d672cabf04369c152207eb3a2a588b28ed7a72b4634cc3807d689f1a6ef4a0a5

Analysis

max time kernel
7s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240624-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
submitted
07/12/2024, 03:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

d672cabf04369c152207eb3a2a588b28ed7a72b4634cc3807d689f1a6ef4a0a5.apk
Size

77.4MB
MD5

67c28f3bd058a6d4b88c67a208e640a2
SHA1

dcc92a97f8c9a75af3ce30b55c6867ec7bb38d3a
SHA256

d672cabf04369c152207eb3a2a588b28ed7a72b4634cc3807d689f1a6ef4a0a5
SHA512

0231513ae4638fcbbb3b04dfb8a5c48eb4bbf653d263aef1426b7979b509789164a7e50e3139e80f16e5dd85c4e6ea530babb36e45e545ef38a78333c42d25f1
SSDEEP

1572864:RcTBBvhwzy6ZadFvANbpt3qc6tjD12JIEMh2/gdJLTppsFCGObZLBvSeFRtJ:R6kzDG6NbpdT6tjcTMhaYYYHvSez

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4468	com.olserapratama.pos.staging
/system_ext/framework/androidx.window.sidecar.jar	4468	com.olserapratama.pos.staging

com.olserapratama.pos.staging
1⤵
- Loads dropped Dex/Jar
PID:4468

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.olserapratama.pos.staging/cache/last-run-info

Filesize
67B

MD5
94e10e850bf39b9d0a6fef9969739ad4

SHA1
5a9424345b6455d1b84ed73ecdde7eeab7f83ac9

SHA256
da731d687400934bea5e647ed90766710215d2e224d53fd2912f6acbea356d5d

SHA512
8cb6f99259a95a259d7b3d15cd39f8973de6da14ef8691d77e320c71519921da6d8708f7d278b974e2bf5ea5e0854fbd16c31f44462cc36d4b93f9930a4768f0

Download Submit
/data/data/com.olserapratama.pos.staging/files/device-id

Filesize
45B

MD5
7b8a2db46f005d4321f19ca96a2b3577

SHA1
3eeb2305f9b4231966962c06fa2bf3dbb9e05d9d

SHA256
cbe7689c361e737e87873124fbaf8c5d9c967cc75fea8ffa8b06caf46272756e

SHA512
226ee98cb695151120daf1b0ba5d73da33f2c0cb0cbb6b5a4df6ea319ee758b51f8b9f1fbef1c1ae0e16e99a1e47a8ef50988b2d40a1520195e962270827a7a0

Download Submit
/data/data/com.olserapratama.pos.staging/files/internal-device-id

Filesize
45B

MD5
69c01963a750d3e68cbce50a5157aab9

SHA1
01d8cb0e998335b69b5e309392a15c70b9d856dc

SHA256
14bf4e7dad6c334e3dea709b54897fc2bc3e8e048601b5de535a608c3fa04b6b

SHA512
401179d96f0ed74fffdcd7db042a5cc9bf30f796ec32196d990be30fc58892cd145bc7c3d0d84ba91f3d13fb5edee2b023dfc00285e1d9f406bb8924b0af5ab7

Download Submit
/system_ext/framework/androidx.window.sidecar.jar

Filesize
12KB

MD5
bdf3529e80318eb14e53a5bf3720c10d

SHA1
25c9ace4b1af6e80ebb2572345972c56505969ba

SHA256
bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

SHA512
48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b

Download Submit