20c21a0bf466412118a8b79e890e2ce5dd068a9a2d354f43f6b4b7c94ee16509

Analysis

max time kernel
9s
max time network
132s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
21/10/2024, 06:02

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
chrome.apk
Size 12.8MB
Sample241021-grflystfjm
SHA256 20c21a0bf466412118a8b79e890e2ce5dd068a9a2d354f43f6b4b7c94ee16509
MD5 2d31261264020e4c630dafb101a472dc
SHA1 b1d19008f6d6e138bd0b7207bdb2d30a7b47a8db
SHA512 f7e8505c6a3fbfac982571952f54fc08f57d4f853c49268033b4225598a7fd8f3238f56ced69004bf44f65aa1a69ebb79dc5753f0f3257de49fce97757df047e
SSDEEP 196608:oNzbW0tWEeoOFidthSlGoFVfaHmNorOv6/xCWKKV6pPycX/zTa8rSI8Nd:IPuoOQ9yfaH+ortGKwLJW
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.caught.provide/app_loyal/Myj.json	4275	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.caught.provide/app_loyal/Myj.json --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.caught.provide/app_loyal/oat/x86/Myj.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.caught.provide/app_loyal/Myj.json	4247	com.caught.provide

com.caught.provide
1⤵
- Loads dropped Dex/Jar
PID:4247
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.caught.provide/app_loyal/Myj.json --output-vdex-fd=41 --oat-fd=42 --oat-location=/data/user/0/com.caught.provide/app_loyal/oat/x86/Myj.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4275

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

Myj.json

Path /data/data/com.caught.provide/app_loyal/Myj.json
Size 2.8MB
SHA256 2437c4a29c08bf4a449ac58d3e2bb55d5dda9300f34398e7546d4245281dea69
MD5 78a43d2044f63bbe1364a8b1c87b1f97
SHA1 2bf3ac88dca6b3e698630e16833bfce0d828e30e
SHA512 0c34c39fb0f905971593421f1305b87d1040217161645e327c55744e722a7990e9f51d5a4a6031954848d8c4fa298c196efc483aa33f7d2643d9d3970e1b99e8
SSDEEP 49152:o9qS03Fpyym5dKJxrrofDwaB5lArFchS5O3lXELxyAQWb3Z+TJ7QPZp918wjPSHX:AqS0Hmn4VcDw0lM5ONU8WA7oZ1lPSHY8
MD5 SHA1 SHA512 SSDEEP

Submit Download

Myj.json

Path /data/data/com.caught.provide/app_loyal/Myj.json
Size 2.8MB
SHA256 503656b90cb88be0fb74dfd436e8225b43fbd5074dc3deef2c33858ba486dace
MD5 0eceb75c921a747557aad1552a44e0b5
SHA1 ad2b35ea53de7aca35d96cf1127709ba47ba2bd5
SHA512 cf8339026be55f2608c90f4a3dcdcbefb6514bc4e69207ce3ab1d071696b46927f1ae75c1bcb9914cfc028ff3e89bf0722d4e0f0f3e977d402fa355f36a5e0d8
SSDEEP 49152:bzlnyBwIRAJWZvmxP1gslajOXYk7TqpVy58ZahlJ9zPyYG5DMH2+xRPISNAWueDr:blrIRWmvEvcOXYETqpM+ZolrzPY5DAxz
MD5 SHA1 SHA512 SSDEEP

Submit Download

Myj.json

Path /data/user/0/com.caught.provide/app_loyal/Myj.json
Size 7.2MB
SHA256 4e596bf45db91bd8a49d07ac3b054340ec58e0911a8a96071073e1dc2072fdc9
MD5 6380162b8bb52bc08aa0327a7ca4371c
SHA1 bd150803c8ffcee360b622fd79df914b82708750
SHA512 2b62bd8396949c929720a0d2a4c616bf89fd303414a2cadc400e5770190361ca148c91f99968a3ab372221aff493ac1a3337cb9bbe4ca50ef4fa4fb4e6048915
SSDEEP 49152:ToMKhgF0zP8bMx8ajQK625f/vHkzNDvcbhbequ3OmDUOtMoEXBRcitgR42LlYdo:lKhgF0zQXK62g6bo3OOERzLgRBJYG
MD5 SHA1 SHA512 SSDEEP

Download

Myj.json

Path /data/user/0/com.caught.provide/app_loyal/Myj.json
Size 7.2MB
SHA256 6323bd28d476598dcbb9275cf954597780439355d505d1be2c69ee7b152e7211
MD5 0349ac6c897ef7773b770d0fc51da900
SHA1 cc81fa3960b03a3c24f17bcde42462c18ac3d91c
SHA512 b80ca08323e0cf453321545137fc763c5cea9dcd5e3ea7ab20f7865dd1b76361248b66f35beac720910c3af2d4ffad2315b031d7b3cca1939bbbc27d0da6e9ef
SSDEEP 49152:ToMKhgF0zP8bMx8ajQK625f/vHkzNDvcbhbequ3OmDUOtMoEXBRcivuairisb1EE:lKhgF0zQXK62g6bo3OOERzN8SoGG
MD5 SHA1 SHA512 SSDEEP

Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads