Overview

overview

8

Static

static

6

a996f06e75...ae.apk

android-9-x86

8

a996f06e75...ae.apk

android-10-x64

8

a996f06e75...ae.apk

android-11-x64

8

Analysis

  • max time kernel
    149s
  • max time network
    151s
  • platform
    android_x64
  • resource
    android-x64-20240221-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
  • submitted
    27/02/2024, 16:13

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    a996f06e7525c43b6e6e19d4186be3ae.apk
  • Size 263KB
  • Sample240227-tpjxtadf35
  • SHA256 420d5f544b73f52dba333c92601576f54b93be504bff774a745f2939d9453eb8
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
discoverystealthtrojan

Malware Config

Signatures

  • Removes its main activity from the application launcher 1 IoCs
    stealthtrojan
  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator. 1 TTPs
    discovery
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.okasa.ttdobgwz.fyopsjqtjg
    1⤵
    • Removes its main activity from the application launcher
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5021
  • com.okasa.ttdobgwz.fyopsjqtjg:RemoteProcess
    1⤵
      PID:5060
    • com.okasa.ttdobgwz.fyopsjqtjg:guard
      1⤵
        PID:5436

      Network

            MITRE ATT&CK Mobile v15

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            fields.jar
            • Path /data/data/com.okasa.ttdobgwz.fyopsjqtjg/app_tfile/fields.jar
            • Size 138KB
            • SHA256 e900cb4c3fe9d8f45196a7457e9645c65b0f3cde820f4161950252cff67a4d97
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            fields.jar.cur.prof
            • Path /data/data/com.okasa.ttdobgwz.fyopsjqtjg/app_tfile/oat/fields.jar.cur.prof
            • Size 369B
            • SHA256 51491488aa5999f64c4d74c50676559497e9890b2a3978cdc8f07dc782e945ec
            • MD5 SHA1 SHA512
            Submit Download

            tbcom.okasa.ttdobgwz.fyopsjqtjg
            • Path /data/data/com.okasa.ttdobgwz.fyopsjqtjg/databases/tbcom.okasa.ttdobgwz.fyopsjqtjg
            • Size 12KB
            • SHA256 cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            tbcom.okasa.ttdobgwz.fyopsjqtjg-journal
            • Path /data/data/com.okasa.ttdobgwz.fyopsjqtjg/databases/tbcom.okasa.ttdobgwz.fyopsjqtjg-journal
            • Size 512B
            • SHA256 0c3a341b5e0a4a138354ef2c81b41874c631210e113a6773fec8002086635184
            • MD5 SHA1 SHA512
            Submit Download

            tbcom.okasa.ttdobgwz.fyopsjqtjg-journal
            • Path /data/data/com.okasa.ttdobgwz.fyopsjqtjg/databases/tbcom.okasa.ttdobgwz.fyopsjqtjg-journal
            • Size 8KB
            • SHA256 49c015e57985428f79c3eec6cf00ee8099adc3db814d8fc5b5ead90ee73aeb2c
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            tbcom.okasa.ttdobgwz.fyopsjqtjg-journal
            • Path /data/data/com.okasa.ttdobgwz.fyopsjqtjg/databases/tbcom.okasa.ttdobgwz.fyopsjqtjg-journal
            • Size 8KB
            • SHA256 1665a9cf7508f7ba3b024e2eb02abd70b7e45c1eff440d88100f417f84e38379
            • MD5 SHA1 SHA512 SSDEEP
            Submit Download

            fields.jar
            • Path /data/user/0/com.okasa.ttdobgwz.fyopsjqtjg/app_tfile/fields.jar
            • Size 281KB
            • SHA256 52132037e9b950a9cb48d6374ee2c6747a6bfe776e13a726395771f1b40ee9da
            • MD5 SHA1 SHA512 SSDEEP
            Download

            sdsid
            • Path /storage/emulated/0/Download/sdsid
            • Size 4B
            • SHA256 fe675fe7aaee830b6fed09b64e034f84dcbdaeb429d9cccd4ebb90e15af8dd71
            • MD5 SHA1 SHA512
            Submit Download