4e9c21bbd2357080f36ba6c799f0cce69f527160b862270d5ebda23c22cd40a7

Resubmissions

10-01-2024 05:08

240110-fs1g3sfdg8 7

10-01-2024 05:03

240110-fp5ydsebcm 6

Analysis

max time kernel
4056427s
max time network
150s
platform
android_x64
resource
android-33-x64-arm64-20231215-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20231215-enlocale:en-usos:android-13-x64system
submitted
10-01-2024 05:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

KineMaster Blue Latest MOD.apk
Size

113.2MB
MD5

c8c99a14aa8cc178eda15f382efa4b85
SHA1

a6631cfbfd11dda52fcce526fbcbb77c458e5ada
SHA256

4e9c21bbd2357080f36ba6c799f0cce69f527160b862270d5ebda23c22cd40a7
SHA512

4ba09967d26893a377cce92111344219f08f0223799c2215a6fc1cb28661f805d591b02e4a8682fefe07c85a43a2b0dc539451ef6fb7e90bb607c9a466e5fbe4
SSDEEP

3145728:o9Z6Ezle5+PVxoFVnDptAr32iv3GHYFxFw7wivbwytV+jO5Jly:AvWymIkYFxFw7wiv6OU

Score

7^/10

Malware Config

Signatures

Loads dropped Dex/Jar 5 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/system_ext/framework/androidx.window.extensions.jar	4382	com.nexstreaming.app.kinemasterfree
/system_ext/framework/androidx.window.extensions.jar	4382	com.nexstreaming.app.kinemasterfree
/system_ext/framework/androidx.window.sidecar.jar	4382	com.nexstreaming.app.kinemasterfree
/system_ext/framework/androidx.window.sidecar.jar	4382	com.nexstreaming.app.kinemasterfree
/data/user/0/com.nexstreaming.app.kinemasterfree/code_cache/src/jars/349ffa10.jar	4382	com.nexstreaming.app.kinemasterfree

Requests dangerous framework permissions 5 IoCs

description	ioc
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to record audio.	android.permission.RECORD_AUDIO
Required to be able to access the camera device.	android.permission.CAMERA
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS

com.nexstreaming.app.kinemasterfree
1⤵
- Loads dropped Dex/Jar
PID:4382

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.nexstreaming.app.kinemasterfree/code_cache/apk/base.apk

Filesize
936KB

MD5
8c227625bff9a74cdcdfee22c02d5417

SHA1
1d203f6b2c8d1d6b2b14436ec7aa70b28354b92a

SHA256
8d82d0cc8a97949f1173eed532f3c409570ddb9a7ae161172e825dcff4eb0f86

SHA512
ff9d455c56fba9382dc9146d6863f3fe5320653b6618d7ddb84a31a93a41f49a84298aa980748d23ac57e4eb01e2970039e4393b1d4ebfa019de67a721829586

Download Submit
/data/user/0/com.nexstreaming.app.kinemasterfree/code_cache/src/jars/349ffa10.jar

Filesize
48KB

MD5
f01d3503e1f5a1013bad0c25259dee48

SHA1
0d11162b0848b9e1425839359319454b7540eaaf

SHA256
e815aa74e440357e7ac8e5864c3e2683a48447ddf5ac60b11a348a887cefd262

SHA512
ff132ce1db934b1b93957721b71298b784d0c61fa7ceba31cfa21db9527e2671dc11090c3907bd748cac58b5d69cee4b916de4a72e4e1df3c7bc0b8ba81e42a7

Download Submit
/system_ext/framework/androidx.window.extensions.jar

Filesize
123KB

MD5
3056e1bdb7d4e19789d0319eff484bd0

SHA1
6791ae47aa9466fe0bca27ad6643f846853bbee4

SHA256
8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0

SHA512
c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658

Download Submit
/system_ext/framework/androidx.window.sidecar.jar

Filesize
25KB

MD5
29469324e59dfcc052f24b5af4e7b2c4

SHA1
10c1e17ac6f598037bb51baa07945663645de4eb

SHA256
9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a

SHA512
5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads