Analysis

  • max time kernel
    2569703s
  • max time network
    167s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23/12/2023, 17:11

General

  • Target

    54247a2cdc4760405c2f41728b5ca1fa57959eb1da1ffed190edc16729baa2a2.apk

  • Size

    11.8MB

  • MD5

    8de1f1c478f807085ca45dd1c4f5e0c7

  • SHA1

    2f288c6782af48b5b654a7ecc9579e65cf67a9c8

  • SHA256

    54247a2cdc4760405c2f41728b5ca1fa57959eb1da1ffed190edc16729baa2a2

  • SHA512

    f10e947d012a4c8754c666657ec0cd102be12ec9b0b96810a676c17593abeab8abae56eac1bc24c7dbde3cbf521360f607c6f864fb0f92afd481b650da515cce

  • SSDEEP

    196608:vHxIIYpPEkn0X/bzNzyWLCMX4Y/Hy0zaqJp8xxnXSdGzOVL8GVo05NHeu1lxmxxf:/YpyDzpi4ydq7iSgg8/05NHeClkxZ

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Checks the presence of a debugger

Processes

  • com.estudyme.hvac
    1⤵
    • Loads dropped Dex/Jar
    PID:4520

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.estudyme.hvac/databases/hvac_1.1.6.sqlite

          Filesize

          15KB

          MD5

          a848522e61a1a2a3d369daf2686c2215

          SHA1

          01f6b6c950f50dc31f8917e84632a4d1660db870

          SHA256

          835930aef2cffb358e6641dc71a1f0eccb6ff72ac41b0571a57d7ae42d0757dc

          SHA512

          df01c52ee1d693dc872eeecd187565e5327f514b93a838a0ab613591fd8b445122b2bb9ff5f491d272bcd5f168277f4bfc1657566b9dc2bbc70a80ee1b11ab8d

        • /data/user/0/com.estudyme.hvac/cache/1582435991586.jar

          Filesize

          9KB

          MD5

          e8e0527a01aefdb89afd2c508f131da1

          SHA1

          f1103e6b260c657ceb3d95f1b023af3fda8b133a

          SHA256

          f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce

          SHA512

          fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

        • /data/user/0/com.estudyme.hvac/cache/1582435991586.jar

          Filesize

          20KB

          MD5

          fde2ee00cbd121cfab5290b078aa3ceb

          SHA1

          e2b77d5320e155e413d040a8c20020962065b2f8

          SHA256

          2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685

          SHA512

          a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

        • /data/user/0/com.estudyme.hvac/databases/hvac_1.1.6.sqlite

          Filesize

          726KB

          MD5

          f8ebd6dbd1f1169a3a54226d57ad6522

          SHA1

          86af32acd77029d5e11fc71183eacf187ea638bf

          SHA256

          22dae77cbc34591141ce6aac590639d8e7811067b9d134fb415fed7eaa1ffb98

          SHA512

          c1588c6f5e6a2fc303a974308af9b2e5a9a704d0be246c770f4f3b58a85a0bbdf6479d7ee35588760c37b75e27ff2c0c6cf5763ad45a05c1601552f574f10c9f

        • /data/user/0/com.estudyme.hvac/databases/hvac_1.1.6.sqlite-journal

          Filesize

          2KB

          MD5

          1b00666fd5c37be42251b4506f4f5554

          SHA1

          f328c31d448c7ba08de080598bafb3553f7a1f77

          SHA256

          98ecf2956f97d6d05fc3658e58f2609f1d4f2b44db07fbab51ba526c51934a0e

          SHA512

          36b2f549e5afc2af0ff0c50d964ff030ddb335e64aa09350bd80da13237fc9b0c519289618f36aaf9ec35f6e6005509da42fac48b7c3f6faed428e410d971221

        • /data/user/0/com.estudyme.hvac/databases/hvac_1.1.6.sqlite-journal

          Filesize

          2KB

          MD5

          19780b32bd352dd1f731878120a52b46

          SHA1

          e6cf04bced07e28465bba7ebce5c5269267e28fe

          SHA256

          2e72b02cee4ced1e59ecf45f3067aa6954a8c8d43861c80f79b37f65d8fb7bb3

          SHA512

          33118237d9673505706a5a9e829e139bda2deda17b2a85cf3119bfaab56f909a5ed110ec086ecec8d04bb3902965dc39d8655dfd1b70c3e2b577cf3566ee125d

