243ea96b2f8f70abc127c8bc1759929e3ad9efc1dec5b51f5788e9896b6d516e

Resubmissions

21-07-2022 15:41

220721-s4qhgaghgk 10

20-07-2022 04:03

220720-emcndscbgn 8

17-06-2022 11:30

220617-nl5gfsbgfl 8

Analysis

max time kernel
560823s
max time network
93s
platform
android_x86
resource
android-x86-arm-20220621-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220621-enlocale:en-usos:android-9-x86system
submitted
21-07-2022 15:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

243ea96b2f8f70abc127c8bc1759929e3ad9efc1dec5b51f5788e9896b6d516e.apk
Size

2.9MB
MD5

5d892168472ed4a87a60721c02330f15
SHA1

97ead8dec0bf601ba452b9e45bb33cb4a3bf830f
SHA256

243ea96b2f8f70abc127c8bc1759929e3ad9efc1dec5b51f5788e9896b6d516e
SHA512

e8aa2aecbde4c0385b5027a0920cb4dd3d19267e2ef2155f74d8b90425697c7a5421f31a3d12ee5f6fb904ad82514c9de7f2d1e7d53e43f50aa2b179434ec60a

Score

8^/10

banker evasion

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs

banker

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.androidservices.support

Requests cell location 2 IoCs

Uses Android APIs to to get current cell location.

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.androidservices.support
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.androidservices.support

Acquires the wake lock. 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.androidservices.support

Reads information about phone network operator.

Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs

evasion

description	ioc	Process
Intent action	android.settings.REQUEST_IGNORE_BATTERY_OPTIMIZATIONS	com.androidservices.support

Removes a system notification. 1 IoCs

evasion

description	ioc	Process
Framework service call	android.app.INotificationManager.cancelNotificationWithTag	com.androidservices.support

com.androidservices.support
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
- Requests cell location
- Acquires the wake lock.
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Removes a system notification.
PID:4654

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.androidservices.support/app_webview/Cookies

Filesize
64KB

MD5
cb7543c4df600f2af58097cce0e334ba

SHA1
83cc92f38c27fdb4fa519b1ce2f37912f24af1f0

SHA256
64c022ae708f94ffde986e105d88f708884de325720bfb9925c4160a6d417233

SHA512
ad51cad0472327bd68aa2d791341cfafed58971752352537bb603ed18b15a3f9185e9150983a28ecd09606e8dcaef6d1c9d93213dd246ef7720f39842eb3d980

Download Submit
/data/user/0/com.androidservices.support/app_webview/Cookies-journal

Filesize
1KB

MD5
4af6e7d570a2d3228261e2cfb187154d

SHA1
b52d61f7494250796d2c93d5e67607e09307077d

SHA256
fbc1226cf5bbd4f27af4ab69ea554eedc2dfc055d15241293a12eaae20225d9c

SHA512
dd9d26f684c7089adae9389d2049d0b1c306cc07485efd23b113965db8ef511e37e9cc8e6beeb98739bd48c97e5bb54140a08232032da194a13337b570f04d09

Download Submit
/data/user/0/com.androidservices.support/app_webview/GPUCache/index

Filesize
20B

MD5
93027d42b314432c4216e6cfca48b384

SHA1
43448dd8102979c3926828182579691945eedd4e

SHA256
3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

SHA512
a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

Download Submit
/data/user/0/com.androidservices.support/app_webview/GPUCache/index-dir/temp-index

Filesize
48B

MD5
2794f3f32b54ef5f8b180530a9c527e7

SHA1
c1de7112a22d5889d36aba44e075b41ccceb839c

SHA256
c03bcd96c1816f3d756a8742fa56cb78ea8ea6033e0913c69bdd93931d988e10

SHA512
5dc292667f18a6d43a4ea3f4871060996a07698b00c953a167ce5293379fc433fc6aae00786ed350f54ec140df15094ee21c7436c3ea1e2072e74c480f41bed6

