Analysis
-
max time kernel
13s -
max time network
151s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
19-01-2024 16:58
Static task
static1
Behavioral task
behavioral1
Sample
AMZ CLONEDARK 12NOV.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral2
Sample
AMZ CLONEDARK 12NOV.apk
Resource
android-33-x64-arm64-20231215-en
Behavioral task
behavioral3
Sample
AMZ CLONEDARK 12NOV.apk
Resource
android-x86-arm-20231215-en
General
-
Target
AMZ CLONEDARK 12NOV.apk
-
Size
103.0MB
-
MD5
4b4cdc4e72d83c28864019be1157858f
-
SHA1
f5ee315734345312b24f7a64cf8c313ddead2b85
-
SHA256
3bfde67e31fefb95eab26bd9aa8db2e3104398b3a85ef015ce7c4adae9e45e32
-
SHA512
2b799c17293fa8d6481f984b6b4c5d4451170c052d02a75a6a9dd6a0464a8640eb28231cd98a05b5a869b5be728e3ea149586e8109894408d5ddb6cde53e114b
-
SSDEEP
1572864:/oStB3SzOTZ5rcPk2RsBY4569yi+fq4DknJMK5+oA:/oStB3SMZpcvsB969yC4gy
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.sidecar.jar 4496 com.alightcreative.motioo /system_ext/framework/androidx.window.sidecar.jar 4496 com.alightcreative.motioo -
Checks the presence of a debugger
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
MD5171aedf968e17a2744d2585715606cb9
SHA1bbeddeb3b89fcf809619c35b4a318a80e7d5b029
SHA256d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e
SHA51278a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b
-
Filesize
8KB
MD5c8dd6f5960363ab41a7f6b5e0b40772e
SHA17fc1db8a09c56b0d284d3f62673d9f99bd0b96f8
SHA256927c86a0eb80995dff0521c210f7d9888ba0feccc0a85cbac1f75ad24700387b
SHA51234d246be1dc71e1de255a90e5f3cc9b0b4dd3c6dec2df70985fc5e35f099b856a080e209d0ac3e351e9940ce6093abb9d8864e367c6ad06fef13acec8a395a0d
-
Filesize
512B
MD52a05a39be91e49a6be001cbad973180b
SHA158bc657c2904a1dc99e4bf40581c70b9a66d0bf7
SHA256c2c6afaf8b2b245e06c59f416aac2862c55f3c26fbddb11003eb20e956bd8122
SHA5121cda803493136a247552103199b82fa001ef16a95d1d3d01a906f4f384377d985b7d03b2a1b38c33e526ad0adff13e9454fb00c50aa169481465b2a0cb5f9549
-
Filesize
8KB
MD5dfa09728275fd1714c48e168fe4965bd
SHA15318c10e58f6b5ac3cd548f87e2616dbd444ddc3
SHA256bb4dd8086b9008821086ddebb4f51708c4c6d6ee3f2c099a53c30cb5198151f9
SHA512a822bbfda974455c386cc9da0105b4200a53e02c56be82e1c055873570ef306dfb8889da8b002822f95fa4991c643deadf0d9baa75981ccda0cccbc489bfa98b
-
/data/data/com.alightcreative.motioo/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motioo/com.crashlytics.settings.json
Filesize720B
MD5899adbbcb152185d66a137e2ed8e91ae
SHA1e2e148ad7b6a3fab6ddd3025c0db80bd23af3562
SHA2569453007e890055f7982146af2eaf6dd07b9bb29637fd916dedb06e89e926850c
SHA512343ad6aa8202d4ab9c0ef55e0b5290925e83b74ddcc013316717f735e68db7f94ae514503576708f4414780388c4a92be3e910149d18991bf852dcd645922ee7
-
/data/data/com.alightcreative.motioo/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motioo/open-sessions/65AAAAC9036100011190394409D85610/native/app.json
Filesize237B
MD5d86e72571f98a92b19e66d56f19f9088
SHA14c1680fc45069d9afee437e6d09b644fe2fb748a
SHA256606b88af1c117bca5dedf976315ff0176399b99fa56318e939072535938d134c
SHA5121adea60238e647e07763aeb176dc59af52430f52b913c9bcf891e0a6d3c8128b7111d5857f8d502352de6563b53310fd249903709225c3c85163bec131b8379f
-
/data/data/com.alightcreative.motioo/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motioo/open-sessions/65AAAAC9036100011190394409D85610/native/device.json
Filesize193B
MD5159294f41dad34ffc54e25897cc37a5b
SHA18ab064709ffa0ee174e7e68dc363a44484c6aea3
SHA256c5503d9dd4d3c539aa2d1f3d442ad76ae172ffc3755ac0880560d2e097316957
SHA512d8f12809d6e183288b40ba7986c1d31ae4171942de1eb30e4a4480f2b59ef2ee765540d8a93b84ce03dcf3e75ce493106a24bbdee0649573d88e162a62a617f0
-
/data/data/com.alightcreative.motioo/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motioo/open-sessions/65AAAAC9036100011190394409D85610/native/os.json
Filesize55B
MD5fc1dcee4e422d77e7fab7c08c8a41344
SHA1d5340127e9d5f735b9d33b9dc61c772fb0e2dc15
SHA256b843f05ed78cd137c272ba7f0ce8ede3aa853098a856863e51d5c223b58f21c7
SHA5123ec07617e3e1008572f6f2528de9d4b827050cc5a7cf19a1604c961f9ec370ede6f5fd83bfcc252c0ee286fe244ee6734046ef1aa638dcfc689cd4407a6a8f61
-
/data/data/com.alightcreative.motioo/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motioo/open-sessions/65AAAAC9036100011190394409D85610/native/session.json
Filesize127B
MD5fd72aebb60cafd1827253a80d9071b7d
SHA146b4b4ba45f5cbd2556bd2b72309cd1af441c7fa
SHA2568a57607ce3d052c12c840e018b4271a7875c8273a7d29aaf93a63cdc8c3e2817
SHA512a6dcfd04e370e0b00410a395d9347c54b9da7c735e78940629255045e8a10906cda7ae1c854358cd2cb67ecdc39dba3d16792c34a2c88f048e9c32343a3f4a12
-
Filesize
90B
MD588cfa1062c989992d8de64229e9e0836
SHA162be540b0ea7359da1a670e476c8dec681e0ab4e
SHA256d3a304aa4f34e08ef2ac6e7376c91c8f30232338eadd9798b5499ce0c91c4d0b
SHA5120331d6a00d194850fe9586e947cd8706fbf47340f874e2f976482ce6118f4255e41ff4c0f726f39e38fb7e6d45e59c99f6bdd41b6f2749c17c7067e47cc8619c
-
Filesize
561B
MD5dc41418921f83dc09adf42c2672e59f5
SHA1b542ec1c84d37bef48592f727d82c766bb52f7dd
SHA256c5b4a3223fba4f0dae8ad73c3958ca43a7a8b02ee86fc485df1464b82ff8da1c
SHA51200f5f4ba4ed772ba1a70f4b3be92408e44cb33bd341ced1d4e52ab2577001bdc3aa921fa39e61fe4435f16718ee91efbce2a290c2723c011c1343e9f2e79ccf5
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD515a43f81985b7fb533ca8760d886f5d1
SHA1eb4417c9d3a323d2246189935843b684707b80f5
SHA2568e90e803d712776f6a662223ba943d475a728dd994bec88aa9df9011c3d46249
SHA51255d95efceeb597541fa8675153739467c85a20ab951a030428d42dc551e9f79925b360e91d0c2ae9d6c4749f237a08c3f722b11df32df109c569a1ce6c66547e
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
16KB
MD5df55d110cb30649e1d399b228d95573f
SHA11bec84dab34d7b0a12a1e0a8eb9a14a9ed2b0617
SHA25653080c07ab4eccb438000bbd378bffbf8e9a9c1122ea63e7c02ba6f932a13a4a
SHA512071645994c82af7c2242d03c6e207f6005e8592e6cba15ab8cc6953a876f2b7568d24df881342525ca6d08a18a0f136be4006b350347d835dcf6d994b3273e59
-
Filesize
12KB
MD5bdf3529e80318eb14e53a5bf3720c10d
SHA125c9ace4b1af6e80ebb2572345972c56505969ba
SHA256bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
SHA51248b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b