068b3407e9283ee45b14d8b796db55ff88ed7a680ce846a1fe438fd4457f4a86

Analysis

max time kernel
2838181s
max time network
156s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
22/12/2023, 14:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

superuser.apk
Size

191KB
MD5

4ec9e96986478cb000f9d58f374f39f5
SHA1

7479e11f4df198c743bd430ef54f94999690c73b
SHA256

df3c4cbe2b41398bf8e1e807f5ca1b8a6ca2ebe3f1686f95bc36ea83bbea694e
SHA512

66014107235633919b12ec22437d95651b9f00ea6a0eee5e90ee957b6a4e12b05cecd6a217d4b92e206d8e38442a9e10a754c4275a50fcf19c984b41edaf32f9
SSDEEP

3072:ysF8CMXMGIIFzrdQ5023X9phSTt6rUKaJ/O4OroXB2Nda6B5Hpb2/:dFsXoIxrdQ502JUpNTOsxgBpc/

Score

8^/10

banker

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs

banker

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.noshufou.android.su

com.noshufou.android.su
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
PID:5000

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.noshufou.android.su/databases/permissions.sqlite

Filesize
28KB

MD5
b76c7e22ca08d6589ebd9ad2dcd8d3f3

SHA1
87471ba9dac69fb708484eafb8e45b2855e9991e

SHA256
37c2402d34065272e90b233fe4d7b74d31593cb8d6e4d624d50c68fa156b875d

SHA512
e1af1a801dfeb43d0b13745117518acd55f3ebb7f20704fbfbdac1b51acb2a45d770990694b713571aba09dbc2e9d3445d8de86ca4399e28977dea0af6f134ef

Download Submit
/data/data/com.noshufou.android.su/databases/permissions.sqlite-journal

Filesize
512B

MD5
97d0adab9292ff75892eeb5e20839875

SHA1
82773fb915e4340e922bfa46cc5c86958f7d1391

SHA256
f9efc39facca2934ab5dc754eb223e47df8401e2df804618115400c29c51e720

SHA512
33a4e1a258d83c18bfbe817aab89c71122ea767627ffbd630956fee1b0bfa2a71c2ce770b99c399fadccaaea6ada7e4b3436ea9ffb07d7d9546a61e500604c2f

Download Submit
/data/data/com.noshufou.android.su/databases/permissions.sqlite-journal

Filesize
8KB

MD5
4e05d451c790f620a40f65ffb3156764

SHA1
96f7c45ff42f40a3b38047aa032d7e951f3d40ba

SHA256
bd2a2cc3d9f169a38179cec73a9a29f4c66545d8f58f9a82b1762abe96c2bb9d

SHA512
2cf8c0fb4528844c27fb5fb0ecb3997e2736b7172d1ce715a551cd200fd102ca6473d8aad5827018e7cf6cc1dd706fafde91c79c303e26e5998a82225a4f6cc6

Download Submit
/data/data/com.noshufou.android.su/databases/permissions.sqlite-journal

Filesize
8KB

MD5
95e9174f9175f0677b4c12bc6f801f97

SHA1
2048e6d042c089778ff986bddeb634c4fc74e31f

SHA256
160b9476b98716b12eb814185bfaa0e0f639cb397b7ac62cf79fb2f57b9be229

SHA512
7c1a31d1471ff907bb968b87e58575710592b4ef08f33e01a6df60b5309769b3dfd540fdd97fc9d0341c5d207fb046028f0d981588cb4389015255bdea80fffc

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads