Analysis
-
max time kernel
1162069s -
max time network
152s -
platform
android_x64 -
resource
android-x64-arm64-20220823-en -
resource tags
-
submitted
16/09/2022, 07:44
General
-
Target
10e1296058f36bc3542e03858e921251d266a11bf245acb2ea4af89858bc11a4.apk
-
Size
20.6MB
-
MD5
e696972add3d05256d98df9c9354a624
-
SHA1
0b25bebc06de09611e0411f4b96342e4fca1a540
-
SHA256
10e1296058f36bc3542e03858e921251d266a11bf245acb2ea4af89858bc11a4
-
SHA512
662521855ca508788a310880b270899392416d9d50cc815eb6feb96258f8b19290ff9bee5ec3e9a910fef382732a1b3e66130936075c81951d1851bf948a238b
-
SSDEEP
393216:BYnsJA35z7A79L+mE/1mbgafiubcjZLbxT9i/zVN2I+TXd5UKpPbNiRSKcsZJN:B1JA35z7c5I9mbBffcNLbi/zVN2Ikta/
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
-
Acquires the wake lock. 1 IoCs
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
-
Queries the unique device ID (IMEI, MEID, IMSI).
-
Requests cell location 1 IoCs
Uses Android APIs to to get current cell information.
-
Reads information about phone network operator.
Processes
-
aob.kwbzrita1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
- Acquires the wake lock.
- Loads dropped Dex/Jar
- Requests cell location
-
su2⤵
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2.6MB
MD5236eacaec774312c4aef8e0fc1de4344
SHA1598ddc6f2bc37c4cd5cb76f5d8c7b47701b0e6e0
SHA25624e7c4a6906e7d11ff456d163861e41fa77ae2a01a5b2030daf1d64efe7470a8
SHA5120578e61fd378169dc64d282648de874a0a032152b4a3f4bc5a960b17de8d445aa0e1140083e455c7d826dfc77ea5332c7a1b368bd747c293b39f3c2f1cb913cd
-
Filesize
1.2MB
MD57966b622501444be4717bccbf53e2a02
SHA1fcdc15d13ac100549004ee331bf051f3bb5b4521
SHA25657ecfa98026ceed713a4c437bacbed2f2f3716ecf36c44f122e1d6c06ab58ae0
SHA51267357f5c472d7a750f21cd908196bb6fb76b6fd8989c2d8a2bb55306f5dcd2b6a820273d3814c0e87d9f0d8c59ea8b7dad697bd6b748e499caec3ac47954e8ba
-
Filesize
920KB
MD5c40b870e7e989a65fd7379378ec45423
SHA1b583882e4e6ea29935d35d91785c04646a0c756b
SHA2565604665bdc058b9bd60fdec722d85b314b35a1d642e8f81df063a1a69773fa17
SHA51245929243a657049e96bd747c17680563187795f58b9777e3ec3debb5c4498911360249d84aba810f33966007afd6dc4f391bf4b360b9c428a60570e0ecda9ce2
-
Filesize
1KB
MD56aa1023325335e2160c702c883a373c7
SHA167fe5f8a1144a8da314cf41363133f3bdc9e725c
SHA25611807264078dc16985d3cd5c8a6bba82d2ff3c4a526ea4140b92afb45019f73a
SHA512d767431e522b73383f1d1484b0fb79808bd7add4eb649072ad854d2f6ba4db87e9a5539752b1686a9a72d0e4aa9d0e1ba2a7d5da422cd06be5e4ff22be586bc3
-
Filesize
2.6MB
MD512bf47e5f49c23411fc2b7f3b2a3c5d7
SHA1559c0a430712cd06b42b8f40db03f0c6fb9f949a
SHA2560fa8af0f8b32d31166c1b2e797818c2387fba6b676a17fbe890b0eb0c6272e10
SHA512e01e262ad169a0a67c51ed0be21aee5f0d62539592fdc58fc31c928966bcdf285a5930eae52f5dee63b6744065b7791d832abbcc6bb0afa9d9d53845fecc4b7c
-
Filesize
1.2MB
MD5e294a13036c08d9699255b1443bd22bb
SHA14dcf9b92ddfa02eea32f3284b2e6a26df13630e4
SHA256b5e949d3d4389e472dc0f5b089dd7c1ff996c1cd3c5ab5c18b269c42c57e5542
SHA5126f945cac9ad0387b3fd6462487ec6021b8dc95446133e0f2eda913960e138c0c430339371d4e0d299a1e20cd1b55a2c1037d5702fa4395e7d50f05f189ec6872