Overview

overview

10

Static

static

7

B01B74AAF2...52.apk

android-9-x86

10

B01B74AAF2...52.apk

android-10-x64

10

B01B74AAF2...52.apk

android-11-x64

10

Resubmissions

06-10-2022 16:35

221006-t3xqtshhe6 10

12-08-2022 07:30

220812-jbsyfsadar 10

Analysis

  • max time kernel
    2921949s
  • max time network
    132s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    06-10-2022 16:35

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    B01B74AAF249D0740F541C081C0C0DE4BF455B4B68F2634FAB6CF8AAFCD95D52.apk

  • Size

    2.3MB

  • MD5

    0533968891354ac78b45c486600a7890

  • SHA1

    4e9bc1bcbeec32ad93762482b9e1295c7f1bcee5

  • SHA256

    b01b74aaf249d0740f541c081c0c0de4bf455b4b68f2634fab6cf8aafcd95d52

  • SHA512

    cdf2fcb3d7968b113563b602a476e54bdad4bf30548492941d7d18072c4542007c0f29dd2174ce1cf196c0369651788dc01e5d9f8d5ece9fa0aeeeccdf7348ce

  • SSDEEP

    24576:JbuUHfXVoL6D8RyE2cZBGUMfYm3At+y6/DA4kf4TyQ0jPwVCnY4DDMpkghSUPFE+:JqKlomDBy+y6/DPkQzuY4OhxdEuX

Score
10/10
sovabankerevasioninfostealertrojan

Malware Config

Signatures

  • SOVA_v4 payload 4 IoCs
  • Sova

    Android banker first seen in July 2021.

    bankertrojaninfostealersova
  • Sova payload 4 IoCs
  • Makes use of the framework's Accessibility service. 1 IoCs
  • Acquires the wake lock. 1 IoCs
  • Loads dropped Dex/Jar 3 IoCs

    Runs executable file dropped to the device during analysis.

  • Removes a system notification. 1 IoCs
    evasion

Processes

  • com.gdwicoopc.mlwmelkys
    1⤵
    • Makes use of the framework's Accessibility service.
    • Acquires the wake lock.
    • Loads dropped Dex/Jar
    • Removes a system notification.
    PID:4147
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/storage/emulated/0/Android/obb/com.gdwicoopc.mlwmelkys/ۦۘ۟ۗ۠۫/ۦۘ۟ۗ۠۫-k-r-c-p-u-r-p-e-l-s-h-b-j-p-d-w-r-y-s-t-s-j-w-d-m-f-a-k-w-c-r-o-o-k-t-n-g-z-g-z-p-k-f-a-j-k-b-q-t-w-o-p-o-f-m-g-l-a-a-c-j-w-f-g-w-q-s-t-e-x-a-q-t-j-m-g-y-k-z-f-r-w-h-o-k-t-k-z-d-a-r-z-c-e-t-d-x-i-t-m-jfO.sR --output-vdex-fd=42 --oat-fd=43 --oat-location=/storage/emulated/0/Android/obb/com.gdwicoopc.mlwmelkys/ۦۘ۟ۗ۠۫/oat/x86/ۦۘ۟ۗ۠۫-k-r-c-p-u-r-p-e-l-s-h-b-j-p-d-w-r-y-s-t-s-j-w-d-m-f-a-k-w-c-r-o-o-k-t-n-g-z-g-z-p-k-f-a-j-k-b-q-t-w-o-p-o-f-m-g-l-a-a-c-j-w-f-g-w-q-s-t-e-x-a-q-t-j-m-g-y-k-z-f-r-w-h-o-k-t-k-z-d-a-r-z-c-e-t-d-x-i-t-m-jfO.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4197

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.gdwicoopc.mlwmelkys/app_webview/Cookies
    Filesize

    64KB

    MD5

    cb7543c4df600f2af58097cce0e334ba

    SHA1

    83cc92f38c27fdb4fa519b1ce2f37912f24af1f0

    SHA256

    64c022ae708f94ffde986e105d88f708884de325720bfb9925c4160a6d417233

    SHA512

    ad51cad0472327bd68aa2d791341cfafed58971752352537bb603ed18b15a3f9185e9150983a28ecd09606e8dcaef6d1c9d93213dd246ef7720f39842eb3d980

    Download Submit

  • /data/user/0/com.gdwicoopc.mlwmelkys/app_webview/Cookies-journal
    Filesize

    1KB

    MD5

    9603da18f2421846d9c0314c60660a65

    SHA1

    3a9ddffe7146fbb9144ed0e21d5cc9ab7d4409df

    SHA256

    4ee103b7323d216f8c9d221244759b6b0340c39ae3dbd2b45a8aceaa5fe9b517

    SHA512

    8c63d4c72a3c07f84e4c3c0ac006ffd4a8ad9a9f72ad45b95eef533b82e6bcfab7a7b657d425698a2b26800823de16eb190b4d0e72d670a32f24303e464e2df1

