Analysis
-
max time kernel
3075842s -
max time network
160s -
platform
android_x64 -
resource
android-x64-20220823-en -
resource tags
androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system -
submitted
26-11-2022 14:38
Static task
static1
Behavioral task
behavioral1
Sample
b835381226f2b5cca13b5d5233c745ed0e95e7b0684ce7927a10a1625397c2a1.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
b835381226f2b5cca13b5d5233c745ed0e95e7b0684ce7927a10a1625397c2a1.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
b835381226f2b5cca13b5d5233c745ed0e95e7b0684ce7927a10a1625397c2a1.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
b835381226f2b5cca13b5d5233c745ed0e95e7b0684ce7927a10a1625397c2a1.apk
-
Size
846KB
-
MD5
0b0f9d00040fc45bb833990f737b6dd1
-
SHA1
2b176dad657900832be9d9d6f6dd99d9e8ff238f
-
SHA256
b835381226f2b5cca13b5d5233c745ed0e95e7b0684ce7927a10a1625397c2a1
-
SHA512
be7a5120050bc7ad8c444247c7ea345769cebcb47849cda855bb724ef4118c1696cc492c986d0510d6f693d90cf0807ddac60c7495ba4eb9de1d8b6fb1296a9e
-
SSDEEP
24576:FLbu/1oKSzk8LSleuckw9ULMGhovF0y0PIIu:BbuoVSle1kwiLyaQr
Malware Config
Signatures
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
tel.a52z.yzdescription ioc process Framework API call javax.crypto.Cipher.doFinal tel.a52z.yz
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/tel.a52z.yz/files/.um/um_cache_1669523133603.envFilesize
534B
MD550be92a9647b14bf244f27a8beaa3569
SHA12295d79c6061721e608f0afedd185b1a61c539da
SHA256bb85807230982bce7c03b1c2119b050ca466e3cfeaeae7ec7b915426bcdcf8ed
SHA51219e61b8342ba39151d29d0d84c73d2cc5399bc2aa7e1bd0b26a0f79db998996e9c6c5ed954900921bb8ace3edeaf7a5ddb9a2fde53e76be13227b955e48d03c0
-
/data/user/0/tel.a52z.yz/files/umeng_it.cacheFilesize
245B
MD5e4d2bf26c8f0684c7092792b3f73d024
SHA1e4c91267fdbb0a04b36c3ef7791ae8b94b37e1ed
SHA256a028b5813bc171825046b6daf31452bec7e433b7e63cef99cfa2732e9800589e
SHA512020d737b93f77ba19a56a364666db828d8e9666086591b84602f57f128bb7129ca8834edd1a95609e82b99b2cb186d4f0c2a11dbdcb1ba55fe49d49531db9d86
-
/data/user/0/tel.a52z.yz/shared_prefs/mobclick_agent_online_setting_tel.a52z.yz.xmlFilesize
124B
MD52ded4557e5886941522e7a0d89ae91a7
SHA10cb1a5b77d14ec3753808a049553f2bb45cf3a74
SHA256d5b54c0542f27065f9a166aba83a186ef152671594370b0e0de48e6dc5082774
SHA512b3a2afa1d5d68a93c96ce9f6c17dd640bed3ed48bf228b510458149b3f1a7720063ba9347adfe4acf6bf1cc53225b082b7f9ea7fd63dde4cd78c145458b48278