Analysis

  • max time kernel
    2572137s
  • max time network
    72s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    19/04/2023, 11:37

General

  • Target

    rms.apk

  • Size

    4.2MB

  • MD5

    99747761c3d1ca513295b1bd76c9f142

  • SHA1

    c1d29249a2d0f2b1f41dc605f8964296b3701003

  • SHA256

    1a7affaef58d943d0e00a878870f12869961d62f33f4637ea7efe490aaff2057

  • SHA512

    4e2673aec7428fbe40edd0a44cf8cd02a67b496f9fbe00573c7987a85cff66a9af8111391676b0d58d9cd69b817952276d2337c61d4c0d58721e667643dc95a6

  • SSDEEP

    98304:lR5n0zt0iiTS78Yy3UUj8T4EwMFwA6CnP5SWtN3i0rXaIzN7A:lTct0KwYy3JEwOnP5SWKIzBA

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.rms.transactions
    1⤵
    • Loads dropped Dex/Jar
    PID:4544

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/com.rms.transactions/app_webview/Default/Cookies

          Filesize

          64KB

          MD5

          dfb2098ca7b3bf16d6f5f1e7d3839af5

          SHA1

          ebb7a8bc886062d77a4092bd306b77a0ce7a3e9d

          SHA256

          e4119d32577d7fc63b267cc23eb7a9bbfb12d238f23e08918c38838fe0181224

          SHA512

          fccec45399258eb98220b7f01b492a72b8b3d1254dec6e196e344d89a0376c6ee24534a31a6675c866d4a17256d3ac6823657eaf04e1d386757d0cbfc6597e50

        • /data/user/0/com.rms.transactions/app_webview/Default/Cookies-journal

          Filesize

          1KB

          MD5

          1be6e3e1f74d4385c299a612882a8a94

          SHA1

          17d4a72360eff58b9f40a3f0d522ab613629df24

          SHA256

          bba6ddf4fadc290e8b731e6e786f028bbb7a2ccf75faa053dedf8f8f190688e6

          SHA512

          2d4c23a9c791e1a8459717af27a5521c46874c525efddca1ffd73271c30afbd39863567eeb8da828f4ec59ee6dad9841f43981af4852023fc1dbcb6a091cf942

        • /data/user/0/com.rms.transactions/app_webview/Default/GPUCache/index

          Filesize

          48B

          MD5

          6d7d499960179766cd4261d12dacc411

          SHA1

          e6f8553b0015e12b23cc551afe98763f3b1c9bed

          SHA256

          c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

          SHA512

          6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

        • /data/user/0/com.rms.transactions/app_webview/Default/GPUCache/index-dir/temp-index

          Filesize

          96B

          MD5

          2b5c0b8febb3781952f29e7aebf29480

          SHA1

          7d965ec3c7fb6215e2e0cf44cb8fc0cade135819

          SHA256

          c76c125c37927e32b23a259f0c26e0c13aa8ce579bcd47a0e70c8f3a5b26a96f

          SHA512

          430a08e87813e75a8da4e5f5824f7bb1eea3d4ae1634116086f3692c2a5f950afe3753db9abd5f93c0267e3426793ec3fa1a94cc305f53c490f124ab1c316dbf

        • /data/user/0/com.rms.transactions/app_webview/Default/Session Storage/000001.dbtmp

          Filesize

          16B

          MD5

          46295cac801e5d4857d09837238a6394

          SHA1

          44e0fa1b517dbf802b18faf0785eeea6ac51594b

          SHA256

          0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

          SHA512

          8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

        • /data/user/0/com.rms.transactions/app_webview/Default/Session Storage/000003.log

          Filesize

          61B

          MD5

          9f7eadc15e13d0608b4e4d590499ae2e

          SHA1

          afb27f5c20b117031328e12dd3111a7681ff8db5

          SHA256

          5c3a5b578ab9fe853ead7040bc161929ea4f6902073ba2b8bb84487622b98923

          SHA512

          88455784c705f565c70fa0a549c54e2492976e14643e9dd0a8e58c560d003914313df483f096bd33ec718aeec7667b8de063a73627aa3436ba6e7e562e565b3f

        • /data/user/0/com.rms.transactions/app_webview/Default/Session Storage/LOG

          Filesize

          132B

          MD5

          79122ca851eba79a39934842ee17ee40

          SHA1

          ce2586df1bfe33e156ab344fffa3380975fc905b

          SHA256

          be1565e5c51e7c2193ee17a71cd19ffa97bdeac159e4055beccc3a7fc8fd0ba7

          SHA512

          bca4ca9ef35f7f770980afff62a257704093ed2ce83b0caf996f7efad57d5bb79b7ba42a6b5ffce1f127506ea4ae2289548828599105ac1204370d717c7b777c

        • /data/user/0/com.rms.transactions/app_webview/Default/Session Storage/MANIFEST-000001

          Filesize

          41B

          MD5

          5af87dfd673ba2115e2fcf5cfdb727ab

          SHA1

          d5b5bbf396dc291274584ef71f444f420b6056f1

          SHA256

          f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

          SHA512

          de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

        • /data/user/0/com.rms.transactions/app_webview/Default/Web Data

          Filesize

          120KB

          MD5

          a48cd9324b1f8754b07f00d863b840f3

          SHA1

          11c6614775b35a58f440971dfc87c8aaac6d6173

          SHA256

          8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

          SHA512

          35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

        • /data/user/0/com.rms.transactions/app_webview/Default/Web Data-journal

          Filesize

          2KB

          MD5

          85036c845b3330ea8bac59deebaaabb5

          SHA1

          614609361ba4c5f784a8e1aacbae7ea1cf5ca8aa

          SHA256

          c31a6724ebaf082b5ab42913b3eceb9574a52e27f781f1948b358ceee4566c71

          SHA512

          c48e43205310000653ba5083d675d08257c5a78f889815829134c12766406ef3addc50c0f975723a1775762c937357e557c98a1e7d398e7c23d03bc0c92b6444

        • /data/user/0/com.rms.transactions/app_webview/webview_data.lock

          Filesize

          26B

          MD5

          170abec63a0277d3751636da801db2ed

          SHA1

          64a0badbd2bbd9f0b914622e7a0ed34827237e7b

          SHA256

          745882dd85e7d2b34dfb36b6c2b71771f1be76533855d0b54cffa147312fc322

          SHA512

          23735a1fd2ad10dcebb7d98868e356182e1bcd2debfd9543331515d708fdd90178ab6dc4a365ddaf04a557aae89378a64685cd5ab409950425cd831359a8c46f

        • /data/user/0/com.rms.transactions/cache/1664557424545.jar

          Filesize

          21KB

          MD5

          722310b17c81cc3d780d23e1a63eb450

          SHA1

          0a0c1a939f923570e5da88aa5c7b105052f056e3

          SHA256

          9f2d7ff525ca785553557c351812252c0beface31440517e2f19929fe76472b1

          SHA512

          1a48e9383a0befb0c6b4755a8b56f352fba317910308f701e13ce8189c465cade6b0af510165d586745f1913a61cc68f91395949202394336a59c34596691a91

        • /data/user/0/com.rms.transactions/cache/WebView/Crashpad/settings.dat

          Filesize

          40B

          MD5

          aa6ec9756d4466b6cf06da08ae7f2f7d

          SHA1

          651e8dfb6c2bf898b8df05d018ac8b4b9e15d7e6

          SHA256

          77eeca31b6f95fe4993b38f8f82381865b481b1435e2f7a6bfb544e36457e698

          SHA512

          0a6ede7d2ad6365fe24a8222f86c4a59f9436a690c5810716e46ddd6d141b4a9ac7eebfe4668409433f0a7464fee4b23de4c0c227b23f3f8b06be423f7bce6ba

        • /data/user/0/com.rms.transactions/cache/WebView/Default/HTTP Cache/Code Cache/js/index

          Filesize

          48B

          MD5

          6d7d499960179766cd4261d12dacc411

          SHA1

          e6f8553b0015e12b23cc551afe98763f3b1c9bed

          SHA256

          c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

          SHA512

          6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

        • /data/user/0/com.rms.transactions/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index

          Filesize

          96B

          MD5

          634b639bb3fb51b577e839eaf3f2e3e9

          SHA1

          442ce3dc1825ecfb7302dcc87634ceed19a883dc

          SHA256

          f233389cc87586419659f48534a6f6314d8ee5864fbe76e4a1d82750ae052f24

          SHA512

          55febf31126c00e68870538ca65ebe6b59ed8b584468ec88e9e35366b736b07f4f6585fb4b7b99e84c3d0fff04e410f59c7fdc351999854ec904ed36869c1b2b

        • /data/user/0/com.rms.transactions/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index

