Analysis
-
max time kernel
3149496s -
max time network
152s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
-
submitted
27-11-2022 06:40
General
-
Target
2b58897a5f86a422dd6fea74eb65e33690a1764d781f39932efe7e2014b51101.apk
-
Size
5.1MB
-
MD5
cf1e166163a1177e7599d1255a872e17
-
SHA1
f60e8f92110f89b4147d05572be4f054a577aafe
-
SHA256
2b58897a5f86a422dd6fea74eb65e33690a1764d781f39932efe7e2014b51101
-
SHA512
16c1826a7be2df01a70a7ebbc933ce1df3c4de895fc62c79997e426acb2b73559673d6b82c66ff7912f45e81c5147776fd9ea8c31feb2c1d67148ddcd82a1fe2
-
SSDEEP
98304:YGnrJsoRXsZwwYhv5yqttRKXOB0YZPyF4ELg/VofIrsRvX/uLwCmYOJSEh2:+oguBiOCYK4ELgugWWLRmYOJSEh2
Malware Config
Signatures
-
Reads the content of SMS inbox messages. 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes
-
com.faba.bdeid.xmxx1⤵
- Reads the content of SMS inbox messages.
- Uses Crypto APIs (Might try to encrypt user data).
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.faba.bdeid.xmxx/shared_prefs/APP_START_TIMER_INFO.xmlFilesize
117B
MD56af7bc0b47a344824ac4bb8bb1ae7066
SHA138a3ebc50f1a6da9655f7f1805e6d0b945ab8ad9
SHA256c9de1c8b7f3361b6c53df43da4d3faefd4aada415bbf10658773bff31719cfb5
SHA51211ba3c9f4eb004174762fa7a4e578a2a6542bc7efafae895c0e73b00b04af9dcf58ff39344c9ca5c0a87517c56dd024f6b309202d05c1d3bf7db4a5e7d0a41a5
-
/storage/emulated/0/.twservice/com.faba.bdeid.xmxx/download/jar/infoMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/storage/emulated/0/.twservice/com.faba.bdeid.xmxx/download/jar/libyhcore.soMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/storage/emulated/0/.twservice/com.faba.bdeid.xmxx/download/jar/libyhcore2.soMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/storage/emulated/0/.twservice/com.faba.bdeid.xmxx/download/jar/oktrlg_2000_1103.zipMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/storage/emulated/0/.twservice/com.faba.bdeid.xmxx/download/jar/twcoredex-n.jarMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.opplugin_V2017.apkMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e