e68f5a41412b94c5b8b9492a954a9f1a3baa562683c24a2b173be2564913bbf5

Analysis

max time kernel
5s
max time network
132s
platform
android_x64
resource
android-33-x64-arm64-20240514-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240514-enlocale:en-usos:android-13-x64system
submitted
29-05-2024 22:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

e68f5a41412b94c5b8b9492a954a9f1a3baa562683c24a2b173be2564913bbf5.apk
Size

3.1MB
MD5

237cf8274eb300be737c64dc624ce484
SHA1

7a59bde259f65fcec9eb939d3a355d0fd494ced2
SHA256

e68f5a41412b94c5b8b9492a954a9f1a3baa562683c24a2b173be2564913bbf5
SHA512

3c5d87975bd79d976cd3d5e4b652a96bb5395e5da15aff6c897272f6e3b886daadbdf3b6b724c3359f67e77bf3f72a1ae684be78fa7f79188e576017e1a489b2
SSDEEP

49152:+3yGUd3x90QpQ0OvdvcWyiIGCTresLNKihKUSg1gHP2Zr9Ke:+3to3x90Qu0OvdcWRIlTre8ajHP2Zr9N

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 6 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/splints.discipline.investment/[email protected]	4302	splints.discipline.investment
/data/user/0/splints.discipline.investment/[email protected]!classes2.dex	4302	splints.discipline.investment
/data/user/0/splints.discipline.investment/[email protected]!classes3.dex	4302	splints.discipline.investment
/data/user/0/splints.discipline.investment/[email protected]	4302	splints.discipline.investment
/data/user/0/splints.discipline.investment/[email protected]	4302	splints.discipline.investment
/data/user/0/splints.discipline.investment/[email protected]	4302	splints.discipline.investment

splints.discipline.investment
1⤵
- Loads dropped Dex/Jar
PID:4302

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/splints.discipline.investment/.jiagu/libjiaguv2.so

Filesize
277KB

MD5
94884d288d94d53381f179b97d91b160

SHA1
1c274cdb2388e27af3f1281d29234872d13e7414

SHA256
a84e99701323e03c0f7f902c3470c3ca449bf21b5dd3511bafdc475d8aac45a8

SHA512
43ba85965ca30448515a0326fe55b4d76ae9f46d66d14308386003ebf275dd8683c1456c221b31f0ad0aebab3ada5cfa8e9455ec4073973d43483a38256c122a

Download Submit
/data/user/0/splints.discipline.investment/[email protected]

Filesize
728KB

MD5
1087f50ea02e37dd76eae9b763e8abfb

SHA1
eaaf985e87da667092d2239c59780948e325f1bd

SHA256
f0e809cf658db6b85acfa7eb541e2f19503e352e9730db93334290cc33abe718

SHA512
9ba244263590aba973b1b8e9fd52c59fff1f38d696c1c73f781c11fda0f87cb9c73b4c54595fe39729d3a878aa7b7ffd5424bab221155cb12581e913483f1220

Download Submit
/data/user/0/splints.discipline.investment/[email protected]!classes2.dex

Filesize
737KB

MD5
6994fdf75d4495eb7e05c227fbfc808d

SHA1
389ded82028e52eb89f876663c5f398cfdfcffd0

SHA256
04bf59f899925b469476d2433b1a696906101837f01efaaf7d87377ac6bbfce3

SHA512
363c0a0fdd6128db32b13a7b5d1fc54f7a0b9a948f661a9e1431b097354f00e70443d540dfe5e207e1a8e360cf3e8adf944dc2823b26aee897080221ad809ac5

Download Submit
/data/user/0/splints.discipline.investment/[email protected]!classes3.dex

Filesize
693KB

MD5
1819ce48d3f060730de5d8ec72863bb5

SHA1
25d6773ed239dcdfeeb6a5b18ea90ffb226c7bbe

SHA256
7482508b48600116f396c21e8c5916085594db7d62fafc3ff95f4d6e59b485ad

SHA512
6c6f2115c87edf88a33c9b40f6beeb5e9bf1b7c93ad85fcb108acd45e466f7ad74a34499f5674b8f38d6d631ba9c384b1795a73591c9298ce9a26a8ba0ba1024

Download Submit
/data/user/0/splints.discipline.investment/oat/x86_64/[email protected]

Filesize
32KB

MD5
89bb43996a74269340c13b176f064116

SHA1
765aa6fc54f38367b5a660c67e5221ff35e0ed2b

SHA256
d90d1bff5b6d92c81eeb4bc4627efdbd107d6929fd7e89a5ba30064afaba96aa

SHA512
4364de972f7ce6de08865c546148f4b355c288119aa1ced145214412f054f935d4580f6fe1ddd2b37a1a86970c040d5b19963db91f63b373e8dde25adf92d430

Download Submit