Analysis

  • max time kernel
    2081203s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-20231023.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231023.1-enlocale:en-usos:android-10-x64system
  • submitted
    29-10-2023 15:25

General

  • Target

    titaniumbackupprofull-1575175240-www.androeed.ru.apk

  • Size

    7.6MB

  • MD5

    034f9d5e6e4804ce5ca3f11f91189e51

  • SHA1

    ec1267c09bb433d22f49c3970f32067a221a10a8

  • SHA256

    eedc368efc3f6f9d1e974ae58515e91a0a6745cf1a4f77e93360519dcf84296d

  • SHA512

    baa9883d1317cf3bb728eac7bfc50ab9e043b3fd853dcccebadaa2b008a490ac5da76201e2b7aca2d74c65449ce594e3273428e66d285a3e8f62a11c0f1703b0

  • SSDEEP

    196608:fklOMAjxHTr1z1w6ddZnyM1msNJWBTPUWLXg5eb:M6xH7ndnyMEsNJWBTPUWLXg5c

Score
1/10

Malware Config

Signatures

Processes

  • com.keramidas.TitaniumBackup
    1⤵
      PID:5025
      • chmod 755 /data/user/0/com.keramidas.TitaniumBackup/files/busybox
        2⤵
          PID:5122
        • ls -Z /data/user/0/com.keramidas.TitaniumBackup/files/busybox
          2⤵
            PID:5175

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.keramidas.TitaniumBackup/databases/filters

          Filesize

          36KB

          MD5

          b3bb08699e837fa082cae2b393d5108a

          SHA1

          2dce0137f5dc97759804adba2ec4c47ff934015c

          SHA256

          a812956cd3a381c6226e51e599ffc6898007837df869b57aaddb2e9ac22e870a

          SHA512

          e39d862af8a9d2929b50300dc653d793a68b0fd21488a918c12b89668faaf902162ac1574c9411a6328cdc8d201579bd4160831174d123031a8faafd0e4e7d12

        • /data/data/com.keramidas.TitaniumBackup/databases/filters-journal

          Filesize

          8KB

          MD5

          026f87308a456c56bf480b60adb44866

          SHA1

          1f7cbe7af28c622e003d92ac608dc1d0a6c91844

          SHA256

          1f76bb0136127e2ab1cf80aa97cfefbf12c6cf5a3662396cb5195e9771c6842f

          SHA512

          ec3a660214ffd3e641b145201a14b32e4ef9157d5ae90d05a0e89633df76d0faef2299a21be66254ed880c147e18ab6bfc684d0d4d933b89d342dc9f9247bb83

        • /data/data/com.keramidas.TitaniumBackup/databases/filters-journal

          Filesize

          512B

          MD5

          c1ac4c81da6492746cc40eec7d5a2a33

          SHA1

          28daf4038073721d60722cab80f1c50abf028ab7

          SHA256

          b9351fdaf98969a585e40627a23a9a4daf7a6e8372941ffada348564f12a0b59

          SHA512

          973018e6f72e4aeff955b21acdd4859b735cd24c3b063c1782d3f86fa8ee01f74018c69f888c9daff9d3bf1baf459133561a97fbd3d55a533563095ceb8d79d1

        • /data/data/com.keramidas.TitaniumBackup/databases/filters-journal

          Filesize

          8KB

          MD5

          6cf1462f5da42cb2490187e8e9762e17

          SHA1

          bd1be6e583f5ce1b9fe91667298fd8da665d5159

          SHA256

          ee5dc81ba287ea71390a667154779279b3363371eece80d432c865aa686c6d16

          SHA512

          2e537d5f31d992f50d4f6e00ee0c393122dd67dbd5dd8f7f2c92f46329b2c23b338e50b2299aadb7402e5e48b237f477db17d7bca73af86a71bcf21f00679f08

        • /data/data/com.keramidas.TitaniumBackup/databases/schedules

          Filesize

          28KB

          MD5

          0860e8532c0a8a67a0c40f96800b02e7

          SHA1

          c24a270ff1b2f212fa4dedb113d62bea99530238

          SHA256

          a394235ae5a76ada0fbb74b8fb27decf499ad31df294a399c56fb99434c0c921

          SHA512

          96f565748e50876c2d0e89f7d31c0c7fba733e765f8e06affff08d64aea0e2ca445d7dc81b2cc1bffade96e4422020d5d1c27b0f1a7a512eec6e60a57edcaaab

        • /data/data/com.keramidas.TitaniumBackup/databases/schedules

          Filesize

          28KB

          MD5

          af0a05526a3cddbd603add9de6e3d63f

          SHA1

          2869af106de6d1dd4923a0f16f11da59392e4da7

          SHA256

          2287867cc9ab6dfdc3207982fa62d60eb438cb2c22a7f1e356b56a919383e497

          SHA512

          6e8dff61464fc7d54fa24729abac9a18adc914eb4ddb6c98620fa7a9f235fe866ab0cfd8181b6d5d2fe1aa6a906c3dc41dd53b7ed1f782f2060186f63d9df596

        • /data/data/com.keramidas.TitaniumBackup/databases/schedules-journal

          Filesize

          512B

          MD5

          e51cc60ce133b773acfeb96622a9b296

          SHA1

          65dc2c8bdb5f0d4576e12ad6698cffcb639beac2

          SHA256

          5223a2a09ee72c5b5736c3c13b0a2fb9280171b606859f3841caae021b60823e

          SHA512

          f3a05f63eb7bbbad8931f7576d292ede2b066a32f9f2e8fe99041e10c1900baaf9304aeb4dda00830f327b0012286fd403f5d6564e70be03c5f4fa69b1723761

        • /data/data/com.keramidas.TitaniumBackup/databases/schedules-journal

          Filesize

          8KB

          MD5

          7527fffa4917246da9bd3c8f4ef53684

          SHA1

          83f04edcb5e5de6797064a4e1be01b4f95785abc

          SHA256

          1fc78c329675fffa814d0a5057c1e7974a0c963dd31e4d9907b3aa4d2aaa6fc7

          SHA512

          47866f5da109dcbc2267557da65fe01c9cbe3130540926dbceb1ee4e8b6eb59c63bf80b55df229cd74b192e654453c656d057f154232724f441175c53f4fe50d

        • /data/data/com.keramidas.TitaniumBackup/databases/schedules-journal

          Filesize

          8KB

          MD5

          c20f77328eefb4f5208e61910cad3329

          SHA1

          8281c6ffd299b4f1c536875275f0d930536b9ae7

          SHA256

          54eca8d04aab9beebdc0474ff1f643aeed55eda21a2e9dff45b0d524dc18b225

          SHA512

          103d8475d8dcc8ca42800878bec9b25938c0258d23b5801b1ab46e8a31b514defbd1987a5c5e0486b7d7139585c6d66f9bb321df041be6d9cd0a6ecbc2a32f37

        • /data/data/com.keramidas.TitaniumBackup/databases/schedules-journal

          Filesize

          8KB

          MD5

          81db09c2185fb271dcfbdcebe39a89e6

          SHA1

          64f5693f031d3fd9093f6007da513b672c0c248e

          SHA256

          3aa8735ecd3a83d8928af7fa0158669472c8a0d72a9e4c57b891652e1c1d2194

          SHA512

          1d94fa2e3cb58d9596ff0c28c201ab7fd190512fd32b7450a33dbc930716a849ae3fe5407974b20df70d95ccf32ac4ac1c56e28b40f8d9804cc4db076ef3fdb9

        • /data/data/com.keramidas.TitaniumBackup/files/busybox

          Filesize

          237KB

          MD5

          691b3732d9cf3d90053659f3694e63e4

          SHA1

          cf861d032e86bf4ba8d08c2469e3370d749c28e4

          SHA256

          d81e5a0f01d6b298b938340d33b98bd44a2056a475df8fd9c7b2efa2f36a90b3

          SHA512

          4d81b26875850e6ca19aa4c6cab088dacfe0abbe724965f057a79eb786777ec4d5e4ae2dddf67d6d7b0ebc5c15bbeb024fd20f4afec72661d6ed3faf2494b7af