          Filesize

          48B

          MD5

          6d7d499960179766cd4261d12dacc411

          SHA1

          e6f8553b0015e12b23cc551afe98763f3b1c9bed

          SHA256

          c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

          SHA512

          6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

        • /data/user/0/com.rms.transactions/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index

          Filesize

          96B

          MD5

          ca19ad79b850b1502639a9758ed6be5c

          SHA1

          12dc0b77a441d1eee7c309d803ce119265b81cd4

          SHA256

          afb47116da453a035ca212576a131e0740408f6002051c4d9e7261fc7cb822d7

          SHA512

          2f2d2b0996defd286ca44227ee4a73439e0fcab14c4bf16902b5780d3920b0d021e3a06ccbe843578e17ab4354a24c6d3c3b7091345700a14bdbcf9351278a46

        • /data/user/0/com.rms.transactions/cache/WebView/Default/HTTP Cache/a33d23c25bb7d919_0

          Filesize

          282B

          MD5

          8984989607527e41ae797881bdec0308

          SHA1

          a439648478cbb415440ee4186452db24e9af80e6

          SHA256

          ddfc29706d710234fa49d5bc09c274cb9a5996f652395b047c96bd6103ceb43c

          SHA512

          41ca98d910adc3d9b7dc8249a5314741c132294f9524ecdb28b4cb70c7b92375666eb30e1c4b95d692b8a6b4e2e13a0a80e2ea9dac575e1c7af5bb313f956c01

        • /data/user/0/com.rms.transactions/cache/WebView/Default/HTTP Cache/f038e94cb33282ab_0

          Filesize

          400B

          MD5

          a62b20c6608b3694260e345c1d80b467

          SHA1

          ea6bec313d9a059a7f4e1e72bf8cfbae621846d8

          SHA256

          6da95ae1acbfb719cf6466b2e0cbf3379ce393df0f2f7061acfd4048ccd3a929

          SHA512

          f68c3bfae54b8f75d56a63cd823e99ce8c6472db38a5120508540b4ecd1a724f29156f93dca5a61939408c74312689c0fc58084d2e2240e584c87d5a3a4bdd8b

        • /data/user/0/com.rms.transactions/cache/WebView/Default/HTTP Cache/index

          Filesize

          48B

          MD5

          6d7d499960179766cd4261d12dacc411

          SHA1

          e6f8553b0015e12b23cc551afe98763f3b1c9bed

          SHA256

          c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

          SHA512

          6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

        • /data/user/0/com.rms.transactions/cache/WebView/Default/HTTP Cache/index-dir/temp-index

          Filesize

          192B

          MD5

          69700a3c742d2343abf5e5defd52629f

          SHA1

          457c4738d2f563bca4a3dd5bbff19f7737c5ca6e

          SHA256

          858a11a27a2d6455b5a0628956117fae9f907c050b34652d1c3fb3b69716e251

          SHA512

          c33a17a177741f67824c4a0385de25113ad6330809cf3ab22a06ae9f1f631a32e89f34eb90ade71e4077e54251fbfd76997635810cfe514044bd7093cf40b50a

        • /data/user/0/com.rms.transactions/cache/WebView/Default/HTTP Cache/index-dir/temp-index

          Filesize

          96B

          MD5

          4b5e9acd3844513d126af443cf06e074

          SHA1

          abc91ffb1756114a536db0b50675381255a18055

          SHA256

          53613cd95295e3c24ad1a6c57423d6d62a93bd4947dc4ff3e1eb61116cc75bf9

          SHA512

          fc625ba9888baa3a689552041bb5c27c714927dee4aa3ceb12d29f67d1771670cdc76d332d1e1837f415af08eb27143e8cb308a339c234fcb4850ec20a185d4a

        • /data/user/0/com.rms.transactions/cache/WebView/font_unique_name_table.pb

          Filesize

          57KB

          MD5

          f080fa2a56ab5479d58063e5ea871447

          SHA1

          4b3fd57a98916fa5784305b76ba30af26b5253d9

          SHA256

          0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

          SHA512

          8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

        • /data/user/0/com.rms.transactions/databases/google_app_measurement_local.db

          Filesize

          88KB

          MD5

          5036325c2ec6cc6e0b9559d681bb3b2a

          SHA1

          7908903c35359628b858d88c7495c5c8d9140280

          SHA256

          ce587a458dddc6668da3d9c0e38ff52e1dbdc6792c1a595a9e8005fe1a70cf53

          SHA512

          9f709045ad010e4ac03ba6ddc43728aae589ba36f057b62619e996f5a4e6cace2c460f836e4573b8ba0103822882bb98f0c14a063cac05de37debeca969271cc

        • /data/user/0/com.rms.transactions/databases/google_app_measurement_local.db-journal

          Filesize

          1KB

          MD5

          77f95d5aede09e01f415bb7e268a441d

          SHA1

          d2f53aecce3927b2cfb2bb2052639ef5e4b274c4

          SHA256

          d9e020d8b03a28ba36df60cc43f2eac59d08d3255170cf6227fce6e250259d66

          SHA512

          7f8c3711c8e2056011575d5bfd381b6c9cdf18e0eed771a610617a00ee4904451e141d35d3f51b1b2900e1c07409412eba1d4660c5c896c447a9c34f53aee72b

        • /data/user/0/com.rms.transactions/no_backup/androidx.work.workdb

          Filesize

          8KB

          MD5

          e579a6b00eef1318f9166352228eba18

          SHA1

          76988896854f0139083e77862eea1a4846cf039f

          SHA256

          4b34cf505050facf47aa7936e4e7667e1969105665c632b3eefe7ecddf9a6935

          SHA512

          c47632e957d87727bf6504a82ca7a44d8da24d30cd997a0f449a96e4f97c656a1b4d9da3fcd827e2a48c59677688da0b872358ebd0f9369d898d1b8ec18d5699

        • /data/user/0/com.rms.transactions/no_backup/androidx.work.workdb-journal

          Filesize

          1KB

          MD5

          7f8f6652052c9616d7ea304bb3a6c5c6

          SHA1

          ab45bd9386a2cd96035da12afc83210412506b47

          SHA256

          17f8e346804311302165be78500174b32419cb8dc3961af45abe590edb25d958

          SHA512

          434d01310e1408a53aa967b923c3ed9873bd8d6d764c3a1a04c0943e67e882203df27f3217f39f2b89e09d33013e55441f9cf6f19849941d1ad5f37adc61acf6

        • /data/user/0/com.rms.transactions/no_backup/androidx.work.workdb-shm

          Filesize

          16B

          MD5

          4ae71336e44bf9bf79d2752e234818a5

          SHA1

          e129f27c5103bc5cc44bcdf0a15e160d445066ff

          SHA256

          374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

          SHA512

          0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

        • /data/user/0/com.rms.transactions/no_backup/androidx.work.workdb-wal

          Filesize

          402KB

          MD5

          c9aa0b11d525ffe72ddf4c61e97d1a79

          SHA1

          e28f1048839656e3aef7fcc292184f0e4af2f9f6

          SHA256

          caf5afea3aaea68b83886939c3b8333590c2a815d6c70977f55cd36464dacd9f

          SHA512

          6e54b6ec6fa66a9867d9750faa30d8b15e14277c1e784e9e932faa4bdae553983e7c2d2b9dba940ee0a07f50e6ee7e5e5779a65e7689903c28e82533073dfd4f

        • /data/user/0/com.rms.transactions/shared_prefs/WebViewChromiumPrefs.xml

          Filesize

          127B

          MD5

          97ccd9a2b2063143df56b6937f961ca4

          SHA1

          5e78a91ae5df289ce83443cb7d5589dd3504fb5d

          SHA256

          248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

          SHA512

          86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

        • /data/user/0/com.rms.transactions/shared_prefs/admob.xml

          Filesize

          133B

          MD5

          67d68543a2c7e42acb906ef4a466aeda

          SHA1

          f16421b860abc0be941347da42d55b07381b4432

          SHA256

          a4c9ffc413c6718cc6866010c1ce846ba2ce1892309ac6ba09bb2ca012cfc9d0

          SHA512

          9aff9a5e220b50a1b6abccbf40d7bdb00b0b99c9e5001b6b334140a43711ba2ef92a8c39611afb9bd512f28522771aee803eb68b4e75db16d69bf0240713f6e6

        • /data/user/0/com.rms.transactions/shared_prefs/com.google.android.gms.measurement.prefs.xml

          Filesize

          122B

          MD5

          250b4caeba60ddf53228405750ba66ca

          SHA1

          422ab714feb34e9f3b4f1cbe669887bcd581ddb1

          SHA256

          2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

          SHA512

          373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb