75cd1cc265f7a216e78c02058652f052f112a089c19b3ae3be1825f85ba10761

Analysis

max time kernel
2s
max time network
134s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
19/10/2024, 10:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Unionparivar.apk
Size

2.6MB
MD5

24d57695c782a62c7e239e127cd99f61
SHA1

16c34e1b57909de813366a26872deb222d3d4e42
SHA256

75cd1cc265f7a216e78c02058652f052f112a089c19b3ae3be1825f85ba10761
SHA512

c39571fbaf2b718ee7e0ca89a251b370b9206ba1ab3eeefacb191ca6fab07199e0fcc7800fa44c1fb15fb076f0130d76cb04550faec26ebedf68e47a06242bf3
SSDEEP

49152:/ylz9UWm7fJ5FFdsAWrhApFFGbh4iezs7TOZOUBuppzXnNXfGCCDo0Tfs99EjZdZ:wu57fJ5FF7WroQhxev1ubplCM0Tfs7EB

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4509	com.ubi.parivar
/system_ext/framework/androidx.window.sidecar.jar	4509	com.ubi.parivar

com.ubi.parivar
1⤵
- Loads dropped Dex/Jar
PID:4509

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.ubi.parivar/no_backup/androidx.work.workdb

Filesize
4KB

MD5
7e858c4054eb00fcddc653a04e5cd1c6

SHA1
2e056bf31a8d78df136f02a62afeeca77f4faccf

SHA256
9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

SHA512
d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

Download Submit
/data/data/com.ubi.parivar/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
223988d4913bdb3c7e7fc856f49bd6a9

SHA1
daedb4f97216074cbecb4e132abbb255744885de

SHA256
8218783664b5385ff96002678d71942e9f15bec7e79f6826e829f8b89ecabc41

SHA512
0ebcf897a9e891ab3335fca7c6813ff145da7b74690e2b5f16079248d61e2eb8f2c62ebbac76946e0634957e2bf3c9ef46898ae912daf833ecf41192e341889a

Download Submit
/data/data/com.ubi.parivar/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
1372c8d093765e4d74db7a274635fbc0

SHA1
700b8c6cc66322fcb906ee4beaf50d40b6d0ce0d

SHA256
5de1c617b3a53a58dce0691415589ff1def0e65dff06595892dfbcf51c59f38f

SHA512
0c489533df9878a6dfe853108aff7abe480bd3d65ac9b19e76ca6ea815b46fd9398151b131d5f0b6a79efbc3fdd1a267c560bc3df22a320ab86cbc993849a701

Download Submit
/system_ext/framework/androidx.window.sidecar.jar

Filesize
12KB

MD5
bdf3529e80318eb14e53a5bf3720c10d

SHA1
25c9ace4b1af6e80ebb2572345972c56505969ba

SHA256
bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

SHA512
48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b

Download Submit