Analysis
-
max time kernel
2510204s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
-
submitted
20-12-2023 06:43
General
-
Target
8c78466934505fea4b4711a23e496e7d4abf5ad2b33e5833751c347cafdb722a.apk
-
Size
180KB
-
MD5
edb3bcb4f1b3a5a8aacec91f356e18ff
-
SHA1
412dc0ccc65876c11f0028b6950c8d1d218e4cad
-
SHA256
8c78466934505fea4b4711a23e496e7d4abf5ad2b33e5833751c347cafdb722a
-
SHA512
d4514303f106a80c8074bc51a48fa0c7fab960da89bc1c8e4d09206e1a86f693548e91b8adcd485f5af0751430768d9616dc9c2c5ba02d39314cd755e7b6a689
-
SSDEEP
3072:HvEukN4700pr75onSW9zUck0GzSlZTsIvRIEp9F6q5PQgy2vn/clgs5z13WG+zkl:HMLW70g75o/iIBF6SY5uUlf5hWG+e1
Malware Config
Signatures
-
Removes its main activity from the application launcher 1 IoCs
-
Loads dropped Dex/Jar 6 IoCs
Runs executable file dropped to the device during analysis.
Processes
-
com.onumaq.hgxmigpt1⤵
- Removes its main activity from the application launcher
- Loads dropped Dex/Jar
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.onumaq.hgxmigpt/files/cals-1424437111ses.dex --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.onumaq.hgxmigpt/files/oat/x86/cals-1424437111ses.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.onumaq.hgxmigpt/files/fl.dex --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.onumaq.hgxmigpt/files/oat/x86/fl.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
40KB
MD5cc9ed09f735a2da656d4c58bb5c9b20e
SHA1786a0d877fb408eaf548d05228d36f3867d87f3b
SHA2568397404a6ccc3ed39abfe8a7e5663f6976f07ff49eefa7c07984e009a03c36a3
SHA51244a2f51b741967236f6bb0be8d5453e968db83e139fb64620fa96a1168435d1fde50991b6579663da668e7e2d3f9678833f479f0d656e5b413be6f225069d1c0
-
Filesize
88KB
MD58432d226a036783a7450bba02e5ced18
SHA11ad853e77fdf2a1b1b4b31bb80ab72956a130973
SHA2565b057c70454805298433b7d778177d490ac3880b6d5888513d416bf28eae29de
SHA51201fc26dc447dc134dd9916f876076336d8827805a081f36f1e62abfb1de1e766aa85a67d28d3c7371ab38a2a6bc308a46eb382bb355dab0b3e7ffa6a74716613
-
Filesize
40KB
MD5d0cf43263c0a79fdc8bf600ea5eae93c
SHA1c5d4fb7c098a41706a4ed6f005506efe48c72c3a
SHA256c852799e5acd74c79dd8e68878ba60412ad82aff91564ad87ac611af0a621957
SHA512569d491d4704bdf321876e60955b91f615c268a52a2b17fe654e7fca30b03238705e1be6e372fd2387070a8ed6c3e50a54334def85fd37fe3312a25785356371
-
Filesize
88KB
MD5de5d2daabe949afb04307d0426029ea4
SHA1b0d9ff8237b185b4f18a26fa3afb7026c4b6ee94
SHA25655eb43594b26c09fde848bfc658f28fc4e5f2ab122984edb762183d5c067ffd6
SHA512ea71fa7e7b10f732d346d27cc9be40d991644ef1a5150fc5337076e342fec1081ef406e96ce852268dcf34230f87b471f6a565323f4bfbd42af685f69bc67923