Analysis

  • max time kernel
    2186391s
  • max time network
    135s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    19/12/2023, 10:56

General

  • Target

    0e5bfac5dca97ec23f973f954fbba17d.apk

  • Size

    19.0MB

  • MD5

    0e5bfac5dca97ec23f973f954fbba17d

  • SHA1

    5aa01a4f1d9b00c4d57d3037600c6d2ff8e3bae1

  • SHA256

    fbf8c7e258814ace3499083a9fc34caddad4684d9b914bcb40d58c30461a363a

  • SHA512

    0f8c5306636f87cdcf9294e10421189d8837891e175483e6a66844738258784fd8585036fe3f400b73de6142bd1088dbf5b83f4d873e35fd1665df04a7744695

  • SSDEEP

    393216:A5QZRHqo/oRHSgs4r4z+i9btcnmIZb7mG/UqHN/KbQ0l7npv6YV:iQZ1p/qym2+i9M7mG/UqHN/K8m7Iq

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.b6dbc81.uc395b9ach
    1⤵
    • Loads dropped Dex/Jar
    PID:4239
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.b6dbc81.uc395b9ach/app_ltads/classes.jar --output-vdex-fd=45 --oat-fd=46 --oat-location=/data/user/0/com.b6dbc81.uc395b9ach/app_ltads/oat/x86/classes.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4268

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.b6dbc81.uc395b9ach/app_ltads/classes.jar

          Filesize

          69KB

          MD5

          78c4cd574f6bf3ddc5c53a56395db1fd

          SHA1

          6ebe71e91a309b96eed79a2ce9f687a92fa449d2

          SHA256

          f5f6523eaddca951f3abacede925af6fd006534c8cc28e0447ebcd19c138d213

          SHA512

          638a64ddaaf8349fdfcc0aef04aede107d5702b4242d6d67eeb86959fa1b1aca26b4f1aaca04d431cf422e73fc931591058e1d28bd02501c6154459b1ecbed95

        • /data/data/com.b6dbc81.uc395b9ach/databases/dbvyxead

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/data/com.b6dbc81.uc395b9ach/databases/dbvyxead-journal

          Filesize

          512B

          MD5

          8b4f6f18274b1ed85b11aacfb6b9bf73

          SHA1

          3681519a2cfe29448685a9a628c0447d3b493bfa

          SHA256

          edd255ff0c0d614a2e7789fbb0a489cd67e1892711a8d16b5a899af368b799c8

          SHA512

          3f836f65c42c8a24dc72ea81a1397b47baf873f16cf93f5530bb28e4550096a42d96fdc36a5b2c6262227a12f373111a7b063d9177f9a23535e456f3646c8e98

        • /data/data/com.b6dbc81.uc395b9ach/databases/dbvyxead-wal

          Filesize

          64KB

          MD5

          046d22506e6525635a81457ae5f01428

          SHA1

          d7251dd76c05a55bfa102799a5a8e0f11d414961

          SHA256

          3876d7bd8b479db3e6ac462e0e8cdfbe1b6278074e683bfb01f33a6eff59d5e5

          SHA512

          6e785068814db95a56411bcac05bdb494dd35bb22a7b33507183b9a7367d96229439b55d86f9b33684d3a6da73ae11e9cd6bdf1f56d563510f9489b0f3e3c5b0

        • /data/user/0/com.b6dbc81.uc395b9ach/app_ltads/classes.jar

          Filesize

          164KB

          MD5

          240aaaaa9bc54a59264abc59b2bc37af

          SHA1

          4be7561987c0b2a3f15119d7472bc2931b497443

          SHA256

          56e3829b62af392893ab41c310098f0de7c071f05cb69acc4894577f667f3060

          SHA512

          fd96c6dc1ed476406ab4d94ce59ecba1ff9f491af663200986d0f9345386ee1683b532234fd12a779deae5615f8267cad49fc3fcab7ea0cddd3c4543f2380613

        • /data/user/0/com.b6dbc81.uc395b9ach/app_ltads/classes.jar

          Filesize

          164KB

          MD5

          0be7cb89ce012a9c870a73a33043be7d

          SHA1

          3f42f1b2d091efb453d6a4bdafc1a417ef82547c

          SHA256

          62f8106ff0020ae13e2bfdcb695ccab1e1c748d64a1ffec38678c1f97de3be31

          SHA512

          279ff5ff26c7bec75c84060770cab71937ffb2309a77e1ff5448051db755054ec5fac339adeffcd0eb26943fcd4873edcc6a30734cb96f471d6ffc6eae6efd90