Analysis

  • max time kernel
    2771541s
  • max time network
    156s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    23-11-2022 15:27

General

  • Target

    feccbcd13692e99b547618a3ed967fd2b1bd76cee9ba0fa677d990f1c49eb5a3.apk

  • Size

    441KB

  • MD5

    b08a519ccb9cd0b1bf34d157a5917cc1

  • SHA1

    e86cf3e17d3e48b42709f0cb1803b53ccd910b50

  • SHA256

    feccbcd13692e99b547618a3ed967fd2b1bd76cee9ba0fa677d990f1c49eb5a3

  • SHA512

    3b0b6e1116a6a00348b89712b435cd360a823e3b5e1c6a6fcd240656b9282ecdb58512c60c07996aaa1eabe578c6d0e13c06c3814f16b806cd9befb661c4c8db

  • SSDEEP

    6144:juR9UmXkbH5+dnjxErCxB5DwfagptZ6ohVTkLX8R7NpjvwIpiQHCcQKZxXkTmwYl:wF6Za1Ea5gf28pwIAQ4KZxXMrDA/F

Score
7/10

Malware Config

Signatures

  • Queries the unique device ID (IMEI, MEID, IMSI).
  • Tries to add a device administrator. 1 IoCs
  • Reads information about phone network operator.

Processes

  • c.l
    1⤵
    • Tries to add a device administrator.
    PID:4092

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/c.l/databases/simple_pref

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/c.l/databases/simple_pref-journal

    Filesize

    524B

    MD5

    6d673ffe938c90ae93160c67ab4c2ef8

    SHA1

    7245527793a1ef9e8e0c3a4b82e2071daedda370

    SHA256

    6cbe308afa9bd92231c80ee8b1865f43846e657bdd51e3c5c882367edc0fc04a

    SHA512

    1ff78a91117c53c12012d97f68803d68957c870934c010419547ae707d1126292296f6d614d90d113729306d1494a98a12803fcf2cf2845779202593b1b8b8f0

  • /data/user/0/c.l/databases/simple_pref-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/c.l/databases/simple_pref-wal

    Filesize

    197KB

    MD5

    d6f3035632daeece0cd65aacba38d90b

    SHA1

    ffe424dc6434ffb5359a7a5eb20e2c69844f135c

    SHA256

    20d1426992348e00d352d7f39667486115fe05ab77bd56fb4ec95862f1169c10

    SHA512

    41464c95893e127976789b4a7f4e45fda4f22b6e0a4e6f499a9e067a6150f36b0d957883e8c33ab8b13845ae37b98dd7eaf7c60333787f7a2bd8cab1b3f0f4ab