Analysis
-
max time kernel
2618682s -
max time network
168s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
23/12/2023, 15:58
Static task
static1
Behavioral task
behavioral1
Sample
441386ea1850687793bcb73e1959fdb84aa833b160b27b89b89299940eb5158c.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
441386ea1850687793bcb73e1959fdb84aa833b160b27b89b89299940eb5158c.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
441386ea1850687793bcb73e1959fdb84aa833b160b27b89b89299940eb5158c.apk
-
Size
19.5MB
-
MD5
003686e6288adef6c2da53c1c958f104
-
SHA1
0205edec1a7489e070995b589a776d9eeb5fa880
-
SHA256
441386ea1850687793bcb73e1959fdb84aa833b160b27b89b89299940eb5158c
-
SHA512
9e72720b71bf546e41e391778273dcee901cf59780115125c32e0ad5a1628f5a2e7826ee964da366e22ec4ce95bac5c2b70ad57e0bfdbf9a65042e676f5b9e8a
-
SSDEEP
393216:Tf1rBreoCHpbhKy5aKyUxQPjSM8rgnpJ58h+FJhu+oqNhZ7v+e:Tf1lPCtBBNUj588Pu+oyV
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/uni.UNI1EA829D/[email protected] 4468 uni.UNI1EA829D -
Queries the unique device ID (IMEI, MEID, IMSI)
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal uni.UNI1EA829D
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
6KB
MD59bb067cd33b490d30f2c88054c732574
SHA1d95a11e2be5c7a1fab9820e34cdd9e482523ea86
SHA256fb993dc086feddf19af9700c7428386e3e4a5c67f273711c371ff4460a830ae9
SHA5120b721c51332313c50ae466fff1b4bdb48a71791bca67ee83d2882a19e8abb59dc1406ed15d6dabbcd3ba922167fbf68a3828fd82edf4b2270ff0191b8fed0dbc
-
Filesize
18B
MD5a316948d27559f045d76a2222684c3f7
SHA1972435cdd483e7b0a10c3906d0dbe7a97f9e85e4
SHA256938fddf22f376f80b578dd40fa1f1bb0be401178f3ad3792a94d8c194068b264
SHA512b3819370329e8825b9d09920f37137e6a0dcfd6bb7c9cfad5d701c54bd94fa2b4cdcf2becda44007b0ff80d9ed19916144b5b9cc1bc9827cf5b7e1cde9c7a882
-
Filesize
63KB
MD5ed73a80eb949bacc52428b8d5a087fa5
SHA107e973549a2cee61ffeeb6439abc419cd8a489a9
SHA256f0ead1ad60e0cc310c1a40685c28fc7a69aa346604552816c51dd3c1718a1e76
SHA5124bc26c18ca3a2edfe38ca1e14ad1e1415268b4a69cdff3c0f8e2b8fa910c67c2e4bc4f32c21274e586e8e139122ea3dbde7ec507c4722b4a9a778ee2598090b8
-
Filesize
63KB
MD55061e4948844f7d366972ac8005e9f13
SHA1a2b79a1c79afb095ddebf0f16a1f9db64482bcaf
SHA2563aa6caecfcd101531539147e01382bc530b4fdc61e98937d63cc4648793c6a45
SHA512223d18ce248912df18cdea3c8e864ea5e6ec058ca42cc5fde738188c54abcd260d7f24ac53d4987d3e32f4ae3e1e40e01354054d035bb100eef51b2d695f5299
-
/data/user/0/uni.UNI1EA829D/cache/image_manager_disk_cache/7de6294e1e84ef5677c0ad3df94fbe66144497a7e61aec9aca3a495380e03686.0.tmp
Filesize480B
MD56ea1cf6ed708024327e098d92df5553c
SHA161b75ec027edb89ffe0540d3db52c238a40e48dd
SHA2563e7506f860cb0d14c5f6ce7a91b697707f493540eb5a58894412cbfa73d1e364
SHA51248d2479a448fc8aa5a41cc490e49da16e30a4efd69b1a9e525e3d766b92b21a59a1072c75fcc010063057b934e0cc16c8cdf773cc5b298cb5bbe72b3e6f3d128
-
/data/user/0/uni.UNI1EA829D/cache/image_manager_disk_cache/b6c690765244bd550e6439121d7f3b59476182331c5e285c25bfa1f7252aaeaa.0.tmp
Filesize749B
MD5e5f65355d8c4373ef3a96c22aeb56e0e
SHA1fc7fbc5f44cbc357a880ba18e2113f7c8df2a2aa
SHA256a3e67de7c3a251bb5075fb720271672ce90cde9de5670d761902c936fba348b0
