Analysis
-
max time kernel
2186391s -
max time network
135s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
19/12/2023, 10:56
Static task
static1
Behavioral task
behavioral1
Sample
0e5bfac5dca97ec23f973f954fbba17d.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
__pasys_remote_banner.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral3
Sample
__pasys_remote_banner.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral4
Sample
__pasys_remote_banner.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
0e5bfac5dca97ec23f973f954fbba17d.apk
-
Size
19.0MB
-
MD5
0e5bfac5dca97ec23f973f954fbba17d
-
SHA1
5aa01a4f1d9b00c4d57d3037600c6d2ff8e3bae1
-
SHA256
fbf8c7e258814ace3499083a9fc34caddad4684d9b914bcb40d58c30461a363a
-
SHA512
0f8c5306636f87cdcf9294e10421189d8837891e175483e6a66844738258784fd8585036fe3f400b73de6142bd1088dbf5b83f4d873e35fd1665df04a7744695
-
SSDEEP
393216:A5QZRHqo/oRHSgs4r4z+i9btcnmIZb7mG/UqHN/KbQ0l7npv6YV:iQZ1p/qym2+i9M7mG/UqHN/K8m7Iq
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.b6dbc81.uc395b9ach/app_ltads/classes.jar 4268 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.b6dbc81.uc395b9ach/app_ltads/classes.jar --output-vdex-fd=45 --oat-fd=46 --oat-location=/data/user/0/com.b6dbc81.uc395b9ach/app_ltads/oat/x86/classes.odex --compiler-filter=quicken --class-loader-context=& /data/user/0/com.b6dbc81.uc395b9ach/app_ltads/classes.jar 4239 com.b6dbc81.uc395b9ach
Processes
-
com.b6dbc81.uc395b9ach1⤵
- Loads dropped Dex/Jar
PID:4239 -
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.b6dbc81.uc395b9ach/app_ltads/classes.jar --output-vdex-fd=45 --oat-fd=46 --oat-location=/data/user/0/com.b6dbc81.uc395b9ach/app_ltads/oat/x86/classes.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4268
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
69KB
MD578c4cd574f6bf3ddc5c53a56395db1fd
SHA16ebe71e91a309b96eed79a2ce9f687a92fa449d2
SHA256f5f6523eaddca951f3abacede925af6fd006534c8cc28e0447ebcd19c138d213
SHA512638a64ddaaf8349fdfcc0aef04aede107d5702b4242d6d67eeb86959fa1b1aca26b4f1aaca04d431cf422e73fc931591058e1d28bd02501c6154459b1ecbed95
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD58b4f6f18274b1ed85b11aacfb6b9bf73
SHA13681519a2cfe29448685a9a628c0447d3b493bfa
SHA256edd255ff0c0d614a2e7789fbb0a489cd67e1892711a8d16b5a899af368b799c8
SHA5123f836f65c42c8a24dc72ea81a1397b47baf873f16cf93f5530bb28e4550096a42d96fdc36a5b2c6262227a12f373111a7b063d9177f9a23535e456f3646c8e98
-
Filesize
64KB
MD5046d22506e6525635a81457ae5f01428
SHA1d7251dd76c05a55bfa102799a5a8e0f11d414961
SHA2563876d7bd8b479db3e6ac462e0e8cdfbe1b6278074e683bfb01f33a6eff59d5e5
SHA5126e785068814db95a56411bcac05bdb494dd35bb22a7b33507183b9a7367d96229439b55d86f9b33684d3a6da73ae11e9cd6bdf1f56d563510f9489b0f3e3c5b0
-
Filesize
164KB
MD5240aaaaa9bc54a59264abc59b2bc37af
SHA14be7561987c0b2a3f15119d7472bc2931b497443
SHA25656e3829b62af392893ab41c310098f0de7c071f05cb69acc4894577f667f3060
SHA512fd96c6dc1ed476406ab4d94ce59ecba1ff9f491af663200986d0f9345386ee1683b532234fd12a779deae5615f8267cad49fc3fcab7ea0cddd3c4543f2380613
-
Filesize
164KB
MD50be7cb89ce012a9c870a73a33043be7d
SHA13f42f1b2d091efb453d6a4bdafc1a417ef82547c
SHA25662f8106ff0020ae13e2bfdcb695ccab1e1c748d64a1ffec38678c1f97de3be31
SHA512279ff5ff26c7bec75c84060770cab71937ffb2309a77e1ff5448051db755054ec5fac339adeffcd0eb26943fcd4873edcc6a30734cb96f471d6ffc6eae6efd90