ec95656974d923d7eb438d44cd972c8e2fb6c81133221b610915176ebd89f190

Analysis

max time kernel
466775s
max time network
138s
platform
android_x86
resource
android-x86-arm-20230831-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system
submitted
10/10/2023, 21:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

c2547dfea0e24a3c94b35c9524e538aa.apk
Size

133.8MB
MD5

0318392ea5c3d6b1794115f14558625f
SHA1

a628dac8675e06f1adbd670fa6d84fa4c5d8ab1b
SHA256

ec95656974d923d7eb438d44cd972c8e2fb6c81133221b610915176ebd89f190
SHA512

c89383a3ec285a24bd015ee7ad462b3c1694b463c69851556f1a8b4f23d33c9160880aa9957b1635f642cd86b8b0623b740c31a1fc2663efc7649388149caafb
SSDEEP

3145728:mGv/WL00L4j1Uk3FHLqKkvI4raCUxRbtgAJiMzu2ZuoTJEq6/z:ZXWQ1t3xkVwxZthgO751g7

Score

7^/10

Malware Config

Signatures

Acquires the wake lock. 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.youmusic.magictiles

Loads dropped Dex/Jar 3 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.youmusic.magictiles/files/audience_network.dex	4190	com.youmusic.magictiles
/data/user/0/com.youmusic.magictiles/files/audience_network.dex	4320	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.youmusic.magictiles/files/audience_network.dex --output-vdex-fd=66 --oat-fd=71 --oat-location=/data/user/0/com.youmusic.magictiles/files/oat/x86/audience_network.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.youmusic.magictiles/files/audience_network.dex	4190	com.youmusic.magictiles

Reads information about phone network operator.

com.youmusic.magictiles
1⤵
- Acquires the wake lock.
- Loads dropped Dex/Jar
PID:4190
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.youmusic.magictiles/files/audience_network.dex --output-vdex-fd=66 --oat-fd=71 --oat-location=/data/user/0/com.youmusic.magictiles/files/oat/x86/audience_network.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4320

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.youmusic.magictiles/cache/image_manager_disk_cache/2e50b3ba1479cb3bbde9fcd8355419d0c61ce62cd6748da3486150c8ba85b354.0.tmp

Filesize
227KB

MD5
cc0d990cc02a7c572c3f4f37542178a6

SHA1
848537cd8ae0aff62a7b74fa1a82db92e95659e5

SHA256
a46dd0b27f6de9c17542d41e9e42dff2ca92f94a448a14f58d1c7e40037a3e36

SHA512
e36b604e31b39b1bcc37670b38d35b76d40e76540d27a9de5b64866ebe31f41ff00eb409b3140135c68dabfe251353b47a55376a3bcaeca005a4a124a87d3d81

Download Submit
/data/data/com.youmusic.magictiles/cache/image_manager_disk_cache/e41fc0cfe86612cda86a701120e78e49bd8f779172ad9959d68edc63649cb96c.0.tmp

Filesize
575KB

MD5
feaee993083da33a3edaf6b4235edba8

SHA1
dd573301ae3c5aaedff4b9cc9e29e76e448ff942

SHA256
8e72f77cf89811870f0bdfff4a7499a3914cd4513337258db7e5026a96b60ce4

SHA512
abe157bcd4b647127d7ef045b6f9df69c41060e41b2b1786e53a5c3c4fd089f1f8ec439c9ffcf015706596e687e872fde5e4895d0bb91aa15c9769a4e03c5787

Download Submit
/data/data/com.youmusic.magictiles/cache/image_manager_disk_cache/journal

Filesize
539B

MD5
c8c96adf406639db895e2d5f04eaba9f

SHA1
98321294e63bc3062a46066eb86de601563abe07

SHA256
f9682f8fafc073d227a9784f23d12f54b3dd1d85894151134af254011abf7b27

SHA512
5e98e7449351e289d0bfa5810114f581d31fd124620316650432695c8d30921d18e611352a0378a937f5e88fe9ac02d1b7cd7d90de180ad7bd10576c84f0d9c2

Download Submit
/data/data/com.youmusic.magictiles/cache/image_manager_disk_cache/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/data/data/com.youmusic.magictiles/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.youmusic.magictiles/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
b992a2fc2e5c9476ecbf080b204f2c2e

SHA1
6cd982c7600a9ee2f1920b065d830d95f73c8d83

SHA256
9957a0f03550bd2ff2f23c9e7c29ca608db8209bfa367c1e340df087061af044

SHA512
e0ea404eb32bbe896f7b32305986c4874237a580f228737bf9286aa88abfb1f900783b1e9c2f0c9ccbe1e0b3891c64131822b56b24c6b5a1e4776441ca766c47

