Analysis

  • max time kernel
    1813031s
  • max time network
    20s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    30/05/2023, 09:49

General

  • Target

    006d1b792f0253711fc1ceef51726321.apk

  • Size

    15.1MB

  • MD5

    006d1b792f0253711fc1ceef51726321

  • SHA1

    451ddd7440c879f89a71643dcdcbccabb1c3b636

  • SHA256

    5b4e17f5ba5f07774b88068ff26e7aaea76649044f9613d98ffb880c5695507d

  • SHA512

    4ce825072f8ada74bd36474e05a9f32af7ef9d1baac5646e56d5fc2a981e9e314e4b7bfd0bd1b8bff7fa67e97113f84a349b11b63997862130e2e4a1f48b1d24

  • SSDEEP

    393216:j0Q6p+KhQTxwjmI4psbrS8ne9bvj8dPuqxEK:P10opunavSiK

Score
7/10

Malware Config

Signatures

  • Checks Android system properties for emulator presence. 6 IoCs
  • Checks known Qemu pipes. 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Reads information about phone network operator.

Processes

  • com.tool.downldmngr.downloadmanagerm
    1⤵
    • Checks Android system properties for emulator presence.
    • Checks known Qemu pipes.
    PID:4224

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/com.tool.downldmngr.downloadmanagerm/databases/androidx.work.workdb

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/user/0/com.tool.downldmngr.downloadmanagerm/databases/androidx.work.workdb-journal

          Filesize

          524B

          MD5

          29cda88ffc190981cc54376d30a5b505

          SHA1

          77fa566af8aa3227d75cacd5b1d604bfad6a77cb

          SHA256

          389c65b09e360ef7876d79cef92895e66f6921a84a1efbbdfaed0b88257265a0

          SHA512

          5982f7f6fabe2f0a6554359fc6c78f1214f42e4c331ff1225d9a04c77465c06a1e09b4922ab2030e66d803076147cee8ffb8e2227061b321b63c2fcdb1349653

        • /data/user/0/com.tool.downldmngr.downloadmanagerm/databases/androidx.work.workdb-shm

          Filesize

          8B

          MD5

          7dea362b3fac8e00956a4952a3d4f474

          SHA1

          05fe405753166f125559e7c9ac558654f107c7e9

          SHA256

          af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

          SHA512

          1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

        • /data/user/0/com.tool.downldmngr.downloadmanagerm/databases/androidx.work.workdb-wal

          Filesize

          140KB

          MD5

          9b3b36e41b411dc62ebcbde7d8f4b835

          SHA1

          c649c40d9c7ff8f8692181e6cb59a6f123c04519

          SHA256

          b36c9ff8e1c8f49dd973a629b57beb7989801b6f8ae16a3657eead8141fc6de7

          SHA512

          01558457d5e7a7686fdbab69851e2ad30dc12a414dda68e03c0f0acce8977edbac2bab28df4c4fb3e539d1e1e93503da10aaa399bb9e1c8cc390c211bc682b87

        • /data/user/0/com.tool.downldmngr.downloadmanagerm/databases/crash_reports

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/user/0/com.tool.downldmngr.downloadmanagerm/databases/crash_reports-journal

          Filesize

          524B

          MD5

          95419f96c1cd533f676425d7c1fd9b49

          SHA1

          bca5b8facdbb32024f2212fdaadcec7b2e45decb

          SHA256

          3bbc5897dc118b758e9837702b015887d80b7eda62d3d49bd56c6efe6357963c

          SHA512

          6ef06dbb52292d0570abfb85938b8a1bce253697056942208f18b3c557d2733235b7fbc8c6aac658a35cca8c56c87d8d23bfc35f02b0622e39670d12bc6b6d59

        • /data/user/0/com.tool.downldmngr.downloadmanagerm/databases/crash_reports-shm

          Filesize

          8B

          MD5

          7dea362b3fac8e00956a4952a3d4f474

          SHA1

          05fe405753166f125559e7c9ac558654f107c7e9

          SHA256

          af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

          SHA512

          1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

        • /data/user/0/com.tool.downldmngr.downloadmanagerm/databases/crash_reports-wal

          Filesize

          36KB

          MD5

          acb39090368f87a3605a9bafbec35565

          SHA1

          a8123a8896ab7f307b5b4d9611dc987f700c59ff

          SHA256

          6ceacd140c8416f1675c8851b38bb7404041013101070da74b3773c33e6d0842

          SHA512

          b71b809c57e4104ae08904eeb65dc35ee0aa7078804202a4192b71f20f05f3a155a8ad688f654731d467f6ff17d33b2d6a39481c5748bfb5e5b527fb138d51a4

        • /data/user/0/com.tool.downldmngr.downloadmanagerm/shared_prefs/androidx.work.util.id.xml

          Filesize

          121B

          MD5

          c2bf7b61386f0285c4c5304fd3b01960

          SHA1

          7ebee5304cb7f7bb6af3472892f1aacaffc54654

          SHA256

          69a5b95f884cea06fdf14a6a45e0c86f24359b417a3b081e9e95a7a4082e15b9

          SHA512

          2d2f64693ab0a7e4ffd1b96f02ac66a1e019868b20680d36eca2a9f12a9cb2a9b695f1e23e17374766cc02b5e97caabb8b5ad98bc7ed753e0a7898a10e5e0951

        • /data/user/0/com.tool.downldmngr.downloadmanagerm/shared_prefs/com.google.android.gms.measurement.prefs.xml

          Filesize

          353B

          MD5

          fddc6e5f7e2c36d30df64070d655c724

          SHA1

          8ca41db3bdae4ce3fc9a92d133cd37e5dd4069cf

          SHA256

          9e234fa95aac40463a0a9c8668b63fec4906048dc30b77eca49ff1b6081d094a

          SHA512

          2daee7c9a6f1e7941bccf91637655708cef01044e10e3956171ef8acc21eeaba0901d2297834fe5a6a907d936b5fa91248c051e8023c8861e11d2ddfd89fb331

        • /data/user/0/com.tool.downldmngr.downloadmanagerm/shared_prefs/com.google.android.gms.measurement.prefs.xml

          Filesize

          122B

          MD5

          250b4caeba60ddf53228405750ba66ca

          SHA1

          422ab714feb34e9f3b4f1cbe669887bcd581ddb1

          SHA256

          2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

          SHA512

          373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb