Analysis
-
max time kernel
14s -
max time network
162s -
platform
android_x64 -
resource
android-33-x64-arm64-20231215-en -
resource tags
androidarch:arm64arch:x64image:android-33-x64-arm64-20231215-enlocale:en-usos:android-13-x64system -
submitted
19-01-2024 16:58
Static task
static1
Behavioral task
behavioral1
Sample
AMZ CLONEDARK 12NOV.apk
Resource
android-x64-arm64-20231215-en
Behavioral task
behavioral2
Sample
AMZ CLONEDARK 12NOV.apk
Resource
android-33-x64-arm64-20231215-en
Behavioral task
behavioral3
Sample
AMZ CLONEDARK 12NOV.apk
Resource
android-x86-arm-20231215-en
General
-
Target
AMZ CLONEDARK 12NOV.apk
-
Size
103.0MB
-
MD5
4b4cdc4e72d83c28864019be1157858f
-
SHA1
f5ee315734345312b24f7a64cf8c313ddead2b85
-
SHA256
3bfde67e31fefb95eab26bd9aa8db2e3104398b3a85ef015ce7c4adae9e45e32
-
SHA512
2b799c17293fa8d6481f984b6b4c5d4451170c052d02a75a6a9dd6a0464a8640eb28231cd98a05b5a869b5be728e3ea149586e8109894408d5ddb6cde53e114b
-
SSDEEP
1572864:/oStB3SzOTZ5rcPk2RsBY4569yi+fq4DknJMK5+oA:/oStB3SMZpcvsB969yC4gy
Malware Config
Signatures
-
Loads dropped Dex/Jar 4 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.extensions.jar 4419 com.alightcreative.motioo /system_ext/framework/androidx.window.extensions.jar 4419 com.alightcreative.motioo /system_ext/framework/androidx.window.sidecar.jar 4419 com.alightcreative.motioo /system_ext/framework/androidx.window.sidecar.jar 4419 com.alightcreative.motioo -
Checks the presence of a debugger
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
8KB
MD58a0373a4c83e79b9ac6653f5f17be29e
SHA1529437aa8d1048eec5448fc51611e40a66fac0a3
SHA2561a6062ae6d77edc3afa3d42f8949453d6c31e2a396a580cbb37de1f3a425c13c
SHA512167e8ef5db98bc818ab0e6f6fc4f80f1ab933abf39529e7596662001ed88528cadea1140e33930bd017da05bf2ddc0ff4048e637a553822970ef5658211674d5
-
Filesize
8KB
MD584a8fb0a85eb606c368ba525e39f4812
SHA17d54be0b9f9f08966935e541b70362e16b155633
SHA25661fe0b992bc63b33ce360ff56291f69a3ea0d42dc55673ec642c9cb9c7942567
SHA51246a1c6914008fc24b958e1df2601231ae3484a64664b47b199248c9861e4b32b4089d48cd745938093f092074eab6ad51c40306a76cd25c440e065169d88fc78
-
Filesize
512B
MD596bef05c14574e87b26a730d0776aace
SHA1adeb0c5ad042187aa740f378536c656fd2d5a781
SHA25656c40385732a6124e45f8583fdbb176c94298bdfce805234b5afa2773601c950
SHA512ff44e1155d1a7536f88b2b1ce593d914e4e74f1f15b3bf7bc3b0999bf9da6988344a4fd29a7a80388659ebff9c2685c79e19c3fa4290b7e5d5df56544ce3f2e6
-
/data/data/com.alightcreative.motioo/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motioo/com.crashlytics.settings.json
Filesize720B
MD5b273f8d2eab28b49dd08401e58634a89
SHA1e00ea9eb90974b7210099cde72e9932707ff32bd
SHA256c702728cee64817ba6d26b6eea3ddf79b20bc994bf924203fbb4e0fcb932cdc1
SHA512e735570fee34a296000e91ce70df9b28bca125faa78b02652e3e9ea90ab26535d7643e34d2fdc1603068fc963d2bd9c5c49cd1c819e774b8829e1625126b2b38
-
/data/data/com.alightcreative.motioo/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motioo/open-sessions/65AAAACD002500011143FA091E47196A/native/app.json
Filesize237B
MD588b7942ce309f9bc91651f69dc549c4b
SHA17e22848e85d89591ba95b76cc0f9c00e059759f7
SHA2567d1146ca518f89f020c8fc25e790c679f20d9a8cd1666c89ca23da10f1830c14
SHA512a24cd6664571c4bccb694301bf667c617b3b1a969f21b873338e753bb13e277b38c6ad3a4d7d05e45ef73ee2e2d874ac8c1c756315154491be8741f72ddeb297
-
