Analysis

  • max time kernel
    2511891s
  • max time network
    152s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    20/12/2023, 11:03

General

  • Target

    a8267c2c6043a2a87926e2a151dd1904655329b678a9a441688dbd70f12fa703.apk

  • Size

    15.4MB

  • MD5

    772f76ec52c53515500b28234058c943

  • SHA1

    a13a4e22453985ab2f7c79050bbebe8c01c6e6eb

  • SHA256

    a8267c2c6043a2a87926e2a151dd1904655329b678a9a441688dbd70f12fa703

  • SHA512

    18a497607846e4a8a212c1873980f63752d2033ab13e7566b2d9139c4eef8282f04f0a7c43f3a8fd6ae60fd27c85d2844fe4158cf75935b5401eaac2ad8660b5

  • SSDEEP

    393216:xuuGqN1KkgPSQrU1oy7V2nHpr/bboMboLz9wXwqwM82PIW:HGqNvgULJ2nJrYyo/UPwF2gW

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.equation.tool
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4981

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.equation.tool/databases/bugly_db_legu

    Filesize

    12KB

    MD5

    163b0e3f017becbc89b9d7f330b78f09

    SHA1

    1ef9cd8ac8655190468d0ccece0a4738634ab0f9

    SHA256

    cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36

    SHA512

    6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd

  • /data/data/com.equation.tool/databases/bugly_db_legu-journal

    Filesize

    512B

    MD5

    382864e11b47c5efa4b44086121bec1a

    SHA1

    401a0184d59ee0ac000fbc3914d633e0b04cdc33

    SHA256

    df311163652a8df66e2f7bfd55be523352b1799e9f09724ab364c29608d19b9a

    SHA512

    6929bd6a829251d5d7c23e70df9ccbc585ec378c665d3d736b107b118f68decfddefd9ea4674324ff313373bd1400456f8097744002da7b82113df09463f695f

  • /data/data/com.equation.tool/databases/bugly_db_legu-journal

    Filesize

    8KB

    MD5

    5c2b8e22fbe28c9885592ca45780e740

    SHA1

    a09dbbe579f6038538f26fd654418f83c5334cac

    SHA256

    34e187262fbb4b63d7a8777056dc243488b531187bc9bea1f72f25cc679ccf7b

    SHA512

    aa8cf63cf59438652242c5934e045fb100a5c2a69d80b4697afdcdcd0370ab39c8b38812981228f5e1f53d2471f7c75228f0c37f1a6566f11fde4213db9e2c44

  • /data/data/com.equation.tool/mix.dex

    Filesize

    292B

    MD5

    63f77f99bd2c2b772a479923bde11974

    SHA1

    c7632e7d301e4463fafce85f84e9c3d7da3fdbbe

    SHA256

    4c76a3af64cdd2f8713ffe2733dea50dbe714d0ca41c17d1847ee5b62a7ca615

    SHA512

    3aae4a89d1ed51fdd911cb367eb10afe3c2264e4222085891b18a60d5412f85d10bf5c8f3c6642db70abb9aa42732bac5c42c42ee32d587100f53c21b5beb16c