Analysis
-
max time kernel
38s -
max time network
47s -
platform
android_x64 -
resource
android-33-x64-arm64-20240229-en -
resource tags
androidarch:arm64arch:x64image:android-33-x64-arm64-20240229-enlocale:en-usos:android-13-x64system -
submitted
02-04-2024 06:55
Behavioral task
behavioral1
Sample
SharkBot (15).apk
Resource
android-x64-20240221-en
Behavioral task
behavioral2
Sample
SharkBot (15).apk
Resource
android-x64-arm64-20240221-en
Behavioral task
behavioral3
Sample
SharkBot (15).apk
Resource
android-33-x64-arm64-20240229-en
Behavioral task
behavioral4
Sample
SharkBot (15).apk
Resource
android-x86-arm-20240221-en
Errors
General
-
Target
SharkBot (15).apk
-
Size
14.9MB
-
MD5
cfe82625d3db2378994554ef7a2eba2b
-
SHA1
e511c4d99bfe0f8b47c32ea0c88b9d1024fbbd61
-
SHA256
6f1eb9c21b026eecfd65459ec4cffe3954d24619010741e18722108d7bacf3d1
-
SHA512
8742aab0ed45a1bc307a715d478acd7f6a37feb0029d4988496d27116c1907495476b4dfc98a997d0d3ae82971e44a20d2677861c0bede98c5806f2b2b78e27f
-
SSDEEP
393216:RPI3MBmacX7X52NWdXJq2TN51XIwUpObrfum7X9:RPIiqgY5xSOLX9
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 5 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.sidalistudio.developer.appioc pid process /system_ext/framework/androidx.window.extensions.jar 4318 com.sidalistudio.developer.app /system_ext/framework/androidx.window.extensions.jar 4318 com.sidalistudio.developer.app /system_ext/framework/androidx.window.sidecar.jar 4318 com.sidalistudio.developer.app /system_ext/framework/androidx.window.sidecar.jar 4318 com.sidalistudio.developer.app /data/user/0/com.sidalistudio.developer.app/cache/1664557424545.jar 4318 com.sidalistudio.developer.app -
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
Processes:
com.sidalistudio.developer.appdescription ioc process Framework service call android.app.IActivityManager.setServiceForeground com.sidalistudio.developer.app -
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
Processes:
com.sidalistudio.developer.appdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.sidalistudio.developer.app
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
10KB
MD5dfb68e70e8eb84d844c9ce623ee069c1
SHA1369e761858a904fe9fb89efcfc9bd3e6e56ee44f
SHA2568ba015cb192f34326e6a46f765c6712d87c3797661541275c84b9a30ee449eec
SHA5120d5f8ff91d3cd5c976cadf774b8d5cd6f276793b9eb9f3d8e7168eae122b0bfcffd833be9762de441d4b52f7bb3eb3850479aea37ac327be9b71910c6fdc566a
-
Filesize
948B
MD5480d07e0214aeb0d51a0d29f6f0a6a22
SHA1bb1a0580bf436ffe93d91756a9e2e646e449be9f
SHA256e9e16898bfb89b40c3e9972f977730473d9b45ed0fdc5cbf868ff0e71f064290
SHA51231c58c4bbeb49cc1ca7c705b829c55b50d980e9248277f9c96f1602fb1e6be8e7e3d3add5d3b002d28015822dc277e21905eec9dcc5685567c36e5ab97444171
-
Filesize
16KB
MD5da4c81d9a032121236a4ed034c0cc9d9
SHA16ea1d3d14a34c4dbe056fc4380747d3970cb3498
SHA25630b7dde5771b5ef3cb6cd033fa2b1618a0674f41f47c1441855f3da24887a0ff
SHA512e61d8e6af3d48cc6e95e34568209bc24308db9d751dd1451538907df0e7caa67e329c4615911b0c6614275f3e5cfb2a8a38288f5818487c5d292c18dd857849f
-
Filesize
8KB
MD552e3faa4f234dea3a36f8dd7ab893362
SHA1206d1746c966200c07fb3c86612463611eb6a7cd
SHA256f467d9aee14b498564222fb1631fde91bb92d6d6523c529b53da63564d868698
