Overview

overview

10

Static

static

7

YouTube_obf.apk

android-9-x86

10

YouTube_obf.apk

android-10-x64

10

YouTube_obf.apk

android-11-x64

10

Resubmissions

29-03-2023 00:17

230329-alflfafg2s 10

27-03-2023 10:02

230327-l3abjacg95 10

Analysis

  • max time kernel
    718104s
  • max time network
    1223s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    29-03-2023 00:17

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    YouTube_obf.apk

  • Size

    2.6MB

  • MD5

    9a04cd4b51e74d6951c2c7f78cb0b7bd

  • SHA1

    791880e2417efebdec3bb56c66d9ac18e32c96d1

  • SHA256

    e4fc786d2c691c5e735db758881b9f7a455148615a4bc140ba286a1caab4254f

  • SHA512

    add5a5cca243b1260cdb635d18ca0addaec009f32ca6fbef5e6a8c3debe92c65fc35ed78bc40f6efd1eba6bb004976b7242385613ffe290e5789765456d65947

  • SSDEEP

    49152:5G+mYa9G5wqCZhjz6UYSWrqWZJ/9h0D/Yw36O8RJtnkats10N4NIJ:5GYa9G2VGUs9eb8RLnt54NIJ

Score
10/10
hookinfostealerransomwarerattrojan

Malware Config

Extracted

Family

hook

C2

http://176.100.42.11:3434

Extracted

Family

hook

C2

http://176.100.42.11:3434

AES_key

Signatures

  • Hook

    Hook is an Android malware that is based on Ermac with RAT capabilities.

    rattrojaninfostealerhook
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • com.cinecaluxozixu.benama
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4749

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.cinecaluxozixu.benama/app_DynamicOptDex/ODNGfSF.json
    Filesize

    704KB

    MD5

    6d5e9bcdab546a41a32dc134a0ca23e1

    SHA1

    272c6afdaebbf7a6bb78f42f659d5806b30a6907

    SHA256

    1a80d8632f0dc7d62711f32af196dd4ed98654453bc261288dc52c164f086071

    SHA512

    54d31460ce8dd7b0616000bbb6ecbcd49860583b08578af5023bbbdf91705de04cd51ee7d919eaf56b40b6acac0f30df05921c5254dbdbfb1e5ec68c42c17ac3

    Download Submit

  • /data/user/0/com.cinecaluxozixu.benama/app_DynamicOptDex/ODNGfSF.json
    Filesize

    1.5MB

    MD5

    089544070959213580514e7b1587508e

    SHA1

    2e65d6a4b733fac241243dcbb3f45924358fa263

    SHA256

    204e9b3006016eae2c3b6323483c02515a158e722bf205571ec576e25d52b4e4

    SHA512

    f398f8ebcdfd628ca78fd17d74c9b72932987d81a94d2db8aceea692e274f6a9b7df751ff73b69526e87f6e379f1f412235ecdd8c72de7d51b3e44e8ec8192f0

    Download Submit

  • /data/user/0/com.cinecaluxozixu.benama/app_webview/GPUCache/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    Download Submit

  • /data/user/0/com.cinecaluxozixu.benama/app_webview/GPUCache/index-dir/temp-index
    Filesize

    96B

    MD5

    88196c6410e446c49e5877edf851908f

    SHA1

    8c96bb3ed418094b0a6260f0a8d90226595bfc16

    SHA256

    86845af2586cd74467379b28dee1dfa049f000415f81b7020cc1d13d204d596a

    SHA512

    84fe57810a9500a51e2c118c54be9a7a11ed30548fd1c4411ffe874b23dea6382c426c387eb95d812cc69851ba1b9f58d4f4da2124a03e1648b4914b83f66ed5

    Download Submit

  • /data/user/0/com.cinecaluxozixu.benama/app_webview/Web Data
    Filesize

    112KB

    MD5

    b663831f8cc130493476d94f2d7a5330

    SHA1

    043a1956ab8e40821d67043f8a9110a8eb36fb93

    SHA256

    c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

    SHA512

    e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

    Download Submit

  • /data/user/0/com.cinecaluxozixu.benama/app_webview/Web Data-journal
    Filesize

    1KB

    MD5

    c685a780b40e04c82373e30c12bf3ad2

    SHA1

    ed13ff8b2ab624a6d7e1f51812abda813fc2f591

    SHA256

    0b765f12ed70d8791cf8a8a5c06d12e66059fa45fd503a5e0d271cee353eb9f9

    SHA512

    6c4e611b0a5892c35352037b2d09dbc026dccbcaf40a0c49d0e38d181935a7d6e16d8b23cde90b13d495bebb6b2c74f5add9a155c778d1398ec43eefed0f13d7

    Download Submit

  • /data/user/0/com.cinecaluxozixu.benama/app_webview/metrics_guid
    Filesize

    36B

    MD5

    0f92db4e1c22902b370eb655be909952

    SHA1

    769754257a65c92260025e0a543c1ff813b6e255

    SHA256

    ffab977ec512527d471789d532e99a962aa55f3111e79279cdee8568f76f662f

    SHA512

    afa8d65d816466d8fc6c4fa63e61fef8dbee73c0cb50da61ebd66d5e04079d17c0fc3e76d9d1020da637ec5b9c272bfb8c262d0003b79041d245da7efab64248

    Download Submit

  • /data/user/0/com.cinecaluxozixu.benama/cache/WebView/Crashpad/settings.dat
    Filesize

    40B

    MD5

    2d5e5d4a117f80af6629f46889df0590

    SHA1

    52aa75757d3dbf93b88839fe66cfaf83532c0a7f

    SHA256

    90832a017fdfa48c9ffe71278c1845d22e4b99f1db11269d4778b75c5bc9d872

    SHA512

    d6fb06d29af6f5a0861ad989fa846cb9d0e0a517d3341e19fb4340fc03bfea0ca4bc959f4eb95df62c35cd6c6114b96c60bbfe95ef0c781267e5d9f11d56cd84

    Download Submit

  • /data/user/0/com.cinecaluxozixu.benama/cache/org.chromium.android_webview/Code Cache/js/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    Download Submit

  • /data/user/0/com.cinecaluxozixu.benama/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
    Filesize

    96B

    MD5

    82f9a607ae17ceebc1b28de5df6b5808

    SHA1

    47189a3ab9df880dfbf9f8cb17869b6679b6bccb

    SHA256

    0a00b679c80427fa8322e8532c38ff969807ee57a54c2237aa804e9ea796365d

    SHA512

    f1fd25db137aa4cd94b81478993c5b553dc4a75ab9f548735b5d31eea48072511fc925e70592d746cfd097eb875d697a710283a4d08e296cae05f4f3601b154a

    Download Submit

  • /data/user/0/com.cinecaluxozixu.benama/no_backup/androidx.work.workdb
    Filesize

    8KB

    MD5

    b6ca8b30661a7844ed292db75a29a953

    SHA1

    8e0d397ab1f2ced1f143829084c3f53333743bdd

    SHA256

    63a219c7092be26641907c5f955aa977e7675e3922a8e4ee2af25bfed8c7bbfb

    SHA512

    d21ce3adf13d61369708ea000438f626973f20b08ca05a744c1cccb2d5e7c264a8af9c3ebd18a7a6a464d38e1c64146f8e881d29d71a0484dd94212315f6dceb

    Download Submit

  • /data/user/0/com.cinecaluxozixu.benama/no_backup/androidx.work.workdb-journal
    Filesize

    1KB

    MD5

    4aa1ff0f1ba4e32d9e552110e44c4262

    SHA1

    cf9d6d99f5efcc17465baa743c8b82263db7a5be

    SHA256

    de07b45830f1d67462938a3391fb56dbdd13c410e746fdf6d9bee9d2c37798fc

    SHA512

    a89a544b539a19b1e49954570086ccd1f9252fb502d39f866cde4e02e2f0d351cbd026dce8eecbed3b56c1f84a7c6613dee77ef02e58d40f53de5fe5ff0f33ca

    Download Submit

  • /data/user/0/com.cinecaluxozixu.benama/no_backup/androidx.work.workdb-shm
    Filesize

    16B

    MD5

    4ae71336e44bf9bf79d2752e234818a5

    SHA1

    e129f27c5103bc5cc44bcdf0a15e160d445066ff

    SHA256

    374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

    SHA512

    0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

    Download Submit

  • /data/user/0/com.cinecaluxozixu.benama/no_backup/androidx.work.workdb-wal
    Filesize

    394KB

    MD5

    2e18914c5ae7ab3d5513db5155c6d168

    SHA1

    ec7b3fb69c078a783c82a505e21e73cc3615f308

    SHA256

    ee3400d62b8bfc4d8bb4eef5b4b19ab56b3a94cde3c2f575c843376f7c9f9efd

    SHA512

    a0d3897f4b9dc1e73baaa82544b7398c3555397085043a83d84ee1d97633500fb94391b914bad25e43c6b3ece2406db889a2ff463de76710b34a6011bdef659c

    Download Submit

  • /data/user/0/com.cinecaluxozixu.benama/shared_prefs/WebViewChromiumPrefs.xml
    Filesize

    127B

    MD5

    6ef709b8536878951e87c29a1518fc2b

    SHA1

    24376c70b00152501b3d98df61fa7db435339172

    SHA256

    10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

    SHA512

    96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9

    Download Submit

  • /data/user/0/com.cinecaluxozixu.benama/shared_prefs/settings.xml
    Filesize

    138B

    MD5

    7ceae0a9d45f1c82277d4a61b25e06fd

    SHA1

    d50d12087085a2a4022ab438544ff5cb21b877d9

    SHA256

    546f08d3ef03531c006fbe4271232b5d3056da72465664a8363bb1411fa1e147

    SHA512

    043b7f77726684a39dd67340a2e1e2cbc3fe101acf088d8acc0220e7a1d4cdef48232cd613c59057c7ed717a631a0e09766995c2f8f755887a53c411b2fa2800

    Download Submit