Analysis

  • max time kernel
    2515715s
  • max time network
    153s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    20-12-2023 11:10

General

  • Target

    a8f6888a0db26552a4868a0c2115465a30faa2e9e47ba08e76f72f3385e5f715.apk

  • Size

    7.9MB

  • MD5

    9a495fa04e583dc9bc1f6700f3b4e8a2

  • SHA1

    4d975f23a558cc9ec39f79bb84d93d79841eaaac

  • SHA256

    a8f6888a0db26552a4868a0c2115465a30faa2e9e47ba08e76f72f3385e5f715

  • SHA512

    9a8590f82c2a0b8e190f74ac91f446ef3e6abe8e5c95957bf380cd71caf4a72c8f98a6a4ed8b119e0947a888767992e73b119c2d070de8f9523cefdb9c713d1c

  • SSDEEP

    196608:MLkE0ZvL3cLPrPwsQVjXmUsEA4EZg7oXtJbZzMqo:20ZvLsjrPwsQVjA6T7uCH

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Checks the presence of a debugger

Processes

  • com.camapps.otaku
    1⤵
    • Loads dropped Dex/Jar
    PID:4984
  • com.camapps.otaku:mcServiceProcess
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    PID:5228
  • com.camapps.otaku:mcServiceProcess
    1⤵
      PID:6120

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.camapps.otaku/cache/1582435991586.jar

      Filesize

      9KB

      MD5

      e8e0527a01aefdb89afd2c508f131da1

      SHA1

      f1103e6b260c657ceb3d95f1b023af3fda8b133a

      SHA256

      f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce

      SHA512

      fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

    • /data/data/com.camapps.otaku/files/STICKEEZ_assets/stickeez.html

      Filesize

      1KB

      MD5

      580c962f3b3a323da96457a61bf2cb62

      SHA1

      4a3253ff6bd7ee5f0f1e0696766bd2334457ec2d

      SHA256

      03f3d9912da1f21fb718598a1ae6135ac68a90928c219118abb60e20fd71010b

      SHA512

      1a376e5334cea5a89543b46e091e2d738e8591dc2799da0a91633b1faf8aa170a00be2e770404cc550693201cad2fe6182027858a61cf458216130fdd89691ee

    • /data/data/com.camapps.otaku/files/log_stack.dat

      Filesize

      1KB

      MD5

      6998af3a5415057e74bbdd204a9afadf

      SHA1

      01a2c0a984604ceb0c13db0f1185a5c18093bcca

      SHA256

      faab1a2a603a38beaafdecef70d04f2d28bdb1f9bfcd69f47c78e4b1f0b0bad3

      SHA512

      adc0f54213019e2a8f8fe3e40051f63ec6e1cf55d793ba66468c8ac6f93e8c74f54eea0fd22ef75bc52699b87ecc7c1c604e2f56cf985b0a9bc6305b2c18ff1b

    • /data/data/com.camapps.otaku/files/log_stack.dat

      Filesize

      1KB

      MD5

      29674ba120bdd620c99a935d6a4aa4f6

      SHA1

      36899f6a8cc089698b3cd3517c84100e6d362a74

      SHA256

      370abc56e2c0392da4d2ef9780015bcaf50cb4b124a473a6856964ff01c370ea

      SHA512

      3ccb211ad972241d35153df0433834be0a60be11a8ea26b4e587aa906ed93e650e92f59bafb10c1c1da54e112c8fc30349424efb7d78f494256c8d30aa2655f1

    • /data/data/com.camapps.otaku/files/log_stack.dat

      Filesize

      9KB

      MD5

      c7f994536a0093497a4fb9f357819f34

      SHA1

      c7c94cd6d7cd2c710b17dd72251c60b507dca960

      SHA256

      abace4c4cf61b0f2c9c55a3b943b8f69bc1f0a9b8fba3d47eab2e224d1827f56

      SHA512

      0d959ede8e46355fe003bf59b714807e2479097259953eb0ed78344dd907b70bd3e898c1ceb55866da5c158bf0ec8bfc41ed64d90397681a25ece9d969b6e506

    • /data/data/com.camapps.otaku/files/log_stack.dat

      Filesize

      9KB

      MD5

      17ff815d670df4404594aa60bd357a67

      SHA1

      d2cd64350ebe410a6dabecf64d1c1996c989c62b

      SHA256

      f0c9b95c93313108f1936d06abc967ebee03081d107309ef5ce18a568599dbac

      SHA512

      ebd9a3698a7b647264b726b1b310f886addc2acc94ea3aa2698d9915f35ba96265f5b3f72c11bcaa6fe8427ffa774dae5cca2598447259eaf82feec0ad59bd76

    • /data/data/com.camapps.otaku/files/offerwall/offerWall.html

      Filesize

      1KB

      MD5

      d87955ece7bc2ff5c62ea15414e318fb

      SHA1

      8069c199721fd2c609b66b57dbf0d860cc4dbb7a

      SHA256

      a384876aa7b55e455405e606906312102b7413548c1dc2345fc23fc86473ffa5

      SHA512

      596d7fd0b046f89419a7ed4fbb00bb49ffa5c9523314dc30587878a5e68c6804f83ac92fbb462367cd4d641d87e075850668173f151b8f56104dc3290b79afe4

    • /data/data/com.camapps.otaku/files/preloader/preloader_0001.png

      Filesize

      3KB

      MD5

      a5a1805829e553cad9be7846533b91af

      SHA1

      647e147cb8affa2e45d18b45f88849ae7f3b7366

      SHA256

      6cef1b0ae2d52b305cdf5d096a66ace4766724e791c455844c91fe698db691c2

      SHA512

      165e89f37a32022cbddc64f733fe8f60c6927bfbf3ec5e9df0a09dca604f88319d9b4599f60f5081ee5932b3914f16d7dcfadc3a75848241d5271cb3a7ecbad3

    • /data/data/com.camapps.otaku/files/preloader/preloader_0002.png

      Filesize

      3KB

      MD5

      c675fd30143320d065c7a3073bd0e3d8

      SHA1

      e66c61f00d23061416af7fec1734fa8ffadc12ff

      SHA256

      723097be9a56bf0fdf4375a22168f8cd1679776f5516bce2c8e4e66e65b60175

      SHA512

      04a64c092166ed18822886d6e1f324f5306bde6071479df59d110ea83e63e3f97c312a58ddec1ca84dc7d06389905bd9dc2f681da7e6782b7152b1ccdc2df447

    • /data/data/com.camapps.otaku/files/preloader/preloader_0003.png

      Filesize

      3KB

      MD5

      cc8439891ff1227bc2691ffd484a19aa

      SHA1

      5bd09ccbb982efb86d10cd78081c1976c1c1214d

      SHA256

      e0ad3f35ad332383b6999d26c4a4e5ec500ede57b1df0685d58800e461632f26

      SHA512

      2039a19e38c79790761d465feb688f7a7a104ed24b7ccc7f039336538bdd921a37e62d04b90e632fe772d1afadd183cad855e5018aea151d56e09a48ef972ad2

    • /data/data/com.camapps.otaku/files/preloader/preloader_0004.png

      Filesize

      3KB

      MD5

      a1d05df0b026011a40b2ae85282b7ad0

      SHA1

      7b225fbe5c02db93165c1876465e8074d1bfa81b

      SHA256

      4c9aa21e2c287bf2ebd56b4c73b7011b2dcc2164c2a3091b68bf52c2c6da4fcf

      SHA512

      17f87a5d542221c6d1af0382fb80c3b8480468a16e8131ca852bb9855a65d6750b26c11b7685b3a35a844203df4e9380eaf2325e75ae9c1badcd06b8faae8140

    • /data/data/com.camapps.otaku/files/preloader/preloader_0005.png

      Filesize

      3KB

      MD5

      e71761502dad346755d9e12923acab4e

      SHA1

      cd3aae137c9b381e4f0617cbede0126f236350a4

      SHA256

      d4eaa7e311aa5706bb0f0d43fcfa5593aa0035753439a0704258c4c66028f89e

      SHA512

      f474e403d8c6b45b5d642af2bbe58d7ccebd308171f9f9a93c3459e32bfa56bcd5116c8349d4dd1447e968f0899a05acff9feda4af0e932e9283f47e51c8b453

    • /data/data/com.camapps.otaku/files/preloader/preloader_0006.png

      Filesize

      3KB

      MD5

      d7e606100f3d0e7a688da2f698c568bb

      SHA1

      52f585bc7b048aa418f36e82b0f2dd9163e92e17

      SHA256

      47acf0c528abd5dca1bd899aa41b99f6bbee469e204074cba259657d9a589378

      SHA512

      2a57e31f8c044db85f27cc7b159d8e827ce026b074c1814b4b9f82685a330223e6abf8f956be36360dcfec20c08c22d841db66384fbd3bfbc0cdc86dd50a8e7b

