517d243ae971f0bd724466676f2ed7f6397fa647791e5018f82126d7c863c723

Resubmissions

14-01-2025 09:12

250114-k6ke8stnft 10

29-04-2024 16:21

240429-ttlxzafa49 10

Analysis

max time kernel
26s
max time network
36s
platform
android_x64
resource
android-33-x64-arm64-20240624-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system
submitted
14-01-2025 09:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

dimond_free.apk
Size

789KB
MD5

aade91cf3cf4c46f64a02f97e93b0d2d
SHA1

1c92d900ebab95c730f7bf8598a46661723e2cc9
SHA256

517d243ae971f0bd724466676f2ed7f6397fa647791e5018f82126d7c863c723
SHA512

ac164f4457ff22379eab7cb25e013faa95def38b1ba7ca48af6e98b8d44cdff96402b3ae06f21404f8f46b9df63bc3e010df0026cb887a0feb0c491b17792067
SSDEEP

24576:WTJkVAo5cmjthrKBOkJCQUsGEqGEbGEhGEtc:WTyGObIJCRLsrVD

Score

7^/10

evasion impact

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.lololp/cache/natives_sec_blob3420687684943910621.dex	4337	com.lololp

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.lololp

com.lololp
1⤵
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data)
PID:4337

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact