Analysis
-
max time kernel
2511891s -
max time network
152s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system -
submitted
20/12/2023, 11:03
Static task
static1
Behavioral task
behavioral1
Sample
a8267c2c6043a2a87926e2a151dd1904655329b678a9a441688dbd70f12fa703.apk
Behavioral task
behavioral2
Sample
a8267c2c6043a2a87926e2a151dd1904655329b678a9a441688dbd70f12fa703.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
bp.apk
Behavioral task
behavioral4
Sample
bp.apk
Resource
android-x64-20231215-en
General
-
Target
a8267c2c6043a2a87926e2a151dd1904655329b678a9a441688dbd70f12fa703.apk
-
Size
15.4MB
-
MD5
772f76ec52c53515500b28234058c943
-
SHA1
a13a4e22453985ab2f7c79050bbebe8c01c6e6eb
-
SHA256
a8267c2c6043a2a87926e2a151dd1904655329b678a9a441688dbd70f12fa703
-
SHA512
18a497607846e4a8a212c1873980f63752d2033ab13e7566b2d9139c4eef8282f04f0a7c43f3a8fd6ae60fd27c85d2844fe4158cf75935b5401eaac2ad8660b5
-
SSDEEP
393216:xuuGqN1KkgPSQrU1oy7V2nHpr/bboMboLz9wXwqwM82PIW:HGqNvgULJ2nJrYyo/UPwF2gW
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/data/com.equation.tool/mix.dex 4981 com.equation.tool /data/data/com.equation.tool/mix.dex 4981 com.equation.tool -
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.equation.tool
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
MD5163b0e3f017becbc89b9d7f330b78f09
SHA11ef9cd8ac8655190468d0ccece0a4738634ab0f9
SHA256cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36
SHA5126a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd
-
Filesize
512B
MD5382864e11b47c5efa4b44086121bec1a
SHA1401a0184d59ee0ac000fbc3914d633e0b04cdc33
SHA256df311163652a8df66e2f7bfd55be523352b1799e9f09724ab364c29608d19b9a
SHA5126929bd6a829251d5d7c23e70df9ccbc585ec378c665d3d736b107b118f68decfddefd9ea4674324ff313373bd1400456f8097744002da7b82113df09463f695f
-
Filesize
8KB
MD55c2b8e22fbe28c9885592ca45780e740
SHA1a09dbbe579f6038538f26fd654418f83c5334cac
SHA25634e187262fbb4b63d7a8777056dc243488b531187bc9bea1f72f25cc679ccf7b
SHA512aa8cf63cf59438652242c5934e045fb100a5c2a69d80b4697afdcdcd0370ab39c8b38812981228f5e1f53d2471f7c75228f0c37f1a6566f11fde4213db9e2c44
-
Filesize
292B
MD563f77f99bd2c2b772a479923bde11974
SHA1c7632e7d301e4463fafce85f84e9c3d7da3fdbbe
SHA2564c76a3af64cdd2f8713ffe2733dea50dbe714d0ca41c17d1847ee5b62a7ca615
SHA5123aae4a89d1ed51fdd911cb367eb10afe3c2264e4222085891b18a60d5412f85d10bf5c8f3c6642db70abb9aa42732bac5c42c42ee32d587100f53c21b5beb16c