Analysis
-
max time kernel
4292322s -
max time network
132s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
12/01/2024, 22:42
Static task
static1
Behavioral task
behavioral1
Sample
0a6ffd4163cd96d7d262be5ae7fa5cfc3affbea822d122c0803379d78431e5f6.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
0a6ffd4163cd96d7d262be5ae7fa5cfc3affbea822d122c0803379d78431e5f6.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
0a6ffd4163cd96d7d262be5ae7fa5cfc3affbea822d122c0803379d78431e5f6.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
0a6ffd4163cd96d7d262be5ae7fa5cfc3affbea822d122c0803379d78431e5f6.apk
-
Size
4.0MB
-
MD5
e51a38f4f028ec5fb2d6c73d5e2c65bd
-
SHA1
a8a02aeff92389e57b6d6065e49350b405b62498
-
SHA256
0a6ffd4163cd96d7d262be5ae7fa5cfc3affbea822d122c0803379d78431e5f6
-
SHA512
49a16b180a9c78c677faee42a9ac7d854fa48303c7f19b99225b0f31ae58d7648366f61427d9b9c98394be430e6b95589b0edd51357c0f312b6d1af7aa517fc7
-
SSDEEP
98304:6VOoTN2iE/INh5QPKrURLD9i5WuUkILmMoCIxQ:6Vd2qPQPKrUtZi5Wu3DQ
Malware Config
Signatures
-
Chameleon
Chameleon is an Android banking trojan first seen in 2023.
-
Chameleon payload 1 IoCs
resource yara_rule behavioral1/memory/4297-0.dex family_chameleon -
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.busy.lady/app_DynamicOptDex/kx.json 4297 com.busy.lady -
Checks the presence of a debugger
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.busy.lady
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
-
Filesize
2.1MB
MD5515f42a7b56868be873549c52fa96609
SHA124bbf068b20b2ba9894fbf4a33ad5ecb5e948499
SHA256544dfc922e22a3de19f7bc5b9e5f5fdbe41abba783d9634568bc62104ac4f810
SHA5122726d99760cb064765093b6ac986cd8a57c0cbc1adca8a5801ab8d0ab499712e10b8db61e99a5a5f7bbb5a5e27d703ad721e6b60230d4c00bba2757577f8e8fc