Analysis

  • max time kernel
    309248s
  • max time network
    14s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    02-02-2023 13:42

General

  • Target

    e89167f48be6be17e73fb80cd9c08aeb0e70e235.apk

  • Size

    2.9MB

  • MD5

    d386957159b5b631037ad5580483fe17

  • SHA1

    e89167f48be6be17e73fb80cd9c08aeb0e70e235

  • SHA256

    bb094b74f031eacdcb83ea4c4b57d6c95d91e55e4fda8d7c2e70271e2782ab21

  • SHA512

    2a6033f7c28e8c5c9d47fd0160b52ac65e1074b07448bc5fc888673f197b821a404114f4ce8b95536ea128965b8f862690fa66ce97ae773fe54621c3eaebbb6d

  • SSDEEP

    49152:hqHGtSQo7ucL01jVc4P3iKYMflKLOgTTrc8QfbraSTpx0Es8pzKy1:hqB57ODLiagTvmnzLvl5

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.funnygame.twozero.exo
    1⤵
    • Loads dropped Dex/Jar
    PID:4704

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.funnygame.twozero.exo/files/__pasys_remote_banner.tmp.jar
    Filesize

    99KB

    MD5

    5b271c7184ffe556e61f9773901f3326

    SHA1

    44db5e5add4a52f1e1e078d9edf95f78c73d76d7

    SHA256

    63491f7cb9872009fda5a4b8af6cdbb37eae3deb8948c34158c364d248496458

    SHA512

    024bb78a5ff09b81986bc640c7dc84fbd4b64a876edc2e65e569235512c326bcc6a03a2734042728ec7ccc484510ddcf24d2b227fca31c93a97efbca3ca7d082

  • /data/user/0/com.funnygame.twozero.exo/shared_prefs/727B1CC2EF04634D.xml
    Filesize

    164B

    MD5

    f5b644d45f94a0bba4caa2ccc4eb79d1

    SHA1

    eeb97da5e640270c4cfee4575f3284bdb823d31b

    SHA256

    9e8dd44bde98c842531726df9a1a492b7d273350969055fe4112691cb5ee5543

    SHA512

    621b47bc1f51ba57e6d91e07b154ffb25dd9032085ea92fd75df5303dbe52b42059358d3a422c2b6aa72ae5576267e27ae259428df1f0699e13e9692c9392f4f

  • /data/user/0/com.funnygame.twozero.exo/shared_prefs/727B1CC2EF04634D.xml
    Filesize

    258B

    MD5

    40edc6af4dde4f254ce96d632c809f71

    SHA1

    4c4fb14180b21964eda3eda9b36bfaf18268ed87

    SHA256

    79913ab474df53e11576eb47320843579df44f6b36ebcfb8b2fcc8f09ab7c5d8

    SHA512

    aadbe04aeb30ddff51330623aa602b0bb0492dd41e19c3083c42c3b1678536fea80a1820781067becc55867429f92d8005f22b8719c7200c068ca6e877af3524

  • /data/user/0/com.funnygame.twozero.exo/shared_prefs/727B1CC2EF04634D.xml
    Filesize

    352B

    MD5

    b624eac78639bb253c5ef57030f6cbef

    SHA1

    4f40166fc52f92d5424bf8dfa38d7428d4daca98

    SHA256

    ca15951436b63b171e7fe3596257fef8a5abb2fce1c770b1f4c89bc779d004e7

    SHA512

    faee494263c1b88e77cbd171960dc83eb31be5526e45006ecdc2b8aa4acd32a4ecd81b978647bb2c89effa7764e42b0925e9553a0b76b6db5143f71dae90d6b3

  • /data/user/0/com.funnygame.twozero.exo/shared_prefs/727B1CC2EF04634D.xml
    Filesize

    414B

    MD5

    a4428cc3847276e60e70dd62e0469de4

    SHA1

    5c96275bfc23aacfc26243376280fd439f7c4028

    SHA256

    a8f37feaebac3569d42a106932ef5de12b26579425ce273a22462e189c92bb26

    SHA512

    0d6460d87b219ee3ece310aaffef6f02ec0e5c22f531820e203e270c54eefff313de0e6a6b20108e525aeaa4b91f7c98d52c82c450da72a9aec4bdb4b080e231

  • /data/user/0/com.funnygame.twozero.exo/shared_prefs/727B1CC2EF04634D.xml
    Filesize

    540B

    MD5

    462065862610079e2940c124daf611c4

    SHA1

    23d0da8dd6e142f5f3f629260b2d4509fa4a6eaa

    SHA256

    1355fc281c45ff334a40fa2b19e617bcd3d69184b04e380a62cc7e74bde21fc8

    SHA512

    09e01ce7bd839f0481c27ff6bbafd199b7d81c11834e94c6cc24b88083a0c35adcdc322a4b640af407a86c5bb1c7a31c767a9d8d9750cb7e2822e74093ce4cd2

  • /storage/emulated/0/Android/data/xo/co.zip
    Filesize

    283KB

    MD5

    f1ebe8efa52a67fd737b6b4039eda40f

    SHA1

    786205b4e5b48d3bb8aebd30796fadaee82721d2

    SHA256

    7b8d5e58e16c1cd67d2095596fe9e698c8c7ca94a12acb17f493e63b6f8d55f1

    SHA512

    2f2aed3ac7fc5032bbc90d2ce1e44c8e58979405613e28176f051adcb4d02386b315d4c9298a6b2c5006fc54ee23c6a01fe82df56a5de67a8de666fc49664fe5

  • /storage/emulated/0/Android/data/xo/co.zip
    Filesize

    18KB

    MD5

    1e2df557ed00567c87b3c0642a7c1821

    SHA1

    a3a24b0325abf8ffc2d28d9760600a435d0877d0

    SHA256

    b144180f6b56b2d6bdeef423d0ed87325add1bb5d579125b5ad270b35351c604

    SHA512

    3942ac7c87c5f41f7d8196e8f0fdd896fd56e4a70bcc87ec8b142d0eeb26904fa6c3275f171c985ca0958a316bce56b5a37a56900b84c088c3959ac192c42f51

  • /storage/emulated/0/Android/data/xo/n.zip
    Filesize

    274KB

    MD5

    03fd70dda4b9bb8828e84af1fd09be0f

    SHA1

    44f3580b72f2bebec195d78d5504283f456350fe

    SHA256

    fecd01d815d6a327c6ccb01e4e81a9b75d2a26794112e9bb8df218318924c2ca

    SHA512

    4959cb0bd0ade27c8ee8086ad7bc6f161e92b742ac55d8c339ee314a0a2d0e42f1701e78151e351038a6564997e76fb48aa9dc303e22a59dba50c51aed30ef31

  • /storage/emulated/0/Android/data/xo/n.zip
    Filesize

    319KB

    MD5

    fb4a6e316037107bb1b3ce4045f224ae

    SHA1

    030b2808f115436cd08c724e62c255df4b183b45

    SHA256

    75e486b233535c894f6669b856d977d2bde6bc3add76931955de5e139ebf51eb

    SHA512

    d394589226be3bcb2869fb9ec8aae6fae64d290bac22d6014e9ba327dd1e6692eb1a34c051365737bd5a3f2cb9c4205ce5969abd353d3fc1e28738bf5507e63c

  • /storage/emulated/0/Android/data/xo/tn.zip
    Filesize

    10KB

    MD5

    2610a4b9b244bf83224bbffc90bd9045

    SHA1

    3d6aa96f313861e814355a63705f98f25552d55f

    SHA256

    aa9d09cff1c8dffbcbd6217b6856d1db3bf95f02179fcdf715840472bfb357ac

    SHA512

    046a36960c168b37b32edb4dc81fd179f7ae2b524f1ef6b5fd8b86d74374b4b8e2fd8b1d583206822c6f9e151ad69cc8d432f731262b51779f496763b3466537