        • /data/user/0/com.estudyme.hvac/databases/hvac_1.1.6.sqlite-journal

          Filesize

          2KB

          MD5

          28fab2a39503566e2e263bdd7fbdcfe7

          SHA1

          b0f98b352298c4cc8d3f74c9460879a646be421b

          SHA256

          34928dcc175b2b05074054cb7a3cf4e8ea76791811a4b59564cf73004905b247

          SHA512

          94983c5a5dd0058d347f590b43397cd2a88f05506c25423f9a97803996be033c2cfa7b138faeaedd94a0a1463f93197cf22af784fad28b0a084ae0ed1c7f0611

        • /data/user/0/com.estudyme.hvac/databases/hvac_1.1.6.sqlite-journal

          Filesize

          2KB

          MD5

          316a1bcbbb0da2c1945234380b9e1a9e

          SHA1

          9129c0f7f7158c73ad6d40eee6d3f5caffeaa10b

          SHA256

          9e87783429077009ae208fe599e7cbed46b531afa7af804524cab2f738f7a3c8

          SHA512

          1e3a5219ae8f3bbbb79eb1a0a178984d499f46d19d4e95ff829a62fa91a5217554f4283a99ce81222180c4d9f592d05deda0275ab9d42f9e438b4b81a06bb354

        • /data/user/0/com.estudyme.hvac/databases/hvac_1.1.6.sqlite-journal

          Filesize

          512B

          MD5

          d5be3108f5599a62062bb0ef48f60e5d

          SHA1

          fd40ef01a361d66f2507b96135b0db22b50ebd46

          SHA256

          5d365450076a9644d43c0d1bcb0f26e885ec018798d187d9594ef245f79f6ffb

          SHA512

          c79b2622c8113ca7df1d099de2b3884dfe8392bcd2ca75adfe67ad930b205c59a158c694c666dcb87d70342303353e63621b8400170a7ac6a2a52d097054f3d6

        • /data/user/0/com.estudyme.hvac/databases/hvac_1.1.6.sqlite-journal

          Filesize

          2KB

          MD5

          5b794b284e7c2a947594c28eab653373

          SHA1

          324f841d905730f83d20321126008985c35834f2

          SHA256

          3d6050d29a76d4da7e85a85b8507066d5b26c2f146622180811f4ea2aa924158

          SHA512

          e92a58b4696d15a5f13998e8929b0e2e7e91b8d37458538327176310727f96ffe7c9159decbf64d6d2ee7643df90faae5fbf97c0b1ae4edfeead4b4f253ed164

        • /data/user/0/com.estudyme.hvac/databases/userdata.sqlite

          Filesize

          1024B

          MD5

          29f56c3c2a215d8c1e43c7fa137fb241

          SHA1

          2a45ff850655275074086591af3be26012a4b56a

          SHA256

          0c13d29e55b7389dd38394a08e69bdf010732d3ff69b2bd8cdde1a50262a8cdb

          SHA512

          e2bc453cb7c3277307a99befeeefbf82c2923e086699c458a469254b2a46b78f4092ab99526c69fea7d58739de43b1f765407fa8d2f05128cd33d47dbf141fe9

        • /data/user/0/com.estudyme.hvac/databases/userdata.sqlite-journal

          Filesize

          2KB

          MD5

          a8c034af9d3e1879518952cbca2c99d4

          SHA1

          cb534daae8ce363516d882092b109e841a491d87

          SHA256

          5d4ba56d9f91ddac1984463c56b9d9fe19490db2e0b85e643df1991b34ad7029

          SHA512

          1121ebef4b9ac6d9cf7f81708c839471db6e57d4c3521369d4f26a724bbe5d40ecf786904643f327c3f5cf34227ed53955e76b62e0d15fb5edc10ac37185696f

        • /data/user/0/com.estudyme.hvac/databases/userdata.sqlite-journal

          Filesize

          3KB

          MD5

          0790842afeedcf3b7375bf2b5ae23481

          SHA1

          249817bde30da209a57725dcf3672b186cbf40b7

          SHA256

          479b6cc75631fe8d607fddaa7276a3e8340b05f2eb72183af3a53724db296161

          SHA512

          2b8c86d675416a5a7b640bc1f8364a1c38e389c6d64e59b7656ae879b0eabaebedb4a52c141e36cf96d101f5999cf4373d27d12f9a158220f8efc65a015971db

        • /data/user/0/com.estudyme.hvac/databases/userdata.sqlite-journal

          Filesize

          2KB

          MD5

          a666d512e89524c3e8811af17603ad3e

          SHA1

          3b5f9cb34d5e5a2f0b2f535c392c8854a3a2997c

          SHA256

          f64de23d334260500f01a84e547edb1f7c6954653b1c7f3db1e680685e0c3b35

          SHA512

          078c5d82b157b7f118aabcc49d57fa5cdad3c1a3c0cc459eaa4edf0c9d3b1abad2f7ad12284e2859f05f97bc38394649be3e2b402f04310da36e52db95eb6d52

