Analysis

  • max time kernel
    3090394s
  • max time network
    141s
  • platform
    android_x64
  • resource
    android-x64-20220621-en
  • submitted
    01-07-2022 04:29

General

  • Target

    3ee3bb824849450d9e3465908afb626e9a2f0da903a8868b66e48875a86f41e5.apk

  • Size

    436KB

  • MD5

    69f8efed58d300ca5b69f524731bdf89

  • SHA1

    24cba97080f1523bdf66dc8523f130a481d18715

  • SHA256

    3ee3bb824849450d9e3465908afb626e9a2f0da903a8868b66e48875a86f41e5

  • SHA512

    0047253996494f22b4a58b2710fb7103a77ce3495bfa7dc9c4ca59411eda3b037cb127f7b4999beaaa167cd58ae0cc5cd4d7a195556e147e5b2f7ac4d4ba1715

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

Processes

  • com.jhsp.fdua
    1⤵
    • Loads dropped Dex/Jar
    PID:5711
    • ping -c 4
      2⤵
        PID:6738

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.jhsp.fdua/files/dex

      Filesize

      766KB

      MD5

      87c507e8caa6f65f96df854d77ce615f

      SHA1

      013f2f4ec099064557c48972f90039fbb4a703ab

      SHA256

      54706114ae6a0be60adc9620e5ce8deb61ed7cf578e7a372257e57e289cc2dea

      SHA512

      568351784b329fd04f7a7c50be7834985d047f990fd7c2a30933db0d5f52da5bdbbb9eb193e129569c06c2f7f731e399723b6b628a65cd59a13372ea09cf3a4c

    • /data/user/0/com.jhsp.fdua/files/dex

      Filesize

      766KB

      MD5

      87c507e8caa6f65f96df854d77ce615f

      SHA1

      013f2f4ec099064557c48972f90039fbb4a703ab

      SHA256

      54706114ae6a0be60adc9620e5ce8deb61ed7cf578e7a372257e57e289cc2dea

      SHA512

      568351784b329fd04f7a7c50be7834985d047f990fd7c2a30933db0d5f52da5bdbbb9eb193e129569c06c2f7f731e399723b6b628a65cd59a13372ea09cf3a4c

    • /data/user/0/com.jhsp.fdua/files/dex

      Filesize

      766KB

      MD5

      87c507e8caa6f65f96df854d77ce615f

      SHA1

      013f2f4ec099064557c48972f90039fbb4a703ab

      SHA256

      54706114ae6a0be60adc9620e5ce8deb61ed7cf578e7a372257e57e289cc2dea

      SHA512

      568351784b329fd04f7a7c50be7834985d047f990fd7c2a30933db0d5f52da5bdbbb9eb193e129569c06c2f7f731e399723b6b628a65cd59a13372ea09cf3a4c

    • /data/user/0/com.jhsp.fdua/files/oat/dex.cur.prof

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e