068b3407e9283ee45b14d8b796db55ff88ed7a680ce846a1fe438fd4457f4a86

Analysis

max time kernel
2838191s
max time network
139s
platform
android_x64
resource
android-x64-arm64-20231215-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
submitted
22/12/2023, 14:31

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

superuser.apk
Size

191KB
MD5

4ec9e96986478cb000f9d58f374f39f5
SHA1

7479e11f4df198c743bd430ef54f94999690c73b
SHA256

df3c4cbe2b41398bf8e1e807f5ca1b8a6ca2ebe3f1686f95bc36ea83bbea694e
SHA512

66014107235633919b12ec22437d95651b9f00ea6a0eee5e90ee957b6a4e12b05cecd6a217d4b92e206d8e38442a9e10a754c4275a50fcf19c984b41edaf32f9
SSDEEP

3072:ysF8CMXMGIIFzrdQ5023X9phSTt6rUKaJ/O4OroXB2Nda6B5Hpb2/:dFsXoIxrdQ502JUpNTOsxgBpc/

Score

8^/10

banker

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs

banker

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.noshufou.android.su

com.noshufou.android.su
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
PID:4518

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.noshufou.android.su/databases/permissions.sqlite

Filesize
12KB

MD5
171aedf968e17a2744d2585715606cb9

SHA1
bbeddeb3b89fcf809619c35b4a318a80e7d5b029

SHA256
d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e

SHA512
78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

Download Submit
/data/user/0/com.noshufou.android.su/databases/permissions.sqlite-journal

Filesize
512B

MD5
25d486d0030173af8e38f465a7bf9474

SHA1
ed7d61ac2baddaae7270d50d2a9490923ef6a3fc

SHA256
a4e442a771f592ed2e376bd3006a9c355e442eb72e8bf1645141df561243236c

SHA512
95c6c7b03b5829c4be438faa60af6b03db29d09605ff2d0529f328dd9f754917d4a8eb23cf9e759502dfab4e3237ba70e4a268e4a1f4b3bb717aeaa2562b306a

Download Submit
/data/user/0/com.noshufou.android.su/databases/permissions.sqlite-journal

Filesize
8KB

MD5
2ae07649bef32bd2b0c678918c1045ef

SHA1
416e478b71a104a89adb2afc2c5ee8d5b3243512

SHA256
66df7d21780cd9cc6816dac079a489a2d7bfdf8f85d57c0f6dfac3dc3022413d

SHA512
9fe1ec092886800f6a849bc865d476fea7f2394bc81100e9fa9aef3c5f2dfeecb0f1d12c6cc77a873c628c2c0598d5c2782e1b5a5b133999fba4b98b10c73be4

Download Submit
/data/user/0/com.noshufou.android.su/databases/permissions.sqlite-journal

Filesize
8KB

MD5
94d7678a933ed713c3087c6951e930f0

SHA1
d5fd1fca9bf746f673097e32296966f534e3d981

SHA256
961f2d58936e3e38a13c7576999ed45b625ddaa83daad1de930948278c31d307

SHA512
516b760e12eeb146048adc20bde60a22f6ae3be5aff6fc8e15e6676a19b18ef5bbf90a286ff572b6906e03c764760c0f264837c0e467b0117dbab4ee2712e495

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads