Overview

overview

8

Static

static

7

7f4670ae85...d8.apk

android-10-x64

7f4670ae85...d8.apk

android-11-x64

8

7f4670ae85...d8.apk

android-9-x86

1

Resubmissions

26/05/2023, 05:13

230526-fwmqdsdh49 10

17/05/2023, 09:59

230517-lz81paef44 10

16/05/2023, 11:19

230516-nfb8qahe6t 8

16/05/2023, 11:19

230516-nev97sae35 7

16/05/2023, 11:17

230516-nd61baae27 7

16/05/2023, 09:19

230516-k9564saf5v 8

Analysis

  • max time kernel
    608855s
  • max time network
    40s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    16/05/2023, 11:19

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    7f4670ae852ec26f890129a4a3d3e95c079f2f289e16f1aa089c86ea7077b3d8.apk

  • Size

    10.7MB

  • MD5

    703b22fcea432d2c681cebbc150394f1

  • SHA1

    f561e628ae17d7a547ca55b0be72ebaf1ed88af3

  • SHA256

    7f4670ae852ec26f890129a4a3d3e95c079f2f289e16f1aa089c86ea7077b3d8

  • SHA512

    aecedd324311c3e95a93ad4129eddc4e46974db635e71bec406256be91bac7a1cb2817ea6b6e410a58d669cd32af4605ec393e5273d62ff078fa6bc9cd1fea1c

  • SSDEEP

    196608:ZynCaYQLCbkUYUMjNgR39mR70CyCopc24BFix/Q+hT1/XQqrj:G5YQCYeW90C8D4DiFZhmqrj

Score
8/10

Malware Config

Signatures

  • Makes use of the framework's Accessibility service. 2 IoCs
  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Requests enabling of the accessibility settings. 1 IoCs

Processes

  • com.grn.nbz.ktvhe.xeubdv
    1⤵
    • Makes use of the framework's Accessibility service.
    • Loads dropped Dex/Jar
    • Requests enabling of the accessibility settings.
    PID:4630

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.grn.nbz.ktvhe.xeubdv/app_webview/Default/Cookies
    Filesize

    64KB

    MD5

    dfb2098ca7b3bf16d6f5f1e7d3839af5

    SHA1

    ebb7a8bc886062d77a4092bd306b77a0ce7a3e9d

    SHA256

    e4119d32577d7fc63b267cc23eb7a9bbfb12d238f23e08918c38838fe0181224

    SHA512

    fccec45399258eb98220b7f01b492a72b8b3d1254dec6e196e344d89a0376c6ee24534a31a6675c866d4a17256d3ac6823657eaf04e1d386757d0cbfc6597e50

    Download Submit

  • /data/user/0/com.grn.nbz.ktvhe.xeubdv/app_webview/Default/Cookies-journal
    Filesize

    1KB

    MD5

    6a33eea1bb9479c6fbdf5faa0f15f9e6

    SHA1

    e206137a911d70f1fbbe75887d06ed8fd019e006

    SHA256

    33f468414dfb512c76319d8dc995014667e508ea0826980f0c11b5aa85e4c40b

    SHA512

    2d269fc5c65d843ee8e5d00791275d1e9c458e54a6e514ac4f37500f90a7663fbcb60cc0e54634abf6473abb34fa25581ea97f0611d502d5c1da0346cd4b5b2d

    Download Submit

  • /data/user/0/com.grn.nbz.ktvhe.xeubdv/app_webview/Default/GPUCache/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    Download Submit

  • /data/user/0/com.grn.nbz.ktvhe.xeubdv/app_webview/Default/GPUCache/index-dir/temp-index
    Filesize

    96B

    MD5

    99dda1a4c3c668ec7204f58c3d4254a6

    SHA1

    266e11a92f4532d1ee850cf91e189961537908a5

    SHA256

    4243ce0eda32413a8fbc0a2081255b2e7f2beaeb8f1950a36c6018bc1c6c4f14

    SHA512

    1a60787f028b63f8757916a7decebf7c00428f56fccc8efec743814ed9c7f480aecbdff39bf3535816a4c95d1f0c47f6ce109f0f9a44065ae45ae417c37f098b

    Download Submit

  • /data/user/0/com.grn.nbz.ktvhe.xeubdv/app_webview/Default/Web Data
    Filesize

    120KB

    MD5

    a48cd9324b1f8754b07f00d863b840f3

    SHA1

    11c6614775b35a58f440971dfc87c8aaac6d6173

    SHA256

    8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

    SHA512

    35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

    Download Submit

  • /data/user/0/com.grn.nbz.ktvhe.xeubdv/app_webview/Default/Web Data-journal
    Filesize

    2KB

    MD5

    a2ee358c811d802436ebef1f3faa3626

    SHA1

    8e32ce12b845914dcd3f5ba27c71957832b4e08e

    SHA256

    2315c9214c8f71b3cba79d30244849f100ed78ae915ee7b8eb96f7ad122a1abf

    SHA512

    1ff51910b9957025f79304bc3adbe340ee2dae248bfed3d2b913471dcb0acc1fa0b2e961941deaf14b965d1a4c5d36a705a29028bc7e4a85c72d59f35fa5b8a9

    Download Submit

  • /data/user/0/com.grn.nbz.ktvhe.xeubdv/app_webview/webview_data.lock
    Filesize

    30B

    MD5

    a548f5b07cd2960207c762bfb6c865de

    SHA1

    3906cec95b476dc97f8d0e0b9f6f3fb3f67e36c4

    SHA256

    b86dbac99ea8b47e7ce6fa9e57644ae9e6b8003c89dd727529bbe34054b34be9

    SHA512

    e8269ac342c98d0360a2f34da74bd94429c04e6df004ea75b234f86a4e4c6646bcbf6d0846d6eaba6d8b1efadb7d83aefd592c874e81df47dd9badb511575c33

    Download Submit

  • /data/user/0/com.grn.nbz.ktvhe.xeubdv/cache/WebView/Crashpad/settings.dat
    Filesize

    40B

    MD5

    8cb012643d198d8e7e6dcd9b64a3ee06

    SHA1

    0c2f18c5468ac4cec312edb1b467d426e40c5599

    SHA256

    2aa0872b1efbf6ed3f1eeb78bf9a7f729639694c62fd89ef12b259875f54d0fe

    SHA512

    8d87605333a32ddde035b563ad9796c59e0480c1e5c0b6e16d8c8f3015d2dcc761c4fc7613c5274a3657cb01e6985c85842e2fe830d7360afe6d8053f1a12004

    Download Submit

  • /data/user/0/com.grn.nbz.ktvhe.xeubdv/cache/WebView/Default/HTTP Cache/55bb527131af3542_0
    Filesize

    264B

    MD5

    03e276f55fa42191211b97b504bfc116

    SHA1

    0fc07cd52f14e72d4ecefac3044d82d1a8378818

    SHA256

    557da7e52cc9c69479150e9187ec3fffec2268907b1b857711138c1148594c9b

    SHA512

    8942514b556c17f1e862f05cef547fe6d75b8047f05b0b70ae7ac76ae460490daebf86ca787816a8e31e93ba9e7bef94d7235b8acb99fdefc4dafe27c4019148

    Download Submit

  • /data/user/0/com.grn.nbz.ktvhe.xeubdv/cache/WebView/Default/HTTP Cache/Code Cache/js/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    Download Submit

  • /data/user/0/com.grn.nbz.ktvhe.xeubdv/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
    Filesize

    96B

    MD5

    2f0cfe89253530cd59490720fb86f88a

    SHA1

    167f2cec73887cc0a058e914b5359c1fd6b83a63

    SHA256

    96626b4e7131a8395d447a5db04641e4b82101e03eb61577572faae0b0bf71b8

    SHA512

    1db0e0ac0cfdb038cbfcae529fff1138fc39a48144402a3dfbceab1a802e982e083533429ffe5779d473347b36307082e1306b92526385be07e83fd0ef10d094

    Download Submit

  • /data/user/0/com.grn.nbz.ktvhe.xeubdv/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    Download Submit

  • /data/user/0/com.grn.nbz.ktvhe.xeubdv/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
    Filesize

    96B

    MD5

    c4ce909dc892c92eaf82f77b8e57413a

    SHA1

    db5c74b21cba74e6191ae03fc6f282f47d7871ed

    SHA256

    61045394e8f7a649030d31e58e6b21ecff74764e16689381b82a362bc54087d8

    SHA512

    a365bcca5c8a995d287c981670ead2f1d085db3b4855d51692d0241d82a89212a0263de4d94402a81192dc797e8f51761c8a16755a3993c7467aa79d66db46f6

    Download Submit

  • /data/user/0/com.grn.nbz.ktvhe.xeubdv/cache/WebView/Default/HTTP Cache/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    Download Submit

  • /data/user/0/com.grn.nbz.ktvhe.xeubdv/cache/WebView/Default/HTTP Cache/index-dir/temp-index
    Filesize

    96B

    MD5

    1ce83c850571403a9d5fe064b6357f53

    SHA1

    3966b9781304a760cc213a2cf520dc07c33caf2f

    SHA256

    f1c2de7187bd42701621be570a8abb99793dcea6b2d4faab49ee341aab9811c2

    SHA512

    f7b634c4811fbf83e72523d93365350150914fc0a0dd4526c70ee6061c2cb155a89140b6e2b422280021491406bb37077458962f927bbdfb7f2ed540c9679d9e

    Download Submit

  • /data/user/0/com.grn.nbz.ktvhe.xeubdv/cache/WebView/Default/HTTP Cache/index-dir/temp-index
    Filesize

    96B

    MD5

    24acda381df4a0aaab2d02e0fcdd4a19

    SHA1

    a607680df853a8431d9f37867193d1dd9bd913ea

    SHA256

    76b3610c53dd657a2bcd0977b89457c1dbb9f1435d2a7173197f477631b73336

    SHA512

    c6763d2e5be222b433a962bf73e229d931bbc2c170f51f9069b04bc85fff492251459aaaa63001b436d047ef4f0083079ab8018c5be7fa68aff1e67fcaa17462

    Download Submit

  • /data/user/0/com.grn.nbz.ktvhe.xeubdv/cache/WebView/font_unique_name_table.pb
    Filesize

    57KB

    MD5

    f080fa2a56ab5479d58063e5ea871447

    SHA1

    4b3fd57a98916fa5784305b76ba30af26b5253d9

    SHA256

    0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

    SHA512

    8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

    Download Submit

  • /data/user/0/com.grn.nbz.ktvhe.xeubdv/files/prodexdir/00O000ll111l_0.dex
    Filesize

    1.6MB

    MD5

    4c75cb0ea7e0c237d90beda3b2eb1296

    SHA1

    2677ce9af3eba96eb27e2118b162156b4d7dd89c

    SHA256

    dabd872b8b6ba912da1a1bdca60bb57f3751d11fdf37630bc2ff3ad086dd3ded

    SHA512

    320f2312df76e35415111dcf2a02de6e762d5ead411840be951a931a48bc9c9f4b1c259755a7b0214fe8d5af725d3ff135a3eae4fa7218d3a47285c4fe7be693

    Download Submit

  • /data/user/0/com.grn.nbz.ktvhe.xeubdv/files/prodexdir/00O000ll111l_0.dex
    Filesize

    1.6MB

    MD5

    4c75cb0ea7e0c237d90beda3b2eb1296

    SHA1

    2677ce9af3eba96eb27e2118b162156b4d7dd89c

    SHA256

    dabd872b8b6ba912da1a1bdca60bb57f3751d11fdf37630bc2ff3ad086dd3ded

    SHA512

    320f2312df76e35415111dcf2a02de6e762d5ead411840be951a931a48bc9c9f4b1c259755a7b0214fe8d5af725d3ff135a3eae4fa7218d3a47285c4fe7be693

    Download Submit

  • /data/user/0/com.grn.nbz.ktvhe.xeubdv/files/prodexdir/0OO00l111l1l
    Filesize

    804KB

    MD5

    4d2341e41e665cfc8e237cf9a2718a5a

    SHA1

    2797e9efdc9c7069368b673a00c3f6b1b8adfc3b

    SHA256

    5c48533498760fe26425ab5cb23f618b68fd0e1500fab80c984bbb8b9d952e6b

    SHA512

    5e6b8ac0e08bdf3be6198b65b56825a4ebfaa2bf13dd9b5b7655f873fd2be270ed9e76ff4bc33ead6a8f28ea6d0e7de8c08172e6f6bdaa32ade24bb1cd3221d3

    Download Submit

  • /data/user/0/com.grn.nbz.ktvhe.xeubdv/files/prodexdir/o0oooOO0ooOo.dat
    Filesize

    120B

    MD5

    0d288cbb66019dfd9985adb62e5f9a3b

    SHA1

    f1c5b3002351d02a7bc5a4ab65a09b80b031ca25

    SHA256

    72bd8b48170a2b3c771bb97e1b7c2272643d5b47a46821f0655419400d22763f

    SHA512

    7f7451997d00a10b3616d403ee1653ff2b3843c22d9da84516f8208882afaf0adcbb793b031b6eca6797ac9330dc7d79e82684ab60f7ad80ff0b65e4c6cf01a4

    Download Submit

  • /data/user/0/com.grn.nbz.ktvhe.xeubdv/shared_prefs/WebViewChromiumPrefs.xml
    Filesize

    127B

    MD5

    97ccd9a2b2063143df56b6937f961ca4

    SHA1

    5e78a91ae5df289ce83443cb7d5589dd3504fb5d

    SHA256

    248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

    SHA512

    86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

    Download Submit

  • /data/user/0/com.grn.nbz.ktvhe.xeubdv/shared_prefs/com.grn.nbz.ktvhe.xeubdv_preferences.xml
    Filesize

    131B

    MD5

    ffb8500f2b26d5342b5b19c90cac0b0f

    SHA1

    e4738187a831d6aec87787ec76b246809becea1f

    SHA256

    33c0620745c8fd4f87c6ed638587efdc53785cce846dea24db98d643889ec2da

    SHA512

    15e1437fba39f142553606f4f34be1095ff31c5eedfe720d7bfe46510d0b687289784c568df17165e18f2cc1c952da7e854c8f9488f1b20dc4377599e080bb86

    Download Submit