Analysis
-
max time kernel
3148324s -
max time network
153s -
platform
android_x64 -
resource
android-x64-arm64-20220823-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system -
submitted
27/11/2022, 05:06
Static task
static1
Behavioral task
behavioral1
Sample
ad8646ead951d17bc25e7966b4c2f5599492717bf962b7fbb4af50f852650bdb.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
ad8646ead951d17bc25e7966b4c2f5599492717bf962b7fbb4af50f852650bdb.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
ad8646ead951d17bc25e7966b4c2f5599492717bf962b7fbb4af50f852650bdb.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
ad8646ead951d17bc25e7966b4c2f5599492717bf962b7fbb4af50f852650bdb.apk
-
Size
2.3MB
-
MD5
a3ca4d30368631fd6395cbffd78335c3
-
SHA1
c7d0f6ae86ee61ba605fb7ee6598a2419d26be9c
-
SHA256
ad8646ead951d17bc25e7966b4c2f5599492717bf962b7fbb4af50f852650bdb
-
SHA512
9ab1197b2fbdf8a7bf992a4d0216d605f0d4a2a24fce1646e4ec661bcc3785c763278f3fc02a0ae0df70143625a0c7509909a65827e1d93435a569e89fa6c62d
-
SSDEEP
49152:vdZJPXzkfYiMSOThlo2GyUhNCudIOdyqMsNW55T4nHNlS6Ea39+:bJ/zkfYivUUhNC8IObMsNWbTcNlS6/U
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/net.lazyer.frozenbubble2.lt/app_lyhtgh/plugins/com.lyhtgh.pay.ltplugin.apk 4404 net.lazyer.frozenbubble2.lt /data/user/0/net.lazyer.frozenbubble2.lt/files/uu_data/TfwdHX6qHv0AkshSW_kmmg==/app_code/com.yt.uu.apk 4404 net.lazyer.frozenbubble2.lt -
Reads information about phone network operator.
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
222KB
MD5b5fd12a9cae0b3e769b9e7f1c19d3e06
SHA1e72fb4efcba19e2d01711468083d7b4a11fafb12
SHA2564cf8cbddcbb64e619287834a0c7ea8bd881542f15162fbf63e600be46f276aeb
SHA51258c0e5e3db059cc3b0b213d248df7c9c11cc26f195af3dd4c5593e74ab71c0a9f295b65a5e6bbf12541dfee68e52f38a364048ccc6ae1e6f16e98f3b4a1c296b
-
Filesize
120KB
MD5a48cd9324b1f8754b07f00d863b840f3
SHA111c6614775b35a58f440971dfc87c8aaac6d6173
SHA2568859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
SHA51235fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1
-
Filesize
2KB
MD56db3fe44c702f487908363267cd02991
SHA180cd3e85287166a0a1b9dccdcbcbf7ab1013ece8
SHA256613a4c39a133f79679b6992f6e8605b25ff9783266f48f1d876915a0cb58251d
SHA512993aa3f9558fa6804841350eefc916843d1b8f414eed662470c8f63f831a77cf28d749f79e4d803b0154ac1df0c0c4b860a3c8677682d47a2bf12f86f3bc5b6d
-
Filesize
33B
MD50ebf4686d5c45b75f7f3648c8c1cddd2
SHA1e7cda78894962f9284990eea6932eb035f5b7969
SHA256ddd968623048760a2503a4d6165c93964713be8170e0fe718723bda5baee7d2b
SHA512aa0e16ab56f013e0c0a4baab90f6e4c63c590e9a285d3bc4556e18e7fb39975893cd2db3b7623bec1fe2507ed2362dd53faf4af48f2d809b0500a1d86acadb47
-
Filesize
40B
MD579d227250933122e2a762748f3608c0e
SHA1b61e1b2e15db7a777448b1ebea380d18434e7d24
SHA2565964c8ee3f05fa6740b48fc5080cc382d17fcf8e3d104adb8235ef8e158f7c9a
SHA512c7592d65b49041f228cf24ebea5b281ec3e5b3f6f05b05885fb02cf37d4ac9c83533c542e86475a4341c08c771f62f23badfc7c9147e5adae757ebf98128fe1c
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
/data/user/0/net.lazyer.frozenbubble2.lt/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
Filesize96B
MD54efb6a2efc9590c76f4b03dc864f6921
SHA10154105b005edd1ab915290aa219eaaf8ef54c20
SHA256829984c4384d8ec4969145d15a8241e355517e9a4d5cd6bbe1a627594d88e97e
SHA512c8c889049254f95518ebf71b120321e6e8b0febdaf2aac893f9e0129457d6f6c5ee519f55ea7c1f04b098438cdeea2fdb919e6d1f806817810c95c3c8a762111
-
Filesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
/data/user/0/net.lazyer.frozenbubble2.lt/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
Filesize96B
MD5a6ac4d485877758c926fcbd2b2d6cb01
SHA13e0f402f50998abd224c013dc38f38e9805d17a4
SHA2569fcea51f20498ca92b1876b71326565530e40bd8c50da47b06db3564badd239c
SHA5122849214cd94a9afb715a589449a1eac6b52bcdccf360a90f30f946a78326e6fa41122c2dcc9de6599b9961e6b0d27d691412e7fbc4251b05de2fa085b22b5423
-
Filesize
57KB
MD5f080fa2a56ab5479d58063e5ea871447
SHA14b3fd57a98916fa5784305b76ba30af26b5253d9
SHA2560aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
SHA5128aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936
-
/data/user/0/net.lazyer.frozenbubble2.lt/files/uu_data/TfwdHX6qHv0AkshSW_kmmg==/app_code/com.yt.uu.apk
Filesize288KB
MD509da68a60e91186b07ef3fa9454e8ae7
SHA1f69895f441fd176d732e8287d9e8ce09dddf2067
SHA256c6b972c61e266c09727156292809a38d55d73e00a9d19127c19c525986a465f5
SHA512059ae4e4ed457cd779aa086dbc523f8bb4dc891e0e76d4d7b6108269dca4bdcb25bc409089c3ae3fdf2166b78366cd77823e3067651a83cd90e20b57120ce2ce
-
/data/user/0/net.lazyer.frozenbubble2.lt/files/uu_data/TfwdHX6qHv0AkshSW_kmmg==/app_code/com.yt.uu.apk
Filesize393KB
MD528a543bb8aefc7e8030301213b9cc60b
SHA12264761aa3020c5851e0aeffacef92e363e89840
SHA256a036b60aee85c8375f5c40857e9e3eb0c5f77b4d022a7e7897ddc5404df0280c
SHA512463a5ef28a122637e84f1b570916a33c5f093e05579ef4bb7a45d1c4834c164b70e4b57b3869c391e658481f2c57ae51435969245ea41eb5070867666fa6cee4
-
/data/user/0/net.lazyer.frozenbubble2.lt/files/uu_data/TfwdHX6qHv0AkshSW_kmmg==/app_code/lib/libuu_xx.so
Filesize11KB
MD539b6ac5154df77bcc92c9cb4c76560d0
SHA1b985bd345461490ee6c62548a87d648413faccda
SHA256ab50dcbe107ba99a5065f674f1b4b48bf3d83ff3f0b256e68c502ae483dc72f3
SHA512cb1dc48f50d9ed016f75b03917e9a66d2a2a9ac751e069063a9cbccc8c76f5c32223795c77aeadfc21989d700fcedd718c9c70e878a8a3962e1152bbce005e02
-
Filesize
127B
MD597ccd9a2b2063143df56b6937f961ca4
SHA15e78a91ae5df289ce83443cb7d5589dd3504fb5d
SHA256248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
SHA51286c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b
-
Filesize
189B
MD5d5158c1f3f2c4867f7c90aecab009895
SHA1ab1f32c7e975c6ecd32963946c6962fd8b5f05d7
SHA256375870403ff73ca6b8012f4c13ad7c566535edc888de1b0701f119fac44fad00
SHA512e5ecac1a0594bd5e97311adaf5b8d5a75c605b4f2e5e8ed6922509b20b4b5812d3edd00a75649e0c5ec967d5ed4cfce6ded3ef425000b29aed1d3426392daec9
-
Filesize
85B
MD565ea58603983866fc0e46a4a4b1c4b99
SHA1119ff80357392e4660825f9ae56f9b35e2adf1ee
SHA256e373e874aa972c2d371b08d8af863ba031a6f2a4f2f5317e7e60a7efd5891752
SHA512abe40f880ac6df8fdf4d797fb930e0a9d2017a4a5168ec572b1d10063d98625da36625eac573a87d5543e5a9fa4718787dd1a5d2845d80d567b2f1f5b561c29c