Analysis

  • max time kernel
    174044s
  • max time network
    42s
  • platform
    android_x64
  • resource
    android-x64-arm64-20230831-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230831-enlocale:en-usos:android-11-x64system
  • submitted
    07/10/2023, 13:41

General

  • Target

    release_v_1.0.5.apk

  • Size

    6.1MB

  • MD5

    97e6775adde9573aaf3eebc9a6d8f297

  • SHA1

    bc9b58a5e6a8e3ecbef64d45aefb3200ec2d7dec

  • SHA256

    fe054e1ac563de1012af7cdf327e5a02f65c8617580bcea318f12ca6be03e103

  • SHA512

    da43be534a3dd9f2555049e1467f1f529fb5869f3250fa6ee16537e4a4e6d7522841a3869dedd32a6e2b1c6ea98ee8ec6f1c0c591fc7e5f9126431b674d5de0c

  • SSDEEP

    196608:BMEKPulyLbNljSIc+Y4qZ1gIugvT49w78RwVHwj:BTouladSKogs6wVi

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.iron.pen
    1⤵
    • Loads dropped Dex/Jar
    PID:4375

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.iron.pen/cache/picasso-cache/journal.tmp

    Filesize

    36B

    MD5

    37e8e716e0e2f4a0b05cd9571d95b84d

    SHA1

    f8d068f6931707bddb8cd69f706f2224ad1fea3c

    SHA256

    7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

    SHA512

    e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

  • /data/data/com.iron.pen/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    ec564ada588a56a99937314408dd084b

    SHA1

    6863f374d59fa878a5148baffbfad1c735064296

    SHA256

    ed0065c784f7b62f1599cd88aa28b15ac178f5b11dcedac280a4fc9f96df0074

    SHA512

    910c75826a22ad6485cff40992d319730a6b4ba019dc2107fae0adca41a6589e545b9542f1dbca2599c648b5264cfbf4d777767c201527f92714f41645e61d35

  • /data/data/com.iron.pen/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    d141ad94bd87273d1e109cd77aa06186

    SHA1

    70bd3a7e746321928a5c51ba4eec5e90615933a2

    SHA256

    f23a60fecb24faf1753f56735adf16459654c3c2ee2cc53565e1f65a9377c23c

    SHA512

    a1101627adf6ef4faac9884196f499ea2854c25371b8b5eba6e4c8c1ca9fdc84096f2424767a78c53d189e8382e223a1f1bddf1b210e986bab2044f4dcd35b47

  • /data/data/com.iron.pen/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    7d57ef2054e13bb40c6bc18fc6c0b4c7

    SHA1

    c0c3212c1d250afe9dc09a5a1d9cc46d1cef3e01

    SHA256

    5f9285adad2ab6679a8451da5cf1a6cb0e41935095418556b474f199bf8f8b6c

    SHA512

    87ee03ff990e6faf6fc4962e15669e13c982885ed378e6b2478315e4ae8817da5c79258fb4d4954fc07858959b06cfdf3ef45a21d8be743676e4e5b6a590de86

  • /data/data/com.iron.pen/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    42b68e20f4ffc70a1eadc998e6554ed9

    SHA1

    7e2a58ca4b1eb24a8c016d0aae2caf04951afe02

    SHA256

    bacb5016824930703b3ebcc337a7a9605f4a0091f28dc2442a543f61758b8ff1

    SHA512

    400f06887c32e68e1b3710ce46f1927152c414fbad3bb4ae1e2d73cab65bdce48fae7aed2128d9daa3f2673dead4735f9cfe7b08f188954a1cb11ce83731eb7a

  • /data/data/com.iron.pen/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d9cf75fdd1c2292d986f6c3d5d60f2c8

    SHA1

    07ecb1d3a26d952ae5fecf54f36699ab498510b1

    SHA256

    2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

    SHA512

    442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

  • /data/data/com.iron.pen/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    eba520921c3e9946a7c587b072103624

    SHA1

    8ce09b0b28e498663f91de09ef58083efe1a1dfc

    SHA256

    c94ac9704b5f039e73bcdb3bc545fd96e64cc8e56e46712eb4132c843c23a1f4

    SHA512

    137de297841d4eb262f19a552ca105cc329aa7c39668864ea1aecdd001e03e3686b7c87990026c8bb4d56b7be901c0728c3a2b3e69103aaf267c9335cafdca59

  • /data/data/com.iron.pen/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    e0dbc109ecd1343949f351077b45028c

    SHA1

    56a7934cd9fb7455eac0fc2716a33d671376e11e

    SHA256

    782824e2c00575c41032f756b33112f4b6a8ba9f2e7e0df5662a73ac6b7a6698

    SHA512

    dd38a1c16c8eba3f2d9d127bef98e3cfd82956dfa1f3cb276bbbc348dc7caea47d5a12d2b4661f5fae8468a625120f0b201a148b8d6ceb85f0573a4a7ceb477b

