Analysis

  • max time kernel
    2937014s
  • max time network
    155s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231023-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231023-enlocale:en-usos:android-11-x64system
  • submitted
    08-11-2023 13:05

General

  • Target

    jokerlivestream-app.apk

  • Size

    63.8MB

  • MD5

    7f56980839cbd1fe2f166da227a58a9b

  • SHA1

    02b5b28e59cbac184d6c0b5ec4305ca0884f8f99

  • SHA256

    c00c780ab99e3f252d7ccc2d0d70c43cc16c2a956e8cd9b0bdd16d18f6a90b84

  • SHA512

    039761ee3179cc6e519cfc3babb48a01e50d420b31630472d2fb2d28e0d361f8ad2ff8e766c3a08736a25b96f588a066d64819817d5ee3524b472890f154d418

  • SSDEEP

    1572864:Aei/noTuO7LB0vPbfplOcssi+ysvWNfdru9rFr8USqWHNIIay37GzK:Ae6ymbfplpsvLw81rm1/APl7uK

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs

Processes

  • com.jokerlivestream
    1⤵
    • Loads dropped Dex/Jar
    • Listens for changes in the sensor environment (might be used to detect emulation).
    PID:4413

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.jokerlivestream/no_backup/androidx.work.workdb
    Filesize

    4KB

    MD5

    7e858c4054eb00fcddc653a04e5cd1c6

    SHA1

    2e056bf31a8d78df136f02a62afeeca77f4faccf

    SHA256

    9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

    SHA512

    d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

  • /data/data/com.jokerlivestream/no_backup/androidx.work.workdb-journal
    Filesize

    512B

    MD5

    733478badfee4133627acba71b552044

    SHA1

    dce5e2b037f3f339d5f474833e28b36d1e63bda8

    SHA256

    ab45ef316d9729d73beb96e04bba570e6087d3641db91745597585805d44ecf7

    SHA512

    c3348bcfdd5633fbcb198df926167644f526774e963039456194a95dadf9098b58f3870c4e94d194699f4eb921fc4f639452ca62dbb3a54488f3fb92a0111bec

  • /data/data/com.jokerlivestream/no_backup/androidx.work.workdb-shm
    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.jokerlivestream/no_backup/androidx.work.workdb-wal
    Filesize

    16KB

    MD5

    1294d76d15950a18333f80cf218dd5e8

    SHA1

    e2e6921b6ac18f3658aab36301029bb4597940f3

    SHA256

    872e632694f4727e80cddb07cb3c6d1ffa26d6bf47e1df5177bfcbf581ebd70e

    SHA512

    bb5fdc6ebc3150828909a903d0cf37ad67f9767ccd2167c54fb82dc1dc6689db62c4d7329743640b6efdee768360c8dd87c0fd39b67bf91c77a6c6f1396ad6c0

  • /data/data/com.jokerlivestream/no_backup/androidx.work.workdb-wal
    Filesize

    108KB

    MD5

    a3f81c6ee74485fc75c0407443e73012

    SHA1

    3f8707968dd3a2b0b1257543e591a992175c1327

    SHA256

    e36e9bc8d2b9ce554afecb1fb2eb35f730ad389e66acb9f47dbf9243f12f8d21

    SHA512

    a375ec20d6c1316f78d3db83f4e2f8ad0f9ca567d607176afec5fb20e63e5784a48cbe22a5d4204ea085f012f88b69265019c0e50ec68be27902c85c6729db6f

  • /data/data/com.jokerlivestream/no_backup/androidx.work.workdb-wal
    Filesize

    173KB

    MD5

    476ba177e7f9953125d81915fa22f137

    SHA1

    9487ce5406573c90fb669ccdfbfac051bb116be5

    SHA256

    c97ea71f60727da8a5148f6ab5b37ada8ec17519f59f9117633fb9426acbf559

    SHA512

    7fcdfab3c2083915c17980a687f221f8e70b056f2c38f6c9c3152fa9071409ec4e3d4a405a923e5d5639733f9749c90dd0c4e81191903a6e2e27a43c5b8f4338

  • [anon:dalvik-classes.dex extracted in memory from /data/app/~~_F4Iww13AChSLscvER44PA==/com.jokerlivestream-CSogPs6O6kACDS0ZbWqhYw==/base.apk]
    Filesize

    9.1MB

    MD5

    727ebca1eaf4637c5d09d64584402670

    SHA1

    6f991c9bd51f735cabac658c4a0ab3476de5e9c7

    SHA256

    38c3cf5f3ca8cef35d8e110b9528ba6ca1298b089492919880e2594fa75f9298

    SHA512

    3d1fe101755a0371bb640067384dd5d8dc4449ec9700b266d7aa652ebed681c0a98e4ed00a751221b424e1841d30e32bde3a44dd21f6300c69f4c87e6942c6d5