Resubmissions

10/05/2023, 16:44

230510-t9bf6shb63 7

10/05/2023, 16:34

230510-t28fyahb36 7

Analysis

  • max time kernel
    109869s
  • max time network
    25s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    10/05/2023, 16:34

General

  • Target

    com.newfun.robu.tv_1.0.1.apk

  • Size

    43.6MB

  • MD5

    ef1f3900e128de5e51d2f64ffffce7de

  • SHA1

    a4d69f009b8dc2e788eeb7e1384ec89f95fde3ed

  • SHA256

    dfcd73ef35e323f947b3c8d139b1f2fa2d259f5235851e60710247b5b7826138

  • SHA512

    73669fb7c896ff0a57b7483b9aa0ac4018fa65cebcbec8fdb02c1f4f9b55dc9577e47eae998ec2da462be7f8cf08255c2ac84ad921c68820e682c306563198c5

  • SSDEEP

    786432:31b0CWRDi+XqzsNkb78PSeG6BuAoU92jEUaXjGaPSvK2YWhC41orPgEvGbFevtrJ:3xmqzsub837iED3PSxS4KGbF4J

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Checks the presence of a debugger.

Processes

  • com.newfun.robu.tv
    1⤵
    • Loads dropped Dex/Jar
    PID:4523

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/com.newfun.robu.tv/[email protected]

          Filesize

          3.2MB

          MD5

          42a776716f329899669f6d761d626003

          SHA1

          7c8a66fddabe92a33367f14c29f13955149223c1

          SHA256

          7aae06433cff5967ac254484d784c2c348380891d0914c56de64e7e006668cd4

          SHA512

          bebfa64178281625ce6a58a3ed61ec0b80278041b79a6db210ffc5e0536056174582daa32c2042d1dac5be7a5b8afa19c55a92b7067ada2f25072375c8e22cf1

        • /data/user/0/com.newfun.robu.tv/databases/com.google.android.datatransport.events

          Filesize

          144KB

          MD5

          48d72b2021b27698a0e143cfcde59531

          SHA1

          c4e4885c38e3a846d5230b8aafee37b4f0eb22f2

          SHA256

          29faddafb3b1e0f66b9822efb47378fb7e814ce1ae8a8b73397952b369cb25e1

          SHA512

          e18cfbc75b5f20a660bd3a1dac6c41b3d442ce727dbf27b72a011efba267f557c85feb324c0a133a54055255d214a460e8eac8d0c03196fdddfb86841588feb7

        • /data/user/0/com.newfun.robu.tv/databases/com.google.android.datatransport.events-journal

          Filesize

          1KB

          MD5

          71405716b8bbc98f6d44c63c86dd0e0f

          SHA1

          5039bc91ebedef535b7fc55905b8947b7734c69c

          SHA256

          9a78ff0d4f23bfb63c4cf0bd2d14ac192cebd65fccbdada345401213c6fd8823

          SHA512

          68f8586962c9fd85341a712d641ffdc90670ad9a56823a07adf5d2070ac7830b4aab9012dc4af13273e8516b49901a7122eef9e7923fd790a85a50a6f5283ec1

        • /data/user/0/com.newfun.robu.tv/databases/google_app_measurement_local.db

          Filesize

          88KB

          MD5

          8dfcfdcef5a9793fb83bda404ec3f42b

          SHA1

          dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

          SHA256

          a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

          SHA512

          e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

        • /data/user/0/com.newfun.robu.tv/databases/google_app_measurement_local.db-journal

          Filesize

          1KB

          MD5

          4efcb9c193a19485b5d274cb17c5d231

          SHA1

          18eb1d08177cde9b77bff01b5acd5d6017682b5f

          SHA256

          2a225844d3843235ac6bb809d60425928ace0e66327be5ca1579dc6053b23d21

          SHA512

          3568c570e7687f52a8083df81df785a0ad4b4562d4b3342acb32ec57d05d0e61d653fca6bd41c0e6c79aa07e3c3fa30c277da5667ab1b7442e2fd09f5fab3f9e

