892cc593ffefa01a1f597cdd248d708bfd13768890295414a9a55e37938a4464

Analysis

max time kernel
103s
max time network
137s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
03-02-2024 10:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Yellow-app-release.apk
Size

10.8MB
MD5

27317e8a5d860ca1f76c2692d1f0a7a5
SHA1

e0cf8c4f6c36df72a5a105b02051894a406e7c6f
SHA256

892cc593ffefa01a1f597cdd248d708bfd13768890295414a9a55e37938a4464
SHA512

a7eadf8ece7b80bd8a03d0f419604ed46e86aff03fa7951cd4e85e587a925250f01944aa48f7314a0a331e53845a87b11bc8c9cfa47e4540e0911fc7e89fa20b
SSDEEP

196608:ShGSO9oeBwHVceul4YrLYG28HUNIaTYu/y1LHqweT8uyOeAO:ShVmoRcfGgLY/Xi+gm5T8Hd

Score

8^/10

banker

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs

banker

description	ioc	Process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.test3f.video

Loads dropped Dex/Jar 3 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.test3f.video/files/audience_network.dex	4494	com.test3f.video
/data/user/0/com.test3f.video/files/audience_network.dex	4631	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.test3f.video/files/audience_network.dex --output-vdex-fd=126 --oat-fd=129 --oat-location=/data/user/0/com.test3f.video/files/oat/x86/audience_network.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.test3f.video/files/audience_network.dex	4494	com.test3f.video

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.test3f.video

com.test3f.video
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4494
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.test3f.video/files/audience_network.dex --output-vdex-fd=126 --oat-fd=129 --oat-location=/data/user/0/com.test3f.video/files/oat/x86/audience_network.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4631

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.test3f.video/cache/image_manager_disk_cache/12bf358d6cdea5d273e27cd573ec80266819c372b2bd877d3bd1a352ad530f77.0.tmp

Filesize
27KB

MD5
446266b076fc21c1b033cb1a1e4ed6c0

SHA1
2cd9b7f3f8dff6d2bbb5d88cd682162d3b878f8b

SHA256
19d03671321121a11386a6d919213428933e90911c4f7a3623a7bb44c7c88491

SHA512
f148a90dbb08249929362253c1d324bc245a5d25f2cb10481fe00e4161e69c5f928361b1272731a085a8c3de9a54cb2ba2752da11821e35d10be0dc2fa8afc68

Download Submit
/data/data/com.test3f.video/cache/image_manager_disk_cache/de7c1d460963ccefac143f660c6f50b4fc855b37e66e9a937dfcb5252370cceb.0.tmp

Filesize
108KB

MD5
fd9131cc91d92c7d626f446370dba8c0

SHA1
e2840862c075c8f1eed8d21531ef66e887d7e0fa

SHA256
8e734da8c0a90edb671e84b72d5bbad1b57c1562802706c3f09363e22cb41a5c

SHA512
d30c94a80990ddb87e35e44ba2ba6cb7359188c7609ce6c33814e3d682c3debe9801872165cebe960c3982f36d291b212add5079f5d4ee32149493b6d48f52a5

Download Submit
/data/data/com.test3f.video/cache/image_manager_disk_cache/journal

Filesize
71B

MD5
231dfcab7a7ff542e9e35e35d214fbe6

SHA1
01751456ae0d0b2c013344007637aaa6210d1cb1

SHA256
67fe45b27de74a792260b0a304b05d4837e9537beebf3fba1eef73761168d9c5

SHA512
5a4cd8001d6ce88ae277b86a8c4bb23c0eaa95760dee3fc597c7357d932fb45fe4376aefa678ee9c9465caae19619c0bdbaf6f17983e18c40ef50fee5eed8f63

Download Submit
/data/data/com.test3f.video/cache/image_manager_disk_cache/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/data/data/com.test3f.video/cache/volley/17279269871015776643

Filesize
89KB

MD5
dc19a6ebffd23f1b2ab2fb6541484dc7

SHA1
6302733755867097976c21514643785211121aa7

SHA256
123cdd13023d5d09d7f4684927ea57e5b2bb55693fa886c50394c56da5f86363

SHA512
b8a45219111111530b76f4add9b962083bfc9fea76d69b6adf340ed400ef5d15dec4500f7d7a13a34cd614c7399e7aaa0da81a03ab2bba4798fd1ebd879a5aa4

