Analysis

  • max time kernel
    3168378s
  • max time network
    156s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    27-11-2022 10:20

General

  • Target

    b97a07e59ab9f91a4df4a6d291ca3d3f190828af39e8e35f0ffb2f2c5e1d4637.apk

  • Size

    1022KB

  • MD5

    91dc2dae1abf4afe2635939c389f421c

  • SHA1

    539040e90f9c9d75c1a3d29bdc80f3df65c4b57f

  • SHA256

    b97a07e59ab9f91a4df4a6d291ca3d3f190828af39e8e35f0ffb2f2c5e1d4637

  • SHA512

    7b7549e045236fc28e87568fcd070bf72e75fd4474535a4034b86521ad765abaf3e8870f9ceed35a70dc5526544fd9bcff3c2841dc893dbf308acd2d61179968

  • SSDEEP

    24576:qVn6NwDOvGy4tyo7mSdLJS8QAv9cxI7661+0B8:cnBDOvGy4tj749A1KU+0B8

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
  • Acquires the wake lock. 1 IoCs
  • Tries to add a device administrator. 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.a
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
    • Acquires the wake lock.
    • Tries to add a device administrator.
    PID:4402

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    104B

    MD5

    d7699a34a8c081e6f6f9ae5ea47080aa

    SHA1

    211d586dbabf7c1a9de648b16af8259e3ae316fd

    SHA256

    a776e75decba187b8a1710990b8de882bade8364063f14ae39638b385501c6f7

    SHA512

    17f01202c95672cf265d75e29a82d63bd7d1eb21542e2c150af78349af3e1447ac090318b385041de852fb74602479d7d8cedf6d0052a8b64b4edd8f0df9a389

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    138B

    MD5

    46d619bf6b8d446fcaab3bf6cc8b10a9

    SHA1

    8137a119e43bf0e83eafbdea875f95abaebc0e06

    SHA256

    15f9bf218da44deaeb522f572091b795e978205d20d11b5f718e2be045538154

    SHA512

    410cd03335d6596812adfea782372812f99ccda821266ff59ece1f8e9e435bf24df46f4b2e549a8b2d30c1774636a5c53ab99bb30ccfca172c1ee31367d5c08b

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    207B

    MD5

    047863f89d9daf8583d1edcd986e4041

    SHA1

    092e74b2ebc9884c1127053fe2cb45a164921c60

    SHA256

    11f25f0fe88ad1a366db98e1758f4e5720b3cbeacf855133f58d52987b2d7b6f

    SHA512

    6e184da187ed6710d3746d2fd3b36ab9613aedb2a4759450ee651828d3de7856335dad2eb6b2617f176c7d1efc451b670e0d9519ed97c1f33b3dfa618e462c4a

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    261B

    MD5

    2e859030d12ef13a6105251c266a7eb8

    SHA1

    0830e46c217cff3a340c8a6cdefde0a89d7adb3d

    SHA256

    241dcc9aa82efd89c209e29d409bececec76e5179f9160d06de14f1454dbe6c8

    SHA512

    1e161903929f390edbdfdd12c8103e62cf56083e58c4991d78ab0f283cc0699ced10d35dd2eaecc786283d7671e3009a0305c79a7572dcad8a10b6fc2c7d320f

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    309B

    MD5

    a52bda399f5631b679756047931bf2b4

    SHA1

    a254e26b28e8c6c55c758664457892eba1a23dca

    SHA256

    00a8bd469cf2afc0ba5f2ab4bf630f9ef39bee6aa2b02dceccc1e41396decaf7

    SHA512

    75290f937a1985c7ccec50c556724bd70d132454da656b228407cbdef6b3657a73e4e8b3f316c2e7804dfa66e8b5425b907324a4dd242d22e7959ce931c91bd8

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    378B

    MD5

    61b26f4092d89cf9e5e1b060a46a6bb5

    SHA1

    b9255712337d6ff46115848618057ce2bfe25caf

    SHA256

    e2db70edb18ce3bf8fe367117a2369dd100b2c5679065bd73d54785778599c88

    SHA512

    a2710dd8110a2d04419970714b780b541d64d1c5ce4bdbb6d916f171b9afccc7dea33bbe50efb250f32a344ee9681d703cfac57540a5b87f4a81e6b8acb77842

  • /data/user/0/com.a/shared_prefs/mybank.xml

    Filesize

    412B

    MD5

    c5515c17993a6c56daf31efc0c5b69bd

    SHA1

    d94bee776da92b43b4a6e895325d8ba0546fd9af

    SHA256

    0131393c722aaf6bedae32b7ada9858759050f9a4518c096af5c6af6e01a8c5c

    SHA512

    876af778818404f1226e6d20508d04b4d737d45752e57aac80e75d3b593601ee816fc155ba8ee98be3c79aa75950e95fbf1b7e6c965eb17dc286468bb39af65f