  • /data/data/com.iron.pen/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    ce00833f30830851ff94556942b7ad40

    SHA1

    537a7ecdb7603efbc587134f37deed5bb03adc2b

    SHA256

    9f07ec8731b6a313e067c9b1c22b0e4727ddf2299505c798c9964e66dc1ab531

    SHA512

    71e0489ab7b397758bd2a3bf184c7aeb520e7ba548e4e3cacf44786818784b5e57b3b240e06720bbd991ddf7d7e049c3eb09b2f863e18dd64555ba5b78d95550

  • /data/data/com.iron.pen/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    4f777e456f5184a47379ce959f5b9805

    SHA1

    8c3f3768c0613e8b3088058a1c89e643f3dce1a7

    SHA256

    babff60a2342bf9645e08270323ec29676aa1a4ed013f18ad03dd2d2bad533d3

    SHA512

    826ad86b6488bad7ab70a118f9567e147ed2a87a7413d6d54a1a0bcdee9541279f61bfc6184238970604eef8eadbc98466120ffcfdfccc36e3507f0d83470105

  • /data/data/com.iron.pen/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    49f1495a778d4f8951c0931c439c8153

    SHA1

    b82dad9a596fa13cc00662f00baa1d655511795d

    SHA256

    d4414d26f2b5a0b901ccd19139794ffeb5ae6def2380a4b91697ca910201b492

    SHA512

    3844ab1bc76b1f7b6a9eac13b88dbdaeaa73cb55808f7381ba64ab17b0540b465902a02b18363d380118053f17bff1ce8cf58eec5f704fc369633501ac6c0d65

  • /data/data/com.iron.pen/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    560329a03f893a0ae9aff0c80f2d2314

    SHA1

    a8247ee515802ac452b420ec3e94a2139a8c9968

    SHA256

    375e47eeeff22109e5e72878eec066d93102a73cbd3c5c81114d0202d8d112fc

    SHA512

    9666382721d77849dff3f637e8e0ea23ee01a09873c99b79f8b3f5d4d0348822db6eeb291f735c5331d097e9d0454604cbbabfbb3ea079f4a6e8a886d6ffbfb8

  • /data/data/com.iron.pen/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    c84522bd2dd327dd24116dba66092c30

    SHA1

    a8824419f92ac32f05ed1e42d4b3e866694c5279

    SHA256

    d3460e552b0244873bb6cba404a84a4137f851fea5ff955e138114ba0f791348

    SHA512

    228655a7647140274e421ea582b519b493c5533f4dcecb81c0fe1d55967232076999dca5628aeb6c9aa1eaee51412deafd5ab09d6dd1402364a2607465f747f6

  • /data/data/com.iron.pen/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    7a5429e489fb0474620c39b3e7be9083

    SHA1

    bd322578c02652e6de77086f5fedff1b99ee1645

    SHA256

    1a3b4b2d8214ded315410be317635442c967779ad4dcc630ed92bc7262a0a693

    SHA512

    dc1629fb43af6d0047596f21442303603c5d60764d783e4b5e4000e6b6f5021a6b748f4c06c2d031da2fa9fa0abe2bdcfe837dbaeb64b1ece786d2df31bcf6d8

  • /data/data/com.iron.pen/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    4fba5462604f3d3f864416cb0f23a066

    SHA1

    45b6eebe6e5da7d04550f55bb232b9ebe44278d7

    SHA256

    bdd23252ed321b905f2d3adec7d5ee8f135ebf9b9cf9954d9a2cfc2b75ff0a2c

    SHA512

    16308031f5e79f94ce4fa706e5407ed347c370b7e44f388ce0547afcfe2cf1dd0d6f50cd3a0a7e57d34fae8f55fc642f33fd00ac44fb202d52318e619e56ef7b

  • /data/data/com.iron.pen/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    744718630df2d78e192234a8782b0786

    SHA1

    4af81327d084f553f31184ed9140fc4dc22afe60

    SHA256

    2557081fefc214edb759503de89e9009291171a9832d5f258439c7ced730f627

    SHA512

    9ff1916046ab79947554777b7e0db8b19a51ec82299cf0cbf40ef1fc475ed4e5001ddc09a1d6c743b54ef5fc81b4b32d730c850c8f287b522e2fafbe45f2bd21

  • /data/data/com.iron.pen/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    0680c9a7e1f2ac5e34613af8475fc16b