    • /data/data/com.camapps.otaku/files/preloader/preloader_0007.png

      Filesize

      3KB

      MD5

      84f0ccc36af5714961e14b77374d1f15

      SHA1

      3a7f8163501d560f1a88324f5c8dfa2b14b3a40a

      SHA256

      0237e32468aa870098878f124cbab5d365310ee9fbd2c074cf8e31859272beb9

      SHA512

      4a8b6439ead11f73c285b0ed123cb5e20ab1f772dd57e7cbaf5ea12cd08221d9f6e2036e5d1515abf0b095fba79c2d26d7aa0b5f5dba890cd484f1c3cda9eba4

    • /data/data/com.camapps.otaku/files/preloader/preloader_0008.png

      Filesize

      3KB

      MD5

      b7da3a818e98bdd9c5651c9858a7a3c6

      SHA1

      6a9d4cbfaa263c74b5827d9b2c7960519cb07eb5

      SHA256

      5137e718727890e7572e63868435f34538aa0fb9c735540cb0223c39fa08305f

      SHA512

      fabda0a518758c4a2f6fb2e74b13abf0e4b26492fd6e9261791d7572237ef21ba8cf37830ed83286a7a50fd2005d42f43097a7c9c872da06e4f32749401a3dc7

    • /data/data/com.camapps.otaku/files/preloader/preloader_0009.png

      Filesize

      3KB

      MD5

      ded007117da35843c1a3282963068c24

      SHA1

      c0dcded1f4030216d62d5d1afb849b6d0212952e

      SHA256

      4f125fa2b62a10c2b78fce29861f3c8f52400092d5baa929d1e70a3a762cf6c9

      SHA512

      a1d4987d40f28631a70a455540907438682e68b14a05495744df2e75b9eb17b192a122937108f500269dd4f37a478409becad3b4b06ff6e2a8948e9d7bab825f

    • /data/data/com.camapps.otaku/files/preloader/preloader_0010.png

      Filesize

      3KB

      MD5

      8eab6bfb9c95a44f08b1b2f80188a870

      SHA1

      c7cd5ba7280390d4b3872c1658c80462f05bc478

      SHA256

      d9f2c8bb2ffe191f2ed7740d45a6c6cdc92a82a7da51ba3d3f798e778cd0dfbc

      SHA512

      796d8f6c7fa5602e43022c6a9e69959bdfa1f92c5aef75631742938630f8be294d1ceb5c19bf89332e4f38f04627c9c299e0f0722ce25ac90224d7828ef9785d

    • /data/data/com.camapps.otaku/files/preloader/preloader_0011.png

      Filesize

      3KB

      MD5

      66e07e1574af0312354bbb410ce1ecaf

      SHA1

      7f37bf34f6a9364dec2278e4432a4434596a3ab5

      SHA256

      ca37435682330a7cfe9562f7419f6a353191a613750657d18cf7f65b19ffb039

      SHA512

      5e596ba8b7b7872270a98c04728f19f1175c75257ea4f66005b57602f74fee8710cfef1608ab921e75b7e6e236230ff7a6be6c15fdc9954fec31c307f2d59ea8

    • /data/data/com.camapps.otaku/files/preloader/preloader_0012.png

      Filesize

      3KB

      MD5

      ba2e26488d6b8ac46c84e48d61f04bab

      SHA1

      8a4f36e18a40fc4e8310f66b16b97c1c13009add

      SHA256

      094c72476e0752e1eb4c36b03a757669827d40d449dcc0f2c90aeb573b4dfe32

      SHA512

      e325dbeb4878d069e998b022e9a18ce7b08218699b9d26c1929c3a23bddf401fa47e7deb085b6b0e84631fbddcfb36e9d40812cb75e8c29f9231b8805c14ddf1

    • /data/user/0/com.camapps.otaku/cache/1582435991586.jar

      Filesize

      20KB

      MD5

      fde2ee00cbd121cfab5290b078aa3ceb

      SHA1

      e2b77d5320e155e413d040a8c20020962065b2f8

      SHA256

      2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685

      SHA512

      a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56