Analysis
-
max time kernel
141s -
max time network
134s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
12-02-2024 03:41
Static task
static1
Behavioral task
behavioral1
Sample
c3d38f7f1c143a58cc65bb9c10be92d21deb24217e6dba7988039dedcc18e0a6.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
c3d38f7f1c143a58cc65bb9c10be92d21deb24217e6dba7988039dedcc18e0a6.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
c3d38f7f1c143a58cc65bb9c10be92d21deb24217e6dba7988039dedcc18e0a6.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
c3d38f7f1c143a58cc65bb9c10be92d21deb24217e6dba7988039dedcc18e0a6.apk
-
Size
8.0MB
-
MD5
b6b0dd075860a0f0b4bee87ca74af37e
-
SHA1
ced9354bdefac81abe203556d86323059c40592a
-
SHA256
c3d38f7f1c143a58cc65bb9c10be92d21deb24217e6dba7988039dedcc18e0a6
-
SHA512
7766c9194127565b594f96186cc5b83e2bb03f9945aec95345c8f1790815bb140045e507b473b24471b4dced092d2d5366bdcf0b0fee779c122e5cfdf55b37f1
-
SSDEEP
196608:o+whb1p+1WEvNKE3UG1vCHOYM5s6Gu/f5I2RP:o+wV1p+YEv0E3UsvWjoN3e2x
Malware Config
Signatures
-
Checks known Qemu pipes. 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
ioc Process /dev/socket/qemud com.prowallpapers.picrewaestheticavatar /dev/qemu_pipe com.prowallpapers.picrewaestheticavatar -
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.sidecar.jar 4592 com.prowallpapers.picrewaestheticavatar /system_ext/framework/androidx.window.sidecar.jar 4592 com.prowallpapers.picrewaestheticavatar -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
512B
MD5a8e8e89b6f33677aff155bfa2208e7ee
SHA109bf21133a00a935327c4702aa4315fca527e619
SHA256b78e7361fc7bd80a43ab212dfa38afce7b5bdccb516314f42573ff2445c7b1b4
SHA51232619726c8cbe24b0354a15b1c610abd3c2ccd7eee57920e2e5ac932646f8a8c4e855dbe70065b8e92e8af78dd07595825587e1395d129decaa9799a0a108a9f
-
Filesize
8KB
MD5665759d1ff0e97445ed6288b20c0488f
SHA146d491b4b969871995af7edfaaf00024262c5a7d
SHA256e6e508cfcdcc6c7e35cdf42e277b2dd4b8213b36e301670bc6938e023ace3d29
SHA512d75a9bbbd7fb494a0c6fb4a923704d4d6b03e9e77a43762715bfff5b87b956f6d026f9ccc1c227181d58438639af59772b233da936518d7670d9f78453464817
-
Filesize
8KB
MD53003bc19f29c98413b162ff9250959b0
SHA17fcbd4265b42bab9c3326d2b6ff791097678d5b0
SHA256a7d17405c90843baaf93477d0dca3f2526afa7a90e4feefdcdac3db38317ea8f
SHA512833aa2a3800a4b0557ebd1313c7e28950b065ec917b2c7a6fb01ccf8f62fe79cd33eca1af5b2f71982f3a376e39ed87a3a7e50ab4cdccaf607aee66441ba36e8
-
Filesize
8KB
MD5090de9350babd28c2454010e80e198f2
SHA119b25e1b6f0a0cb821099837c1b891b77209b8f4
SHA256fd218a93c8a30697362fbe4c12ee028d22d8aca6dec07970a071da8d4943ec18
SHA512eb095399ece5a269840c35c2a97a69626bd53de5265c9c43e9673f29265238a52006fc6e7cab36804c1a2cd52c7e1b50ce6eff44be8093ec00660497cf402681
