38a7a8297da07b2ce191efac05f984e7d9726aa2b515c2ce70d022794bd583aa

Resubmissions

10-12-2024 15:40

241210-s37elatqfp 10

10-12-2024 15:28

241210-swnc5synfv 10

Analysis

max time kernel
3s
max time network
87s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
10-12-2024 15:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

38a7a8297da07b2ce191efac05f984e7d9726aa2b515c2ce70d022794bd583aa.apk
Size

8.0MB
MD5

20d18718d5233edc5d9d238a76bba508
SHA1

5dc367ba0241798bb0ac1f51945df58fcda65136
SHA256

38a7a8297da07b2ce191efac05f984e7d9726aa2b515c2ce70d022794bd583aa
SHA512

1bc8557869044bfea3c8596f9f7f16c1b4272eb5b211c420b9328b399d9eacf6264d0ecb11e448f3bc8523091263a9b2eb0d99abe56e6fd4045207a8cbb3c00a
SSDEEP

196608:xw2lBXLkj4MRC7vz53w7C1heYW8a7YjOPes1MUtThyELhES649yJVX:RsmL5g7iW8a7YjOGs1MUtT4ELhES649c

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/apex/com.android.runtime/javalib/core-oj.jar	4920	build.ledear.riufq
[anon:dalvik-classes.dex extracted in memory from /data/app/build.ledear.riufq-Rr3_Rp8ug8bkgYrz9WwlzQ==/base.apk]	4920	build.ledear.riufq

build.ledear.riufq
1⤵
- Loads dropped Dex/Jar
PID:4920

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/apex/com.android.runtime/javalib/core-oj.jar

Filesize
4.7MB

MD5
7e343cbc45b618d05182d74bd61826b2

SHA1
02ee96263b3b967e570e8ddb1fa36cb21032b71b

SHA256
324b5af2ec2d78bb57b1552f429af51ac8d65f7fa277217ae8d4371ab14178d1

SHA512
48cbd8a5b246cf9d6ec16558ab12af131439837094c63a64046de384da933593459fb1aec126393bbe3b2b8ca19437f38b68364c9f158023a7b1a35e6901c705

Download Submit
[anon:dalvik-classes.dex extracted in memory from /data/app/build.ledear.riufq-Rr3_Rp8ug8bkgYrz9WwlzQ==/base.apk]

Filesize
17KB

MD5
e6df9271c07cbc436b19060c49dd67ec

SHA1
436fe73a85304835fc1ff72228a392be772a303d

SHA256
d2299150720105422de315b518620cb9b8731738dd94710155dacf7d2f5497dc

SHA512
bc2f0309cc161c0f4730b2ba086a723c2758d5c6b96d5e74975404f2ff0c34a4a09f757bb76345b7bf986f6b42e11a68f7564e0429c9bc5e541ac368e24c0611

Download Submit