Analysis

  • max time kernel
    80319s
  • max time network
    168s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    10/05/2023, 08:28

General

  • Target

    1d2394e4501d1ed83259333e5aa81cdbc58557c42a4d4976982d84dd6fdd4128.apk

  • Size

    1.1MB

  • MD5

    4efdbdcb3c341f86c4ff40764cd6468f

  • SHA1

    07181166766b8fdf7296a402406c606bbbad2f90

  • SHA256

    1d2394e4501d1ed83259333e5aa81cdbc58557c42a4d4976982d84dd6fdd4128

  • SHA512

    15facfb461a06011a123d71f8bc3c03cd5ecd29081cc91e085f7a8cfa732e3d1f62088d352218bef2ee88dd96b517f62696b17bf6421470ac3bee56886bfba14

  • SSDEEP

    24576:InVOh6mr8zulVewUKCHpwjqZ9yGm+r+LpEMgZY9rTU3GEEhl:mSrCulQwUKOpljzCLpEMgZYJTU3G

Score
7/10

Malware Config

Signatures

  • Reads the content of SMS inbox messages. 1 IoCs
  • Reads the content of outgoing SMS messages. 1 IoCs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs

Processes

  • com.system.android.updater
    1⤵
    • Reads the content of SMS inbox messages.
    • Reads the content of outgoing SMS messages.
    PID:4652

Network

MITRE ATT&CK Enterprise v6

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.system.android.updater/databases/Dname

    Filesize

    64KB

    MD5

    c48b1986ce9ceaa91f6fab271eddf13d

    SHA1

    0442849ecba1172fdc3674c82bbdfb4ed432cd37

    SHA256

    2f2c2d5355697495dc9b146236e617afe248ef6ac81bbbc7dcbff2a3efa39667

    SHA512

    e330e104bd23a976bad66aa08f39d8a7c5a68d3ce1a65e1237c78bae20c106b34c1922cc3c9587fcf406cac7ef86b791e805b8d75594aa07b4034bd5dc8833cb

  • /data/user/0/com.system.android.updater/databases/Dname-journal

    Filesize

    1KB

    MD5

    8620cfd8be28395d14ebc9765418a69a

    SHA1

    59c4ee508835f1cb832dd767a762fe09dd62e698

    SHA256

    1cac1a4609344c34fc2e5df2bcc13f7b96dbc31d69960e83cd0506c9ca135da6

    SHA512

    9813708af898b764f752f5378970371e0fe2c75be2f1a9b760658574cf1841843d64d3c259051a819c49256e02ca43ec610e207a3d62f6cf1fb13e3a0d7e999b

  • /data/user/0/com.system.android.updater/files/CallLogs.txt

    Filesize

    3B

    MD5

    58e0494c51d30eb3494f7c9198986bb9

    SHA1

    cd0d4cc32346750408f7d4f5e78ec9a6e5b79a0d

    SHA256

    37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570

    SHA512

    b7a9336ed3a424b5d4d59d9b20d0bbc33217207b584db6b758fddb9a70b99e7c8c9f8387ef318a6b2039e62f09a3a2592bf5c76d6947a6ea1d107b924d7461f4

  • /data/user/0/com.system.android.updater/files/GP.txt

    Filesize

    123B

    MD5

    582b61576b15ab7e4f40613db8e55391

    SHA1

    299ff574a9759bef647af77841615caace446eef

    SHA256

    904e6579fbdce994084b55c45ac658bcf89af8dbe8cc23d21a12087f053c7372

    SHA512

    5daf807dd1df1861f9f9e2773027de4cbe4cb2cdf9ac0f3f48f657c89e3ce60c9b4210d31fa72a7f8c9fdaa1701f7123b31c847f56c196a915599c0a48e9c466

  • /data/user/0/com.system.android.updater/files/Tree.txt

    Filesize

    477B

    MD5

    aebcf5debe6c1dbde0bc72de0bc42935

    SHA1

    91b5362246793c2639ff105fe971ad63ef3acc53

    SHA256

    b7ce9eef7c171b6332a23a6d97f12dcb27849048bc8138f55532b811b92d00aa

    SHA512

    e678a23a258f0f0a10afc0ee9f312cdbb9baf1de0827332646dc0089fafd556bb8a103968175b1e54b984f1b99d619debff6a124e770f35972d876d5aa6e349d

  • /data/user/0/com.system.android.updater/files/accounts.txt

    Filesize

    2B

    MD5

    d751713988987e9331980363e24189ce

    SHA1

    97d170e1550eee4afc0af065b78cda302a97674c

    SHA256

    4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

    SHA512

    b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

  • /data/user/0/com.system.android.updater/files/netinfo.txt

    Filesize

    810B

    MD5

    9a49decdb86b954d342058dcf6abec90

    SHA1

    60b9c77ab98055c4146f2a0498f73e2f5b7f2a0f

    SHA256

    4ff2209678d188039fc9b9383080ffeb29ffb5514e37bc58a7fb6d9a767edf00

    SHA512

    cab9a7baa79a26034d42843a1096aaebe5ca2a67d45519a5d1e436d8955f85dec3e4f42dd1f0d60f1b85fd8c9852b77b42841206fe6e44084d82feca0e29254e

  • /data/user/0/com.system.android.updater/shared_prefs/com.system.android.updater_preferences.xml

    Filesize

    104B

    MD5

    4c2869b0510aaa85200385752a50403f

    SHA1

    88d335d8262d9999d69a8da73dbd746db4947bdf

    SHA256

    f66a82b77c7d7289f3f024f2952c8150754c86fd8e16c97c6816a8f77bf62212

    SHA512

    d514ac6d8d1d524cc622054f545290e31da39a2f12065cee931bc6b3a6d7e5ad295eaf83998e20bc65d1c9c8e25dd5c0c0f9467e649136044dc28b5a1f87d002

  • /data/user/0/com.system.android.updater/shared_prefs/com.system.android.updater_preferences.xml

    Filesize

    104B

    MD5

    eb2a65b5080ea818f6c9212cd0d6436a

    SHA1

    8820301118b4a3afb12af42e11e152c6f6650bf1

    SHA256

    6b1c15d5e1edd90081210a1f7ca4102d95fdf2c58b304ad94c9c225165d64d6f

    SHA512

    8541b72aabfe82e88d3b5ac23dbf3fc8fa66ae3302a0f2913d608e5ff28af24147a8caa2988ff8b95d8929ad9632d07dd08707865b7ee5c08bc5204f1d039922

  • /data/user/0/com.system.android.updater/shared_prefs/com.system.android.updater_preferences.xml

    Filesize

    138B

    MD5

    98772ab7b6ff56fee0d8cc5ce8b7c651

    SHA1

    5460837505f07178ab3dd0f7e05432a5f44a5d85

    SHA256

    16f9fc449b132d901603b8da0a2f0cd49fd2f0673d5e05a2baa3b160467f38d8

    SHA512

    f2715f50964873c8c6bf27039fbaaa709dea19e49e0c2f6afc673db3a6285cefa3475301b9880a92dd29227fbebfeda14a05ae7737f47a7c99edb41986a53f11

  • /data/user/0/com.system.android.updater/shared_prefs/com.system.android.updater_preferences.xml

    Filesize

    138B

    MD5

    81a7646edd1ec94236ead72a9da52ca6

    SHA1

    d464aa272892d6d5a0b97efe0ee0e4746ad645d2

    SHA256

    972ccf9029ec996279f86935a4f68fb68c8b5b8a3cc11c4ce06aff9c95506c03

    SHA512

    e87fb5f2574eab8d38312b98f2c02230f1b3318a15f0ba3d4d40d662ee96761080cf8ab08411fd12dc18bded285893ffee817895a422c08229ac8b6b2303603d

  • /storage/emulated/0/logs.txt

    Filesize

    87B

    MD5

    87ec2bd900c2622a69d1d1147bd2a24e

    SHA1

    1af132f5adbb26fb1df5406e1255efea7bf8c0bb

    SHA256

    b7e2d30b81b71f7623038b027d8a4e0af5c0383422dbab174b28f5e1dabd2d7e

    SHA512

    15300caf2077b37a11009d743163a389255693d66761aa0fe7873818239359deea506f639485f206c316dd14ea6264df5b9ab1abf9aa14e70a90b83c1dc00673