Analysis
-
max time kernel
3108777s -
max time network
142s -
platform
android_x64 -
resource
android-x64-20220621-en -
submitted
01-07-2022 08:18
Static task
static1
Behavioral task
behavioral1
Sample
3e308efc8141814f3f51df09bac86b0a8918fd882bdc1da308ab514d973f8855.apk
Resource
android-x86-arm-20220621-en
Behavioral task
behavioral2
Sample
3e308efc8141814f3f51df09bac86b0a8918fd882bdc1da308ab514d973f8855.apk
Resource
android-x64-20220621-en
Behavioral task
behavioral3
Sample
3e308efc8141814f3f51df09bac86b0a8918fd882bdc1da308ab514d973f8855.apk
Resource
android-x64-arm64-20220621-en
General
-
Target
3e308efc8141814f3f51df09bac86b0a8918fd882bdc1da308ab514d973f8855.apk
-
Size
436KB
-
MD5
9a5982b23fb13fd37b81ebd95ea5c534
-
SHA1
3ef5cb8f9b6030556aae781fdf570474aeb0b186
-
SHA256
3e308efc8141814f3f51df09bac86b0a8918fd882bdc1da308ab514d973f8855
-
SHA512
92454334b2dd9c11a482401f2e5a1e7dda9594fd4518ec465ea67d7466d2b4a15932ca01d5c657e6956de47453555f42e7ec488983e3eaaccdcadad0f366f962
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.uwts.bnctioc pid process /data/user/0/com.uwts.bnct/files/dex 5676 com.uwts.bnct /data/user/0/com.uwts.bnct/files/dex 5676 com.uwts.bnct -
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.uwts.bnctdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.uwts.bnct
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.uwts.bnct/files/dexFilesize
766KB
MD5775c7f2c45475a912f6b199320e3cbd1
SHA1778578802bd028e201fc3a55c01de93f26ee2dde
SHA2565d197df4be551f05909cd286ee3f63de9fb503c22444e69091eb9c848f735424
SHA512116066d5c1da63a097e7f66f7a1f1549a0035d27c7878e98cabf9aa064bb2b72b3b91d9f3b04c68b963a1968f13d8cf2f898704262c564a89e7e2ac40135976d
-
/data/user/0/com.uwts.bnct/files/dexFilesize
766KB
MD5775c7f2c45475a912f6b199320e3cbd1
SHA1778578802bd028e201fc3a55c01de93f26ee2dde
SHA2565d197df4be551f05909cd286ee3f63de9fb503c22444e69091eb9c848f735424
SHA512116066d5c1da63a097e7f66f7a1f1549a0035d27c7878e98cabf9aa064bb2b72b3b91d9f3b04c68b963a1968f13d8cf2f898704262c564a89e7e2ac40135976d
-
/data/user/0/com.uwts.bnct/files/dexFilesize
766KB
MD5775c7f2c45475a912f6b199320e3cbd1
SHA1778578802bd028e201fc3a55c01de93f26ee2dde
SHA2565d197df4be551f05909cd286ee3f63de9fb503c22444e69091eb9c848f735424
SHA512116066d5c1da63a097e7f66f7a1f1549a0035d27c7878e98cabf9aa064bb2b72b3b91d9f3b04c68b963a1968f13d8cf2f898704262c564a89e7e2ac40135976d
-
/data/user/0/com.uwts.bnct/files/oat/dex.cur.profMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e