Analysis

  • max time kernel
    2978172s
  • max time network
    157s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    24/12/2023, 03:40

General

  • Target

    c935fb17d19e3f08a279f001cde07f984a246571df6a444baa4f69b0a30e9891.apk

  • Size

    8.8MB

  • MD5

    9932bc9c0bfde95a8de62169df9278a4

  • SHA1

    53ec24203dfe1e84e024d837d2685963c4af1dfd

  • SHA256

    c935fb17d19e3f08a279f001cde07f984a246571df6a444baa4f69b0a30e9891

  • SHA512

    7d26b214bed94ec93f19de95ba77e37222a36535915bc0b5f6386eed8d410c0c5c50c79b54b47b25978a5edb3c9c7ca3e5d62f2ec016e15b3bdd52682856ecfe

  • SSDEEP

    196608:LyJM6iQ7ABPaMBWZ2FcCojxP3wNdkpS2jkdfAIX6i36QBOa:uJZiQ2aio2u9xMGp34AfiBOa

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.sds.android.ttpod.main
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    PID:4214
  • com.sds.android.ttpod.support
    1⤵
      PID:4246
    • com.sds.android.ttpod.pushservice
      1⤵
      • Acquires the wake lock
      PID:4362

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.sds.android.ttpod/databases/gxdbapp.db

            Filesize

            32KB

            MD5

            1c4274aa7a9a5cac8c6d1df71e4588c6

            SHA1

            abaecd685e01cc68801292e3dc7085654a22feba

            SHA256

            3f6cd5f480ae69859b7841450f3d032c528ba385ebf9f371b9c8fdc6eb4231be

            SHA512

            1adb95935798607bd36cedcd183924d3068f50097d017b278da7caee7771532b61ec3606f6189b6dec8426eb038fe40be75079ce35894b1a8e0d1d815261150c

          • /data/data/com.sds.android.ttpod/databases/gxdbapp.db-journal

            Filesize

            4KB

            MD5

            8c1466899779c34788419c87f2df5795

            SHA1

            2b79c905681106858ec1ed3d624fb7ac6294026d

            SHA256

            0c1bf0c94f24309ba7c69dfdcaa5f89e463cebcb4480a29437789f29f2dcf64c

            SHA512

            aa6bf8dfdafc1ae23de3dbd21be46d84bd3aa5ef29577161f5d51f0b7852a605b6f13d6d5fff76b42b5e7a4c80cfa49272cc122af9062c22ee7d7cb26e348c56

          • /data/data/com.sds.android.ttpod/databases/gxdbapp.db-shm

            Filesize

            28KB

            MD5

            78039eeeaadbe898ad80a2965aa6f762

            SHA1

            0508221908050c64d28c829052e4799b220918e9

            SHA256

            6ed1cefe765295940dbca9aa9830e7935617ebc5593f7f41a05246aadc94bf80

            SHA512

            d7662a579dca8ea2fac428f24b7d19e3a46b0e15884d05529ab51035308fd490ad306a571b9934f24a5fe30ff5ca481000a4a0c45170517407ef2510b3c5db79

          • /data/data/com.sds.android.ttpod/databases/gxdbapp.db-wal

            Filesize

            60KB

            MD5

            d477ad158aac3c861cafcf7b71fc748a

            SHA1

            082b3e4262612f6df35c0be918cc3d68e26644e1

            SHA256

            df85dff3eb240c4ffe1dc0bacead3042bf4db95cb96e49c912c2612803300300

            SHA512

            eb89066b7f9e00c75737332cddbdd884e579f87cc6ef373ea50ebc801af5c4bd8e9bd027e6f706fbac89a94685840102eb68e9b5e01b8fa66e294f2b12e1383a

          • /data/data/com.sds.android.ttpod/databases/gxsdkdb.db-journal

            Filesize

            4KB

            MD5

            3a558f5734164d752ca0efa889cc59dd

            SHA1

            1e6b9a9c74cc559d619968fb71d1e377e7dafbfe

            SHA256

            ebafbffbbe23177f114f1be9825378ec26b674a6f158570e8ce089da71d55fba

            SHA512

            a1bcfee6fa9ae0223d1f56221307b61afe3bee767e6c0d46cda7011afc3eb14870ae72c74a083c20b5808455c9d5796b823f2bb49034a6fe52fab7b1b697c71a

          • /data/data/com.sds.android.ttpod/databases/gxsdkdb.db-wal

            Filesize

            76KB

            MD5

            0252074fc864b0894a091ac079049b97

            SHA1

            0cf9a83077108dccefabf05ac79d96d8fe9f0cc2

            SHA256

            3b7dca8df85d9acfd5ab6dfaa84b9229df01d3229029fc8195984869c456df19

            SHA512

            0e12e88d8ff95393e92b950cb7d8337d3846ef3730555ba20cf51f8cf5794a1888cd2b4b80cf9bf16ff0ae498a8f14f9badf1a5f9fd7579fbce08d7768d881fc

          • /data/data/com.sds.android.ttpod/databases/media.db-journal

            Filesize

            4KB

            MD5

            f2b4b0190b9f384ca885f0c8c9b14700

            SHA1

            934ff2646757b5b6e7f20f6a0aa76c7f995d9361

            SHA256

            0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

            SHA512

            ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          • /data/data/com.sds.android.ttpod/databases/media.db-shm

            Filesize

            32KB

            MD5

            eb9ef8a0ba3b3dd525f6946cc0a7d7fc

            SHA1

            ec8e80121cc8ef24f4acaff18799f1bf9c4598ac

            SHA256

            bcbaa8839c96fc6b00fef52a53f1c0d47bad045b73500ee483914663e9d13310

            SHA512

            891dae6f1559177fbad4a65284f4e70857862539776ed62b2957e24d8468bc03ca96646a45e46241c363d8b247668386a597fca20a43bdaa8ea24d0b56a603f3

          • /data/data/com.sds.android.ttpod/databases/media.db-wal

            Filesize

            60KB

            MD5

            85d7d12025301a6ef840a1600d74d980

            SHA1

            a6d4330424313aaf5e8219efe829f7a6391d04a6

            SHA256

            4e585b65d1ac10fb89f87feae8c04196bb1213f28fe44b59552376ea5131623a

            SHA512

            b8c41f1e007e7724bb7f7b96d66d6f9320aa8cb78678a8382b0cef84c5da4c915b6dd628a28202e35c271d531f0402177b5002403dcd5c749aa4fa684652c0f7

          • /data/data/com.sds.android.ttpod/databases/search.db-journal

            Filesize

            512B

            MD5

            8935b1f65c4f1f30c4a18baa4851a73b

            SHA1

            8d6d29c504169267c035c42524f4865eac672cf4

            SHA256

            7da40fd10bcbef661ca17a41d78deb50ac5cbfd4f6fc1abaa65376f6675ab705

            SHA512

            798860e69ee55f1dac5c3f2eadced2d54224dc88ea2451f8124bad1f30e30c1b9eb330f56b0db5c3686d2b9c7353d659c5147ffc24a6321d7bc49c3280be0929

          • /data/data/com.sds.android.ttpod/databases/search.db-wal

            Filesize

            32KB

            MD5

            b0e7c3fb60041f6f842f4cfd506885ea

            SHA1

            9d5e72c6e743275c4344b3613567655c5eca304e

            SHA256

            946ff0d55b8bcc1af6ae005ff4d2a219c81a675137ad03c2f5fceafa8a0e5cb3

            SHA512

            9253f6f26208647596f5dbb2e05c77fde058d41b1fcf6dd1420205f63d0ff57e9415e5281b2d1076620505f3f9071fd03a5017d110894cc77bf566798c77c660

          • /data/data/com.sds.android.ttpod/databases/ttpod.db-shm

            Filesize

            28KB

            MD5

            cf845a781c107ec1346e849c9dd1b7e8

            SHA1

            b44ccc7f7d519352422e59ee8b0bdbac881768a7

            SHA256

            18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

            SHA512

            4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

          • /data/data/com.sds.android.ttpod/files/mobclick_agent_cached_com.sds.android.ttpod

            Filesize

            32KB

            MD5

            b695f30734947f964c5d0663f85dcf6d

            SHA1

            1fe80d767abf5939124709fffff304cceef5aa18

            SHA256

            15b16f2cf653a73bf155f2e088170361823f059c6dfea18f3ea6f79b299b61fb

            SHA512

            d293f5b73e2f65e016c96c5691be06cd5410a6e79ac827d2a046dd50f46efaa324e8df29d917636af6bcf1d9b140d8e9024357a93970dcc94c9754759c5bd5a9

          • /storage/emulated/0/Android/data/com.sds.android.ttpod/.cache/statisticLongDelayTmp

            Filesize

            868B

            MD5

            578f588b1affc8336f28b8b92423a60e

            SHA1

            73298349235a9a432f3c9e1bf8b2dd9b9d335774

            SHA256

            69f134872095da1c8829b20c89db6b80716234626edc4bc1af56a66f62bad9e8

            SHA512

            a4ffa12eb31447feadd84be74ea79d10f9d417ae707c06a024a54379c2b75f78b2da37f791b519c17b2ebea9ef4977c60f4d6fa0d8d28ea565cf11d0ec96827d

          • /storage/emulated/0/Android/data/com.sds.android.ttpod/.cache/statisticShortDelayTmp

            Filesize

            2B

            MD5

            d751713988987e9331980363e24189ce

            SHA1

            97d170e1550eee4afc0af065b78cda302a97674c

            SHA256

            4f53cda18c2baa0c0354bb5f9a3ecbe5ed12ab4d8e11ba873c2f11161202b945

            SHA512

            b25b294cb4deb69ea00a4c3cf3113904801b6015e5956bd019a8570b1fe1d6040e944ef3cdee16d0a46503ca6e659a25f21cf9ceddc13f352a3c98138c15d6af

          • /storage/emulated/0/ttpod/cache/object/BACKGROUND

            Filesize

            2KB

            MD5

            2422d6549de73691889b684a71c1cb3d

            SHA1

            18ef3b8d6107da3c9681f9250249bf3ddfa07bb4

            SHA256

            9050f20db8cf0ef0bbdba0b8dd4eada25028229e9ae2e8141040b350dc6ff9d4

            SHA512

            c97aa070e1e07ce2cc435f07c6be9607b1850299aa87290651af4284efabfac14ccfe6d696ea27b001de67767d2fd566a5410a47f1b03c344dc1d8654c373fcc