Analysis
-
max time kernel
175s -
max time network
132s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system -
submitted
24-05-2024 12:36
Static task
static1
Behavioral task
behavioral1
Sample
daa8d41db8b17c2a107d17fe15cd5a310142bf8c62d6177bffdecefcd7522765.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
daa8d41db8b17c2a107d17fe15cd5a310142bf8c62d6177bffdecefcd7522765.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
daa8d41db8b17c2a107d17fe15cd5a310142bf8c62d6177bffdecefcd7522765.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
daa8d41db8b17c2a107d17fe15cd5a310142bf8c62d6177bffdecefcd7522765.apk
-
Size
1.9MB
-
MD5
1cdadc772cf659725cb2f8a2bb9a9d89
-
SHA1
69dd08febb44efe9c0d2393e4f6cbce131bc0c35
-
SHA256
daa8d41db8b17c2a107d17fe15cd5a310142bf8c62d6177bffdecefcd7522765
-
SHA512
3a2cce05c3dbe24be404976092ce99ff7596a0566cc4fb311d97b1b5062c4aeb3cbe088b08eab85eddb5c1f1b2a415cac3d581405adb20d24671b4acc9dc7f57
-
SSDEEP
24576:Qok/Boh8Y78QDuqTWqRQ4kQQOVa6ox7nPWgYJWrwkc7OhpMjg4OFgiWV7r+tmX9W:Qokpoh8Qr/TRxC8YMJ0VrOpLh+tmUeS
Malware Config
Signatures
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
Processes:
quasar.bistrocookioc pid process /data/user/0/quasar.bistrocook/files/bdbfefb6.dex 4687 quasar.bistrocook -
Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
-
Acquires the wake lock 1 IoCs
Processes:
quasar.bistrocookdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock quasar.bistrocook -
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
quasar.bistrocookdescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo quasar.bistrocook
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/quasar.bistrocook/files/BGEaUZrYFilesize
471B
MD56e04afac108fdb188ca22bdd3992c39c
SHA1590aec486ce001deb717f0e3fd937515d291e50c
SHA25692b49c114aa7befa28a77c88d3e133a6a8564d72ff9bbfcd995c4efca1027b74
SHA512f757c9f01156db6af0aff3a05b6619b02e28116b7f8ab219d98c1e6a97d6eaf44189be9b37514197a8ca86f538c6b22e4ce20e3aabbf34121fac836901bb3376
-
/data/user/0/quasar.bistrocook/files/BGEaUZrYFilesize
725B
MD52ccf6e15eba2fa4394d7a3659f2b54ea
SHA17f059d2742263695d2961b14177ea0e832a698f4
SHA256f35680cc22704edef1d6426ecac454c9e11400ac7c5fa4d3452b52bf9af107e7
SHA51237d2b075ef6ff8181766a8c220994ef6c166c4d9e180836da4be931209f5d13d8d808ed98e7068cf67030101ecfe2767c058b21571e71f2fc66b8ecb13ceb650
-
/data/user/0/quasar.bistrocook/files/TrPJFdsNFilesize
336B
MD54e3d033ebc84692d861afd47ba0e5fc3
SHA12e2e3de5218fba28712913600562f7f47fdc9edb
SHA2569c078d31bdc9e5712b2a16e5bdcdd3acfd37a5c7404d968bea082875ca3d7682
SHA51299ea59df672ab1d51310b4ef74f29d5ea3b6acf6e625692a361820a642dc3129a76df345a61fb05c13c04156af082a947d02b8e9924add48487a057ebe791d14
-
/data/user/0/quasar.bistrocook/files/TrPJFdsNFilesize
336B
MD577b56dfec4db5c5ba0dea65df4bcb42e
SHA10eec432d45c42a5616d72c8ada66ad713d36ba87
SHA256922f28abca9cd2ab793ec673573e664bae7dec4b748fa75722c32f4df48317b1
SHA5120e85e462372983387a7613e1f37dc8151c220bc7ac31fe0d554f91f5ef33ab83651d51ef777324f738cc1970a05eaf774c1d216b655534e8425de4fd153d1f48
-
/data/user/0/quasar.bistrocook/files/TrPJFdsNFilesize
336B
MD5de38223877985d52bee26f58bcaf7eca
SHA12f637d4d52cb5fdb4276d0ca33c1c7af0f13c705
SHA256f262e8296ebe9928df3e983dd356812dd218f9a652d4252a60cb348e89e2b6c2
SHA5121600c8026d02ec672e07cc1a5a16e99937b51fa7d14e28914745050c9606f3452cf990d697e780960ad450e2c52fc56333451c573caada178b89d95ab69b552e
-
/data/user/0/quasar.bistrocook/files/bdbfefb6.dexFilesize
261KB
MD541b8243edb9b9dde73ab207644e7e53b
SHA1675de278447f6b585eba1db7460e599a30596d46
SHA25614df0943e0c93d98b078e8bb6557ad887781f0337e54250184a8df5ff22e61ea
SHA5129e86bfd169cc48e2b0a917884d38ed79bc0975420effaf336f1255cd61349b02a78a601e23722a7b2178578a73a23d8881872cbe619b6d58e84b48a43955117e
-
/data/user/0/quasar.bistrocook/files/bdbfefb6.dexFilesize
614KB
MD52c7772a4236490f59e7f642a7a3a4cd4
SHA12e2bfb350a98af968a284a971751abaf99678d9f
SHA2563a79a298753fce30d4a773d80e4ecba6a90149d201aaaba56ea0edba3be541a6
SHA5121ac26087b78da22a346597bd86b9a1cffa467c3f90aa0e22e9fc2528e7bfeaee48f4cf16a4a364053125da851d347613afcff78277dbc2752aaba52be9f67e89
-
/data/user/0/quasar.bistrocook/no_backup/com.google.InstanceId.propertiesFilesize
2KB
MD52a91d8738dc0ee1763bd9b1ee6e109e5
SHA136d114de551f4dc7b4cdfd61c57aab47fb2c0b22
SHA256c180ac79fc2ae43c2aaccef34b75c20882dd5e33bc7d2b7714f7a0aa3b49ee15
SHA51245d7592a7c313f673f6a3d9558d5456d5e4f3b61664a8e69a1be6c42222ea5bc4ee7167167f2290c5cc61cfc14b6b71912d125d9024f82368a533d998772d8c4