Analysis

  • max time kernel
    3165105s
  • max time network
    156s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    27/11/2022, 09:58

General

  • Target

    af78a737b276d7bb1559a2cf9a3a3a3860d96b9aa043365045c3497eae89eb87.apk

  • Size

    1.0MB

  • MD5

    321f16ad435286f5f1ccea5924f60445

  • SHA1

    58916ee979f3d690348743b46df2c581b2fdcdcd

  • SHA256

    af78a737b276d7bb1559a2cf9a3a3a3860d96b9aa043365045c3497eae89eb87

  • SHA512

    e6eb07ad1c0b3f28c0393c146d9ba9736e7d80298d3aa9e10f411d7b25853acdcf6b4f38046b00eb4efb5295a8215233a39eec58500b3f348017aec6fff43918

  • SSDEEP

    24576:wVnRNoDOWmULtyoqmSlMGS8QA8HWEUQAtP6piln+8:ungDOWmULtjqC9A8HWEUEp0n1

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
  • Acquires the wake lock. 1 IoCs
  • Tries to add a device administrator. 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.a
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
    • Acquires the wake lock.
    • Tries to add a device administrator.
    PID:4078

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    104B

    MD5

    d7699a34a8c081e6f6f9ae5ea47080aa

    SHA1

    211d586dbabf7c1a9de648b16af8259e3ae316fd

    SHA256

    a776e75decba187b8a1710990b8de882bade8364063f14ae39638b385501c6f7

    SHA512

    17f01202c95672cf265d75e29a82d63bd7d1eb21542e2c150af78349af3e1447ac090318b385041de852fb74602479d7d8cedf6d0052a8b64b4edd8f0df9a389

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    138B

    MD5

    46d619bf6b8d446fcaab3bf6cc8b10a9

    SHA1

    8137a119e43bf0e83eafbdea875f95abaebc0e06

    SHA256

    15f9bf218da44deaeb522f572091b795e978205d20d11b5f718e2be045538154

    SHA512

    410cd03335d6596812adfea782372812f99ccda821266ff59ece1f8e9e435bf24df46f4b2e549a8b2d30c1774636a5c53ab99bb30ccfca172c1ee31367d5c08b

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    208B

    MD5

    d7ce983e1e37134ef8e3c02894e9c326

    SHA1

    80134aaeb281dfa7399bbf019b3377255bf00ad8

    SHA256

    7a1892816938705201a9aa4e4fe1d879509b44fce64bf0d50d9f27416b6bbdd6

    SHA512

    ab5d9076e6f52b4d67e1108d1f4648daa0ebbdb494a99c1395e8c659dd9efae0ba782e470ced4653ce3fa39d7db05c8d383a662023ea5a8519a156c80e13d2d3

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    262B

    MD5

    321e31533db540ba64207357d93d9e75

    SHA1

    c35fe1b96140a816097e49d60857dbcf70866896

    SHA256

    ebeb24b9d94ee649c9e7cb119c8cf04382b03bb0b9228532c3b59ed7de2066d1

    SHA512

    cd7ef0a45fe3b6974ea0d8dae763fe7b812f1be5580af8179935879c89348961893cd57c8c57e611110899d4fff0b3f95dcdfd651a9d8edee55d3450ccf6f70a

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    310B

    MD5

    f86453cf0d0368695a7da8368046974a

    SHA1

    683386f375ce3bee23294c9c3f8316f00befd0a7

    SHA256

    99af4182bf85641bcb94c83ce2d1e5008ad812bcedbcd917e622f4b7768ebb6e

    SHA512

    8df04b1f29b95a1a95c2be30b0a49ea4f2e86d26b4e470128f89aea329fdc70af2cf36f884168c47e6c65537c00a7b9f24e4edc322d58b4f565119887c4b4a44

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    379B

    MD5

    8057325600ef45dbfd4d747a8be26fb3

    SHA1

    7ea06fd40ee0fc4a95269a5a6a6e1601be53e6f1

    SHA256

    93d7d33d5a87fbd8c595306e4b1d3d44f88d781bc62321a7dfe87720e799f2b7

    SHA512

    637c7809a4fa1e48aa9638220f38b62e8078fa5dda1ba61508c98c968f0bd57b0a1eb9347544c455a6e742a26dc7cfb9522ce42a45b8b4d50427c77874d47849

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    413B

    MD5

    b1fe8431d75876ca0f2aa2f2b23e0f0d

    SHA1

    1016f5a116867f8cda263baa7d1b04c38daf4350

    SHA256

    3728cb2c7e8bc739b95844ca489bdb6d9a419d7f9a7ff08ab5e5e17ce8ea588c

    SHA512

    de2ea467fd9c0c043adee9a9bacbdc221981a3ba8432fa1b660bc5d57a6418efdc36d97350a126e41718365101e74a079f0a189bd0070b79c3a924ae208bc5eb