d5bf6c021c637800f5005d5b8ce4ecf907d28c3abf33ac7db206e034de3b205a

Analysis

max time kernel
148s
max time network
160s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
04/04/2024, 12:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
d5bf6c021c637800f5005d5b8ce4ecf907d28c3abf33ac7db206e034de3b205a.apk
Size 2.0MB
Sample240404-p14n5sgb4w
SHA256 d5bf6c021c637800f5005d5b8ce4ecf907d28c3abf33ac7db206e034de3b205a
MD5 c57e2fd2b40e4258037fece79e509099
SHA1 434b2a1435cb4881409dd16573c57b2db6e388aa
SHA512 f88f19291d906b3bd1160ff9ac76921a022251d7ff90e174c632d77610fcbf3af1c3362dbbb9f5fab3fd0b4ed10e22fec3ff921770795cbafff646a57eb2e5ce
SSDEEP 49152:7K2v+klnKZ6oLF9kLV/tmspxrFZR5L7wRXNK75AaEjZ:e2p8/kh48rjR5PqdDaEjZ
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

discovery evasion persistence

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.vs.bhaktirings.nearme.gamecenter/files/5ead5a90.dex	4472	com.vs.bhaktirings.nearme.gamecenter

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	com.vs.bhaktirings.nearme.gamecenter

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.vs.bhaktirings.nearme.gamecenter

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.vs.bhaktirings.nearme.gamecenter
1⤵
- Loads dropped Dex/Jar
- Makes use of the framework's foreground persistence service
- Acquires the wake lock
PID:4472

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Foreground Persistence

T1541

Credential Access

Discovery

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

com.google.android.datatransport.events

Path /data/user/0/com.vs.bhaktirings.nearme.gamecenter/databases/com.google.android.datatransport.events
Size 56KB
SHA256 20848f8774b881b34ac70d13c529ef95eb44c445022a87caed6b428e6082e9ff
MD5 ed333ee1a7df12eff14d03bc3b406f2d
SHA1 63c991fd58f0a25b9525697ef529e2096998201a
SHA512 3b7e3132b7b2240c67eb7396c8b33717e2f0d5bcd4a22c6a81ee85558cbd97f0ef85faf5ba2c2cfa3331bfc0cecb8ce6e331e2a0fcc0bdcc3ac9683945217493
SSDEEP 48:T/3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSg:rAMEX0wIyNjag
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/user/0/com.vs.bhaktirings.nearme.gamecenter/databases/com.google.android.datatransport.events-journal
Size 512B
SHA256 d9186dbb5d52c0c27b803390b622f882fa147da6d18288e33ca638cd217d6280
MD5 d9a86ec49b25565fa0c4466723d39b9c
SHA1 5460b2bff5a53006bba6555149790fe4ea9b26cc
SHA512 9ed5d57b17ff4ae0a0564ac1605ee8f93ccf2de846bf946141c67270340e03adb14e73970ec362f7989bef3f57dcb31e70a812b66dd85ffe5435a9990fc74b68
MD5 SHA1 SHA512

Submit Download

com.google.android.datatransport.events-journal

Path /data/user/0/com.vs.bhaktirings.nearme.gamecenter/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 84a927bf7ce197a4e6a8f135fb230f78113071a67ffbceac258f82019baf5c5e
MD5 33a8a9ae462b3ea0423661d79429b97f
SHA1 bb526f5b79c1cf7ff95cf27f22d73235fb8f1d32
SHA512 e2ec158fc62928dfa3879f593225b3077c1c14e8bb34993dfb4ee38841e0be6dbd76cbdb23d85c3d304a86b39a788dd21ad5c2e32479a649bbb59aa2d658551f
SSDEEP 6:7+/l9u6lSFn1N/ng9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKwr:7+t06lo/nqLiuWdYRmBEyPbZ
MD5 SHA1 SHA512 SSDEEP

Submit Download

com.google.android.datatransport.events-journal

Path /data/user/0/com.vs.bhaktirings.nearme.gamecenter/databases/com.google.android.datatransport.events-journal
Size 8KB
SHA256 2f802ee4c0e79d0570b9d00e3a26a3fb39596c97a916991f9249181532f47833
MD5 68b777947b535c147b6090c2f933752c
SHA1 ac4987a776834804b238e9b3eedee125ac5401a6
SHA512 0240cf587a7400b5ca6088a20eb3853ce28e7f08b75c0ba1ed7cddf0b57899520476c01de4d360a04782ebf0614675bcadb501df06c6375e2b7bf61c360c91d9
SSDEEP 6:7+/l9SHPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKarU/p:7+tOqLJdeWRmBEyPbp0p
MD5 SHA1 SHA512 SSDEEP

Submit Download

5ead5a90.dex

Path /data/user/0/com.vs.bhaktirings.nearme.gamecenter/files/5ead5a90.dex
Size 1.1MB
SHA256 7eac27812c9a30efacbb08e3d80931c94ad2a714d2a4cf60f4ad7e67838baa10
MD5 99d77855f094d2912532054320c740fb
SHA1 6b15bbe80c48c3110a4785a01bbe656418d5b5a9
SHA512 9a54a9b3b3efedd9bc8d5562a0a78b4c3506776f1a2c85f05db9dbabe0f158e3f3f7ad826a73a1bf5d31b1f378c3c80f74fa7ddd280354fb3001bfafec22bcb2
SSDEEP 24576:LeurM0JmvlYDawZrKrq/q91kJUsE/+XjPWogA16kMi:aurdmvlwacrKrqO1kJUsEWXjPWxA1nF
MD5 SHA1 SHA512 SSDEEP

Submit Download

5ead5a90.dex

Path /data/user/0/com.vs.bhaktirings.nearme.gamecenter/files/5ead5a90.dex
Size 2.8MB
SHA256 0470ba58008cf7bdc3d4d60f3fb695e2f2f796ed3061325660c0521824fd4e56
MD5 34882ff016ae7142d83c5a36ce261f80
SHA1 2db588f58122e8248dcf0f1150ecfd61872c2d1e
SHA512 289f0d93c3ea120bcb594c37aac448177ea7778dc8bf222614d87d09a2129807e123549b136553576ff789530087bbb3df94e61a577f7841d6bb8aaf15bc9e99
SSDEEP 24576:b1GuzXgL21yiXAXQXUXbndK5m33jZa945OYIdCfOraENbEdcwENVb+s2L/3TUu1k:2LSK62bn45m33jZg4xIdCxcwENJT2fiH
MD5 SHA1 SHA512 SSDEEP

Download

PersistedInstallation2834467137663502709tmp

Path /data/user/0/com.vs.bhaktirings.nearme.gamecenter/files/PersistedInstallation2834467137663502709tmp
Size 90B
SHA256 0f948238faaf415231739ca3db5316adbb151c3078655ad39f8bb8090eef5b15
MD5 38d391183be9240c9cbb113660330955
SHA1 7a6adb4541fa616cec2a8f337322c474a94d9569
SHA512 251082c92c24cfc90cec8490dad0920e8d30a6f410acb0019ae815d4ffec05303e816a0459200dc32f5d46abcf3e3666360a20c8724c623bc891d2f40551e306
MD5 SHA1 SHA512

Submit Download

PersistedInstallation7207740028611762616tmp

Path /data/user/0/com.vs.bhaktirings.nearme.gamecenter/files/PersistedInstallation7207740028611762616tmp
Size 114B
SHA256 d0b24dd6710754bed297f45d0992cb131dfa31310348042c7c35168acc3db705
MD5 26c6528d446e4c30ca6624a4fd5e50cf
SHA1 43bc536261502fc6415b3587d9d2b7f302f2be36
SHA512 ee5621eb4eed0e4a024e59fa7f9055989835a27d17cdb9715d7abb278791fe8d4114beca3f29e8e42df1757f73e6081a95e65c0eb6eaf5fea9cb593c3c3351a6
MD5 SHA1 SHA512

Submit Download

aTPNX

Path /data/user/0/com.vs.bhaktirings.nearme.gamecenter/files/aTPNX
Size 423B
SHA256 e0c40ea5ab607c1322614b1c8aff3e3cb3c89d7adf7011c44626c87ea92cbb93
MD5 9e4ccc2d7e0bcc2005ed0378c8a30103
SHA1 adabfe3dd18a55f7e778e31e2329aa9b7c0f5483
SHA512 618160893025844366fe38be28cc2cea1f538082239f7061fda806d23533542762f9dccd649348b7ac7f29a574e4fc277eed3ca30191febcdf7f4c0b9b86460d
MD5 SHA1 SHA512

Submit Download

aTPNX

Path /data/user/0/com.vs.bhaktirings.nearme.gamecenter/files/aTPNX
Size 659B
SHA256 62d626751d25f07af15974ff4101b877a31e0c361643d046394a328d557e0359
MD5 85074329b76f8bd532405365f8923645
SHA1 1f2638eef397768c46989cdf5775894bc4ebf9ee
SHA512 b03c790af4e1b4f972449a18568e52cffa263f775f0c8ccfae9a40e9a2bb1ef5ff29162e471b4aab9fc3eb5e1eaf689d06074d4c0d51d12de11bd887bb5c5c3c
MD5 SHA1 SHA512

Submit Download

Path /data/user/0/com.vs.bhaktirings.nearme.gamecenter/files/c
Size 227B
SHA256 70c22469c0be93f1f2cacf2088ccce7e7538f387df1c2bd9412cd63743a5e2e7
MD5 c9bb9172e5ffa48c9053d0f653174ddf
SHA1 b6925a2b7c4c4af9b0cb77fe1c65ca659e4be5cf
SHA512 fc961881bc45f7a37cde14f7c6112f5fbade2cba9986e1064480b38b4610a18751d748af179948507ca08b0d11dff8fe4de394e7ef644ad07e083644cca51712
MD5 SHA1 SHA512

Submit Download

Path /data/user/0/com.vs.bhaktirings.nearme.gamecenter/files/c
Size 227B
SHA256 66972670425affb637381b1a07c47e8a50722c2ee453f6802522ad613c23992a
MD5 49959c549ed17589fcc39689b80a1208
SHA1 b2b5771a251bf621552b51a094264c24b4103d98
SHA512 50d1805745fbd0acae6701c8bbdf8f8082ce8fc85624c453acc849f4395ce7553d24fbd83f5b8882b46a4b4c80bf95e191579db309b50eea7c2e911f3ad7624e
MD5 SHA1 SHA512

Submit Download

Path /data/user/0/com.vs.bhaktirings.nearme.gamecenter/files/c
Size 227B
SHA256 310e50386546d7ab95320deca6260b573c87d3961ffa0f535aee4ead93865cdb
MD5 2026ae30e6a718f757a966e9f0eb7df2
SHA1 f363dd7a81cfd7d2b8be731c7d88a78b6b007c5e
SHA512 160162c5ddde5e7976cd3f57df3a9008f5cb596dd30a6cdead31297bfea1fed6fb342e6fc7366274d9309b436893491850919dfe541d78a8e8e8f36219c43732
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads