Overview

overview

10

Static

static

6

upgrade.apk

android-9-x86

7

upgrade.apk

android-10-x64

7

upgrade.apk

android-11-x64

7

childapp.apk

android-9-x86

10

childapp.apk

android-10-x64

10

childapp.apk

android-11-x64

10

Analysis

  • max time kernel
    30s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    21-05-2024 05:25

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    upgrade.apk

  • Size

    8.6MB

  • MD5

    879341f5413a5c3b7c2ae9cb1dcfd63a

  • SHA1

    09115e34bb0bfe8d649237993f995c5161363c54

  • SHA256

    3cff417e481167c5065842c64f44b070538d993381d8cee8313ad1fd211e8999

  • SHA512

    05ac12cdc81561107a90029eb83a6fbf249ea67beb4c8a282b71046c0438a37e6dfe34d0e95d49e738eb63812631af0a833c6ddecf489eaf407eab749b2c75c9

  • SSDEEP

    196608:/J1eEIs5uMib8n0QKpVHlEmshxNJgYpnnrEjc02:B0Ed5MHmmsZu4nnwI02

Score
7/10
evasionimpact

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • com.appd.instll.load
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4520

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.appd.instll.load/app_ded/p3OgUH5eyVIYqoVREJtbzfAwfFE4i1qS.dex
    Filesize

    4.6MB

    MD5

    e65bef9966515139314174ea44f7ac8f

    SHA1

    ffc3a9107e89b927a32a87c5ae04c0baecbe89f7

    SHA256

    fa08514b31f976b2459aacfadf6ee390a1cdbf542c3c0d706e0469a134eb7188

    SHA512

    c96f857500e3194335a8e9a89bd91de97415d4f483293f5b972b158f759d53562f6934fb9032045fad6bde82e2525a5fc39c7a4b6006e622b3de16f494a5c0ea

    Download Submit