153d5d69a3c27d3eb0b8e1de51a178895cd8eb56dcf0dd8b87caee6a917b3e93

Analysis

max time kernel
404254s
max time network
67s
platform
android_x86
resource
android-x86-arm-20220823-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
submitted
03-02-2023 17:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Internet Ilimitado Gratis.apk
Size

1.4MB
MD5

1b7c4403eb47f39e041c28de1c21858a
SHA1

8ab1e8c4a904f92d5aec4880c5a4bc38e0102abf
SHA256

153d5d69a3c27d3eb0b8e1de51a178895cd8eb56dcf0dd8b87caee6a917b3e93
SHA512

26513859ffe9d5b929dbbedaf413ee20c948c2f2462127bc811b0942c549106f6ddf7eec7634608f7d51fd4d5bfa650c2aa2028fa36c26b481527e6c9db73381
SSDEEP

24576:8yIzSBTPtLiLe3r7JpOdTlhPS+dVlQ6c9S3MyZnNOVoGGwulP8d4AXG4h:86r5i63rnSlM+dVlV2GnNOVYls4AW4h

Score

7^/10

Malware Config

Signatures

Checks Android system properties for emulator presence. 6 IoCs

Processes:

internet.ilimitado.fresa

description	ioc	process
Accessed system property	key: ro.bootmode	internet.ilimitado.fresa
Accessed system property	key: ro.hardware	internet.ilimitado.fresa
Accessed system property	key: ro.product.device	internet.ilimitado.fresa
Accessed system property	key: ro.product.model	internet.ilimitado.fresa
Accessed system property	key: ro.product.name	internet.ilimitado.fresa
Accessed system property	key: ro.bootloader	internet.ilimitado.fresa

Checks known Qemu pipes. 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.

Processes:

internet.ilimitado.fresa

ioc process

/dev/socket/qemud internet.ilimitado.fresa
/dev/qemu_pipe internet.ilimitado.fresa
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.

Processes:

internet.ilimitado.fresa

pid process

4104 internet.ilimitado.fresa

ioc	process
/dev/socket/qemud	internet.ilimitado.fresa
/dev/qemu_pipe	internet.ilimitado.fresa

pid	process
4104	internet.ilimitado.fresa

internet.ilimitado.fresa
1⤵
- Checks Android system properties for emulator presence.
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
PID:4104

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

memory/4104-0.dex
Filesize
2.0MB

MD5
b7f728d7c4b78c8956699a315bda0f0b

SHA1
629dac08bdc0c48a8fa3fc756b55bc05f18ea4aa

SHA256
94f10a466d0f8cd3e0462422447e75763723e124356de9280fa272f2d2f1981f

SHA512
4ef9266509b8dacee509d93c7a719cdda541aa822b95e46fcff67d7d0fb3f6a9ed364f6a7c1fe44ab5cca384e22f83b76f49131999ac0c250bdeb3ebb04f2b47

Download Submit
/data/user/0/internet.ilimitado.fresa/app_webview/variations_seed_new
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/internet.ilimitado.fresa/app_webview/variations_stamp
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/internet.ilimitado.fresa/app_webview/webview_data.lock
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/internet.ilimitado.fresa/databases/StartApp-d6864f2502af7851
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/user/0/internet.ilimitado.fresa/databases/StartApp-d6864f2502af7851-journal
Filesize
524B

MD5
6e133b5d1fc7cf8772b19276b8470d9b

SHA1
2845cb066857a6bdd84b941cfe0d77254ab7d69c

SHA256
8fdd3a3914075652ca864f7d79609cf14d2317b431281245c3317c2f8389c701

SHA512
c37b2a88914e2dc79f804e5a442652587422daa5ee370d56d834eef10a67077fa80af45bc9091694506a33262763a4e1a8854468b1d0879aa569b50f8cb6be96

Download Submit
/data/user/0/internet.ilimitado.fresa/databases/StartApp-d6864f2502af7851-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/internet.ilimitado.fresa/databases/StartApp-d6864f2502af7851-wal
Filesize
36KB

MD5
5ac5867ba952dc34d318bcfa98462d2d

SHA1
c5cf9f34a31f4a48833962ed0bde4c8916aebe28

SHA256
17e96471f72325fc97eebc1de2e10d592570c95cfd35e58b3e7cae29590b0c74

SHA512
58b1c643f25d475baa88187b03d8e5c47b10d21a3bea42bc5a0aabe7346743dac7b7b6baafeb0bda4d290185312997f35f0e2268c00cfa4abfb6fe1665a54185

Download Submit
/data/user/0/internet.ilimitado.fresa/files/shared_prefs_sdk_ad_prefs
Filesize
5B

MD5
9dcf2a6f12095ecff342e9fa0c5ca72f

SHA1
c815f34691be353caa9de93bbdb00a31f62a9ed3

SHA256
4e68143408826326220a32d6bff59e1cca3dd85f74b018aebd6723c5686c54e5

SHA512
7ba3449f5ec3363bbee33d47abe471286cf78034dd70379fa4d0de5fd59215e8c58287eddffed1b9c3c74e157f6a9ad69b0c551001a62d04790bba49df48231c

Download Submit
/data/user/0/internet.ilimitado.fresa/shared_prefs/StartApp-790ba54ab8e69f2f.xml
Filesize
125B

MD5
6183da27d0927a0422ff145dbe60db71

SHA1
408f9a8d338cc8fcd70f1a32ce2f3b5f0904a501

SHA256
c8d7cfc822805654569a675c470b0cd9e490a4c61a07635538eca8da3c5ceeab

SHA512
d6d0838d505868f4e9003ce03cf421d515807886a79f01c00e015ff31b0ecbca81514df7bf4c0b16db32ce2807df52e35b75cc2e9f99b1288b390ef72886e3a9

Download Submit
/data/user/0/internet.ilimitado.fresa/shared_prefs/WebViewChromiumPrefs.xml
Filesize
127B

MD5
21223e9184445fe043476484cd8cb1f9

SHA1
2b4813f849121d60ba35eb0889080668bb62c778

SHA256
bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

SHA512
be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

Download Submit