Analysis
-
max time kernel
2951336s -
max time network
169s -
platform
android_x64 -
resource
android-x64-20220823-en -
resource tags
androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system -
submitted
25-11-2022 17:49
Static task
static1
Behavioral task
behavioral1
Sample
com.cosmiquest.tv.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
com.cosmiquest.tv.apk
Resource
android-x64-20220823-en
General
-
Target
com.cosmiquest.tv.apk
-
Size
48.7MB
-
MD5
47f4ddc8dea00202c94c7c6d99a225c0
-
SHA1
f66a92b85c212f2536486de1873ba9bec2ef0ea6
-
SHA256
3049f38b143f3a6ea27d957b33aaf7463cbdd1355b7f8e68d9ff13e9367629f4
-
SHA512
c8d60fde05f1aadbfec120dd2deed58aa501052938c24b1e5b76fd947201873fe650edfcf7bb6e2e6856a383702314332587ae35ebb8e7b68f42c68c8778a93b
-
SSDEEP
786432:bxjN7YysS9LCCNxUeSzf7hNEr5vUtr5oxX4Ddwg7exQQmC:VfsSjSzjhNy5Xk+lR
Malware Config
Signatures
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.cosmiquest.tvdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.cosmiquest.tv
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.cosmiquest.tv/databases/com.google.android.datatransport.eventsFilesize
144KB
MD5bbb724cfb8da167fa31ab88e88076eeb
SHA1ac7117652cd61b8900d274ba23a510e472d09e9b
SHA256bf5ac9bdf63b797e8a79fe25985b888ed30a727c4e5a0f05507a794f29c06642
SHA5124d5c76d6df2c474176ebc95fcf5a2f9734c00892fae01b4f220ad9a5ecbe9162750af8d7057a8a84be3bd88c7ca536b6b92bdaa99ea3a90df0f1a6cbc411e3f6
-
/data/user/0/com.cosmiquest.tv/databases/com.google.android.datatransport.events-journalFilesize
1KB
MD5c9621deb6104c5326cc275c97d5245a2
SHA154341a396daf5cd648d35f7342919555b76885aa
SHA256a7dcf23fb54fc72a6ebae51c2ec02618963e2edd1afb152cda68c5a81a2d36b4
SHA512a42e9035d7b7935ccdca01911d8debd69ad8d8ddf1098a9b86316c3e0b047740b32afba737456cc997669cdcd997391ae8bdea83af3764445483367e5a047006
-
/data/user/0/com.cosmiquest.tv/databases/dvr.dbFilesize
80KB
MD51c500cf99e33dac047a14299a79fddaf
SHA11c84aedcac0db6eabb640e5381009854ed43800d
SHA25614882881ad9a134607dd5b07c06eb44f91709e2958e6ce1f74dd980fce20f887
SHA512878c189148a5c372708d545bd63f2e8da557cd0f4e78fb93cbacb9b632066a82ebcd9bf3388db66aaac7049b6c48b4bec670cb3d7193e672814604e6e9125294
-
/data/user/0/com.cosmiquest.tv/databases/dvr.db-journalFilesize
1KB
MD522a32fc0949352e464aa1b8c2706fb07
SHA121e2bfe8e92a2a6c94ecca6195195face56b534a
SHA25613b89ea36da59545c56069e656b4a1f27befd4beffb98804b7b21e1f543ff885
SHA51227155265bbc302af726c4ffa6c9f9466fa37b668475f5fe3e3f155185b7539a42bc88bb5dff9f572922974c0c15c91f23b0e70b44d3eb3e67886555e708797a9
-
/data/user/0/com.cosmiquest.tv/databases/google_app_measurement_local.dbFilesize
88KB
MD57bd7e08b7c157fb7a04f9701b6965b65
SHA119ed78cffffd879509071b091ba60776c18e8d97
SHA256c3aa0e8a52b6dcae0f988502bb3887f94c13148a8f36c3fcf5036c7c99afbdbc
SHA512a668c141cd4d48396e9d67e79ec1036a8ad4498293e0f16d108e8c4d842f76714f561bbe440a3a5dbcfb6b7ade257ffed7fa07c56566c8ea938589c61943d4cb
-
/data/user/0/com.cosmiquest.tv/databases/google_app_measurement_local.db-journalFilesize
1KB
MD51514a837ed9e07183d12507b554489c2
SHA1de11208bfb0f24995d8d1246a76893c64ddb2285
SHA2562796baeafb4a5ccc4b3828ff45219bc3784d52121c2c89ac9692ea6b0a3b3b52
SHA512e2b1256d66cff07e1c17674830f802355686f370e002baf6096a6bb370f80b64c8108b241ef47f4bf9c6a83e60279710241cfe487e8b089a0793cfffe9b72ff3
-
/data/user/0/com.cosmiquest.tv/databases/tv.dbFilesize
8KB
MD5b6ca8b30661a7844ed292db75a29a953
SHA18e0d397ab1f2ced1f143829084c3f53333743bdd
SHA25663a219c7092be26641907c5f955aa977e7675e3922a8e4ee2af25bfed8c7bbfb
SHA512d21ce3adf13d61369708ea000438f626973f20b08ca05a744c1cccb2d5e7c264a8af9c3ebd18a7a6a464d38e1c64146f8e881d29d71a0484dd94212315f6dceb
-
/data/user/0/com.cosmiquest.tv/databases/tv.db-journalFilesize
1KB
MD5fb6a9bb7c8a1164e676aaf4a9e735c48
SHA1fda15ac654c5d814f88aa1ae14141f93923c44b5
SHA256bcab49251921f0c45049016713fbb1a70c8326d73227055e176ef9659f9b0920
SHA512137f9ddb87fda64612f56657e539825d138518fe3eeebfcaadf6277f076ca85f206e592a647397e778a4dcc00e1b3313de05d2c3f7156e59a5f736ce7295436e
-
/data/user/0/com.cosmiquest.tv/databases/tv.db-shmFilesize
16B
MD54ae71336e44bf9bf79d2752e234818a5
SHA1e129f27c5103bc5cc44bcdf0a15e160d445066ff
SHA256374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
SHA5120b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27
-
/data/user/0/com.cosmiquest.tv/databases/tv.db-walFilesize
217KB
MD5f175bea7a0f6ceabdcdc6f9e4e75a29a
SHA1563d395621a9a494a266f78837bb163abd2722fe
SHA2565d8359e3ad6ecfe2c6a0919c3bf9cb6d4f8855795f126b4133c6b1f968270dfd
SHA512d5f498066bb6576e42b3a9e6c1f321a80161e1779c0483812ca470f413d07454139617345dcdb5425c5bc1cf5a8be3aa58f5d522483528b62ac0b1c5b328f4ac
-
/data/user/0/com.cosmiquest.tv/files/.com.google.firebase.crashlytics.files.v2:com.cosmiquest.tv/initialization_markerMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.cosmiquest.tv/files/.com.google.firebase.crashlytics.files.v2:com.cosmiquest.tv/open-sessions/6381004F0381000113AAE91D342AAE11/reportFilesize
763B
MD5311281d4e306a3866835d1bfaf467f73
SHA198646fe1a543125737e44228edf6898c939b8c1a
SHA2569e6e2d466610d2d955f09f867d861b84817b455e6adb8acbc57fe4336968b5f8
SHA51249e035e04ed4fc9fe4b1f6c813427bd2511ab1b299b08770f3c9d0edf3c257901f08934be3df5699b867d38aa2a683651f1e762605dd00f56584cf92e19a4dfe
-
/data/user/0/com.cosmiquest.tv/files/.com.google.firebase.crashlytics.files.v2:com.cosmiquest.tv/open-sessions/6381004F0381000113AAE91D342AAE11/start-timeMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.cosmiquest.tv/files/PersistedInstallation4121047107836190931tmpMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.cosmiquest.tv/files/PersistedInstallation6591397350817260169tmpMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.cosmiquest.tv/files/generatefid.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.cosmiquest.tv/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo0MjYzMzc3NTMzMDI6YW5kcm9pZDo3N2IzZTZiNGIxMTBhMzM3YWNkMTc3.xmlFilesize
124B
MD5f04e1f1e65a40411df1fbc78615e947a
SHA19d8aa8da2ca75c1edf01b0ad403ad2b5ae08f352
SHA256d33684206771b261b645c4395ad5b0170b7159ee7dd66e1e862e7ca87f70d1d3
SHA5129aacdef73a862ad35d3036dd0ad0a1adce55a5bc83e0e82c4300354c53b5b4ae7159593a4914b006cfbf21255104773ca7273d925be6d8311ff05e28b3b401e2
-
/data/user/0/com.cosmiquest.tv/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo0MjYzMzc3NTMzMDI6YW5kcm9pZDo3N2IzZTZiNGIxMTBhMzM3YWNkMTc3.xmlFilesize
534B
MD5407152cb512c816bd56a624f083d200e
SHA1aa7a74a42a1b16423e500248a6a219a16570b064
SHA256b847ee5c9796cf189e3d26b77b7be4a567d742cfdefbee2bd8d7def25ef8dc2a
SHA512b68b176d26cb7334e62917fb64d57114d13d25662072261da014592f7c79a8f38709912f98d97c10062a5af843a6e177e2817a1b90e76ef123abd82074bd2a53
-
/data/user/0/com.cosmiquest.tv/shared_prefs/com.cosmiquest.tv_preferences.xmlFilesize
133B
MD5b66716d4864a73ec7b6f41ecd354b6c2
SHA192888f9f13d87a05eeda5100d7e4226e34a38308
SHA256ade44f2ab2265cc40cd0c1d6f2fd2a1a06eefb4914ff615d096cff1004f25747
SHA51238f98a8c6f91260f37b61ab38b0782805704ffb0c7910d08f0573760cfab11f7d12eaa0759e075a2966b5129360983f714dc294156063836b7530500495fc287
-
/data/user/0/com.cosmiquest.tv/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
122B
MD5250b4caeba60ddf53228405750ba66ca
SHA1422ab714feb34e9f3b4f1cbe669887bcd581ddb1
SHA2562478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
SHA512373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb
-
/data/user/0/com.cosmiquest.tv/shared_prefs/com.google.firebase.crashlytics.xmlFilesize
235B
MD5fa447b78340ce79762e1a383119336a2
SHA18fd54d49f476c07876d74701ecc605de823d22bb
SHA256063802abfee7a71f7cf949a36d6b5db637bfc43b0510020b26217e857039920e
SHA512a8a3c5479d23897a02f531e18f6aecd399aaddcaf2ef00e9ddd7c0a6823682d55aee78f27e6876e534a4bd1cfabe25f61363f95eda3cb4367b458c1e4cff407e