134f0aec5d98c54cb4937fc8e0f0f6f2962a64d1b5ba016253b1143e9fb6d5cb

Analysis

max time kernel
0s
max time network
150s
platform
android-10_x64
resource
android-x64-20240910-en
resource tags

arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system
submitted
10/12/2024, 22:05

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

134f0aec5d98c54cb4937fc8e0f0f6f2962a64d1b5ba016253b1143e9fb6d5cb.apk
Size

4.7MB
MD5

f89be21b6a36fe0d868a8e354a1c317b
SHA1

0a156dcc075436ea41efdf6645147dd1b825f5d2
SHA256

134f0aec5d98c54cb4937fc8e0f0f6f2962a64d1b5ba016253b1143e9fb6d5cb
SHA512

3060fab7a621a514d4f6886d95df4d297e2bef79483bb1ae03d2f2cb953f0dc0ef15fbe856ae18fcef698d0194987dde70f524beb5b7978e476d90077da5937c
SSDEEP

98304:kLdnmILTxZH5NnHuJNByPQAJppjG2bYn1tcKlmp/pHjCTzZ3xG9WpR6b3gNqPE:kXLld333jGQg1tcKlYDCTzdxG9WUpE

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.mayonejbir/app_dex/classes.dex	5093	com.mayonejbir
/data/user/0/com.mayonejbir/app_dex/classes.dex	5093	com.mayonejbir

com.mayonejbir
1⤵
- Loads dropped Dex/Jar
PID:5093

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.mayonejbir/app_dex/classes.dex

Filesize
3KB

MD5
f2596728d8826c98e91c9c460a8aa152

SHA1
d6274ce7b384926ddb861611cb2638bb3ec674fe

SHA256
380078de119d3ad353906370026d0c9610a0c40eaecfecfdd2f31f98daac0891

SHA512
0c395fae4d31496f9dc5f54a2e24196c0b9f8470e6406e25e6ef269dc4ce4c3624908f3a47d9b259d12c7f35e58d79d97f8a229907338f1e35fd591c627b5857

Download Submit
/data/data/com.mayonejbir/cache/classes.dex

Filesize
1KB

MD5
70fa8e3c7bd51f77db75734a75c879ef

SHA1
eb71e69a8db41c788d0bf4f229357291d442328a

SHA256
4b269248b82fe021bc493ef236d37675c44ceecfed4642c18d197d121ac42cea

SHA512
bee9c8180647094c0711327e7f6ea6318121978d342a3bd878ff6ff4b98ed967056b7dc73002b1f2693b6433f288a4f9a1eb89fd19938de05c7b34bc0548d765

Download Submit
/data/data/com.mayonejbir/cache/classes.zip

Filesize
1KB

MD5
aaaa2909023dcf52364a28daf9bc6d6d

SHA1
dcc3fb549e1d1fff09129e2668c3568440dd7259

SHA256
66e5c8fe321e6bee4e7dcd8d8b90716dd0d8d678938f68027222d45b1f9c4655

SHA512
c5e0fc921bdc6742a94604fd8a8eb914f11a271749a7bdee5cc5f3e857e3ac61389178676669b50cfda819197ec6cc763c2ffee0d38283222fd31d3d1293a420

Download Submit