Analysis
-
max time kernel
2755282s -
max time network
132s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
24/12/2023, 03:23
Static task
static1
Behavioral task
behavioral1
Sample
c5dec268fbb0ff3172aa6e323b7270225873a35a8a5b9a97237c97bc1e2426c3.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
c5dec268fbb0ff3172aa6e323b7270225873a35a8a5b9a97237c97bc1e2426c3.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
c5dec268fbb0ff3172aa6e323b7270225873a35a8a5b9a97237c97bc1e2426c3.apk
-
Size
13.0MB
-
MD5
f3e9e763c3950580580328b31ab995a3
-
SHA1
63f65ad697c4661c8f0f0c3390101ad05333507f
-
SHA256
c5dec268fbb0ff3172aa6e323b7270225873a35a8a5b9a97237c97bc1e2426c3
-
SHA512
86b65e278bad38adbcb489c40d9f5349d76b9c05de4f03b887a3e9f1acaed8a4b138e66ebac9d85363a07642129f3b726f826f791463fdccaf8e11ebcdb9ec09
-
SSDEEP
393216:RTULpub+9NmOh0hpLgLcnBe8CC3tVY/a077uSFh:RgyCmOKzucnB1aS0Pum
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/data/com.zyzxtech.kessy/mix.dex 4593 com.zyzxtech.kessy /data/data/com.zyzxtech.kessy/mix.dex 4593 com.zyzxtech.kessy
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
292B
MD563f77f99bd2c2b772a479923bde11974
SHA1c7632e7d301e4463fafce85f84e9c3d7da3fdbbe
SHA2564c76a3af64cdd2f8713ffe2733dea50dbe714d0ca41c17d1847ee5b62a7ca615
SHA5123aae4a89d1ed51fdd911cb367eb10afe3c2264e4222085891b18a60d5412f85d10bf5c8f3c6642db70abb9aa42732bac5c42c42ee32d587100f53c21b5beb16c
-
Filesize
1KB
MD55ac1de230e31c8dc7853fe4111bc911e
SHA1857af0e14e60618fd09741af204347f2ecda9bff
SHA256324f390faa5c41d350871ec1d5dfa406cd3b90c0417ff0a604a1d474e52cd44c
SHA512616fbb5e86cf13053d907486c19f38f6bc38829209a411356d0e652a4873522eb6b751e1a3543b6aa1d00bd941e158070dc1bb0e8eb1ef649c99ef97663f14c0
-
Filesize
18KB
MD5283e91e2bf44894dd0e8885f08cd03f9
SHA187fb427cae0567c3c5eed8c64913c41a3c93891e
SHA256b9ff88446e9c21d5286b5a95dd7688fecf16a82ed48c09bcfca783166279f6e4
SHA512247f52d5991df837dc3a80d5ed59bd728a6a21c5db4df5e4479d7f1c0650a645015a319bea40548769751a02fc29af495ee60a7ab2766016e30af8b8fdbd6577
-
Filesize
32KB
MD5c251a887cd036ebe630e3e3570ce8ea2
SHA12cbbc68f5519fc2b701b438362ceb1ba7e28b45f
SHA256ab3844e86fe7cbf36fb03bc9a582f32fb2dd8cfc8aba86e4fa4516c3ba7de441
SHA51226f7953040bb0f3ef02d06a3168f07069b283f5b8a0e80e4e892d7d95d348d4553b3fc5be10c48f3c4dd4205a2206cf7a5cf2142e5234e600317b494bc4822f0
-
Filesize
12KB
MD5810a85f0f2fb3c9ed0ffaac2af1f5bec
SHA1ac010b8263e81f497ea585cfefef86d116f0cfdb
SHA256396c32352a6b13c46b59079e0a92e9d164894b2bba4be7a5650faea7f01d67fa
SHA5129eb4025ac72a429671a8dceda335484ff67cde485f3f1716453f96258f85b696625ef914bde923c3c6c5eec52d656d65171eea6d12952f32791ae15b9a721493
-
Filesize
512B
MD5f25b5f6495105f29ebadb9e8a397f3af
SHA14157019a7170386e0b54cfef35114ac8676d3a25
SHA256332922a743fceb820da4eadf546cf0916ce73ab72895e848145a8b458ee8b2de
SHA512379159f33e55e81dadd0b14a3c9410959dc880304bccafb80a0e13dea0025f0f6ae43fa938cda78d0a77354a406240fc88718ee332e62d116230765c12c1165b
-
Filesize
8KB
MD59575c8591aa3ceccf7f5fb7d150f45f4
SHA1f0e83e417a34d827c5bb5b36fcbfb9a7c4bee18b
SHA256cf3beaf9915549ab48ecb200e7415a54caced7386ef99af76c6680c0c60489e2
SHA512705d6b4fe87bc859f57aa838171e0248693e6c56653fc8e4cf20aaf1bb5269c5dce8f710b24694b7361abf6ad790d568eea91806319bfaca1be0c402f0500228
-
Filesize
8KB
MD548c8f8a9aa6c4fdd009e5967d3a846d6
SHA12b1838b71f3748001c0d565ac28280fdd5c8cf0c
SHA25626bf8369cb42b9247e720f76a91330b3b4af545de4f4fd744921add1cd4afdf1
SHA51223532dd1ad3a388b48fd4723e2fb013b8a007309c5a6cd7fda5db798fbb504841966c89d7d8bca028f5c3925133a688871f8c891d8f2f7b51bca0fd92bb90b4c