Analysis

  • max time kernel
    3093892s
  • max time network
    143s
  • platform
    android_x64
  • resource
    android-x64-20220621-en
  • submitted
    01-07-2022 05:19

General

  • Target

    5f96d3ddf043dd18da2700dd5ae75ef50f5317994affc5fd5410ca1785460036.apk

  • Size

    462KB

  • MD5

    6f3eeb8dc0a5ed64b1aa458972705d5d

  • SHA1

    12f23eef7a4623f341f1e0127444ece4e48b843e

  • SHA256

    5f96d3ddf043dd18da2700dd5ae75ef50f5317994affc5fd5410ca1785460036

  • SHA512

    2ca56258485faa72faa314e75f760827531036640963f4428cd07e97969c17bd71e577ae897775787ad20cf5acb5f4744e4158f184cf3d4e37654e94fb21db50

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

Processes

  • com.idgq.iwyz
    1⤵
    • Loads dropped Dex/Jar
    PID:5664
    • ping -c 4
      2⤵
        PID:7021

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.idgq.iwyz/files/dex
      Filesize

      782KB

      MD5

      4c3346a81c855b0bf5c747136756691e

      SHA1

      4bb0c9d83b541a165b783a68bffd75bc63da6073

      SHA256

      1dd240c6acb483a9cbd9e5ab18108488c4325aacc7687e51063d898b9242d377

      SHA512

      fc6d05ca5145097b2096bccc1bb729a8e98f72b038db08499f268bdb5244a81466b57326e249f6dc1d9c5c159d59b696dfe621f864b659aac21f28d43fb7d4a9

    • /data/user/0/com.idgq.iwyz/files/dex
      Filesize

      782KB

      MD5

      4c3346a81c855b0bf5c747136756691e

      SHA1

      4bb0c9d83b541a165b783a68bffd75bc63da6073

      SHA256

      1dd240c6acb483a9cbd9e5ab18108488c4325aacc7687e51063d898b9242d377

      SHA512

      fc6d05ca5145097b2096bccc1bb729a8e98f72b038db08499f268bdb5244a81466b57326e249f6dc1d9c5c159d59b696dfe621f864b659aac21f28d43fb7d4a9

    • /data/user/0/com.idgq.iwyz/files/dex
      Filesize

      782KB

      MD5

      4c3346a81c855b0bf5c747136756691e

      SHA1

      4bb0c9d83b541a165b783a68bffd75bc63da6073

      SHA256

      1dd240c6acb483a9cbd9e5ab18108488c4325aacc7687e51063d898b9242d377

      SHA512

      fc6d05ca5145097b2096bccc1bb729a8e98f72b038db08499f268bdb5244a81466b57326e249f6dc1d9c5c159d59b696dfe621f864b659aac21f28d43fb7d4a9

    • /data/user/0/com.idgq.iwyz/files/oat/dex.cur.prof
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e