Analysis

  • max time kernel
    7s
  • max time network
    140s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240221-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
  • submitted
    04-03-2024 14:24

General

  • Target

    b25a4b632098db2aa0a075bda3958b27.apk

  • Size

    1.8MB

  • MD5

    b25a4b632098db2aa0a075bda3958b27

  • SHA1

    224a0b1624711700980e4c0a3c3d965f42d38803

  • SHA256

    0f548db33ca237a4b6ccc8c3ce9ea5a1f2470f5ef42222474131f66bb3c4660e

  • SHA512

    9d33887c8f3a7d70e726970b942b37e6703f4bad71465170e549bbf653a2b3f551ae2227238749d62d012810a3dd02ff0579fe9778dc1301f88a08532b3b2c37

  • SSDEEP

    49152:vBwF4kM9m/FBATB/9aPWAWyLD93t/xenC:vvm/MTBHAWyLDJhgC

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs 1 IoCs
  • Removes its main activity from the application launcher 1 TTPs 1 IoCs
  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.coderzheaven.englishtenses
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    • Removes its main activity from the application launcher
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4447

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.coderzheaven.englishtenses/cache/1886048100/995207931.jar

    Filesize

    203KB

    MD5

    b07ffe0320cf0e17d339c0acf602827b

    SHA1

    17ba68e36b05031b4347f9944ed5c7aca7a9ab49

    SHA256

    3316464c72617dd76bd25c2b9317a933df16e0a6106ccf04f784d00f89f93300

    SHA512

    ebd788c85442b723b9f6f48597b8388ee8ae655afb30cf53573e52a89563085b523f8d24f3aa2ceee80b5fa744a2984033a2a7731de2020b0606b289b3be07e1

  • /data/user/0/com.coderzheaven.englishtenses/cache/1886048100/995207931.jar

    Filesize

    1.0MB

    MD5

    49d1df425360d08325642cd98a6ed502

    SHA1

    45608a5882909560ba790c78132e868890beb2f5

    SHA256

    fba2086e98188153fd7fad31fea508b19d454a74314a532c5f287fa374bb6032

    SHA512

    4ec0c2d834e4ebf8807214a2f7de12e4d02be4fa22b0b32faac965859ab56488772db36d72320d77aac4f8daa56fe58237f09d60c4830d862ba8243ec2a9750e