Analysis
-
max time kernel
3068910s -
max time network
150s -
platform
android_x64 -
resource
android-x64-20220823-en -
resource tags
androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system -
submitted
26-11-2022 12:59
Static task
static1
Behavioral task
behavioral1
Sample
bcaf96e731b7ba969d6de725a9ffa594b5e93d7f5a6dea80fcaaa72ebbe6ff5e.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
bcaf96e731b7ba969d6de725a9ffa594b5e93d7f5a6dea80fcaaa72ebbe6ff5e.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
bcaf96e731b7ba969d6de725a9ffa594b5e93d7f5a6dea80fcaaa72ebbe6ff5e.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
bcaf96e731b7ba969d6de725a9ffa594b5e93d7f5a6dea80fcaaa72ebbe6ff5e.apk
-
Size
1.8MB
-
MD5
2605f03c90acd267f31fbef1403620c0
-
SHA1
b4d7f26eb90518f8b8574c17e81e34661a5910e5
-
SHA256
bcaf96e731b7ba969d6de725a9ffa594b5e93d7f5a6dea80fcaaa72ebbe6ff5e
-
SHA512
7a40ddc4c22a2527b94525141619885aedf32eb8c759c284192f6f8c7aad76f2a852ffc262ccc3d595ef9bdeabcf62b8e240e709d804a67b6c04d273223145d7
-
SSDEEP
49152:rBXHgYItvv/b2sXpJRdIRKaPf8EVTkAwdboU0Re:rBXAYKD2sXTRuBSdb3
Malware Config
Signatures
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.hdc.bookmark242652description ioc process Framework API call javax.crypto.Cipher.doFinal com.hdc.bookmark242652
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.hdc.bookmark242652/databases/google_analytics_v4.dbFilesize
136KB
MD58b0dcad967f8d1f278dccd3ddd49052f
SHA103f2b3ccf4ae1208ba768f64e6fa53b824a829cd
SHA25684dc438c6027aef2bd11495ec6e1c1d50d8d4f64c299bd199b45fc7524d2a183
SHA51245a55aeb32bfb2c527ddcccefecb83fe84fb10498d6e68bd110893957fa188891481f8f54f9756fc3eb87299b2c83fb78888bb624fb1c2225b2dc723dbb17d4b
-
/data/user/0/com.hdc.bookmark242652/databases/google_analytics_v4.db-journalFilesize
1KB
MD5381f46d6a241b8decdffb3668f43a30c
SHA12009fb7754cf9068fe45a2993bf429c8ab10fad6
SHA256e9adde95c7c540282a6efdb8559723d7a09842dd56b0325806cca1fbc71fdfb3
SHA51205921e477f59bb5c106cade5a2f10e469c4ff303b141e111145547f5dba3de0af89a7ef724eeefbbc8725231cef7963e795b6139499f6fcb2e410b644a554c81
-
/data/user/0/com.hdc.bookmark242652/files/gaClientIdFilesize
36B
MD55c05858aa8fb1413f4f5148a1296b22e
SHA1a01834b682b42a4e9aa4f25b5ec90ccae263966e
SHA256419fb5372faa80d70446640f7fd43974935b8a016bb014d43e6f2d4c6f264c59
SHA512c3c9e4e704b5c234d7afd06fde312bb9b632013f7c061f37c9aad3cf7fcd53ef3719decf140a5c9459a3f51036ac4749b13920629631a2d53685616b240bd5e6
-
/data/user/0/com.hdc.bookmark242652/files/gaClientIdDataFilesize
32B
MD5c8af990c9a531eb3804203423fd257e6
SHA120fdc744a6ebc9173dbd72d38a5c3a4f58b4cb26
SHA256bc175350a776b859eb45222f824ed38dd62186cf5286ed1cbee25596b8fe2405
SHA5124ffb7dcc3e59a1d57ae095645486dd2ff9a50a62e6b5dc6d366f7b44f0ef2855fc30dcb3e1159c94f1ee8b9202452202478ab146e8130b2de23cb569a87afc8a
-
/data/user/0/com.hdc.bookmark242652/shared_prefs/com.google.android.gms.analytics.prefs.xmlFilesize
129B
MD5c19f505466fd6fc497e8b8e831df8ea8
SHA1b608a394dc0061f206ad3269163e1970ff1efea5
SHA2568fd8cacf8c81a6811f54113ff39830c0f78cfdb1401144090b0b07a8bc9a5ee9
SHA512f601381d13b17d5cd1fb950289c6b8404225fada806ba9884bc1af9465d38467905e696a2a37e0f0a7f977455b9125af47e9d63940dbd8b149acc3b1e72821d4
-
/data/user/0/com.hdc.bookmark242652/shared_prefs/com.google.android.gms.analytics.prefs.xmlFilesize
447B
MD5aca5956b336f88c28086f8ab74defa8f
SHA14e44fbeefbe8a08db9faa27885ea50ef322b7004
SHA2560e9fb8ac484edee50b08cb3d7198d2e7cb87ab837bef6ce933c771abee77eb49
SHA5127337512153c46e3c160f8a68907c0d671f50abca71fb0c19325d498fb931b01b5570eebd6edecbcf1b5cc2a5bac0ccbd34ea8f50595f75f1b8080d4c2482c2f9
-
/data/user/0/com.hdc.bookmark242652/shared_prefs/com.google.android.gms.analytics.prefs.xmlFilesize
417B
MD51a7ca7544af7c9b2b3b78541f967780d
SHA1db4c4accf1313de730459ef225ee06010acb6706
SHA256bb795dc940e24aee60ce172e4ae9924e1a7bfcec2b7df06c7e3e688f15548d00
SHA51216a9822e44fc15184ed433485b260fc7006e0eb60d01c3e6976d3370b907c1cc3de1364908ec1519d15f65bd2798ec8af83e38a7644ec269f670ebcee7b1bc38