Analysis
-
max time kernel
3075686s -
max time network
168s -
platform
android_x64 -
resource
android-x64-arm64-20220823-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system -
submitted
26-11-2022 13:53
Static task
static1
Behavioral task
behavioral1
Sample
3cc00608c8f654218216a38347e8a3a1272a4bda501811f1566791ed4211fbff.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
3cc00608c8f654218216a38347e8a3a1272a4bda501811f1566791ed4211fbff.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
3cc00608c8f654218216a38347e8a3a1272a4bda501811f1566791ed4211fbff.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
3cc00608c8f654218216a38347e8a3a1272a4bda501811f1566791ed4211fbff.apk
-
Size
149KB
-
MD5
1a831fbcdb541b3532dc0b6e8dfa5108
-
SHA1
d02a15a500c5f03f4c3dc8e86b4d237af898917e
-
SHA256
3cc00608c8f654218216a38347e8a3a1272a4bda501811f1566791ed4211fbff
-
SHA512
2709f058620557a7fd8b5d9b259ca691b64ecda93cf9a6dabc67db8469e162fb4afcf5e8b7b603005bdca9ede17716c8b8f0710fa69aa9be139cf469e1d82539
-
SSDEEP
3072:Tu40zouZ3wwD1/3zgmLe6YnDR0mqpCxM4NqFQW:K4cRZ3wS1/jgH7DR0mqqDdW
Malware Config
Signatures
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
xwz.bklge.hhdbfdescription ioc process Framework API call javax.crypto.Cipher.doFinal xwz.bklge.hhdbf
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/xwz.bklge.hhdbf/shared_prefs/storage.xmlFilesize
115B
MD5b8506999debc2160100a652427256527
SHA1fe804e599291c04257f973317a9ee4992ebe39f3
SHA256f00d5a18773eae29b59fe718073b60d6b2a308c26ae6a9515f2b12ed77d732d1
SHA512d18dae46f06b981078f450bf028eb73b6c2756294a0fe23b36dd1586b69ee502ccb664be93ef450995d3c9a4d00753a62953de383564fd8e59f3791a62c07a13
-
/data/user/0/xwz.bklge.hhdbf/shared_prefs/storage.xmlFilesize
168B
MD574fe879c208c2d5ea7981d2b5b28b531
SHA15711f7345c35895b7e997893e90548e28485480e
SHA256054acd3e048fb48b70a1eb0563d91e6efc863c3d2e373b77aa6d183f54bcc919
SHA512f51ac00f9ae23cd1f3a0746581d05253221cf5fdaf43bc54e5cd8e0f9c9cb88a565f262fe55696576ae958aa28af2f096327b0e61b1a267a43fd76f9aa0b0965
-
/data/user/0/xwz.bklge.hhdbf/shared_prefs/storage.xmlFilesize
211B
MD56d7513ad6d61840ff6b2c31b9a2fb742
SHA15c360f436eb61bd2a17d864b14dce7c02f8083a8
SHA25621f0410c1c4aff0f2a000e999831985ca8591cf5f21710108273bcdeb4e99cec
SHA51239aca9d246ec32bb154553da6f378ac8730368d12227163cbab6957b329393f8ca7d37e73c766bc6b7e9f381d92bd34b40429379aceb3601b89da98daf929b66
-
/data/user/0/xwz.bklge.hhdbf/shared_prefs/storage.xmlFilesize
246B
MD5df196877004b9cd773dc3ef74a70cbf8
SHA17cd50a14d7363e77ba18738fcc2bffd07156f3aa
SHA256ca44a0bcb7cd46cf83abf37e29ba3101e7afc344d2c4a73848dfdca7bc19c200
SHA512670bd687f0f3694d0b2f98cc8deac835d44eec8a00405a083dbb469657dc973740a96828c2aa7297a68be90fc0c06a108f907f3fdebb5e4e5f9cf42c736bae62
-
/data/user/0/xwz.bklge.hhdbf/shared_prefs/storage.xmlFilesize
285B
MD5d9e8c226a3ad36e26ed2a9308174c914
SHA115cb5332128ce6e0f3d2d4fc08b6dfb5ef489466
SHA2566a755c6a01b3d7daf4a99786180039dc604d1eae0ba96248f28e3449654aa0ed
SHA512af9fdea65a2af2e17077c1dd4f9cc424b79f14e13dbeec1ffe347dfb9d4968f81e6df0937a800d06c9db018d84616510d54e1f5b301da74fdf9330c2729835e4