    Download Submit

  • /data/user/0/com.gdwicoopc.mlwmelkys/app_webview/GPUCache/index
    Filesize

    20B

    MD5

    93027d42b314432c4216e6cfca48b384

    SHA1

    43448dd8102979c3926828182579691945eedd4e

    SHA256

    3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

    SHA512

    a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

    Download Submit

  • /data/user/0/com.gdwicoopc.mlwmelkys/app_webview/GPUCache/index-dir/temp-index
    Filesize

    48B

    MD5

    af83b53c5ee6dcd978ff70f52bb5093f

    SHA1

    b666c0b85e1449b11c22eec7449d16da1f30af95

    SHA256

    d25073e01570712afbef76b8fb6a75c9a39e6c4d56039f1c7c38cfe143b85635

    SHA512

    2ce9c7f020b29ffd02a3f1cddf86a50932d72138e7a932800f8382cd963d8332e23055e1e0ff390aa7b0d165d01e8d178b42e60f0b2c5c41170c8a8474707925

    Download Submit

  • /data/user/0/com.gdwicoopc.mlwmelkys/app_webview/Web Data
    Filesize

    104KB

    MD5

    dc79f9ce5f3ab5270b33e61119dfc959

    SHA1

    1844bf222a5144b513dcf2fb50a18c011701c647

    SHA256

    47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

    SHA512

    18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

    Download Submit

  • /data/user/0/com.gdwicoopc.mlwmelkys/app_webview/Web Data-journal
    Filesize

    1KB

    MD5

    c2ab0cb40727189944d4a82fb56e6d7c

    SHA1

    998dc82fb5d4ce00ea44d37e8d3c0923257b5026

    SHA256

    a08bf7d8fca9294bcffece530b026dc1bcb0bf58fa376e17206d6f698fc31cad

    SHA512

    6215ba1f98c1bed3b123e8d1bfa92a450b67e53ed38d382538eabefa0c01edd0d3975a0d9f83241a5752d2c7304760a68272087d16d4ba76aa441c56f0125779

    Download Submit

  • /data/user/0/com.gdwicoopc.mlwmelkys/app_webview/metrics_guid
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit

  • /data/user/0/com.gdwicoopc.mlwmelkys/app_webview/metrics_guid
    Filesize

    36B

    MD5

    d170a5a6877d690adbc666a7ca7dfc66

    SHA1

    4909a44790cb8bd8a387babf0478327a44239b8b

    SHA256

    d5296b717c06e35ea1bac2bf9da985b276b9ba303329429b8bab2411d6e8b0a7

    SHA512

    d7f86c49da71a8e20863c027b9479cea4ee654d68daa8771843407a48d88c9670b2764c625a3495bedddb6d92325226a9f117ca4b8c95d36ff2b856a82871db6

    Download Submit

  • /data/user/0/com.gdwicoopc.mlwmelkys/app_webview/variations_seed_new
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit

  • /data/user/0/com.gdwicoopc.mlwmelkys/app_webview/variations_stamp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit

  • /data/user/0/com.gdwicoopc.mlwmelkys/app_webview/webview_data.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit

  • /data/user/0/com.gdwicoopc.mlwmelkys/cache/org.chromium.android_webview/90a55387e95cf3dd_0
    Filesize

    248B

    MD5

    fa1af7073342404710f39e5a950c29a7

    SHA1

    98d43655c18be2943910ce398dfe0cbe1c85d5f5

    SHA256

    8e962d5e0b2f6cea75abb3937eae09c04c2f7bc0142f31ad5711434b1cea2641

    SHA512

    e4eb93155fd1f164b217e664580e3a9a8be39ca88066e5c7472a76a30a9ab32a8733e7c5df255d2e44cf78072a9540584c63a0c06520982fc05f2038eb1bbaaa

    Download Submit

  • /data/user/0/com.gdwicoopc.mlwmelkys/cache/org.chromium.android_webview/f3337cb1992247df_0
    Filesize

    175B

    MD5

    446fc19d58a370f60f0cce237fa62c21

    SHA1

    7a5925cfc4ffc3c889ed1c9457c6a291917b1e6b

    SHA256

    c5e05dfc9119126e6b7e71edd27bcd5fc544e2a6886e9218c9eb8eba64610d51

    SHA512

    311ea799628faea00ead7a67c9f0a446b21d19bdcd4105af88cb592723ad03da1b71758a8b94f05f0235a2877d49f6fc7aca5526f7b58d61addb4ed4ed474774

    Download Submit

  • /data/user/0/com.gdwicoopc.mlwmelkys/cache/org.chromium.android_webview/index
    Filesize

    20B

    MD5

    93027d42b314432c4216e6cfca48b384

    SHA1

    43448dd8102979c3926828182579691945eedd4e

    SHA256

    3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

    SHA512

    a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

    Download Submit

  • /data/user/0/com.gdwicoopc.mlwmelkys/cache/org.chromium.android_webview/index-dir/temp-index
    Filesize

    72B

    MD5

    7dfbf7f5c54710c2880e3db99d309077

    SHA1

    d48569f48be466bfd201f9b342bdec34adb6a97f

    SHA256

    f3a76153f14d4868ee271d2955a4ae752427bcf35c053c70decb309248946a0e

    SHA512

    468fefdd4880552bc0f25bbd8793d197b48ab39810e6b2c94bc110a2757ffafcaed4e8652135d889624b59a268d95c02d1b0dac008db56124e6f38ad5839297e

    Download Submit

  • /data/user/0/com.gdwicoopc.mlwmelkys/cache/org.chromium.android_webview/index-dir/temp-index
    Filesize

    48B

    MD5

    38a6fcbd4a4d2d2b2179cbebbbb1886f

    SHA1

    d6830d98cd0a17d8604f0490518d47c61969e735

    SHA256

    c05deec24f9e92f092ec32f3d498c214052e14970e5a29bf6786c066dcfabdc0

    SHA512

    294d5c53b8c1b74e6d289544364683ee8658149ad49a19d8fd2f1a485e0ac077783d7803a0a417109c253531afd70673519fe3646135e8209a98e7f6909f06f1

    Download Submit

  • /data/user/0/com.gdwicoopc.mlwmelkys/shared_prefs/WebViewChromiumPrefs.xml
    Filesize

    127B

    MD5

    21223e9184445fe043476484cd8cb1f9

    SHA1

    2b4813f849121d60ba35eb0889080668bb62c778

    SHA256

    bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

    SHA512

    be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

    Download Submit

  • /data/user/0/com.gdwicoopc.mlwmelkys/shared_prefs/app.xml
    Filesize

    121B

    MD5

    5535ae3843517e6073e1642921beb1ed

    SHA1

    868e60832ea64690cb818624df595ddbd17cadc3

    SHA256

    074130eabfb009728aa65a15e3edd9c1014be0fcd761dc970163360444b7a4ce

    SHA512

    57b45ef51c396baad839ed4416537528d3385d260b3e598339c2a240998c33dd705c930a1178309a5cc2495f298fd0161997472f5cae463c22a1bcd74bd259d2

    Download Submit

  • /storage/emulated/0/Android/obb/com.gdwicoopc.mlwmelkys/ۦۘ۟ۗ۠۫/oat/x86/ۦۘ۟ۗ۠۫-k-r-c-p-u-r-p-e-l-s-h-b-j-p-d-w-r-y-s-t-s-j-w-d-m-f-a-k-w-c-r-o-o-k-t-n-g-z-g-z-p-k-f-a-j-k-b-q-t-w-o-p-o-f-m-g-l-a-a-c-j-w-f-g-w-q-s-t-e-x-a-q-t-j-m-g-y-k-z-f-r-w-h-o-k-t-k-z-d-a-r-z-c-e-t-d-x-i-t-m-jfO.odex
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit

  • /storage/emulated/0/Android/obb/com.gdwicoopc.mlwmelkys/ۦۘ۟ۗ۠۫/oat/x86/ۦۘ۟ۗ۠۫-k-r-c-p-u-r-p-e-l-s-h-b-j-p-d-w-r-y-s-t-s-j-w-d-m-f-a-k-w-c-r-o-o-k-t-n-g-z-g-z-p-k-f-a-j-k-b-q-t-w-o-p-o-f-m-g-l-a-a-c-j-w-f-g-w-q-s-t-e-x-a-q-t-j-m-g-y-k-z-f-r-w-h-o-k-t-k-z-d-a-r-z-c-e-t-d-x-i-t-m-jfO.vdex
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit

  • /storage/emulated/0/Android/obb/com.gdwicoopc.mlwmelkys/ۦۘ۟ۗ۠۫/ۦۘ۟ۗ۠۫-k-r-c-p-u-r-p-e-l-s-h-b-j-p-d-w-r-y-s-t-s-j-w-d-m-f-a-k-w-c-r-o-o-k-t-n-g-z-g-z-p-k-f-a-j-k-b-q-t-w-o-p-o-f-m-g-l-a-a-c-j-w-f-g-w-q-s-t-e-x-a-q-t-j-m-g-y-k-z-f-r-w-h-o-k-t-k-z-d-a-r-z-c-e-t-d-x-i-t-m-jfO.sR
    Filesize

