Analysis

  • max time kernel
    2818877s
  • max time network
    147s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    24-11-2022 02:19

General

  • Target

    5337a8812810f57f34da8668f209924226f5db33b86f46255e75a42b3476035b.apk

  • Size

    2.5MB

  • MD5

    e658ecbb04fc2f9c66ed8b33fe0a4f69

  • SHA1

    9c71d3d36b63e23b2100de324c31f56b0886c14e

  • SHA256

    5337a8812810f57f34da8668f209924226f5db33b86f46255e75a42b3476035b

  • SHA512

    3073bf95b42103393d3bf3164f81634aebda75f145aa4e2928f8e101c85d3172261c7f8c2a5b8b197708c8c9ff0e15c7745413d5d3ffa278a21341f589273a69

  • SSDEEP

    49152:MmRoCe43lgWH3dNwBrsmsBl3gtBN/28TsI6keoXQ0C386NqJCenc2CoM+18+bVj+:MmRoCe43B3dN8rN2BpQbVeogv386gTn4

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.google.video.sq
    1⤵
    • Requests cell location
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4037

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.google.video.sq/databases/access.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.google.video.sq/databases/access.db-journal

    Filesize

    524B

    MD5

    0f64149104def7882fa4ebb612f1b37c

    SHA1

    b903cab568ab1554ef95b74e9a5899485e6b302e

    SHA256

    7dd14082d79b740e60a07de226faee6f85d53403f2e50b03596d7cc4c76f1a38

    SHA512

    6085977c9474919435927c14649a664ec04a3681865aa84faf062ece3c93fcea0c5f86de7a68dadec280e8510eab0c39c97d6d4ce28488e9dade1127bb15e7e2

  • /data/user/0/com.google.video.sq/databases/access.db-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.google.video.sq/databases/access.db-wal

    Filesize

    32KB

    MD5

    79057d9c156991079f6fb20c7a9710dd

    SHA1

    55de518e82598b638d46e826e857b7385b7e01ac

    SHA256

    dc50d42e3ad918b84badc88589901353a253aa58475bd7e61dde72ee744dd9d9

    SHA512

    8c314481a2f835d20f3327d348521df7627cb390bac0a03abc77fcd354817bd8992a1ffe36b5b9172212c3f80bc16f5bb10da674e42de4156529f8a140c48d5a

  • /data/user/0/com.google.video.sq/files/__local_stat_cache.json

    Filesize

    25B

    MD5

    2d805b13f2f28dc3ca9bbcc000f49bb5

    SHA1

    9eac165b4d81258fd3967cde5cc53b53b1dabcb1

    SHA256

    c8a6624f390568f0ddcb9841336aec6a564460fdaf6624e562b32935b8956f19

    SHA512

    5db8c57bab36bcf9db698c1dce70318cbffc156dd1d1c1e09e5b7ba60aff07b598ebbf26c4bd8a2b03bd6e59ef2dde2d944a22a8d8a19ecc8378e83afb7c83b0

  • /storage/emulated/0/backups/.SystemConfig/.cuid

    Filesize

    89B

    MD5

    bf99a6a4857f6c841697fdddc1bcfc79

    SHA1

    e04868ff4722d6b767c0211468057dba163d7dd5

    SHA256

    43351f19717032a4f5abc74c5fd74441ce335326c06493082c409e45a00d1d02

    SHA512

    931ec94ea709f91a3fce97af84c9d016d8ebac35a3b40657836e803864c669e03545f3524e4dad3c8e0eb117ffe9e148fb3a9b07935b8ee43fbd865a0524d6f2