Resubmissions
01-07-2022 12:00
220701-n5962segf8 723-04-2022 16:23
220423-twaygshder 720-04-2022 10:37
220420-mnw3esdcdm 7Analysis
-
max time kernel
3114429s -
max time network
23s -
platform
android_x64 -
resource
android-x64-arm64-20220621-en -
submitted
01-07-2022 12:00
Static task
static1
Behavioral task
behavioral1
Sample
Color Wallpaper Messages.apk
Resource
android-x86-arm-20220621-en
Behavioral task
behavioral2
Sample
Color Wallpaper Messages.apk
Resource
android-x64-20220621-en
Behavioral task
behavioral3
Sample
Color Wallpaper Messages.apk
Resource
android-x64-arm64-20220621-en
General
-
Target
Color Wallpaper Messages.apk
-
Size
29.2MB
-
MD5
ac9758bb58d7008acc218be1dc059ecb
-
SHA1
adbf37d7fdf37dde34e510bb379786f5a3587c8f
-
SHA256
1a61f04cca0d2c0ba2dd09bf032d378d0fa3b558f71a6276138c676331203aac
-
SHA512
529ddc6b09dc910366cc1a0bff1d7615a041ae6dac9807705ea7d63bb8783a47fd585f6222179a477d3ac6ff5ec3dd4e97cbcc7f8d30850ee008953b3689e405
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.czetech.message.color.wallpapersioc pid process /data/user/0/com.czetech.message.color.wallpapers/[email protected] 5369 com.czetech.message.color.wallpapers -
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.czetech.message.color.wallpapersdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.czetech.message.color.wallpapers
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.czetech.message.color.wallpapers/[email protected]Filesize
3.2MB
MD5692c6b1b89702297c59bd34c4bd1fa53
SHA1f38cac946f03d7e869018acbdfe0ed272e11b106
SHA256920e465a87a2409fc8d7186ea4e319c613c04d156bec75e8b91cb4d07b1deb75
SHA512927048402fb314ef2624776b27317a6f996ea6b3d697d66b8b213d5be9559f24ae0dca8d2f8a9350d32310b8cab071933936640641d297ba522b3af60424df63
-
/data/user/0/com.czetech.message.color.wallpapers/no_backup/androidx.work.workdbFilesize
8KB
MD5e579a6b00eef1318f9166352228eba18
SHA176988896854f0139083e77862eea1a4846cf039f
SHA2564b34cf505050facf47aa7936e4e7667e1969105665c632b3eefe7ecddf9a6935
SHA512c47632e957d87727bf6504a82ca7a44d8da24d30cd997a0f449a96e4f97c656a1b4d9da3fcd827e2a48c59677688da0b872358ebd0f9369d898d1b8ec18d5699
-
/data/user/0/com.czetech.message.color.wallpapers/no_backup/androidx.work.workdb-journalFilesize
1KB
MD5b8b9e1c944f824bfb46f5e293b3bf629
SHA12ddf8c60d7e3b0ba56abfea7bc789be2a0919790
SHA256b21ca37bfd36dd2c678dd67087bebdb13cfe19255f7083e59ae8632482c7be6f
SHA5122505cf818bc31f5f6d054bed30a279414249847637c11ebb2af7382b72f729c2aa036d252de2c12720f92609c7d705b47af38c6eb95974a35cf86e2851593d7c
-
/data/user/0/com.czetech.message.color.wallpapers/no_backup/androidx.work.workdb-shmFilesize
16B
MD54ae71336e44bf9bf79d2752e234818a5
SHA1e129f27c5103bc5cc44bcdf0a15e160d445066ff
SHA256374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
SHA5120b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27
-
/data/user/0/com.czetech.message.color.wallpapers/no_backup/androidx.work.workdb-walFilesize
217KB
MD5849527f9ba236e3b431e10bfe5a81532
SHA19c979ed04200e0476e1c9baa76296652cafa33d2
SHA2560e7bd0e05af758708e047293c8af5002791e8a03643fafb421e322165f7bb767
SHA5126707065994d2ec840d84319ca3477685119af3a5d0ee18537f4941aec05c6bcd23e072b05073470257450292b99733f319572013e1f99092d789f43764d36edf
-
/data/user/0/com.czetech.message.color.wallpapers/oat/x86_64/[email protected]Filesize
752B
MD58b60a81cb22d7c9c5c28be074d79642b
SHA124bc6c06df5a2a77b5215bc82254f6a0641e56cd
SHA25632f14a147ce1edb10fde3db8f15d7be69ca0df8f1ff07aa925d08831e1cbd4a3
SHA512b8870698f03ed7b47b7fc52974b90f1d72bd44810868b6067e6a3d2f66b9cec7f6e9cc2937f852e65bdca1fc9ed68af995b36e3c817e7bcefc8bf4f75c1ebc4c
-
/data/user/0/com.czetech.message.color.wallpapers/shared_prefs/app_set_id_storage.xmlFilesize
146B
MD5f801fa7ecb508addc30853a3c3a4ca24
SHA11c89c945821270f7f28bc0aeaaace6f2b9ba57c0
SHA2568cbab7516d2f0bb01cd6a1917eb2768cbed2e0e28038df158561bea2398c7e57
SHA5124ba201842007d69031efb5248d568486d8308e6b499ff47bfb5ccc859459d0606c4d8347bd151e3c13f29db3bd0c58944ca6514217f51788faa783392cad9a99
-
/data/user/0/com.czetech.message.color.wallpapers/shared_prefs/app_set_id_storage.xmlFilesize
214B
MD5c56b62d7d184104bbf3be9b93b9ca999
SHA1cca8a5b6dc8528a5c9ceac649a5b71cfcbfe6c85
SHA2568bf9043622834d8adbb9427be626057cc071d05c642f151e0a828f9ff3356f75
SHA512877ae073102c91c139dc6dd2b16770bfaf7c0c9d9d05f0aafc2be7598603e78141ad598a4a815bcc9e615b7332573c580f416ad518f65a185df9b1437ebdd35f
-
/data/user/0/com.czetech.message.color.wallpapers/shared_prefs/app_set_id_storage.xmlFilesize
281B
MD5826d46de40fa6d91bbb3d0b0cb78fb07
SHA1f0a06659882d634450a6f20995aff055da5cb9cb
SHA256e236d9d6fb0cdf84aea0c7fbd3ddbd8457fd20a23bbdb7c9c73bf399c5df6c67
SHA5123582475ab8742e3e1403bf1edc5b832d4d0252de297ad15e05f992f49c17b35b16defad35caf7365eb7d44e775d783780a53a51a3ca09da3da2143fbe4c39909
-
/data/user/0/com.czetech.message.color.wallpapers/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
264B
MD530a506c5e57623f994e9680a429d07b8
SHA1fbc3b709eb23e2da467b8b6e3d17b30ffcf94da9
SHA2563f755113835880efa8d07dcbe5d9555d501694d489748f597913c1815fa695bd
SHA512594316de5847fd5b31091c272e6dc7da336cabdb5c8be20c18965e441e0c6879faa78dd0c5fdd6e1cebab5a4c2927d6eac705a03f457067f869b76345d007ed7
-
/data/user/0/com.czetech.message.color.wallpapers/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
122B
MD5250b4caeba60ddf53228405750ba66ca
SHA1422ab714feb34e9f3b4f1cbe669887bcd581ddb1
SHA2562478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
SHA512373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb
-
/data/user/0/com.czetech.message.color.wallpapers/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
180B
MD5dbda6e86de66c417e56d997130dd2d06
SHA1cbb17835e9562842120e7414734f29e005f1e39b
SHA2560246c359d3ff0bb6b8efcd856f00d42f2441018c6158a210c88e535193e9189c
SHA5126731c5e5e874187c8d990defc980f940f864cdbba978080925bfa048f968ddd15b31b382b6df00a8386dcd9508c1ae4dda8a0032390053372b9fe8fea850efd5