Analysis
-
max time kernel
124s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
16-02-2024 16:59
Static task
static1
General
-
Target
d4701cd54c4e3ccdb639b870592bac25b902b423a8a6d49b902bd16565082980.apk
-
Size
14.0MB
-
MD5
d750a3b03f2c123046e00c080d696d61
-
SHA1
40b12e6f05fe59285efea2965e9ec35fa6f7f44a
-
SHA256
d4701cd54c4e3ccdb639b870592bac25b902b423a8a6d49b902bd16565082980
-
SHA512
a0d2c44661e7684849a97fcc33fb3ec1110b89d52a2a6f3cd5fb96f92d4971b1922d9f0e25b642429cdcfc57f7d369b0f9e2ee6b11ee3d6b9c6abc1e84faeff5
-
SSDEEP
393216:VR/fa9mmImdpEGWomhjartBmv+caO6nAMSghbKsOuN7NL+b9:fim5Q/lmhIXO6nJSibKsOuN7NKb9
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
Processes:
com.indiapsmartcredito10.smartcredito10description ioc process Framework service call android.content.pm.IPackageManager.getInstalledApplications com.indiapsmartcredito10.smartcredito10 -
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.indiapsmartcredito10.smartcredito10ioc pid process Anonymous-DexFile@0xe80f6000-0xe80f912c 4250 com.indiapsmartcredito10.smartcredito10 Anonymous-DexFile@0xe543e000-0xe5442008 4250 com.indiapsmartcredito10.smartcredito10 -
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
Processes:
com.indiapsmartcredito10.smartcredito10description ioc process Framework API call android.hardware.SensorManager.registerListener com.indiapsmartcredito10.smartcredito10 -
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
Processes:
com.indiapsmartcredito10.smartcredito10description ioc process Framework API call javax.crypto.Cipher.doFinal com.indiapsmartcredito10.smartcredito10
Processes
-
com.indiapsmartcredito10.smartcredito101⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
- Loads dropped Dex/Jar
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4250
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
706B
MD5de224ede1b0416212ff729ea80007e6c
SHA1f38b6b12a9595ccdc000065141ee6bf774e80ac0
SHA2568780fe9e7170a6e9a6052507a7916c4a0be2df7a3c95b43e046b6c1021969263
SHA51287b3adde756b7af19ee54fae1b731bb217b9fabc2156dcb9bb75b8dca1fc9e09e7e928f3da877d4e3ad6e67fa5dde510434d320e7b162ee6fff728b0daa746c5
-
Filesize
706B
MD58eaf2dad8ce9f7782c7092b8a5cdc7bc
SHA132bbaf727991f760643786526f8e85cc86682e9a
SHA256d22370197c268e8acf5d01f5cd8a78b1265433735fd9c74c03f14aead8a7366e
SHA5125e2627c79920e9b081414f43464d1e94211d154db4de2cdd1ffb1b8847a67a0c80c587643a0aade540677698c3af3d4f83d0457931494c4d186a69138dff30ce
-
Filesize
706B
MD5a7f5da049e8b2639959f74e1ac3140a8
SHA10a3e69c6d8c6c90189dea96eb3317f58d5b9d6ed
SHA2567fbc37302f3a5e24fa04ed7c6fa5d934cba410d4bc2771bc427ba63474a5ed9a
SHA512b87a341ffa12ff3076dc23cf2fd9273e9df4af8bc561da771de71bf155688a7c40e5d409eaadb79bef974e47796336f08f9d700fd0cd673508aa05343ce67cc0
-
Filesize
706B
MD5a1a58c9979b44b1e89145b9fc9b7a66d
SHA1d5b0b3d700df0ff431873ef2d3064578f84f56f6
SHA256621e035ddc8bbd2fb0cc64db7d67582b9074ed80880caab4c7d5106514a260b7
SHA51289d858099a131fd16723812c54675fd90bdf73044a0b2512d7f25c9831b53344b6e00da3d59d2024927fd478b398c78253d591379ef43d81dcee26c9aaf2d156
-
Filesize
706B
MD56190aebb305f6223c1dee81047996ce2
SHA18f187c6e0a4573b8d1aa7fde1f57d651686638af
SHA256b2433ab73b7bb197d99a7081fd03e00763c3b8b30e76c4d7ddc9d32d2b83491a
SHA51260f4bb89c47b23daf166fe2e55fc81ba54781d0cbe418e9a35c6fc5ce3c2c5adfca9a8c3077678a2ea7af6af4b556b14679e68b9fc5fd9a5f358dbc469871a68
-
Filesize
1KB
MD525d789315d0d9832b5f333ec7cc22839
SHA13f84714ddcf6870446f1cdc1dfdbf8bafc32d0a6
SHA256c1c379eda6517ed983127e0b3f2c7d55456a203ae26c0114e519452388ffd6dd
SHA512dc87337fee4d51ede2d58f34de31e9e59cb7c37356e08b76f893b64e232c083c8054b4b76a6a2fb9e8d7eba46edacfe76a7627bb7599d1ba933919855141d696
-
Filesize
1KB
MD5acbddf43f68711a481156c09cb573fb6
SHA1bc666a73abd776175ff5f6c9d725c3b1441f4b84
SHA2560149213c81b95eb1f693f487e2d632c48d24a8011ce4782db53891d944b26365
SHA5121033df92a297784d5985715cba39b6209a592f82a28dec03e35c38f90ee9fe6aff39f599128dd8b10b33e2e8b6499098df151041ce067838cd4229ae31297b98
-
Filesize
58B
MD50d210bfb2a0e1f1b4c082a6a0f79de07
SHA1bb8ed9e364db79d1d9f2fcde3f15091893222faa
SHA256988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d
SHA512536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1
-
Filesize
403B
MD5f33eecef90859e12a763102540f0d7b7
SHA1924cc216f01e583294dc2e49efea61b80c1f3065
SHA2568e4830a5ef9dfb7caa028bda99af72192264b43e7d92d51457c996cb98f8afa4
SHA512b82350eac4691b90c1fe0a0c73318899f2107b8f55367fd3ffa0b6453827d9288ce6a31af1894a3b23270fc59ca7ff1e2e36d7201569da372b6f54ac7429aaee
-
Filesize
403B
MD5736bea16c011a6c35f1a7e6301e403ff
SHA11fb62044f40647cd8a1d9a3efce900f9adedebe6
SHA256c42e42856501f38b045adc88f785127686279a6669b0b836192633e2606d5104
SHA51229bf96b6bc36d0acb5f15eb2d3fc34342c2ed3e86ce85cc133b08abd045d66aa3b87bac1c671a9897c689530f1f09960025d0fae46b8524973c6212661e5ff52
-
Filesize
36B
MD582ab30d05b44b5a038c785e1ea710f1a
SHA10dbd305b73c5eed126304bd85db55e184648fee8
SHA25632a571cd653aef7e9c0fe44a6238eae59430c30cac9f3d34b720f4d7d5ba72df
SHA5122b2a5b3e6ffbabf329496c8974b2b94a50694a8c03501c3e90ff57b00c917c763fc1212ae890837a2d6a56f491e424f21d9de1bd5388ad0e2c6044fbc0c954c7
-
Filesize
16KB
MD52345c8300fd8f428e5e62023b8f5e317
SHA1505fdf1b53083bf34f253981461086442838ab0b
SHA2569ac47179251fd516762b62548379ae96cb347aa51f23b91ede6b04d1e3a6167e
SHA5125110d12a654232894ee3aa5b891aea67af5496deeb714519b196c750093f693b69e421d9b06972f0bc362706ed6038bb272f738563afb532a612ada38380e09d
-
Filesize
12KB
MD5923d0be36d4b2d5f904e770e4f1224fa
SHA1644c6f081c7edcc6ea28d873ab777f0f697ebebf
SHA25695fc07ad5f08c3f5c2cae161bb10ee6473d4f3799aef84b0d513b8476d392e66
SHA51289925506d4804fcb3e454f778186cd11fea01c0902fac51cdbe8fa44780ebad4f587c38e5edb6ab5354cb6c8ffa4d4cea40cd7b22923b278c1de0756fb1adc2b