Analysis

  • max time kernel
    10s
  • max time network
    174s
  • platform
    android_x64
  • resource
    android-x64-20240221-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
  • submitted
    07/03/2024, 17:38 UTC

General

  • Target

    app-m1-release(0).apk

  • Size

    1.3MB

  • MD5

    d93af81772a1a40a389ec40dd70abb72

  • SHA1

    fa9beae37419550c32cce6d228f25a325ac51b1f

  • SHA256

    54bda9bf43b5b56445d4e1ca2a6c4f333ccb0537c78badc1f73f951158739390

  • SHA512

    edc24122a65ef1d864c9b671ba15a2180a832962f2a92548cdf50610c10f2455fc4c52d664355aee44185b839a5132d69e1cfaf67a2c9402669379e24f58ec09

  • SSDEEP

    24576:Y1vlkRgI+aDFrKHDKDshM1PxhbyBVWlzVOLcG6yp1ff9RauMIWaKsk:YVyqIbejGsq1zby7WlzIQGp1ffrMIWN

Score
1/10

Malware Config

Signatures

Processes

  • com.xinkuai.nukllpack
    1⤵
      PID:5175

    Network

    • flag-us
      DNS
      ssl.google-analytics.com
      Remote address:
      1.1.1.1:53
      Request
      ssl.google-analytics.com
      IN A
      Response
      ssl.google-analytics.com
      IN A
      216.58.201.104
    • flag-us
      DNS
      ssl.google-analytics.com
      Remote address:
      1.1.1.1:53
      Request
      ssl.google-analytics.com
      IN A
    • flag-us
      DNS
      android.apis.google.com
      Remote address:
      1.1.1.1:53
      Request
      android.apis.google.com
      IN A
    • flag-us
      DNS
      android.apis.google.com
      Remote address:
      1.1.1.1:53
      Request
      android.apis.google.com
      IN A
    • flag-us
      DNS
      android.apis.google.com
      Remote address:
      1.1.1.1:53
      Request
      android.apis.google.com
      IN A
      Response
      android.apis.google.com
      IN CNAME
      clients.l.google.com
      clients.l.google.com
      IN A
      172.217.169.14
    • 216.58.201.104:443
      ssl.google-analytics.com
      tls
      2.7kB
      6.4kB
      12
      9
    • 142.250.200.46:443
      tls, https
      857 B
      40 B
      1
      1
    • 172.217.169.14:443
      android.apis.google.com
      tls
      3.7kB
      7.9kB
      12
      19
    • 216.58.212.228:443
      tls, https
      430 B
      40 B
      2
      1
    • 216.58.212.228:443
      www.google.com
      tls
      9.6kB
      10.5kB
      30
      37
    • 224.0.0.251:5353
      3.7kB
      11
    • 1.1.1.1:53
      ssl.google-analytics.com
      dns
      140 B
      86 B
      2
      1

      DNS Request

      ssl.google-analytics.com

      DNS Request

      ssl.google-analytics.com

      DNS Response

      216.58.201.104

    • 1.1.1.1:53
      android.apis.google.com
      dns
      138 B
      2

      DNS Request

      android.apis.google.com

      DNS Request

      android.apis.google.com

    • 1.1.1.1:53
      android.apis.google.com
      dns
      69 B
      109 B
      1
      1

      DNS Request

      android.apis.google.com

      DNS Response

      172.217.169.14

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.