Analysis

  • max time kernel
    3123097s
  • max time network
    156s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    26-11-2022 23:39

General

  • Target

    9221a1a86efda88dff530511fe743ea4453873bb4f2055a207420da450625b9c.apk

  • Size

    769KB

  • MD5

    47239afe40fc5c991d7f8b55ffc3c82d

  • SHA1

    3c10177691fed02329c570cb67376bff662e7496

  • SHA256

    9221a1a86efda88dff530511fe743ea4453873bb4f2055a207420da450625b9c

  • SHA512

    f3c9b878a866bde1f9b0d83304f642b86c8a102ca2a7a5d1c4d370cc5e54a034629695e620b56d32d1dda96c0aec32ea309ab14010f48ce82e3de2fa07173081

  • SSDEEP

    12288:Yyp3x3fZux379+wazbXFbQfxPfuf31jly8Govj3tg562QXCZ/2TQupG:YypvIQpQfxU3Dy8Govj3KQXE1

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
  • Acquires the wake lock. 1 IoCs
  • Tries to add a device administrator. 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.a
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
    • Acquires the wake lock.
    • Tries to add a device administrator.
    PID:4599

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    104B

    MD5

    d7699a34a8c081e6f6f9ae5ea47080aa

    SHA1

    211d586dbabf7c1a9de648b16af8259e3ae316fd

    SHA256

    a776e75decba187b8a1710990b8de882bade8364063f14ae39638b385501c6f7

    SHA512

    17f01202c95672cf265d75e29a82d63bd7d1eb21542e2c150af78349af3e1447ac090318b385041de852fb74602479d7d8cedf6d0052a8b64b4edd8f0df9a389

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    138B

    MD5

    46d619bf6b8d446fcaab3bf6cc8b10a9

    SHA1

    8137a119e43bf0e83eafbdea875f95abaebc0e06

    SHA256

    15f9bf218da44deaeb522f572091b795e978205d20d11b5f718e2be045538154

    SHA512

    410cd03335d6596812adfea782372812f99ccda821266ff59ece1f8e9e435bf24df46f4b2e549a8b2d30c1774636a5c53ab99bb30ccfca172c1ee31367d5c08b

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    208B

    MD5

    98fb8dd8e18b7786afc071c8346d47fe

    SHA1

    0fc166972b1614e1a6501bba03bfa2fe7c04f375

    SHA256

    9bc3214c8457421066d5c16de6f696edf51bfda93e7afea9b929987806e41fa7

    SHA512

    9198b563bd1662581ecd2f61ed0bc85fba5c5d384afe9172da69141d6516e2212eaec5ddc068911c98b6e23d9377c11fc83f82131c3950623a6c6c16169493d6

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    262B

    MD5

    8dc3ec973e23f50bcfadf31d304d63fc

    SHA1

    253977cfc0d21872f34a5d3030b19b3e15a43461

    SHA256

    04200e171588e56d9031e620bf81b496d5d196773325b44b7fc33edfc3f2da6b

    SHA512

    743e2af898591e1fd1a60c4efc76312efd1d676bcd3703ac66ef92a1b0ede7f0e8b314f23507c9571558a389190be311d8c5ad02cc5abdcff509668f5ad3f5dc

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    310B

    MD5

    a33411e2b018f4dafe767837a37d6927

    SHA1

    4985f19a907b04ef2b36245a91f734a3a211b5a0

    SHA256

    94ffd14ce225e0eac3b3266287bd4c4d4a2be34a6148a36cb2e2e7d18cb28050

    SHA512

    95a8f34193b0a0b2664a0837908da15b50c66301ef3a9a0c35e7cd7a672deca78b5c900694dd0100fff18d2f913cfcef86363971de8a4b916bedd0592b0480fd

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    379B

    MD5

    d03e6af7f32607f54d7581cf6a0752b1

    SHA1

    208e2030be975656725125783e216c6521ff0aa0

    SHA256

    3d8ba56b4ab644c955b5360f37ec3900c6be29b4e7cdd4a5bbc0321c90c51912

    SHA512

    a80e442b2464d64fad6045efabe7f358ecb98ff88161733a5938d4f729cb672b85a9f5493ef6df3201d03c510114e97a4fb48e4b68886eaaa853c3825a432b48

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    413B

    MD5

    95aa692039eba64106519ee8a8bbbcd5

    SHA1

    c8f3af904f848c20e80967f7248131e4859a89eb

    SHA256

    0296e1e80ec5e479b7f9818da4f1675683b805bd37154c3435e17fc273e3b2c1

    SHA512

    f1db8c0bf5b240ee4d0b2bab70c76f53a82d5ca908a1a273caa3f508684a6563f751b3e7d7828c34c6e707b888966aef531ccacbecd6bc22e8d2054674218e83