243ea96b2f8f70abc127c8bc1759929e3ad9efc1dec5b51f5788e9896b6d516e

Resubmissions

21-07-2022 15:41

220721-s4qhgaghgk 10

20-07-2022 04:03

220720-emcndscbgn 8

17-06-2022 11:30

220617-nl5gfsbgfl 8

Analysis

max time kernel
432548s
max time network
115s
platform
android_x86
resource
android-x86-arm-20220621-en
submitted
20-07-2022 04:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

243ea96b2f8f70abc127c8bc1759929e3ad9efc1dec5b51f5788e9896b6d516e.apk
Size

2.9MB
MD5

5d892168472ed4a87a60721c02330f15
SHA1

97ead8dec0bf601ba452b9e45bb33cb4a3bf830f
SHA256

243ea96b2f8f70abc127c8bc1759929e3ad9efc1dec5b51f5788e9896b6d516e
SHA512

e8aa2aecbde4c0385b5027a0920cb4dd3d19267e2ef2155f74d8b90425697c7a5421f31a3d12ee5f6fb904ad82514c9de7f2d1e7d53e43f50aa2b179434ec60a

Score

8^/10

banker evasion

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs

banker

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.androidservices.support

Requests cell location 2 IoCs

Uses Android APIs to to get current cell information.

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.androidservices.support
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.androidservices.support

Acquires the wake lock. 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.androidservices.support

Reads information about phone network operator.

Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs

evasion

description	ioc	Process
Intent action	android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS	com.androidservices.support

Removes a system notification. 1 IoCs

evasion

description	ioc	Process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	com.androidservices.support

com.androidservices.support
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
- Requests cell location
- Acquires the wake lock.
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Removes a system notification.
PID:4399

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.androidservices.support/app_webview/Cookies

Filesize
64KB

MD5
cb7543c4df600f2af58097cce0e334ba

SHA1
83cc92f38c27fdb4fa519b1ce2f37912f24af1f0

SHA256
64c022ae708f94ffde986e105d88f708884de325720bfb9925c4160a6d417233

SHA512
ad51cad0472327bd68aa2d791341cfafed58971752352537bb603ed18b15a3f9185e9150983a28ecd09606e8dcaef6d1c9d93213dd246ef7720f39842eb3d980

Download Submit
/data/user/0/com.androidservices.support/app_webview/Cookies-journal

Filesize
1KB

MD5
ebe16ca924cc4b4a8ed2a735b6bc33da

SHA1
7a9c5531f77f9d6364f2310098ab1b620de9cb34

SHA256
dbe2394bfd2ce92a55a668c65eabe5c11e4a6264350fc9a31a1af09901d01b92

SHA512
1bfff9bc4602b191e7c4c7e61b0c44e34efb3a73f0601684bba7ab461781459e541065c47cbf091823dc71dd6040ce27159b519e2729f4493b5cfb2a2ea4c420

Download Submit
/data/user/0/com.androidservices.support/app_webview/GPUCache/index

Filesize
20B

MD5
93027d42b314432c4216e6cfca48b384

SHA1
43448dd8102979c3926828182579691945eedd4e

SHA256
3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

SHA512
a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

Download Submit
/data/user/0/com.androidservices.support/app_webview/GPUCache/index-dir/temp-index

Filesize
48B

MD5
e643ef0311da2cb4d6f3e4fb6228dbaa

SHA1
45a7f23b6f506a2c008215fd78252c7f77a834ed

SHA256
cba05c932b9f47de4c6ff6233918bb9a2e6a9619f2899dccc53937685752c10f

SHA512
cd724c140f086c7212964f840f9eb83918cb2bc99a1a0a1717c5b0cb0ce68cb4d26c0bb2daeabbc34dca3279ed00f42ea0aafc2fb69a91dbbfee8673e00419c3

Download Submit
/data/user/0/com.androidservices.support/app_webview/Web Data

Filesize
104KB

MD5
dc79f9ce5f3ab5270b33e61119dfc959

SHA1
1844bf222a5144b513dcf2fb50a18c011701c647

SHA256
47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

SHA512
18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

Download Submit
/data/user/0/com.androidservices.support/app_webview/Web Data-journal

Filesize
1KB

MD5
d00103846bacd750f6dc41d70850e693

SHA1
dc50fd75076b08643b5bbc40b5b5311dd35ebb19

SHA256
f0831fb3519e0c049128383d05c4306260a3aeb13dc478803babf19f82462c15

SHA512
2a1b741945eff22972afaa82a7b6bbb81b2c9a4099e5e95f1e99e28c6e6eb7cdbda0ddfa3ea8c35ffd03fcfb84384e073ab0e184469bf2395e07732b0a734129

Download Submit
/data/user/0/com.androidservices.support/app_webview/metrics_guid

Filesize
36B

MD5
c91f5f3374236f16d5dcb9c4711e77a3

SHA1
1ea6265979945e086ae4eb139a261a8188aec8be

SHA256
6d3deed7faac6f4d7587a227199f0407824d90d3ca63ea083d857298517efce4

SHA512
38f542c8fc5c11a8f910cdbc15c8e226def2b95aa580d20777ed59d9a0a128ced61b951f92a8a285af4480a802a310188faba2276beda97d44471290c207678e

Download Submit
/data/user/0/com.androidservices.support/cache/org.chromium.android_webview/77e371dbde913892_0

Filesize
120B

MD5
35340ddd7450297e868dea2dfc20bda6

SHA1
7adfcae40837950a3e579473e30f7793c8abf830

SHA256
cad5eef60009183c2a4b80358e751fccf675bbb7dc7485d06088c41fbd5da7a5

SHA512
06c0e466bc6c0bf8f643c2a2168450f032602a9384b51f6f2555fb0ece0dd334fb03c04b3485b90341910e604cebacc2dc4f8f35ff8f9a29d82b5f670e535f05

