Overview

overview

7

Static

static

6

a8c4786bfe...5d.apk

android-9-x86

7

a8c4786bfe...5d.apk

android-10-x64

7

a8c4786bfe...5d.apk

android-11-x64

7

Analysis

  • max time kernel
    7s
  • max time network
    141s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    13/06/2024, 04:10

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    a8c4786bfeca5fdff386c6c81fee39f8b91dbc71d122fc665c2e4526b2ab2d5d.apk
  • Size 309KB
  • Sample240613-erwbasxdrk
  • SHA256 a8c4786bfeca5fdff386c6c81fee39f8b91dbc71d122fc665c2e4526b2ab2d5d
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
discoveryevasion

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 18 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Queries the phone number (MSISDN for GSM devices) 1 TTPs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs
    evasion

Processes

  • com.dsbjshwhcuywehf25nvjhef.security
    1⤵
    • Loads dropped Dex/Jar
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    PID:4452

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        0.obfedex
        • Path /data/user/0/com.dsbjshwhcuywehf25nvjhef.security/app_ajld.nkb.hc9x.cct/obfs/0.obfedex
        • Size 51KB
        • SHA256 6750c0952fb9a83e0bb9d3f1ba1232b7a2af5c13af9c58727f6a4d9cbbfff76f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        1.obfedex
        • Path /data/user/0/com.dsbjshwhcuywehf25nvjhef.security/app_ajld.nkb.hc9x.cct/obfs/1.obfedex
        • Size 59KB
        • SHA256 368d102143ab67ffd68610bf58aecef09358c7c83b72bc062fedb2cf92031b65
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        2.obfedex
        • Path /data/user/0/com.dsbjshwhcuywehf25nvjhef.security/app_ajld.nkb.hc9x.cct/obfs/2.obfedex
        • Size 19KB
        • SHA256 4cf354e0ff6b766f594493687b3c139255c12dedd7673f4118480f4afbff6f0a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        3.obfedex
        • Path /data/user/0/com.dsbjshwhcuywehf25nvjhef.security/app_ajld.nkb.hc9x.cct/obfs/3.obfedex
        • Size 15KB
        • SHA256 d116e56641ed48f80242f0473b52e81cc6c4d0909abc3008e5b46e8baf3efb0a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        4.obfedex
        • Path /data/user/0/com.dsbjshwhcuywehf25nvjhef.security/app_ajld.nkb.hc9x.cct/obfs/4.obfedex
        • Size 5KB
        • SHA256 ffe80dfa2b45d35bfe163cea57408f4f85aa27f6b51aa162549bd1cd72891872
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        5.obfedex
        • Path /data/user/0/com.dsbjshwhcuywehf25nvjhef.security/app_ajld.nkb.hc9x.cct/obfs/5.obfedex
        • Size 7KB
        • SHA256 e547fdefd1dd6a4cc410fc1a01f220e9e964c9d07448511461cc34a10212c2d2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        6.obfedex
        • Path /data/user/0/com.dsbjshwhcuywehf25nvjhef.security/app_ajld.nkb.hc9x.cct/obfs/6.obfedex
        • Size 4KB
        • SHA256 f26e8627c19105e71cf6ac6009cf422a3cf23473c4fd5ce61f0b5e1086c6f7d5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        7.obfedex
        • Path /data/user/0/com.dsbjshwhcuywehf25nvjhef.security/app_ajld.nkb.hc9x.cct/obfs/7.obfedex
        • Size 1KB
        • SHA256 94169f8a887674910163c7e626120c362aca79669229c2fd7c410f150482d02a
        • MD5 SHA1 SHA512
        Submit Download

        8.obfedex
        • Path /data/user/0/com.dsbjshwhcuywehf25nvjhef.security/app_ajld.nkb.hc9x.cct/obfs/8.obfedex
        • Size 9KB
        • SHA256 5d9d113f05ab4b6d703f13cf0c4c6857dda9eec725826d394297c804dfb792bb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        dsbjshwhcuywehf25nvjhef.txt
        • Path /storage/emulated/0/dsbjshwhcuywehf25nvjhef.txt
        • Size 2B
        • SHA256 4fc82b26aecb47d2868c4efbe3581732a3e7cbcc6c2efb32062c08170a05eeb8
        • MD5 SHA1 SHA512
        Submit Download