        • /data/user/0/com.estudyme.hvac/databases/userdata.sqlite-journal

          Filesize

          4KB

          MD5

          b013fb2f88263bc7c35a8e8868ab16b8

          SHA1

          6ac6318106d598ca84c7c77fee45bf4b5fd20e7c

          SHA256

          a05a5150afce24a15d63a639a3195fc8bcbfcf34b87e12463e794854d9c8e649

          SHA512

          da79c8e7dbba6e1853ace5bd4ea69a60d1f90e4b7e90bc0dcc3d49f6f48575a5353edb5b6e71209dac07032ea5cf33486a0788dd0e9c5b3655f1ea4c185a84b2

        • /data/user/0/com.estudyme.hvac/databases/userdata.sqlite-journal

          Filesize

          512B

          MD5

          264703c2174f393ca222e926a50122f6

          SHA1

          556c48a0ee20e46952399ede7baf47b63b017737

          SHA256

          536e3ce3667aee5bd08e86309242fde218ea81487270dbed2632bbc0eb198129

          SHA512

          2cfe477e17e3f429fe2948572676eb7e3791750047a27cd24bf78875f3465e6c039f00e229e96acd9d5f6832d30244dd75f25d84374ef8d298c7ef62f2e3feb5

        • /data/user/0/com.estudyme.hvac/databases/userdata.sqlite-journal

          Filesize

          1KB

          MD5

          692b356a88ed3f06839438e0509c7777

          SHA1

          4e33829dd394ff746f345d58a2a34bcb79284bf9

          SHA256

          a352ebc37ae89195d88beef652a2c6c47b907ba542f05c18f54044f746929a49

          SHA512

          a9db44aad8b6fea3689e382a8ecaa734e6a064074968a7b42cb0017051d72915472d695135fdbb946985e86144a2839c8b87e072bdc4ae128dca6428d5906764

        • /data/user/0/com.estudyme.hvac/databases/userdata.sqlite-journal

          Filesize

          1KB

          MD5

          7428856ee6cf1aa6bf4270b4f4aa4349

          SHA1

          f32d3bbe1113220d08890c4cc7414d67e8684b70

          SHA256

          ac7bca68acac66c1d1217bc3931cbf49fe36cef935f6d6f9ea17058c03defd46

          SHA512

          d623df194792a08f2964c2b79dc1e195ed531544503a5447910c9195eea131247612596e4300dd9542a4b243caac4a6ac9491082a7b6f8fdd864ee1a157d3c01

        • /data/user/0/com.estudyme.hvac/databases/userinfo.sqlite-journal

          Filesize

          1KB

          MD5

          9df86483876e45aeac1eea310e21db46

          SHA1

          df635ce82d53fb4dcfc501af9fd49d31a497c17a

          SHA256

          f35976448d545ca6ffbdabe3b2197fd832012c8ef8a0702bb4c5054ad1364476

          SHA512

          c32c0d112f0f780fa3ae717eda8bfd7caa4f8e4fda5d75f86f41adbe70c2365f3b83cc7316563d097589bb380d25d416824577b75bc46731c5d3279302261273

        • /data/user/0/com.estudyme.hvac/databases/userinfo.sqlite-journal

          Filesize

          2KB

          MD5

          44944093a275acb270008e41a6ecf558

          SHA1

          5ac921103f34cc42e382f2a5f49a490b42c924f3

          SHA256

          dda62f99fb6cec5d8cb8d83f17233409733134f830a019cf2004073de7bf5a0e

          SHA512

          7b25d50b15f14e725e65b70399e1acbb9f5a9e5821e71b402d10eed0e7f00bd7b993165b705468fbedb92595bb00380fd585368d059044da693ace9e804eb0e7

        • /data/user/0/com.estudyme.hvac/databases/userinfo.sqlite-journal

          Filesize

          512B

          MD5

          316b6d11581c11172a4b6fcb623e8581

          SHA1

          f723dd3fd48520ffc6f42171e9b1b7e58f9d3a56

          SHA256

          f0ef8ac6ad87cde1d0285ebd571d61ccbfeb180b8286a15ff7a828a1169c0ba7

          SHA512

          4c396d6ea77be42f29cd9efac40a18e787a166725f7dce4edb7df57bccd448a85fc5d3472462e3d6d966238d8bc6659195a1e0bb55fe3982785d20acec3aaf3d