Analysis
-
max time kernel
2708736s -
max time network
132s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
22-11-2022 23:26
Static task
static1
Behavioral task
behavioral1
Sample
1a89482cdd1e8d609b57d62a7c3b59029578e3df0c21defa6b5bbd6d1a798284.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
1a89482cdd1e8d609b57d62a7c3b59029578e3df0c21defa6b5bbd6d1a798284.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
1a89482cdd1e8d609b57d62a7c3b59029578e3df0c21defa6b5bbd6d1a798284.apk
-
Size
7.2MB
-
MD5
6dfd521922e106cc4b2d058eb617c3bf
-
SHA1
6996184d3026cf8e791843fb572270bc176ba5ad
-
SHA256
1a89482cdd1e8d609b57d62a7c3b59029578e3df0c21defa6b5bbd6d1a798284
-
SHA512
db32a2e6e21505d69aa651300c027a65859e034bbb354fb389700e0a7017dfba7e37ea9b7223bd03b80f0ab5cb47273503db3553161748020fc6ce60d9ec0465
-
SSDEEP
196608:VJw5rZUia5W1WcgQBKNYZ1Lj08gUJkyZTSqjRcMiXx:VJwHa5W1Wcg0Kizv08gUJ3lxyMiXx
Malware Config
Signatures
-
Acquires the wake lock. 1 IoCs
Processes:
com.icloud.game.wrzjhdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.icloud.game.wrzjh -
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.icloud.game.wrzjhdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.icloud.game.wrzjh
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
148B
MD521b3e05f7b50a7cd9a3a50d11656a2ba
SHA159e0e94398e3627b666f80fc8da4a558ce9fbf51
SHA2566de89c6d8744eafed8a11fc753d003ca94a31b97a30b60fdabb596cc076f11f3
SHA512753699f9e3fb0a22ddc55601f66f617b6d7078165d610a5f5879169202a593c99a35ec31c941e09fed77dc165149ed98797d3051ca9e1ee068a67eddb4635f37
-
Filesize
314B
MD5273a8904e991b10f96f2a7318103b4b4
SHA1b1ca6e823f460cd3a696d8baf427f3403620377d
SHA2565a8c616d680c4e1f38806d4904c87cf990bf442e13455e7f9d3ad88f2eafc43a
SHA5122e4fa0aa8f39523c20dbc5e6963b173ac8928d214aed5bf487845d2cc987eb6be03c9d6c2691b603ccb3f03be33ed829f570298d175151e33f98ce3a2b65d07c
-
Filesize
157B
MD59cb273e8d18115bdad927c71faba8168
SHA154a51d419e366086c431275778e717d8843d738a
SHA256be16e46625f810d4f087438b3ca30a06e12ba44740be691445928e767350f662
SHA512beba07f2b51790da88de6b351c5a7e2a3794ed7e99c06f4bb766ed782b0fc39c9c79e579129a49806a2dd351f7e29be8d5ba7ea9a3fe44610ebb1e207f3899c4
-
Filesize
128B
MD533e4b83e5bd867ca818971df457788b1
SHA15fa92bfd2f381cc6518318c275dafa0d5b5f7212
SHA256feb28336676e3a14d80b5bf407632227f30ff363c53f8ecace1c4ad0bc7986e4
SHA512431e25969962ebbe7864822252718585b330aa451970ab246978fa200290b591df9e51aac1128b5ec0179ea4f6469e7677da8e5779fec9d35a31182fda1847a5
-
Filesize
534B
MD5c3026b945f77bba2b96c15f1c172b9aa
SHA1f3655112d47cb47ad2adc84e3cf988767ba63e02
SHA256a3b5035a72651009a1da8cd29404d7d2bdd2aed3f41df7aca7124d6e6b8c6977
SHA51220ac3a7425b29c32c6030eebb17359936bdb16a1b3bb40fc0a456074a233fdc0b9e4d8c7fec65dbb0fa0cc995f3260ae06d1126c37b2b6050787ce78c5183758
-
Filesize
117B
MD5ec70ac8fccdbac1e27e7b430113ce46d
SHA1e8991a2569c38803ce284d50ed7b730e67556d88
SHA2562766a19d70b3d9961e2667fc785a361c1ca34e87d1f43cb96aadf388840b1d9c
SHA512b6551a9c9eb99211ca2ddc44c6a3fe0d4f36a730947ed3955c9258c58d36335173b947b0a49b1c9371e635613f6793acb715a98e487a769c0639775ef3c054db
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e