Overview

overview

8

Static

static

6

a83b892e4c...26.apk

 

a83b892e4c...26.apk

android-10-x64

8

a83b892e4c...26.apk

android-11-x64

8

bdxadsdk.apk

 

bdxadsdk.apk

android-10-x64

bdxadsdk.apk

android-11-x64

gdtadv2.apk

 

gdtadv2.apk

android-10-x64

gdtadv2.apk

android-11-x64

Analysis

  • max time kernel
    2495724s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20/12/2023, 11:05

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    a83b892e4cbe750cdc72315043578c9dab444083a16fe6f73c95f898b6307426.apk
  • Size 2.3MB
  • Sample231220-m65saacdel
  • SHA256 a83b892e4cbe750cdc72315043578c9dab444083a16fe6f73c95f898b6307426
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10

Malware Config

Signatures

  • Requests cell location 2 IoCs

    Uses Android APIs to to get current cell location.

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.zeek.notstop
    1⤵
    • Requests cell location
    • Loads dropped Dex/Jar
    PID:4581

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        __xadsdk__remote__final__builtin__.jar
        • Path /data/user/0/com.zeek.notstop/app_baidu_ad_sdk/__xadsdk__remote__final__builtin__.jar
        • Size 84KB
        • SHA256 40289ee4823f569e311598cfdc814028e15723f9dfbe86483cc6c0e36336f494
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        __xadsdk__remote__final__builtin__.jar
        • Path /data/user/0/com.zeek.notstop/app_baidu_ad_sdk/__xadsdk__remote__final__builtin__.jar
        • Size 207KB
        • SHA256 1282df6e431b6027980f9460320b72779c6bcd19a28886cdb5fb77ea5e434da6
        • MD5 SHA1 SHA512 SSDEEP
        Download

        __xadsdk__remote__final__builtin__.jar.cur.prof
        • Path /data/user/0/com.zeek.notstop/app_baidu_ad_sdk/oat/__xadsdk__remote__final__builtin__.jar.cur.prof
        • Size 218B
        • SHA256 30f2703859f6843879ba21e68a0e72581a5f45fc6c97dffb5e1ec87e7931510e
        • MD5 SHA1 SHA512
        Submit Download

        um_cache_1703302697876.env
        • Path /data/user/0/com.zeek.notstop/files/.um/um_cache_1703302697876.env
        • Size 640B
        • SHA256 0322b906848f47b7df5114710223cad7f5e09f66c4b2a70ab9307287e9f37f40
        • MD5 SHA1 SHA512
        Submit Download

        exchangeIdentity.json
        • Path /data/user/0/com.zeek.notstop/files/.umeng/exchangeIdentity.json
        • Size 162B
        • SHA256 5a304a8c9d9fc7ce94f02628e2216ca0dbe088159103dac2a4e9ee4a4a67dc3c
        • MD5 SHA1 SHA512
        Submit Download

        umeng_it.cache
        • Path /data/user/0/com.zeek.notstop/files/umeng_it.cache
        • Size 352B
        • SHA256 ff54d9588611e2b927bac74144cbad77c1f2820fbd810096932f43ed1c200f32
        • MD5 SHA1 SHA512
        Submit Download