Analysis

  • max time kernel
    170s
  • max time network
    190s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    02/08/2024, 23:36

General

  • Target
    960b8e06d0db96f0bfcd044167a1af9b7397c73a13f222cdcce13f4824a8ffd4.apk
  • Size 20.5MB
  • Sample240802-3l24navfnp
  • SHA256 960b8e06d0db96f0bfcd044167a1af9b7397c73a13f222cdcce13f4824a8ffd4
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • xspcmj.qiegf
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries account information for other applications stored on the device
    • Makes use of the framework's foreground persistence service
    • Requests cell location
    • Schedules tasks to execute at a specified time
    PID:4376

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • Path /data/user/0/xspcmj.qiegf/[email protected]
        • Size 2.6MB
        • SHA256 b1da8dddf686b15b020b54c3509896b4a96b080604cd9d9cbf302e4beee473ce
        • MD5 SHA1 SHA512 SSDEEP
        • Path /data/user/0/xspcmj.qiegf/[email protected]
        • Size 1.2MB
        • SHA256 c6f157d3401cf969f57b4d102e14fc097676f11cd4911a68a3e08cafaf2aa94c
        • MD5 SHA1 SHA512 SSDEEP

        SettingsDB

        • Path /data/user/0/xspcmj.qiegf/databases/SettingsDB
        • Size 124KB
        • SHA256 9b72e53428efa4d1b97f3e59a765390e5116af3b6be16c645a61a8f96c040c97
        • MD5 SHA1 SHA512 SSDEEP

        SettingsDB

        • Path /data/user/0/xspcmj.qiegf/databases/SettingsDB
        • Size 96KB
        • SHA256 0b891bdfee4b0d54f4d1393a07904b29bc9c25b06f2f5f3ba07730a2ab10706e
        • MD5 SHA1 SHA512 SSDEEP

        SettingsDB

        • Path /data/user/0/xspcmj.qiegf/databases/SettingsDB
        • Size 96KB
        • SHA256 9fab6073ffb9dc81165ae8493073c54f5963556623681845d9a3e46b51e79855
        • MD5 SHA1 SHA512 SSDEEP

        SettingsDB

        • Path /data/user/0/xspcmj.qiegf/databases/SettingsDB
        • Size 96KB
        • SHA256 2ca2e770a33992a81e5eddcfb609dfa028e6bd6286b30a252311f84f35590b40
        • MD5 SHA1 SHA512 SSDEEP

        SettingsDB

        • Path /data/user/0/xspcmj.qiegf/databases/SettingsDB
        • Size 96KB
        • SHA256 49afd97486f0aa5b0dbdb466188e2491c6ed2d87fb3eb3638b0f24297b5610fb
        • MD5 SHA1 SHA512 SSDEEP

        SettingsDB

        • Path /data/user/0/xspcmj.qiegf/databases/SettingsDB
        • Size 96KB
        • SHA256 82dcf5d4060c8623fa08f4d3fb6044e423b698e1a1c4df9ff13a583d4dc6b174
        • MD5 SHA1 SHA512 SSDEEP

        SettingsDB-journal

        • Path /data/user/0/xspcmj.qiegf/databases/SettingsDB-journal
        • Size 512B
        • SHA256 2d427f4f674f1de2ab6ba5de043bb51a64bcef3c37c65e2bbc8fb5123629c989
        • MD5 SHA1 SHA512

        SettingsDB-journal

        • Path /data/user/0/xspcmj.qiegf/databases/SettingsDB-journal
        • Size 8KB
        • SHA256 eee211b7839264ec95fb6e47f13205f0ed03b5cd595f9f118a363451565e5f4d
        • MD5 SHA1 SHA512 SSDEEP

        SettingsDB-journal

        • Path /data/user/0/xspcmj.qiegf/databases/SettingsDB-journal
        • Size 4KB
        • SHA256 6edbcaa37b069a250856b1c20ec6b0dd490b1dff2bc992c37a7fe43d0e0366ef
        • MD5 SHA1 SHA512 SSDEEP

        SettingsDB-journal

        • Path /data/user/0/xspcmj.qiegf/databases/SettingsDB-journal
        • Size 8KB
        • SHA256 141c5c6c8628fa5bce55e318936a169097c59644bcadc2ca0369b89da7491926
        • MD5 SHA1 SHA512 SSDEEP

        SettingsDB-journal

        • Path /data/user/0/xspcmj.qiegf/databases/SettingsDB-journal
        • Size 12KB
        • SHA256 a5b8156aa6e603604e78b481047a95b1e82fdb51cafb75a9c8d438fb8f217f2f
        • MD5 SHA1 SHA512 SSDEEP

        SettingsDB-journal

        • Path /data/user/0/xspcmj.qiegf/databases/SettingsDB-journal
        • Size 20KB
        • SHA256 e59396401bb65816cb3a784b22f040d4b121c8f70ae94acb0436a5665e71b890
        • MD5 SHA1 SHA512 SSDEEP

        main.md

        • Path /storage/emulated/0/.am/dm/md/main.md
        • Size 2.6MB
        • SHA256 db50acab3ed87a8cf5df819c8c88e3364f966dd5279d1f3a3f8e3154ab8cc326
        • MD5 SHA1 SHA512 SSDEEP

        main_tools.md

        • Path /storage/emulated/0/.am/dm/md/main_tools.md
        • Size 1.2MB
        • SHA256 2b089f76930214706716aceba0bc6cefe6e132d14dd7d0a7c59eaa4f90f126f0
        • MD5 SHA1 SHA512 SSDEEP

        log.txt

        • Path /storage/emulated/0/.am/log.txt
        • Size 172B
        • SHA256 eb24b9187307a1e0dca48d22603bf14c2bdc2ffe6c6da5e2cd0038b3a34990b8
        • MD5 SHA1 SHA512

        log.txt

        • Path /storage/emulated/0/.am/log.txt
        • Size 151B
        • SHA256 3e54a60d042eee4045816a9ff080871293d8df17de970556c16bddb39004c3c7
        • MD5 SHA1 SHA512

        log.txt

        • Path /storage/emulated/0/.am/log.txt
        • Size 4KB
        • SHA256 7a33c702fbc7e291311f5620314758746668ef244b0ac36b72916578c4415ea3
        • MD5 SHA1 SHA512 SSDEEP

        log.txt

        • Path /storage/emulated/0/.am/log.txt
        • Size 63B
        • SHA256 35eceb7a37656a4aac66d961f77c1e2b7f9731a90bed4d1023c663e63aa18819
        • MD5 SHA1 SHA512

        log.txt

        • Path /storage/emulated/0/.am/log.txt
        • Size 71B
        • SHA256 7a966d3695454f2785b850bc41bfb52c34744aa6993ebb1a0918b2072cfc8b6f
        • MD5 SHA1 SHA512

        log.txt

        • Path /storage/emulated/0/.am/log.txt
        • Size 182B
        • SHA256 77f3e46b8ffcd4cb0e48853f133eca1946619b4174fca3d759cdc8db6068596d
        • MD5 SHA1 SHA512

        log.txt

        • Path /storage/emulated/0/.am/log.txt
        • Size 128B
        • SHA256 4a03ff1c33d39de8b0cb6be25ab7eeb8bc6c8d3caf779950be3b5d2c20dd4814
        • MD5 SHA1 SHA512

        log_.txt

        • Path /storage/emulated/0/.am/log_.txt
        • Size 22KB
        • SHA256 f77fdb6fd9ae59763798b948ac3f51e211fc534a230448543cffdb9cd5440866
        • MD5 SHA1 SHA512 SSDEEP

        log_.txt.zip

        • Path /storage/emulated/0/.am/log_.txt.zip
        • Size 6KB
        • SHA256 9dc8261d1528c26aab8f02966c1b58cf83a0dc847844983c966a594576a508b0
        • MD5 SHA1 SHA512 SSDEEP

        log_1722641853178.txt.zip

        • Path /storage/emulated/0/.am/log_1722641853178.txt.zip
        • Size 219B
        • SHA256 a97699b880afdf7caaa362652360796275a58aef50b8ed882c08cc4863ce0123
        • MD5 SHA1 SHA512

        mch.apk (deleted)

        • Path /storage/emulated/0/Android/data/xspcmj.qiegf/files/Download/mch.apk (deleted)
        • Size 64KB
        • SHA256 3cf935d3101700253aa86e9d233201e587cfdd71b44491414b9d0f8f351febc0
        • MD5 SHA1 SHA512 SSDEEP