d269a51348bac31e94053041e8016847637a4b3e9e00dbbb04b0544d8eccb4a8

Analysis

max time kernel
3s
max time network
150s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
09-07-2024 22:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d269a51348bac31e94053041e8016847637a4b3e9e00dbbb04b0544d8eccb4a8.apk
Size

1.6MB
MD5

3dede11d9921508a5dcbf6991e0ec6d5
SHA1

caad71d7cc805fdf89379b9fae6ddfec737dfc0b
SHA256

d269a51348bac31e94053041e8016847637a4b3e9e00dbbb04b0544d8eccb4a8
SHA512

113ca616bc4fc12e236473361a16ea7ca104ddef1dbe8c1fe9a6e8563b1a6f7c94e0582e37423de9d51c6bc251797eff1e57cd1c70325b2f266bc0eb6d84ea8a
SSDEEP

24576:RkwfUbyq/HroFSg/63s1odhGChkE1pI1uhWgFe4KHdAOe0ORC5Nc+UeC7gZ8jt:RkcUWqrLGITWuDFe4IdATCt58gs

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

Processes:

rs.adsregex

ioc	pid	Process
/data/user/0/rs.adsregex/code_cache/i11111i111.zip	4950	rs.adsregex
/data/user/0/rs.adsregex/code_cache/i11111i111.zip!classes2.dex	4950	rs.adsregex

rs.adsregex
1⤵
- Loads dropped Dex/Jar
PID:4950

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/rs.adsregex/code_cache/i11111i111.zip

Filesize
163KB

MD5
58126170af87307181c176fdcdb6499a

SHA1
05def5c224a12a6b64cd250397f7dfab00174f9f

SHA256
459d973ff1baf8c8124e9a179cba43d82161745a38c60776d35c9113b440ccf2

SHA512
07cab1f740ca33baf1ffd0000868ea0f4189c3d63d7c15b37d54dfed2d69cb591768f5de5c3115768ea94237c10a1249f95fcbdcafe7600bf9d0b778da8984d1

Download Submit
/data/data/rs.adsregex/dpt-libs/x86_64/libdpt.so

Filesize
543KB

MD5
14a36e2eea3edcb7a7b9f00668c86dde

SHA1
25b0cf4f6423d29402a533517fc6b1277f10d7b1

SHA256
8f87c1fdcdadeafa04c11bc390675c2e293cddf8df09971854f637e19651070a

SHA512
695ebeb763361f19e1f6a561d88dd3b23e1c8284513e4a01e83a4876f92365c9653039595319f493450c2d75e04e9ff75ba5eeaab50c55363958b1ed279ef8d2

Download Submit
/data/user/0/rs.adsregex/code_cache/i11111i111.zip

Filesize
673KB

MD5
bf8e3906efde15a2584c6f1aef990652

SHA1
48fe4ff301934df9e2fe47e92d6b4b5ad28bfa4b

SHA256
60ef522353a5654305a7709dec341fe643bda55a325f16583a9e25c731cf6b7a

SHA512
8c67bb09b896535807c35359d740012adc412cff920aff3fb80f5db2f7e33a795275d07377e60a5635fbd10322a500d20b93e9140de832c87e4ea01cc4d14c05

Download Submit
/data/user/0/rs.adsregex/code_cache/i11111i111.zip!classes2.dex

Filesize
3KB

MD5
c15804d75ad84c1de89596a48950be14

SHA1
571ed1b9dfc541b2b3929bfa5727b408cae2bb8e

SHA256
07072b1c20c4cf6785cba0ea43158365c46dc027e5fb0d43a27826fa1206e5e4

SHA512
0612cc8aa98385477592de07c9c8cb5ad602d423a469c0c9cfc6341ff46aa2d4e84be5217bc087fc82f15dbdd2ccce1d72e37e3ff88a9405f4da21538e39e689

Download Submit