        • /data/user/0/com.newfun.robu.tv/files/.com.google.firebase.crashlytics.files.v1/open-sessions/645BC9D203E5000111ABD9EAF0057685/event0000000000_

          Filesize

          56KB

          MD5

          44193281f048a4fa5a3268f58bcd6e12

          SHA1

          9c964993e65758e0bc6c37e99cdf48b830192e08

          SHA256

          e302e4f646148e5acd4c264407a59a058ef66bc2b523220381352e6226ed5ae0

          SHA512

          541e7627af6e9661c6ccd07a05cd0478604c1c0517bcd336c314ff2ff64cc2720ad310f9a5825756dea1944724e27312bfb8210d67388c3c74e7a4f144b01e00

        • /data/user/0/com.newfun.robu.tv/files/.com.google.firebase.crashlytics.files.v1/open-sessions/645BC9D203E5000111ABD9EAF0057685/report

          Filesize

          743B

          MD5

          2c6d05aac4d08ddec40dc787b9ebdac4

          SHA1

          444115923a9db7655ec9687716c3b6c341e4fc47

          SHA256

          70f50eccd2fa1c8c058559f7bebf360ccb2f33a6594a20c47804f098b9488bbd

          SHA512

          5c8f6e6a1a692cf14cf2d598b9ea0de9d4d8b9bc27be62dc1b524ade460851ad38612e511e65d85ef9a57c2dc0529e2d522f8a1fcd0165405c94e7d6a1773f34

        • /data/user/0/com.newfun.robu.tv/files/.com.google.firebase.crashlytics.files.v1/open-sessions/645BC9D6004D000211ABD9EAF0057685/report

          Filesize

          743B

          MD5

          b336964530d11573fff4cf46cb80754c

          SHA1

          75095cecd3bf008b33758f2bc1cf19af53c9b262

          SHA256

          8624558cbf1b555d0f6ca7847d98b69a744a40c8384ca1c067f480791a35339c

          SHA512

          312a6d428bb3f0531b08143bc4c572977c51f885444c98f4880fccd2618f02573bff486a878c0938dac2028503ee845aba47e4d75d5e1b531d51d2cf4e3530d2

        • /data/user/0/com.newfun.robu.tv/files/.com.google.firebase.crashlytics.files.v1/priority-reports/645BC9D203E5000111ABD9EAF0057685

          Filesize

          57KB

          MD5

          36bb24494797206e4105e24f5ab65126

          SHA1

          214b651dc708e2487754287074d97fe310fabde2

          SHA256

          cfcb8a97fbe0ab5508698d5a7c8d1d30cd8173f5d703852ca2690c0f6099af67

          SHA512

          5504cffd434c5ea3f796056d553e8230fe6b84ae47b6ee6689cd28cf703f4bdcbd5ea04c03f0df22448d65bf0d30ecce0e7d0027450d7b07247e015e9d220c42

        • /data/user/0/com.newfun.robu.tv/no_backup/androidx.work.workdb

          Filesize

          8KB

          MD5

          e579a6b00eef1318f9166352228eba18

          SHA1

          76988896854f0139083e77862eea1a4846cf039f

          SHA256

          4b34cf505050facf47aa7936e4e7667e1969105665c632b3eefe7ecddf9a6935

          SHA512

          c47632e957d87727bf6504a82ca7a44d8da24d30cd997a0f449a96e4f97c656a1b4d9da3fcd827e2a48c59677688da0b872358ebd0f9369d898d1b8ec18d5699

        • /data/user/0/com.newfun.robu.tv/no_backup/androidx.work.workdb-journal

          Filesize

          1KB

          MD5

          9950339141835125a14492b61ff1cbba

          SHA1

          9548d3a2df69bb2d1f32a224dd2b6ae903c20168

          SHA256

          b8b88aed5a08d74245310abbdb5f7830307e9795a476ed9d40770f3f45dd05e2

          SHA512

          ada917ebb3bea2c266d558d56452f0f4557c5c84ad08dbc2068bf85242eaa200d7d2abaf48b26075ebf31bf01466ad4d8ed56347f79f7d9aa098a5dab4ed02ac

