Analysis

  • max time kernel
    155s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    13-06-2024 23:57

General

  • Target

    d6a24896d2f88df880e5d5acc89bba51046e8d4e6f574b4fbbd319771de94bbd.apk

  • Size

    3.3MB

  • MD5

    712357dc4d693d3383857b3479377371

  • SHA1

    5e76d90749e5053024632a7d5b44d231f9b5f692

  • SHA256

    d6a24896d2f88df880e5d5acc89bba51046e8d4e6f574b4fbbd319771de94bbd

  • SHA512

    c8aa49d43946d09284324202a6b92bb23fc60765e1f1af3bbe4829fe67bc222f433682b142328a0b7889077b2ee6b532d6c3454c98e41c88725f7986df837b50

  • SSDEEP

    98304:+iGSefkYKL89o6HcDGXTKN+gDbLFzpzfrypkIC:/GS6ugXTq++xLIC

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 3 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.perl.gqm
    1⤵
    • Loads dropped Dex/Jar
    PID:4444

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.perl.gqm/[email protected]
    Filesize

    300B

    MD5

    7c80da100acf95df2c9629e515898a6b

    SHA1

    28c7d9a00126bc12a0760f9cc6270abea6866d73

    SHA256

    ed26ed598d0393b52cb68fd71e26f7eb5fba998f72c1c30eae4622bb0752692f

    SHA512

    b2eb8340ae3dd3ddbe2a5cf3de6b735a33bb15b51b728f01643fed02375c8962f37fcbd4827fd578cb73678847cc47c45290d763281be5caeded67fa8923c6a2

  • /data/user/0/com.perl.gqm/app_outdex/libdexprotector.4444.so
    Filesize

    370KB

    MD5

    69afda89a7483f9b9aaa0f307a79b3dd

    SHA1

    f1401815306b30c39f0276a627e53ca91a2579d3

    SHA256

    a96a0918d573a562c1b5bc3bac88248311ba30553822026ba7535887efa1239c

    SHA512

    2985e4e27c5182b6c0889688a517b08006798904ca8173e4008953ca67357812e3febd05cdd7fc3fd6b63cad1302be83b69055e9dce477384676e2991d570e6f

  • /system_ext/framework/androidx.window.sidecar.jar
    Filesize

    12KB

    MD5

    bdf3529e80318eb14e53a5bf3720c10d

    SHA1

    25c9ace4b1af6e80ebb2572345972c56505969ba

    SHA256

    bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

    SHA512

    48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b