a19ee03cfe63cdb5f8ebf3e4b6c66ae563fe6ac502fc292b407a79857eeff62e

Analysis

max time kernel
8s
max time network
132s
platform
android_x64
resource
android-33-x64-arm64-20240624-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
submitted
03-01-2025 22:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a19ee03cfe63cdb5f8ebf3e4b6c66ae563fe6ac502fc292b407a79857eeff62e.apk
Size

3.2MB
MD5

35c940cd360ee23faf8d00e3a530ee45
SHA1

2f062113403730fe20eac726aeca36e6383017cb
SHA256

a19ee03cfe63cdb5f8ebf3e4b6c66ae563fe6ac502fc292b407a79857eeff62e
SHA512

84705450cd3a4bc288b5553bfcdfb0485d620ee4015233aff4f94737539db2d30c4fe4baa347ec2438ab00e9a0fb21263109aaee9eaf156d93df1bf9188a6e87
SSDEEP

98304:FdH4Fy/on7R07rhtyiFE0gu8qgzXiFCU88B93g7cF:bH4Fy/8RGX/FE0gbqgTHUh3T

Score

7^/10

evasion impact

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.wantbook61/app_ded/ZJlhGLi8rjSQyyZ6VSuqV46QMzTOr10v.dex	4354	com.wantbook61

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.wantbook61

com.wantbook61
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4354

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact