b342707d8cc963f826284d821039ed1766d99c8b8091bd82821d61593d388cb0

Analysis

max time kernel
152s
max time network
151s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
13/03/2024, 18:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

b342707d8cc963f826284d821039ed1766d99c8b8091bd82821d61593d388cb0.apk
Size

1.7MB
MD5

7d18cc489cac4fd6b719de271bbb5465
SHA1

c1f6168943a1cc1be81472abb313e905a8be9226
SHA256

b342707d8cc963f826284d821039ed1766d99c8b8091bd82821d61593d388cb0
SHA512

3ff50b6ee01464dfeaca7fc58b4cb54dbf60a8500401d9071751e63bfbb7bc9cf82635b6b2f1789cbcb290cac2da83684e1f49157c4d54e4d43208ef3b79225e
SSDEEP

49152:gbzv/J91CYa14+es2lDjyfpsRIFYqv3a01Ejek:gHnaTNYDOfOqFYq/j1Ejf

Score

7^/10

discovery evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.candy.heroes.mania.nearme.gamecenter/files/707d1b8d.dex	4572	com.candy.heroes.mania.nearme.gamecenter

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.candy.heroes.mania.nearme.gamecenter

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.candy.heroes.mania.nearme.gamecenter
1⤵
- Loads dropped Dex/Jar
- Acquires the wake lock
PID:4572

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.candy.heroes.mania.nearme.gamecenter/files/707d1b8d.dex

Filesize
1.1MB

MD5
4d16faa5f39f09b64ddbea9d375ebfee

SHA1
58d8285f82920537b2bc5aff7af4617decc7b5f7

SHA256
44dc3366840ae9938b616b16011af41184aa055190c0093a26a42e94e238be24

SHA512
9c06343ac092f103d55a484d75a9b405d76ea8cbecce2ab7207f36f810fdec0165961e5d0bab8a94fa2fb939ca67a444f0ba3d78b283110aceba9c7b1ad8464a

Download Submit
/data/user/0/com.candy.heroes.mania.nearme.gamecenter/files/707d1b8d.dex

Filesize
2.7MB

MD5
fd0546e55142ec240677d863529577c6

SHA1
6b66184b1c2fbe02b72ad45be32a1f4df07c733d

SHA256
482e81debb93a33f6fe636d918c4fd5f29267f9c89d322a4fe9a07cb4be218ae

SHA512
3db0f7a070af803d57fe1f147ad7bb4812e4a63a35d940f0a758f1c7627c3f5fe2ac725cba9a3e2f77b11fb87f2df7b7881dcff125f39f8e16e9dd0b63feb209

Download Submit
/data/user/0/com.candy.heroes.mania.nearme.gamecenter/files/o

Filesize
678B

MD5
ea065cb2d71d033d5983146daec0590c

SHA1
98a49a2d9dd96bb33ad1e2cc2df6affa23a3e1fd

SHA256
87dead4b01525547fc32a1879970a585277c6c743990f8c9d415b05a7e0b1027

SHA512
deb64a36812b83c5d9a4f036014df17cd352b049d1a3c200a186f8bcaf7aaea7915c0d6840369ab25f209b6fb58e63e86f541fa13ec4d445fb08a7071eda154a

Download Submit
/data/user/0/com.candy.heroes.mania.nearme.gamecenter/files/u

Filesize
229B

MD5
930dfa4b9604b615e6ff00ac859b879e

SHA1
684dde2d10309dfdc8d7c05c4258573bf9baf795

SHA256
80fb9a6527b52d74c9ad0343035da56708b565acbcba6d1c31259adc5f01f8b3

SHA512
d9eda38540cd7550da13b4238b4fa95630757a7054fd9384b580feffec858d26d94b63b0ff42426e7211700472ba677d67c8ac7eeb471747415c965b0f292220

Download Submit