Analysis

  • max time kernel
    2951336s
  • max time network
    169s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    25-11-2022 17:49

General

  • Target

    com.cosmiquest.tv.apk

  • Size

    48.7MB

  • MD5

    47f4ddc8dea00202c94c7c6d99a225c0

  • SHA1

    f66a92b85c212f2536486de1873ba9bec2ef0ea6

  • SHA256

    3049f38b143f3a6ea27d957b33aaf7463cbdd1355b7f8e68d9ff13e9367629f4

  • SHA512

    c8d60fde05f1aadbfec120dd2deed58aa501052938c24b1e5b76fd947201873fe650edfcf7bb6e2e6856a383702314332587ae35ebb8e7b68f42c68c8778a93b

  • SSDEEP

    786432:bxjN7YysS9LCCNxUeSzf7hNEr5vUtr5oxX4Ddwg7exQQmC:VfsSjSzjhNy5Xk+lR

Score
5/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.cosmiquest.tv
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5034
  • com.cosmiquest.tv:TvProvider
    1⤵
      PID:5146

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.cosmiquest.tv/databases/com.google.android.datatransport.events
      Filesize

      144KB

      MD5

      bbb724cfb8da167fa31ab88e88076eeb

      SHA1

      ac7117652cd61b8900d274ba23a510e472d09e9b

      SHA256

      bf5ac9bdf63b797e8a79fe25985b888ed30a727c4e5a0f05507a794f29c06642

      SHA512

      4d5c76d6df2c474176ebc95fcf5a2f9734c00892fae01b4f220ad9a5ecbe9162750af8d7057a8a84be3bd88c7ca536b6b92bdaa99ea3a90df0f1a6cbc411e3f6

    • /data/user/0/com.cosmiquest.tv/databases/com.google.android.datatransport.events-journal
      Filesize

      1KB

      MD5

      c9621deb6104c5326cc275c97d5245a2

      SHA1

      54341a396daf5cd648d35f7342919555b76885aa

      SHA256

      a7dcf23fb54fc72a6ebae51c2ec02618963e2edd1afb152cda68c5a81a2d36b4

      SHA512

      a42e9035d7b7935ccdca01911d8debd69ad8d8ddf1098a9b86316c3e0b047740b32afba737456cc997669cdcd997391ae8bdea83af3764445483367e5a047006

    • /data/user/0/com.cosmiquest.tv/databases/dvr.db
      Filesize

      80KB

      MD5

      1c500cf99e33dac047a14299a79fddaf

      SHA1

      1c84aedcac0db6eabb640e5381009854ed43800d

      SHA256

      14882881ad9a134607dd5b07c06eb44f91709e2958e6ce1f74dd980fce20f887

      SHA512

      878c189148a5c372708d545bd63f2e8da557cd0f4e78fb93cbacb9b632066a82ebcd9bf3388db66aaac7049b6c48b4bec670cb3d7193e672814604e6e9125294

    • /data/user/0/com.cosmiquest.tv/databases/dvr.db-journal
      Filesize

      1KB

      MD5

      22a32fc0949352e464aa1b8c2706fb07

      SHA1

      21e2bfe8e92a2a6c94ecca6195195face56b534a

      SHA256

      13b89ea36da59545c56069e656b4a1f27befd4beffb98804b7b21e1f543ff885

      SHA512

      27155265bbc302af726c4ffa6c9f9466fa37b668475f5fe3e3f155185b7539a42bc88bb5dff9f572922974c0c15c91f23b0e70b44d3eb3e67886555e708797a9

    • /data/user/0/com.cosmiquest.tv/databases/google_app_measurement_local.db
      Filesize

      88KB

      MD5

      7bd7e08b7c157fb7a04f9701b6965b65

      SHA1

      19ed78cffffd879509071b091ba60776c18e8d97

      SHA256

      c3aa0e8a52b6dcae0f988502bb3887f94c13148a8f36c3fcf5036c7c99afbdbc

      SHA512

      a668c141cd4d48396e9d67e79ec1036a8ad4498293e0f16d108e8c4d842f76714f561bbe440a3a5dbcfb6b7ade257ffed7fa07c56566c8ea938589c61943d4cb

    • /data/user/0/com.cosmiquest.tv/databases/google_app_measurement_local.db-journal
      Filesize

      1KB

      MD5

      1514a837ed9e07183d12507b554489c2

      SHA1

      de11208bfb0f24995d8d1246a76893c64ddb2285

      SHA256

      2796baeafb4a5ccc4b3828ff45219bc3784d52121c2c89ac9692ea6b0a3b3b52

      SHA512

      e2b1256d66cff07e1c17674830f802355686f370e002baf6096a6bb370f80b64c8108b241ef47f4bf9c6a83e60279710241cfe487e8b089a0793cfffe9b72ff3

    • /data/user/0/com.cosmiquest.tv/databases/tv.db
      Filesize

      8KB

      MD5

      b6ca8b30661a7844ed292db75a29a953

      SHA1

      8e0d397ab1f2ced1f143829084c3f53333743bdd

      SHA256

      63a219c7092be26641907c5f955aa977e7675e3922a8e4ee2af25bfed8c7bbfb

      SHA512

      d21ce3adf13d61369708ea000438f626973f20b08ca05a744c1cccb2d5e7c264a8af9c3ebd18a7a6a464d38e1c64146f8e881d29d71a0484dd94212315f6dceb

    • /data/user/0/com.cosmiquest.tv/databases/tv.db-journal
      Filesize

      1KB

      MD5

      fb6a9bb7c8a1164e676aaf4a9e735c48

      SHA1

      fda15ac654c5d814f88aa1ae14141f93923c44b5

      SHA256

      bcab49251921f0c45049016713fbb1a70c8326d73227055e176ef9659f9b0920

      SHA512

      137f9ddb87fda64612f56657e539825d138518fe3eeebfcaadf6277f076ca85f206e592a647397e778a4dcc00e1b3313de05d2c3f7156e59a5f736ce7295436e

    • /data/user/0/com.cosmiquest.tv/databases/tv.db-shm
      Filesize

      16B

      MD5

      4ae71336e44bf9bf79d2752e234818a5

      SHA1

      e129f27c5103bc5cc44bcdf0a15e160d445066ff

      SHA256

      374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

      SHA512

      0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

    • /data/user/0/com.cosmiquest.tv/databases/tv.db-wal
      Filesize

      217KB

      MD5

      f175bea7a0f6ceabdcdc6f9e4e75a29a

      SHA1

      563d395621a9a494a266f78837bb163abd2722fe

      SHA256

      5d8359e3ad6ecfe2c6a0919c3bf9cb6d4f8855795f126b4133c6b1f968270dfd

      SHA512

      d5f498066bb6576e42b3a9e6c1f321a80161e1779c0483812ca470f413d07454139617345dcdb5425c5bc1cf5a8be3aa58f5d522483528b62ac0b1c5b328f4ac

    • /data/user/0/com.cosmiquest.tv/files/.com.google.firebase.crashlytics.files.v2:com.cosmiquest.tv/initialization_marker
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.cosmiquest.tv/files/.com.google.firebase.crashlytics.files.v2:com.cosmiquest.tv/open-sessions/6381004F0381000113AAE91D342AAE11/report
      Filesize

      763B

      MD5

      311281d4e306a3866835d1bfaf467f73

      SHA1

      98646fe1a543125737e44228edf6898c939b8c1a

      SHA256

      9e6e2d466610d2d955f09f867d861b84817b455e6adb8acbc57fe4336968b5f8

      SHA512

      49e035e04ed4fc9fe4b1f6c813427bd2511ab1b299b08770f3c9d0edf3c257901f08934be3df5699b867d38aa2a683651f1e762605dd00f56584cf92e19a4dfe

    • /data/user/0/com.cosmiquest.tv/files/.com.google.firebase.crashlytics.files.v2:com.cosmiquest.tv/open-sessions/6381004F0381000113AAE91D342AAE11/start-time
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.cosmiquest.tv/files/PersistedInstallation4121047107836190931tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.cosmiquest.tv/files/PersistedInstallation6591397350817260169tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.cosmiquest.tv/files/generatefid.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.cosmiquest.tv/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo0MjYzMzc3NTMzMDI6YW5kcm9pZDo3N2IzZTZiNGIxMTBhMzM3YWNkMTc3.xml
      Filesize

      124B

      MD5

      f04e1f1e65a40411df1fbc78615e947a

      SHA1

      9d8aa8da2ca75c1edf01b0ad403ad2b5ae08f352

      SHA256

      d33684206771b261b645c4395ad5b0170b7159ee7dd66e1e862e7ca87f70d1d3

      SHA512

      9aacdef73a862ad35d3036dd0ad0a1adce55a5bc83e0e82c4300354c53b5b4ae7159593a4914b006cfbf21255104773ca7273d925be6d8311ff05e28b3b401e2

    • /data/user/0/com.cosmiquest.tv/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo0MjYzMzc3NTMzMDI6YW5kcm9pZDo3N2IzZTZiNGIxMTBhMzM3YWNkMTc3.xml
      Filesize

      534B

      MD5

      407152cb512c816bd56a624f083d200e

      SHA1

      aa7a74a42a1b16423e500248a6a219a16570b064

      SHA256

      b847ee5c9796cf189e3d26b77b7be4a567d742cfdefbee2bd8d7def25ef8dc2a

      SHA512

      b68b176d26cb7334e62917fb64d57114d13d25662072261da014592f7c79a8f38709912f98d97c10062a5af843a6e177e2817a1b90e76ef123abd82074bd2a53

    • /data/user/0/com.cosmiquest.tv/shared_prefs/com.cosmiquest.tv_preferences.xml
      Filesize

      133B

      MD5

      b66716d4864a73ec7b6f41ecd354b6c2

      SHA1

      92888f9f13d87a05eeda5100d7e4226e34a38308

      SHA256

      ade44f2ab2265cc40cd0c1d6f2fd2a1a06eefb4914ff615d096cff1004f25747

      SHA512

      38f98a8c6f91260f37b61ab38b0782805704ffb0c7910d08f0573760cfab11f7d12eaa0759e075a2966b5129360983f714dc294156063836b7530500495fc287

    • /data/user/0/com.cosmiquest.tv/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/com.cosmiquest.tv/shared_prefs/com.google.firebase.crashlytics.xml
      Filesize

      235B

      MD5

      fa447b78340ce79762e1a383119336a2

      SHA1

      8fd54d49f476c07876d74701ecc605de823d22bb

      SHA256

      063802abfee7a71f7cf949a36d6b5db637bfc43b0510020b26217e857039920e

      SHA512

      a8a3c5479d23897a02f531e18f6aecd399aaddcaf2ef00e9ddd7c0a6823682d55aee78f27e6876e534a4bd1cfabe25f61363f95eda3cb4367b458c1e4cff407e