Analysis

  • max time kernel
    150s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    03-02-2024 03:55

General

  • Target

    Softbank2024.apk

  • Size

    2.2MB

  • MD5

    7a896f552bb36ba7dda38f6aa1bbdc5c

  • SHA1

    269cbddaca3dccc3f06131a85693848277a677d6

  • SHA256

    1a992da42015f67bc8125cb38471a93d743074f7a82ffa09e90246696036f025

  • SHA512

    fcbfd5e0c1738488f3acd32f10124d5044faaea17b4a29f695a4b22e478e08cd1a08032838eb2c244119d21eaa85b0eee367eaa5993e9223d859c4474400f0ca

  • SSDEEP

    49152:A9xuyuiWEVtfYp0e/0HgKc+ITit05gQz0fr5M:A9xuyRWEVtQp0m0HkTit0/0fr5M

Score
6/10

Malware Config

Signatures

  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • knseaqpwmb.hecltndnbpizmk.dsvglphjwt
    1⤵
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    PID:4532
  • knseaqpwmb.hecltndnbpizmk.dsvglphjwt:arspdqqo
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4568

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/knseaqpwmb.hecltndnbpizmk.dsvglphjwt/databases/tray.db

    Filesize

    28KB

    MD5

    37c245b59abad825b247f2468346471d

    SHA1

    a9233e8cc3410cbb4dec683bfc079129c7d51603

    SHA256

    79bd561e3cd34de6d8cafca82601e89e7310a8818be203ae9bff5bd67e83e436

    SHA512

    217ebd20a536a30652c71fddccb16a25664a94566f19cd48544a266b797bd466eaeb79021977e179531bdd088b9909403bdccecd77421863558b4fc1b7a4901c

  • /data/user/0/knseaqpwmb.hecltndnbpizmk.dsvglphjwt/databases/tray.db-journal

    Filesize

    512B

    MD5

    97caa228359b5636477e9082b861463b

    SHA1

    e96db38b37d36ae12ecf8191fcc7455f0bd39676

    SHA256

    3ff53d44437618be04a04c30833a8b329acc0f8eab442c8a0cc2abda451924fa

    SHA512

    be73456b48e823712ea299cc730ce326f90e49d0fa43198ebf404f6e80da036a2152ad77ea63b4794f7fa9631f686ba80eaa90d3268c84470141f0489ebf63fd

  • /data/user/0/knseaqpwmb.hecltndnbpizmk.dsvglphjwt/databases/tray.db-journal

    Filesize

    8KB

    MD5

    1e59502aa73ad053f97cb059ed492c9a

    SHA1

    e12118e3aa9236b5dd8402adbce8c5fd80953104

    SHA256

    f604fe5ba70d593d264d8bc54c4014fc06bbcad0abd0ba0c394ebac26aca2841

    SHA512

    7c5c25be88d359368d991129db5dcae9e8ee69092a61d6013a35e7bfb8c068d0308e9f7ff970f10f6d7018428c5f2afd1200c8ba5e56951a5f9e04662e4578a0

  • /data/user/0/knseaqpwmb.hecltndnbpizmk.dsvglphjwt/databases/tray.db-journal

    Filesize

    8KB

    MD5

    823ea6b3b3f0f53e6c8b7c07c943311c

    SHA1

    cd805b9232539737e6b6d7bfb11c8ef54089b776

    SHA256

    cc72bc5a83a5f3001d99bbf6d65abb871ef41b9549d218e78fc249e137772a04

    SHA512

    ba11dd9b9a9328a2159140825592c8a8641bdd833a083fb973b135fdb666b0fa33839d89cbd50717dafec707a86fcf3f6b2f1b5c56cf985d3ce9ff3cb2513e51

  • /data/user/0/knseaqpwmb.hecltndnbpizmk.dsvglphjwt/databases/tray.db-journal

    Filesize

    12KB

    MD5

    3394762cd5ba429c03be3c3c3317d94e

    SHA1

    ef07e897ed327af7a9e59ec926de06c5105c76af

    SHA256

    e08fa981f0f56fdbfd69fe416fe2cd8adaaca230344f597a80755082eedf4984

    SHA512

    9ef5a6c07a166a1ae930c936b409b521afec090b4703591fa3017c9696a6a44dce8b78c9eb7bb97befd3861bbc06c08d104d86d2297b431a85ef058c386012ef

  • /data/user/0/knseaqpwmb.hecltndnbpizmk.dsvglphjwt/databases/tray.db-journal

    Filesize

    12KB

    MD5

    65918997938c70f9cb522675041e4228

    SHA1

    0e97c66dce357d2801d11f1c6ad2c7c29d1c228e

    SHA256

    8966fd907f5e9965286d8309d570489e237ebf10ddf019ba16288666554b4d9e

    SHA512

    e24812c7c929096a37cf15310595a032e4b34937bba5cee20e878915029493d630fac710fca07d832e54373d54e9fe7e34f947e6aa5f3a54f4068c510a98efcd

  • /data/user/0/knseaqpwmb.hecltndnbpizmk.dsvglphjwt/databases/tray.db-journal

    Filesize

    12KB

    MD5

    3d2b60c8a2b42f73853f79bdbe04fbfa

    SHA1

    8fa5c74c26846f865dbef81896f949326b3f3d24

    SHA256

    4057d7a1e7ff5198177a838522c2674acb8ccc1ab3b461028918544dab6b4438

    SHA512

    def756b8e070538c9687525580f3b913278fd495eb8c4d90b99eface8d7248f206f4626d2cb2c0403acb7c1b612a0952110cd6df4b2465eb282a861643e342a3