Analysis

  • max time kernel
    2553240s
  • max time network
    165s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    23/12/2023, 16:46

General

  • Target

    4ebe863a075c18ac2e586afc6b358b641d88b58785fce6a46f63bac415da4a36.apk

  • Size

    1.5MB

  • MD5

    0ff1812e39164d59ad6aac76370b76da

  • SHA1

    2a988f53e14ed58240f15aaf61465ac5e282a38b

  • SHA256

    4ebe863a075c18ac2e586afc6b358b641d88b58785fce6a46f63bac415da4a36

  • SHA512

    a19650f2e7bfc0b16bf98c8321ebd5cbf70c96ff0a75a74448b573a616596bda91e0a3be5eb1da136effab8e7dd60e0c41f3f4a614fb8696f8b93c0dcd7aa684

  • SSDEEP

    49152:nsggVZtG4UQDd0WQrqnJcUUutrgxbXpFRC3Iac8R:LgktQDyWQrqnJkutkBXZCDT

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • igudi.com.gdmusic
    1⤵
    • Loads dropped Dex/Jar
    PID:4994

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/igudi.com.gdmusic/files/__pasys_remote_banner.tmp.jar

    Filesize

    108KB

    MD5

    63ba17ca047dc71aa659c7ed8bb60de5

    SHA1

    675bd0556bce8d43cd29a6d9b3d996d41f3e0b2b

    SHA256

    2750f3af62f5b9d1d21f6a8215f529e472e7098ac16295b976a29115e8520a52

    SHA512

    5b70f6bc391276d2034a97e371adad0a635caafdfc33d32791db1432d4cca3f0364e1af6b10b574df5c8f3345bd5539a4d70455aa521f10b239e68216f5ddc39

  • /data/data/igudi.com.gdmusic/files/mobclick_agent_sealed_igudi.com.gdmusic

    Filesize

    520B

    MD5

    3ad2d02ba19eda193cb7a29ae96618a0

    SHA1

    24105e2edfe0faa36338abd249c1f4ef8ccea315

    SHA256

    83ee95d5f10f5a36f1bb584c08d7a8ef7694378808c1c72d0fec66507bdf3d41

    SHA512

    b1d17aaf2ca98a31482bd796b7e68df534201368531c490e2922edf1321cab8ad48072c076bc0b48917d1e175df0d40fe1f6b9c09df4586819a5e7c9b39886e4

  • /data/data/igudi.com.gdmusic/files/oat/__pasys_remote_banner.jar.cur.prof

    Filesize

    367B

    MD5

    2be2dacd3367f1c7f94c0121bf102acb

    SHA1

    29432c3fa4f2bbe24641cc6bd12ad4303b008118

    SHA256

    450593c2902986a2b2baed81c27e9f00d2ad1fb6663689b63d4e3bdc398c27fe

    SHA512

    cdb0cc14534141d700372fb851db50d49d2f762a3f2d01ab8073114517f89b8f517126f1fbbb02466296c772e240717e6e0ef9ee9eff06acb876531630e43cd3

  • /data/data/igudi.com.gdmusic/files/umeng_it.cache

    Filesize

    148B

    MD5

    2290cbeee525e97e54b7caa8ad624573

    SHA1

    a4c503a2dc5d33ba6542094668983335915b6f2d

    SHA256

    b8d54ddb0df1ddf7d01e1d1452abc78f29ff071de0954a33330f60e81426c26c

    SHA512

    edb01794917100808c6290fd5698ef2016cf67fd054a7fb5e1736af347b98edd4e6357441ed2411d78ad51df8531b85eef9ccb678be8f7cca177e568ab52ed6d

  • /data/user/0/igudi.com.gdmusic/files/__pasys_remote_banner.jar

    Filesize

    219KB

    MD5

    9c859e81e45f7d6f6d3a8b8cdaa650a2

    SHA1

    c6798ed55e37020cef4b4c76c095f45bbc404438

    SHA256

    028f5514443840c54d4b832d439a70cd732c4740bf2bedc3a8ba567268225fbe

    SHA512

    f01429687a0a9e85be068b7553a5e0928f7d7b4b306c1ba5823e7151be4e30f1f6a69bdc9d9fa3c5d0d722d8b46dafbfd956783fe4e27d52204c9a29e3092ee3