SHA512b2a88f075ef5c7bad91dc7432fcf7bd416883b363c580d53ad7d50311c37f0f9f3c51b59c7cd250bc783b7404a8a02008cc103fcf1cf1ff8fd1f19819c3f690b
-
/data/user/0/uni.UNI1EA829D/cache/image_manager_disk_cache/b927abdfbc1418234e9f438d5564a4791a6e97093d22c7e22b5973761ded025a.0.tmp
Filesize577B
MD50ee1be3d1a38784bc60b65f8e62a0fba
SHA1f5edc344a62b397f21bb1c470042e161079ea38f
SHA256c39b6bb043f9dba6bae0b82d63106e2a803ebc43df0f7f09819387762406f6a9
SHA512aa1b2e82434696ecec91ee9edf9158f960824391dd11a4cfb13e7d3aad0514721c2ab28f667a47e3889f0178b60a837dd984fc1e239f9727ee0361bbafcec0e0
-
/data/user/0/uni.UNI1EA829D/cache/image_manager_disk_cache/e1cf2e6779d9e9601595f66bf5b0af962db9ae8e5d161887a9f88970cbd4810e.0.tmp
Filesize542B
MD5f3380737667c1620a1a66a88f6318f80
SHA183f500257ff6e7d711681c0b95ac15353ac2960d
SHA256bdd944ec5078587da843111c66427611522b9cc41b53593926cbdcaaea767dec
SHA512e357f8b7160d31851364b82bc2570aa26bff94590c095336c03563d49f334d793092b2b55b80cd584b51c788d4b99ab7903782d0bdef2bb7cc11290ba4c45fc0
-
Filesize
615B
MD5e2ac3bcda2eb302de96e39fa8fe35905
SHA10e4e7106c07fb26f0db266404fc0c13bbe799de5
SHA25609f7cf3112202d1db2daf86c7ccacd1c07e46dbd514ae1eaa8d08dc3040b93ac
SHA5127c76d0810385171ec4cf143698f6f8f856a3d41ea34cf58a3df5f229a4c368fc443ab9f4b2af55bb4051f991eb8194658d881bbef0f382f2bd14aed95e92015f
-
Filesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
Filesize
32B
MD5a44c9fd52a11c500f4ea60e94db5718d
SHA1278eb3b062c77654767cdd37712dc36ef922f0da
SHA25634fe1ceb841d0d5bf7ca63f300c12a820323be21c23b115bfc46f085a8b2016b
SHA5123a559bad204a5e0f789a8bcf78e5da6a2a9bfed1035bde81a05860e62c2838e3c637c52350dc8b20eaff68196c5f52bdbd6c3cc2a953bb4c3864147ea6a134de
-
Filesize
35B
MD5762298b93820a5cd8b6d8ec469078f7f
SHA1d5b02a2ff3b235cd2b61ceff53a1d88b8984477d
SHA256dc3f98a33c26c2796dc294b354831fd5ca9796295f4cb38479c80b145d4807db
SHA51270f864211ce16679d0538abf9b7071d27c2d22ae458e32409d20065032c762dd186307ef33ede90abd9ac794a4ced8b163404e9799c05f0c515337249684311e
-
Filesize
380B
MD5cabf016b3012f48592f47c9261f3878e
SHA1cf6bd2dc00b83b3a15a662325b9d8e805b49dec9
SHA256ac9d7cf1576bb953581ab3da8abb4648a31b009823d4d01ed2a520f3c01e6cea
SHA5120c3249bea522262a65b871071a7874f441a61cff820cc3771ebe8ecabccef02364572cff6208854886230af1eabbfe717511419b660006ad55ec3d33af108909
-
Filesize
5B
MD5c06857e9ea338f3f3a24bb78f8fbdf6f
SHA1c5a0a2529d2deb60fec041b4fbd722a2ebe31702
SHA256957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
SHA51229f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1
-
Filesize
1B
MD593b885adfe0da089cdf634904fd59f71
SHA15ba93c9db0cff93f52b521d7420e43f6eda2784f
SHA2566e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d
SHA512b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee
-
Filesize
1B
MD555a54008ad1ba589aa210d2629c1df41
SHA1bf8b4530d8d246dd74ac53a13471bba17941dff7
SHA2564bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
SHA5127b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339
-
Filesize
862KB
MD5052000a2f4357ce6c8f2d98f1a6a571c
SHA1abaca13dbd59f66d2c73d79add11983bb577872e
SHA256d9c815b54019d84f4be94618cea7196e60eac9b651f10ee032a5d2532fd78bcb
SHA5122687d96ef4c88a36ce6a2f49c7b333deacafc6e6c2cb2157555598655d65dfcb2ebd78477a87d4e21f6ae1045b647607dd207ceef297c89e6ec498ef76e95593