Analysis
-
max time kernel
587015s -
max time network
168s -
platform
android_x64 -
resource
android-x64-arm64-20220823-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system -
submitted
29-10-2022 09:03
Static task
static1
Behavioral task
behavioral1
Sample
Lite Messenger_1.0.0.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral2
Sample
Lite Messenger_1.0.0.apk
Resource
android-x64-arm64-20220823-en
Behavioral task
behavioral3
Sample
Lite Messenger_1.0.0.apk
Resource
android-x86-arm-20220823-en
General
-
Target
Lite Messenger_1.0.0.apk
-
Size
9.9MB
-
MD5
06b489b49dbba95b26c5f9071f377a48
-
SHA1
a426c05e64ea26ca47305756bed51b5afe9aab77
-
SHA256
efae9524fc88e76516563f11964d09365a2e545597269bb574497c59922ebbd4
-
SHA512
46a383015613816e11bd5bd6268c83a413c534873b2e53be3aa2b68e77d3967de0d056d43b1426a448164765e000a1661464308b734cc2b7b74ee20d8a1a7690
-
SSDEEP
196608:mvPvas88+Q0kBHlAvYnycwXcrLmHJppGESenK18Jfji2G5vY:m3is8FcHPydcvmHrQZ1+f+l5Q
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.litsms.calvin/cache/1613498354782.jar 4633 com.litsms.calvin -
Legitimate hosting services abused for malware hosting/C2 1 TTPs
Network
MITRE ATT&CK Enterprise v6
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
64KB
MD5dfb2098ca7b3bf16d6f5f1e7d3839af5
SHA1ebb7a8bc886062d77a4092bd306b77a0ce7a3e9d
SHA256e4119d32577d7fc63b267cc23eb7a9bbfb12d238f23e08918c38838fe0181224
SHA512fccec45399258eb98220b7f01b492a72b8b3d1254dec6e196e344d89a0376c6ee24534a31a6675c866d4a17256d3ac6823657eaf04e1d386757d0cbfc6597e50
-
Filesize
1KB
MD5698f6d96aef48a86344483e480670d17
SHA1cf5c4dcebe96f6544b37589c16e94b86234bf547
SHA256b210ccbcfe14a43aff344813bccde8144249bb1feadc42d9c18ed9b90be8f84e
SHA512b5427f048bb1273ad8de9d409035754647016a0f50ddefd239bed185776496b2322a32edff9c0f6a69e8610cfead576ad2d90aed5ec33a38108e4cecc09dbe19
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
Filesize
96B
MD5fc18f3bf20711cb53f1e89506f2609e8
SHA1cc676893df81158c1ce39f940eb75ebf20fdfb09
SHA2560f2ade83e0f8a37d352ecdd1810484d4be08d4fd67d5fa9efb9a9a6f3d46684a
SHA5126530c340a818e63a5db52e7d3be9b4e0d2d5b7df44115fa36d22b591ea4f036657b0fe9bd2f64d7b374f64328f269070d759a31b36d8f3f3fb094dcccb5b5d78
-
Filesize
16B
MD546295cac801e5d4857d09837238a6394
SHA144e0fa1b517dbf802b18faf0785eeea6ac51594b
SHA2560f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
SHA5128969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23
-
Filesize
4KB
MD5976b527c20c6aeb252f4f9307e5f3f16
SHA1d7a5936eea6290d89bd49f1b1da087ca3521502a
SHA256a934a9fe672119576e3b76d5345a249b148b986e97c737bc12b0648f36d67300
SHA51205e582db8915222b0541a665348a35dbf99688941368b883983c74f33540cc43918979707e98639fea01fda446e695eb04a815e73acd0f24af63779e5b971015
-
Filesize
135B
MD5be820ad77719e66e46036b51fd6d110a
SHA15ba056bbe0e9186bad1440387a888fea4f4e5c32
SHA2560b4205e5e813a0866b174e034965a39a7f2dbfbc808ef4f98550ba8c875918c9
SHA51216c066cdd1d225e911ee291f5d2cae55930dbf48a3ef75782074f234067b1260aa48bda223fa039b559573df0c4efd754111c93d1f1fb06b9d9a6665f75aa481
-
Filesize
41B
MD55af87dfd673ba2115e2fcf5cfdb727ab
SHA1d5b5bbf396dc291274584ef71f444f420b6056f1
SHA256f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
SHA512de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b
-
Filesize
120KB
MD5a48cd9324b1f8754b07f00d863b840f3
SHA111c6614775b35a58f440971dfc87c8aaac6d6173
SHA2568859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
SHA51235fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1
-
Filesize
2KB
MD563753ec593cf45aa7ebed2d52d236e11
SHA1d19c4c43de651ddad0d0311bd7373a7e6e9a8d6f
SHA2562eb553c5dccea4e31248132c77e94907d61dbe936118158e34bd7ba8eccb6ea5
SHA51284390d331e726c442ba104abab5d935c3fcbb99e2c6c07b8100a9ccee3a60a3cf55270c2869dfcf249cce494afecd938939174e602d57dfb8417657ff5b3367c
-
Filesize
23B
MD510a1581ea4147c66e69c927ac61ff1be
SHA106498ba9c332520eaef6f1b77fa7b6bec8c24352
SHA256841ac91feed81778f25e20e45cf78b5dd67064001b34538d1331b55c55de9a8f
SHA5120a8ddf1219457237af08a64d8be4aa89ec29b6d45eb12a0e90bd154d5683763c337289a42c317669e8deed584e825c2bc203570543befbc5197822b68e444f64
-
Filesize
21KB
MD586ce3683020b3f28f4110aac9c769ff7
SHA1876e0686440524927639a4797b2f13b12a26ce4a
SHA256be852340e03b169a28811d1ff41582d19638d9fc0540f237ecb960c45bd07071
SHA51204d03a9963ba49adf5d0d26a21b57e85e21416fcc3d479ce7522149d45f5ab630ff78e590e724695fe29850b08b4dccfa5051daf5d4e4afd9384f7183f887ddc
-
Filesize
40B
MD54e691e777d1ac898cb7683e8930e2349
SHA12c0825812b2d0857084f69f6d065c821e1c32f3c
SHA2560bde9e1bc8147c2a0c885ad2fc07b00db21e65e6633d9f4d40b6232da785bf5b
SHA512795ffbc84376c51baf9dcb658377c78ab604ba110e11a3b687d8fbde2b786d6aeeb331121072899652037521f5886eeceaae71247512f0af03af93c348d305e9
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
Filesize
96B
MD51ab05170048f3998783ed6d6d99a36a9
SHA167ae8bb67a3fb9a0d5834360236a6afc160a9a99
SHA2568e07da9f5718bad68f3fc4c3e871e6f97aa6a1502505106154b7aad735f7fef1
SHA512e9d09ba9fe02598d39964c3524b91baf9051d910802d0262cfc3034e268ab24223cc3e08e4be35b5c1f3f4b64cd5a4c1c9c2f4370c843c11b236385e3a05e9d5
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
/data/user/0/com.litsms.calvin/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
Filesize96B
MD5e5b3d979ec9ab3b990e76dbf43874f23
SHA104383e616d6eb05bcc601e2e3296fff7b77ce010
SHA256f850090cf11adfddb6a68a1aa707453fadbddb18507565e95a77c0b3fd884735
SHA5121492a0a7775228d139a117721915c538f7cc2be920f250b6d431cc65bc4d3d2ca647a587373b69d4d33c6cb846585e2f1849cc41906440c949ce1d6d30a55306
-
Filesize
11KB
MD513af85d0c4955c839f0c30e4dea8f7e1
SHA1815c081df279ff5fe2f583689a7bc35fc4e6cbb0
SHA2568fb136a24a87705bbb16da5989bd7d49ad68dfbe98c73947e31f9f012714b225
