Analysis
-
max time kernel
2857455s -
max time network
148s -
platform
android_x86 -
resource
android-x86-arm-20230831-en -
resource tags
-
submitted
18-09-2023 22:00
General
-
Target
09bdcd05d4e2fe3976208ecddb33e49459fd4e207ddc3544737225d7c6554320.apk
-
Size
5.0MB
-
MD5
81073216f595f2e0eb8161b5ae43c089
-
SHA1
5e7766582f9d0ec8cab13dbbb6be798f19d762b5
-
SHA256
09bdcd05d4e2fe3976208ecddb33e49459fd4e207ddc3544737225d7c6554320
-
SHA512
167d1a1ac740a6db232ca5074c855a754f4733720544ff27b0d82561bf51d3c1784d7af4b9f33e9416712e20b6728f930109e0cbfcad100a5fd66bbdde27539d
-
SSDEEP
98304:yaQT7OiV3NgMyO5CUjZZOThI6GBFEFF54xpno+C/3/RUBcCZtrgIDyl726:xQfNV9gM6Z1I7qL4xpnoDqVtUpl7D
Malware Config
Signatures
-
Makes use of the framework's Accessibility service. 3 IoCs
-
Removes its main activity from the application launcher 8 IoCs
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
-
Reads information about phone network operator.
-
Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
-
Removes a system notification. 1 IoCs
Processes
-
com.journey.app1⤵
- Makes use of the framework's Accessibility service.
- Removes its main activity from the application launcher
- Loads dropped Dex/Jar
- Requests disabling of battery optimizations (often used to enable hiding in the background).
- Removes a system notification.
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.journey.app/app_DynamicOptDex/RWjazsQJtSUFgiI.json --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.journey.app/app_DynamicOptDex/oat/x86/RWjazsQJtSUFgiI.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
572KB
MD5291732a04a280cd351eb4ebbc8c2afba
SHA12e1f775953a1351ea6d5abfd260e7ba364214b2c
SHA2569aee2968b1a117114af8ee38159bb2b824985d22b3349e7c4fe7bd6cc7cf08d8
SHA512edf66013405a43ce7061241271251b6ebb9927a271f051a258d26eb308579a4352efa3537b18c9d687fadf0b1c4f7e6861bd1253f58396ab29778c984a5eff11
-
Filesize
572KB
MD5f03039fab8373e51581f71c38094680a
SHA12944e4458c4635e096728edfbbccc6e9b1f16c3b
SHA256169644227aeeddb6aae0712316e2d4008c44048cd5e568b77b9dd3facda00fc5
SHA512788b8a8a9678428aa2488dd34c691aebcd9bbde7e73576d0c9d2608e1492c2df1845509de2147345630015714aa2ec243a15a6a9aac4e4331b69c181974bf17d
-
Filesize
439B
MD5b87e126b8681a30a2ebc4bfe719c0e70
SHA1070c05bc2e48b61a350f4d7b34d0e66e6e390ec9
SHA256d480bcd77771e446fb4a8908baab1af248022ae46fe199ee4c9a0ac5b6e22097
SHA51254745e82f707951d7a6cfa9fac020c0122d8ead8636261e262603b6036cad82a0e1206613123a1edfb9c3556c30316fd827dd69a8f6a7ebcf2712897fb43c0ac
-
Filesize
631KB
MD5444d45ec133e951b358340458ac960e8
SHA1cced2b37822801b1c587c79a2584696b7ce3c225
SHA2562d4badfa3c44c36cd76f4c0b7ef84c4ab42e296c35ccf55b0b301364d2df6e37
SHA5128fcc4bb7929171170e9558f9e6e2b5085b3b5008f5ff74ff10be495e813025e411d2dad0600de5fecae70f28fe166359a385e17f0d0180b4f54c219d4ef59fa4
-
Filesize
631KB
MD5476727c727219e9a013f4edc04cf7014
SHA1bdb92c39134a775f268d6db803426abd388bbd28
SHA25686889c1f5b9f3639267a6b7617dc25609c704ed78f30f97c2dd30731a5f99d48
SHA512eb6b9e5b692217f8f983faf37ec448423493e882583d533218822e9d41cd301b5b4782ee0dcbe686e03992c6c72cfcc58055e8d535970cbd60f29780e29a34df