Analysis

  • max time kernel
    21s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-x64-20240611.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
  • submitted
    15/06/2024, 00:06

General

  • Target
    6a5a918efe3b6425ecef6fcf4c747fc229a263953bee317bcd1fd87b56f202db.apk
  • Size 321KB
  • Sample240615-ad4naswaml
  • SHA256 6a5a918efe3b6425ecef6fcf4c747fc229a263953bee317bcd1fd87b56f202db
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 10 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries the phone number (MSISDN for GSM devices) 1 TTPs
  • Reads information about phone network operator. 1 TTPs

Processes

  • com.dzbockjwetycgfwehgf4gcytwe.security
    1⤵
    • Loads dropped Dex/Jar
    PID:5242

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        0.obfedex

        • Path /data/data/com.dzbockjwetycgfwehgf4gcytwe.security/app_p94c.sws.jb8y.b0r/obfs/0.obfedex
        • Size 53KB
        • SHA256 96b37a444cda40eae2765c39090272313e66125f157c0ea036dd1f14a7c18a01
        • MD5 SHA1 SHA512 SSDEEP

        1.obfedex

        • Path /data/data/com.dzbockjwetycgfwehgf4gcytwe.security/app_p94c.sws.jb8y.b0r/obfs/1.obfedex
        • Size 61KB
        • SHA256 f314d87d7182112f734dd2166b564a04f9404bf476e663ba93eaa4f467f91346
        • MD5 SHA1 SHA512 SSDEEP

        2.obfedex

        • Path /data/data/com.dzbockjwetycgfwehgf4gcytwe.security/app_p94c.sws.jb8y.b0r/obfs/2.obfedex
        • Size 20KB
        • SHA256 3dd104225ec115fb1111c889f8bfc589be68e2acbd260169648327c2923acca3
        • MD5 SHA1 SHA512 SSDEEP

        3.obfedex

        • Path /data/data/com.dzbockjwetycgfwehgf4gcytwe.security/app_p94c.sws.jb8y.b0r/obfs/3.obfedex
        • Size 20KB
        • SHA256 9f06ba1f434c7aa4828bc5f0d0ed7f356ff1f2a12f79b176dec5808558d219a2
        • MD5 SHA1 SHA512 SSDEEP

        4.obfedex

        • Path /data/data/com.dzbockjwetycgfwehgf4gcytwe.security/app_p94c.sws.jb8y.b0r/obfs/4.obfedex
        • Size 18KB
        • SHA256 e89dea42c6922714ce33ed8f706c57a61ddb4f0d75d86a2b019e1dddeb9a2ae3
        • MD5 SHA1 SHA512 SSDEEP

        dzbockjwetycgfwehgf4gcytwe.txt

        • Path /storage/emulated/0/dzbockjwetycgfwehgf4gcytwe.txt
        • Size 2B
        • SHA256 4fc82b26aecb47d2868c4efbe3581732a3e7cbcc6c2efb32062c08170a05eeb8
        • MD5 SHA1 SHA512