Overview

overview

10

Static

static

10

1667994740620.apk

android-9-x86

8

1667994740620.apk

android-10-x64

7

1667994740620.apk

android-11-x64

8

Analysis

  • max time kernel
    1617789s
  • max time network
    160s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    10-11-2022 08:22

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    1667994740620.apk

  • Size

    2.5MB

  • MD5

    a380e4a77ec9dce9a4c22d25c12dffab

  • SHA1

    ce4b6ed7abb627cc843d99533f71634061b1b1c6

  • SHA256

    3e985fb33ddc22af85982b7063f4eedb5b69b8b7162292b6c082fa2d55b12a1d

  • SHA512

    88adaede1b98abf9d7d954e184514262b72f8c176c1f009403aefb46e11fa336ce73f6d931862d260a884d18e0d465ac81095aaab96a58e254164dc3d7a53ac2

  • SSDEEP

    49152:PR/ZD/hr1OPLEdrSmDkokeTIVpHA8l90TGFMGbn9gt09:pRD/GPLydBIvHJj0TGuGhgts

Score
8/10

Malware Config

Signatures

  • Makes use of the framework's Accessibility service. 1 IoCs
  • Acquires the wake lock. 1 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Requests enabling of the accessibility settings. 1 IoCs

Processes

  • com.app.apk.bnltoken
    1⤵
    • Makes use of the framework's Accessibility service.
    • Acquires the wake lock.
    • Loads dropped Dex/Jar
    • Requests enabling of the accessibility settings.
    PID:4145
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.app.apk.bnltoken/app_securecache/unrar.jar --output-vdex-fd=74 --oat-fd=75 --oat-location=/data/user/0/com.app.apk.bnltoken/app_securecache/oat/x86/unrar.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4210

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.app.apk.bnltoken/app_securecache/unrar.jar
    Filesize

    113KB

    MD5

    8031ce709efa1bcc362d2df92c174973

    SHA1

    f6574d9cb83bc981fa452c2a5248bd94c56d864a

    SHA256

    6ae59043e3da1afc899c6548a4a301c7bc8ae91695723dc0d9efc223caadc1c2

    SHA512

    aae67a60fb702ab336b589c5a4fcb87ed4eed6a40e9bd606e71a1975dba1a9a6ea2047ac17d9a1db2de9be0288413f884288f7e1077f0ec6098f1b7c426f328d

    Download Submit

  • /data/user/0/com.app.apk.bnltoken/app_securecache/unrar.jar
    Filesize

    527KB

    MD5

    dcdde49cfca8c5ca3d8896409f737d29

    SHA1

    31d9f6842c2295cc863f66d8251b0fd1cca715f3

    SHA256

    7ae5e407548ef13895444c603f51b8301d289e7573c7864b7d1fc7b9597d52c4

    SHA512

    79891c6c9763243846b178e51253b9b696dad5a4d8ef2480b4c0b665e6071f559ab40fd6f28539b12a3dae5ac6a2120f1ecf43673c2bc67858453406b76e129b

    Download Submit

  • /data/user/0/com.app.apk.bnltoken/app_securecache/unrar.jar
    Filesize

    527KB

    MD5

    ab67d89f3ec1498417391c49d2bec9bf

    SHA1

    0d0861de6a1d7a3273f9f6455d2b9c10f2108534

    SHA256

    1bf58235c5ee396d67adc2e6c57ff63e63266173bc59136383147fc80d59596a

    SHA512

    34be3008548631b3d9d597e5c0d6022ad2c6c428dd87028de6e3c7a1d2a6c3918d1aee81cc4c6b19358a1ef80f9313e5532d257ca2e9b034a3294233f5547130

    Download Submit

  • /data/user/0/com.app.apk.bnltoken/app_securecache/unrar_enc.zip
    Filesize

    98KB

    MD5

    3f11cd6842256acb42da1702bfb10285

    SHA1

    ea1a4d5d22bc74e48644279a07961f32b2239770

    SHA256

    8a92f128d98521521496005b2aa5a8bb2f70c114c70fc81584fd86bf47002951

    SHA512

    cf19767cbbb9bf16858256b157a91ad33a53937238515ae6fcd7105d7c5e262d66d5cd189215b357bb74cd52fb53ba4bfa33581d2a1fe04b30250c28bb8e9fdd

    Download Submit

  • /data/user/0/com.app.apk.bnltoken/cache/1
    Filesize

    98KB

    MD5

    3f11cd6842256acb42da1702bfb10285

    SHA1

    ea1a4d5d22bc74e48644279a07961f32b2239770

    SHA256

    8a92f128d98521521496005b2aa5a8bb2f70c114c70fc81584fd86bf47002951

    SHA512

    cf19767cbbb9bf16858256b157a91ad33a53937238515ae6fcd7105d7c5e262d66d5cd189215b357bb74cd52fb53ba4bfa33581d2a1fe04b30250c28bb8e9fdd

