d269a51348bac31e94053041e8016847637a4b3e9e00dbbb04b0544d8eccb4a8

Analysis

max time kernel
3s
max time network
150s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
09/07/2024, 22:04

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
d269a51348bac31e94053041e8016847637a4b3e9e00dbbb04b0544d8eccb4a8.apk
Size 1.6MB
Sample240709-1y36dazfpd
SHA256 d269a51348bac31e94053041e8016847637a4b3e9e00dbbb04b0544d8eccb4a8
MD5 3dede11d9921508a5dcbf6991e0ec6d5
SHA1 caad71d7cc805fdf89379b9fae6ddfec737dfc0b
SHA512 113ca616bc4fc12e236473361a16ea7ca104ddef1dbe8c1fe9a6e8563b1a6f7c94e0582e37423de9d51c6bc251797eff1e57cd1c70325b2f266bc0eb6d84ea8a
SSDEEP 24576:RkwfUbyq/HroFSg/63s1odhGChkE1pI1uhWgFe4KHdAOe0ORC5Nc+UeC7gZ8jt:RkcUWqrLGITWuDFe4IdATCt58gs
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/rs.adsregex/code_cache/i11111i111.zip	4950	rs.adsregex
/data/user/0/rs.adsregex/code_cache/i11111i111.zip!classes2.dex	4950	rs.adsregex

rs.adsregex
1⤵
- Loads dropped Dex/Jar
PID:4950

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

i11111i111.zip

Path /data/data/rs.adsregex/code_cache/i11111i111.zip
Size 163KB
SHA256 459d973ff1baf8c8124e9a179cba43d82161745a38c60776d35c9113b440ccf2
MD5 58126170af87307181c176fdcdb6499a
SHA1 05def5c224a12a6b64cd250397f7dfab00174f9f
SHA512 07cab1f740ca33baf1ffd0000868ea0f4189c3d63d7c15b37d54dfed2d69cb591768f5de5c3115768ea94237c10a1249f95fcbdcafe7600bf9d0b778da8984d1
SSDEEP 3072:X2czw/iSYR2OoFUGhOf6kwfzOv9KbIb7tAqUT5GU+RTIuCX1pcUf:XA/E2OoDsykwf6FqIbyq/FdCX1CS
MD5 SHA1 SHA512 SSDEEP

Submit Download

libdpt.so

Path /data/data/rs.adsregex/dpt-libs/x86_64/libdpt.so
Size 543KB
SHA256 8f87c1fdcdadeafa04c11bc390675c2e293cddf8df09971854f637e19651070a
MD5 14a36e2eea3edcb7a7b9f00668c86dde
SHA1 25b0cf4f6423d29402a533517fc6b1277f10d7b1
SHA512 695ebeb763361f19e1f6a561d88dd3b23e1c8284513e4a01e83a4876f92365c9653039595319f493450c2d75e04e9ff75ba5eeaab50c55363958b1ed279ef8d2
SSDEEP 6144:wTmKXFQl6Tqs9Wn9OTwT4toCDEhL0ti/7NO0D6ueGUEASRr72fzr0NtpALXMGD4m:wHN7LOEWBHjpEHsc3/FTVYnfDw
MD5 SHA1 SHA512 SSDEEP