        • /data/user/0/com.newfun.robu.tv/no_backup/androidx.work.workdb-shm

          Filesize

          16B

          MD5

          4ae71336e44bf9bf79d2752e234818a5

          SHA1

          e129f27c5103bc5cc44bcdf0a15e160d445066ff

          SHA256

          374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

          SHA512

          0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

        • /data/user/0/com.newfun.robu.tv/no_backup/androidx.work.workdb-wal

          Filesize

          217KB

          MD5

          eb5af996bcfbbdf972603e0dd06201f7

          SHA1

          92b199615e86176624a6e59059bd272dd538b083

          SHA256

          71281ce7e0ec85160f7a9ae89589cf04a48ecec66cb6bd0dd46558cd1b55dcc9

          SHA512

          489046c6be1af27f256613a0c6422a2c9967c67d0911d174340ed56ecba806050c3116809631380a2c420afdec3a9bab1e8354a6d1830d58891405af11fd643b

        • /data/user/0/com.newfun.robu.tv/oat/x86_64/[email protected]

          Filesize

          861B

          MD5

          6b8d4b296e707e510ae6a71efc2eb56f

          SHA1

          fbde357a86f70147336f5de2125c44877c4ba8da

          SHA256

          6258fe3f8cffa6718bd187cdbb004c954086f8728748b1073abb26f9b47bb036

          SHA512

          51191109d65ca03dad92d4f9b83b54150387cc46cb87a47dd52bc71171e2af611f0e2f3d28bbc76aa24e30fe544df6e742566a3620a479ff9c92191d8ed284e3

        • /data/user/0/com.newfun.robu.tv/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo2OTA0MDI4ODQ3Mjc6YW5kcm9pZDpiNTA0M2IxZGZmODk2N2FmMDA5YTcy.xml

          Filesize

          124B

          MD5

          15901509c24ea11581875ee36779fdce

          SHA1

          e06248e23dfebaae326706611fbefa0dfa77c9ba

          SHA256

          52c40b9e09e14177dff51169fbf0227e9359807dfe67efecb4ba5f82304e6fa3

          SHA512

          236559b0679378d29da0567c24b1dbe87affca69055852fa5c1a25bcc7bd6c566c99849321364ec99a6cad3f51f2cdda245b6a2ded14fdb51f9260798a0f4e8b

        • /data/user/0/com.newfun.robu.tv/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo2OTA0MDI4ODQ3Mjc6YW5kcm9pZDpiNTA0M2IxZGZmODk2N2FmMDA5YTcy.xml

          Filesize

          533B

          MD5

          662ca6dad8c8573cdf66df3abee57230

          SHA1

          9435f8469afdf9086d89f3c74b4e79d2d85292df

          SHA256

          31f811f85e9e50c6eeec723ca0ef44d3b8b2351320560b78c40768cc76e62980

          SHA512

          16d637580ce42c1817dbb7c685d354ac36b1703f51c49c93b4270df28edabf3e0858552497a667b16fd50cf0b054cf4be29bff109c2dab41d4ba3f45d7e6a308

        • /data/user/0/com.newfun.robu.tv/shared_prefs/com.facebook.internal.preferences.APP_GATEKEEPERS.xml

          Filesize

          3KB

          MD5

          327e0f4f2691ef607be7e287b8631451

          SHA1

          a4396a26df6b9d37aec111535ea0c5e134b6171c

          SHA256

          d35eb9d4a5d9a11d18fdb4c5fa4318cb6e4d7c20f1a6a963c163c7c26ea857b8

          SHA512

          8bd72a3c21b4eb90145ae8572506e893ccd06f0411fbaa55eb8c55a354edb4aad5bb48f74ae2159a207736da8bae9798a87748daeedc6b306ffac39f00efecfa

        • /data/user/0/com.newfun.robu.tv/shared_prefs/com.facebook.internal.preferences.APP_SETTINGS.xml

