Analysis
- max time kernel
21s - max time network
160s - platform
android_x64 - resource
android-x64-20240611.1-en - resource tags
androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system - submitted
15/06/2024, 00:06
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
6a5a918efe3b6425ecef6fcf4c747fc229a263953bee317bcd1fd87b56f202db.apk
Resource
android-x86-arm-20240611.1-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
6a5a918efe3b6425ecef6fcf4c747fc229a263953bee317bcd1fd87b56f202db.apk
Resource
android-x64-20240611.1-en
3 signatures
150 seconds
General
- Target 6a5a918efe3b6425ecef6fcf4c747fc229a263953bee317bcd1fd87b56f202db.apk
- Size 321KB
- Sample240615-ad4naswaml
- SHA256 6a5a918efe3b6425ecef6fcf4c747fc229a263953bee317bcd1fd87b56f202db
- MD5 2862b445749d1d21313d35c2cd083901
- SHA1 cb4e6f7e09c4e8e11b95ddeb744b2e5f96c45d99
- SHA512 001ed122f320b1c14fd5af5fa6677027b4181a98dfe19c1908362aaad86da6dbc1bb8b7d251f35caece058f479c2329c472cb50bec4d496253809f53e3fe789e
- SSDEEP 6144:9/eGpgCZGcJAlFSk9n+xbO+0zz9OiTBDNoVmnnd0mdiO3mzXdGvo:5f3GMIFSk9+UfLBDKcn3diO3Mtqo
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 10 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.dzbockjwetycgfwehgf4gcytwe.security/app_p94c.sws.jb8y.b0r/obfs/0.obfedex 5242 com.dzbockjwetycgfwehgf4gcytwe.security /data/user/0/com.dzbockjwetycgfwehgf4gcytwe.security/app_p94c.sws.jb8y.b0r/obfs/0.obfedex 5242 com.dzbockjwetycgfwehgf4gcytwe.security /data/user/0/com.dzbockjwetycgfwehgf4gcytwe.security/app_p94c.sws.jb8y.b0r/obfs/1.obfedex 5242 com.dzbockjwetycgfwehgf4gcytwe.security /data/user/0/com.dzbockjwetycgfwehgf4gcytwe.security/app_p94c.sws.jb8y.b0r/obfs/1.obfedex 5242 com.dzbockjwetycgfwehgf4gcytwe.security /data/user/0/com.dzbockjwetycgfwehgf4gcytwe.security/app_p94c.sws.jb8y.b0r/obfs/2.obfedex 5242 com.dzbockjwetycgfwehgf4gcytwe.security /data/user/0/com.dzbockjwetycgfwehgf4gcytwe.security/app_p94c.sws.jb8y.b0r/obfs/2.obfedex 5242 com.dzbockjwetycgfwehgf4gcytwe.security /data/user/0/com.dzbockjwetycgfwehgf4gcytwe.security/app_p94c.sws.jb8y.b0r/obfs/3.obfedex 5242 com.dzbockjwetycgfwehgf4gcytwe.security /data/user/0/com.dzbockjwetycgfwehgf4gcytwe.security/app_p94c.sws.jb8y.b0r/obfs/3.obfedex 5242 com.dzbockjwetycgfwehgf4gcytwe.security /data/user/0/com.dzbockjwetycgfwehgf4gcytwe.security/app_p94c.sws.jb8y.b0r/obfs/4.obfedex 5242 com.dzbockjwetycgfwehgf4gcytwe.security /data/user/0/com.dzbockjwetycgfwehgf4gcytwe.security/app_p94c.sws.jb8y.b0r/obfs/4.obfedex 5242 com.dzbockjwetycgfwehgf4gcytwe.security - Queries the phone number (MSISDN for GSM devices) 1 TTPs
- Reads information about phone network operator. 1 TTPs
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.dzbockjwetycgfwehgf4gcytwe.security/app_p94c.sws.jb8y.b0r/obfs/0.obfedex
- Size 53KB
