Analysis
-
max time kernel
3101882s -
max time network
167s -
platform
android_x64 -
resource
android-x64-arm64-20220823-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system -
submitted
26-11-2022 19:32
Static task
static1
Behavioral task
behavioral1
Sample
25216b34ffc69d8571b9d738caae2ca8e6533af4b03ffaf26b997b1d8b71cdd1.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
25216b34ffc69d8571b9d738caae2ca8e6533af4b03ffaf26b997b1d8b71cdd1.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
25216b34ffc69d8571b9d738caae2ca8e6533af4b03ffaf26b997b1d8b71cdd1.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
25216b34ffc69d8571b9d738caae2ca8e6533af4b03ffaf26b997b1d8b71cdd1.apk
-
Size
1.8MB
-
MD5
6748ee6231c58aaa46ca75fdd67e7977
-
SHA1
4a69b1027b33f3c37a0346c0290281e4e876cbf2
-
SHA256
25216b34ffc69d8571b9d738caae2ca8e6533af4b03ffaf26b997b1d8b71cdd1
-
SHA512
95cc605e6f9aae7cc12553c0e9463597d10ed683f475bde4cbea34d9bbb54b1f65f409a31588391289f0019078566e4e982143074ca483ee73d6f5a758cb4bef
-
SSDEEP
49152:TWm84cCgyP8ENctZvCvwgeFWW1Cp6Ug0tO+whNHDjPDcSrg:TWCcCl2tZbiWgp6wtavPod
Malware Config
Signatures
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.hdc.bookmark243911description ioc process Framework API call javax.crypto.Cipher.doFinal com.hdc.bookmark243911
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.hdc.bookmark243911/databases/google_analytics_v4.dbFilesize
136KB
MD59a3a3b81cba0a638d3f65f22a2a086f5
SHA19d2ebebecb1ba077b6f02157aad794acca3839a9
SHA2560e375a055d74bbc962e8ac1c6b360f84b468d9f59e605d041f0dec4b49f318d7
SHA51296fa7010527efdd3435362b874d5908615d083afd454420415f678d04f20aa9b5d18f78ab8c4f20379c6e3c73dabc2702e3a9004cde2c9f29f8377df9586283e
-
/data/user/0/com.hdc.bookmark243911/databases/google_analytics_v4.db-journalFilesize
1KB
MD515eb268b34cc4cdd3f34cd484b74e129
SHA1a62adeafde49bdb80dc345e0421f02a9b8dfb0a5
SHA256c5e50a31bacf7b1dfb42fb0dcd92604076e6285c459f94982c2074cba8e229ce
SHA512fa8d3bffd87dabc7d06715d821b03be179d2e06631e37e53e94adb96f6fdf2d2e84e4caac1181a7e8cbca9971d10e0b6ca97f15b29d513298478a44a90fc1b6b
-
/data/user/0/com.hdc.bookmark243911/files/gaClientIdFilesize
36B
MD52db43fd9249df9b46e848fc21196d234
SHA18346979f7d93e339dde44c6e916bdeaca5f8ee53
SHA2564efc26c6e1b763b3ca5572a78cd26103356b5e46a1624dab3da596ffbf80f7e1
SHA512779c41008f7b7b5a8e6a429d3fc8554ed835b343603f22f9a346e79515b2e7494bd3613f8e197037692c95f3b1960f33fffeba36c3169550618fced0c4f56cde
-
/data/user/0/com.hdc.bookmark243911/files/gaClientIdDataFilesize
32B
MD5db9bf45cde2957694fcb6a6a30d993db
SHA178ce846d13fc628d493c5e23ff798055d9341e7f
SHA256b95e349c44b1755f578a4400f5b732803aeb81f5813e911b129893310a4db4be
SHA512e6cc406cb63c5813ecf3cbf2e79778d3215f3c59bc27f3977d8cb46a42c6aab721629a1ecff92e0bdf3b9b9ab6bcf00aaa02845a879d333f189d2335799956d3
-
/data/user/0/com.hdc.bookmark243911/shared_prefs/com.google.android.gms.analytics.prefs.xmlFilesize
129B
MD584301278a25942b8f77afb00b4036a4a
SHA16ee62df7fcbb23e220fa5365993fc4a3f45de010
SHA2563947c765f6c9c5484290f8d7a71f0a2ddda2993c8d2276b63189f6392550f271
SHA512537ee20df9da4f5a84a6ee8ea7cc5e87616ef40ee89f40b65049db44411d3abe1818e890f6d4aee5ed56567678218461d22a3f532505c90c5eff7798f4982e9c
-
/data/user/0/com.hdc.bookmark243911/shared_prefs/com.google.android.gms.analytics.prefs.xmlFilesize
447B
MD5bec31c7d8c2fddf7ac5fca8799c494f6
SHA10ce70ebb8f0d6cec144fe92c3e784f8508f25cf3
SHA256c057a67f452e9f6772d951d035a9aab07e2a87589ce64052fb63da4a0c13558c
SHA5122255c8924f84942f3a6b8fa9c84bf7954e306530ff3a1db252fcfbe3aeebf824ba65ff43dca00de5de2c8a7b322016611fdef41929df8086b4600e6765971d6d
-
/data/user/0/com.hdc.bookmark243911/shared_prefs/com.google.android.gms.analytics.prefs.xmlFilesize
417B
MD59ac5cd03476458645c0ba2f1de6babc4
SHA12c4ff3b830777824672da10c41b0ffa78554625b
SHA2562b07446cb8ae33c7e1b6759b3f9dac5686c20e356890968f55bfd81378e404b0
SHA512f011efeaedbed3345216097cf365535e78f16861065464336fc85db128f2f5bd3d7eef54501438905a1bed44b4c382e480ad895215153bd3bc918e35fbd7b8b8