f511bd33d3242911d05b0939f910a3133ef2ba0e0ff1e098128f9f3cd0c16610

Analysis

max time kernel
2s
max time network
131s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
11-07-2024 07:39

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f511bd33d3242911d05b0939f910a3133ef2ba0e0ff1e098128f9f3cd0c16610.apk
Size

11.9MB
MD5

4475064c5f6a5474e31f2f3dfafc22ed
SHA1

872199f3781706f51b84d8a89c1d148d26bcdbad
SHA256

f511bd33d3242911d05b0939f910a3133ef2ba0e0ff1e098128f9f3cd0c16610
SHA512

cf6095f2d93e078f42d26265699deed377af12f304dd83179140d32a69a034639d4e07b83b8bb999d503f6d8dc6ced46b6b88741ed39771eed6a12411648e4bc
SSDEEP

196608:tHkjVWApVgQBoMrdr+TnhpPsOz0VbMtiquy/WP0SxqdHgCg2RNB2KNcjktbs1:tHYGQBpdqpibWDe0SuH6WNBrba

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

Processes:

com.topjohnwu.magisk

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4513	com.topjohnwu.magisk
/system_ext/framework/androidx.window.sidecar.jar	4513	com.topjohnwu.magisk

com.topjohnwu.magisk
1⤵
- Loads dropped Dex/Jar
PID:4513

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.topjohnwu.magisk/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
4a1668145ea5b3c1a9d0841132574be4

SHA1
5403efc304c777a8fe96479b3884bd52f29bdfd9

SHA256
cef42cb65bbef4cb17c585ba6ac5b86c019ace833eb6d23fa31675dedd4a2881

SHA512
53f5bf0031ce921607bbf9a2cbce2e450269d7df62a59082aca984a3ed8947f4a452cd97ca598f9cbcaf690e9b8a330b96ff77226c9f509035ec7f0a3fe65b35

Download Submit
/data/misc/profiles/cur/0/com.topjohnwu.magisk/primary.prof

Filesize
2KB

MD5
1a6b66bb28fd3cd838884f168b48ddcc

SHA1
902524d1db3ef9be7d5a42fa59a679ae9e342820

SHA256
c26a72bb48f7d06d6d16b660802a1af72615722f79bcfbd17af9a0d08ed50c65

SHA512
b11bc9814178970547255a99a3fbc51121e16871b4b717ad0066299d00f0eb6f7f9599ca5af7a759e0262c3d82c2f26ea4be6784fe8238ab880aec073176e41c

Download Submit
/data/user_de/0/com.topjohnwu.magisk/cache/main.jar

Filesize
3KB

MD5
803d520477442e45318b1b0fc76c6c15

SHA1
68e0102a3a91f7a050cda807889b3ffa0e25ba18

SHA256
4efaf47682fe8bf49c1aaa9ee7b907ced7246277ca996086da2284324fc8a9ab

SHA512
2523395f82258842bce3edd4033af92c0b1e10d664ad8817f6622b9ea701851ca0ba03bb2c06b9bc956f5e8ee988eacd41e9042e5873045449dabe78d6dcd913

Download Submit
/system_ext/framework/androidx.window.sidecar.jar

Filesize
12KB

MD5
bdf3529e80318eb14e53a5bf3720c10d

SHA1
25c9ace4b1af6e80ebb2572345972c56505969ba

SHA256
bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

SHA512
48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b

Download Submit