1a61f04cca0d2c0ba2dd09bf032d378d0fa3b558f71a6276138c676331203aac

Resubmissions

01-07-2022 12:00

220701-n5962segf8 7

23-04-2022 16:23

220423-twaygshder 7

20-04-2022 10:37

220420-mnw3esdcdm 7

Analysis

max time kernel
3114463s
max time network
130s
platform
android_x86
resource
android-x86-arm-20220621-en
submitted
01-07-2022 12:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Color Wallpaper Messages.apk
Size

29.2MB
MD5

ac9758bb58d7008acc218be1dc059ecb
SHA1

adbf37d7fdf37dde34e510bb379786f5a3587c8f
SHA256

1a61f04cca0d2c0ba2dd09bf032d378d0fa3b558f71a6276138c676331203aac
SHA512

529ddc6b09dc910366cc1a0bff1d7615a041ae6dac9807705ea7d63bb8783a47fd585f6222179a477d3ac6ff5ec3dd4e97cbcc7f8d30850ee008953b3689e405

Score

7^/10

ransomware

Malware Config

Signatures

Loads dropped Dex/Jar 3 IoCs

Runs executable file dropped to the device during analysis.

Processes:

com.czetech.message.color.wallpapers/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.czetech.message.color.wallpapers/files/audience_network.dex --output-vdex-fd=62 --oat-fd=63 --oat-location=/data/user/0/com.czetech.message.color.wallpapers/files/oat/x86/audience_network.odex --compiler-filter=quicken --class-loader-context=&

ioc	pid	process
/data/user/0/com.czetech.message.color.wallpapers/files/audience_network.dex	4885	com.czetech.message.color.wallpapers
/data/user/0/com.czetech.message.color.wallpapers/files/audience_network.dex	5054	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.czetech.message.color.wallpapers/files/audience_network.dex --output-vdex-fd=62 --oat-fd=63 --oat-location=/data/user/0/com.czetech.message.color.wallpapers/files/oat/x86/audience_network.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.czetech.message.color.wallpapers/files/audience_network.dex	4885	com.czetech.message.color.wallpapers

Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.czetech.message.color.wallpapers

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.czetech.message.color.wallpapers

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.czetech.message.color.wallpapers

com.czetech.message.color.wallpapers
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
PID:4885

/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.czetech.message.color.wallpapers/files/audience_network.dex --output-vdex-fd=62 --oat-fd=63 --oat-location=/data/user/0/com.czetech.message.color.wallpapers/files/oat/x86/audience_network.odex --compiler-filter=quicken --class-loader-context=&
2⤵
- Loads dropped Dex/Jar
PID:5054

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.czetech.message.color.wallpapers/files/audience_network.dex
Filesize
3.2MB

MD5
692c6b1b89702297c59bd34c4bd1fa53

SHA1
f38cac946f03d7e869018acbdfe0ed272e11b106

SHA256
920e465a87a2409fc8d7186ea4e319c613c04d156bec75e8b91cb4d07b1deb75

SHA512
927048402fb314ef2624776b27317a6f996ea6b3d697d66b8b213d5be9559f24ae0dca8d2f8a9350d32310b8cab071933936640641d297ba522b3af60424df63

Download Submit
/data/user/0/com.czetech.message.color.wallpapers/files/audience_network.dex
Filesize
3.2MB

MD5
692c6b1b89702297c59bd34c4bd1fa53

SHA1
f38cac946f03d7e869018acbdfe0ed272e11b106

SHA256
920e465a87a2409fc8d7186ea4e319c613c04d156bec75e8b91cb4d07b1deb75

SHA512
927048402fb314ef2624776b27317a6f996ea6b3d697d66b8b213d5be9559f24ae0dca8d2f8a9350d32310b8cab071933936640641d297ba522b3af60424df63

Download Submit
/data/user/0/com.czetech.message.color.wallpapers/files/audience_network.dex
Filesize
3.2MB

MD5
dbefc015f722b31d41e6ce0dec958f3f

SHA1
64b526a96766345c346f226935b612a2e203d1c2

SHA256
2c5a36ebc9ff0ff5bb2e1e53949f0ee6c08b368bfc0ec4bf9f6b8d9175cbd8b0

SHA512
94b410d1db8bbaac796078fd7e83933c3db6b38fdf26cf5ab1b5bee9d0612455a17d264f5fd0570181beb16d78b6d69be0b8a798c45ad4dfd99d4e1eb9ac9767