Download Submit
/data/data/com.test3f.video/files/audience_network.dex

Filesize
329KB

MD5
f9876b2c8c4c47ec53570baa3163c502

SHA1
fe367de2a67e6797471162e1c1bb652ca8351be0

SHA256
9ce282c68f08ef391e624566aa8d892515701bd6b0beb4c641cd37a89ff63f0c

SHA512
f543b9958854ad225d2e1787eec35fac11aab4242a542511f6bf29fca56b09627b3ec7dbbd3222f56184972e66a22b5ad7dda56de9d39b0f925b436c3847f544

Download Submit
/data/data/com.test3f.video/files/oat/audience_network.dex.cur.prof

Filesize
377B

MD5
ac661e0a51131fa0f065fd03ab18af50

SHA1
1036e7828cf5c454d9a6a114efb5376648c091c9

SHA256
8d92e9f363bd7cd12ccbf5110e55f116417a44e747def6f1bcb128d731627a0b

SHA512
f7a202a909cdd5ff7b5d78e167249e858ad20b6e984a95ca94a4561083040403f834c409df246554de06638f202b48ceab04450d2928214d7e6017314cfbe62e

Download Submit
/data/data/com.test3f.video/no_backup/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.test3f.video/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
af66a5879d687b97eda5250d83b66052

SHA1
5604e63f9b0a5f9fd426328e74dcbf35703ce494

SHA256
af4337263efc97e960e3eebb45f2cd7a071a290c2d19c04ed350c4b8b56e197e

SHA512
fd03165110b61b84fe0b9e784a2dfec1cf1af030d578daba5978f587c03cbc96bc28018fb171152870f377a43b378c22a5ff6d4c4276c71d8f80997991cbb493

Download Submit
/data/data/com.test3f.video/no_backup/androidx.work.workdb-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.test3f.video/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
25e9624de5bd0e7d76f90cce34bef851

SHA1
22704f364f673e6ed49e465586358d0a9e68a499

SHA256
6517a415c72eda1202313d3210503bedbc79bdf0bfd1d7ab0981d7e512ae33d5

SHA512
72bb666510ca195531a671efc3870fbf0649cd10bfcfbf340b5e02b0ceb805c107d5abdeeaee4f0a370812cdcb964252aeacfbb6a214d0e76090fb4cc50c5677

Download Submit
/data/data/com.test3f.video/no_backup/androidx.work.workdb-wal

Filesize
120KB

MD5
7b7484e84499683f93440f20abc06b67

SHA1
3fec8f4a14498df2ba13446d9983c3a5121635b1

SHA256
c1dc7b8ce792feaaf2b825269e25f657a6305c7e714ce83bfa324a98e5eb697a

SHA512
e9f23a64da7322787dd20a3a2bbafad00b5f2dd7a97b40de428b87fd2d18fd89e245d4cd98aa22762d8cb88fac32f020d5e5525971bab2842dec3dba6862ee75

Download Submit
/data/user/0/com.test3f.video/files/audience_network.dex

Filesize
3.1MB

MD5
7a1ef0317c0ec7ce434899af1a537aa7

SHA1
905084f065b9c35ef15f04657bd6c560ee42d50a

SHA256
5b6d9d6948dd0fb84712c2f6535593b8bc12b7ca152ccef7d6601c0f040b6deb

SHA512
5642a88425742400607474d449c61bd10a6d608a970d96028899a3a3960428a3b5b50386e29e097285a706b6aa47d9b32f5a86b3d40d030f0f52f70aaf2dc4aa

Download Submit
/data/user/0/com.test3f.video/files/audience_network.dex

Filesize
3.1MB

MD5
fd44dfb4a78e95e0e539be84401d7424

SHA1
e51a2398c2933424b4512f305cca78a87a9b1d52

SHA256
aee55a7184da7aa2446dd175a0940573daef7e4d7c4c5645bc10ed317dc57122

SHA512
d0ecbc334a5169c6e15a3150eeb65ee3d92e49deb8a0d55aa3d2dbefa7addfd52de26ba960a5f60e82753d3ab23dc31115791414bcf7e898ed7c0ae5701f997a

Download Submit