Overview

overview

7

Static

static

6

81f437dcb6...0e.apk

android-9-x86

7

81f437dcb6...0e.apk

android-10-x64

1

81f437dcb6...0e.apk

android-11-x64

7

Analysis

  • max time kernel
    2327113s
  • max time network
    159s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20/12/2023, 03:46

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    81f437dcb6e3a68ad3badd2cc79ca95361f57bc690ddf4592a50596f4fa44b0e.apk
  • Size 1.6MB
  • Sample231220-ebwbcsafgr
  • SHA256 81f437dcb6e3a68ad3badd2cc79ca95361f57bc690ddf4592a50596f4fa44b0e
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs

Processes

  • com.level9.oiltrain.transporter.eurotrain.driving.sim.subway
    1⤵
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    PID:4795

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events
        • Path /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/databases/com.google.android.datatransport.events
        • Size 12KB
        • SHA256 d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 9466342d8aa3c0d077cf9b207301909311caed8b5f00204a6515eaba804c0bba
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 33f87443c298719734e4824c5732e58e8f3546bf83824448bd342bb48c02e9ef
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 10d0c6acb1392fba554e9cac5a04b610840a73c862616110a0742a7eaa66f271
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        93b3fe6d.dex
        • Path /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/files/93b3fe6d.dex
        • Size 261KB
        • SHA256 7816dc7d3f88748d5f0ab9219f0b10f3a30f534e66a2b2aa8f58753d9aa2b7e9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        93b3fe6d.dex
        • Path /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/files/93b3fe6d.dex
        • Size 613KB
        • SHA256 5d72c4d14c8b256e195c360e2262ada4032fa2d2c5ce4528404da408fe2dce98
        • MD5 SHA1 SHA512 SSDEEP
        Download

        BGEaUZrY
        • Path /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/files/BGEaUZrY
        • Size 504B
        • SHA256 29a62a8e2372969e514bd93cfd777a6ac315e68e139c20833f9c6a3cf2eddd61
        • MD5 SHA1 SHA512
        Submit Download

        BGEaUZrY
        • Path /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/files/BGEaUZrY
        • Size 740B
        • SHA256 462a82443c1b58a9d0c0eee3cea2814543418cdcb8afbf7f1d8b938d6cc51396
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation3850922995561682533tmp
        • Path /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/files/PersistedInstallation3850922995561682533tmp
        • Size 567B
        • SHA256 68ea1e1cfc06061e3290bf6c2c7ca2e413e79cfd03bd40a9cb614ca17e5c6193
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation8900971747981514563tmp
        • Path /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/files/PersistedInstallation8900971747981514563tmp
        • Size 90B
        • SHA256 b2abe565a789d9e89f5c7cc7ac97c0973881e5b76c068cd99497f717e357a9d6
        • MD5 SHA1 SHA512
        Submit Download

        TrPJFdsN
        • Path /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/files/TrPJFdsN
        • Size 336B
        • SHA256 59c08b67cbe0ddfa6c501c6a724f3cd9f4ab1457935a31a1f107f05d8b6f32b6
        • MD5 SHA1 SHA512
        Submit Download

        TrPJFdsN
        • Path /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/files/TrPJFdsN
        • Size 336B
        • SHA256 9f8cc404b86679a0f4725873d373fecfc9e84454cd757c48675a7c7c220af750
        • MD5 SHA1 SHA512
        Submit Download

        TrPJFdsN
        • Path /data/user/0/com.level9.oiltrain.transporter.eurotrain.driving.sim.subway/files/TrPJFdsN
        • Size 336B
        • SHA256 6bc12795bc11c3c1ea29ce002ab1e6cbc6bd202d15af3d3403fa1b4a3bdbdba4
        • MD5 SHA1 SHA512
        Submit Download