Analysis

  • max time kernel
    2287981s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20-12-2023 00:26

General

  • Target

    74b7f56d62aa17f5c41e7604d65e8c79f107ed8af16650dfb8037a154a7a7169.apk

  • Size

    19.1MB

  • MD5

    9aecab317ec0705f88bd4d32d177f95f

  • SHA1

    9a1bf8a569c7b18967283e5568d9607e47481207

  • SHA256

    74b7f56d62aa17f5c41e7604d65e8c79f107ed8af16650dfb8037a154a7a7169

  • SHA512

    77b048efb778e4c2ea356473ec499290666e3cdf8e246c88978d1bc3b4cc78904202f1dbf8d7a65b25cfcbd4695615b33f9b7ef5cd8a3f30a92bd7cbcee0f8ca

  • SSDEEP

    393216:8kA7WB0qnBm9Uv9iWmzKvBCHjPcTnuZImv+tKavI/HIRtYYUdjx7uK3gkEQ1:rA7WOWgWhzs04HaUP7Z3gQ

Score
1/10

Malware Config

Signatures

Processes

  • air.PornoAPK.OfficeFuck
    1⤵
      PID:4243
      • /system/bin/cat /sys/devices/system/cpu/present
        2⤵
          PID:4274
        • /system/bin/cat /proc/cpuinfo
          2⤵
            PID:4298
          • /system/bin/cat /proc/meminfo
            2⤵
              PID:4318

          Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/air.PornoAPK.OfficeFuck/cache/.AIR/certificates/javaTrustStore.tmp

            Filesize

            118KB

            MD5

            076b9503f00246a0cae9f76338b48213

            SHA1

            1f3cd8222ba2556d11570c77a12d4615b93a3ee6

            SHA256

            a732da7dc7eecc1d5e4a27a75923f39e558a20df23a9649e4c4bf151d569a835

            SHA512

            3256a060e48f95aacc4c4a2a5f9ad53618380f650d3b557433a60903be57b49deb7cf804cc9f1e8b67fc472149c0c8bb2abaca4838bd9caf8f5da05d06612da8

          • /data/data/air.PornoAPK.OfficeFuck/cache/.AIR/cookies

            Filesize

            244B

            MD5

            ac9a28abcce5558387f85f62ded1ff2b

            SHA1

            08803404823aa91b333796c2226ba2706608299b

            SHA256

            372ce17ca2e893c78ca7a7bd057222d25434980cbe34bb70d8075d379fc2e21e

            SHA512

            62e97ec4be56864df64c0c1ed6ea2fe7c473f47b2b66051ca63aa1ddb571c19ff747c6e846bde7b8001211a5d96a1e07dd420b37ebabd401992062196c7def34

          • /data/data/air.PornoAPK.OfficeFuck/cache/.AIR/cookies

            Filesize

            243B

            MD5

            27f4b9aeafb9ef0aa1de37050c33f460

            SHA1

            4b1100dbf6e7f53898c6c57a7b2dfd757126592b

            SHA256

            a8aaa7c04f81ed5acb5984e486ca1df3041a1bffe57f6c09d64533dc4cd6e2cf

            SHA512

            8a1b5560318e3d7f23eeff3f674e1976b6ccd359b5a5272404f21072366690a601e36e21d77755f5a12ecd1522facc1268f09c36379dabdbb7c2dbdb03d7e0b9

          • /data/data/air.PornoAPK.OfficeFuck/cache/.AIR/cookies

            Filesize

            244B

            MD5

            296d2ee15ec9821fdf2998961854f9d7

            SHA1

            5460ada3532f7de2fbc3e5731747e12a34734e12

            SHA256

            4b0fd47b7bd6dea426c645ec8bbdd16caadd7b2fa8e7d364518820ff9903c624

            SHA512

            adac55707474b2df7424d8c44f9a56f9cded007f62f98c6612d25a7f956ec8179ebf730c18c6f764678a62206c33c546f8c3eefa4ae4ffba95ad86746aab5cb5

          • /data/data/air.PornoAPK.OfficeFuck/cache/.AIR/cookies

            Filesize

            243B

            MD5

            02c90aca28b30e45c822234470c0c555

            SHA1

            cc01795783812467ef29aeca62eb7825f3b60d6c

            SHA256

            4a3a083d8ab2204fe70d3c7c481436ee75840e76c32fb5507aecb2d2c80e0ae2

            SHA512

            656398c589efc9d0a6970c3c76617bdff68a97359b50626d70f315f831f0d1e1fa0c85ce8040551ea21f2f734bb314895b30cace32590aa9cdcdc5f70d904331

          • /data/data/air.PornoAPK.OfficeFuck/cache/app/3a9be64b-03aa-44d1-8580-89c4103dc677/assets/META-INF/AIR/application.xml

            Filesize

            2KB

            MD5

            e913fe8b0cc92c6406e3e611b76d470c

            SHA1

            95145e0a52a277f786a4a5e824b7eac2d96f5565

            SHA256

            47f4a87ead7e846682fc9a8818a4df67b852497e42a0425c94d5ecd598cdc504

            SHA512

            2eef60e9b0dc0b1b9e93d8bef4811c962d0fbb74767821afa084218dc4b1e44c406627352b888711cc188ae55d1a92348b6fae3238c2c4ec2fd4f56bf72d6d2a

          • /data/data/air.PornoAPK.OfficeFuck/cache/app/3a9be64b-03aa-44d1-8580-89c4103dc677/assets/OfficeFuck.swf

            Filesize

            6KB

            MD5

            00dfd52018985ecd5d643d191e43828c

            SHA1

            d41343830520f11f022d65dd266a1025524ab470

            SHA256

            3066b9a3023d6f5ffbd494fdce3507ddfd863856222963163396229a779d20b0

            SHA512

            98d962ba61cbc52f842b76338ea1788d56944812231293aaf7908c64f0af30eee464a6e40b43355b7f9cf5b193b123d1b1303dd78bd07c0aa9619d09113eee79

          • /storage/emulated/0/Google/google.id

            Filesize

            36B

            MD5

            861a017b2d13ff804760cf8de379ed7f

            SHA1

            d10783fd88720b2e004887ba36032bb6a7513cae

            SHA256

            26004e3a189bc2db2f46b5c92a07c9f7fdfd1ea0f44c2bdde24b661deec11651

            SHA512

            2d3dc4babeac2463cfa05dc137d016e1cfc862f39f0eafa393ef5ed92ced1ea3d913730041fac9684234af19ad57192b50c3ab6844d95aeb42cfe04d2ba41963