Analysis
-
max time kernel
3771368s -
max time network
152s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
26-12-2023 17:13
Static task
static1
Behavioral task
behavioral1
Sample
7f8ab6bd7808faf883ca93cc4b6cbd50.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
7f8ab6bd7808faf883ca93cc4b6cbd50.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
7f8ab6bd7808faf883ca93cc4b6cbd50.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
7f8ab6bd7808faf883ca93cc4b6cbd50.apk
-
Size
14.7MB
-
MD5
7f8ab6bd7808faf883ca93cc4b6cbd50
-
SHA1
e55c59b4bb4e229205ae941ce11125608889fa4c
-
SHA256
ef88d8fa66b8fe9c25bce0c3591ae113c47a83ff63d67aebfbffd147e884845e
-
SHA512
c257010ed24123cd07300088d0c0828b3f0f489fa0060125c2eb35974af87546a7ec3c468ee7eeb86cae3340c27b1b872c1fca71f8891da0846e7efe59bb4e96
-
SSDEEP
393216:lQgApKxx0VIEjKJWTJ13kvm8Bk0Cy5mIah6GUv1:lQnAAI7a10vm8B4Ash6GUv1
Malware Config
Signatures
-
Reads device software version 1 IoCs
Uses Android APIs to read software version number for the device (IMEI/SV for GSM devices).
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getDeviceSoftwareVersionForSlot inudayo.ha.ein.clothes2 -
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal inudayo.ha.ein.clothes2
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD52eb6ccd15bd045758b754a1c9591cbe8
SHA13f44b74ac7923d5050b1d1d7ff4dbe332c60673b
SHA25657c26b757ea53ba399d2835333d76c80fda9f88921cc482edf1e6d2efa7d6a67
SHA512975c99e9a8f677b5f40efccb0255636bc05c93118b60f18d881b4445a76fc921d0f9499adcf6e4a786d27c360d029fe3c1aaadce096be5621c215b81ce4a9037
-
Filesize
512B
MD5ca58d6aeb8780073661a96b4b084095f
SHA11cf094e7c663204326c998765b4972743497ec38
SHA25652e056857f05427bdffaad6f10e51102466f1ac6c1d6d617df76ee627a7b0ef6
SHA512a2d8b1de01e879a6c9a4dc6a43cc1edb043a5c9a6c1b861698e8cdfe5f779c9cefcc26ed19acfe9eb60d5295cde654e86a85826f7f944344a3c5cf0ae2ecf60e
-
Filesize
8KB
MD5d047286602c9f883e0d4c19511d876fb
SHA110dec732a968eb99fe00c8fb9f3f64850718f2e4
SHA256bc673c19d39f480f3d31e3153a0d685e63993bdda57359a31bb5e068a76ff2cb
SHA5125e69da0fcda2a9b9c094a03cc9ff5fc13ced3d03f7f5452b0c3b0a3584ea1359b07065f2bd1d7ee7cd7c1a3429100556ef5d0cea12ff8968c19d4a66a43d6e7e
-
Filesize
8KB
MD55c9585d40dbdba49314ca991b1ad00be
SHA1fa82fa8987189c907d6a8c002ea0a8dc125e4672
SHA25617dae351eb7ab92c15a4d26c2884d21e8a70eac16b1e423d589ed000e03b9644
SHA512bc9eb8e79550f50b92dfb9689040d9757ce44aa256bd46a1c20aab34b871ada7501a1478f624c28a6abc39b41b41aeec94827b34c874f9f8c0a8569deeb42c51
-
Filesize
106B
MD53469c582f8b4891025bf70974119adf6
SHA1f2c3371faa41f7225901c0ffde99c54621ad98ee
SHA2569fe5c1813d3ed616ed62d0a2f3170171b12ceb0fe1ed5fb4c0611d57810d4b16
SHA51231ea9e309af8c70bb0d7ba331800bcab4f84e730f34ae610868e717bfc81652a5ae60abfb5a88b4eb62f2cae6e038ee2fb834813c0a4a77887431c1f558a2103
-
Filesize
158B
MD5e4d2ba34bc687ccb680e46a49bcd638e
SHA12216e86c685a5f2887d3f58bc0a564b54827a124
SHA256b3e89babedf41ed6ee746aa82d0f511ebf8befede65f87c48dc607f74936fafa
SHA512fdba302dc0cf7391d69e822d330d126f75b22872b44167a64d1991d8811464f83955f4f105328d4263b55d9ee0b74be7ccba7992b0d3ebee8dedcb1c206d6ac1
-
Filesize
131B
MD52dcb80c4f41d549092915d3f921553be
SHA16c73f2181cb7c1bb57bdc6b646071aacd18eb180
SHA256ff0e267c41ec5d4533095fa066196ad9c766d60c0fd0f91b90dd51d316ff4091
SHA512eb61fa86ae00f2b8702a09d67bff46a463c5c86b36e46bdba0a2a19e3ecbacceede5165c7d1fe17575a67739e32959d1d03251695423478d5faa2d4fede44669