d5bf6c021c637800f5005d5b8ce4ecf907d28c3abf33ac7db206e034de3b205a

Analysis

max time kernel
154s
max time network
149s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
04/04/2024, 12:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
d5bf6c021c637800f5005d5b8ce4ecf907d28c3abf33ac7db206e034de3b205a.apk
Size 2.0MB
Sample240404-p14n5sgb4w
SHA256 d5bf6c021c637800f5005d5b8ce4ecf907d28c3abf33ac7db206e034de3b205a
MD5 c57e2fd2b40e4258037fece79e509099
SHA1 434b2a1435cb4881409dd16573c57b2db6e388aa
SHA512 f88f19291d906b3bd1160ff9ac76921a022251d7ff90e174c632d77610fcbf3af1c3362dbbb9f5fab3fd0b4ed10e22fec3ff921770795cbafff646a57eb2e5ce
SSDEEP 49152:7K2v+klnKZ6oLF9kLV/tmspxrFZR5L7wRXNK75AaEjZ:e2p8/kh48rjR5PqdDaEjZ
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery evasion persistence

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.vs.bhaktirings.nearme.gamecenter/files/5ead5a90.dex	5028	com.vs.bhaktirings.nearme.gamecenter

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	com.vs.bhaktirings.nearme.gamecenter

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.vs.bhaktirings.nearme.gamecenter

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.vs.bhaktirings.nearme.gamecenter
1⤵
- Loads dropped Dex/Jar
- Makes use of the framework's foreground persistence service
- Acquires the wake lock
PID:5028

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Foreground Persistence

T1541

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/data/com.vs.bhaktirings.nearme.gamecenter/databases/com.google.android.datatransport.events
Size 56KB
SHA256 bc42e5b281b460c47df1a079e659dbd6f2bb7ce72e3977977ffd5e3ea2d64ce1
MD5 cf94fc8c6cf0c1a9f446691556e24366
SHA1 b8bed9187dfd3929f5a69227c18189ce5de97b10
SHA512 6583e052b4b83ae053aafe6ec8f0cd9396e9237ea55877038a7d4f21dcc60a676424276d46ba7c83734587a64aa82bfa822c5a6b2f476846468ba359348ee91a
SSDEEP 48:T3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSY:8MEX0wIyNjaY
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.vs.bhaktirings.nearme.gamecenter/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 5057c3b3aefcea4b09c2d7ce7bec279fbd38ead67d7a3a41634fae57092654c3
MD5 a3b67a4272ba0f7839a8f4ae590dd458
SHA1 5427c63d394510f05c01edf4776900cd1d7f1c29
SHA512 dcbb37fcee16e8adeed8003ec6963c669f14617a351b69ca487bab9054061660e62a6d3d37dbfbda4bef23f4b4532ae62623ccd0f306aaf59522f31142dfef38
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.vs.bhaktirings.nearme.gamecenter/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 0ef901f4159f662b3ae7c37c7b6a10765092594d2ccf6e75bd62208253a8cc8c
MD5 ca75b40532d43d44268392d0e2d58d31
SHA1 0e02b9964687e3c6cfeced8ba9ebcf27d7c755be
SHA512 f3fd91cdfba42294a502f1c52f29f93e0c55c59d9413924cc2838977cf8845b0f1ba768a331d0ebe685aa2a5b9b0605e24999ce703c027012d564c83ce9499d9
SSDEEP 6:7+/l9+Cn1CXvg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKn:7+t4JfqLiuWdwRmBEyPbM
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/data/com.vs.bhaktirings.nearme.gamecenter/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 4d134772a245fe3bf115006b249f37deaf1bc7014f17e61dc52352a76368d48e
MD5 fd860c0acfcaee6ab7ba13eeeb3712da
SHA1 ac9cb41df94dd4bc505cb06868b68f667f28e8df
SHA512 b88610c465f412b8eb2ed24a759d6a4dc2771a77df73657df6fb826da7d0aa56ea3a1cf0cf332914ded6945ea9fa4d25323d397cd96c400af11617afa7c8599f
SSDEEP 6:7+/l92/gPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKtnM/a:7+trqLJdTRmBEyPbysa
MD5 SHA1 SHA512 SSDEEP

Submit Download

5ead5a90.dex

Path /data/data/com.vs.bhaktirings.nearme.gamecenter/files/5ead5a90.dex
Size 1.1MB
SHA256 7eac27812c9a30efacbb08e3d80931c94ad2a714d2a4cf60f4ad7e67838baa10
MD5 99d77855f094d2912532054320c740fb
SHA1 6b15bbe80c48c3110a4785a01bbe656418d5b5a9
SHA512 9a54a9b3b3efedd9bc8d5562a0a78b4c3506776f1a2c85f05db9dbabe0f158e3f3f7ad826a73a1bf5d31b1f378c3c80f74fa7ddd280354fb3001bfafec22bcb2
SSDEEP 24576:LeurM0JmvlYDawZrKrq/q91kJUsE/+XjPWogA16kMi:aurdmvlwacrKrqO1kJUsEWXjPWxA1nF
MD5 SHA1 SHA512 SSDEEP

Submit Download

PersistedInstallation8405586146328508395tmp

Path /data/data/com.vs.bhaktirings.nearme.gamecenter/files/PersistedInstallation8405586146328508395tmp
Size 114B
SHA256 33c6cdb2896dfd1da1a6b5102615b134d7e37c206b9d79b73f95080392e2a330
MD5 fc579bc2dd90a340b8f401d661deeee1
SHA1 a6ebd1d81943ab0c41245d661b627b244ffe3123
SHA512 6d188330f2ab7d7b789e8fbc874a41680c399b223e081248e05ebc11843a3f2509bc81e01e3573a97f5ee4396e233b4b9c66512e53271bf1f6ee20c752db1eff
MD5 SHA1 SHA512

Submit Download

PersistedInstallation96301245027059665tmp

Path /data/data/com.vs.bhaktirings.nearme.gamecenter/files/PersistedInstallation96301245027059665tmp
Size 90B
SHA256 21e4483bd45c4f81a4a2fc5a19df253fc8eeb23b8b9620a2b8a2fb8b5568299b
MD5 a0fd27e964df1ae7d85a810808efbbf8
SHA1 462b2fcb563c62f70b66abaa803769a5f6152292
SHA512 0b608a1b7db4830999eeea857092479b93651ac52cb3f2875d7ce9f09a1025bd92c43407062579046f1427edb81c1f7e66006e345fa95203581498c24842e94e
MD5 SHA1 SHA512

Submit Download

aTPNX

Path /data/data/com.vs.bhaktirings.nearme.gamecenter/files/aTPNX
Size 423B
SHA256 a7052a5448ac323d845e798717eabad236a7e702a9d3a4931cf626a039ea9313
MD5 f30768d6443c79651a556ac8554f194c
SHA1 0210a03f30d91bd80ac6840798c5afb48497771e
SHA512 95751ab31ce6fb330c5d23ff9f230df22fe275f0146410ede640b4edfdf5495a4975e5f57885136019c1d1127d58b9b6551046a308323ceea9ef0cf9855c753d
MD5 SHA1 SHA512

Submit Download

aTPNX

Path /data/data/com.vs.bhaktirings.nearme.gamecenter/files/aTPNX
Size 659B
SHA256 76dc9062492866ea153eccd9f9bc746aba18f4405c8624aed2b4bd6607a96b63
MD5 98cd7d76b5aa286ff7eb0b189100f172
SHA1 5d4a2a6b75422665a9a4ce77979bf545e4b0740f
SHA512 dbe8e532d2c7fb339a58cabb89eb8b509f9a16102a48949449a28735553c6dd135d30d0c8bcecb32f500b317a7dfc8724760ddd6f6464f3d93b2a1b2d8de71ca
MD5 SHA1 SHA512

Submit Download

Path /data/data/com.vs.bhaktirings.nearme.gamecenter/files/c
Size 227B
SHA256 3cd6282656c0252e2da1bfccac1e0213620604c315433bc26785f07c147f08a0
MD5 d1807bd06db08565a5ef70c024091f76
SHA1 3c0bd39da5143eb03216b8fd4b87e02bc3be4c93
SHA512 ded69d28083cb3dea8c60ca88d3138f01ae5f57d93d4a1ae6f4debe1a53ada8f61de76e806ca463c987d995569783e5786c5121b4310915a68612db5829959f8
MD5 SHA1 SHA512

Submit Download

Path /data/data/com.vs.bhaktirings.nearme.gamecenter/files/c
Size 227B
SHA256 0493eb0af57dd351c1c29aefb5a4db5ec7479c5fcbf57dde2dae265b9801de23
MD5 fa33b12f4c6d63fa5a53207f81a48dd0
SHA1 0aa4826ba7a04279a1fa507f89eabb9dee8948a3
SHA512 96aae42546f4fc41461cdebf003482af6bb09e84d37569ffedfbcc18b53dc2fbb555d968f77ae49532ae9fa3fac8d77ceabaa603c746395e5a69e3b308647aec
MD5 SHA1 SHA512

Submit Download

Path /data/data/com.vs.bhaktirings.nearme.gamecenter/files/c
Size 227B
SHA256 71bb8b91df385baf6eb17296ef12a54b63ecc4a78286e05b1d0ecd8e4387bb75
MD5 4b6f4b719be9df5422a41caaba5dad04
SHA1 29c15496d0f8abb5f85398f01c62a5861d4eed8e
SHA512 69f27aa5f45161d1d4899ff4ed69ced036d7a7680e4e576d8e89068b8341113251fafcaecd1064fe6e591717220681139b162e07566096f04c57720463f42ce8
MD5 SHA1 SHA512

Submit Download

5ead5a90.dex

Path /data/user/0/com.vs.bhaktirings.nearme.gamecenter/files/5ead5a90.dex
Size 2.8MB
SHA256 0470ba58008cf7bdc3d4d60f3fb695e2f2f796ed3061325660c0521824fd4e56
MD5 34882ff016ae7142d83c5a36ce261f80
SHA1 2db588f58122e8248dcf0f1150ecfd61872c2d1e
SHA512 289f0d93c3ea120bcb594c37aac448177ea7778dc8bf222614d87d09a2129807e123549b136553576ff789530087bbb3df94e61a577f7841d6bb8aaf15bc9e99
SSDEEP 24576:b1GuzXgL21yiXAXQXUXbndK5m33jZa945OYIdCfOraENbEdcwENVb+s2L/3TUu1k:2LSK62bn45m33jZg4xIdCxcwENJT2fiH
MD5 SHA1 SHA512 SSDEEP

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads