Resubmissions

20/11/2024, 13:58

241120-q9xgvsxdlb 7

20/11/2024, 13:57

241120-q9k4tsslck 6

20/11/2024, 13:44

241120-q19qtsyalm 7

20/11/2024, 13:42

241120-qz7j3sxckc 7

20/11/2024, 13:41

241120-qzgzesyajn 7

Analysis

  • max time kernel
    12s
  • max time network
    25s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240624-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
  • submitted
    20/11/2024, 13:42

General

  • Target

    46c1dac6ab259c443ffb430d78f53227.apk

  • Size

    21.7MB

  • MD5

    46c1dac6ab259c443ffb430d78f53227

  • SHA1

    a082164d3db681c426aceb32b1cf15cb7fdd805f

  • SHA256

    60b55876648845b67e3313ead3e3fe2cf9c4609a2c4a67cdb9df7dc210427055

  • SHA512

    e12bfeb3b18b4594b2d36f573e532514d5bd1b4dd036e3b990d2e17fb7d45d88042c5c9954f5c0cc9092b68aa6dd019f0996fe540b045b625777597da70fc05a

  • SSDEEP

    393216:pW+zGWQytGXRiE8le7b7AgSBefOLUtLao500k6WH6ilM7UY2fw:pWuTQggIVleH7IYfBtn50RlM7UYow

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 6 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
  • Checks CPU information 2 TTPs 1 IoCs

Processes

  • clmwq.ur8gc.r74yr
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    PID:4346

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/clmwq.ur8gc.r74yr/cache/1

    Filesize

    2.8MB

    MD5

    97d99fe21968f56a1f4153b8cdfb927e

    SHA1

    c825646f6d8e27356dbe674358b730a4a3b2e7f8

    SHA256

    4bbdb130d1a757de25bff107b7ef6cf71587d85f0b54257867ace449ba3ca37d

    SHA512

    02cadcfde1ac3538b432bddbee11b093c307808526aeddac79266106cd8bb578d7de5b8a205f8c28cda815a27a6385991d3e884a5a57cb8660f219f8556046c2

  • /data/data/clmwq.ur8gc.r74yr/cache/2

    Filesize

    1.0MB

    MD5

    53e0bf87a52283164069cb981b6caf59

    SHA1

    5e6dadaf661ce96ed5a5a1ac6681405d3daa55db

    SHA256

    f2ad59fcd13944ff603a4fe383b89a8d8702771faf716058fcce63b14ccb3e21

    SHA512

    fdec4ea15eed78203633392c7d42ccf560f60147f58be6a7f2bdaf4919c7f829234a56c0ccecf52ae8454ce5224fe23e3a17708b072fb391566354e90e018d1f

  • /data/data/clmwq.ur8gc.r74yr/files/profileInstalled

    Filesize

    24B

    MD5

    bee86a2d4359507e6366a9df6353337d

    SHA1

    0e7eea1adf3176914165aee067dd754c78d6ce0b

    SHA256

    b4e0c6319c47ddfa9f41c1479c403e2f0efa125cdde2dbad5865667fdaa26144

    SHA512

    75851d56e5b90bf9e131779df1010a4070d20a6ff48abeac0fb05f7b040d7a6029769414e9102958092df060aba93e0f2a975b11105114222760eb64a2d7cf3c

  • /data/data/clmwq.ur8gc.r74yr/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

    Filesize

    8B

    MD5

    4fd135bb33cf809343c7743112b9364e

    SHA1

    2596cfcf0d5bc50aa324e1ea5a102b0c86bf4bcd

    SHA256

    29ed9e03621dfd7f287cff6b4b69e3593dccb695358d8977fbdaee0e6d035a43

    SHA512

    80a8be26b329bfba49ce3a4e5f55acb5f1f0e5346d08f466ac2d90b70935cf0f4700ac30f1518848cf28fa4da50771938b24c76be60731a2fa3c9ca89ed7e420

  • /data/misc/profiles/cur/0/clmwq.ur8gc.r74yr/primary.prof

    Filesize

    433B

    MD5

    1a6148802263b027b0a506816fe8c33a

    SHA1

    17743a6fe6751aa75541dcaa11a53330294e7879

    SHA256

    96b41c4377152289b9dbbcdabdde3c14f2e55efb7bf89c473053fb699c02c2d1

    SHA512

    48b2d4da400321dfac3b16449ba15b364f61a2178b7bc4cd5e82091d563ecfcba1eda685a4c1ab9e631218f945beb91fb626d19d15dae08cc9b57f0efe5b0359

  • /system_ext/framework/androidx.window.extensions.jar

    Filesize

    123KB

    MD5

    3056e1bdb7d4e19789d0319eff484bd0

    SHA1

    6791ae47aa9466fe0bca27ad6643f846853bbee4

    SHA256

    8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0

    SHA512

    c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658

  • /system_ext/framework/androidx.window.sidecar.jar

    Filesize

    25KB

    MD5

    29469324e59dfcc052f24b5af4e7b2c4

    SHA1

    10c1e17ac6f598037bb51baa07945663645de4eb

    SHA256

    9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a

    SHA512

    5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2