Resubmissions

21/10/2024, 05:53

241021-glkzgstdnm10

07/07/2024, 09:16

240707-k8rbkaycjq1

Analysis

  • max time kernel
    91s
  • max time network
    303s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    21/10/2024, 05:53

General

  • Target
    Chrome.apk
  • Size 13.0MB
  • Sample241021-glkzgstdnm
  • SHA256 ba25744487f1f3b4b5a63aa93a0a38eefe6d502baf3f7eeeac53efe906006b1a
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.venture.nose
    1⤵
    • Loads dropped Dex/Jar
    PID:4248
    • /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.venture.nose/app_december/Yg.json --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.venture.nose/app_december/oat/x86/Yg.odex --compiler-filter=quicken --class-loader-context=&
      2⤵
      • Loads dropped Dex/Jar
      PID:4275

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Yg.json

        • Path /data/data/com.venture.nose/app_december/Yg.json
        • Size 2.8MB
        • SHA256 a10c5397c973ce87ac75add960119010bfb8a0561116f851b2af457fd02fb0d9
        • MD5 SHA1 SHA512 SSDEEP

        Yg.json

        • Path /data/data/com.venture.nose/app_december/Yg.json
        • Size 2.8MB
        • SHA256 b5b12ca015467a011b6b5a8ee58db391d54eceea12be3734e0dba2f87cd2dbe0
        • MD5 SHA1 SHA512 SSDEEP

        Yg.json

        • Path /data/user/0/com.venture.nose/app_december/Yg.json
        • Size 7.2MB
        • SHA256 1ab365c9e6ef6762b41c5761211e0f86fc38275f3faa81a937214115f418684e
        • MD5 SHA1 SHA512 SSDEEP

        Yg.json

        • Path /data/user/0/com.venture.nose/app_december/Yg.json
        • Size 7.2MB
        • SHA256 685fbd1790e197bb64912a233eb470ece543823b492e19adec834d79ab58e4a7
        • MD5 SHA1 SHA512 SSDEEP