Analysis
- max time kernel
3s - max time network
155s - platform
android_x86 - resource
android-x86-arm-20240221-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system - submitted
22/02/2024, 03:47
Behavioral task
behavioral1
Sample
appปลอมกรมที่ดิน_DOL.apk
Resource
android-x86-arm-20240221-en
1 signatures
150 seconds
General
- Target appปลอมกรมที่ดิน_DOL.apk
- Size 11.9MB
- Sample240222-ecnynsbc6x
- SHA256 c6213e451e4a23b7725143edd1c725aa748fd9eb32e33304b4f87d63c19e0504
- MD5 2e6530985058179a8adf2bb1e729d516
- SHA1 1ac24292df9fb97a07472281378ca460d3a419a0
- SHA512 99c9b1be06f063227d8c6e84056ada5d44284bcceafa22ff15895d1281f042b4d2452d0fcdc1ab4a5ac285c86d53c75182c95db83794685e1678dc3a64dfb3bb
- SSDEEP 196608:laQ8jJjB6zkZHOmwZuXJi5J8qUN5+C8uBbXxm1B10wDQCr8wGj6yIkjF:la/NsSa38qUN5Dhg10w0wGj0A
- MD5 SHA1 SHA512 SSDEEP
Score
4/10
Malware Config
Signatures
- Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal nrmahn.kwqzdrb.nahh
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/nrmahn.kwqzdrb.nahh/no_backup/.flurryNoBackup/installationNum
- Size 100B
- SHA256 af786139041ae9e72b10a0a94229cfc417f840048f25494600e4739a09b0b51f
- MD5 0d92e165f4966fd669b1c63282fcc207
- SHA1 c34e389b4b817c7e376542571f0a7ffc9c70f422
- SHA512 0af24cf80d8b48281299815f454f2cdfb86c235011f1410da105b9d48b2c51e3bf4af52607c99c5f1c5ec892d7d0ee5a89209a232517479a4232f47edc2bf983
- MD5 SHA1 SHA512