- SHA256 96b37a444cda40eae2765c39090272313e66125f157c0ea036dd1f14a7c18a01
- MD5 ee282f90f21d11a55f158b28ad4ec2bc
- SHA1 b8b286b31822bd60cde977e1a3a1348e85ed1d86
- SHA512 d292bf79282f54da7ed4b14aac40dd120ad0cc18725a9a6aa1711363b1394a11eeac9c1db6369f6292ef19440f6315e04d3b108b691ab91bf768eab6f9a53e05
- SSDEEP 768:PdKx5weszTq+bkgcGlbHmEcrN+Re4u1dY7IaB5gyAjDa:Pu7szO+YUlbHmEcrd1dYFAPa
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.dzbockjwetycgfwehgf4gcytwe.security/app_p94c.sws.jb8y.b0r/obfs/1.obfedex
- Size 61KB
- SHA256 f314d87d7182112f734dd2166b564a04f9404bf476e663ba93eaa4f467f91346
- MD5 414d57a6bbf3fe0e2e3afa9cafdc8d66
- SHA1 22f9a18bdc3fc9602e34124faaa3c19210cdabfd
- SHA512 1345a4a52ec22717e42a787c7760ea81b233526fd9e520fd7dc3517c94a71642e7de446d8d9052be0713e097e7fe08faaad252d202880358b6825d5c07347fe1
- SSDEEP 768:zoGdlPEjX5L94/5CsT6K7poGhsfAL1jDbKzUemofmd51lww22lBI:8GdNK5U0WoGh1vLem2YlflI
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.dzbockjwetycgfwehgf4gcytwe.security/app_p94c.sws.jb8y.b0r/obfs/2.obfedex
- Size 20KB
- SHA256 3dd104225ec115fb1111c889f8bfc589be68e2acbd260169648327c2923acca3
- MD5 778badeb555406d4f183eb5be07b0243
- SHA1 11092524cf1870a80101df7cbeb5568ca5b5948f
- SHA512 dfa60f9f7abf4081ccbe7a4a8e77bfc26acd589e00609028c9d4355fc11126e25a2fd952640359d57ce59600bbe7c6a783df489012f374dd46c7ea79542e5e0e
- SSDEEP 384:pTe0dL4Qv/229e9pZe7/7DKY8MY9cZcCsOgQJFU:B4WAW7/q1Mzc6nU
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.dzbockjwetycgfwehgf4gcytwe.security/app_p94c.sws.jb8y.b0r/obfs/3.obfedex
- Size 20KB
- SHA256 9f06ba1f434c7aa4828bc5f0d0ed7f356ff1f2a12f79b176dec5808558d219a2
- MD5 1770e8040a2b4ae8ad3f5ba261935e05
- SHA1 455088625c7eba8e2c309fc59abbfa76e72d1bd1
- SHA512 49a1f2c6c5b0b16c66fda2fd18a6ce658a1a028d93eb2f63dc51cba49bf966b98bf06080e0eb575b227b72079e3857c1c0859dcfffd8011883c77d1428310ef6
- SSDEEP 384:G57bL18aJVyYLG+vmldzrq0JgkOh2BeAPSLR:kbL18kt7edPqkegw
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.dzbockjwetycgfwehgf4gcytwe.security/app_p94c.sws.jb8y.b0r/obfs/4.obfedex
- Size 18KB
- SHA256 e89dea42c6922714ce33ed8f706c57a61ddb4f0d75d86a2b019e1dddeb9a2ae3
- MD5 10c92e0e1dd219d4b6c341456e9c2b80
- SHA1 6e8a14ab1d3637d667711cacd1c533bf1a2c55ac
- SHA512 49b8ca7e0b11f5bf838990fe2df513936b281151c16ac695f47eeb82753c04c7ea52fff6079926c2158747f017d177aee6e56fe7bd4d78f6830adc3b248cfa75
- SSDEEP 384:YYcPDgJLhjPYGQ+wlKo1Yd++raTQYwkUXBztGUkli3EVLlc:ZMDgvPY8wlKo1Yd+uTkONtXsw
- MD5 SHA1 SHA512 SSDEEP
- Path /storage/emulated/0/dzbockjwetycgfwehgf4gcytwe.txt
- Size 2B
- SHA256 4fc82b26aecb47d2868c4efbe3581732a3e7cbcc6c2efb32062c08170a05eeb8
- MD5 6512bd43d9caa6e02c990b0a82652dca
- SHA1 17ba0791499db908433b80f37c5fbc89b870084b
- SHA512 74a49c698dbd3c12e36b0b287447d833f74f3937ff132ebff7054baa18623c35a705bb18b82e2ac0384b5127db97016e63609f712bc90e3506cfbea97599f46f
- MD5 SHA1 SHA512