Download Submit
/data/data/com.youmusic.magictiles/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.youmusic.magictiles/databases/com.google.android.datatransport.events-wal

Filesize
120KB

MD5
b38a797dbda2678209c3d83babc9f300

SHA1
c90b5519761912f8f44e8d16ed5cce8d159d10a5

SHA256
6458c519eb2dece4638dd03e989d399814f5fd7287ccb7a0cad861da569fab99

SHA512
9524fed26a8b2697ec5d032f96b0d046c8a31b73754990735e01c49e58de25b4cac7c14b9e996c7250cd58249c5269bbfa3f85d252e7627ebe8538d2b579a9a8

Download Submit
/data/data/com.youmusic.magictiles/files/.com.google.firebase.crashlytics.files.v2:com.youmusic.magictiles/com.crashlytics.settings.json

Filesize
718B

MD5
75743f2971cfae5c4fae9eb5c63c32d4

SHA1
5efed6f9fce9bbf77db698e43b8804ebe2e8947d

SHA256
cae80aeb058b690f5e21a0133aa44a1e4a4f7bd7436b3aec27bf1dcc6c45b2f5

SHA512
5af4a0e2fe1ef92c3d1ab59c671cf0c46fd421f99b442ad8572c80d106b5230f28dbfa8c37fe52f0f3c2c59532ef4dc09214f269f1644663dfa702f180ea1940

Download Submit
/data/data/com.youmusic.magictiles/files/.com.google.firebase.crashlytics.files.v2:com.youmusic.magictiles/open-sessions/6525D78601E80001105E814CBF173069/report

Filesize
839B

MD5
e918232ab5c58cae834d0e9477df74dd

SHA1
1db12c4bdfb8710901653749f69d36cb0fe7b3ac

SHA256
7ac32a4400aa5f0663ebe34dd67375f3256c704607588a10421279fb96b9cc1c

SHA512
d34fdb6cd15a5aa92a6580ef6df0df3131a38756b42ec18226d2991812443e0080172ea66df3ebc70fd60a4e12d5a9cc622fc61455830a7a0b1fe52572bc5567

Download Submit
/data/data/com.youmusic.magictiles/files/FIREBASE_CLOUD_MESSAGING_LOCAL_STORAGE

Filesize
208B

MD5
5b761083fe75c224d03a3d11f95bcfc8

SHA1
a1364464df855347c152b9e0595647fb18103446

SHA256
9f10fc5a5b3f500d55af9b1834f77b74206f612746106488c514302c9c9ec405

SHA512
bfc79fbce6273210c029a6d9a88981e3ef13dd2b153ec6478306e05e0af2d3ae088c20ff33185d8294b00c919a0893c778d2e210293de9f883b3b8bcf40ff416

Download Submit
/data/data/com.youmusic.magictiles/files/PersistedInstallation3064822635426544671tmp

Filesize
90B

MD5
b25ce77f572d7ec30dc5dcd544789f76

SHA1
8a954d7c0b76868f7ecd3e1ab54ed5cdf46c4416

SHA256
70dda2fe3707526d7857f4004292ea2545177b56b201d97b603c09212cbb4239

SHA512
482f4ab148ed62c493499eddf0e2de1b1f5adae5df401b8709cda8db3ab4aa4f1976c2229833c11cda982ef70bdd48ca2d1df4be5ac433f5925f0ca93bfcab51

Download Submit
/data/data/com.youmusic.magictiles/files/PersistedInstallation7345221324006052161tmp

Filesize
561B

MD5
df001816d353319762f230b355291af5

SHA1
a31889155866e22d937e641a5fae7612aa6c1802

SHA256
4885d80cd77eb16e0472df4a20e8b4087a696373578df9bea2c68af5970f07c9

SHA512
b5cf698ac19ee478a81e47683c398fb275a7995e2191bdbe666c09d92247719ccae76ea3854bada9bf733990fff0f4853db861cd1bca26d7b8cbf165d0cea4e7

Download Submit
/data/data/com.youmusic.magictiles/files/audience_network.dex

Filesize
3.0MB

MD5
b18ab03453d5d70113873d8c45c10d2f

SHA1
ad3c48b1ca11b9c84f380b9ae7a025f957f3d02b

SHA256
bee390afa2267bc48829ee7a0f4286895bf32ba2443ff447451f515818f7203b

SHA512
63e75b38dd472b2de19f6e513026e732ca040699437be4a1684827ab2ba4baf2077b053c0ccc4a702b72bfbc2ed7e343296b9a9f85ba906be37bdd6f905694c8

Download Submit
/data/data/com.youmusic.magictiles/files/local_ad_list.conf

Filesize
970B

MD5
a495056d189a6b722111e4a744a76762

SHA1
5648ebaaf7736580c9fe52682f0c0bcd7ef44aee

SHA256
6ff01792e5b5db4fdb225f9df31797b68127ad5b8b89e554ac37b41a2f29dd35

SHA512
b7ee3b92484b50d6b63dfe2e99c4f4b1f6a0a5e9ef833b05572acdb9f50e45b9f455c34b53c87bd5b77760c4df1ded6a6b283493342b7cfa8feab343a25ab307

Download Submit
/data/data/com.youmusic.magictiles/files/local_ad_list.conf

Filesize
970B

MD5
99b5574bc068667a86d194f79792a2f3

SHA1
176449fe46d50bd13c5ca07555601711262e7fd6

SHA256
bf5dcdc7bbcee2fa97ade97d7236dcb016d73b84c9008351d59a54df33402ad7

SHA512
3771b9c180036648a1e306d1123603e72a8426cca97c13e8ae1a1b230912f739679e49c2c973a2ac30c3e70a057337fa3c7ff0089692edc789d6e233dfb489ab

Download Submit
/data/data/com.youmusic.magictiles/no_backup/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.youmusic.magictiles/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
d0c8d02646877d5ab35ee02109e9f363

SHA1
bfa4acaf86ddb889e895c60b89cca5770a5018df

SHA256
232543adb403195102045b7779de8860f079cc337f4f81fef486ea391199f042

SHA512
c871d26c3f62de8e88acd2fd96fef853036f63ce9d0094c4ea2cb372c6ed93468eae22b6d2e9cc1fbd9f6e4ba4c4a4ba29aabe86579e04fa33c240776e645d22

Download Submit
/data/data/com.youmusic.magictiles/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.youmusic.magictiles/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
b9309a037310ed734d4082261e2c3168

SHA1
43b62e67693b052639af02e8ed4ba0d7a1880c0e

SHA256
dd924dc4e589544a989d49c862b749d1d3c46474d1b1f31977e137152d46b3b9

SHA512
26d71ab116e99c9b61ba4ab8048e1211e30a6603ba8bc4e2343a0fc749b74ef69ac83908386d6b5c367145819a577d91f77bc91e184f67e9849b6dfbf04a152c

Download Submit
/data/data/com.youmusic.magictiles/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
e02b325f0562c35c3be97ee4d72c526d

SHA1
2f8dea1114f561187a61908af1b4e30cac1282a9

SHA256
c363ec48443c2d96b82715379ad893db31ef9e08611ce90c6ee2962ac563b5a3

SHA512
77d28d9cfbe21078b503842dc5f9b4fe0c1875ecf3e6ee8ed9c346366eaa1507fe6dc3b0a4f2c2f744e7cc59a9315166551532e7bb9c097be949f75578d93641

Download Submit
/data/user/0/com.youmusic.magictiles/files/audience_network.dex

Filesize
3.0MB

MD5
b18ab03453d5d70113873d8c45c10d2f

SHA1
ad3c48b1ca11b9c84f380b9ae7a025f957f3d02b

SHA256
bee390afa2267bc48829ee7a0f4286895bf32ba2443ff447451f515818f7203b

SHA512
63e75b38dd472b2de19f6e513026e732ca040699437be4a1684827ab2ba4baf2077b053c0ccc4a702b72bfbc2ed7e343296b9a9f85ba906be37bdd6f905694c8

Download Submit
/data/user/0/com.youmusic.magictiles/files/audience_network.dex

Filesize
3.0MB

MD5
a31c863b7843d64af8070b7e12b6a3ca

SHA1
e94376c90f3c4aa57a1f278f5357f506fdd7087a

SHA256
24eca4bfe4321e3e99a16bd96a6678e3be23e706d1bff0d99a9d641c1329ed7a

SHA512
88eb89220a0fbd8ef088bc93c3a6635cf01ce9bb3d2377fcb5368c69f77a5a545fcd6b2314e8ca900fcfd4565ef2c60a7edbfb57f5c8987d80efd9fabdf0f534

Download Submit
/data/user/0/com.youmusic.magictiles/files/audience_network.dex

Filesize
3.0MB

MD5
b18ab03453d5d70113873d8c45c10d2f

SHA1
ad3c48b1ca11b9c84f380b9ae7a025f957f3d02b

SHA256
bee390afa2267bc48829ee7a0f4286895bf32ba2443ff447451f515818f7203b

SHA512
63e75b38dd472b2de19f6e513026e732ca040699437be4a1684827ab2ba4baf2077b053c0ccc4a702b72bfbc2ed7e343296b9a9f85ba906be37bdd6f905694c8

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads