0de832302ec11bcfda465e903fcd66b2a0bcc8c2b627b43196ef76ca02899765

Analysis

max time kernel
203000s
max time network
158s
platform
android_x64
resource
android-x64-arm64-20220823-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
submitted
11-05-2023 18:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0de832302ec11bcfda465e903fcd66b2a0bcc8c2b627b43196ef76ca02899765.apk
Size

560KB
MD5

fbf3348f3137dd673745677ffd8e91ff
SHA1

4ef579ec156a4e6aa2f9e72c56819f7c9e060f05
SHA256

0de832302ec11bcfda465e903fcd66b2a0bcc8c2b627b43196ef76ca02899765
SHA512

78f82792f52c8e2263f73c3e732c989130430140b6c47ac8935aa564e59cf2302e8bd52ddba74b5bbffa407f0070a8a88e82c349c754c8a68cda416ba35e4496
SSDEEP

12288:rSPRSBpD41leMx4PsvRO33ncpQdtq+taBgYXjEAC:rD4neMSHMQdGBgYXjEf

Score

8^/10

banker

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs

banker

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.paranbijuv.aijuy

Acquires the wake lock. 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.paranbijuv.aijuy

Loads dropped Dex/Jar 1 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.paranbijuv.aijuy/app_sgdgmcumf/kartisx.jar	4351	com.paranbijuv.aijuy

Reads information about phone network operator.

com.paranbijuv.aijuy
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
- Acquires the wake lock.
- Loads dropped Dex/Jar
PID:4351

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.paranbijuv.aijuy/app_sgdgmcumf/kartisx.jar

Filesize
224KB

MD5
ed67bcfa567bb2d94c16eba935e17306

SHA1
61598d620767220f63d645453ebd12dd49e050a0

SHA256
d54f92c248831084d5b77eb1161f53410c2d3df814680af915918bdfdef0b25a

SHA512
8580021000d0925d86aa609aba40dc91bec176516c7f20daa890c3e9828d33bbaa45902526bdf70ffdf8e933bcefe0f3c374bc22d77821fcbab0ec425ded9a7a

Download Submit
/data/user/0/com.paranbijuv.aijuy/app_sgdgmcumf/kartisx.jar

Filesize
558KB

MD5
0a2f026036505aeecd65339d26dc3d2f

SHA1
7a0576a8b2138d0e42bf73ca3e4f071b40524c1c

SHA256
3b3437b4b6ebb65dda61331f48da83674fbd144b49fbd883578e9896497cde1b

SHA512
417b842a671a9d4e4496ddadb8f97a281c0b64fb4803b674ba39012897ab45c41921b9e0cac4d17bba1b7435053a6a540103f04b9d52b3fcc0614b0b9e5f4ea4

Download Submit
/data/user/0/com.paranbijuv.aijuy/shared_prefs/main_prefs.xml

Filesize
114B

MD5
455c3696936dff5650602bf73ffc25b0

SHA1
e962e7cc389f483caab939c77e0a7fe2dec6c379

SHA256
4531a9f2204ae282463e15bca2dd88f410fda61a57af8ec03385d1b05434e31f

SHA512
78e69afe2ddb8d41fc8e05c251e9cc14e6040aebcd7b354287667894567066518c25fce4c3a435fbafeba122fd080d7c70076dcf20e837950e71a6c0a0bc615b

Download Submit
/data/user/0/com.paranbijuv.aijuy/shared_prefs/main_prefs.xml

Filesize
2KB

MD5
36411e7b9f2be394ccad90e8dd64086d

SHA1
35934d5769615678795ca1301e06fbf97fe31857

SHA256
04cee2a618890a72316f707849a1e7aa71fbc5068c38fcf6d06cb6df57501ee4

SHA512
6ea56d1840c05ea205db6b53a8a56b789e61ae0850a1caa108bc29ca7c1d9af9826f612bae01af1124284d1c003a0acf2ae1ead98df100545a27bbdcbf87b5a9

Download Submit