Analysis
-
max time kernel
5s -
max time network
146s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system -
submitted
12/02/2024, 04:00
Static task
static1
Behavioral task
behavioral1
Sample
c3d38f7f1c143a58cc65bb9c10be92d21deb24217e6dba7988039dedcc18e0a6.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
c3d38f7f1c143a58cc65bb9c10be92d21deb24217e6dba7988039dedcc18e0a6.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
c3d38f7f1c143a58cc65bb9c10be92d21deb24217e6dba7988039dedcc18e0a6.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
c3d38f7f1c143a58cc65bb9c10be92d21deb24217e6dba7988039dedcc18e0a6.apk
-
Size
8.0MB
-
MD5
b6b0dd075860a0f0b4bee87ca74af37e
-
SHA1
ced9354bdefac81abe203556d86323059c40592a
-
SHA256
c3d38f7f1c143a58cc65bb9c10be92d21deb24217e6dba7988039dedcc18e0a6
-
SHA512
7766c9194127565b594f96186cc5b83e2bb03f9945aec95345c8f1790815bb140045e507b473b24471b4dced092d2d5366bdcf0b0fee779c122e5cfdf55b37f1
-
SSDEEP
196608:o+whb1p+1WEvNKE3UG1vCHOYM5s6Gu/f5I2RP:o+wV1p+YEv0E3UsvWjoN3e2x
Malware Config
Signatures
-
Checks known Qemu pipes. 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
ioc Process /dev/socket/qemud com.prowallpapers.picrewaestheticavatar /dev/qemu_pipe com.prowallpapers.picrewaestheticavatar -
Checks the presence of a debugger
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
12KB
MD5163b0e3f017becbc89b9d7f330b78f09
SHA11ef9cd8ac8655190468d0ccece0a4738634ab0f9
SHA256cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36
SHA5126a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd
-
Filesize
512B
MD58139830a490c8f5da100f617191f538f
SHA15ffeb24253d0aab6a86ad4a9c50b5e556dd3825d
SHA25681b9de656555c5ad0a9e6df3a99067aa54a66a1ddf2707bb6d66a7360d2338b3
SHA512510d854f0e1ad09cd5f0dbed822446fbe2e695d0f9ae50c4e8e14b7e9f10255b8610d88e96b5feb8cb389580461f03ed53ec6f45988711fe3427188a85d33265
-
Filesize
8KB
MD5754896501f76a0096f06e9ac0245a53f
SHA1ca846c649f5f6a446d98998e81808e4f9954bc96
SHA25655e100f61a20b5a28f221bcf5cf25471a84d71a9012c802c66e9e8c53bf93479
SHA5125ee2f2fd0289cd220c0c7ddb0ea65c9004cf7d61e99b9bc870e285409cd01077225f282f38dd40e77adb612dbb515d5d4ec64da660315bd716d4821bc6bc2280
-
Filesize
8KB
MD55c32dc38ce0b8641b96e84a3bfb59fac
SHA18d6f8acca79c1583693e98ff2c768e8bc575bc46
SHA25600116527d6766339594bc54e05905c803242a5945506614585981389bd236b94
SHA51290385d6752bf846ebef6bdc86a1db1812b1472c4a1a80603514e37730f8a6129904a4648a3f8afbd021b5c0029a80a7b5a29fdd4f62ea63a5d24850153dfce5b
-
/data/data/com.prowallpapers.picrewaestheticavatar/databases/com.google.android.datatransport.events
Filesize12KB
MD5ea628e04765adaf4238a5dcdff4bbd51
SHA1a801947619ea8c368efe9c006a324dc6339ac60b
SHA256885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4
SHA512c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe
-
