Analysis
-
max time kernel
2333159s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
20/12/2023, 00:18
Static task
static1
Behavioral task
behavioral1
Sample
7335100d81ecfd60bd6e5182c363a39269f77e703cd37e128f1475351c11dfde.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
7335100d81ecfd60bd6e5182c363a39269f77e703cd37e128f1475351c11dfde.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
7335100d81ecfd60bd6e5182c363a39269f77e703cd37e128f1475351c11dfde.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
7335100d81ecfd60bd6e5182c363a39269f77e703cd37e128f1475351c11dfde.apk
-
Size
1.6MB
-
MD5
d772e4f164c4c496d571989ff523fad0
-
SHA1
186e720530014f5cecc2c8fd77b6f1d47a840131
-
SHA256
7335100d81ecfd60bd6e5182c363a39269f77e703cd37e128f1475351c11dfde
-
SHA512
6d2e970c63ab9cdaa2f32770762999a09cd69b9b3eb3b26b631cc79aced5ec1d5673aaaca5fe7627349ad516d497527da0dc0b47d5dacc276e8f7a7d390f19ef
-
SSDEEP
24576:wiaAuKq1IxwjoeD4Yo3JyQAmyvdOnHBgf/yKYkFXA8MBwqyXJYS23jT/+8jWTG+P:w2uKq1ILeD4L5yQAJmBwJJTTXIzTWdIo
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.pix.arts.CaesarEmpire/files/c3d54c11.dex 4454 /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.pix.arts.CaesarEmpire/files/c3d54c11.dex --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.pix.arts.CaesarEmpire/files/oat/x86/c3d54c11.odex --compiler-filter=quicken --class-loader-context=&
Processes
-
com.pix.arts.CaesarEmpire1⤵PID:4428
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.pix.arts.CaesarEmpire/files/c3d54c11.dex --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.pix.arts.CaesarEmpire/files/oat/x86/c3d54c11.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
PID:4454
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
279KB
MD5f26877afa044b764f41103bc21e00c0a
SHA1a03edce8d8bb1dd798395f49985f404612f970de
SHA256e834a3e4d43dec04cc645a0709a5bfd8e05eb94f628e1d5a4524f88fd45b7aa7
SHA5125edf802c2cc869af11b574070dd6d78aae383cbcadd1d0f068b23ba5e430175c1f6debe1ec52a791b8b306147c988bf3bb322c35c831b511f02ac37ae76cff96
-
Filesize
654KB
MD54017ce57945cb3d22cff73c183e1b6ad
SHA1e0561f31b3421b126e7e1dac5582dc695abac63d
SHA25611efebbbe38d3cb70b63f1d12d840ad53939229292b4c3a7855113c759892f5e
SHA5120383c29e82d7f25a258b46bf79960aa5d4d517274130d135b21f6b8889b42ec6381bb46f831abd40028eb971cafd209a905407a24d0a04595706e4caf165837a