    Download Submit

  • /data/user/0/com.app.apk.bnltoken/cache/2
    Filesize

    319B

    MD5

    80bf606ff54f64481b209c1d90852859

    SHA1

    652652f2096f8d5d8c15715bb81c42f417710d36

    SHA256

    77d3aeb2a7d82637c39113ed3ea18742b5c868eb91032d2c3ee0e3728fe5b005

    SHA512

    c6d83b7036c472bde5fd626ee3d410917569ad775228260c143434fc9bf4fda8566083b5766ae41665ee63d672ac233c98b6fde828edec589060335df36b088e

    Download Submit

  • /data/user/0/com.app.apk.bnltoken/cache/~test.test
    Filesize

    4B

    MD5

    098f6bcd4621d373cade4e832627b4f6

    SHA1

    a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

    SHA256

    9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

    SHA512

    ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    Download Submit

  • /data/user/0/com.app.apk.bnltoken/files/dbkeys.db
    Filesize

    8KB

    MD5

    9a7f3389cf225c38519f34b1e4fff4e8

    SHA1

    f011af30d5cf5a4cd15b0d82b0c00ff1a4c5952f

    SHA256

    bf1be95566105ea42392d0c06a2bd06e6ca724e9c8a5f5cd818813b178821378

    SHA512

    451936320e988c03a84aa6cbb0d2dc6c738eedc135114690e980908a39a0f86867799881bd09faf8843c5b34d57d7a356992d476ac6858083fe5c74600fdefa8

    Download Submit

  • /data/user/0/com.app.apk.bnltoken/files/dbkeys.db-journal
    Filesize

    4KB

    MD5

    dd66c599b5a32483251e9a514a854be5

    SHA1

    1eba88924426fdd99b4552daa1b7fd3b0fa2e686

    SHA256

    80eaca5623afccc404b199bddcc41d2cf4ebf1b6b227af7a969eeef63dfe3c11

    SHA512

    d7d6e677db373ce3c325a065cd1d0b2294540e08e22a5a9e6f323803e9505369eec9b2f2d4d9a1851cfc2871aee95645e27002ea4722fd39d171ffa9eaac34d4

    Download Submit

  • /data/user/0/com.app.apk.bnltoken/files/gvcrfRK.zip
    Filesize

    98KB

    MD5

    3f11cd6842256acb42da1702bfb10285

    SHA1

    ea1a4d5d22bc74e48644279a07961f32b2239770

    SHA256

    8a92f128d98521521496005b2aa5a8bb2f70c114c70fc81584fd86bf47002951

    SHA512

    cf19767cbbb9bf16858256b157a91ad33a53937238515ae6fcd7105d7c5e262d66d5cd189215b357bb74cd52fb53ba4bfa33581d2a1fe04b30250c28bb8e9fdd

    Download Submit

  • /data/user/0/com.app.apk.bnltoken/files/localdb.db
    Filesize

    12KB

    MD5

    e7179ba1abb576a1eb3486db34de4037

    SHA1

    4dc87664c9be3d7a94d4886b7f56f4a8d7b983dd

    SHA256

    409f05ab16c6f1f0897959456d72f94a870b03581569f7c4970b22e541db827f

    SHA512

    50ee847527ad249dcb43d3d95dca9d8bb5bfdc459f6e5d639db4a31895e4f2ad75355451846cb732e380a576f41f1c3af19387cdc9ee7c5e46464c61613e458a

    Download Submit

  • /data/user/0/com.app.apk.bnltoken/files/localdb.db-journal
    Filesize

    4KB

    MD5

    a5fdfceb78c6ba29e1a3d97b5def58ac

    SHA1

    ddc66b2389508adfabd1b555701789af8ee5c26b

    SHA256

    ba00f964ee259f56b221b0f6218811c8706552efc8c183674ca54578c25ca395

    SHA512

    1f91a92c665e929d1fca4251f0b88baad184a006ea2f704e083d5dfa2e636894e7a70598814f94a20369b8eded7d79d57ae9417352425ded84bc03552789687b

    Download Submit

  • /data/user/0/com.app.apk.bnltoken/files/localdb.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    Download Submit

  • /data/user/0/com.app.apk.bnltoken/files/localdb.db-wal
    Filesize

    4KB

    MD5

    7ba435d74750118d26918eb2c9280177

    SHA1

    902cef3dc4e19621d340207ebf93d8c8782528d2

    SHA256

    28ca08009fca8e5de07dd17a8b3f4664c7d6ec7fbf91aeac44bbf61d318948fe

    SHA512

    2cf7323f23b555b5f384446d84991ec4261cfaec25f10cf5866067d57b8ae4741056bdc0875f30daead6f8ac14c09d30a0aba4f26d91148201dbd80b34a0de2c

    Download Submit

  • /data/user/0/com.app.apk.bnltoken/files/messdb.db
    Filesize

    8KB

    MD5

    57a39108426ea4fb8e5bc74accc22a88

    SHA1

    73f83c87418acba44a084cb7055fc5c34f6cf25e

    SHA256

    9d36142e37864417222d54360d821b9a75f31ad31d1f9a45c947edb63ec6b2d2

    SHA512

    f122d601019b7ee6077574897b51d60cf8223780db64e0649a772183c8025ac413d3ce0683c8bf05373e293cb67ebb62d9dfea15d5d16c495bc0628279709b8a

    Download Submit