Resubmissions

22-10-2023 16:12

231022-tng2tsae6v 7

13-10-2023 00:25

231013-aqzj4shg43 7

Analysis

  • max time kernel
    1479106s
  • max time network
    164s
  • platform
    android_x64
  • resource
    android-x64-20230831-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system
  • submitted
    22-10-2023 16:12

General

  • Target

    inat-box-v13.apk

  • Size

    10.7MB

  • MD5

    eb1614b8aa7e277b934c33889e6fe758

  • SHA1

    0b6f1fbbf0fe18d017cee9908c9476c704caa856

  • SHA256

    1127824498725bf2a688bef75ec3fb56e7dd658295f79017c9ca268b75c96079

  • SHA512

    c1d1052bf0839584b72f4a82ac55dfb7c5c6b109c881e86dbc8f8f37da9ca450b201efca8b303e33ca78cec670c27a59cd3cc3220893476cfaff6cba7de1ff95

  • SSDEEP

    196608:LraxZVFeCS7QKdsqi09LaTmRKk1SYRhKg2qAkONdgFs9KrkRkaEtXZ:C6ZsX0gTMKkMYRhKv9kONdcXrLp

Score
6/10

Malware Config

Signatures

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.bp.box
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4981

Network

MITRE ATT&CK Enterprise v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.bp.box/databases/com.google.android.datatransport.events

    Filesize

    56KB

    MD5

    55d001d8ecb776016edf414c8f8f4506

    SHA1

    9a4c0766a78a3e72a26c392652c8cf94c083f3a1

    SHA256

    561f93146f8ac72908babbdd3e8821f372feb219cac9efacc999ed1282e6c878

    SHA512

    4b13593636fb9d574ab6a0863e2bc411acfceb8d0bb7ab981523661d5a17580a909bbbdedbbf74637f82fe0670c42781afd9a65c856524239cab23b982b53917

  • /data/data/com.bp.box/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    47f288f53ec8740c71e39564be72eb6b

    SHA1

    ec27e9fdba49d08366c5c539c2910a53d9f7edb7

    SHA256

    6136e80769c6680fbbb02ace77968d84f792748cc8b9bb471ebe2f1fd942b31e

    SHA512

    fcc43cfc90a70b6846f48e0fa46a44aa67d4b1b0e3f200643425a6e9b5b6b378933cc9ad1c472817ce16daa5cc2993bebae60188cf1d9433297cef7b02e97d9b

  • /data/data/com.bp.box/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    13f9f129468af524a36d9384bcd59963

    SHA1

    fa89a5d5681f80c8658035a89165859ebf400d8a

    SHA256

    f3ebe7718993f2472499820084993ee142c6addc228b235816d7695cba2e439f

    SHA512

    c8bbe5bcf0ce4d39abe0c44c04ec01e7cbcb79eb4a4ef9b2e64412fdf545c9f32e53266ef92904e9bad0cbb6fe94f765a206ab92e4334d41266b7c5c67ef92fb

  • /data/data/com.bp.box/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    496ecdd97d1e335274ab53ca6cc81be9

    SHA1

    9ad8c15520289920d927f58580f1043f6bcf560b

    SHA256

    8dd0cd56af4b25414a49bd395cfe534e71555bf60cba380f1760ce3515e838cf

    SHA512

    0ff40aff748e6c7b173cfafa4327fa7044beabc2f801287e5e28e644751d885f08004045b473cdc368e52c1ce48b9ef27e8aca6ad89c64697bf34c884a67c69d

  • /data/data/com.bp.box/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    eb52a90bb70b76e946b62f50b6f7fb85

    SHA1

    42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

    SHA256

    48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

    SHA512

    b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

  • /data/data/com.bp.box/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    7b05c2bd359f4cae32886891a27de29b

