Analysis
- max time kernel
12s - max time network
145s - platform
android_x64 - resource
android-x64-20240624-en - resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system - submitted
25/06/2024, 22:03
Static task
static1
2 signatures
Behavioral task
behavioral1
Sample
WhatsApp.apk
Resource
android-x86-arm-20240624-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
WhatsApp.apk
Resource
android-x64-20240624-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
WhatsApp.apk
Resource
android-x64-arm64-20240624-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
vk_dex.apk
Resource
android-x86-arm-20240624-en
0 signatures
150 seconds
Behavioral task
behavioral5
Sample
vk_dex.apk
Resource
android-x64-20240624-en
0 signatures
150 seconds
Behavioral task
behavioral6
Sample
vk_dex.apk
Resource
android-x64-arm64-20240624-en
0 signatures
150 seconds
General
- Target WhatsApp.apk
- Size 3.8MB
- Sample240625-1yllbswdqe
- SHA256 1941f273125921dcb46c2646e8b6ef58588712d733966def792228dd6d9ce5bb
- MD5 bb8459442d76afba871622a4bd4b4e41
- SHA1 b64e61a7e61ad28c1f36bdef62176c608d8da2dd
- SHA512 800d27b65d20c1acdf2b5e2becf6c1b55360397fef1fedf7bb057d362484e2cf3a4ef18e71cd092d784cf54b35583251a3908932f224367bb69f5341eac9937d
- SSDEEP 98304:1js3W3PDrXViF1xmw69KrsZQzCw/cPbIfo5fF:C3Ges9KraQPcjIfo/
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.xtuamuxlmp.cknsqskvtdi/code_cache/secondary-dexes/base.apk.classes1.zip 4961 com.xtuamuxlmp.cknsqskvtdi
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.xtuamuxlmp.cknsqskvtdi/code_cache/secondary-dexes/tmp-base.apk.classes3582852058812410917.zip
- Size 828KB
- SHA256 afa6e24202cf373b17a251ba065a5f0f503c44d49e3161eb4c5ce182000a27a9
- MD5 12c797a36a99cc2e395c86d0cf02cf4a
- SHA1 4170db5dd85ca3e359b591618ecbc705deea3b13
- SHA512 b3b816100b8de197f48edcea5d97027180700b4f3bec375ed5b78864896628db201121262269b7f9b4bb0160d641d55ea32cd7449690b6ee2b10f4ee07f11255
- SSDEEP 24576:r9JIY/AI+FYKwg2g99ZN+/XvRhGeBsYp3onmow:JDAdFYpeuv5hPsk3omow
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/com.xtuamuxlmp.cknsqskvtdi/code_cache/secondary-dexes/base.apk.classes1.zip
- Size 1.9MB
- SHA256 c4555a26c32f795af2bccb57b4afcdce650d699bd76bdcd0cb7840b7f758d436
- MD5 55e8d9bee56d416da445cc0fe2a82e28
- SHA1 fa0bc6739c357e4c7b4c425625d97a6cbcd8617a
- SHA512 db59c8cca4ba4913540ea0f0b2b763babe0f390c6f6ca9b1b9d36e1db4f584a4ec5db9422a3646dd2e9900f1738fb0528c29dbe7b81acab51c2b6f5907b76fd4
- SSDEEP 24576:DSJR6TQqjgb5umd/9UbtRMad7VVeems/RMOjswSSUWHlXU91123NCu2mUw0RiWIb:Dxfn9RXjswSSv41123NCu2mDWM
- MD5 SHA1 SHA512 SSDEEP