    716KB

    MD5

    20523fb5f80852f7d03b9ca83d6d62b7

    SHA1

    9423b1f76829b6052918e6346b58fd69782612d1

    SHA256

    dd71c863722556aa5967e79619f23063138b678d4154b1991f6417547f3a54d4

    SHA512

    0bf7618ce24b4426a8780fb2eeb223a4f65399ab4daf3f9ef6a212709d3c22f745847465490eac4f892e97546d4da98be8774f2421271a51f35c498ca4e7bbe9

    Download Submit

  • /storage/emulated/0/Android/obb/com.gdwicoopc.mlwmelkys/ۦۘ۟ۗ۠۫/ۦۘ۟ۗ۠۫-k-r-c-p-u-r-p-e-l-s-h-b-j-p-d-w-r-y-s-t-s-j-w-d-m-f-a-k-w-c-r-o-o-k-t-n-g-z-g-z-p-k-f-a-j-k-b-q-t-w-o-p-o-f-m-g-l-a-a-c-j-w-f-g-w-q-s-t-e-x-a-q-t-j-m-g-y-k-z-f-r-w-h-o-k-t-k-z-d-a-r-z-c-e-t-d-x-i-t-m-jfO.sR
    Filesize

    716KB

    MD5

    20523fb5f80852f7d03b9ca83d6d62b7

    SHA1

    9423b1f76829b6052918e6346b58fd69782612d1

    SHA256

    dd71c863722556aa5967e79619f23063138b678d4154b1991f6417547f3a54d4

    SHA512

    0bf7618ce24b4426a8780fb2eeb223a4f65399ab4daf3f9ef6a212709d3c22f745847465490eac4f892e97546d4da98be8774f2421271a51f35c498ca4e7bbe9

    Download Submit

  • /storage/emulated/0/Android/obb/com.gdwicoopc.mlwmelkys/ۦۘ۟ۗ۠۫/ۦۘ۟ۗ۠۫-k-r-c-p-u-r-p-e-l-s-h-b-j-p-d-w-r-y-s-t-s-j-w-d-m-f-a-k-w-c-r-o-o-k-t-n-g-z-g-z-p-k-f-a-j-k-b-q-t-w-o-p-o-f-m-g-l-a-a-c-j-w-f-g-w-q-s-t-e-x-a-q-t-j-m-g-y-k-z-f-r-w-h-o-k-t-k-z-d-a-r-z-c-e-t-d-x-i-t-m-jfO.sR
    Filesize

    716KB

    MD5

    8f0101b8896c699c16acaa37a7343f26

    SHA1

    34b286f4121088c085e89411ac54a44691bd3e68

    SHA256

    6396aa51da3ec835e4f26697fbdd18dff5499878e27264a48221de05aa572aa9

    SHA512

    ce4ccc08254b228c498599cd1bd701ed9e248e66cda81ffc9115b062c461d9944d2fd2f9d9c90f5ceb7ee24db2d092d9a299efb00cd9020e545313d20a650af8

    Download Submit

  • /storage/emulated/0/Android/obb/com.gdwicoopc.mlwmelkys/ۦۘ۟ۗ۠۫/ۦۘ۟ۗ۠۫-k-r-c-p-u-r-p-e-l-s-h-b-j-p-d-w-r-y-s-t-s-j-w-d-m-f-a-k-w-c-r-o-o-k-t-n-g-z-g-z-p-k-f-a-j-k-b-q-t-w-o-p-o-f-m-g-l-a-a-c-j-w-f-g-w-q-s-t-e-x-a-q-t-j-m-g-y-k-z-f-r-w-h-o-k-t-k-z-d-a-r-z-c-e-t-d-x-i-t-m-jfO.sR
    Filesize

    716KB

    MD5

    20523fb5f80852f7d03b9ca83d6d62b7

    SHA1

    9423b1f76829b6052918e6346b58fd69782612d1

    SHA256

    dd71c863722556aa5967e79619f23063138b678d4154b1991f6417547f3a54d4

    SHA512

    0bf7618ce24b4426a8780fb2eeb223a4f65399ab4daf3f9ef6a212709d3c22f745847465490eac4f892e97546d4da98be8774f2421271a51f35c498ca4e7bbe9

    Download Submit

  • /storage/emulated/0/Android/obb/com.gdwicoopc.mlwmelkys/ۦۘ۟ۗ۠۫/ۦۘ۟ۗ۠۫-k-r-c-p-u-r-p-e-l-s-h-b-j-p-d-w-r-y-s-t-s-j-w-d-m-f-a-k-w-c-r-o-o-k-t-n-g-z-g-z-p-k-f-a-j-k-b-q-t-w-o-p-o-f-m-g-l-a-a-c-j-w-f-g-w-q-s-t-e-x-a-q-t-j-m-g-y-k-z-f-r-w-h-o-k-t-k-z-d-a-r-z-c-e-t-d-x-i-t-m-jfO.sR.x86.flock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    Download Submit