Analysis

  • max time kernel
    2824414s
  • max time network
    144s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    24-11-2022 03:16

General

  • Target

    b92dd1bd170fe904d4c5f490901311b29ec0c48489e47c8130b8daa82df17fe9.apk

  • Size

    2.3MB

  • MD5

    61714434f55a6130205fd30b21703016

  • SHA1

    73d54703dd3b2cf848b2c83e2d9baf0dba7f33fc

  • SHA256

    b92dd1bd170fe904d4c5f490901311b29ec0c48489e47c8130b8daa82df17fe9

  • SHA512

    8416283988b852cb7e3351bfd92f50c8989fc06f8660015ae064e7d2f0be4df8a7a745afd3595b0658913217e98bdbc7689af52d8a53d2281a134b966f43fed3

  • SSDEEP

    49152:GMuuuOD13l2uV43uHZ8qwkL2EFtt/7EGA4ZuRogk1AwvzA9479a72:G3LC10ume2FkHjt/7ETG4k1Awv09ma72

Score
1/10

Malware Config

Signatures

Processes

  • uk.digitalsquid.netspoofer
    1⤵
      PID:4097
      • /system/bin/ndk_translation_program_runner_binfmt_misc /data/user/0/uk.digitalsquid.netspoofer/bin/busybox /data/user/0/uk.digitalsquid.netspoofer/bin/busybox
        2⤵
          PID:4181

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/uk.digitalsquid.netspoofer/bin/arpspoof
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/uk.digitalsquid.netspoofer/bin/busybox
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/uk.digitalsquid.netspoofer/bin/config
        Filesize

        42B

        MD5

        b390c5e21eafab8ea2be69b273ea38ed

        SHA1

        f6ea01f83bc97b38665e308e4527d045561f9a4b

        SHA256

        5d723af7db5cdffcb738a41b9e239c971ce017bc1933ca222aba5148b6f23a84

        SHA512

        30af246c86a2433a2d3dc60e3e0804274d3437f48086ec8b52f255859dca27a452ef434a3ec578a3dac61665c701440595492291120fe61bed9d9c3716672d90

      • /data/user/0/uk.digitalsquid.netspoofer/bin/iptables
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/uk.digitalsquid.netspoofer/bin/spoof
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/uk.digitalsquid.netspoofer/files/gaClientId
        Filesize

        36B

        MD5

        8825307e6d1d4ce3951e4818f722ddd6

        SHA1

        8041761e05c37546a67e792c29f829d5d4bc9471

        SHA256

        4c8019cc7102f27f69c5fc30ead9fe738139162ac84da7fda570d885a6da42e8

        SHA512

        0663be9242e918c60d6f3230e92bb8a3d90dcec12722fde24b24e92d7c672da2f80fe2c7ff7a94cfc23b526ddbea59fab428b9011a9d3efacda7a7a1c02094ad

      • /data/user/0/uk.digitalsquid.netspoofer/shared_prefs/uk.digitalsquid.netspoofer_preferences.xml
        Filesize

        112B

        MD5

        b403bdd073d2e52cb5d7fd797f360f15

        SHA1

        bebffe96a0a6a358a74150c24c14780a46c1bbcd

        SHA256

        5cd54cf567f12202bf3bebeed6f4060ddd40e7557026afffa7b1aeb8acd4a912

        SHA512

        b76964ccb3c3d6f651cebae4d5de0caaaf38775d80a3820f7d1f7f57a205cb9eb7f023337b025d355e495da6e5e9c1ba4ad8badf933d0d38d73cb496f0ea578b