Download Submit
/data/user/0/com.androidservices.support/app_webview/Web Data

Filesize
104KB

MD5
dc79f9ce5f3ab5270b33e61119dfc959

SHA1
1844bf222a5144b513dcf2fb50a18c011701c647

SHA256
47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

SHA512
18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

Download Submit
/data/user/0/com.androidservices.support/app_webview/Web Data-journal

Filesize
1KB

MD5
7ff472421eb318361fc616c68306b60a

SHA1
7a9502efa463815257c5c563bcf75b8a87e66933

SHA256
aad2c2329925aa1681fb143885c06814b2bb066c973799297d2c4ac77aa67c70

SHA512
f5e622b48127063722056cbec1985528627090b2ddc5ac784814617451b075b566f479744bd246e2486ef273192db1161df40ae70941c02d7dda283b98bbc55a

Download Submit
/data/user/0/com.androidservices.support/app_webview/metrics_guid

Filesize
36B

MD5
f9941b1f7451449590f4c60cfa0dbd78

SHA1
38dafb8974888fe559e30f8a32e7c9290f80216d

SHA256
5838711ba1139cff1174a44f81d1b18b747c52bc15485018952dbbe5b29c1117

SHA512
158b64d12bc80c4c1612a27c23132b77fafa796e455696dda3232cc0ebcafdef0267d8245160be6848a68317c28cc32acd3202170e24152aa85a741a8ea11b08

Download Submit
/data/user/0/com.androidservices.support/cache/org.chromium.android_webview/77e371dbde913892_0

Filesize
120B

MD5
35340ddd7450297e868dea2dfc20bda6

SHA1
7adfcae40837950a3e579473e30f7793c8abf830

SHA256
cad5eef60009183c2a4b80358e751fccf675bbb7dc7485d06088c41fbd5da7a5

SHA512
06c0e466bc6c0bf8f643c2a2168450f032602a9384b51f6f2555fb0ece0dd334fb03c04b3485b90341910e604cebacc2dc4f8f35ff8f9a29d82b5f670e535f05

Download Submit
/data/user/0/com.androidservices.support/cache/org.chromium.android_webview/index

Filesize
20B

MD5
93027d42b314432c4216e6cfca48b384

SHA1
43448dd8102979c3926828182579691945eedd4e

SHA256
3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

SHA512
a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

Download Submit
/data/user/0/com.androidservices.support/cache/org.chromium.android_webview/index-dir/temp-index

Filesize
72B

MD5
d9ae5c37667f2ef5ba3b817bf7cfcb66

SHA1
d04fe2b328224805b71abee26da42bfa1d255ea0

SHA256
2fa5bbf54c3c4dbe606b910e68b22a2ca5baf5fee0a7fc434d8d2ec6215aa870

SHA512
4a7ef263695b3235211895493c8e304d56256bccbde4f4e46b4087571e94f4ca9e59581b320676a6ba844ae0fd442e6d5c07f0ee7e86a253e55c8b6f914324bb

Download Submit
/data/user/0/com.androidservices.support/cache/org.chromium.android_webview/index-dir/temp-index

Filesize
48B

MD5
45c6b8916eee354e938aee4df0a47c30

SHA1
ee023623ad16008e597ba6278bf843aecfdbfe69

SHA256
cf6acb00276137f10fabe0d9a7ecd840f51eaa754f6504585dbd7160633ea618

SHA512
e8fb8c0b388965cd887bf98fa3e594dab512f1bef4e970c6fc01478f6915fd3c9d16689d41ad27e4566358619f7cd23cd9e7628b7eefc9a67d1c3b68dc76ae5c

Download Submit
/data/user/0/com.androidservices.support/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/user/0/com.androidservices.support/databases/com.google.android.datatransport.events-journal

Filesize
524B

MD5
d5e7dbc3ede8d79439ba52faf4520e28

SHA1
101ce1cc266e453a56538581adf6ec24cfaa4f81

SHA256
ad04cf77dea35beebd291556e9bccf8b82aae163e0ac0ea1257d79a5e2167742

SHA512
20c88c4d45e2cb337a05bc97107cde470b978c9307ac7f7c7c60404e5e9e32f4189e86ca92d6430093904008519bc40d821ccd6c3092ca78bba2510362024966

Download Submit
/data/user/0/com.androidservices.support/databases/com.google.android.datatransport.events-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.androidservices.support/databases/com.google.android.datatransport.events-wal

Filesize
52KB

MD5
6a8e3ffff1a4ad13a8614ebf98c8f8ff

SHA1
85309511ce7d8226405cc40907a92407d5105ac6

SHA256
41b552f12419dcce0bb29853b220d19458dc86b86a8c3c49eb012d78af10916b

SHA512
9210980859a37595b5d1ccffd484ea0c451af17b656c569e5fa0bb7fa323bdcb153f127461537d273626b3b22ecaddfa7873a022b2e1ca5673193180235bc1c6

Download Submit
/data/user/0/com.androidservices.support/shared_prefs/WebViewChromiumPrefs.xml

Filesize
127B

MD5
21223e9184445fe043476484cd8cb1f9

SHA1
2b4813f849121d60ba35eb0889080668bb62c778

SHA256
bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

SHA512
be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

Download Submit
/data/user/0/com.androidservices.support/shared_prefs/com.androidservices.support_preferences.xml

Filesize
125B

MD5
95193bb7767215a9c7389e8725406492

SHA1
102e83aa5be2e1df31c7c8d42e6449d5b19f72f1

SHA256
abffcc3e995f3e080822769dc079718186176b3eec0e20c32c12a3c87f9a554b

SHA512
040a4c73fc63a50f1a087eb1184b623c490b04f80006cd5611c38b30d19231116f891395b447a1e7a7efbf1740947c35d1d2a2476eada7d8f6c01f0743ee60ba

Download Submit
/data/user/0/com.androidservices.support/shared_prefs/com.androidservices.support_preferences.xml

Filesize
171B

MD5
44fc0850407cf4a6ac52baa09f3661a5

SHA1
89439ee53a7d7e482841b3b68a7ede3a71c56c88

SHA256
065019c2db11209b8c768744050739aeb352ea63be7f3f5d3134a69e70355e66

SHA512
1b9a5217f079c59c65f8e0fb935c9a33e4d0a07a593ec6543d217058abab1562b71ad07def80c30cd50a58d5affd0cd7b79f7f2aeb7e8f458ab1678afcc1c7be

Download Submit
/data/user/0/com.androidservices.support/shared_prefs/com.androidservices.support_preferences.xml

Filesize
302B

MD5
4be66c396930296f78c60a469c477096

SHA1
abdaceb9b965296f5bafdaed450e682354a8f87d

SHA256
ddc06f6e151dd754c0cad4e97ed08c9d483b8f0c0d4129149abad27cd63f284d

SHA512
57306e71b2abfbed6e83cc5b059f670f7bf0af5dd06ec5f8c17514bd932670bd3c2865a7ad35ebdaad084fda63c8a6b82d7cb55ccaa0a57b65cd4b1b4b7a2fb8

Download Submit
/data/user_de/0/com.androidservices.support/shared_prefs/move_to_de_records.xml

Filesize
128B

MD5
0e777fa46dc7b378b14a465da934467c

SHA1
ab7497b8b32d70c9fc2a5203ab618920d0601253

SHA256
63b2de8ef589db15b161ed905df89532d0b8ecdaeccf08f4771a4a2206089eac

SHA512
f43b46b82842ea2823ebcef50b7677e44c18675b88596e7abc6c090759af93b784c81e74f0f43b7649fa36c5582dc33338c6eeb7f5ef42d8967ad81d54e601e6

Download Submit