SHA51275d16274c0d0e40cc1b5eb565f0e20aa42a22683685e73ef27eccb9fdbc9d4fbb689afaab0502d62b229c572a285c714968d5249cc0aa418711b7bd7fe90ec00
-
Filesize
8KB
MD5cbbb95d32f185c16d00816510157a640
SHA152185162f1d83558d254c1c08a6396239679df24
SHA256d266d25633f24286803cb69e7da454a3d70f2b0bce3e3afa33ef86838bedb16d
SHA512e49927028c6c356609d4292140776d13fb2de308fa20ca0676106b47212cd9ad55c766582ae47dff739a7b5c73f251d543348b478c00450e8f456563df6b6373
-
Filesize
512B
MD55f2c5d7125fb52a8d01794998e60bf24
SHA117405498307e6897c6199c74737b7e9236b33309
SHA2568b6ac4f7a008314c944326f06c358b5e50dbab9d82fa254dcdd1a158e5ffd6a8
SHA512fb71a6395be5249f6987326fee65239881588439388d93af6bfc1656ff1ee99343314e8f984a4782a50f70fa1834610f25d28a9e17eba5aa3cd01c1e2f29cde8
-
Filesize
8KB
MD5db2834d47ba892cd489f690c781cd426
SHA18a453a1883063ff33622941c00f4a262ff9bc88c
SHA256b71b64fd38aba0890e32b165b62e4bd08866775301e713875f0e90d278e9893e
SHA5124cb254a95dc93387d7830380cf422d5579234425b4cff669fab450abcdadec7bf9a9167ec1cf28f5377e6a56fe0663abbfe8c228c746aa320186360d5671fad9
-
Filesize
4KB
MD515036aa3d5a0b6c0b0f2a6799138b560
SHA1c4bf50e86c9210e6303339d66f70a0c623ade416
SHA2562b4eec0ea47ef93cb4bdafce7abd098e8923aacba0225d0032d3dcb8725456ad
SHA512c48c57af23deeeeaffd41211c48e7856d292546466aa203ca06ef7ad5cac317ff41f0647645f26ef44203571beb635a9b32a7397269bc6568793e2548f2af01a
-
Filesize
4KB
MD50eb157e1a86d4d00aa601dd2f6ff3ee3
SHA1fee434f784e73cc7916322e949f727caf8363102
SHA256b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
SHA512b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8
-
Filesize
512B
MD5cc373418cd1afbc6b2a3371df0730e63
SHA146f92a403a2526181d02c9c6c2f99d449b1ccd8c
SHA25637c67ad50a0cce122705f511c0951e7a22a73ec812e5bc29d83f94ac20c38ebd
SHA51241115084083f7860df4367394cd2ddb4f08757786b902454f3785ad86c2248c41ce4c238a949bbde7bdc2d5c32c295167f424f9cba477aa79dad4e2002df249e
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD56b1a82ff35d61f200cfc4f4f1185bed6
SHA1da5bf48064d98309c3d3e0a04a57f2c5abbb74dd
SHA25615c3a5e0aa337ca41b91d23070d4c1759ae57026ef9018e79e48955627e15c67
SHA5126e6d71cfe6d932b879cfa9e544d15f8f35c453358d5ab87471a430f645c71a569e354d409e131be7baa525be8ee5b40b49136482249ba545cf1289bbd4223cd2
-
Filesize
108KB
MD507875a10473de2a31109a36c1cb86608
SHA1e5ac9dbcf6844087d4c28f104e2cb49e821c9a0a
SHA2560ed8ef193ff7f95702c3aa8690c0b80044403a38f110a8f059b18fe8fcf127d0
SHA512e5289e90ed75463b0a3dd24f6de051359d0d8260f14920ca258faf3b0997928840fdee674b7ae04bf2b3a64528ce8270d722e21d7b88f2cff1dd38fc06edb8f7
-
Filesize
21KB
MD5722310b17c81cc3d780d23e1a63eb450
SHA10a0c1a939f923570e5da88aa5c7b105052f056e3
SHA2569f2d7ff525ca785553557c351812252c0beface31440517e2f19929fe76472b1
SHA5121a48e9383a0befb0c6b4755a8b56f352fba317910308f701e13ce8189c465cade6b0af510165d586745f1913a61cc68f91395949202394336a59c34596691a91
-
Filesize
123KB
MD53056e1bdb7d4e19789d0319eff484bd0
SHA16791ae47aa9466fe0bca27ad6643f846853bbee4
SHA2568e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
SHA512c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658
-
Filesize
25KB
MD529469324e59dfcc052f24b5af4e7b2c4
SHA110c1e17ac6f598037bb51baa07945663645de4eb
SHA2569195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
SHA5125e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2