Analysis

  • max time kernel
    2698579s
  • max time network
    144s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 19:22

General

  • Target

    76c9da6cc12ae617549d8e4f0040f96cc95b41c5a75fd59635e0f1762ed2fda4.apk

  • Size

    28.7MB

  • MD5

    e84abadfb462b56d8da9d091637dbb26

  • SHA1

    c06a3711ab729a91a7d4305d3af632529996882d

  • SHA256

    76c9da6cc12ae617549d8e4f0040f96cc95b41c5a75fd59635e0f1762ed2fda4

  • SHA512

    61828cc5fdfb495d7e5b6c8885c7380be925002bbde8ffb57ad9f280c23c90ecffc1420813221620b24b25fe2e15cf7e0de6557b0dfc816c747e4d3e9a894288

  • SSDEEP

    786432:rPPtMhc03L7DNcQJFu+KxGZuLEbQzXdY91Kp/:blic0b7DqCu+5oLSQXdY91s/

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Checks the presence of a debugger

Processes

  • com.junte
    1⤵
    • Loads dropped Dex/Jar
    PID:4204
    • getprop ro.product.cpu.abi
      2⤵
        PID:4257
    • com.junte:pushcore
      1⤵
      • Loads dropped Dex/Jar
      PID:4369
      • getprop ro.product.cpu.abi
        2⤵
          PID:4423

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/data/com.junte/files/libexec.so

        Filesize

        473KB

        MD5

        14809564edbe4e94c8216b1bc1bcda41

        SHA1

        7706b78f5558dd48326b24632473551101c02ddc

        SHA256

        0324d82659a1418a416371ee2fb9c3dc285021ebe44c6800e7a77ac22abaea58

        SHA512

        2ebc4a7e5e9d532a7172ec9d8995195a47b6830e9d8b322bbc0e11ccb3b70e4c74c19a32cbf5aad53df2f42227593ce121db430d5f06b884a5b22c97bf9a9bd8

      • Anonymous-DexFile@0xc8408000-0xc8bc34ec

        Filesize

        7.7MB

        MD5

        0d68818035d617eb93da674edcd7e8ce

        SHA1

        7f17256cec647f0bae4db434370bc02145302ce6

        SHA256

        051b53fbb134bfad0f33c6000ba1d109451ac274056e1593d55ee272d2afff85

        SHA512

        26e3a26095537f76f44ceec1705ea78c600b08d5ce5b11984cffb357db4eeeadcf87220c5e3d764cc92b8746baa3a7f1edd59e99f3aa97256f8c3b7542de2c2e