Analysis
-
max time kernel
2864108s -
max time network
168s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
23-12-2023 12:02
Static task
static1
Behavioral task
behavioral1
Sample
0b918dd5111322fefce44faa241768ae5668195f2616611829b98d4b221d53a8.apk
Behavioral task
behavioral2
Sample
0b918dd5111322fefce44faa241768ae5668195f2616611829b98d4b221d53a8.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral3
Sample
__pasys_remote_feeds.apk
Behavioral task
behavioral4
Sample
__pasys_remote_feeds.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral5
Sample
__pasys_remote_feeds.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral6
Sample
gdtadv2.apk
Behavioral task
behavioral7
Sample
gdtadv2.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral8
Sample
gdtadv2.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
0b918dd5111322fefce44faa241768ae5668195f2616611829b98d4b221d53a8.apk
-
Size
13.7MB
-
MD5
2a99cdacab3732bd99cb48af4ac0a908
-
SHA1
93eb7c167e5193772165b9e1aa25a541c04807e4
-
SHA256
0b918dd5111322fefce44faa241768ae5668195f2616611829b98d4b221d53a8
-
SHA512
dde32ff636a428706a16ae1be9546248836945a5955fe435441fcd3b30b99c395b93025a734fbe7f3458f2334fd0d9b45a5dbb715dcba26982beb6fabf2920a7
-
SSDEEP
393216:GPZscWTWzY9oyQKBaBJ4zHxtXVXqwZnvb581WkI:G6TWzQoyx0BJ4zHxLlZnv+1WB
Malware Config
Signatures
-
Requests cell location 1 IoCs
Uses Android APIs to to get current cell location.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getCellLocation com.moji.mjweather -
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.moji.mjweather
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD5cfea54696f846f507761a90099cce97c
SHA17805993490d357422ca6fbb475441cb80585a5cb
SHA256ca14028937cf35a913018deb9d41e488f418263d02b2dc40e70bf3858f1e0695
SHA51238bfbe5d29de3e174afad25653014269fa556240d7ffa88b4d8aa10b2dbfa0bbfd46256524c61e317d855c0964253da687ad06399331989d8a150ff78f1e1abe
-
Filesize
8KB
MD5b2b87c6f69603ed476901280e26c1b94
SHA146e6afc77caac71977b6a3555f705c0af1ee7c2d
SHA256a6c37bff98b163701ff5ba06f8922a9353e28c21a58923d3c539f5e65e1b935e
SHA512cdec811ab2e30a00dfd4c57c5e90dbc2ac202063e20ab1555d6c3bc8a4723b45d5ea1038e4875e76008d3647fa4ff08850b4d1da9cf2c2696862fe3802261ba3
-
Filesize
512B
MD513dbc34095ddc726d72f38a0076368a6
SHA1083736017bef9e4db16feb05c8650b4445e69556
SHA256a8943239cb1212800930f30fe6ca6887045120a8fca4b38ab4c7233e211a1aa4
SHA51263837ec50aa8b2e6e640d18797ad1c1e35c8dfd7ad57413c1083fe9c70f61a7dd1b166cd9fdf412136b0a9cc9c2cd00449b91f7091354de0a756253fc0defd2c
-
Filesize
8KB
MD525314630ef9baf27ad49df1aeae0ea61
SHA17c58c65072e18d25ec4323fb28afb8a07ac24f37
SHA25670a235f5a95a9421284b53b1e0178bb49921d02a682cc390a354bde8f3a6bc05
SHA5121ea010d734a0b0bbfeeadc356870d2de577f158bf357f5b6a0e55d730e817da3865b93eaa09b516314ebe8f3206609a83696162581318d334cf56104d49d3834
-
Filesize
8KB
MD51dda0c49c537123dc5f805b72f1297f5
SHA19505e07412c7a45abed96b75e3a4e011f87089eb
SHA256045f82587b0fce89312a8eebc36d6fa69e8bd491d6d0248c1ef36c98dff0679e
SHA51241abc486aa09af5fae3177c9f98797c8ab75b925bdeef3c74ab79de8065acdb64839c03e53fc46bb2afa917f3c04e842ffb9ddcee444164c1b15f7a24a240953
-
Filesize
8KB
MD571a2a67ba5646b6f5c1958cb2365a1bd
SHA10a7e5ac882d018fa930f3255e6c16eec96fdab08
SHA256b01e81a629d0d3b14f3d8b6cdab97ebc4b10a92e89216165e415e1147cc724d3
SHA512022d6e5dacc87d784b7bd5fb4fddcf099eef5e7ceddeaff7546a6cdfe2b6aede531fb9c2a91a5c4dc717812b31f8b4b0ea03af81c487502f6e508100bb7b069d
-
Filesize
8KB
MD54a490135994382a0440edb347ec82d5c
SHA1419a0323562f80a26f9d05f4504302248aa8d697
SHA2568d46affdfde970196fa8569b4d8f6c8e03c5caa17c9fc6c8f7b06f5ccf22a2c4
SHA512a47a5efd0a8c7a51f782c7a4a4b83131568b4a7d2b0e1057f2e0d5fcea90793eea5112ca4e2c8d07b1e046d350c5b0b774a9c21feae38432e816155939b31b92
-
Filesize
8KB
MD5b0008cf5ccb029d13c42f6af7a92ccc1
SHA169afd91c9ad15ad65ffb3c51fbcdcc4f050a3314
SHA256fa83b7dd0a5d1e7290f1f900330fd61d0561c1dc0c22460ef290dc4674ca63eb
SHA512cf72825d83ad3d2661f8c84bf0b91b3057f5dd59d94a33b151b4391d728f66a84ac7d2a71343773042c665a65982429b2859c74216da402ec77311fdc893c0e8
-
Filesize
512B
MD5764928c6e59ed4c062146af83969b6e6
SHA16d1f7eef71116806445c22db2791da50241ed09b
SHA256d3422e20c9708b9b7b5c99bb74c34c41eb7e12d677f44e32784c37cbaafe1bc4
SHA5121b912b1719faf65bb2e43386886f974baf727b5e91f5847d05952869b30336c0b8a211d7fe5f1553e3d8ce33f1b18325924181023f5571b17b5b1b743843a8fb
-
Filesize
8KB
MD559ffc163bd539ee738d433e3129b334e
SHA1ad4637bd7df3ae1adf41be2b291d7d7566a64732
SHA2560028fbccbab43e45a066f585362eb25ddc336d08c172ccc1930ef5c632c01c0e
SHA512010b8bb4699675509f2f981640287828ddf53e4923413d33e7eaf794d3ab79d203654d65491c86c115c61a26cbf755ee329c21c0211461858af13fd99c0234d7
-
Filesize
8KB
MD5032bdb14897ad7b12b1f29cd3bd35d3e
SHA1a5dbda5b808da1b3e75ed52ba05a9ed0fde90580
SHA25657fe21068c7c542e50213628c0dd2868a6dc9a2ffb135b5dedea1b4eac489d27
SHA51298f6fc306f45fa4dad0c23e8533cda022f4dad9a681f259029a184d52e513087b85d24bee4108c576d6c99336045e8d7e47b9c47914e3bf4957d255339b326ab
-
Filesize
20KB
MD52e8e014b73d8de81cdc1173d0d37b975
SHA1752ce93b9293a4f8c2d03fbf7fc3942f44adec12
SHA256a74efbe6be4d11a2c2fc39f2130b2fa556f140365bb25878544c2548d38f0978
SHA5128c9af334238fff4597bf502d146482eb17b03be1aef57f50317038103cbebd150cf4b0a30af895277c24c8ba83db2e2b4678b7accfe970889e39ee8d53e6ddca
-
Filesize
512B
MD5750ba0b77189c0ea97c420604672b057
SHA148337c0004f716f5c81ae49c664db5b8c742865f
SHA256d25cdd77bdc800312ab0e3bcf3db79702a4234e7b1b895e0d2aabc942aeb65d9
SHA512c16a3bc9fb8181b0106966673a0d1b072ee666596f38ba883b127c8dd5ed430c067a66aa381ada5358ce446a2f42696968bbd616250c3bbad67c3a88573201d6
-
Filesize
8KB
MD5c345115709e4003aa58c5bbdb3bbf21f
SHA1722054171ddd1138150c833e3d62dbfbef8a298d
SHA256405daef1a69b0bd7a7eb8be731544617c4c0a244746595aa51089c505a67894d
SHA5123de716a60b9090e6bace3f1168709a41ea2c7e630dcfff865546d11264cdc8e15bcdc3577bb5b16ec33736347a7466843b1d0adeb5d906bfbda9a4956b58460e
-
Filesize
8KB
MD56b68a6c4ab2d5ffebe6d1c4aaff10976
SHA1479bc1eb48502d344a8f849f7083535a9236cdbf
SHA256fad91199235d595f513d53f6b794f7821f1ffce3e6762c6c1fc370bf576ed9ff
SHA5121517a167ba26b047d8ffbc3f1f32e1afcb430695e1792131d09b34ca289d00373974fda7b1413acf68cdde27a380858b89c89d1405a52b9d7902b5f878b2e643
-
Filesize
1.1MB
MD5de0421475e6b45167581c4fcfa7dc9f2
SHA1befa0359af3fad25b47edd2b253482d38c9046a8
SHA2562a5c86e66d1d051e4fdd37b3b2f354e7c3a01f1400704612cb631dd41373d7ab
SHA512ac1ea18b36928714376d1afd0ee549f71335b1f5f11e7446eea123f6674a77b23e26e63f11968559ce2428d4ce43a9be20e4cbb454c0e5baeb4a580c3083dd73
-
Filesize
1.0MB
MD54e0d7c399562be0211beb81615149545
SHA1ef4eb0c569e61cfe3d6280fd8efb0195c0167278
SHA2562fbbe001983a454e2f9e0d1dc2fd90b950e76235782fc11eece140e0816e7f5a
SHA512a6934d78c87bd50031a5b19c858a38a3e0e4922a1ea667973aa0b57384c5dbc68a72371ba8152b9989a55e1538d9ef841b0ff0c21e3aeb577d287c880ee44324
-
Filesize
3KB
MD52ca1ff090001cefa38f53f53f7f9933c
SHA1bbf7210b1c183aa1d60096663506b71ea13d3279
SHA256b7ab2488db903bffd883822f625866e994dd365ebc475675856ccae376b1695d
SHA512339545517927f4e8dc182e95df4457383a663824c014549b0f7c0f6a68ea3287bf38caae119a22fd721a933a2a8e0e7c20c03155631fa45b849a0b627698e2aa
-
Filesize
2KB
MD5b7db458605ca3a8f6151516b07f370b8
SHA13b7ec553b3a72362f36b17b360a2cbef7e421d86
SHA2560cd1de82c38b7ae7886da103ca3a30b5bb49bc84bfdca2d77bcba6a715e99ab9
SHA512ac27638b050af641b5428b11800ded88944cc1c3936771dad512c5ca18ed65df507d28469b10deb0d1eff53e51833fd6b766a84fb6a25820f83433ee9b292dc6
-
Filesize
291B
MD5e691df875bb0e6716603425749bd7953
SHA181099b703916f1b40151540ca038ae7524136f10
SHA256795f68838be5ec34c124ddd0f3421abf2d579b969d37e89d83ad6f95c80b883a
SHA5120b206e887d398ee541620d1d7d3fe411c8ef0b289ddf6d8cf67a979e6a760153a47b1d030e6c801b70bd29fb9ecebf34d39cc8d035ef8bb655c3cffea26f9bf7