81d513b5ecf72073ad4389761449ec147762d478af4a994a95bdfdcef7c28e2a

Analysis

max time kernel
2324184s
max time network
164s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
20-12-2023 03:43

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

81d513b5ecf72073ad4389761449ec147762d478af4a994a95bdfdcef7c28e2a.apk
Size

26.8MB
MD5

fb2aef61ee6fac5094062ce359c5a1fd
SHA1

9c6d7fab1a68a7a6c2ad6640d0879cf69a9d4965
SHA256

81d513b5ecf72073ad4389761449ec147762d478af4a994a95bdfdcef7c28e2a
SHA512

2cc3c67fa9d5d9c01ff240cb9ac0bda111496cf6e6c6df8094c65cc50b188f5d67bf57c82925290aa5212c3692b8b1dd49fd27e8927adc9064ce07dc000963d4
SSDEEP

786432:ev2y3oqbm3G8F/g8P1e/vfmSffPiZeY2R:e+4Fbm3/LPUnfmSK4

Score

7^/10

Malware Config

Signatures

Loads dropped Dex/Jar 2 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/data/com.Atmosight.Rot.gtx/.jiagu/classes.dex	4989	com.Atmosight.Rot.gtx
/data/user/0/com.Atmosight.Rot.gtx/files/ebody/res/37673/vva.jar	4989	com.Atmosight.Rot.gtx

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.Atmosight.Rot.gtx

com.Atmosight.Rot.gtx
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4989

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.Atmosight.Rot.gtx/.jiagu/classes.dex

Filesize
1.9MB

MD5
7f30d9fcc37ab01fbd79bd29df038220

SHA1
43262b68a3a865c31ba05a918ce2e1872873010d

SHA256
1b59cc12332e8471abf96bc2d4390b08f7ba99667813eac2175c4b8d3a43acbe

SHA512
0a3421bce8a402b1ded9f7b4e341afaaea071f6d1b644f1921751309bc0da2d081f171166c81f63a5300a70add20551ccd2b05a536c3385aab08510afeb49e0f

Download Submit
/data/data/com.Atmosight.Rot.gtx/app_ebody/res/xmtok/37673/uuloi

Filesize
220KB

MD5
5199a95f3e7f364017b7c795474791c9

SHA1
34a0184c781b77f2ca8cf86ea21fbc6daa308e14

SHA256
82ae0769fe1e96b341b9e57a2f2349af62d32845f6fa07190182f57e07bc2802

SHA512
6f25f1c61d477b863a871a2c12ac22b071ccd9d53e0909368fb615e2eb2b63960c359df8d297139ab17bbad3ff2a425fbfa36742c537accd1e2c64b3ca8abffd

Download Submit
/data/data/com.Atmosight.Rot.gtx/databases/cc/cc.db-journal

Filesize
8KB

MD5
c377c5228c1ccf98826d8080ad6b4fd6

SHA1
ef4143531e8489d2ded30298d9320cbb3d6999b1

SHA256
7c544fad76dd88c0c99037055d49fd70afc8fceeb0a507fa9c3d937d8b02bd17

SHA512
906232fbc58ccb18be28e1ab2c553d49be04b7684021148d73daaf6a8bd8658f58feaf3d6526d8e7dc714907537266e76d653b5063242f3d95fc07d66fc2f0b0

Download Submit
/data/data/com.Atmosight.Rot.gtx/files/.jglogs/.jg.ac

Filesize
32B

MD5
6c988c951b55edddbbbe3d4b73f038a1

SHA1
6f5fe01bfabf760b23fcd661275dc3750da9c60c

SHA256
d891bd748b37681f48897ae06e3325603e8d57fef449ae8131e8f845f600bf80

SHA512
915ce79238039c47eddf2994c2e2aab58b2bce0f3a2d02ac30fd3bff27d7c6716e64eadcb5835c6748fe3433c773c2d902ca4fed6954219e80ef40b444f494c8

Download Submit
/data/data/com.Atmosight.Rot.gtx/files/.jglogs/.jg.ic

Filesize
32B

MD5
d713840adf6866e7beedd7283dee2746

SHA1
3332b71fdcde2413f0273ffca3f94eace151c43f

SHA256
4e916ddbf6e6d3a00fe8b3595dfc955666d193a6d84d195c9e8aba1a99eecb16

SHA512
41f77503f272deea86c27d9f2bd9d83981a67a157b0d7e212b9bb61b767bfd02b1ab67ddf885b681d5216f4287b0bfe35c13b65eaed326ab9e08f6203bef3ac0

Download Submit
/data/data/com.Atmosight.Rot.gtx/files/.jglogs/.jg.rd

Filesize
32B

MD5
c23f8576612e0eb9490b0c1ea3f9a001

SHA1
51d666f434f2dc11291a379e06ac8c9bcbbea522

SHA256
418a88615a7a35a83afa077db6d1e81a35c0621b82de2f2bd6f19728b9b2be4e

SHA512
cac7f3aaceff910c790f534e3168a43e519829bf23a5538b7c673ab75e248b7c73c6d1e6ece71f8908fe09f4c95790a70323c61c13ae87d37c1464da7f542c86

Download Submit
/data/data/com.Atmosight.Rot.gtx/files/.jglogs/.jg.ri

Filesize
307B

MD5
6a99613b323b257d01e317cef4fa650b

SHA1
c84107e56381064ef66f0a9452e58173bd973426

SHA256
95e0985814463937641888287ea5c919a13f725f30ea34a60840f59df4021789

SHA512
299bbcec3759da2ff585e603fdbf6fdbc14cf910db1fdd12a3dd0a8bec16342db7c30c026832fe4b01c237fb0bc29758caaec73343434414145453bcddf25c4e

Download Submit
/data/data/com.Atmosight.Rot.gtx/files/.jglogs/.jg.ri

Filesize
314B

MD5
40f373fcc960c5b7fb7dc90ca13157dc

SHA1
5296be253968e8316e7974c045dafca7b86b4135

SHA256
03b2d89c22dd8425317d9a71f219867dd899180d7617e53874242c995664b187

SHA512
0d6ad78fa6ca46052bdf617e4cd8b60f4567f7a08097afd4cbf2adc88ddcaf35f4cf8690fa2d6c42dde1b520a0d42149715536d581a41d2cbe3a17ba1cecad9d

Download Submit
/data/data/com.Atmosight.Rot.gtx/files/.jglogs/.jg.store.report_pid

Filesize
32B

MD5
87254920b7a6e08e6a8901b3618d8c2a

SHA1
106f8503ee6b7c2a43af5fbf370c1cf54dc08cba

SHA256
23f262b9b9776ddf331570442b8424947ec9be17beb473ddedafbca3b600b0b6

SHA512
1c04e3cdc76070aa9cd0bf518ac3968029643e55facbc436f764b54df2bdbb18da2b3b128559c5640028b929e5ee3232d938b0761555762ae12cc8c85ef0f92e

Download Submit
/data/data/com.Atmosight.Rot.gtx/files/.jiagu.lock

Filesize
27B

MD5
a9e6f96bc33305d595445765bd7194aa

SHA1
a152d6b00d18d6c312d9c3fc682428813cdae402

SHA256
ce026c406a14502d33cd726b84daba28e92e51dc7a2af106435d7b26063e339c

SHA512
9342945f07bf524ba0b8c7b7295e655dfe774d27df70ee9c16eb84129a215fa82cb9bae88c4c23c97bb5719fe3defc69c8da4e744559fb64f4883fd3a71370de

Download Submit
/data/data/com.Atmosight.Rot.gtx/files/ebody/as/cheuu

Filesize
8B

MD5
57ab5f44d75c86a17937fede76ffd59e

SHA1
d276dc9d59197da3aa7a7f9bb2f866eea8d4e23b

SHA256
7ffa9fe4d6d99923fb2a57e1636f9d707161bd2aa846ab2b2bd71fdc1267e6e4

SHA512
4151e3afc703fc6e33da887ff5dbc125871a552246daf0822b2fe2d9a2bf64f7c20c2e685025ac932897bcebc277e1733fdc1272959cda71a244d10d16c722c1

