Analysis
-
max time kernel
3360184s -
max time network
137s -
platform
android_x86 -
resource
android-x86-arm-20220621-en -
submitted
04-07-2022 08:16
Static task
static1
Behavioral task
behavioral1
Sample
Custom Picture Caller Show.apk
Resource
android-x86-arm-20220621-en
Behavioral task
behavioral2
Sample
Custom Picture Caller Show.apk
Resource
android-x64-20220621-en
Behavioral task
behavioral3
Sample
Custom Picture Caller Show.apk
Resource
android-x64-arm64-20220621-en
General
-
Target
Custom Picture Caller Show.apk
-
Size
15.2MB
-
MD5
e0697e62838a5f058a8378b0d71f1fff
-
SHA1
af5d359e2c8472bc897a188ede227ab144a8ec17
-
SHA256
7c63db260e82f1849d1bdc9501cc03d13e622707b1f55c63920cacb8a188cce0
-
SHA512
8f7d0a4999865644d06789084b805b3c1b9a794aeb21c8581ca698bedf97a7f86958ac986aa6be68d6ee657e236e539ed2604c466532611adacbd1a32ff2ba5c
Malware Config
Signatures
-
Loads dropped Dex/Jar 3 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.custom.caller.show/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.custom.caller.show/files/audience_network.dex --output-vdex-fd=54 --oat-fd=55 --oat-location=/data/user/0/com.custom.caller.show/files/oat/x86/audience_network.odex --compiler-filter=quicken --class-loader-context=&ioc pid process /data/user/0/com.custom.caller.show/files/audience_network.dex 4798 com.custom.caller.show /data/user/0/com.custom.caller.show/files/audience_network.dex 4941 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.custom.caller.show/files/audience_network.dex --output-vdex-fd=54 --oat-fd=55 --oat-location=/data/user/0/com.custom.caller.show/files/oat/x86/audience_network.odex --compiler-filter=quicken --class-loader-context=& /data/user/0/com.custom.caller.show/files/audience_network.dex 4798 com.custom.caller.show -
Reads information about phone network operator.
Processes
-
com.custom.caller.show1⤵
- Loads dropped Dex/Jar
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.custom.caller.show/files/audience_network.dex --output-vdex-fd=54 --oat-fd=55 --oat-location=/data/user/0/com.custom.caller.show/files/oat/x86/audience_network.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.custom.caller.show/files/audience_network.dexFilesize
3.2MB
MD599061f95058014a12e9919e2f2593771
SHA1ac9ddface5bc63bdaeabe7d8e535a36d1a73456e
SHA256be87bb0a50395917f973b4b2691d62037c7c7c6bc8aef060b49240680f82ec06
SHA512d7eabcd38af518ce5cb68691bf646044f0beec9f23bb5b031924074bfaf96b89df0103b4b9abd4c5fca3bec40741f8bb3b894b4c6f07438340a1ba97d9b89e9f
-
/data/user/0/com.custom.caller.show/files/audience_network.dexFilesize
3.2MB
MD599061f95058014a12e9919e2f2593771
SHA1ac9ddface5bc63bdaeabe7d8e535a36d1a73456e
SHA256be87bb0a50395917f973b4b2691d62037c7c7c6bc8aef060b49240680f82ec06
SHA512d7eabcd38af518ce5cb68691bf646044f0beec9f23bb5b031924074bfaf96b89df0103b4b9abd4c5fca3bec40741f8bb3b894b4c6f07438340a1ba97d9b89e9f
-
/data/user/0/com.custom.caller.show/files/audience_network.dexFilesize
3.2MB
MD5443e954b0c2bb17e6707253600f0bcf8
SHA13128b1704d9f397e9716b57d106b8c965d78b31c
SHA2567d0e7e9d7e219526ba0ef8f0edbb296d912431c976886456e33b358aa551c96a
