9f36d98c5bffde9f43e65cbfc3f732e28e4620553f7d68edc75271cf6f5a7c55

Analysis

max time kernel
2485747s
max time network
146s
platform
android_x64
resource
android-x64-arm64-20231215-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
submitted
20-12-2023 09:57

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9f36d98c5bffde9f43e65cbfc3f732e28e4620553f7d68edc75271cf6f5a7c55.apk
Size

14.8MB
MD5

b3e635dda12293344b6a1ec410b575e7
SHA1

c15ae0e02682933143c4b325c34f413a052233a8
SHA256

9f36d98c5bffde9f43e65cbfc3f732e28e4620553f7d68edc75271cf6f5a7c55
SHA512

5374df264e0e31bfd83e938dd823589eb1a6f3026a07010564b214ab5a4b1a8b6a2a538ec55ea87f4b7a3c611ca54537e82d640585dda064b5cda36be0d9f3ee
SSDEEP

196608:t3Ek94dKz4GmBu4gYRoRcu4dFCrXFV14fQ25+b82zo7nQ0NlKBDoxliHhYx2za7g:tF4M0NBYYJKV4eWpNsLBY60wsBPuB

Score

6^/10

Malware Config

Signatures

Legitimate hosting services abused for malware hosting/C2 1 TTPs

Web Service
T1102

Requests dangerous framework permissions 26 IoCs

description	ioc
Required to be able to connect to paired Bluetooth devices.	android.permission.BLUETOOTH_CONNECT
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows an application to request installing packages.	android.permission.REQUEST_INSTALL_PACKAGES
Allows an app to create windows using the type LayoutParams.TYPE_APPLICATION_OVERLAY, shown on top of all other apps.	android.permission.SYSTEM_ALERT_WINDOW
Allows an app to access location in the background.	android.permission.ACCESS_BACKGROUND_LOCATION
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write the user's contacts data.	android.permission.WRITE_CONTACTS
Allows access to the list of accounts in the Accounts Service.	android.permission.GET_ACCOUNTS
Allows an app to access precise location.	android.permission.ACCESS_FINE_LOCATION
Allows an app to access approximate location.	android.permission.ACCESS_COARSE_LOCATION
Allows an application to record audio.	android.permission.RECORD_AUDIO
Allows read only access to phone state, including the current cellular network information, the status of any ongoing calls, and a list of any PhoneAccounts registered on the device.	android.permission.READ_PHONE_STATE
Allows an application to initiate a phone call without going through the Dialer user interface for the user to confirm the call.	android.permission.CALL_PHONE
Allows an application to read the user's call log.	android.permission.READ_CALL_LOG
Allows an application to write and read the user's call log data.	android.permission.WRITE_CALL_LOG
Allows an application to use SIP service.	android.permission.USE_SIP
Allows an application to see the number being dialed during an outgoing call with the option to redirect the call to a different number or abort the call altogether.	android.permission.PROCESS_OUTGOING_CALLS
Allows the app to answer an incoming phone call.	android.permission.ANSWER_PHONE_CALLS
Allows read access to the device's phone number(s).	android.permission.READ_PHONE_NUMBERS
Allows an application to receive SMS messages.	android.permission.RECEIVE_SMS
Allows an application to read SMS messages.	android.permission.READ_SMS
Allows an application to receive WAP push messages.	android.permission.RECEIVE_WAP_PUSH
Allows an application to monitor incoming MMS messages.	android.permission.RECEIVE_MMS
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE

biqfgu.mgycleom.bauokge
1⤵
PID:4619

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/biqfgu.mgycleom.bauokge/databases/androidx.work.workdb

Filesize
4KB

MD5
7e858c4054eb00fcddc653a04e5cd1c6

SHA1
2e056bf31a8d78df136f02a62afeeca77f4faccf

SHA256
9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

SHA512
d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

Download Submit
/data/user/0/biqfgu.mgycleom.bauokge/databases/androidx.work.workdb-journal

Filesize
512B

MD5
3a00a37189817c9ee3fdca05097e7fc8

SHA1
b44f7f23147a2b5cdbca3cdaff01d081c1341d9d

SHA256
ebab9964d24fe8e51f1e2d21defb86064f9802579dc6d1d415720f0b1315c18c

SHA512
6672626104435069443846edfb81a7b99f65b2c4b0fc44fe13ed89c9fa22d4e500e4af13baee6ec8d94a6b46354d686bf5bfcd925a66f17237da4f244b1fad52

Download Submit
/data/user/0/biqfgu.mgycleom.bauokge/databases/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/user/0/biqfgu.mgycleom.bauokge/databases/androidx.work.workdb-wal

Filesize
16KB

MD5
3701555440e724a05118062399bdee36

SHA1
07b12f123625f7c52eccb10ede2d298b7e10e324

SHA256
58f2233c36fd609f69799d0ed60d5d663290bd9d6ba2bca343ba6580261a0969

SHA512
1e688825b3f5ca5a31d374f309dfec7ae2cd84735848cd4c10ba68bda06025919e0ed5c995ef16ea570ebdbd4eee29f17ace3234dfd4ba225d888c2be89e243e

Download Submit
/data/user/0/biqfgu.mgycleom.bauokge/databases/androidx.work.workdb-wal

Filesize
88KB

MD5
0b6d04e5880d455b2b30a8bba8e60bbf

SHA1
98307b0990b5001a4817f8d9410615950015e41f

SHA256
dda94c1e57186f14ae3a3674c6e736a9da25b9bf804f73d90261879fd9dc34a1

SHA512
8b82e181bbf802b163268146e1f061bfe4a1c0ad229bb71b8d538f72532759e8f702cd1de0501bf704e55c19172b644397727c1d7639994e30a3a54d4e6f012c

Download Submit
/storage/emulated/0/Android/data/biqfgu.mgycleom.bauokge/files/apk/app1.apk

Filesize
415KB

MD5
262adefbc45f3c26a12576630661b7fa

SHA1
5fa75134ef7a928d8c640e49a263c23b3a6719d0

SHA256
4a3ca57536e19c2bee3a9456ac5c05e0ad3744216aebae65ee7f187961d89ba4

SHA512
85adf0b9f895c670ef336efcb8db050e00a1f98cbf9debffe7af04c26a02f32b6106540cb0645cf47f01157afbea1cd7348fe66a5bd720fb32764d18c170f56d

Download Submit