Analysis

  • max time kernel
    2081284s
  • max time network
    132s
  • platform
    android_x86
  • resource
    android-x86-arm-20231023-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231023-enlocale:en-usos:android-9-x86system
  • submitted
    29/10/2023, 15:25

General

  • Target

    titaniumbackupprofull-1575175240-www.androeed.ru.apk

  • Size

    7.6MB

  • MD5

    034f9d5e6e4804ce5ca3f11f91189e51

  • SHA1

    ec1267c09bb433d22f49c3970f32067a221a10a8

  • SHA256

    eedc368efc3f6f9d1e974ae58515e91a0a6745cf1a4f77e93360519dcf84296d

  • SHA512

    baa9883d1317cf3bb728eac7bfc50ab9e043b3fd853dcccebadaa2b008a490ac5da76201e2b7aca2d74c65449ce594e3273428e66d285a3e8f62a11c0f1703b0

  • SSDEEP

    196608:fklOMAjxHTr1z1w6ddZnyM1msNJWBTPUWLXg5eb:M6xH7ndnyMEsNJWBTPUWLXg5c

Score
1/10

Malware Config

Signatures

Processes

  • com.keramidas.TitaniumBackup
    1⤵
      PID:4232
      • chmod 755 /data/user/0/com.keramidas.TitaniumBackup/files/busybox
        2⤵
          PID:4268
        • ls -Z /data/user/0/com.keramidas.TitaniumBackup/files/busybox
          2⤵
            PID:4301
          • ls -Z /data/user/0/com.keramidas.TitaniumBackup/files/busybox
            2⤵
              PID:4554

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.keramidas.TitaniumBackup/databases/filters

            Filesize

            36KB

            MD5

            fd40b0ec4ad0f9c1cdb2bb0e1294ef6e

            SHA1

            d5a3ccb9a23f0e9812a9782f7326629570cc800e

            SHA256

            1f2b6d413b572682f1d26432d862d050bdb1a36892b3dd77d2aea0aa2648abb9

            SHA512

            9a1bc2c4849e8a3b82198892b9f3d85ac76cc9722d884631f87a23166a84b17ebc1d72b06be076127c266ec0e58bfaccf954894e533f9adf5624bf1a51a8c76f

          • /data/data/com.keramidas.TitaniumBackup/databases/filters-journal

            Filesize

            512B

            MD5

            79dae3b1861961f8887e6f21f6db3646

            SHA1

            df96ce1fbac7ab085a80c3f8f39e09cfa0b7828f

            SHA256

            51bf72d172e83158288bcacac6aae955b0a52cbe6f07b677871c2dbe766bdfca

            SHA512

            4fc146e52d16682ad3602019242d1fc3b6b99d919cf9f3b1a059794421d39ddea008ed3a2e06c49723bf27990c7119e26709365e67b22fde0318adfe8fb52699

          • /data/data/com.keramidas.TitaniumBackup/databases/filters-shm

            Filesize

            32KB

            MD5

            bb7df04e1b0a2570657527a7e108ae23

            SHA1

            5188431849b4613152fd7bdba6a3ff0a4fd6424b

            SHA256

            c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

            SHA512

            768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

          • /data/data/com.keramidas.TitaniumBackup/databases/filters-wal

            Filesize

            48KB

            MD5

            b2383f34ddb58fc54ad71daa94d644a2

            SHA1

            df0596c5ee77ce6a93e29aa4fe1b0f6012667594

            SHA256

            e40c12e68e421b879717f72407b5090713449ed70175110b71718907b41cc7cf

            SHA512

            e7d286de0657472194e40692b53c5285529ad065274163a1459dbf5c9166d43a83869059d23508692877ff5b72ff0c2b2fceeb9a5e2bec293bd568a1f69f0995

