Analysis

  • max time kernel
    2823917s
  • max time network
    155s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    24-11-2022 03:00

General

  • Target

    f50b2feace1f428893a75a4a5f53c048328f04d0d6ce3ba12870444672cd4c62.apk

  • Size

    461KB

  • MD5

    0c512deebf19867033e37731bfa9dab5

  • SHA1

    a060beef37d70678dd1f1fa7c7cbb69b3731677c

  • SHA256

    f50b2feace1f428893a75a4a5f53c048328f04d0d6ce3ba12870444672cd4c62

  • SHA512

    f74371cb2e10e28b5c9c235855b13e9c6da185631f1ca00d7d5a83132387945009171b1a9b8a0b7933f950e2a7a0b8133d1b903c44f552c9ef06c9f2e47efd52

  • SSDEEP

    6144:tuR9UmXkbH5+dnjxErYowfagptZ6ohVTkLX8b7Npjvw6TtFBwcGKZzhkeYymH/IO:KF6Za1EYo5gf2ypw6pFuKZzhkeYngTC

Score
7/10

Malware Config

Signatures

  • Queries the unique device ID (IMEI, MEID, IMSI).
  • Tries to add a device administrator. 1 IoCs
  • Reads information about phone network operator.

Processes

  • c.l
    1⤵
    • Tries to add a device administrator.
    PID:4036

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/c.l/databases/simple_pref

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/c.l/databases/simple_pref-journal

    Filesize

    524B

    MD5

    ef819eced79b87c803160fef22d0e0f1

    SHA1

    5581860163979a17c86b44171921172e9cbf660e

    SHA256

    b35938bc8c0fd771beb782c6bad9a5627ed21119ccfcb0426a01e1ed2b87682e

    SHA512

    b54d60057e48b9f4d2fbeb5cf26d209fdd59e15d2c11f62c574e6cbdc575f87fb5274055747b11ff1ee4dfce9d1ae406ced48c9ceded3687cbcf607ee3ba8a00

  • /data/user/0/c.l/databases/simple_pref-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/c.l/databases/simple_pref-wal

    Filesize

    197KB

    MD5

    0e355b189705a8edbbca2ef5f4342da2

    SHA1

    8ad223693585ce33a0fd725de7b071e74a8d3730

    SHA256

    7a0cb5271b048d9d9561e13351b0a524b5f42f1714919f02dafcc1d328f8831f

    SHA512

    43cdc340cbf5a03c11820fc52ea108fe5bf5ebd8d0a5da35b9ee00530038938e49d1cfd6367dd2426bf4329f6c9dfd4f3ca81fb0c7846be83840c318307c5d45