          Filesize

          1KB

          MD5

          18564c2e5cce89bd0ff658692643a283

          SHA1

          f93965c1ed7a58ea6f156bccd512ad8eb01056fb

          SHA256

          3f73f04bc8788a4374dbbcd253d91a7bd98a515cd78e4b8189d1c8b86c6c4b33

          SHA512

          f0a7f94a73ead3b6e24cd445028be8ba6b0724b0c0cc74ac262b8eb5711edbd52da40f3fb516ca6abb3c1662fcfc70fb9b0faed1098d7be369084fe975bbc818

        • /data/user/0/com.newfun.robu.tv/shared_prefs/com.facebook.sdk.USER_SETTINGS.xml

          Filesize

          139B

          MD5

          34d145a1f9d7290f517f621b0e5635bd

          SHA1

          89108d6cae8d351c53efb5b70991fea2deaa8e64

          SHA256

          777b4dbcab9944d8855218bf93d3dad6bdb25c3666702a3f5ba8953f7752504e

          SHA512

          ac5ed49d296110fac3ab4ff1fe5ec3c2ed13fd15452a86ea95a3132e7625c63342703dcc29b9a84fe4c49617cd647b48efa51f0a43267eebf1f996da88ebbfcb

        • /data/user/0/com.newfun.robu.tv/shared_prefs/com.facebook.sdk.appEventPreferences.xml

          Filesize

          160B

          MD5

          b77c2f7ed403af174495cdd6a89ae86d

          SHA1

          5bc0041ea009c3bd64b3b14d7bd38304878e71bb

          SHA256

          b6cbbac241f806eb2295231806bfcc20118f53343dea3640a6555300dde5b24c

          SHA512

          3cab95f1054ff92cc98b507c0371f2455e2d82445c1b6fe978262480eb9ab1b7e8a2fa2cea990f62c6ad5815b3e2653d1bea2e0317dac4c2fc176daf67ea5149

        • /data/user/0/com.newfun.robu.tv/shared_prefs/com.facebook.sdk.appEventPreferences.xml

          Filesize

          203B

          MD5

          5fae12469cf36efa73ea1c02aa7214f2

          SHA1

          2c9c0599c7c733721c6abe511013336975175504

          SHA256

          9aa7cd841b062dc35a02126d7e1b498ed62147d73f05e1c671e51ceafa5d319f

          SHA512

          06c21468db995f0411fd1f8556ca2124843400d9176c091578bb53d92415619f7299c6639a0dc6e20ec6fcd11299efd39ca4dbd7b610bd0111f8c0c807fc0308

        • /data/user/0/com.newfun.robu.tv/shared_prefs/com.google.android.gms.measurement.prefs.xml

          Filesize

          122B

          MD5

          250b4caeba60ddf53228405750ba66ca

          SHA1

          422ab714feb34e9f3b4f1cbe669887bcd581ddb1

          SHA256

          2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

          SHA512

          373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

        • /data/user/0/com.newfun.robu.tv/shared_prefs/com.google.android.gms.measurement.prefs.xml

          Filesize

          395B

          MD5

          6fea4369aa1b73c75ba4993f6ddd8caa

          SHA1

          43385154f40343c003a2f02d413ae1ecc52da208

          SHA256

          7c15386383dc8049800b1fddff3cc407a6854647b524a44420d9db2187217218

          SHA512

          9d68ff891e6aa64c493c17cf0f3d95af772715078b860d479bb8086fcae06939d6d4e7232c09cd05af99a5f3b8ae89a5ed5e53938f6cbad9bd19502980c3a133

        • /data/user/0/com.newfun.robu.tv/shared_prefs/com.google.android.gms.measurement.prefs.xml

          Filesize

          607B

          MD5

          0fc95ff6ee297f5275f004a600b854cc

          SHA1

          a72fb3481279f21c341127cbb43eac2eab10f3c5

          SHA256

          8f3b8c9def3411151a50fe70cc6bac5251ad6306fb5a8b1d3c0933b3059b3afa

          SHA512

          4496891611fa54ab65d91922e2b51de2e66a7bd4bd5bca04ee44ec0285e8587ce633356393ba9a0e19e50447228c01c9f42e519951bdf248316a92d576954964

        • /data/user/0/com.newfun.robu.tv/shared_prefs/com.google.android.gms.measurement.prefs.xml

          Filesize

          665B

          MD5

          49987d9ec6b459678cdb286df9204745

          SHA1

          57aebf53957444a76d01ad2771ec54c883f9b5f2

          SHA256

          c6593e77b63a8987d9dd0f31c571d29181cddba4b66cdf7f7c6a124ae344fea6

          SHA512

          c61d86e85b35e72a7adbd076d15f34e0cf91aa99c1ba0dfaeb459068debcbac475597e9a1a756074456f8fea26c331cc0251eb2125f57307793b58bdbb8c934b

        • /data/user/0/com.newfun.robu.tv/shared_prefs/com.google.firebase.crashlytics.xml

          Filesize

          235B

          MD5

          420faf7f8a90cace10ae0f7b184c63db

          SHA1

          079162c0b85703f552b7f6808f54ef7520a7cdd0

          SHA256

          de3897de272fe82a60828f99b084020e61446174edb6e88caf429674dc1a2a7d

          SHA512

          c1089c3c200d6afd8d63b2d239464072adfd45d2209b66ec35147f7d503622998782b7ef921ad14663d5996e8a5fa4a78bd05569ac9315e3374032521078d077

        • /data/user/0/com.newfun.robu.tv/shared_prefs/com.newfun.robu.tv.android_core.xml

          Filesize

          131B

          MD5

          e1359c8b92b6b6b14e4ffc6547d7037d

          SHA1

          9d2e1e842a592c3822c07214fd34b8c83536b2f9

          SHA256

          f6cf1c097171603fc10c7c7b6aa0a4481c0a51f2c49670cae839b17f1984376d

          SHA512

          e5c9079f08c46ea7f92f8b382e7c356a26361250ddc2bb7cd15d57baa6536ad816cec9232dacc006847915d9a0177f1e668b27226f47f5c36309671eb6fad64c

        • /data/user/0/com.newfun.robu.tv/shared_prefs/com.newfun.robu.tv.android_game.xml

          Filesize

          132B

          MD5

          9e9d93af864e3c2ae00bfc959c8021b3

          SHA1

          4342066ad97f5a89111b307312d02c222149da23

          SHA256

          4c1d263dbb32a25ef5f2251d6278dce1628386b55a537cc9059caa6d6ec96a61

          SHA512

          0b37b2cc61e8042d610e12e5359fd30801aba0a881387fd5bb176c00bcb70f15e91402adb5fdae0d890169af5718f6f2e14047c8eeb0e1f578516e29c199508e

        • /data/user/0/com.newfun.robu.tv/shared_prefs/com.newfun.robu.tv.android_game.xml

          Filesize

          188B

          MD5

          8740f4227355b584b696e80a798a872d

          SHA1

          49b0fb9ab8259732cb1dfc125e3b2e6c2800fcf7

          SHA256

          fe28ff505209f3bb64fbdf8e5553b8fac5c49cccdf40db94c410afd872f37115

          SHA512

          0baeeb4818df0187bff9689f05573bb8a5b6d32d58b761dfd0d7fa867f8c59ba2655c8e0548224a776f4b8821c0b09fb2aaf49673e041424d86379ae4bc014ae

        • /data/user/0/com.newfun.robu.tv/shared_prefs/com.newfun.robu.tv.android_publish.xml

          Filesize

          116B

          MD5

          28ff9263db4bd4e0a5587f37fa3638c4

          SHA1

          b334283209f92e8794f270630c91bb51a4da7bd3

          SHA256

          a71adfd8f11430fc7ee3214b20ee8496eb40199171b92c574c91745455bfd851

          SHA512

          029e6f6cfdcc96f8bfdbc9298bc2dc1994eb3f71a0b9f9cffef86911a9b594b35d3fae7d147280acaa3d354ce7b127a3cdce9d33828e536cae2eb31507ab966b