Download Submit
/data/data/com.Atmosight.Rot.gtx/files/ebody/res/37673/vva

Filesize
999KB

MD5
19ce848e0cfb116f30902b6f8cd74362

SHA1
d95f14bbb9cf21f010d233f013cdef74dea8f0b6

SHA256
cc711973348cbe826ff0a437a5b95c29d1820b089d656e51e9031793bacfd794

SHA512
7e162546f520f0abe73416b98d78e4de91eced2d6f1422fedf140b41a126acef819de6f09e1dacd02281aa9f8c10e64a0baec159fc4b276682a77a7b2b9cca57

Download Submit
/data/data/com.Atmosight.Rot.gtx/files/ebody/seey/tmd

Filesize
32B

MD5
f22d1c9d8805a03089a14cb8f0a077f0

SHA1
fbf44eea9680293a31ffaefdf4a51fe76b661b96

SHA256
c799bb41ae4a0e972aa7f51fa42bddcb39740813d1549c792a1bfd1cb159be49

SHA512
9c14964bf702554b46136efa6238920b25cdba7f228d72eb66de2efeed0e7f6a785770fc97bbd53819538c23add5ec41ed99933809c30ff8a95311728b044ae3

Download Submit
/data/data/com.Atmosight.Rot.gtx/files/ebody/seey/tv

Filesize
5B

MD5
1c4ec9002d8f6c1ddae5c151e48cf718

SHA1
2425cc273831d722bee4906c14c03fe497b99c08

SHA256
f6c857ed9fb74036aad1662f0450a84601f9eaf5f9eb0e6943136fa6ffab21b0

SHA512
6371c3db3d1dd610f1d22a8a5c5ba3efb8e4d0fd8df158f0dcc001238072717bb1d385152e4b8f67d7283eaf41d0582f6381e859f83f673e8b4ec48ce59d76ac

Download Submit
/data/user/0/com.Atmosight.Rot.gtx/files/ebody/res/37673/vva.jar

Filesize
1.0MB

MD5
7eb039aa7728169a015707a82e1b41a4

SHA1
adeae37340af1ce383c908cdc4d375b270b30a60

SHA256
9e4e34e3db9a85d0e2f937c85255f2c924df7465284c9f8d91f9ab4ed8f2c49c

SHA512
c60f5c867ff34eed8186741ed2947e21ea7f3264114347ff64c90d9e04381238f0a3fbae18ef4ddc3c4b390935a21ebcfa311815384615574e9c9f90a825f7ca

Download Submit
/storage/emulated/0/Android/data/com.Atmosight.Rot.gtx/cache/UnityAdsCache/UnityAdsCache-040cc95e8d7a8394b294a0a624822221828dde3c301dec51f844d0d09a8e8f61.png

Filesize
21KB

MD5
ad3b0243249e278c1db543afd5758cee

SHA1
8e0c1fef3b28ae31b66770e2c66eaad2398aaae2

SHA256
5abfcc8fe6a9ff43083b9f8cc8e585aa72edd0139f2857bda882d4c2d2a0a5c9

SHA512
57d178066014bb4bce452ee9ae27b0f4d3743aa58cd59ac38698dfbebabb601373e7a0ebd7e6c7e3d8f811cd29872cd41c938c802919128b352b3f0ccb6164a4

Download Submit
/storage/emulated/0/Android/data/com.Atmosight.Rot.gtx/cache/UnityAdsCache/UnityAdsStorage-private-data.json

Filesize
41B

MD5
16d3e6eac0e79222a9b368edac765b34

SHA1
48d5e621fcdd84108f5750d6905180b622715b11

SHA256
3a518b70256a689906d6740062462e3124aad6e55c5aa47339a87a56e4933ee7

SHA512
d0aaacf86100135241426e2a0e9ba44414aa456cd708124e2f9c3a8037e008870cbcb506d316e4fe7cfe1d6dc3073393989a6f3c29f7cfabd6b0f65057afe747

Download Submit
/storage/emulated/0/Android/data/com.Atmosight.Rot.gtx/cache/UnityAdsCache/UnityAdsStorage-public-data.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
/storage/emulated/0/Android/data/com.Atmosight.Rot.gtx/cache/UnityAdsCache/UnityAdsStorage-public-data.json

Filesize
111B

MD5
046742f4d55fd8415da031af7d3c015d

SHA1
515164aafeb1602fb1677681c46d32c6e1668a6d

SHA256
c556c64c3d96f9a562d8dd694c52569d164fc5d1f820eb1fd364384a9f496719

SHA512
95e0f97aaafe6a96af352d5b1ca298c02d840ce77d6fb55c704bb4e1a9ce99f1cb9e960c488c973ee1f39de8a5997bd10861a057ca3546967a5d3b22adc1028b

Download Submit
/storage/emulated/0/Android/data/com.Atmosight.Rot.gtx/cache/UnityAdsCache/UnityAdsStorage-public-data.json

Filesize
215B

MD5
b27b6555454c3aec9efc575923551715

SHA1
cbeb8283b1bbb10037c80a962d5677cd3f3fd8d6

SHA256
8db61412ed2177c384b72ab254c05b65fb4f5fabb40240039d1109ad6af89501

SHA512
b65d1a267a1867682b7ec539e993b6833ebac5ca0e930db61c8705eda1ea5f8cda5c81d38e0bbf1a38a2e717313a8b98b683f7bd0dead7644f8a8944256df652

Download Submit
/storage/emulated/0/Android/data/com.Atmosight.Rot.gtx/cache/UnityAdsCache/UnityAdsTest.txt

Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit
/storage/emulated/0/Android/data/com.Atmosight.Rot.gtx/cache/UnityAdsCache/UnityAdsWebApp.html

Filesize
1.4MB

MD5
41cbbaad8d3fb7b52e52f06adad4ba0f

SHA1
a573818139eb9c74c42acc5bcb0574be2cd3e7dd

SHA256
0545b7b2640442ceb96199c3e2c3e5620d653cc663afdae14257f07495715c0a

SHA512
04c989b9bff2021395fb1d44c09477408dcdfc37d9615700a4ba5d9abb2eb851a356056bc1035d46e3c48693dae9a71d24ef473d2f12a364a4fa5ed50d282783

Download Submit
/storage/emulated/0/Android/data/com.Atmosight.Rot.gtx/files/Unity/87e3a2e3-81de-4d15-beed-fdb47657b784/Analytics/ArchivedEvents/170313114100000.626bdbeb/e

Filesize
63B

MD5
1ef85bff840fe5c79c3b9ac3bca13cdf

SHA1
7071d0a8256133ff4ee5c543f9146618457fae99

SHA256
0ea241375e4ea0501f517e78755564d6d8edff3370b40ccced0ce99c82de0d7f

SHA512
c6acc75ba7e7345c156d7c15a36e4912649a18c7cf5834b5f76c2f1d6eb8baed32e89e215ded3066358de97cb2f0b2539c84a5e39a4c9786726f5110f9242d18

Download Submit
/storage/emulated/0/Android/data/com.Atmosight.Rot.gtx/files/Unity/87e3a2e3-81de-4d15-beed-fdb47657b784/Analytics/ArchivedEvents/170313114100000.626bdbeb/g

Filesize
1B

MD5
c81e728d9d4c2f636f067f89cc14862c

SHA1
da4b9237bacccdf19c0760cab7aec4a8359010b0

SHA256
d4735e3a265e16eee03f59718b9b5d03019c07d8b6c51f90da3a666eec13ab35

SHA512
40b244112641dd78dd4f93b6c9190dd46e0099194d5a44257b7efad6ef9ff4683da1eda0244448cb343aa688f5d3efd7314dafe580ac0bcbf115aeca9e8dc114

Download Submit
/storage/emulated/0/Android/data/com.Atmosight.Rot.gtx/files/Unity/87e3a2e3-81de-4d15-beed-fdb47657b784/Analytics/ArchivedEvents/170313114100000.626bdbeb/s

Filesize
337B

MD5
7a474c4b47a24de4bdde7a35847b06af

SHA1
4160671b50da573b08e2f697c9ba808a7988223e

SHA256
b4c85b8274f7cf5c64357f4936f1bc81062972afc3d28f3c57327abb1540b656

SHA512
83e8c6928e56464a263be2583dacc887fe15d37875e583435221d878d2d6ba415096a7612c2ffca069641d15b8d0726dc9ea53c681d1635f82ec39da2f95ccbd

Download Submit
/storage/emulated/0/Android/data/com.Atmosight.Rot.gtx/files/Unity/87e3a2e3-81de-4d15-beed-fdb47657b784/Analytics/ArchivedEvents/170313114100001.626bdbeb/e

Filesize
107B

MD5
753d30c74cf5bc419f734f60b4dee581

SHA1
f426472a4c48239f1623f55d125e18390cc9153b

SHA256
62866b54a83eb043ce897c235c65d89dd49eb23f1ffcccd49a08ebdc7004156e

SHA512
b94f98b7e067874e79332da018013e17a6979c4c4f6c0b0126e1cc9ddf1e482d9fa02c9841a4f439e8534a3de32fbcb76eaa5e671c1fb7412fa6c1fa18b77647

Download Submit
/storage/emulated/0/Android/data/com.Atmosight.Rot.gtx/files/Unity/87e3a2e3-81de-4d15-beed-fdb47657b784/Analytics/ArchivedEvents/170313114100002.626bdbeb/e

Filesize
974B

MD5
4e47419205a2de00c61970077bb9739b

SHA1
0dc9495ba0c8a79c7151daa777329f7081c7229b

SHA256
0564b2fb80b83f4fe82c47a1988f59559fa37c1c7b5824bb36595f989a6304c5

SHA512
66e4eb81b20ed0a54639b693b7384a09656f1529c87c2aede2d75ec709fa4bdabde271882bf6f96ce1e4d557be3e81c1805ea92e7503c3b2272e08a632c48277

Download Submit
/storage/emulated/0/Android/data/com.Atmosight.Rot.gtx/files/Unity/87e3a2e3-81de-4d15-beed-fdb47657b784/Analytics/ArchivedEvents/170313114100002.626bdbeb/e

Filesize
1KB

MD5
14c688b41b00d4ae72ff36385dc0621c

SHA1
616a0cff1640eaed67ed9fc9a0d4e60d0151dc9b

SHA256
0c3064ab0d9cc5ce0d85c4031bbc69718528b23d952cd567193f5342462880d7

SHA512
6690fbaba7105169ae1e925b79e56074ac26dba25b8b850d98b8bfbe0997cdcc275bdaa0ec042a4dad770883e762ca94f41cd61126f5516727d1ab6f6ba80f8d

Download Submit
/storage/emulated/0/Android/data/com.Atmosight.Rot.gtx/files/Unity/87e3a2e3-81de-4d15-beed-fdb47657b784/Analytics/ArchivedEvents/170313114100002.626bdbeb/e

Filesize
1KB

MD5
507100a22bf7f9268e0ee57edcc01545

SHA1
c0c8d2ff573a2d73c831d5553517aeead54cf3f3

SHA256
7ac9afa61c87f93173a17a58d3ddc9e1fe8612cbf23bb179b7b5dfb5f23ddfbe

SHA512
6fc2d64d11e3ea061657a63b91fa84b29a048d53bb1c7c629712f65ff5341cc63bf353aed77989ff015eeea2ec9a7c6db06ef3d2c191cb1e69cda2fcf143fade

Download Submit
/storage/emulated/0/Android/data/com.Atmosight.Rot.gtx/files/Unity/87e3a2e3-81de-4d15-beed-fdb47657b784/Analytics/config

Filesize
293B

MD5
8673a8ac0b06a9d056d08d62f857ba4b

SHA1
a351bea1932270bafbe468584058fef20dcfc31e

SHA256
83b3f90c4edf1f122c8faf9784ca0aee4dd017c65493ac181c1814211703db96

SHA512
edf28eb7fcef654f139285d308f817ee230d6f064a4c865109d6dfe6f73c11f8f35737c8159c8a302118237ab980899ba5773f547cc9da4028643a53b08e324f

Download Submit
/storage/emulated/0/Android/data/com.Atmosight.Rot.gtx/files/Unity/87e3a2e3-81de-4d15-beed-fdb47657b784/Analytics/values

Filesize
154B

MD5
58a1b42a9c0700a65b46e905199aa942

SHA1
9661896b649f0cb8303efee92f43e3156a2c6e00

SHA256
3317d91c71d12fee4f3e75dd2fb6f67559cea9cd06214ab112ff244bf498bcae

SHA512
babb96628572ef4a5353326d723d77601a5e9eac157b9203279af9eb6d04c688a753ca2d747d26e6a66ed3fd4dbd9452ea8802c7240b30c2f65be5d62fbec21e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads