Analysis
-
max time kernel
2952474s -
max time network
165s -
platform
android_x64 -
resource
android-x64-arm64-20220823-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system -
submitted
25-11-2022 11:31
Static task
static1
Behavioral task
behavioral1
Sample
97958edf0145bb03add669138a295b7cf1fb32f38c6d684dfb0e022bc05ef4e5.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
97958edf0145bb03add669138a295b7cf1fb32f38c6d684dfb0e022bc05ef4e5.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
97958edf0145bb03add669138a295b7cf1fb32f38c6d684dfb0e022bc05ef4e5.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
97958edf0145bb03add669138a295b7cf1fb32f38c6d684dfb0e022bc05ef4e5.apk
-
Size
514KB
-
MD5
72d5e32267502c5e7c5291b5fd2dea7e
-
SHA1
373ce0f63505edcc3ca78b115d6fdb63388cec4d
-
SHA256
97958edf0145bb03add669138a295b7cf1fb32f38c6d684dfb0e022bc05ef4e5
-
SHA512
5779997b16bac0c8babac7391fb3a4d1b00971cc79ef19854f7209f338ef849fff2fd17d5edca155ffd924f15639f818e57ed2f7bf1f5ad4d3f3f39377a0b6d2
-
SSDEEP
12288:4oAgbIGBgAsWI+iyBrwEwLBwHuIqjXmZcOkO74wT5DqyZGyPU:zA8rwEwLB7jXmJp4kwyZGyPU
Malware Config
Signatures
-
Acquires the wake lock. 1 IoCs
Processes:
trial.appdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock trial.app -
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
trial.appdescription ioc process Framework API call javax.crypto.Cipher.doFinal trial.app
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/trial.app/databases/aFilesize
96KB
MD531bb90861909bcbb7ea5b7a3ba069758
SHA182d20766c2a429d6feb24ac9b2553ce565e7df22
SHA2567153c694d4ca1a255e6609551ba0b0f84507ab5e8ff699f373e93bf722b92dd1
SHA512ee8cad3b2b2ae69a4390d52e0b9d869acdcd66ee6285325f11f43487ad00fcdf901ba5ea0711495e6dc8c2a4aed0d485c9edd9d5bb01b897c17642ceb4547dff
-
/data/user/0/trial.app/databases/a-journalFilesize
1KB
MD55a35cc21d4a1a16a7e32d46ec86bec6b
SHA1b8fbda3994f1cec823ff78c692b5e04d9996d07a
SHA2560ae5bf520799e589c894a90ab544d84cd975593be4647b4c5136c3f57c03b8c1
SHA5129eac10e437439faa384e834c5cb5afcfb6d3443457b875b2de3de118b68b75efb898c46a396050b529eb58a53d0051ba5d436fc2ed550cf82dd6c088542b2fec
-
/data/user/0/trial.app/databases/tasksFilesize
80KB
MD5f6c5a564258dc315ef6782156b97ea87
SHA14b0fc80421775d7c5073749d87f4c70e1ffc8b79
SHA256c7709b621732ae9b600dc0b6e7636f065b69181e29019f5d655e296c8cff6a39
SHA512afb3f4ddf284ab199e49ae978b6919a8483dbab69f4af45a86b1200fa2b8502c68333e38c4fb52d60858c35eeda667ebd2a2a681fc2e5ce65597f02700639f6a
-
/data/user/0/trial.app/databases/tasks-journalFilesize
1KB
MD53ee7217a6a206e75c9100871e30ed4ea
SHA179476990820aed3a145a6f13c3f387a262a0df13
SHA2568b34029298b6a842398bac54062c9d21a8781db48f66e4e1c3ec137468e24d5f
SHA512e73e8ec17b5a22b5cd3c2f6c419dab779f79b72d5fcd96bf3ad0e0e7ab67d20e4b8fc46411201f0aa81abef1e52c4bb57ece4cb879a34099b60f753b093d1840