/data/data/com.prowallpapers.picrewaestheticavatar/databases/com.google.android.datatransport.events-journal
Filesize512B
MD56f90cfe1c11db83145083d84541e226b
SHA1c8ffcf90f915aa504e869e9e9379d6f5dca60b58
SHA2560eb7a83ed3944c4b707b9b946797c617e56eb6b5f0ff67471413f9086ad76f5e
SHA512cfa5f486cecfb0075678f4d1bd30dab8aa6f4f448ef370965b3502f478454244dd9c17ffa41771ea6c8b289973e707c102c2c331e4f175281ce6fb9068049183
-
/data/data/com.prowallpapers.picrewaestheticavatar/databases/com.google.android.datatransport.events-journal
Filesize8KB
MD5fa0d4f9ccbc51173f30a0a0b5f18437c
SHA11dea1a4c423b805d4b4e14981e590f47b73f2c8c
SHA2563c54982a1ff79f42a3bcb3d315224da667f46cfde6a4ac36a6a1c0dd553ec5d9
SHA5124024fb7733753f4bfce233bba96569dff8cedfe2442e8cc936d3cbf39455dd942c9d88b47580f2639121ac8f844b803636702292518d9da3a4cda152a73e84eb
-
/data/data/com.prowallpapers.picrewaestheticavatar/databases/com.google.android.datatransport.events-journal
Filesize8KB
MD59d99c22278e90e9345f9f802409836e3
SHA1c0466ed701e3aa8cb8ab874fd771eb8047b5a085
SHA256cd830a2916aca14346a3785b242eb5c09834de85318a3aa301ff9bac26a39cfa
SHA5120b0f570874b7fe4c08451d40f928eb25aa5b658c1c3f13c1706425a4a1e05cf43b370d7916a47bbeba2c48f6512da83b4a2fc25cac79ed21f0ebbfafceef851e
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD51f6a8e35e377b4e476384d9840aa0c4c
SHA10ee1ebe2ffa2cd5e2e544a01c26c88cf45e31542
SHA25680566d14f4d828afb3bc123ebd0115612bf7a0d041168d17ab87ad09dd223c1f
SHA512de41c8ed70718c0db991a9cd94c27a0be34246ed0278a961bd8699a3c2089f37d52f52885b4d2f9c357331eface77f4abcc502593f63d44e2f58b485cdc1ae1c
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD5aebf47b3dcda936a022b1da142d6526b
SHA1d6d5307aaa6707ff290bab72317700dfdf2faacd
SHA25676376c55a1494bc2a9613003ba3e1dac1ac29f94ca4234cc35c2014872bf7174
SHA51232bd145ba9ebd13a4f5a433d5cc1135fc0538e33ba71b98e1fddc58bb6e91796e423656c4006fc92c841f99790eaaffbbe235696b3eabd3c2ffbe669007000ef
-
/data/data/com.prowallpapers.picrewaestheticavatar/files/.com.google.firebase.crashlytics.files.v2:com.prowallpapers.picrewaestheticavatar/open-sessions/65C9AA3D02490001137FF1CBDBDC06F7/report
Filesize809B
MD5e9a6679baa62f48bb40cf8f4dc2beb4b
SHA197ff1de8910a175d112ad816cefbb7c475dcb20f
SHA2562ac40d84014e85f5c8008b56d9ea73d29b7717e98e34e0525c54d58e3e140f3f
SHA5126263e7d0295fedd170c0856775b2863a473e058989c5b84f7751c46cea15663c9887125fa8bce0e2bef5a777614fb15205bb1ddb55cd0e83605669853c9ba9e9
-
/data/data/com.prowallpapers.picrewaestheticavatar/files/PersistedInstallation6681389153421448053tmp
Filesize90B
MD5a136eb93a7c48a722c140cdf9bbf4431
SHA12c21e4d81738e0eec47c2e411a895015cf1e7936
SHA256071ffb619cc0f954a199f7b00894d21641801064cdb29659fc364c9558b0efd4
SHA5128c49a9fed18d707f21b44ef20cb128163f393a99fdb405112f00ec3e78ea9c185076d2ad0f251368096aeb5d7c4f70eead3e1a74b5a35c0add3c2587a229d00e