/data/data/com.alightcreative.motioo/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motioo/open-sessions/65AAAACD002500011143FA091E47196A/native/device.json
Filesize193B
MD51cd7dac218f14887d69c38d27173c805
SHA1c688688fd0836da0010b8177bbd27520b9e25f0f
SHA256ba39dc14a7e15d58fe090a1ac5f1c2d745290b293a28ea958fcdfa63400244a4
SHA51285d11c9073425e343e587f1f265f04366037dff4ffd600dac3b9c7b74a0ce623607cc0631c6802ca27e6ac2d62e9f93846358bff6b6a506c89747721ed7daf6e
-
/data/data/com.alightcreative.motioo/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motioo/open-sessions/65AAAACD002500011143FA091E47196A/native/os.json
Filesize56B
MD587e2b9d6edc06545b88235933e703881
SHA1b29448a47c87bfe3a59286e3cf4e02eb72581a7e
SHA25677b886b74dd48e22effd172c38ee914ced97247f4516c319f09cb8c9ebce4c7a
SHA512ccccd682e14a485c8c8d13ca0105d196d00fe02bed941d939154a199c14e741eac6522f378f509ed14a52efd38e479930ae223f6f317a35b0787d82e553db3a6
-
/data/data/com.alightcreative.motioo/files/.com.google.firebase.crashlytics.files.v2:com.alightcreative.motioo/open-sessions/65AAAACD002500011143FA091E47196A/native/session.json
Filesize127B
MD59ce1eadd71b0e35fd8b21fc02b03fcf2
SHA1b592d734864a7d4d9bfb4319a0fe0b00e24ffa1f
SHA256181457ab63e2b4e3d1b10cecc6038922cde71523388676dd345c8b68d1520afe
SHA512a02362ee5e2ec501b188cf7fa8679fd14f5325446313bd4147d8b594bf4e21a3d51f86a00f4353e8ff3bdfb2d626476541b3931630128e187a5828e1095aeffe
-
Filesize
90B
MD576d337a197a1e3c933fc751f8cd17913
SHA1fd5a804b6f4525fcb006d06edd62793a800f82a8
SHA2567a408816951d65404e99e8da84c2989fad6f09573223fc2f10303b8c9ca7d009
SHA5127a19a27d772604761485a05b4907e32bc58470b97a42580ab8fd1ea0486fde7c75f277f9d31db8002c8b38d1fc01fcfe7433c3ee682110dc8aed9fdf9d7e095d
-
Filesize
562B
MD54c5f4130d77c2d9ae679017151575441
SHA14040d9509993f874d19685f1273583fdf583d1ae
SHA256cd081a44a32c8c0718f576f8058d3d0dba797c66f0b525cee20f121fc0235650
SHA512c743d7524616dd7ecdf421dbc09b09f0a47ebb70a768c42685003a93aa3c1bd402d269a1bfabdb2e5a9db967993f7b96788a8f20db1a1d91f5047c11cb9bb268
-
Filesize
4KB
MD50eb157e1a86d4d00aa601dd2f6ff3ee3
SHA1fee434f784e73cc7916322e949f727caf8363102
SHA256b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
SHA512b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8
-
Filesize
512B
MD5d779fde5e4c194fa87a43ac649c315b6
SHA1ff587d432462dcd1b44ad23df115c2c9301cecd7
SHA256613765d84972fbf10954205f51982d68e3fd2684b6375b84b7b83640da6c7376
SHA512332f316dc889c163a35d39b0903e1cc4cac54d66825d578518d73a3d843c745f60d27e138c7ae0a6831f02d12286db5195debc00d665963c7fc1297095e51052
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD596e7e12e2d2b3e2b08f57492ba4e90fa
SHA1505aadcd6c4c303666020bba9a05d713aa0ccb0a
SHA256ee9be22012e8c01d1cc64a7fe89381fcca9a16de409c0b7a844a4d60e9b80f03
SHA512603e0f708fd920f4bda9fd4a5ef638809575ebc8d24d74ed1f1ee4b75fef7db4f24304e3a3ae83ac0582a4ba20371e9f367992966ae6947bc67eeb9a04e11b14
-
Filesize
123KB
MD53056e1bdb7d4e19789d0319eff484bd0
SHA16791ae47aa9466fe0bca27ad6643f846853bbee4
SHA2568e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
SHA512c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658
-
Filesize
25KB
MD529469324e59dfcc052f24b5af4e7b2c4
SHA110c1e17ac6f598037bb51baa07945663645de4eb
SHA2569195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
SHA5125e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2