    SHA1

    a6c3b6d12ebf3dd749a3f8bee3e38f3766a7a015

    SHA256

    f70909a64fa4cb4e07f1a472347453a0f7d3d0f2365352aa7114c5a8e8007e40

    SHA512

    a3a9d0d29d8890eefe7fb00498c6d2fa7c3137b27c60ceaac7063e796ee5e7fd7247d8d4faf00adec6adb8e130bd0c73b7d21bf64f3abca28f23807b4a3aa7b9

  • /data/data/com.bp.box/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    6ef7e887926ba65e8ee4bc2af258fdfe

    SHA1

    2c8a78f169540960fb43a61d4e522e89eeb4a508

    SHA256

    7242cd14114a8bd64630fd4d389e003a36ac19ffaa597a1caf7bb08dbec8db71

    SHA512

    a66597b0276d5c32542d5c90f041b1329d2b5d64099285ee211e793e76f271933b0a36c06e3d739843520c7e5b583b56eb76e8453bf12ffa4beb4221f53b7149

  • /data/data/com.bp.box/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    c8b127e8824d4620ec2e3be9df8f7991

    SHA1

    736a285a54db5ff5188f4b3872158917d5346fad

    SHA256

    264a984d99538d20cfb316bd85ce2c7c911adc4c56c81d7eccd7b472d737ae33

    SHA512

    e861f4f473a6a66e8e0edaa487ba57437ee5cbc72c9a3434acf04cca310beee6bbd8bd141f3915ae79f0de93d7dcb847902a6ddc24c9b177ce59a7afc09d96ab

  • /data/data/com.bp.box/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    a8b5ed886cee69b76bd5162eaa3efb48

    SHA1

    3eed53422bfde05e525c96e106c856a214f618f7

    SHA256

    5efda52397136ad5b5c6156688611ac6ebdf4b6e79b59571ae5e56deac580a3c

    SHA512

    0bae1c5e0b9dd4bd21c089dbafe9dc605990cda509aafbc37752e018edcf62b629684c93effcfd8e68de6dfeac284319da20a600316253ebb5c940b816ec5d70

  • /data/data/com.bp.box/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    1fd548b64cb2d59ccdf49ce436ce0f8e

    SHA1

    f953d3c7b485f1021b5f6624cae5ba779068590e

    SHA256

    95884b1255fb06b3609ba8eaa00fde3ae1ed390f147e7ad411b55b7a04b2c804

    SHA512

    ddb2ac9796fc4d9fb2bab034baee4d7f55b498e0935b06e9105c6a88b4dbeb39cbea96afb3b1f52d52f225dae6b221e83fef5e6816c117a4ead412ac88735c4e

  • /data/data/com.bp.box/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    df086db46b18096676de20a2d3debadd

    SHA1

    30ac45708f99baf063ba4a2f37eee814365553b8

    SHA256

    d48bfc4b7456864a9c37c88598c6bd65b329406477d06440ef6556e8396d277f

    SHA512

    648b3956adf6f966d374111518b6a067c4d107cea3f1698a940fb6ba2ca86dbf6879d68dadcc342e5046fe27e0ab2fbf06281ee77c13647fc0ada0d2ca8773b0

  • /data/data/com.bp.box/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    91e35aae2f351d68a457076fa3a89657

    SHA1

    968a43744429e103ed8dedd0a5e845ffcf4bd6ee

    SHA256

    8493636a2ba67058380e7d955f7d486fd4cae837c95fff3ac05c25e423bfd9ea

    SHA512

    6d18ddc149ff31cdeb8c6dfca52469b85f5d9b90b90323d3c7168d18f7f4013b6567817ed1857830b311895d183e6e34891a7fe186bd325cd7d8829f7ee9fa78

  • /data/data/com.bp.box/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    c4bb5e957c5a96adbbbaf3aa54809877

    SHA1

    d619baf18f5e82130737ad0f6756a7494fcf3c24

    SHA256

    16564a9cb10d8d3f13858aaca6eab44453d7431bdc807a060f4d34638ff4a787

    SHA512

    a04ae45fa3ae17d63419f2fccf198ac2ec54520f7480a050f3a8dc3a2c3df2059f918ffa64bce3dcfdf6a87ff87b7d1d3a77627b8233987fe593e46a6846074a

  • /data/data/com.bp.box/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    01a817dbe9061e99b1d0cf86005c0cca

    SHA1

    cff0b4a2ce6ae97c896d9fecd161d2638768dffe

    SHA256

    5921baa5775e87f6464b086c6550c3ac6008b0cc51b8fa23fc2042785681934b

    SHA512

    8b5d6e88cc1417b71f96a69d9a7584cf18382c6bd54ac683f4f4c79582f03ed69457e7cc80004010f6ef5d560afe710ed32f30358cbd5165d005d74b5c618db2

  • /data/data/com.bp.box/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    222ecbf7252f8217e2fd967840ebab2f

    SHA1

    bb14765307d83119a8057acd2e7e8b953538c18d

    SHA256

    7d4fc445aebe108993e814ae7d865c21b9464e51bd49c486e23d3d4a2c06f881

    SHA512

    47a0ecf40c587b6fe29b80308c6364faca668246d3517e0166de2f4cda80af9332ee47be57915f5d9bc23d3b7765fd8edd4fb34ca73718a02d495a4a6e489291

  • /data/data/com.bp.box/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    1d90e885d2077be7a20126fea113773d

    SHA1

    f1790b1455373d8f6ae3464a4e9b6e7e0383bff2

    SHA256

    7a73b9687cb21725ce9856993f70f168d2439ff1cd81b6193ba39bb7f22791c5

    SHA512

    b35bfadd0ab79babda43aedffbb2a3822d858de65b568000d25fc8a28760102dfde097a76e5e0fef52ac7c1dacb2185610199b2d15b8ada5f14ec582152359a1

  • /data/data/com.bp.box/files/PersistedInstallation3939734053651758047tmp

    Filesize

    90B

    MD5

    a5c094da3234e25de8110773ced1da3c

    SHA1

    683221681628556fd3badf63441d112eac52f986

    SHA256

    449a2c0683f53cdf3771d40f6c2acff9ea4534a0fb941b2fd8fb28f0ea4a0e35

    SHA512

    94d83687088b2111efddb8d9042d23a4071ae2ac9bcad1902538546502a779d3c10035e7775bdd717dfbde5fd250d587434bad5d006886c33731ffa5e06754df

  • /data/data/com.bp.box/files/PersistedInstallation4895245021649348747tmp

    Filesize

    570B

    MD5

    101736b413d236b2b15321c179d43342

    SHA1

    f97bd137f3f8fcc73cff699e8c8f5dc2cbc65198

    SHA256

    63924ebb8547cde99d9ac414b312096b6c83832432922a34861a92c712ccc449

    SHA512

    17ccffe9dc2e150354069d90d0f9967cff8c00531f18aaae3edac28254d8ef80a03bf426cb51950d6ac26007612455f1b5552d682d35c775c426f1d0a986d821

  • /data/data/com.bp.box/files/profileInstalled

    Filesize

    24B

    MD5

    672ae68151036a2b128f64007facc4ca

    SHA1

    d655c29d82583b74238cfd3dc46711b6fe4546ed

    SHA256

    26a989a79a5e32f1e357f288a1c531ccc2c8d9f057fdb875ac011c47892cd660

    SHA512

    e23e4c46d50318d78af5f46e4336e0ab206bde83924cf8aba7f02444ce789b211f561ad42abaca673ef20cc69e7c2773828f0c9cb1cf05a492d8e3c7788c42ed

