Analysis
-
max time kernel
3436646s -
max time network
24s -
platform
android_x64 -
resource
android-x64-arm64-20220621-en -
submitted
05-07-2022 05:29
Static task
static1
Behavioral task
behavioral1
Sample
a16fd7b005d22e3c358ecb46e40f24bca607a9cf99afe81061de0386a4bc8eb0.apk
Resource
android-x86-arm-20220621-en
Behavioral task
behavioral2
Sample
a16fd7b005d22e3c358ecb46e40f24bca607a9cf99afe81061de0386a4bc8eb0.apk
Resource
android-x64-20220621-en
Behavioral task
behavioral3
Sample
a16fd7b005d22e3c358ecb46e40f24bca607a9cf99afe81061de0386a4bc8eb0.apk
Resource
android-x64-arm64-20220621-en
General
-
Target
a16fd7b005d22e3c358ecb46e40f24bca607a9cf99afe81061de0386a4bc8eb0.apk
-
Size
454KB
-
MD5
495e5bb9d2ecbcff09fbdfe21cb58a54
-
SHA1
12731334171857eebe9c14fb4a645d7a976cd254
-
SHA256
a16fd7b005d22e3c358ecb46e40f24bca607a9cf99afe81061de0386a4bc8eb0
-
SHA512
473ada1219dfa666526b73782b0061504d8944fb7837679c69ae0226e75d600ab88f89cbd843c1ba651f5ff60b3503ea68dbecb6f7f21c9560d80e571c0a3b90
Malware Config
Signatures
-
Acquires the wake lock. 1 IoCs
Processes:
com.xmtln.pmtldescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.xmtln.pmtl -
Loads dropped Dex/Jar 3 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.xmtln.pmtlioc pid process /data/user/0/com.xmtln.pmtl/files/OiCrZqiIGIDEufdKjouvJmW.zip 4181 com.xmtln.pmtl /data/user/0/com.xmtln.pmtl/files/cls.dex 4181 com.xmtln.pmtl /data/user/0/com.xmtln.pmtl/files/cls.dex 4181 com.xmtln.pmtl
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.xmtln.pmtl/files/OiCrZqiIGIDEufdKjouvJmW.zipFilesize
5KB
MD5bb553e1ec456cdb1208f8e512aaa4f2c
SHA17259b85fdca907a9135a6b793bed8995707351e9
SHA256efbef2dea6897e1767221bc01d933f3aa9e955c495513d5531157e3e477c340b
SHA512cbcefa437826ae487d30f3b7ed2e5c82af0d994f9e4d1fcc51a515f32bd2affccd54ba013fa6421b8ac620f2e2a94c1f8823da81cf9cb589e5a5a16dae131f22
-
/data/user/0/com.xmtln.pmtl/files/OiCrZqiIGIDEufdKjouvJmW.zipFilesize
11KB
MD5437cf9a338f01356c8e9f64ca5d5d384
SHA1eabf613df6567aee4b5077bb33c9af775f8d224c
SHA2567d96930538061e4fd102531c535c48d38069e5b7c5665b452c8f172201bf79eb
SHA51235ecc66ef4f61bed7e27810cf461c4c3a59035d4c52f9ba6e3594d8b9ed0cb6da952eeb600e0923334ee541bf09764e14e4d8b08dabb8158013d1c963b936560
-
/data/user/0/com.xmtln.pmtl/files/cls.dexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.xmtln.pmtl/files/cls.dexFilesize
407KB
MD58b86bdbbf610c461782af2dec65b2a41
SHA16a5aa91553ac5aa4e8707dff4aac41de5b891d3b
SHA2568c950757c2b04269ba0d3d0fbb3a2a2016ea4cdcddc3c387dffa7145301b656d
SHA512b7a2fc322f1cadd7766ca945be6b659560d3302acadba4c7fa6a2827adeb60db341315db61d06ee3a3cc5108f80c0ed36ee91ab913a3a16d1ad35df0e6e82503
-
/data/user/0/com.xmtln.pmtl/files/cls.dexFilesize
407KB
MD58b86bdbbf610c461782af2dec65b2a41
SHA16a5aa91553ac5aa4e8707dff4aac41de5b891d3b
SHA2568c950757c2b04269ba0d3d0fbb3a2a2016ea4cdcddc3c387dffa7145301b656d
SHA512b7a2fc322f1cadd7766ca945be6b659560d3302acadba4c7fa6a2827adeb60db341315db61d06ee3a3cc5108f80c0ed36ee91ab913a3a16d1ad35df0e6e82503
-
/data/user/0/com.xmtln.pmtl/files/oat/OiCrZqiIGIDEufdKjouvJmW.zip.cur.profMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.xmtln.pmtl/files/oat/cls.dex.cur.profMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e