Analysis

  • max time kernel
    72s
  • max time network
    157s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    28-11-2024 20:17

General

  • Target

    app-release-2.apk

  • Size

    1.1MB

  • MD5

    6e7a6796cb2e1c08e7a966a9086aa347

  • SHA1

    4bc7f42e5726d93055ed7f13050d2c64caf7d38a

  • SHA256

    a6f91bcc1c313b706c06161e17947aeb0ad41a85b030775807e6991f1da7eca9

  • SHA512

    fd4e58c40665ab7f9dc52f2c21311345e42483852b53a85fe03e870163294ef96a97e6d756001b5b0649d47dbae7d63b16ef97199998a4411eede36e6196dec2

  • SSDEEP

    24576:ZwHwzbsbF50VN+Oa4YxexUy4fVmLzL8PXSgO//ojAfag/UzGf:yH8bsbF5POaJwxCmLcPXSgM/Ffag/Xf

Malware Config

Extracted

Family

hook

AES_key

Signatures

Processes

  • com.xazuputuboci.jusaya
    1⤵
    • Makes use of the framework's Accessibility service
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Makes use of the framework's foreground persistence service
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    • Checks memory information
    PID:4486

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.xazuputuboci.jusaya/no_backup/androidx.work.workdb

    Filesize

    4KB

    MD5

    7e858c4054eb00fcddc653a04e5cd1c6

    SHA1

    2e056bf31a8d78df136f02a62afeeca77f4faccf

    SHA256

    9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

    SHA512

    d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

  • /data/user/0/com.xazuputuboci.jusaya/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    cb6cb4d0b6291f0b46465dcfba703064

    SHA1

    ba174641d072a89de12764e0c811f0e0363d0c8c

    SHA256

    91d56c8871d03735e0ee2538d766b5dbcefcacf7579028491c62afc232392ea4

    SHA512

    e29284a155fc64f856918a359da2e459d419305d6411d7427cd743f47aa7169da7a8d5d8bd90b2e48e5b9408b1fef06bbd7d3211dd9b7174221643e5e9bc7599

  • /data/user/0/com.xazuputuboci.jusaya/no_backup/androidx.work.workdb-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/user/0/com.xazuputuboci.jusaya/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    9f24d9882d838ce974ec0b39e389e69f

    SHA1

    ac2f2fd87323f142bb42e97f86aef3e48e785268

    SHA256

    bb0411466427e6be4e0bacbf4dff19ee2103586e44b130a4fbdd225c63a0b1cc

    SHA512

    b4a24a576540585899db0e4a2b9cd78ef48d30866a4ff627514ea9362d874a55d50abb9325f6904249b2ccc4f9accc35d2c1837395aeccd9fa3cbfb48605c90a

  • /data/user/0/com.xazuputuboci.jusaya/no_backup/androidx.work.workdb-wal

    Filesize

    108KB

    MD5

    a343a22e5409e52b3379fcda8382de18

    SHA1

    37f9b1d152189bbdd8c798466709d10534124c24

    SHA256

    3f7817663f61c98d74ba7947c6396943d3a67ce37989479402347a7804150552

    SHA512

    6c512d54af94c05899c05c7cc89ee524d3c0ddc2212d37a82173046e71b600413526be2538d1a8cfb91c14a936296e8bd915e8043c1f4c4bd21c76fe0273c8ab

  • /data/user/0/com.xazuputuboci.jusaya/no_backup/androidx.work.workdb-wal

    Filesize

    173KB

    MD5

    636600acd43f24cd0691bef9f5666e02

    SHA1

    6b13a8627ad767334bd4b565c12472857e742d62

    SHA256

    b3fdf64b9e4b1392643790989e28618b566d3cff0620e5b550dc357e0d2a2ae4

    SHA512

    77ebb5d7afbf225da2b8b20e1e27cbbf4ac15463105270026adc65687a5a96dffac871bb1a5acdee24d481051e4003fddd6a2b39ad8d0cb130cee48ac6062bdd