  • /data/data/com.bp.box/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

    Filesize

    8B

    MD5

    68704f14d208af08262c4a3e6c75ba9c

    SHA1

    3b307adcc70caf7afc50098842c1d317fc99f108

    SHA256

    789a835b97552635485075f37e7ac6b18f206eb80b4f924f9c4be793a4109273

    SHA512

    445e2fc08c3c0353c6925dc1f8fe64b65af3bcc08a5539477f899e50ae48019f4df821844cb02d779b7edafc990bf700fb07bd0a33c68651c4e34b64984a72ad

  • /data/data/com.bp.box/no_backup/androidx.work.workdb

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.bp.box/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    922e7156eb6579e99615c033493804a0

    SHA1

    650d5808b76b8d557f6c2c76b8974e61ed872ec6

    SHA256

    6292c6eb8a344952c0bd9719805fb7f3d4c563b1efcece6a1750c4362dd91654

    SHA512

    072b8008bcb43b994c0bfde900778d8e3898ce8c28700a5f8aa7a8ddeeb143c51204bfa507aaeccc1492ac5e0bfa53b9740fc618517e7bf02c6bcb8c9ce09097

  • /data/data/com.bp.box/no_backup/androidx.work.workdb-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.bp.box/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    39009efd31577acb6a686d12a5dcb394

    SHA1

    b1fd9be682ce207512254dcfb0e42f9cf43ae23f

    SHA256

    254445229aada6715d0dce4f6afd7d85ba4a6de6d5da3902360f0ee236a51d4a

    SHA512

    5900963239a4365201273de48170ef47f9214390fec03d2b553e58292c902a8e71f0fb27b2c82512c4bac453cc2e36fb50353eb35e054f54dfc3963dd2b042a8

  • /data/data/com.bp.box/no_backup/androidx.work.workdb-wal

    Filesize

    112KB

    MD5

    6317054523a1609c5a7fe0583bfb426c

    SHA1

    62f10769e602916ee7e9bf325d1deec0f99bc570

    SHA256

    b4643a1ec83ea56a9395917bac79b5e563e1e9628e7e03b0138c00248acc9429

    SHA512

    269cc161461c46bd71bbf0074438f02a66714cb5643b61bebd8e628b4a4ac50cb12976cfd4878ac68eb20996bd0ed4143c7adee5bdcc6fdee9270da42648e5cf

  • /data/data/com.bp.box/no_backup/androidx.work.workdb-wal

    Filesize

    120KB

    MD5

    628f2613ab9e57af91382bccee64069b

    SHA1

    a7cab3829b6c65358cb35f7c7266a01acfae3633

    SHA256

    c38037e18690482868e8ba75641778eceeae0e724e4a2658acdc15596f642018

    SHA512

    641469afd92a9aab0180d9fb09c00b04a78eff77484459dec940abae3945cf069addf989be4f8f17ec175cdfddad14a194f56f1b8dcde5df63f871571cf29604

  • /data/misc/profiles/cur/0/com.bp.box/primary.prof

    Filesize

    2KB

    MD5

    821aeb304c75a9da9428d42940293236

    SHA1

    0f59bfb56e91968b50dabd29517100153ddd9517

    SHA256

    3f6cb62e7abf8a0ecd62d28bfdf4afd2209b03f0da99756f2f60faf12d176afe

    SHA512

    863bbbd3252c16e21f1e8272da2f5bc7d18db881895a043415b578df991e01a91c2928800d598ff0b2a5eb6105489dafe6a0b633268a77c35d607ac0edfb947e

  • /data/misc/profiles/cur/0/com.bp.box/primary.prof

    Filesize

    10KB

    MD5

    27728d9d285291f85c98ecd559a8935c

    SHA1

    4687bc4cfd96ec300f5100a495c0efaa7c19fd4b

    SHA256

    411b8a01234f3cae8891674ae7d36dd39d5b917b8b362c3c752e31957d76e228

    SHA512

    d9669fc2db11ddece8cebf1d33d2dfd350905ba3977a407c01c424223105632c39e2becf915b2ff1d3142758767dbc259dd5910fb25c6e502ef53e0af1e5abd2