Analysis
-
max time kernel
5s -
max time network
137s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
12/02/2024, 04:41
Static task
static1
Behavioral task
behavioral1
Sample
c3d38f7f1c143a58cc65bb9c10be92d21deb24217e6dba7988039dedcc18e0a6.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
c3d38f7f1c143a58cc65bb9c10be92d21deb24217e6dba7988039dedcc18e0a6.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
c3d38f7f1c143a58cc65bb9c10be92d21deb24217e6dba7988039dedcc18e0a6.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
c3d38f7f1c143a58cc65bb9c10be92d21deb24217e6dba7988039dedcc18e0a6.apk
-
Size
8.0MB
-
MD5
b6b0dd075860a0f0b4bee87ca74af37e
-
SHA1
ced9354bdefac81abe203556d86323059c40592a
-
SHA256
c3d38f7f1c143a58cc65bb9c10be92d21deb24217e6dba7988039dedcc18e0a6
-
SHA512
7766c9194127565b594f96186cc5b83e2bb03f9945aec95345c8f1790815bb140045e507b473b24471b4dced092d2d5366bdcf0b0fee779c122e5cfdf55b37f1
-
SSDEEP
196608:o+whb1p+1WEvNKE3UG1vCHOYM5s6Gu/f5I2RP:o+wV1p+YEv0E3UsvWjoN3e2x
Malware Config
Signatures
-
Checks known Qemu pipes. 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
ioc Process /dev/socket/qemud com.prowallpapers.picrewaestheticavatar /dev/qemu_pipe com.prowallpapers.picrewaestheticavatar -
Checks the presence of a debugger
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
512B
MD5e7fee4e25a03c6628f7b6a73de591642
SHA1af064f2d949cab3711fd2c4c2b18e24da33dc795
SHA2563c9b12cc3598b772b79c7283f520556450dbf4d5a6676e6aa26652a7b7388d21
SHA5125160465f10ae63e3e3a19c14471c4233f37a919f9836bc0028092554e8a654941b5b6e1a62c2dd8a9a8173a9440290917c500c92fa2968b3be543f481bc57b50
-
Filesize
28KB
MD514c5cef81a0c1251740524dd713ab9a9
SHA1c93ee18ac1ca6ee7c75e70f23047561bdaaf3eee
SHA2563bdd3195e8fad9b25732c88317ea39d732c8a5d6d60adc33290bda6446c45559
SHA512912dcc983adcc35c4adae7f5200e4603b890457b87482be35bf38dd5c603327d4c42c373d771c03db570d1f2a5cb1c064974cf443e7f0a02b243577f8c4b9cff
-
/data/data/com.prowallpapers.picrewaestheticavatar/databases/com.google.android.datatransport.events
Filesize4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/data/com.prowallpapers.picrewaestheticavatar/databases/com.google.android.datatransport.events-journal
Filesize512B
MD56cd18e1aad333b1426c7e110f76ec1b6
SHA1ec55174bde42ab6f974ffa6fe653f64a271e5c7c
SHA256e499d632b2db78af4e6eb7f12cdf4d01402c07561eadae8aab8882e6cee5c003
SHA5129d5c68e3ceb0a6cbe3fe1402e2d66e3c19a7698e2b13133d9cda7535da975898e57cb4257dad9c455ff8263019ee3fe75a254a55ba53f3d05d69fc1918ad4542
-
/data/data/com.prowallpapers.picrewaestheticavatar/databases/com.google.android.datatransport.events-wal
Filesize16KB
MD56955ae0eb89139b55bec431ef1b1c594
SHA131cf6c3ecee745d3749282abe50df85370e5ddb0
SHA256fa746f88d77e398d8d62288dde048d4687b282ff2829df7bd2555ebff21fca3c
SHA512eb5bee503ba2a9149349d03bf2c5a79c0ed7b452630e2ea4b086e705d1c87b615251f07d66d99c6245b16d8d671a9b82f03c920ebef7626b6848f780092f9878
-
/data/data/com.prowallpapers.picrewaestheticavatar/files/.com.google.firebase.crashlytics.files.v2:com.prowallpapers.picrewaestheticavatar/open-sessions/65C9C4460233000110746C2A84802CFD/report
Filesize808B
MD5a7acb88fe6e666bcf0ec33548fe0bcf3
SHA1668047f3172f1d44c842168bfbc33f7512e11053
SHA2563da9faea0c7808162c930499764e7e5e7ff197be09393a5dc24590cb788e435d
SHA512acca4b6c98160081ca220d1dc1f6f4ff88e1af00bdcde459440da9da030697e26d40325005d3534d2f87e6fcff054b6609ca7de0282939af89c0ba57ff67b5a3
-
/data/data/com.prowallpapers.picrewaestheticavatar/files/PersistedInstallation4261632725803370968tmp
Filesize90B
MD5830709d78cc2c18da7b5ceafed91b173
SHA14bdf56599313c0fa98600f37a180fcbc0120e3a2
SHA2569c128e9e53c550337a72ebda18b29b58f5eb90b1364c9066facc973dbe532ac3
SHA512a3aa3080022cf658f37a8081d8925b124c6cc3976e0e821dcf8225d1543cddf4dbcd74761a426267ed3664a162ff6074f1bbcfbce32c131272540d4d34f7cafb
-
Filesize
5B
MD59dcf2a6f12095ecff342e9fa0c5ca72f
SHA1c815f34691be353caa9de93bbdb00a31f62a9ed3
SHA2564e68143408826326220a32d6bff59e1cca3dd85f74b018aebd6723c5686c54e5
SHA5127ba3449f5ec3363bbee33d47abe471286cf78034dd70379fa4d0de5fd59215e8c58287eddffed1b9c3c74e157f6a9ad69b0c551001a62d04790bba49df48231c