f0d9db1ab9a2587e8b2f6ca13e97f971431429c019a4b8623f1f5888c3f3f8a0

Resubmissions

10-07-2024 21:50

10-07-2024 02:41

max time kernel
4s
max time network
69s
platform
android_x64
resource
android-33-x64-arm64-20240624-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
submitted
10-07-2024 21:50

Target

Bostes2644_1.apk
Size

76.6MB
MD5

b7346c96af9fcdeb8a1c55bde2866256
SHA1

27b4a02dc35e72d3a6d91767bf31da5d21861226
SHA256

f0d9db1ab9a2587e8b2f6ca13e97f971431429c019a4b8623f1f5888c3f3f8a0
SHA512

4cd47eb38267c5e514a17def2822dc6e9d6953d46c96c16ceab2349e08e42dd3e288ef525b6b39c0899b6d90bf626609c55d015c3098989897435b17405c87c0
SSDEEP

1572864:vqAdS25mOlhNXuK8fDY0Uv3xsLNdd8gBB2IS:17nvZuK8fM0UP6n6Q2z

Score

7^/10

evasion

Loads dropped Dex/Jar 1 TTPs 4 IoCs

Runs executable file dropped to the device during analysis.

Download New Code at Runtime

Processes:

com.mobwhats.see

ioc	pid	process
/system_ext/framework/androidx.window.extensions.jar	4397	com.mobwhats.see
/system_ext/framework/androidx.window.extensions.jar	4397	com.mobwhats.see
/system_ext/framework/androidx.window.sidecar.jar	4397	com.mobwhats.see
/system_ext/framework/androidx.window.sidecar.jar	4397	com.mobwhats.see

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

/system_ext/framework/androidx.window.extensions.jar

Filesize
123KB

MD5
3056e1bdb7d4e19789d0319eff484bd0

SHA1
6791ae47aa9466fe0bca27ad6643f846853bbee4

SHA256
8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0

SHA512
c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658

Download Submit
/system_ext/framework/androidx.window.sidecar.jar

Filesize
25KB

MD5
29469324e59dfcc052f24b5af4e7b2c4

SHA1
10c1e17ac6f598037bb51baa07945663645de4eb

SHA256
9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a

SHA512
5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2

Download Submit