Download Submit
/data/user/0/com.androidservices.support/cache/org.chromium.android_webview/index

Filesize
20B

MD5
93027d42b314432c4216e6cfca48b384

SHA1
43448dd8102979c3926828182579691945eedd4e

SHA256
3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

SHA512
a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

Download Submit
/data/user/0/com.androidservices.support/cache/org.chromium.android_webview/index-dir/temp-index

Filesize
72B

MD5
d328cc63ee6bca0507970fc81a0ce77d

SHA1
621351dfac0e6fb659649709cddc7214dd1dc201

SHA256
d482c76bfacb610d2f34facee8088a1cc258d1c0aac26de3d7500eb2f8c24b57

SHA512
44833cdc862da60a21a4a1dfc7a85e1082dfdcd2de4e18eadf76ca92e0db37db75a0bad50d6aaf8ea3cce265b58072565ae9e843603294a78260a7168f6a93aa

Download Submit
/data/user/0/com.androidservices.support/cache/org.chromium.android_webview/index-dir/temp-index

Filesize
48B

MD5
ccb092fbcacb6171dc348cee8779ca5d

SHA1
eb67c5eef1a7918e7645ec8b3f6996faebe01219

SHA256
cec7538cbffd34a18442ca1c880bd78a713b7625a29937a77e273ea22917c9f3

SHA512
006edb70dd49423c62851b7495ab10fe47e20e78df036da272e305175b86c0e9f2048c0735e7f6262b577774823791f6b903ebda3ccd6c831b79ac62dec1b1fb

Download Submit
/data/user/0/com.androidservices.support/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/user/0/com.androidservices.support/databases/com.google.android.datatransport.events-journal

Filesize
524B

MD5
5c9730ab4ed463a0a6f7017b813cc870

SHA1
7d46e0f28d923a811a5033bc48b8415a7435d805

SHA256
0214c20e82e37b18a241caf7bbb6f9d79bbc0b55061ee8927dcfaabdbc679191

SHA512
e7de7da0922e15594aeaa935a4f9d80f6fabe1bb1d02d4b219249ac77c4b21af454ca44d0f6dfb1d0263d558c1ef9429da4ffee352ce1340d73a5b54e86f3eeb

Download Submit
/data/user/0/com.androidservices.support/databases/com.google.android.datatransport.events-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.androidservices.support/databases/com.google.android.datatransport.events-wal

Filesize
52KB

MD5
ed862f8a990511f2d2d98d2192eeb017

SHA1
b8a26da8464ae691df7cee55cad4c1cb85231c53

SHA256
881276cfde2418c07db33d0d2eda92324b74124201bf0c68772446c2748b8a81

SHA512
f1bb77ce706fe9e104c9fd48692e720eb7191124b06943256632d1ced12c3001fdac0dbe59195f17688a7c0d69f9a3904cb0faa2354c90b14d85789768e5dbdb

Download Submit
/data/user/0/com.androidservices.support/shared_prefs/WebViewChromiumPrefs.xml

Filesize
127B

MD5
21223e9184445fe043476484cd8cb1f9

SHA1
2b4813f849121d60ba35eb0889080668bb62c778

SHA256
bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

SHA512
be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

Download Submit
/data/user/0/com.androidservices.support/shared_prefs/com.androidservices.support_preferences.xml

Filesize
125B

MD5
9270e060dfd82f99f0ab613d9a29ab1c

SHA1
92472ba6100e5f48079b6057bb0b5edd5f1382e8

SHA256
99f23cd3f88795a8c2c9d0579e2e9918fa1900e13b4cde0c849142186df70f20

SHA512
6ee2e83d8b3e896a2851dd92bef201e925fdec45f32107f03646917231e42c219001cdca32c47ab8a236236e593e0c813ab1273314ee5db8cf81084db27519c1

Download Submit
/data/user/0/com.androidservices.support/shared_prefs/com.androidservices.support_preferences.xml

Filesize
171B

MD5
5ac9e0b1d2b5203f8c9139086e05d770

SHA1
823228930aa962a05d74028a8e9c72c6c4ec8b1a

SHA256
09259bc7856298598fcb74706555a6c5235603a60050e738645c1b97d29da1ef

SHA512
d35555bf0a424be08e5e6270251a7ae644c717b105ea77d2f81c91f7efa617817a4e763eaddeb8ea073d4d6e6fada24fab7807d2a213de00b94d7fc8cdaa86e6

Download Submit
/data/user/0/com.androidservices.support/shared_prefs/com.androidservices.support_preferences.xml

Filesize
302B

MD5
7554dfcea9b9816df3f578dd7de323db

SHA1
73465ff9b635b7ba492bdb608c57e3b8a9a78563

SHA256
8acc6ff0d2c96019d324dbb9e385fb0e1ec049a0132d728d4c7c33c4f9c2b632

SHA512
2db67e6d5e3ff99d8f6cfbec2c68a1690fe868aa483916f591442cb8978420ddad62bd063d8b6ad00961133fb2bbeec09b97eadda2734f5b3c7430ff73161319

Download Submit
/data/user_de/0/com.androidservices.support/shared_prefs/move_to_de_records.xml

Filesize
128B

MD5
0e777fa46dc7b378b14a465da934467c

SHA1
ab7497b8b32d70c9fc2a5203ab618920d0601253

SHA256
63b2de8ef589db15b161ed905df89532d0b8ecdaeccf08f4771a4a2206089eac

SHA512
f43b46b82842ea2823ebcef50b7677e44c18675b88596e7abc6c090759af93b784c81e74f0f43b7649fa36c5582dc33338c6eeb7f5ef42d8967ad81d54e601e6

Download Submit