SHA5123d54e81baf1e9206824344a95cdaff7f2e8300b5e2541f04c405ebae6ebad33c51c3f9d4e01a7beb545444122462eb9682fda7282bf240850602dbe102e20f37
-
Filesize
12KB
MD569783a5df43c4e71ae2c9e3e3106e657
SHA1518f308b1bd24c0a3213aafa9b76dad50d024850
SHA2566ebf404d34a49bed8c6467f8e354644ee15692a92fbb93e488c72f13c76a9d09
SHA512bb79843e3c1a77c67ee22ba443c95d945b754b505f0e5fb81ce0479a8bc8c53ff546b8a393eed2c5382478d1d546178fbdb30cfb8169f6134faceed4a3b61e9e
-
Filesize
244KB
MD51cc978120c6cf3271eee3dff0a958e9e
SHA1ed1eb1e16758bd47414cdad099a239b9ca500f53
SHA25651578f3e6f9ef28a4d4939584b73bd3942ca63d0cf24777cafdf6fd916dc934d
SHA512bc9f07866a87cfe6413adbee05f9140289cd605a263ce3f33ccc90265c04133fe6ce7dde33dd5351a2194925a2dfc604180b40bb1e8e9d7ecc30353f56cfc94f
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
Filesize
144B
MD557a304e3528e920600cb0ac384e4b5cf
SHA14f4e78746f1524b8e4e012b5d2ef1f4bddcce6be
SHA2563a26f6475aa749b007a1ea05a037e76955f966eda04f1f47d991aa0c46ba0246
SHA5128de3092c76753d90b84439153b779df3391b4c7d9813d48fa6dfaf5b21873ff4ff862534706e6d68db8c317244bc89c236ada0df4db6dd9b75a1c18a7b1aa7ac
-
Filesize
240B
MD5d874bf43747e299488c91ce4160641fc
SHA167c24d1db8a2e331a4ec5c2139a1f3617df6cca2
SHA2567a20a28b680077bb98294db71b7c53c095316fe37a569300476aea51ee9e5990
SHA512452ee5cf1332ddc5f4322eccf211356ee9c00efb96152e01043374cd22bdb86ff1c804c44ffcc8b54114ae7402ed0baa0ec446ab6406cdfb91dec6f1697b8105
-
Filesize
57KB
MD5f080fa2a56ab5479d58063e5ea871447
SHA14b3fd57a98916fa5784305b76ba30af26b5253d9
SHA2560aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
SHA5128aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936
-
Filesize
13KB
MD528a28224295bca9e35961756acfce5a4
SHA17ed31445b10e387231d099c211cfed70b3186452
SHA256b36549b323283f2a5d963380c2976777ccb7bc924b655efd82b5cf4031a838c8
SHA5122b3db502ac4e24684f40a644052e1a16995fc96bed3db1ab5558b647ff7ceac40c11ffcf56c8c81f7d7cd6c1a240ff18852f94a82753a6c0087cf0fcb117e137
-
Filesize
8KB
MD5e579a6b00eef1318f9166352228eba18
SHA176988896854f0139083e77862eea1a4846cf039f
SHA2564b34cf505050facf47aa7936e4e7667e1969105665c632b3eefe7ecddf9a6935
SHA512c47632e957d87727bf6504a82ca7a44d8da24d30cd997a0f449a96e4f97c656a1b4d9da3fcd827e2a48c59677688da0b872358ebd0f9369d898d1b8ec18d5699
-
Filesize
1KB
MD5ba92d3847bf0a7cce1db1097ba55a5f9
SHA18afa228a75e09c8116d0b751975758e8e6522003
SHA2567b02d75dd9c0cfd0c82d61b137feb37907229f5037ec19fdfa5cfa497d6ad8c3
SHA512e959aaa8d7c5d5600d13aa65e9956e783e8544aa28476b7490961aa27a51c4e0d6620e672f59eae30ed089efc694ddc6e9a386656cb1a8c9318f1be7fbb1749b
-
Filesize
16B
MD54ae71336e44bf9bf79d2752e234818a5
SHA1e129f27c5103bc5cc44bcdf0a15e160d445066ff
SHA256374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
SHA5120b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27
-
Filesize
177KB
MD50e633c3bd25f2778d5ec9bce2b58b0ae
SHA1fab844bcdfa0b806ab281eb49e31db446a494278
SHA2562272da235290597cdc640289e660be2db514b1fd111ae4d6b77add88266b08fc
SHA5122dcb29a0f6ff67a9c724f83b35d01c0d559e7464597fa4d6efd76ddd3392b02d31e0388ed585be1660f13ca0c8776b444d0e931193ee51ee53043f0fa3287967
-
Filesize
8KB
MD5e579a6b00eef1318f9166352228eba18
SHA176988896854f0139083e77862eea1a4846cf039f
SHA2564b34cf505050facf47aa7936e4e7667e1969105665c632b3eefe7ecddf9a6935
SHA512c47632e957d87727bf6504a82ca7a44d8da24d30cd997a0f449a96e4f97c656a1b4d9da3fcd827e2a48c59677688da0b872358ebd0f9369d898d1b8ec18d5699
-
Filesize
1KB
MD58bad5323d26d6ef3e40bc4761cd73a57
SHA1b1ffad0b63a2f003603450a595577f2ee50768c3
SHA256ac4e532f79d0a39a6c2d6cf28d6d89ebbdb973f80178556728fd453f850ad262
SHA51235e5d6ec599c4616f41ebb3daf06978ae8d588fc719fd4fdb64ea475c138497f6e8c549a5a76beb19d16a949b8c31f8eb6cd16f5db0ecaef1ab02e060742dff7
-
Filesize
16B
MD54ae71336e44bf9bf79d2752e234818a5
SHA1e129f27c5103bc5cc44bcdf0a15e160d445066ff
SHA256374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
SHA5120b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27
-
Filesize
112KB
MD5372eec1e852bc2fd5ebadec646735dfc
SHA116a7ea5948ac60ba78dafaca9bde15bd574ed63b
SHA256deb0ff63eb8633bee6113175a782fc8cdbbe3054abcf7ad8272282814263752a
SHA5129b3a59f99f1fd3285b59ff22f62bd646e88712e4d996747a9be019ce6e6fc7ee676be8059b3c9d07d62063123381eca330b7cee1586994e67e8ddea113fbb479
-
Filesize
127B
MD597ccd9a2b2063143df56b6937f961ca4
SHA15e78a91ae5df289ce83443cb7d5589dd3504fb5d
SHA256248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
SHA51286c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b
-
Filesize
133B
MD5f3cb9fa878b64b2df8f6bf6117554dd1
SHA194a6cdb1b9911ca9933e70083fdcb926ac313f92
SHA2567ed527b2de9afab16984864c6d0ef14b056ae07edacb5b9e4c397971047f263e
SHA5129f1930dde12c5a2e93fcbc2ff955f5dca646ecfded3dd82a8ca02fbe0c39ac5c3098d1c0e1710f9d1cf3a8d496c87715821230e90980f4c9081412bef28078b5
-
Filesize
257B
MD5184de82bdaed32434c0560915c9ec65c
SHA1ecb33de60b3c6c70f633115cecbb7c20d05f3bac
SHA25608e419a2b862e7baa453af0169e262b2f7d947fbbcbd40766347c58bb8e1f6ad
SHA512c8e417f4c4e0dbd0d7c01b2d1b03f3e02157912465587276feec1a799b21932a8e83ebd9d85ace890ca452117a6d5638e061a9fdfad6576944b8d554d36e776d
-
Filesize
5KB
MD52b458f97d809dcfbdefcb70b0f23a697
SHA155e036f2e38f1f0287b453218b60578f7e0c6001
SHA2568e2c264e4e80af3d2f1dfb382ad635c180aaaab4a23e8b1f5fa0c3f0ba91a6c9
SHA512b8b06b7aeb1f7519b3381d2701fe218727c2bfce688d67b091361ee86907c6548e7a0bf4c7745a74ab5631b47b6f7121671e90a279f5025e6044b269bc41ebd0
-
Filesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
Filesize
634B
MD5eedbb6ebb3b5e33dec77c015d441d01f
SHA1c2e83a1340e3e0e585ebed2dbe1c177452b20ae2
SHA25688f2bce3940318f7496ac55b306c41857c479bacad4ea8e4a40fee82a80a9579
SHA5124a874708ce7dbb1c93556dc6c0805cbe8b41296b42857a01a670d00c9b3744f0aee318f76056d04770579d6533ec28e67d9f6f7b9b7ea25c65942f43d422b88d