          • /data/data/com.keramidas.TitaniumBackup/databases/schedules

            Filesize

            28KB

            MD5

            bb7ee88e4f956a79a7b3eeba515e77db

            SHA1

            f0d0247e40d673141c3f8e893c08d5dc108f759a

            SHA256

            8d9982a1faf03635e8ba303d57b7589ec0f52a800d99066f019e9accb5164356

            SHA512

            00b4cfa5c45775606c386f275d37ecfe378d07f943d4b758b2bdd14d4ae65ee623555c53316b0f840acf7c306b98e0695ca1732fe4d060c275e09d4659c60e5f

          • /data/data/com.keramidas.TitaniumBackup/databases/schedules

            Filesize

            28KB

            MD5

            e0e1e6b09efd4c928c13fe88f0d6c82d

            SHA1

            e341fe31cc0347cd8be5ccdcf93b37970026d076

            SHA256

            d4abed1d405f4c6d2971c1f4fe1263f7a6e5f746fc2ae1b47988031cf43d5d06

            SHA512

            9aa10cbdd2e6a4a6ea3842ed4505f82f4cc1e319fc89a1bc5fa0374ea2b1d828377649c4264f0b9b9e7f8748a1b299e956618240d9a0931abda617d835a79b2f

          • /data/data/com.keramidas.TitaniumBackup/databases/schedules-journal

            Filesize

            512B

            MD5

            f28e534c566fb9c8ad01bd4e43977c4a

            SHA1

            709d61e386159630279fc1cee095603b2aa67184

            SHA256

            4ff4e0c80f08fb35d1cae3f2ea9d340cf95101c9325a5304b508af671b45825c

            SHA512

            7b75c1dd2a892cb912eea655c0cb22fac118ba32f79f18698f5311151260238b65cf77a6d4e734aa625031bedff63675c20cdca12c0ad03cf3c00ecc9b6a15b4

          • /data/data/com.keramidas.TitaniumBackup/databases/schedules-shm

            Filesize

            32KB

            MD5

            bb7df04e1b0a2570657527a7e108ae23

            SHA1

            5188431849b4613152fd7bdba6a3ff0a4fd6424b

            SHA256

            c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

            SHA512

            768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

          • /data/data/com.keramidas.TitaniumBackup/databases/schedules-wal

            Filesize

            40KB

            MD5

            0763747f0ffa99a74622f246d542c343

            SHA1

            01ca22f4bd2bfbc125b6af440ca64b0bf6dd7579

            SHA256

            20044d25dae3724923550d451a43c5da4f105f4a67482429944b272998fc4733

            SHA512

            8d488b3a9fb6719bb5746be87134444b6c82fb9be9b080f2c3447e98642f25bf6192067439357437a11309c63a76638efa0217c481d72aeff58f0078c0c5fe68

          • /data/data/com.keramidas.TitaniumBackup/databases/schedules-wal

            Filesize

            4KB

            MD5

            2d7ec1d725beaaf72d093a046efbd84c

            SHA1

            b62f63508673fc0dc1f0251e13ce01d1c9bb9d0e

            SHA256

            6a7cffc389cba7d3678ac2bdac52b566d10755e4c5adf0434cd4645d89e28605

            SHA512

            8a3a97a9db3da83c559f5a988b058019b94910caa022cd21f8c9c47185edbc5a4272d3083b3e47b2180fa20fa30a7680309112f2e7ce3bd1686bbcdd660d6ed0

          • /data/data/com.keramidas.TitaniumBackup/files/busybox

            Filesize

            237KB

            MD5

            691b3732d9cf3d90053659f3694e63e4

            SHA1

            cf861d032e86bf4ba8d08c2469e3370d749c28e4

            SHA256

            d81e5a0f01d6b298b938340d33b98bd44a2056a475df8fd9c7b2efa2f36a90b3

            SHA512

            4d81b26875850e6ca19aa4c6cab088dacfe0abbe724965f057a79eb786777ec4d5e4ae2dddf67d6d7b0ebc5c15bbeb024fd20f4afec72661d6ed3faf2494b7af