a2d9bf1c2a8eaa3e324c93bc4182d7a40b5b95534062341e6b6c02f8c3d661a9

Analysis

max time kernel
4s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
10-07-2024 22:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a2d9bf1c2a8eaa3e324c93bc4182d7a40b5b95534062341e6b6c02f8c3d661a9.apk
Size

1.6MB
MD5

0c4be6c4668a710648d221a3b1932728
SHA1

e647963a5d3a363a3d68be50ce06ebc720d439c9
SHA256

a2d9bf1c2a8eaa3e324c93bc4182d7a40b5b95534062341e6b6c02f8c3d661a9
SHA512

cfc1a6ef6dc8fa0f5401fd5284e2420d66bd25c25ca8cb6992bff65aa8bd82514d939ece7177f096926ed7393e6fa6522f9b5c50e073a3c6422c0d8c37d62d13
SSDEEP

24576:JkwfUbyq/HroFSg/63s1odhGChkE1pI1uhWgFe4KHdAOe0ORC5NK+UeC7gZ8P:JkcUWqrLGITWuDFe4IdATC358gC

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

Processes:

rs.adsregex

ioc	pid	Process
/data/user/0/rs.adsregex/code_cache/i11111i111.zip	4531	rs.adsregex
/data/user/0/rs.adsregex/code_cache/i11111i111.zip!classes2.dex	4531	rs.adsregex

rs.adsregex
1⤵
- Loads dropped Dex/Jar
PID:4531

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/rs.adsregex/code_cache/i11111i111.zip

Filesize
163KB

MD5
58126170af87307181c176fdcdb6499a

SHA1
05def5c224a12a6b64cd250397f7dfab00174f9f

SHA256
459d973ff1baf8c8124e9a179cba43d82161745a38c60776d35c9113b440ccf2

SHA512
07cab1f740ca33baf1ffd0000868ea0f4189c3d63d7c15b37d54dfed2d69cb591768f5de5c3115768ea94237c10a1249f95fcbdcafe7600bf9d0b778da8984d1

Download Submit
/data/data/rs.adsregex/dpt-libs/x86_64/libdpt.so

Filesize
543KB

MD5
14a36e2eea3edcb7a7b9f00668c86dde

SHA1
25b0cf4f6423d29402a533517fc6b1277f10d7b1

SHA256
8f87c1fdcdadeafa04c11bc390675c2e293cddf8df09971854f637e19651070a

SHA512
695ebeb763361f19e1f6a561d88dd3b23e1c8284513e4a01e83a4876f92365c9653039595319f493450c2d75e04e9ff75ba5eeaab50c55363958b1ed279ef8d2

Download Submit
/data/user/0/rs.adsregex/code_cache/i11111i111.zip

Filesize
673KB

MD5
bf8e3906efde15a2584c6f1aef990652

SHA1
48fe4ff301934df9e2fe47e92d6b4b5ad28bfa4b

SHA256
60ef522353a5654305a7709dec341fe643bda55a325f16583a9e25c731cf6b7a

SHA512
8c67bb09b896535807c35359d740012adc412cff920aff3fb80f5db2f7e33a795275d07377e60a5635fbd10322a500d20b93e9140de832c87e4ea01cc4d14c05

Download Submit
/data/user/0/rs.adsregex/code_cache/i11111i111.zip!classes2.dex

Filesize
3KB

MD5
c15804d75ad84c1de89596a48950be14

SHA1
571ed1b9dfc541b2b3929bfa5727b408cae2bb8e

SHA256
07072b1c20c4cf6785cba0ea43158365c46dc027e5fb0d43a27826fa1206e5e4

SHA512
0612cc8aa98385477592de07c9c8cb5ad602d423a469c0c9cfc6341ff46aa2d4e84be5217bc087fc82f15dbdd2ccce1d72e37e3ff88a9405f4da21538e39e689

Download Submit