Analysis

  • max time kernel
    8s
  • max time network
    150s
  • platform
    android_x64
  • resource
    android-x64-20240611.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
  • submitted
    14/06/2024, 23:31

General

  • Target
    b00f11c8f6fe590dbc39eb816f6dd058c407d55176bbb5aa7c43d409740d8a70.apk
  • Size 321KB
  • Sample240614-3htm4s1aqc
  • SHA256 b00f11c8f6fe590dbc39eb816f6dd058c407d55176bbb5aa7c43d409740d8a70
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 18 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries the phone number (MSISDN for GSM devices) 1 TTPs
  • Reads information about phone network operator. 1 TTPs

Processes

  • com.dzbfewsjkwenmcew3hjyfd.security
    1⤵
    • Loads dropped Dex/Jar
    PID:5044

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        0.obfedex

        • Path /data/data/com.dzbfewsjkwenmcew3hjyfd.security/app_eso2.dnq.lh9o.d3t/obfs/0.obfedex
        • Size 53KB
        • SHA256 5b59001125c32437e6e9c0017b578dc872b2564ded264ea68aefba39ea66953a
        • MD5 SHA1 SHA512 SSDEEP

        1.obfedex

        • Path /data/data/com.dzbfewsjkwenmcew3hjyfd.security/app_eso2.dnq.lh9o.d3t/obfs/1.obfedex
        • Size 61KB
        • SHA256 109ccc97c218a5da5b53f761c8442b44163bd02295940c3303acea1ec22ad67d
        • MD5 SHA1 SHA512 SSDEEP

        2.obfedex

        • Path /data/data/com.dzbfewsjkwenmcew3hjyfd.security/app_eso2.dnq.lh9o.d3t/obfs/2.obfedex
        • Size 18KB
        • SHA256 4885c4a4b40d4d03b7fff07e7634b72021280f9a5c4c30e02d76d91e9d61aa02
        • MD5 SHA1 SHA512 SSDEEP

        3.obfedex

        • Path /data/data/com.dzbfewsjkwenmcew3hjyfd.security/app_eso2.dnq.lh9o.d3t/obfs/3.obfedex
        • Size 15KB
        • SHA256 a80f8ad298d075fdac2c288366f87766b9da346e88a179e8591ffa901f63f29f
        • MD5 SHA1 SHA512 SSDEEP

        4.obfedex

        • Path /data/data/com.dzbfewsjkwenmcew3hjyfd.security/app_eso2.dnq.lh9o.d3t/obfs/4.obfedex
        • Size 5KB
        • SHA256 d9843c156dc4e6d018082f9139ac5dd3ef9257cad14c711e4f3d9ca1e4c24984
        • MD5 SHA1 SHA512 SSDEEP

        5.obfedex

        • Path /data/data/com.dzbfewsjkwenmcew3hjyfd.security/app_eso2.dnq.lh9o.d3t/obfs/5.obfedex
        • Size 7KB
        • SHA256 bd4e497e29b6e1109e8800b85eb48389d6a88c7659b27159871d6eb99fb3dd9d
        • MD5 SHA1 SHA512 SSDEEP

        6.obfedex

        • Path /data/data/com.dzbfewsjkwenmcew3hjyfd.security/app_eso2.dnq.lh9o.d3t/obfs/6.obfedex
        • Size 4KB
        • SHA256 f26e8627c19105e71cf6ac6009cf422a3cf23473c4fd5ce61f0b5e1086c6f7d5
        • MD5 SHA1 SHA512 SSDEEP

        7.obfedex

        • Path /data/data/com.dzbfewsjkwenmcew3hjyfd.security/app_eso2.dnq.lh9o.d3t/obfs/7.obfedex
        • Size 1KB
        • SHA256 ee5a0e8a4ce6ed0d81b2a459eec85ed1352f25e3862e923774d3f76ae09e4b92
        • MD5 SHA1 SHA512

        8.obfedex

        • Path /data/data/com.dzbfewsjkwenmcew3hjyfd.security/app_eso2.dnq.lh9o.d3t/obfs/8.obfedex
        • Size 9KB
        • SHA256 3e1c2532877fd3dbb5782bf272dfc4e7b6e4d40edba02a1c87b54a4f389aee5d
        • MD5 SHA1 SHA512 SSDEEP

        dzbfewsjkwenmcew3hjyfd.txt

        • Path /storage/emulated/0/dzbfewsjkwenmcew3hjyfd.txt
        • Size 2B
        • SHA256 4fc82b26aecb47d2868c4efbe3581732a3e7cbcc6c2efb32062c08170a05eeb8
        • MD5 SHA1 SHA512