Analysis
-
max time kernel
3090556s -
max time network
153s -
platform
android_x64 -
resource
android-x64-arm64-20220621-en -
submitted
01-07-2022 04:32
Static task
static1
Behavioral task
behavioral1
Sample
3ee1170d50a3c97217efda346c4bee2d748b9375226dd0c1df87ffc93eb4a431.apk
Resource
android-x86-arm-20220621-en
Behavioral task
behavioral2
Sample
3ee1170d50a3c97217efda346c4bee2d748b9375226dd0c1df87ffc93eb4a431.apk
Resource
android-x64-20220621-en
Behavioral task
behavioral3
Sample
3ee1170d50a3c97217efda346c4bee2d748b9375226dd0c1df87ffc93eb4a431.apk
Resource
android-x64-arm64-20220621-en
General
-
Target
3ee1170d50a3c97217efda346c4bee2d748b9375226dd0c1df87ffc93eb4a431.apk
-
Size
435KB
-
MD5
a45c4013f641581b3087a460d22798cf
-
SHA1
bcfdc6f8026859719a57b30696c3054f66f51b3c
-
SHA256
3ee1170d50a3c97217efda346c4bee2d748b9375226dd0c1df87ffc93eb4a431
-
SHA512
0f3421997456187fdd89f9b174dcdf0ad33d486eedeb22816fec68f0ef28a07962c95a01e6f90b8832877387be74c819f725beeef3e4c41626c5f551702dac99
Malware Config
Signatures
-
Acquires the wake lock. 1 IoCs
Processes:
com.ylxh.kwxjdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.ylxh.kwxj -
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.ylxh.kwxjioc pid process /data/user/0/com.ylxh.kwxj/files/dex 4834 com.ylxh.kwxj /data/user/0/com.ylxh.kwxj/files/dex 4834 com.ylxh.kwxj -
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.ylxh.kwxjdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.ylxh.kwxj
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
766KB
MD5c95eeba66295013ec68059a7f6020a6e
SHA18ee8c828c5e5b92d96985bd998e476d7cb079d26
SHA2564cf23946395233c3dcaf8976d7f4413e94de20cecca92dd1d376e88b270b9416
SHA5121fee90666e0b25cc542b7f61baee40bf3a55342a80d8da6d3b93c914b5aa7f00d98a839dc94536e1f38327d031bfd97c78e922872cee3bb3a378f9a20035f18d
-
Filesize
766KB
MD5c95eeba66295013ec68059a7f6020a6e
SHA18ee8c828c5e5b92d96985bd998e476d7cb079d26
SHA2564cf23946395233c3dcaf8976d7f4413e94de20cecca92dd1d376e88b270b9416
SHA5121fee90666e0b25cc542b7f61baee40bf3a55342a80d8da6d3b93c914b5aa7f00d98a839dc94536e1f38327d031bfd97c78e922872cee3bb3a378f9a20035f18d
-
Filesize
766KB
MD5c95eeba66295013ec68059a7f6020a6e
SHA18ee8c828c5e5b92d96985bd998e476d7cb079d26
SHA2564cf23946395233c3dcaf8976d7f4413e94de20cecca92dd1d376e88b270b9416
SHA5121fee90666e0b25cc542b7f61baee40bf3a55342a80d8da6d3b93c914b5aa7f00d98a839dc94536e1f38327d031bfd97c78e922872cee3bb3a378f9a20035f18d
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e