    SHA1

    028b32e9b4a6cb8b0ee55cd4d750284e79c7b81a

    SHA256

    d3bbea109fc68722d57559b3a7db13bd0d8c580b94999b2c78c20f47a0cac4c0

    SHA512

    6f26deb3a136dc1e97a9a3ca88fa6f3baa0f02a06e68d6ad56e33581a3c96bc0ee46085e9cb460501ac9bb9a190666a1f1eafccf084f7afb31cee6c2656a43e8

  • /data/data/com.iron.pen/files/.plugin/version-1/base.apk

    Filesize

    1.9MB

    MD5

    a98c28dc0272b24c29fc639821fad349

    SHA1

    f84b4df9fd21e1ca5e3e8193ddb3d2da044755d9

    SHA256

    f46ad8da663b59f8ef7e885aae2c792cdd2a31bf761863cb552ceb2ddeb67752

    SHA512

    d7faedda36d44e1e59ff1cc08d2652759eb698803cdecc0b9fab1abb1608c704c7e3c38979f10aeb96e695525d3b7b8fc9ebe1ab15b472fdce116a6687d4dc49

  • /data/data/com.iron.pen/files/.plugin/version-1/lib/arm64-v8a/libmultiapp.so

    Filesize

    2.3MB

    MD5

    b778e63cf74eb658bd7e3bbfed2578a4

    SHA1

    fd30b92c3e1c15b67e20e7428aff3865079b1acf

    SHA256

    384a503a35fe38c9759e770834cee620db4acebcf63caff6d680271510009dc8

    SHA512

    7433c08d4cf748b3cc59e1cf0c990cebbb507a79abebba56241036f6d686c1fca200cc7477f3a0b9b18fbf4d32b400ffe09e522d1a6ed169ec60ce0095e1a0f3

  • /data/data/com.iron.pen/files/.plugin/version-1/lib/armeabi-v7a/libmultiapp.so

    Filesize

    2.1MB

    MD5

    4dd11f21d6fab32bc40dcc941311eefb

    SHA1

    6dd088e75130dcffa988e5e77424e513a631d8b1

    SHA256

    8270640e722e069c88b7db84981a8a35aeb8801bb6002970dfaeaee3f7ef24f0

    SHA512

    2a6202359654d503ec93aeb03405176a1dca4e9bf22295e2e924f7921e8be7e0f8e90b485f819e0797fa62ef3c2f0522237f52d968106aa9d68e5fc48b8d6ede

  • /data/data/com.iron.pen/files/.plugin/version.json

    Filesize

    91B

    MD5

    7beca70f964c19843a5c496df13fc042

    SHA1

    0d535c47f8ff4cf0c74e35d64562488357926d75

    SHA256

    854f3d7585dd9b75ba60a09c0144af72efa736326c25defaa49475a973efb849

    SHA512

    ba626539f4858ab58bf48d5ad47d9e865deacb9e08efbf900b7b187c56cea7bd621e016eda783bac66d3fdf3056cfc6bb4ae92333c80fa8ead94d80d1946e32b

  • /data/data/com.iron.pen/files/PersistedInstallation7380967559414959050tmp

    Filesize

    569B

    MD5

    f46ab1d74afd24af877e82b15b30286d

    SHA1

    9759d84a09a97a44fafbcffd4679fadb46ef071b

    SHA256

    dc9f08536bfaf35a1fbf92e370a00c75bed2da29c6c00851e58ebb3a9609f7a9

    SHA512

    ddd51fe1669aa7e3f34fbf3b81b7982e7998f1ab08dbab8878f3d9fdb1d19aab463ae9f03e6a039e8645ca2e4e826370ef0dbf77b55d2af6fd4e901a7b17dd4d

  • /data/data/com.iron.pen/files/PersistedInstallation9124515840545261738tmp

    Filesize

    90B

    MD5

    4ef8ad37d54aad9b31eef1bd3cf0db4b

    SHA1

    ac49f64c8c97ac300fa857a4eb12fb8df8da226b

    SHA256

    3489b49d9e82f37f444e86a0f30ad124d258a11da2a223bdd0c2e4da81e814e2

    SHA512

    c1d5834debda40975802c4d612949597fe0869e37b00e95b06274809a2de673ab0b361d719b733ade2f12350a06110dd1eeba7051232aa782c073e2303276475

  • /data/user/0/com.iron.pen/files/.plugin/version-1/base.apk

    Filesize

    451KB

    MD5

    7837ddb24249f4ea00e698cc428f43be

    SHA1

    a64cd3bc41f95fe2dc6ec4dd179f7070ed9d17f6

    SHA256

    ffab4110e1d89a25eb791f37d364faabc39b1d5a2a194ae1b22013ded287177a

    SHA512

    c4bd14e74ed1473cc8bbad17b9777458b73b768a9428590de82475678246dfa729a1ac65abfc27bd48fb459edcf0d19fd9c2933aae43220534ed5ed4e8e23644