2a30933db0d5f52da5bdbbb9eb193e129569c06c2f7f731e399723b6b628a65cd59a13372ea09cf3a4c

    • /data/user/0/com.wwmt.dwal/files/dex
      Filesize

      766KB

      MD5

      87c507e8caa6f65f96df854d77ce615f

      SHA1

      013f2f4ec099064557c48972f90039fbb4a703ab

      SHA256

      54706114ae6a0be60adc9620e5ce8deb61ed7cf578e7a372257e57e289cc2dea

      SHA512

      568351784b329fd04f7a7c50be7834985d047f990fd7c2a30933db0d5f52da5bdbbb9eb193e129569c06c2f7f731e399723b6b628a65cd59a13372ea09cf3a4c

    • /data/user/0/com.wwmt.dwal/files/oat/dex.cur.prof
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e