Resubmissions

19/11/2024, 17:53

241119-wgmd3szdqp 7

19/11/2024, 17:50

241119-wembasygmb 7

Analysis

  • max time kernel
    9s
  • max time network
    54s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    19/11/2024, 17:53

General

  • Target

    katana-zero-v1.0.56-mod.apk

  • Size

    199.2MB

  • MD5

    815af50dde4465b17af7f4cedab745ab

  • SHA1

    b470616506cda8db94766b468d8bf1558589ab20

  • SHA256

    6040496222c4a8342ee7fcd4e403b1a2eb2f96bcd4f7281041484eea6afe4cbb

  • SHA512

    33c185faaad03f65712cf0fb2d1e15df83a9ea410a153e91ad662a7555518d5dcf752cd33fccc905c3c705742ba355d70429c5c0c2c2e1f821db0d952ac54cb1

  • SSDEEP

    6291456:hG8ryf2itgW/uzQA2cZB3H3YjvQnzgRo8m1mBpZNc:ElLtCzQA2cXXYjOj8mec

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs

Processes

  • com.netflix.NGP.KatanaZero
    1⤵
    • Loads dropped Dex/Jar
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:4469

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.netflix.NGP.KatanaZero/files/14d18718/14d18718

    Filesize

    228KB

    MD5

    4ec95044a6365f22bee6a8f62e52de13

    SHA1

    a284cc6b59e087ee51e71c52806e2077329adadb

    SHA256

    3d7bdc7d12884854ddfa2f5ac40372bf42bba41b278254b07db4c3477233a8a2

    SHA512

    4830cfd47a272e555852c0531df931ba267ebc871412e4397179687cfffe31697b7c28f246b50a34af386d602b1bfa728ce4bd45b56a9a9462f00022c11902d6

  • /data/data/com.netflix.NGP.KatanaZero/files/a709f35e1c321d588e86173b27ad48b4

    Filesize

    125B

    MD5

    9807b9f5a5386875aa8d62eced368895

    SHA1

    b707c33f73e03de95e2a279af5cc3c679953fb40

    SHA256

    9239bb1ed77d8843631def7dab296cc31ea880340383db64494c0af93fada947

    SHA512

    bbce67a2b09779ac5bd2ed4ce215963c83af7a40cbbf5f7447beeda6d4ba3fbb97f238deebdd3ddc1d47777dfcf4567bd25204f30933663a173fe89f12fce662