Analysis

  • max time kernel
    2308328s
  • max time network
    144s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20231215-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20231215-enlocale:en-usos:android-13-x64system
  • submitted
    20/12/2023, 03:10

General

  • Target

    7fbe3429ffce4d98648737e1d013d2d30155182a607ed316d2b374a43a817c3f.apk

  • Size

    19.9MB

  • MD5

    c7a8cf94838f2d0ae6898de020f7c2ce

  • SHA1

    7876d827f504b64a2e08930b18727a28c2232bc9

  • SHA256

    7fbe3429ffce4d98648737e1d013d2d30155182a607ed316d2b374a43a817c3f

  • SHA512

    d83db111ef97698e031a0b4371d6b0d638a108bf1537b96b1e8956e7c9cdee961e77d0d32103d09c9d72c068ba1d1e398c03c6fd8700c41bdf775ab531c78a92

  • SSDEEP

    393216:cWUqc5NQOVIMK3PcTQCH/VanLbxaFG26bLRpiqjp2w0qcatIaeeUL2+R4T:UqcYf3PFCH/YLbxCkpqnatyem2+RE

Score
5/10

Malware Config

Signatures

  • Checks the presence of a debugger
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.cordova.nd.app
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4285

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/com.cordova.nd.app/files/.YFlurrySenderIndex.info.AnalyticsData_G99T5PB3XSCTVRPFBC39_254

          Filesize

          88B

          MD5

          2a83642d049f4e29b6516651b9dac2e1

          SHA1

          dd8053160bd9dafd4096d35dd166b7fef404b09c

          SHA256

          a4900c0ad1ac966a4da9f2a3b1ec782d283542067afcafd51cb9cc7d878fb8fd

          SHA512

          4e0edf65a7dc5576855e2f177b77195a24f9129a842990936eddea420a0c43277b6c137e5efc9a12145b11f48f66d3fd95906e8ed026c9d4c25875f1e628abc4

        • /data/user/0/com.cordova.nd.app/files/.YFlurrySenderIndex.info.AnalyticsMain

          Filesize

          72B

          MD5

          a9b3aed80cd80fa9e48a476a4fee1529

          SHA1

          45db5451d08ada75f86afd227b266b2acaee18f2

          SHA256

          caf0713b86fb76c411aa6de6dba126009f1d8895f523804020cc3a44b4cf169c

          SHA512

          156f89ce0683296cd440cadbc756323d44665b0561d02706d92c2d06f8ea0ac0a5c22dd9befb680cdeea479e07032b965ce8c3967252fd96932e221688a44905

        • /data/user/0/com.cordova.nd.app/files/.yflurrydatasenderblock.bc3cd483-ad0d-4d7c-b8ba-e08a6e7123d6

          Filesize

          310B

          MD5

          7b81d4657b044e4ecb2a1c85bc26a3be

          SHA1

          6fdfe71ed2f2f29ac60feda1979a4206d8584038

          SHA256

          3fd5d32ba3f615d5543c9076c3a5ae3b1abbffa25fe5a14f44e8bd840eae8acf

          SHA512

          90538929cfc346f2f80fcd54af90e295223825f1ef8254583eb4f0959366ca61e882fc8ebcf35067ea518f7cd53d73840f066a1081bc0302c2d98b6f606fe5a9

        • /data/user/0/com.cordova.nd.app/no_backup/.flurryNoBackup/installationNum

          Filesize

          100B

          MD5

          06e4931ee16f4e64ff20d9eba4baeadd

          SHA1

          6ff318f853dfd98b1a8e63f12e73e36fc9e6baf2

          SHA256

          0a5d7918562a5356cc9fb7490df31a2a366789bd870c2c1be4c9fb48d89ffec3

          SHA512

          86597432c945c4e6ab44592982e250adec7258d4e9d886dd8f72ce3255e5acb0944f2bb951333417cfe1e8fc2b04af6d120606a4311de647a8987f32c6a86c6d