Download Submit
/data/user/0/com.czetech.message.color.wallpapers/files/audience_network.dex
Filesize
3.2MB

MD5
692c6b1b89702297c59bd34c4bd1fa53

SHA1
f38cac946f03d7e869018acbdfe0ed272e11b106

SHA256
920e465a87a2409fc8d7186ea4e319c613c04d156bec75e8b91cb4d07b1deb75

SHA512
927048402fb314ef2624776b27317a6f996ea6b3d697d66b8b213d5be9559f24ae0dca8d2f8a9350d32310b8cab071933936640641d297ba522b3af60424df63

Download Submit
/data/user/0/com.czetech.message.color.wallpapers/files/audience_network.dex.x86.flock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.czetech.message.color.wallpapers/files/oat/audience_network.dex.cur.prof
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.czetech.message.color.wallpapers/files/oat/x86/audience_network.odex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.czetech.message.color.wallpapers/files/oat/x86/audience_network.vdex
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.czetech.message.color.wallpapers/no_backup/androidx.work.workdb
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/user/0/com.czetech.message.color.wallpapers/no_backup/androidx.work.workdb-journal
Filesize
524B

MD5
3cd4e294a13d7893817b2a79906a37f2

SHA1
f73f85c654085fc8a3851edf371d5fb91007d9ec

SHA256
5bd44b514ee4e4a578b524c60645539bd1543e9997abb7e7080236e2d73fb3b8

SHA512
6d065f0f33ed8d4a4d5db12659d1615b1685c79a684724f835b3a2cdd44cfa93a43f73de12846e86db2c06663454b64878ecde8ad2a6ff56615fa07a24b86d98

Download Submit
/data/user/0/com.czetech.message.color.wallpapers/no_backup/androidx.work.workdb-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.czetech.message.color.wallpapers/no_backup/androidx.work.workdb-wal
Filesize
108KB

MD5
5af02a35a4a44fad273d9fa312f66410

SHA1
aa0f60707dc7f1d1c34a1ebd2f079fe83dc1e014

SHA256
ce8aeafcb4acba689835ef08b096a547398eedd1334648c8efc826e0cc27e2bc

SHA512
3e5b665c2e75a1d2ddf4e77bbff7156da22e5046d56a650c528defbce934d4c52f06c20630ee6c253a5ecb82f7a45d2daa2c67fb2703048e854e61703a5458c0

Download Submit
/data/user/0/com.czetech.message.color.wallpapers/shared_prefs/app_set_id_storage.xml
Filesize
146B

MD5
398423eaf0265eeea838e46e61321c49

SHA1
1e4c6ec84c063ab52ce4a2af837ce8d54406a140

SHA256
ace52cbcbc5950128da2d15028df600ffcbec2cbb32ce0579e3743a7b37f966a

SHA512
1bff74c3343b357254e4e20f07a8b0d89148b19d24598cf9ee80c52cb85a8753394394758f6d1dd3cc7abf036240329f81eb056224a4a3ce5b4cca5526c31c1f

Download Submit
/data/user/0/com.czetech.message.color.wallpapers/shared_prefs/app_set_id_storage.xml
Filesize
214B

MD5
2a56d74a5e788fe1eaed48bf0fe5bbc6

SHA1
43b15b0a5f6a515c4cfd07d93e33c76190860bdc

SHA256
3152b1f5152db358d03cd93bf5d578dbca248bfa751f6b10fce2206bec542252

SHA512
4e440129a1766125f80a32f1196ec43bb5c4cadf5955b9f19cd4819a6321550145ed4704a97d1a398c935f621f07eb4cf9e2b5827286109b4c36c61099b3bf74

Download Submit
/data/user/0/com.czetech.message.color.wallpapers/shared_prefs/app_set_id_storage.xml
Filesize
281B

MD5
f1f2dca0c1ab181958e84be865642024

SHA1
a1d885fca01b99e5ecef15db8ec2d7c87d4e1abf

SHA256
c1dd6f5b7cb0b28b128b24cb362e923d3844b5cdebb10ee23abc3bfb43a8c17b

SHA512
4b405de2a3d34df91d8af9851fefb55caf41b4f7c22c6704744dc1848ac58bf862787a9dc26a89fad1b638f69e33e7ba86c72f188daba922736ea2adda117f89

Download Submit
/data/user/0/com.czetech.message.color.wallpapers/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize
544B

MD5
9cae8e52be52b6fa21c46d439f6d2e18

SHA1
d3a35ab2534866295400f3fc4cad480ab7dfdd60

SHA256
cf68c038f816683bc754df330b00ce7ba42626db90364df1e880d11cb2563432

SHA512
13d5f16bf6393ca82ec8422d065fc292478bb5f9cd01146243d6699c8cf0af4365d20379bf669d391f1f9d95d3b2565ec6e65df51350dd975659e1f8bc31fc11

Download Submit
/data/user/0/com.czetech.message.color.wallpapers/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize
621B

MD5
b3dddd692e2f38828f7e67151cfa0acc

SHA1
44d45b038925195f2b38b4b40a0a5e790deab9c2

SHA256
f3b318cb2364bd4521361f557fc95ef63b5eb93dd9d2d8fff00fc68a31c7d70d

SHA512
270b79cd91d715ad1a255f96e025fb43eb3edaaed368f3d59cd71d87f31f35a1e88c5ceaf5474b56956fa7c1b8440eabb1c62e1fc431953c53462504948faefa

Download Submit
/data/user/0/com.czetech.message.color.wallpapers/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize
122B

MD5
250b4caeba60ddf53228405750ba66ca

SHA1
422ab714feb34e9f3b4f1cbe669887bcd581ddb1

SHA256
2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

SHA512
373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

Download Submit
/data/user/0/com.czetech.message.color.wallpapers/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize
264B

MD5
cd20fee0398a9ac6cc5aa422d4bc6df6

SHA1
3d436b0238e2f68c2be88f14e168d46a536d7bb5

SHA256
97f296916ea3682e026b3d35f9e4f364a26b78fa77691ff39fb2916e689a8386

SHA512
fff465be81a9a7760016d619e4897e5e8a36ee37be9a2f4b06ced013bcf485675441045d97a83a4625835215ba1f6287052bd87461b95c089fd693d6334ceaef

Download Submit
/data/user/0/com.czetech.message.color.wallpapers/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize
384B

MD5
fec39fe6235a345bf4992e028638d2df

SHA1
9aeb06c7d7b90c79aa8af4928592f6b2cc352fb8

SHA256
9160d8950384508b71cdb6ff4d1427c0dfaca57a638771fffcec6875c5c458e7

SHA512
8118063a83e52443cb31aa6473ea0a431bd64a901154209d0d6ece16af6f2b4e7eec4f85fcf92e991ee81ecb92faf27289c01e58091e7807a82d9780eb5c64b0

Download Submit
/data/user/0/com.czetech.message.color.wallpapers/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize
432B

MD5
4f5388a17051c850a23a29e66409a773

SHA1
9ed9e1a295c2b7b15a12ff64c7ef0a7442bb7f59

SHA256
34841e3380fec8aefc4f1594354ba1fbbdf35b112c48f96159d33ce5e1401dc6

SHA512
0477e8170257e7402c46eb6630757917ab52dc91c69a0457aff3a49b12cf319f2ab5e622e1ebaef4e50c138bf6005d712f50e5aad2c5c48983a5702540685787

Download Submit
/data/user/0/com.czetech.message.color.wallpapers/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize
490B

MD5
2e66bdf475ba6b4da25c07e92eb57972

SHA1
4877758f32032de36cd41587b241ef1b9474bc2e

SHA256
9a5b67593c81b07eb817afe1e5c6b9f53eda1fb8b181b2fc0c3b1e05e5b5092c

SHA512
88f2450cb7706f871991bad86efd4e9e5ee8f70e4ff9898cf6bbb37c55564ad0d4a5adf508dca662015c481cb39215e4d83628fb06ffbc6bc3ac040da1d92c77

Download Submit