2680e0e65fdd8c26eec70f1860ca166a1232b1e4a36b7a256b9fb5130af21e85

Analysis

max time kernel
2s
max time network
146s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
21/01/2025, 06:07

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

file.apk
Size

7.2MB
MD5

9df85db16c12716a63bcb58b704cac26
SHA1

3e61f7cc8e05f3b03cdaa21d9d2798f7efbcd9ea
SHA256

2680e0e65fdd8c26eec70f1860ca166a1232b1e4a36b7a256b9fb5130af21e85
SHA512

2cd4d771fe9df6ef0e113cda93a38be13ee3c4e4768fc498e3057416b1463b02151f41d91a148c5119451cd7430fc0e776eb6b58f165fa24de49ed6b04989a8f
SSDEEP

98304:8h44r5i5O975iSRGVTVKHhQP0jjOx3XyRsZjLFmQY6KeoJ:a1ik97rsUU0jj83XyRE21

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 1 TTPs 1 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.lduser_billing11/app_amateur/RbW.json	4965	com.lduser_billing11

com.lduser_billing11
1⤵
- Loads dropped Dex/Jar
PID:4965

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.lduser_billing11/app_amateur/RbW.json

Filesize
1009B

MD5
a95ec2caed3592c6168f8d833be9a75a

SHA1
768d265ad0bead042bb71a3f29904cf15a752e9e

SHA256
57167e1903a158e4a392779313976447297252bd7baddd4923abbd5f8bf4cc9b

SHA512
bcbb9909edbad3c7013f28e80ff3577ad4d64dbc1149d163ce15f4658161f97ac42a4ac5e4898e857a71c247baabadc0b77b074e565402ec66f67c51dd90c147

Download Submit
/data/data/com.lduser_billing11/app_amateur/RbW.json

Filesize
1009B

MD5
9dc99e4f861da4d5c0b0f358a10e4e8c

SHA1
bc76923a5e0d640011e07f77f54e810b9eed401d

SHA256
9023f93a0460b134dd4a775fb18ea0b06a467debaf2c2b0b5c3c5366ab343451

SHA512
7b25a9c865604f3bc24a2af50751e2444065c180290f7cebad065c252f1e122f656ca36e1afe849223d5879545822773ecf023413c2b8cb70db3eda8594a5f3e

Download Submit
/data/user/0/com.lduser_billing11/app_amateur/RbW.json

Filesize
1KB

MD5
54996ff610307c87bfd240670e94e90c

SHA1
a92c2a1938057f1fee86078b3d502d8d44d195c9

SHA256
df798f317e0447aafac77554e0d6cf7d824621bde77c5eae81918849dc1aef32

SHA512
36f3587f67f18452bc941669bfd3c3bf757f5d979e812aab2ece1a0fba1ea19d8344881cb1b8dfcd3e9f8b942b9ad3553ee49f3932b7aa65b077744d650e64dc

Download Submit