Overview

overview

8

Static

static

7

1988f90d9f...c1.apk

android-9-x86

8

1988f90d9f...c1.apk

android-11-x64

7

Analysis

  • max time kernel
    3136065s
  • max time network
    16s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    27/11/2022, 02:59

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    1988f90d9f974cd1c7143fea4aac38a6cb0269e467c344123956405963cf80c1.apk

  • Size

    5.8MB

  • MD5

    29eb939e1a6d7ac0c5fdd3ff89022beb

  • SHA1

    77f6e72edaad2a3b5f32edf7ef799bfe05d779fa

  • SHA256

    1988f90d9f974cd1c7143fea4aac38a6cb0269e467c344123956405963cf80c1

  • SHA512

    e49ad2c9361b1fde803892d5824baa4b0592c5420a6ee656750062a35761d7f2969c8369427aa1c05aae808b33eee2f678b74e1955fd7d83bb69d013fb9c948a

  • SSDEEP

    98304:MNyzq19UJLzf0YVmaUEeVHPC+U58jk0CMFyWqcimaL5xrmKThuX/E6EsC4Vrgo/E:Zzq19UJLzhe1Q5Ok0NRniVL5lmohu8V/

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.microgame.skater
    1⤵
    • Requests cell location
    • Loads dropped Dex/Jar
    PID:4107
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.opplugin_v2021.apk --output-vdex-fd=45 --oat-fd=46 --oat-location=/storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/oat/x86/com.skymobi.pay.opplugin_v2021.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4158

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/com.microgame.skater/files/classes.dex
          Filesize

          1.6MB

          MD5

          b339fb915c0baa8fd71ad2c7c76f3cae

          SHA1

          2a35f9fcf05e7d3f01aa5d4168c2fd9ef141ab6b

          SHA256

          12deabe2b0533321a668a168983c7165df18e5609702bc0f6a646558f471854e

          SHA512

          464555137aa35d831f5525eb6e55aba5a572cfa3b5e5e34317f25ed49420e3dc43c8ecbd4f7f09fafc367764f904a4fc3864bf4fff572e58f38aa71037664f5e

          Download Submit

        • /data/user/0/com.microgame.skater/shared_prefs/APP_START_TIMER_INFO.xml
          Filesize

          117B

          MD5

          3410802fa645d5ca78182bedb082709f

          SHA1

          05efaddeb366d3a94cb5bc3dba7224d599fab043

          SHA256

          eb01dc6130b02275a80c32820cd36f3933eb0244eb8372913cac683048c18ef3

          SHA512

          f2fb7a3cc6ee3199f31f50f59137d8344438811b6091473660c587a4a39be5a800de8508c75bd1a7d1fbdc982f44ec2426485ed4981515b8d920aa1095a69bba

          Download Submit

        • /storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.opplugin_v2021.apk
          Filesize

          386KB

          MD5

          4a1fb248e672d39457f2cf9088c17880

          SHA1

          b500b2528ed6cee5929603b862b14a18655ac06d

          SHA256

          b2831dae43d2dc8daffc919456c244b17f15f5453dca097d665979e7254f8c23

          SHA512

          b434ee9348e7e2717b35c4f64bc71aa58aca634741045b91ec61eea5bdb536ece7449fe8d376f724bb0006cd2bc7976c9695bc3aa47a59a26ab6c6c09096279e

          Download Submit

        • /storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.opplugin_v2021.apk
          Filesize

          386KB

          MD5

          4a1fb248e672d39457f2cf9088c17880

          SHA1

          b500b2528ed6cee5929603b862b14a18655ac06d

          SHA256

          b2831dae43d2dc8daffc919456c244b17f15f5453dca097d665979e7254f8c23

          SHA512

          b434ee9348e7e2717b35c4f64bc71aa58aca634741045b91ec61eea5bdb536ece7449fe8d376f724bb0006cd2bc7976c9695bc3aa47a59a26ab6c6c09096279e

          Download Submit