SHA5125ffada7283de3ca8074374026c49e6826e4e88cf184b66ae20e5e9d0e2a6b4f040a345cf4a60125f97989aad3b016ce83317d434abca27c9399a32a7fafa62a0
-
/data/user/0/com.custom.caller.show/files/audience_network.dexFilesize
3.2MB
MD599061f95058014a12e9919e2f2593771
SHA1ac9ddface5bc63bdaeabe7d8e535a36d1a73456e
SHA256be87bb0a50395917f973b4b2691d62037c7c7c6bc8aef060b49240680f82ec06
SHA512d7eabcd38af518ce5cb68691bf646044f0beec9f23bb5b031924074bfaf96b89df0103b4b9abd4c5fca3bec40741f8bb3b894b4c6f07438340a1ba97d9b89e9f
-
/data/user/0/com.custom.caller.show/files/audience_network.dex.x86.flockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.custom.caller.show/files/oat/audience_network.dex.cur.profMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.custom.caller.show/files/oat/x86/audience_network.odexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.custom.caller.show/files/oat/x86/audience_network.vdexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.custom.caller.show/shared_prefs/com.applovin.sdk.preferences.U3opeOSQLLeyU6bTMMoEiuDiqPQatNapFS6oDOVH0Jr3-CUcVzJDvWpzTP0XtrRuSXiJBhadTh2ogSSZkVrl2c.xmlFilesize
136B
MD53e19918789d5d00cddce748b30e86cd3
SHA145c85bad7917bbb47925ac376b156f6b8e81f677
SHA2566d4f7aede808fb75f7694046d1d9bbe41fb8738ae9b4c514ddd107403b9533fd
SHA5122714a20f6df8a05eed0a95a25d27d7a909788fcb1fdc6ba1c7a08aa1d1adf4c7093346659fc2fd0a73d0551c08b33902ed9d7643a51d8a78bf4e3b097f98b0b5
-
/data/user/0/com.custom.caller.show/shared_prefs/com.applovin.sdk.preferences.U3opeOSQLLeyU6bTMMoEiuDiqPQatNapFS6oDOVH0Jr3-CUcVzJDvWpzTP0XtrRuSXiJBhadTh2ogSSZkVrl2c.xmlFilesize
354B
MD5826bb4b0329237d20f943bcb40405574
SHA1587270adf542a89ffcba6c25370d62b5e50075b0
SHA256c47fcb0e2bd0cabf08ce1cabf99e4ad0e1d41d6e71d76171ae06482b952a11a7
SHA51291259d79dcac34ebe39a2a154dbf8ef4578534c3f63edde516fa51dc512b707402dcbf2e0ea3c1b23283113e6a4b6396a8536487e873b9a479f07c9dd4edf503
-
/data/user/0/com.custom.caller.show/shared_prefs/com.applovin.sdk.shared.xmlFilesize
173B
MD54cd5c530f3d5126c60086b4f205e3c27
SHA1fd6c82d6ac246ff6e8f57b55ef4c6676242d7180
SHA25604876c387ef10d948e3411863c94b3824cd101ab2d6e3357df7d6ed96ab42c00
SHA5125e285026de77a0d10050f73033e91d8d048a05f213e5c954e202a750de59ab123b36fdd0221501382af9f857fc1eb88c7645d3ce9140e48ae7693b6ee6c993d6
-
/data/user/0/com.custom.caller.show/shared_prefs/com.applovin.sdk.shared.xmlFilesize
277B
MD5927de4b9c2eaba05bd4370b67bfb81e2
SHA19f0059065216242b6d7008d2d773a4850f3e2a9c
SHA2568a487b4a3bcf435918ee909a4ace39657257daa060b6bf1cabab304692666ab5
SHA5120240ebf853cb356fbfb5b810c944e69d1ee2ea71db29ed1991492c550a5e46933d3efe7cfbee787c524e1299b7a94536c010f44131101a17f35899f0f2eae888
-
/data/user/0/com.custom.caller.show/shared_prefs/com.custom.caller.show_preferences.xmlFilesize
136B
MD547b0864fa4cc7b68db78c44aa077eaba
SHA1e1dd19f8c26bc9b1f0f9127ab1a5c71f2477eb62
SHA256b5a21d2012b5ba00755278f04297322e66bce1c7805649051b98fc9272a521f8
SHA51296cca3809d38fde5fea3d5b924797f67b49a93181f389384dc42bd3fb432dedb8950cc5bd2b57e1f2187352532981daedffda8087f57622006c4b965c79aac4a