Analysis

  • max time kernel
    130s
  • max time network
    150s
  • platform
    android-13_x64
  • resource
    android-33-x64-arm64-20240910-en
  • resource tags

    arch:arm64arch:x64arch:x86image:android-33-x64-arm64-20240910-enlocale:en-usos:android-13-x64system
  • submitted
    01/11/2024, 02:49

General

  • Target
    cb638b84f41c3bdb88e14a3f11f4dad99896562149c6e4963f40e8f4ab4f088c.apk
  • Size 20.5MB
  • Sample241101-dbe4pstrcx
  • SHA256 cb638b84f41c3bdb88e14a3f11f4dad99896562149c6e4963f40e8f4ab4f088c
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • mbxaq.yntvh
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Queries account information for other applications stored on the device
    • Makes use of the framework's foreground persistence service
    • Requests cell location
    • Schedules tasks to execute at a specified time
    PID:4512

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • Path /data/user/0/mbxaq.yntvh/[email protected]
        • Size 1.2MB
        • SHA256 c6f157d3401cf969f57b4d102e14fc097676f11cd4911a68a3e08cafaf2aa94c
        • MD5 SHA1 SHA512 SSDEEP
        • Path /data/user/0/mbxaq.yntvh/[email protected]
        • Size 2.6MB
        • SHA256 264d3dbae3c9977067f877e6fbc381970059016818da052dc74567c4f2d03f7c
        • MD5 SHA1 SHA512 SSDEEP

        SettingsDB

        • Path /data/user/0/mbxaq.yntvh/databases/SettingsDB
        • Size 124KB
        • SHA256 9b72e53428efa4d1b97f3e59a765390e5116af3b6be16c645a61a8f96c040c97
        • MD5 SHA1 SHA512 SSDEEP

        SettingsDB

        • Path /data/user/0/mbxaq.yntvh/databases/SettingsDB
        • Size 96KB
        • SHA256 4c181fcb67c9290b14000fe201ec16e69522982930d9b01308e7189c4e8e3d77
        • MD5 SHA1 SHA512 SSDEEP

        SettingsDB

        • Path /data/user/0/mbxaq.yntvh/databases/SettingsDB
        • Size 96KB
        • SHA256 12f120aa66c75b87b1924c7c6a6b308f8f2606fd7293b6135a3e7f12faab01aa
        • MD5 SHA1 SHA512 SSDEEP

        SettingsDB

        • Path /data/user/0/mbxaq.yntvh/databases/SettingsDB
        • Size 96KB
        • SHA256 3ebea23ae2e14df2ec6db46e2e6fc16d30b60827dfefcb1512a3329b8de7bbad
        • MD5 SHA1 SHA512 SSDEEP

        SettingsDB

        • Path /data/user/0/mbxaq.yntvh/databases/SettingsDB
        • Size 96KB
        • SHA256 00904beaed35f989f114ed89a505fa32099d009dbe2c0ade461bfe97409c6998
        • MD5 SHA1 SHA512 SSDEEP

        SettingsDB

        • Path /data/user/0/mbxaq.yntvh/databases/SettingsDB
        • Size 96KB
        • SHA256 b81267bfbb124d02308743339a3e9c0c19ac2eeb79a416cf97cecbdee6cc64dc
        • MD5 SHA1 SHA512 SSDEEP

        SettingsDB-journal

        • Path /data/user/0/mbxaq.yntvh/databases/SettingsDB-journal
        • Size 512B
        • SHA256 674c0499ad0557be56d92e42711e0439b8cfdc6dbe7b61895c85783cb2734112
        • MD5 SHA1 SHA512

        SettingsDB-journal

        • Path /data/user/0/mbxaq.yntvh/databases/SettingsDB-journal
        • Size 8KB
        • SHA256 5c835217b2fdf318dc6dd9a1d5a546bcd70ae8f1df1262b850338d9322ce9017
        • MD5 SHA1 SHA512 SSDEEP

        SettingsDB-journal

        • Path /data/user/0/mbxaq.yntvh/databases/SettingsDB-journal
        • Size 4KB
        • SHA256 295402198623dfaacd6061b9b177dcf478791a808285359ca8168ba472880b02
        • MD5 SHA1 SHA512 SSDEEP

        SettingsDB-journal

        • Path /data/user/0/mbxaq.yntvh/databases/SettingsDB-journal
        • Size 8KB
        • SHA256 a7586ee892623faf4b01c9646e560005d5bf8276ccb63787e44831ba1f2276da
        • MD5 SHA1 SHA512 SSDEEP

        SettingsDB-journal

        • Path /data/user/0/mbxaq.yntvh/databases/SettingsDB-journal
        • Size 12KB
        • SHA256 491d0d6e3f0d2d4a27d61134b9aa8a71a6c3103abaf0c8f21cb8cbce75466055
        • MD5 SHA1 SHA512 SSDEEP

        SettingsDB-journal

        • Path /data/user/0/mbxaq.yntvh/databases/SettingsDB-journal
        • Size 20KB
        • SHA256 105e71c2b8922e8606a0acad789cdb4dc36ef6c01a764364e4d4512ac4a88d8c
        • MD5 SHA1 SHA512 SSDEEP

        main.md

        • Path /storage/emulated/0/.am/dm/md/main.md
        • Size 2.6MB
        • SHA256 2b65fbbe30242b1c4f99ebd3206a1f067455c75e065ca2a498779a1b39ddffc6
        • MD5 SHA1 SHA512 SSDEEP

        main_tools.md

        • Path /storage/emulated/0/.am/dm/md/main_tools.md
        • Size 1.2MB
        • SHA256 2b089f76930214706716aceba0bc6cefe6e132d14dd7d0a7c59eaa4f90f126f0
        • MD5 SHA1 SHA512 SSDEEP

        log.txt

        • Path /storage/emulated/0/.am/log.txt
        • Size 173B
        • SHA256 817b8e2d613997820bcf06f0c2e152ed7d2a1960909f989700df4dbc7b1ab8aa
        • MD5 SHA1 SHA512

        log.txt

        • Path /storage/emulated/0/.am/log.txt
        • Size 152B
        • SHA256 a346daf0925a61c2a2d060d355ad8176478b93ce9cd7b6428e5ce5bb993085eb
        • MD5 SHA1 SHA512

        log.txt

        • Path /storage/emulated/0/.am/log.txt
        • Size 4KB
        • SHA256 08e6ef389d22d705d8d66930f0f9da340229d1ae037be488f1c8d48471f0c3de
        • MD5 SHA1 SHA512 SSDEEP

        log.txt

        • Path /storage/emulated/0/.am/log.txt
        • Size 64B
        • SHA256 1d0903cfb8ed68bc4fc2edd7ec7bb7c3b01b7c5ff573ce28b613d3d892feed97
        • MD5 SHA1 SHA512

        log.txt

        • Path /storage/emulated/0/.am/log.txt
        • Size 72B
        • SHA256 0c274657cafaaaa7429dabc2c6534594cd178dcbff85efe2251c9d22ebb06567
        • MD5 SHA1 SHA512

        log.txt

        • Path /storage/emulated/0/.am/log.txt
        • Size 181B
        • SHA256 48bd1249c801ae0a5097f35656ad7b414a4fbfd8ebd5c0aa8dfba5ff6193a1e0
        • MD5 SHA1 SHA512

        log.txt

        • Path /storage/emulated/0/.am/log.txt
        • Size 128B
        • SHA256 15bee8b26c33035cced953dd6656c57f8cf84284e59a0717b43238505c50e250
        • MD5 SHA1 SHA512

        log_.txt

        • Path /storage/emulated/0/.am/log_.txt
        • Size 22KB
        • SHA256 4f1e4de128c5b2642bf5456b10a008e2592ecade2711c4e56d788fe193cf7de5
        • MD5 SHA1 SHA512 SSDEEP

        log_.txt.zip

        • Path /storage/emulated/0/.am/log_.txt.zip
        • Size 6KB
        • SHA256 64da4c840200ef4e1ecc0dd0bb3cd5bfd6813084c556bee99e3d4ace91d83175
        • MD5 SHA1 SHA512 SSDEEP

        log_1730429400925.txt.zip

        • Path /storage/emulated/0/.am/log_1730429400925.txt.zip
        • Size 220B
        • SHA256 5e1f0160410c9a0db62a4ff6cf096442c0a01d515f3e983389c6993385cf01af
        • MD5 SHA1 SHA512