Analysis
-
max time kernel
2863508s -
max time network
169s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
23-12-2023 12:03
Static task
static1
Behavioral task
behavioral1
Sample
0b9fb4c71e86ff39866e9e550a87c6a58bc6c1619e00d80ce713e6a14ba7bc5b.apk
Behavioral task
behavioral2
Sample
0b9fb4c71e86ff39866e9e550a87c6a58bc6c1619e00d80ce713e6a14ba7bc5b.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
0b9fb4c71e86ff39866e9e550a87c6a58bc6c1619e00d80ce713e6a14ba7bc5b.apk
-
Size
14.8MB
-
MD5
07998b2c68cce10d8ee286295e6996a4
-
SHA1
93cb0eeaedc33761836aad4ef6d27ef613587682
-
SHA256
0b9fb4c71e86ff39866e9e550a87c6a58bc6c1619e00d80ce713e6a14ba7bc5b
-
SHA512
408d3bc552ae4969c43eaa788b867c6d9f4b2faf5d5c8b118cffebbf3a5d2f1e46b0ce09607e3fad5b3f41d536163b6c5b0286fb0fa4e240944ac491d526ab55
-
SSDEEP
393216:DVE8P3DSYTIHH9f+yNNe4XCQlAd7ElukRkhdY4IVJIx/C:DVE8P3pcn9mo+XyuOxVo/C
Malware Config
Signatures
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data) 4 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal io.rong.push Framework API call javax.crypto.Cipher.doFinal com.jmheart.mechanicsbao:ipc Framework API call javax.crypto.Cipher.doFinal com.jmheart.mechanicsbao Framework API call javax.crypto.Cipher.doFinal com.jmheart.mechanicsbao:ipc
Processes
-
com.jmheart.mechanicsbao1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4633
-
com.jmheart.mechanicsbao:ipc1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4683
-
io.rong.push1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4718
-
com.jmheart.mechanicsbao:ipc1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4781
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
109B
MD52a7b39ed7515a29f1c9f52ae43b8b63c
SHA1efdc2938c11652969c278022b743c09bc647410e
SHA2562b2ebebce44e5febbad603c202370d185b30b5d4ae23f8a975edb0e6b48897de
SHA51275cf9a04900a90cdae268ca1b08dabfd33c230a7a1637335b0f972ffe140c1c00ecfacf1312debb9d457685f0fae77b06bf8c8d499330620b53f3f2d22b9e0b9
-
Filesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56