-
Filesize
8KB
MD513a20d52472521fe8e1b4140a6f0a388
SHA196042f76aad143359c159ffe410d95d654554dcf
SHA25630a89cfd6d4b514607fdb83c1dcb14e04ac3d59f2f574a906087bc4a2f34fab7
SHA512af9ac7324938bf6ce6a838e3f0b45cca96da54f63fc42c6682e379357fac8dbb807247bd046a93ceed5dd02c0f53ceb6fe62d7b8f420413e7b50dabc79d0db4d
-
Filesize
8KB
MD528e38ea21740f18646feb180f732e9ae
SHA1ed0681c01f72e499e10c1d786085ea711d859124
SHA2560da2c8ddbf89937c0fdf18dc7aa1d748a7192c04f891fc14c9020b9095d15153
SHA512375dd681775ae3a9b031d944b5e180e3718a52bb643192302b7aad5836a94fc8dbbba57dec2ecb7f1578c8221ccfbbead675d6334597fee2606953e04d643fa6
-
/data/data/com.prowallpapers.picrewaestheticavatar/databases/com.google.android.datatransport.events
Filesize12KB
MD5171aedf968e17a2744d2585715606cb9
SHA1bbeddeb3b89fcf809619c35b4a318a80e7d5b029
SHA256d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e
SHA51278a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b
-
/data/data/com.prowallpapers.picrewaestheticavatar/databases/com.google.android.datatransport.events-journal
Filesize8KB
MD5e49dd8cbcfc0515302432de2eb884af5
SHA1a57efa71b05cc275d8de8a451981c5b31c3d44b4
SHA25677194f2c2330b8775c28267ebd76826f348641b3019dacd675038b24adb7ba28
SHA51229d254e103d46a99102f85987578d883e02b37ec0818e5071460bbc6d6c995aad1159c668c968c88f87a732977e85578e4c83ae12ebeb178f1286970490d3f19
-
/data/data/com.prowallpapers.picrewaestheticavatar/databases/com.google.android.datatransport.events-journal
Filesize512B
MD558be1056e48adafbdb522b9e7daffc99
SHA1a40ea15580b3b14150c6e65148bbf6b25cd70489
SHA2560ea219d39af1701df9f28c3c9cb11245b37e95c29bb59731ee819f1b84d296f9
SHA512b3c47f357808dbfb48ebf1bd42fe08d4d3e59af4e5bcd2c1229a670067fd2c2aea98206fcfd3348bdbdb5fd4496199b13e7de1239842b7995700139d34687e7e
-
/data/data/com.prowallpapers.picrewaestheticavatar/databases/com.google.android.datatransport.events-journal
Filesize8KB
MD54fd15691a3c13993f7bdb50c58cd449e
SHA1121442ed957b38713242da2e298f6fcc5a731e8f
SHA25668864db9506768ea48a2a44da41a4b791b1bb989e6a0f69720604b40afad50cd
SHA512cf2735067c6105f77490537419cc4f33ee8ecf6c7a361d82af3231170314390d9d97add41235a75162aaacef2cbe40cef0190cffdcc1f445040b33a9fafae688
-
Filesize
16KB
MD52cf1d6e9f453b0017755b40c5f2157d2
SHA18ebec2cfbc1ef042df8e88c3e20ed9a01f6f6026
SHA256e83f2270cf0ea2bf63f177778abd92384d91d856c5d339c9e18d6239e53cbeec
SHA51296d8b1115a817103b84fdf5bdbc601e7d884ebfbc8aceaf4e1846c2580f33197bce999e2e2e96b1324f4c68b001803ae168fa0088273a79be8d471f062ed286a
-
Filesize
16KB
MD5bb4bb9007ab7e9463b2a4474e22eb5da
SHA170b19344ab36414c50e5638d2f2e1c6409b93ebf
SHA256819c28064dd81fcbe76a08c692eac1912d453a17945f2ee717079d9fcda47994
SHA5120ef1ab9627c522843e077ca56ddf45a722f1c5856e8965b5aff6bcf7300092ce0b230b6a3a803c7e465ddda04be33002a324dcc21368f0f3157ed33dc8b8f371
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD5ea7042f68be4564de62069e62ba80dde
SHA1b9e15a642eb6833cb7d505e007b187568be59282
SHA25697a3c9eae8f6dd160d9a8014ce01433b9f021661421b3b247dafb4d4fe344a85
SHA51290cb3c109effb47fda9b295353797fefba7a1d0fe4b8a324c0cc3ffda7ca68cf54e977fe52ba291d4e6367e046f37c743b7fdbb28f094ccf1ae865c0c7dd04f7
-
Filesize
16KB
MD5d7d48e0548f82657878d5995e8a8c388
SHA1ad6e131095b5f902525f45ef7b7827ea885d9714
SHA2563cc3359f0c332323236734c72415c31ac11d44bfe21db023698dd0d95e7b7b69
SHA512fb839c7bedc89b41db93259ff95e149b2ea226d8c50307b222d36f601fdfca5e55b26d49aba4a6fc3c7d381dab18ed3b50cf868fb0e6f9f00ae42f9532d6088e
-
Filesize
80KB
MD5ebe742e6d033e5fb3038ad0eb96bfea7
SHA15c7b0eb7a6aab13a0cc2ad67ae8c3ed35af507e1
SHA2568ad69958889c0173f23629f22a6d84a9bf0b8c9445ace53f5d6085ec74a6ae36
SHA51223099f3cbe83e07bad7c2bba84cb1592f7091b4e5b73d8a781d1b51dac57f0b5dee2ddc59c4e99d4221a6aacaeacd2fef02c9f578c78ebc4f541a7b363d0013e
-
/data/data/com.prowallpapers.picrewaestheticavatar/files/.com.google.firebase.crashlytics.files.v2:com.prowallpapers.picrewaestheticavatar/com.crashlytics.settings.json
Filesize731B
MD56942f549419c43d2d85f8d0e9b5a6561
SHA1b4e6bccb5c836cc4e9ef8981aa385514384357a5
SHA2565aa62851a5d1fe16309f7f4f31a6ad507e27d80da158f0ec79d2bb1002275641
SHA512b1facd4023bc53b27f5d9c62d20542ee75c850f5e82c5bb48ac91145d6a61c1eda801da7644efa9bda3f0518bb67baee41e81e4e2719b75f23a2d02a219e8d57
-
/data/data/com.prowallpapers.picrewaestheticavatar/files/.com.google.firebase.crashlytics.files.v2:com.prowallpapers.picrewaestheticavatar/open-sessions/65C9A0D60219000111F004DFDDDE63A5/report
Filesize809B
MD503cfaf43b13f3b309df68863774c8900
SHA1fa8edbc61c04957621690dc38504e4d98dc184eb
SHA256864f3e28cc117d70bf7578d3e610fb180f84e6aa4d10ffba56d28c19bd85de55
SHA5122105ff1b903f982526d900b9ae9516ceeb7e9a9078da7a21ab0a84ea256789ca0063126a2113b9b09926199ec02e29498f30f27086730d165c65c2e11d23b962
-
/data/data/com.prowallpapers.picrewaestheticavatar/files/PersistedInstallation1722615377710450924tmp
Filesize90B
MD5c0dd677db404b04e7f492b5da3519fef
SHA1bf59fd9ede6bc2c7fd4a8d27a77013d724e56251
SHA2564d5fc4c1ae334d05eba6d066bc97d0f29b0911b4e2cca3a441cf9f13d6dcc96d
SHA512a99bb30b954b090830672f64c29fbc985be2bd1ea362d7591360e2e9546aae204579761b198549de5d6a4c3c67e96bfa7a838f55b3e3c682cdc1689d1ce2c182
-
Filesize
570B
MD520a607e1091033b92490d4dbde2ba5b2
SHA1f4629e80de7d692d93a867e9bad3b537cf29fcb2
SHA2566fc9e9a4998e78a519b0f39a5d846ea1d4b6d6c94f53dcbeafea73eb93811880
SHA5123bb677e637fedbdb93d92c0bb221e6af7af8f44710e4185d38a7fff75d99fbfc9a600e15800b7bf94fcd7d5be3c583fbc009c354e5b868428b95dcaacab08a84
-
/data/data/com.prowallpapers.picrewaestheticavatar/files/datastore/firebase_session_settings.preferences_pb.tmp
Filesize33B
MD535b51faac8b5af3886e70bb5a885dab1
SHA1e6cb282da46cd4bf113e25c8573268578dcd11b6
SHA256af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b
SHA5126ad5e9766cc03a4436e1440b9e47c44da6c6440a3c94b1cc988f8c5680043cde6f7b7e02b2b4c71b25df4209c39ed099fb65fdde02a9f09464609a1abe6af8fa
-
/data/data/com.prowallpapers.picrewaestheticavatar/files/datastore/firebase_session_settings.preferences_pb.tmp
Filesize163B
MD5dcf7d6c1cfd5e7b56074e3001577c78b
SHA1b8eba89aee9f6688ecda6675ef8ff4998da0b141
SHA256ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91
SHA51242d75be824d69de23d2e8605d60c3608db20ed5c059f5b67c63ca2845484c67150aea88a3aae36aae12a4ea266fb6b469d09f765bbcd444350d836ab83f7695d
-
/data/data/com.prowallpapers.picrewaestheticavatar/files/datastore/firebase_session_settings.preferences_pb.tmp
Filesize212B
MD5e91156122b22dcccbb11a60b8f36e656
SHA176721487b10a9b05b3cc8f95ebffe71379e35209
SHA2560f00bcd2277e02ac9a8517ed8ee79342f0b55ed6fd2af0080196ef020a2b956a
SHA51271bbd9b2cd255d006e2e7319c8e3ac6668b3f5295171b45ca0fe1b2180d572f89e7cea2dcdcef734c1af39928050dcb2a9ffc3bed2d6618b892488e7eb99a7fd
-
/data/data/com.prowallpapers.picrewaestheticavatar/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Filesize8B
MD5a69afa72017c822487f4001a34e65bb6
SHA151dd1b166f960686e18eb5467d0fcd7eaf6b80bf
SHA256dda3f7f4794dfbe4ada753513833d04d2d8ae8210bf2adc2873a0a38aff1e96b
SHA51272e8c52eef8a7b35f94c4feac8b8b6f18da0a279abf09ca459afabc506c725cb446389889e48a92bf1c333356bc6b0dbbb300ec417742807e6399624809179da
-
Filesize
5B
MD59dcf2a6f12095ecff342e9fa0c5ca72f
SHA1c815f34691be353caa9de93bbdb00a31f62a9ed3
SHA2564e68143408826326220a32d6bff59e1cca3dd85f74b018aebd6723c5686c54e5
SHA5127ba3449f5ec3363bbee33d47abe471286cf78034dd70379fa4d0de5fd59215e8c58287eddffed1b9c3c74e157f6a9ad69b0c551001a62d04790bba49df48231c
-
Filesize
8KB
MD5da039052a52acee010ea8ef924b88780
SHA1c0448b0170d5713e200bf0406be2e7e321d57447
SHA2564f8119fc30851722d93756d8830db46248bc73bc79e35fe644fe7956a0f54bed
SHA512fe3c0aec823be850653113581b8db6e72ee6676be8f1b2c3c8baf4a76ff8c243ede96de6d015d31b4b63cf269463fe95b25a9fce454c845b7b97d1f8a99bceb1
-
Filesize
12KB
MD5bdf3529e80318eb14e53a5bf3720c10d
SHA125c9ace4b1af6e80ebb2572345972c56505969ba
SHA256bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
SHA51248b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b