Analysis

  • max time kernel
    176206s
  • max time network
    145s
  • platform
    android_x64
  • resource
    android-x64-arm64-20230831-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230831-enlocale:en-usos:android-11-x64system
  • submitted
    07/10/2023, 14:17

General

  • Target

    NEAS.sahamedalatapk_JC.apk

  • Size

    3.0MB

  • MD5

    c5d68490bbda4773ea03caff9f264428

  • SHA1

    ca97d89de7334b9c4b1bb7c6329ae40619edaea0

  • SHA256

    b1820179fc4818e3939b63113ad5ab22efde2ebae63c1002fc7d90debb59061a

  • SHA512

    1fcfdf10ccfb6a4a3e762e88bd9d9459ad2ce2ba90740cca7cb087943a3643183406190ca57611311b137a46b9b66e7a263c6542ff751a2fe04a0b09f0901425

  • SSDEEP

    49152:NPagnrYa6oETBHR8HpolpZRh6zLI/ZwvRZswTxFavs9h3vWyPgLYMJvAkldZHs/p:NPn1zETBRcilzR7gmQqvs9hwJvAk7p1K

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.lydia.route
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4563

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/com.lydia.route/files/PersistedInstallation550914171209893534tmp

          Filesize

          90B

          MD5

          cd0b2e5375fd3100f2c976b881b8cd97

          SHA1

          ec46f1f48906b88d93d6b89ca0da93a1d107ed2b

          SHA256

          24fb1e2c6e255e8bb89a8be50fef01b8c017044cdc10a09cc1d0ddccf6aab520

          SHA512

          a6bea53c1990a80404af4da8d340b7cf1e1425ee712ac7b4e07f36a09dab6e015d3f1ae4177320f41c20dc550cfee0e036f56ac492cffff463dae9b7b0b9a11a

        • /data/user/0/com.lydia.route/files/PersistedInstallation7848447815934567232tmp

          Filesize

          566B

          MD5

          fd1fe7ed57a40df65415ef10efb7642d

          SHA1

          cb2c2ffcc78e7b26d156d26c0106cde7718562aa

          SHA256

          72c7026a61981a0871e1857199c2ea3abf2c81f26a5d806b1b851c5564511d43

          SHA512

          78641945653931d16bead306d3104b285927cded77226bcc4385c1db355a6b84e5c0783149970d0d253b2bfbb887badc3e73c065954d767c9a604adc54a9f414