Analysis

  • max time kernel
    176206s
  • max time network
    145s
  • platform
    android_x64
  • resource
    android-x64-arm64-20230831-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230831-enlocale:en-usos:android-11-x64system
  • submitted
    07/10/2023, 14:17

General

  • Target

    NEAS.sahamedalatapk_JC.apk

  • Size

    3.0MB

  • MD5

    c5d68490bbda4773ea03caff9f264428

  • SHA1

    ca97d89de7334b9c4b1bb7c6329ae40619edaea0

  • SHA256

    b1820179fc4818e3939b63113ad5ab22efde2ebae63c1002fc7d90debb59061a

  • SHA512

    1fcfdf10ccfb6a4a3e762e88bd9d9459ad2ce2ba90740cca7cb087943a3643183406190ca57611311b137a46b9b66e7a263c6542ff751a2fe04a0b09f0901425

  • SSDEEP

    49152:NPagnrYa6oETBHR8HpolpZRh6zLI/ZwvRZswTxFavs9h3vWyPgLYMJvAkldZHs/p:NPn1zETBRcilzR7gmQqvs9hwJvAk7p1K

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.lydia.route
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4563

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.lydia.route/files/PersistedInstallation550914171209893534tmp

    Filesize

    90B

    MD5

    cd0b2e5375fd3100f2c976b881b8cd97

    SHA1

    ec46f1f48906b88d93d6b89ca0da93a1d107ed2b

    SHA256

    24fb1e2c6e255e8bb89a8be50fef01b8c017044cdc10a09cc1d0ddccf6aab520

    SHA512

    a6bea53c1990a80404af4da8d340b7cf1e1425ee712ac7b4e07f36a09dab6e015d3f1ae4177320f41c20dc550cfee0e036f56ac492cffff463dae9b7b0b9a11a

  • /data/user/0/com.lydia.route/files/PersistedInstallation7848447815934567232tmp

    Filesize

    566B

    MD5

    fd1fe7ed57a40df65415ef10efb7642d

    SHA1

    cb2c2ffcc78e7b26d156d26c0106cde7718562aa

    SHA256

    72c7026a61981a0871e1857199c2ea3abf2c81f26a5d806b1b851c5564511d43

    SHA512

    78641945653931d16bead306d3104b285927cded77226bcc4385c1db355a6b84e5c0783149970d0d253b2bfbb887badc3e73c065954d767c9a604adc54a9f414