703d36404e1e9bb74172bc7be5e3cfb8ffad4a6a4bee54ee0ab18deae3d105d5

Analysis

max time kernel
2306833s
max time network
161s
platform
android_x64
resource
android-x64-arm64-20231215-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
submitted
20/12/2023, 00:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

703d36404e1e9bb74172bc7be5e3cfb8ffad4a6a4bee54ee0ab18deae3d105d5.apk
Size

14.8MB
MD5

a05dcab001a60974ffe00af3b8cdd52f
SHA1

af438a9279d1e4c3cba7bf710c6a90d4283c66dc
SHA256

703d36404e1e9bb74172bc7be5e3cfb8ffad4a6a4bee54ee0ab18deae3d105d5
SHA512

bb4ab06a23bdcbfa9ac0a4fbeb3a7f17919755c3ab1e2319895fdc97ea0978101817fea1a2a41a86e4085c5beb22ca1e54e44d664854c58b303abb0616ddcc91
SSDEEP

393216:zO0kOdzbiqHYTm5y4Cv9O+zShcnF+Ml5QBYLK0sBPuF:60tvbZhCZSQFtQBYLKXm

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs

Web Service
T1102

Requests dangerous framework permissions 26 IoCs

description	ioc
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to use SIP service.	android.permission.USE_SIP
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows the app to answer an incoming phone call.	android.permission.ANSWER_PHONE_CALLS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

biqfgu.mgycleom.bauokge
1⤵
PID:4625

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/biqfgu.mgycleom.bauokge/databases/androidx.work.workdb

Filesize
4KB

MD5
7e858c4054eb00fcddc653a04e5cd1c6

SHA1
2e056bf31a8d78df136f02a62afeeca77f4faccf

SHA256
9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

SHA512
d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

Download Submit
/data/user/0/biqfgu.mgycleom.bauokge/databases/androidx.work.workdb-journal

Filesize
512B

MD5
6f1f6aad186c732afebb773791eb3a11

SHA1
23c30151bd47780e7d9c03892fd97c14dc21aec0

SHA256
f5ee1820cc401b6f28a10111caaad6f1b9651c093c96e73dae13ad62367978b9

SHA512
cef1c5494183920d1b89dfe11127569b0a98dd752775c1d6dd93c4b193d046ab8cfe9774c9cf4f860cb76038815ef42ae7b7d68d5bd1b7c724f4538d98faa467

Download Submit
/data/user/0/biqfgu.mgycleom.bauokge/databases/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/user/0/biqfgu.mgycleom.bauokge/databases/androidx.work.workdb-wal

Filesize
16KB

MD5
13e861c793eec2b3697f1d8a9c1b9d9f

SHA1
4a3ef9790c4188fd9783316a6ede5430e967a20d

SHA256
b7256032964375e1756b89b486cdc250e46267a8f9d6690d502c273883040bc3

SHA512
2c2ff28330a82f82f8a4706c4db42b3690589c7e577e11fbd61725c6075faaab25eddd16d1de4106b65035db62d907b193d1d9c01904585e102d1fe2474bb051

Download Submit
/data/user/0/biqfgu.mgycleom.bauokge/databases/androidx.work.workdb-wal

Filesize
88KB

MD5
d17fe699faeb768fe3dfe3f339d557bf

SHA1
eae69d2151cf197b7614468873d123f170368af4

SHA256
10e5a7ffdd4bd2c720c0fcddaf72c9bc607024960685a5da751447115b1ee9c6

SHA512
b78c61e1379b191d8d51f9bd7c114e122ef9765493486bb1745022c7126356d2235552a44862a9d73e01fffa8f77a6ec1373774b6e00e8202f83653aed0cc25f

Download Submit
/storage/emulated/0/Android/data/biqfgu.mgycleom.bauokge/files/apk/app1.apk

Filesize
17KB

MD5
142b77d759ff191943531126c993b6f2

SHA1
7c92cd9c54408e61eaf6794e34b3b1fdd24e9199

SHA256
279c1212b3ea26d8faeabaff74ce254e8b8faa3692412cbae5c8e20fe8f770ee

SHA512
852f89deced3cde186be7c5516f33c5bf133b5b8e9a59a468ab543e8a78a0f061eb3ae9bdf92136261775596b981d8e6c87674295c1028349d465e86f24158c2

Download Submit