Analysis

  • max time kernel
    167s
  • max time network
    161s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    16/06/2024, 22:50

General

  • Target
    bp.apk
  • Size 503KB
  • Sample240616-2sbplssarc
  • SHA256 687c013d34e4519d797549b0b34562855e44f645ac1ccca8f74de0fbdd380717
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 6 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.bmob.app.sport
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4259
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/data/com.bmob.app.sport/zwr_bef/m.dex --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/data/com.bmob.app.sport/zwr_bef/oat/x86/m.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4294
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.bmob.app.sport/app_zwr_dd/m.dex --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.bmob.app.sport/app_zwr_dd/oat/x86/m.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4355

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        m.dex

        • Path /data/data/com.bmob.app.sport/app_zwr_dd/m.dex
        • Size 892KB
        • SHA256 3a7e0f4b537ff39d975e6916adeed77238ca54b4c596190b61bd2e28a9a17b26
        • MD5 SHA1 SHA512 SSDEEP

        m1718578227161.zde

        • Path /data/data/com.bmob.app.sport/app_zwr_ed2/m1718578227161.zde
        • Size 267KB
        • SHA256 476b8f79a578cdbfe8e5237bd0f00e437edd32adc57569f0eea628f8daa4d631
        • MD5 SHA1 SHA512 SSDEEP

        m.dex

        • Path /data/data/com.bmob.app.sport/zwr_bef/m.dex
        • Size 14KB
        • SHA256 5da3b561b0134668961e669c4521c6d5b3b256b3bdb2673c7eea606c9357acec
        • MD5 SHA1 SHA512 SSDEEP

        m.dex

        • Path /data/data/com.bmob.app.sport/zwr_bef/m.dex
        • Size 14KB
        • SHA256 413800090523aa200505b12bfdd0fe1db8c88c8fbeff1b2c4d7819fda3b4bc6c
        • MD5 SHA1 SHA512 SSDEEP

        m.dex

        • Path /data/user/0/com.bmob.app.sport/app_zwr_dd/m.dex
        • Size 892KB
        • SHA256 8c5051bb6492ec0dfae4630c82427fb311d373303b858b2699b3037045ea3b61
        • MD5 SHA1 SHA512 SSDEEP