Analysis
- max time kernel
3s - max time network
151s - platform
android_x86 - resource
android-x86-arm-20240221-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system - submitted
22/02/2024, 03:51
Behavioral task
behavioral1
Sample
appปลอมกรมที่ดิน_DOL.apk
Resource
android-x86-arm-20240221-en
1 signatures
150 seconds
General
- Target appปลอมกรมที่ดิน_DOL.apk
- Size 11.9MB
- Sample240222-ee1p9abc7x
- SHA256 c6213e451e4a23b7725143edd1c725aa748fd9eb32e33304b4f87d63c19e0504
- MD5 2e6530985058179a8adf2bb1e729d516
- SHA1 1ac24292df9fb97a07472281378ca460d3a419a0
- SHA512 99c9b1be06f063227d8c6e84056ada5d44284bcceafa22ff15895d1281f042b4d2452d0fcdc1ab4a5ac285c86d53c75182c95db83794685e1678dc3a64dfb3bb
- SSDEEP 196608:laQ8jJjB6zkZHOmwZuXJi5J8qUN5+C8uBbXxm1B10wDQCr8wGj6yIkjF:la/NsSa38qUN5Dhg10w0wGj0A
- MD5 SHA1 SHA512 SSDEEP
Score
4/10
Malware Config
Signatures
- Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal nrmahn.kwqzdrb.nahh
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/nrmahn.kwqzdrb.nahh/no_backup/.flurryNoBackup/installationNum
- Size 100B
- SHA256 2b786516454a1de7557076a47737a7d8152a6518dd52f0b4ade3822501906592
- MD5 ec3c666622842e81032c478291322d87
- SHA1 7869da9e5f04eb341c1722a5dcfca6b721888c25
- SHA512 1b1b149a227d3eed1a45f6d8e1bb3a3abfc02d7e4ac9dede06b2597e67df45d327fabf71c4a77262b5512381677fc64856486beb52b14e552e7671e8ea2c38bb
- MD5 SHA1 SHA512