Analysis

  • max time kernel
    3136655s
  • max time network
    153s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    27/11/2022, 03:04

General

  • Target

    0b04ba6fa03f2baf454723a106d4d7615172c99822f7ff1339cd51af216225ae.apk

  • Size

    978KB

  • MD5

    99a703750d54b7cfa8d8caa47eeb662c

  • SHA1

    c1fa0e13a6999779e64a8a35646851a3eb58a057

  • SHA256

    0b04ba6fa03f2baf454723a106d4d7615172c99822f7ff1339cd51af216225ae

  • SHA512

    790bd0d43b50976b9f95fa6ed6f43a244d9e3715f0d934d38312dfa28e26a26b485d172210abc197038bdff3669618974bc13d9363d4e4d77c127cc1cdd928b0

  • SSDEEP

    24576:gdVnZjIMGjpYdLtyoemSx8GS8QA5YIq8z8E+s/K3kzT:OnZIMG1kLtje69ATPes/K0n

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
  • Acquires the wake lock. 1 IoCs
  • Tries to add a device administrator. 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.a
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
    • Acquires the wake lock.
    • Tries to add a device administrator.
    PID:4101

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    104B

    MD5

    d7699a34a8c081e6f6f9ae5ea47080aa

    SHA1

    211d586dbabf7c1a9de648b16af8259e3ae316fd

    SHA256

    a776e75decba187b8a1710990b8de882bade8364063f14ae39638b385501c6f7

    SHA512

    17f01202c95672cf265d75e29a82d63bd7d1eb21542e2c150af78349af3e1447ac090318b385041de852fb74602479d7d8cedf6d0052a8b64b4edd8f0df9a389

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    138B

    MD5

    46d619bf6b8d446fcaab3bf6cc8b10a9

    SHA1

    8137a119e43bf0e83eafbdea875f95abaebc0e06

    SHA256

    15f9bf218da44deaeb522f572091b795e978205d20d11b5f718e2be045538154

    SHA512

    410cd03335d6596812adfea782372812f99ccda821266ff59ece1f8e9e435bf24df46f4b2e549a8b2d30c1774636a5c53ab99bb30ccfca172c1ee31367d5c08b

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    208B

    MD5

    839b037e70d5d29d87d0ae7283c1f03e

    SHA1

    8b4805a0ef29ed6819e5688942867e4a114e2191

    SHA256

    d440627fdf726d62f48a9429e162570ddb4c9dad228abb048f491746d81079f8

    SHA512

    a79b9a0dd55d5120e4b2bdea932dbb07fe5783b03e71d34d5f50ec475e2b6dfaf30c47830e44313a47961fe94d61405666bd3fd634bac9092336b4080e27adaf

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    262B

    MD5

    f3ff3537493571b8c617e8cd1fb9a8c3

    SHA1

    17d312c54d1063a53673df94a880a16cb80d2f8f

    SHA256

    12d8e6f042b2d4ba21de9646dc203d31d7020c74e64fffe29e08eea9ecf6dd8b

    SHA512

    1c4a1a06ee41eb7b5538462f8120d2b4510c7c2b57094fe5a8d15e0833f7348e61fa1a469a952034bdf271c7087352928f30555f4857050ad7b7998150460264

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    310B

    MD5

    59f99a41ba3f7cc887ebb95f729b0ab7

    SHA1

    b6d6a3276845c577869ccdf8cd192afda324694e

    SHA256

    84d19f2560adf1462fb67ae43d5f6ed2dede95055cbaceee16156e63d53ce390

    SHA512

    5576559a96c954a89a0f10738b658a0e865aa10dd5fa565f59f20c3f2bb1a77b221c303b99ddf2aa15153fe883c92bd5f4dd74d6b2826df7a4853703c077d83a

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    379B

    MD5

    f04212a74831fb7792e7cfd9495b7970

    SHA1

    a9035ade801e5296e84be6019368efdf261110da

    SHA256

    d7d432789822df20fa0e63a7e164b0228d901d6956529e17a2e974da00677781

    SHA512

    c335cb00ea394e9bdbcaf39e02d063c0e2bf36e02d31a544c8d796da8d0f523860a8c3d78955c073deb2c07dd5b646768437a571a7b02e3705bfde8a2c239c16

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    413B

    MD5

    1d120b2024999be9c67e387d8576125b

    SHA1

    1ed79fc675ccf49b120aaece8aad4844a656a1dc

    SHA256

    5f3ea0c1a1428a9b70718e3c12630c054ef079d489fe031ec907e843cca8215c

    SHA512

    0f415524267dfbb17a2eee0c80125374287bb19c06479cb8aa33ad0cc97e7d07f5e0a7f504d54467889ddc3d8fc32df9f528b05f0a2dbb10f0569775c7348280