Analysis
-
max time kernel
3366991s -
max time network
316s -
platform
android_x64 -
resource
android-x64-arm64-20220621-en -
submitted
04-07-2022 10:05
Static task
static1
Behavioral task
behavioral1
Sample
appp.apk
Resource
android-x86-arm-20220621-en
Behavioral task
behavioral2
Sample
appp.apk
Resource
android-x64-20220621-en
Behavioral task
behavioral3
Sample
appp.apk
Resource
android-x64-arm64-20220621-en
General
-
Target
appp.apk
-
Size
11.8MB
-
MD5
daf7b2b74314b84f346e03d651d8db82
-
SHA1
9b613ef5633ab448740f653a7514b1178ebd3baf
-
SHA256
c6c781767025d3ea7b014765ad64fe1b0df0b68cd7d658f4eda5b12b1acfcb4d
-
SHA512
65f63d71d1bb7c42b089b9d36732c53c16e43509cb8cf0a9cb34a0b38e98e2c379b2511f4d13d41f3940518737586a2aa5e5fec2e0f5bb4611c9a1a7038d8bd0
Malware Config
Signatures
-
Makes use of the framework's Accessibility service. 1 IoCs
Processes:
com.com.sdadsaadescription ioc process Framework service call android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId com.com.sdadsaa -
Acquires the wake lock. 1 IoCs
Processes:
com.com.sdadsaadescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.com.sdadsaa -
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.com.sdadsaaioc pid process /data/user/0/com.com.sdadsaa/app_securecache/unrar.jar 5150 com.com.sdadsaa
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.com.sdadsaa/app_securecache/oat/unrar.jar.cur.profMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.com.sdadsaa/app_securecache/unrar.jarFilesize
113KB
MD581726a7d05edcb5289f205e3baedc663
SHA157ecc7e08bb16aab1f3e7afa1c4cf1de8a9639cc
SHA2568bf5f8774f590ede2152b000aa6b830856c83da5870fc7284eb702d388df114e
SHA512b9df9e3b7fa9e2ad0ae2c844a7914aef8f49c06cfea94680e635521b0e769b0f75c9c30a07a282fad18225e2d0e81230f94537c5e807044dacc0ed0617257ad9
-
/data/user/0/com.com.sdadsaa/app_securecache/unrar.jarFilesize
527KB
MD5fe24e947ca9791d788ef462868aecbd3
SHA146a682637382d09a7e2d71f93c466eed14f0f9b2
SHA256b11e0b6f5b20aeb60db12053ef249a4aa1894b82227b62316020da4dc7a8ea56
SHA51265ffe4b08c66bf9f5d5a0a8931ed9e99ef2f4189af2632c4f6363eb0e9b9ed275674002f288c992f8566b66c313a690a906be0ee6aaee5744a40a057837ad8c6
-
/data/user/0/com.com.sdadsaa/app_securecache/unrar_enc.zipFilesize
98KB
MD5ae453d5baf28a9db2633dd7a404dfd45
SHA1f0c879d39431477b68de685c1d5b153d5e0440b1
SHA256b00851d5556e92848143307b278237a3bc75e33e0371711e10f448f700ececdf
SHA51233ea7eded01f243fd3f165b19ff466dcd919d7a53e344bbaad71c7727e354b83b6504aae8ce23fd0ed4a299d48be2d6e6827c298be58511cb48098ffab535098
-
/data/user/0/com.com.sdadsaa/cache/1Filesize
98KB
MD5ae453d5baf28a9db2633dd7a404dfd45
SHA1f0c879d39431477b68de685c1d5b153d5e0440b1
SHA256b00851d5556e92848143307b278237a3bc75e33e0371711e10f448f700ececdf
SHA51233ea7eded01f243fd3f165b19ff466dcd919d7a53e344bbaad71c7727e354b83b6504aae8ce23fd0ed4a299d48be2d6e6827c298be58511cb48098ffab535098
-
/data/user/0/com.com.sdadsaa/cache/2Filesize
274B
MD58936aac57d4b37b95089ebcf9f067e06
SHA1e38d6719fc7bd37204243271bf41bb9aecf59222
SHA256907dae84d6d04d46fb0ba7c29738648b0ab1a1e5f7ee534d8655570b3042f3bf
SHA512487c8610957d9e91ea1a579de3ce1efcba47e5fec0c50b77429e85a51ac3419c55f3d238c39d99f2064349b35b2c0de4c8d6eae475c1560f6032f56559acc57c
-
/data/user/0/com.com.sdadsaa/cache/~test.testFilesize
4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
/data/user/0/com.com.sdadsaa/files/dbkeys.dbFilesize
8KB
MD59a7f3389cf225c38519f34b1e4fff4e8
SHA1f011af30d5cf5a4cd15b0d82b0c00ff1a4c5952f
SHA256bf1be95566105ea42392d0c06a2bd06e6ca724e9c8a5f5cd818813b178821378
SHA512451936320e988c03a84aa6cbb0d2dc6c738eedc135114690e980908a39a0f86867799881bd09faf8843c5b34d57d7a356992d476ac6858083fe5c74600fdefa8
-
/data/user/0/com.com.sdadsaa/files/gvcrfRK.zipFilesize
98KB
MD5ae453d5baf28a9db2633dd7a404dfd45
SHA1f0c879d39431477b68de685c1d5b153d5e0440b1
SHA256b00851d5556e92848143307b278237a3bc75e33e0371711e10f448f700ececdf
SHA51233ea7eded01f243fd3f165b19ff466dcd919d7a53e344bbaad71c7727e354b83b6504aae8ce23fd0ed4a299d48be2d6e6827c298be58511cb48098ffab535098
-
/data/user/0/com.com.sdadsaa/files/localdb.dbFilesize
12KB
MD5e7179ba1abb576a1eb3486db34de4037
SHA14dc87664c9be3d7a94d4886b7f56f4a8d7b983dd
SHA256409f05ab16c6f1f0897959456d72f94a870b03581569f7c4970b22e541db827f
SHA51250ee847527ad249dcb43d3d95dca9d8bb5bfdc459f6e5d639db4a31895e4f2ad75355451846cb732e380a576f41f1c3af19387cdc9ee7c5e46464c61613e458a
-
/data/user/0/com.com.sdadsaa/files/localdb.db-journalFilesize
17KB
MD542855ef60df9af71194dd1cf5717375e
SHA124ada5980ce4b9e056b0a258e490620cfe79af15
SHA256468aeb80d7f97d62377bdcd8b5627437820d7b607f5bbf88750613a2652a8e17
SHA51244ab5397d030abff95e34411b430d8c8744dc2d8930f469ad38dec125352acf569bcade882e93282703d97d911c87368689532a238980ab685886254bbe3ad0c
-
/data/user/0/com.com.sdadsaa/files/messdb.dbFilesize
8KB
MD557a39108426ea4fb8e5bc74accc22a88
SHA173f83c87418acba44a084cb7055fc5c34f6cf25e
SHA2569d36142e37864417222d54360d821b9a75f31ad31d1f9a45c947edb63ec6b2d2
SHA512f122d601019b7ee6077574897b51d60cf8223780db64e0649a772183c8025ac413d3ce0683c8bf05373e293cb67ebb62d9dfea15d5d16c495bc0628279709b8a