Analysis

  • max time kernel
    937824s
  • max time network
    68s
  • platform
    android_x64
  • resource
    android-x64-arm64-20230824-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230824-enlocale:en-usos:android-11-x64system
  • submitted
    27/08/2023, 16:47

General

  • Target

    Thermal Cam scanner 2.apk

  • Size

    3.2MB

  • MD5

    651fa69d3201e7a7ae31fc917ba3a318

  • SHA1

    1c861765ca50c781bafc4261115930ab13fce953

  • SHA256

    9668df1f8a12e718b7f27f5cb75a3017b8f9f04724e0d755637729366133920b

  • SHA512

    22a46d20234145699846574b23417ad0abad1ac216c97b110efae81b66163b76b69213f143911be7017fc9f8b0f8ba4c1bb03ce6cd005d20b9d98028eb06fdf2

  • SSDEEP

    98304:zYyEwBabjNgoZFz5Czge8F1i0rIlzVeXXkHbYN5Mh:zYyEA6TxCzge80lzVeXXkHbYnMh

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

Processes

  • org.jackajks.thermish
    1⤵
    • Loads dropped Dex/Jar
    PID:4587

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/org.jackajks.thermish/databases/com.google.android.datatransport.events

          Filesize

          56KB

          MD5

          4ee725d8862a766b9185029631f24d94

          SHA1

          b310cd1349ceef99bb0967378d94c4260c8d992c

          SHA256

          974a0b1a4b9be180ce53ee617c3e95619a95a18554a3bbb767aa1f2daf883dce

          SHA512

          004843289c25313ae62003bb02583c4ae4f5c129681806f1d40d816846676a5ae8b3a98ddfd802140f8c04df59e42b2ec37165f0e588dc20cfe8b52998719eef

        • /data/data/org.jackajks.thermish/databases/com.google.android.datatransport.events-journal

          Filesize

          8KB

          MD5

          87364607af1f2372bdf4dd50d8fe0312

          SHA1

          5ec1aadd3cc9e0ab2636be9aaf93f9a9e02c2c5d

          SHA256

          5b5d76cbb02170286955d206606cdaa34dd28cf42900ec866672e201e2cf8020

          SHA512

          3e24dc465dd0c6e3fed1bcca405f530c11fe0da9e0af4a6734c4b09da4491f378b7808b97fb1328a0fd0a7333134abb207175a49576769e945467caf7affc8af

        • /data/data/org.jackajks.thermish/databases/com.google.android.datatransport.events-journal

          Filesize

          8KB

          MD5

          5afc9960a56619a986acfd4867ed486c

          SHA1

          1e00b58255d19fa720c40bc845adfe6451c1de1b

          SHA256

          5073bf862b3cdc74f60e70b17ff5a3b6385229a02d02e5e6294dc687d65d9caa

          SHA512

          bfa481095b5157943af31868e18600e81dcec93cfbe2950e16dbe8d5ad78b707c19e3af8c6c869e2a0b405a8a311167ab23606e14b5f549fe492018098528669

        • /data/data/org.jackajks.thermish/databases/com.google.android.datatransport.events-journal

          Filesize

          512B

          MD5

          85becc369a8ca978ba87644fdf6981ac

          SHA1

          1470f3f99fac461a3708c261ba649178e9762293

          SHA256

          17fa85210a2941ed7b09c27c4e4996b7af6a3982ae5fb32e826f803cbfd1857e

          SHA512

          08292f5931775b3f5ad5d46e2a76e59b6c264893947d4961844528420896a4623ccab0b5be6077f230be654bf04db2baea544b3caea27aad03e96ca7c70c1d09

        • /data/data/org.jackajks.thermish/files/PersistedInstallation1914926729188363744tmp

          Filesize

          90B

          MD5

          8db12a90a847be163b72c003b7c3aa01

          SHA1

          7f4f78193acf5c7836cfa137c2814d425546b851

          SHA256

          57cb697305b6ffdc3f8c49d4de356e529b5f3e1f5f238a21c7caea3ebbe17009

          SHA512

          fe177c0340afd806adafadddea0bd810991da1ee259117fc4272e9418407a34cc1d86893feca85432a7c439cc5bcf64e35d448edccf9eec204f9e962506c21a0

        • /data/data/org.jackajks.thermish/files/PersistedInstallation5755245136223554978tmp

          Filesize

          573B

          MD5

          b9b93306a12023b5e4e20f327063d7bc

          SHA1

          119d85961d09491f73014058da73de55e97abdb9

          SHA256

          231bd8350e63939bede7f2eadf4cc5eed6dc737126786e97cfcc2813c95510fa

          SHA512

          83415e0f5449c90434744e1be112d41a3563802b9e44eeb96db14614b13702e925b8c9318fdd7f680e3fd68fb3d1a92b358228c5ad104d1cf10de52b965749b7

        • /data/data/org.jackajks.thermish/no_backup/androidx.work.workdb

          Filesize

          4KB

          MD5

          7e858c4054eb00fcddc653a04e5cd1c6

          SHA1

          2e056bf31a8d78df136f02a62afeeca77f4faccf

          SHA256

          9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

          SHA512

          d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

        • /data/data/org.jackajks.thermish/no_backup/androidx.work.workdb-journal

          Filesize

          512B

          MD5

          418d2ff6a03f561078ddd756ca56d18e

          SHA1

          bc8532408cdb9d5bbcd3ba10814ad540f99cfdd8

          SHA256

          0c565bd2bed4abc562d8571b221eb2aa36b55e23b5c01afcd1106b041ad00303

          SHA512

          293f55f40de163f7d4ceba6501594530b6b56ff606c4596082dbf87c20ad5686fee11d393ec7298c29c38575cc0f3fba2cbfe2cdd20ed2da4f0ce06d6007aa16

        • /data/data/org.jackajks.thermish/no_backup/androidx.work.workdb-shm

          Filesize

          32KB

          MD5

          bb7df04e1b0a2570657527a7e108ae23

          SHA1

          5188431849b4613152fd7bdba6a3ff0a4fd6424b

          SHA256

          c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

          SHA512

          768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

        • /data/data/org.jackajks.thermish/no_backup/androidx.work.workdb-wal

          Filesize

          112KB

          MD5

          3f0f8e93e8a266f9f15583d61545473a

          SHA1

          8138b85dd43d4d283f43e34be9cd814cfbbe9601

          SHA256

          d4e0deca445390d68f2cc313a947ff3fa54f2653adc9844b316a117fe3cf7821

          SHA512

          61640082d7238d9453be14c537fe863550987853065cb322891984227c715549b94d37fc41cde52a243ba406b3383c0b7b84789a1ddfb44087f7dfc900eac10b

        • /data/data/org.jackajks.thermish/no_backup/androidx.work.workdb-wal

          Filesize

          16KB

          MD5

          50bb4009e94f9f9a8f0c1d8389bb3a34

          SHA1

          ed9ed12b40b84d6f351d39ec016b7b23ca85eca9

          SHA256

          1768911a483469ebfee2835125537b10d06a5a19b28bcbc69ef68d374a6eabcc

          SHA512

          f231343fa35c7042c00eac3617d5b05d66cdf3c28d4799a3f416c3f2f5b2df9856e8cd82de0fb0f975715f6995db84c60b859bdd70cf5af4dcb27bbf792cd132

        • /system_ext/framework/androidx.window.sidecar.jar

          Filesize

          12KB

          MD5

          bdf3529e80318eb14e53a5bf3720c10d

          SHA1

          25c9ace4b1af6e80ebb2572345972c56505969ba

          SHA256

          bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

          SHA512

          48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b

        • /system_ext/framework/androidx.window.sidecar.jar

          Filesize

          12KB

          MD5

          bdf3529e80318eb14e53a5bf3720c10d

          SHA1

          25c9ace4b1af6e80ebb2572345972c56505969ba

          SHA256

          bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

          SHA512

          48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b