Analysis

  • max time kernel
    2824691s
  • max time network
    27s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    24-11-2022 02:42

General

  • Target

    4d96e21b964e29c8fb24495fa784fd2f26d063c65c331547e395a1e71bbd0254.apk

  • Size

    177KB

  • MD5

    4c1173f90356c70daa9ebe87c5ee3aad

  • SHA1

    504bccafb7e4660784e73cb6b741ce7ac4353836

  • SHA256

    4d96e21b964e29c8fb24495fa784fd2f26d063c65c331547e395a1e71bbd0254

  • SHA512

    f1118f700df04e45d08a7eb8571666936b4770c933c1a81f60d9ac5dc92c9e61ab62feff02e3334f310abf1cb7d69b41523714dd9679012a6440d2fe97f2f927

  • SSDEEP

    3072:7zFJPj/wBLiFLgMGgPC5+kAMEJG8G/GF17IHBGTU6A7WpXsi:dhwipdYfF86G12bxg

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 4 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

Processes

  • glwlbb.eyfwmaung
    1⤵
    • Loads dropped Dex/Jar
    PID:4860

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /apex/com.android.runtime/javalib/core-oj.jar

    Filesize

    4.7MB

    MD5

    7e343cbc45b618d05182d74bd61826b2

    SHA1

    02ee96263b3b967e570e8ddb1fa36cb21032b71b

    SHA256

    324b5af2ec2d78bb57b1552f429af51ac8d65f7fa277217ae8d4371ab14178d1

    SHA512

    48cbd8a5b246cf9d6ec16558ab12af131439837094c63a64046de384da933593459fb1aec126393bbe3b2b8ca19437f38b68364c9f158023a7b1a35e6901c705

  • /apex/com.android.runtime/javalib/core-oj.jar

    Filesize

    4.7MB

    MD5

    7e343cbc45b618d05182d74bd61826b2

    SHA1

    02ee96263b3b967e570e8ddb1fa36cb21032b71b

    SHA256

    324b5af2ec2d78bb57b1552f429af51ac8d65f7fa277217ae8d4371ab14178d1

    SHA512

    48cbd8a5b246cf9d6ec16558ab12af131439837094c63a64046de384da933593459fb1aec126393bbe3b2b8ca19437f38b68364c9f158023a7b1a35e6901c705

  • /apex/com.android.runtime/javalib/core-oj.jar

    Filesize

    4.7MB

    MD5

    7e343cbc45b618d05182d74bd61826b2

    SHA1

    02ee96263b3b967e570e8ddb1fa36cb21032b71b

    SHA256

    324b5af2ec2d78bb57b1552f429af51ac8d65f7fa277217ae8d4371ab14178d1

    SHA512

    48cbd8a5b246cf9d6ec16558ab12af131439837094c63a64046de384da933593459fb1aec126393bbe3b2b8ca19437f38b68364c9f158023a7b1a35e6901c705

  • /apex/com.android.runtime/javalib/core-oj.jar

    Filesize

    4.7MB

    MD5

    7e343cbc45b618d05182d74bd61826b2

    SHA1

    02ee96263b3b967e570e8ddb1fa36cb21032b71b

    SHA256

    324b5af2ec2d78bb57b1552f429af51ac8d65f7fa277217ae8d4371ab14178d1

    SHA512

    48cbd8a5b246cf9d6ec16558ab12af131439837094c63a64046de384da933593459fb1aec126393bbe3b2b8ca19437f38b68364c9f158023a7b1a35e6901c705

  • /data/user/0/glwlbb.eyfwmaung/app_webview/Web Data

    Filesize

    112KB

    MD5

    b663831f8cc130493476d94f2d7a5330

    SHA1

    043a1956ab8e40821d67043f8a9110a8eb36fb93

    SHA256

    c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

    SHA512

    e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

  • /data/user/0/glwlbb.eyfwmaung/app_webview/Web Data-journal

    Filesize

    1KB

    MD5

    bd12ebc3829b6b2ec9a6b905ed9e60a2

    SHA1

    fd0881bf0cd69d6cbf6739bd6ece1bb020bb9ba9

    SHA256

    0e748218cb5527d5bd3cbeadd1dd7b2db1d33eb0f166da7f79a848a7c5bf0606

    SHA512

    48b51502621b84077b88f1b384e81fe71c74a9f0577aaf6b11dcc172a683ad1fa969535cd89958b9eab4c7dd50ce4cfe9c9204283088a0664e2f1f3059a19324

  • /data/user/0/glwlbb.eyfwmaung/app_webview/metrics_guid

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/glwlbb.eyfwmaung/app_webview/metrics_guid

    Filesize

    36B

    MD5

    2660d7420c5e99539956708c9228b191

    SHA1

    32205314b1f6f63923a85de3b37fe77f5f8808d9

    SHA256

    f776bb1ca6fec434a84c68ec109f680ba2e5c6452bfca31d52c13016b9581f1e

    SHA512

    8fa8540bbde4cde8a50f33c37ea4af1920211362f73ebdc6ccb9b5de8d337fa6eeddfac1c7c19887e8c725b2e6e8dc21196da278f2217876a7bc99ff7f1e3fa6

  • /data/user/0/glwlbb.eyfwmaung/app_webview/variations_seed_new

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/glwlbb.eyfwmaung/app_webview/variations_stamp

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/glwlbb.eyfwmaung/app_webview/webview_data.lock

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/glwlbb.eyfwmaung/cache/org.chromium.android_webview/Code Cache/js/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/glwlbb.eyfwmaung/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index

    Filesize

    96B

    MD5

    748cab2cf7dc774dec8c5b70750a5ec8

    SHA1

    e721d93403b551fc5442614a44e7661ebe895950

    SHA256

    1067c7235fb7086e2df075b9b0e614611606557af4ff3b0bfba20dd3c4798699

    SHA512

    585d90f09816fe704f3b935405cb281494a678d8d2c197ca499005e6ec414f913924c0faf50742a34f3e89659420aecc47b768e1daa67fa22bcf4ace9accea03

  • /data/user/0/glwlbb.eyfwmaung/shared_prefs/WebViewChromiumPrefs.xml

    Filesize

    127B

    MD5

    6ef709b8536878951e87c29a1518fc2b

    SHA1

    24376c70b00152501b3d98df61fa7db435339172

    SHA256

    10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

    SHA512

    96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9