Analysis

  • max time kernel
    3869933s
  • max time network
    181s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    21-05-2022 12:43

General

  • Target

    b97d12904ab8c5f427ec22450142cd026447ddb62a12f681fe536b9d167da604.apk

  • Size

    10.6MB

  • MD5

    750524f65260717093c676f054bf15e6

  • SHA1

    60f91bea87f375f63b88a0bec042bc3a573fa6de

  • SHA256

    b97d12904ab8c5f427ec22450142cd026447ddb62a12f681fe536b9d167da604

  • SHA512

    1003234894c3c24a15b1ed9eb807c63eea28cb5b2ace092cf8d7b562c4ea9a8bbf0241776c0c609a7d753c33640aa376b51cdf6dc0fd88ea1413e280c38b5bbc

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs
  • Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs

Processes

  • com.dollarcityapps.mp4player
    1⤵
    • Loads dropped Dex/Jar
    • Removes a system notification.
    • Listens for changes in the sensor environment (might be used to detect emulation).
    PID:5366
  • com.dollarcityapps.mp4player:player
    1⤵
      PID:5394

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.dollarcityapps.mp4player/app_webview/Web Data
      Filesize

      104KB

      MD5

      dc79f9ce5f3ab5270b33e61119dfc959

      SHA1

      1844bf222a5144b513dcf2fb50a18c011701c647

      SHA256

      47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

      SHA512

      18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

    • /data/user/0/com.dollarcityapps.mp4player/app_webview/Web Data-journal
      Filesize

      1KB

      MD5

      21547f71bac765362eee903c1fcc35e3

      SHA1

      80d9d3997fbe654f80d371a8f52450faaa86e33c

      SHA256

      79f4c962aa6191e0f7f46b57f46db4694a1a2c650fe4c88b3e43a07e97d943cc

      SHA512

      a31059942b47e0d7b20e68c241a945bc103faf075dc05bd55c77f73ba1fafc58b67994f7a4c4823ce1ba628dd48adc47764ef9f87189735be3de1f450c5eac84

    • /data/user/0/com.dollarcityapps.mp4player/app_webview/metrics_guid
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.dollarcityapps.mp4player/app_webview/metrics_guid
      Filesize

      36B

      MD5

      7bcfaa4c1e22489dd2c253311d05a6f2

      SHA1

      3b6a401e5181c4e903469f34f388eda2b31e9039

      SHA256

      33d160ef729a64b129601c295b246985abfed7456e6f80b7ac5c5b69f9de1099

      SHA512

      3f43454b02cf8fe78cf899801401afae225e1068a457312e41209243415831c28b6946c05fe3c4d86abc0eb965e52fcd3b3db87e730a3aad24d9f45b9e9b23d4

    • /data/user/0/com.dollarcityapps.mp4player/app_webview/variations_seed_new
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.dollarcityapps.mp4player/app_webview/variations_stamp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.dollarcityapps.mp4player/app_webview/webview_data.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.dollarcityapps.mp4player/shared_prefs/WebViewChromiumPrefs.xml
      Filesize

      127B

      MD5

      21223e9184445fe043476484cd8cb1f9

      SHA1

      2b4813f849121d60ba35eb0889080668bb62c778

      SHA256

      bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

      SHA512

      be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

    • Anonymous-DexFile@0xcd723000-0xcda31d84
      Filesize

      3.1MB

      MD5

      89aba4158b15972255111334d97da393

      SHA1

      bd03a312d840b648d73e24d9ba3b4a5150f9ac7e

      SHA256

      75d3518c3f1477c90dff3bfcf5d9706887492ab22f51c3fb49f93dda2d6934ce

      SHA512

      b354927389832d3027a2686e5a85a94fa9042b5151eeaff9fddb0fb8cb0bed6267e9fa7bd6edf010ecbe51058c9c656f6568e82bd7f845ca62d0e1bbc86a53af