Analysis

  • max time kernel
    147s
  • max time network
    137s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    23/02/2024, 12:54

General

  • Target

    7df8648aa93d4822f57240945bc8c0e9f9061ede4bf222648ddaf447aafc19f4.apk

  • Size

    1.7MB

  • MD5

    0bc239b57973aa3ff5ca773d668c4383

  • SHA1

    f877aa3a3c7852a6a05d1cb0d9124d42fb3c8a02

  • SHA256

    7df8648aa93d4822f57240945bc8c0e9f9061ede4bf222648ddaf447aafc19f4

  • SHA512

    36df91e92eb99d3f921c9f16842de71943960bad156fec79017559396b8356d827e0b954ccda89bec9b04b7d00b664aef29a027552157f1d1f449373a58fb825

  • SSDEEP

    24576:EWa7YCj6w/VSK94BU3wsUStw9exC4IfIBPGQc3HI4Yl0cEjha:E116w/UKhw4HxEfPv37Yl9Ej4

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator. 1 TTPs

Processes

  • com.maxparking.nearme.gamecenter
    1⤵
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    PID:4576

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.maxparking.nearme.gamecenter/files/d2b72774.dex

          Filesize

          166KB

          MD5

          b16369ae85a76126f557b89c3b59e842

          SHA1

          7a69b5c0c61db28e42521470334215ea46eea32c

          SHA256

          e5f849c0f69688dd26c2d46fa4fe175259cd6d2a6b189c97b50100c8d45b7608

          SHA512

          30ed6cd8eebe1681908d3f822a1e7144fd083d92f8b5cbb6b590bef2e6e39d5880ccad00bcaa96f63bf088e6d4cc1d87dbb437f87f6f736adfaf02142ec2e925

        • /data/user/0/com.maxparking.nearme.gamecenter/files/d2b72774.dex

          Filesize

          732KB

          MD5

          746e8da085839c1e406dfc7831495fdb

          SHA1

          b0f552bfd05b8ba89585b47c9c748f0e4154e03b

          SHA256

          d750e3ce155ad136780cbf636ad9fdee6ecb3c2948fc34c01291dcadfcdfd508

          SHA512

          d32e72a74e48f81da6315dfd7447ff65324114243011eb1d036f6adfa4a50062c584abad366faa370fef80097b993a57ded11df7365655d94779915d7c45e028