5980970d9e881729130be9099c573f752bc2bbc919226b3b8ab539dcafbdfd26

Analysis

max time kernel
2774993s
max time network
157s
platform
android_x64
resource
android-x64-arm64-20220823-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
submitted
23-11-2022 15:27

Target

5980970d9e881729130be9099c573f752bc2bbc919226b3b8ab539dcafbdfd26.apk
Size

1.5MB
MD5

c1d3414273c4143844b9ac8ca4afe173
SHA1

962ac3c5d2957bd5b9dbe38712c93579103f84d1
SHA256

5980970d9e881729130be9099c573f752bc2bbc919226b3b8ab539dcafbdfd26
SHA512

8e9ef14a92f6cc53b78e7d0f4b482d2374932b07a457fcdc01f9452869fdbc921cd2401991b7ef6982ec20ea71ddf1604e4eea93307b94054b057c6b4898150b
SSDEEP

24576:goshv8MvUZ4Er1euZf0sIRS2mo4qBllWXMCxfgiA6yxQONQ99ewjmZD7Vkv23xA:+0MvUZ4EbfzIRS2zCXMCxftByxQ/Xewz

Score

8^/10

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
banker

Processes:

com.sdwiurse

description ioc process

Framework service call android.content.pm.IPackageManager.getInstalledApplications com.sdwiurse
Reads the content of SMS inbox messages. 1 IoCs
infostealer

Processes:

com.sdwiurse

description ioc process

URI accessed for read content://sms/inbox com.sdwiurse
Tries to add a device administrator. 1 IoCs

Processes:

com.sdwiurse

description ioc process

Intent action android.app.action.ADD_DEVICE_ADMIN com.sdwiurse

description	ioc	process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.sdwiurse

description	ioc	process
URI accessed for read	content://sms/inbox	com.sdwiurse

description	ioc	process
Intent action	android.app.action.ADD_DEVICE_ADMIN	com.sdwiurse

/data/user/0/com.sdwiurse/files/config.properties
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/all.zip
Filesize
140B

MD5
9462501fe1222c7f18e0bc996fab9c7d

SHA1
b017a76a8507e4965e510f13aafcefdd73555812

SHA256
900b5d2a433333c9c779684730abfa8e32d110d7f1ddd9dc045a03db8888c91c

SHA512
dd9142e7b1e1c0aa5ecb04b994b78c7ac01c5d0dcfed9c68293907977ec1b830792d927e17c591874c35b298f48378748b1f38fae999aea00379a8b5a44cd6c4

Download Submit
/storage/emulated/0/phone001.txt
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/temp/sms.txt
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit