36aa27fae24b4db50c7c28dbe114616403a327183586590b8c4549fa0493c452

Analysis

max time kernel
96s
max time network
132s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
23/02/2024, 14:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
فیلم سکس لانا رودز.apk
Size 2.1MB
Sample240223-rwce7sba92
SHA256 36aa27fae24b4db50c7c28dbe114616403a327183586590b8c4549fa0493c452
MD5 0967adee386ebd6e7118aca22d941ba3
SHA1 74677711d4ba70d8bfe6aaa5afe98fbdb45a59eb
SHA512 ab1b0c68fcf862a3acaf605c73bd2da0efec48fc9373f865e503a3fd9cf9b21ad084738f7bd514d58fb659b35973798f75d77bcc3f9dbe20f80f921fd58df982
SSDEEP 49152:yCRoTNCE1I/GNPXawqHHsIyQMMntxy3Dh7qriNbMzkBgUqKb:Jq91WGBawYHByXMtuXgobqKb
MD5 SHA1 SHA512 SSDEEP

Score

8^/10

collection discovery stealth trojan

Malware Config

Signatures

Removes its main activity from the application launcher 1 IoCs

stealth trojan

pid	Process
5051	com.lana.fapp

Requests cell location 1 TTPs 2 IoCs

Uses Android APIs to to get current cell location.

collection discovery

Location Tracking

T1430

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.lana.fapp
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.lana.fapp

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.lana.fapp

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

com.lana.fapp
1⤵
- Removes its main activity from the application launcher
- Requests cell location
- Acquires the wake lock
PID:5051

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Location Tracking

T1430

System Network Configuration Discovery

T1422

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

__pushe_base_lib_db-journal

Path /data/data/com.lana.fapp/databases/__pushe_base_lib_db-journal
Size 8KB
SHA256 85f3ae766d3160db53e3450593a9a067e7300187a17f8949d537aff4c2217be6
MD5 7a18d638e439e9287734dbd81df6d1cc
SHA1 a39861a9656587f584f89a3742cdb85c427b5acb
SHA512 86fbea3aaca1feec09650383ea677246d706233aa47245aec4fa53703822534274cbbe69a7d207b3bd916ce89f57ae99dc07986d8c57a748b94512dadaeee1b1
SSDEEP 12:oWqLXyFormG4NK0COnHdOnHXy1TOnHyilc36/QN6/uJaEcZVMJwRPVz27VNgRIN7:jqLbxSe7TlcK///IoVM9cREGSV
MD5 SHA1 SHA512 SSDEEP

Submit Download

evernote_jobs.db

Path /data/data/com.lana.fapp/databases/evernote_jobs.db
Size 8KB
SHA256 c7266a2946dc5d8a515cad4dc1134fd301601d8145d635b0db367466e9702243
MD5 2d2f4f95643619f050430290f480cc17
SHA1 10309263660ca83d91ba9191c373e971b8bf57d0
SHA512 0af5f05990ac5d82b6cf23e6fa28cf20c261f4e0cf08defdd83e88ee84b190507425dab63cf1095642ef9dd93c8649fccadf87b5f2bec3eab2de14690ab62ada
SSDEEP 6:l9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK:TLiuWdwRmBEyPb
MD5 SHA1 SHA512 SSDEEP

Submit Download

evernote_jobs.db-journal

Path /data/data/com.lana.fapp/databases/evernote_jobs.db-journal
Size 512B
SHA256 ea7a039ad4b45ac802f8851a293623edd26fed6db929ef217f5242411c1d378e
MD5 afbc479df981e32a825a1e228c32a79d
SHA1 2ef7e507702c013bef523f8be5656e994de2d7d2
SHA512 328836d896f7c81be9fa4bf0637c8e8816e7093e4faf6e11e32aeb60ba95d4347ff40f34dcbc3acfa2e0b7d560e13c38bddfbf0318dc05c1f74d012474f56bfb
MD5 SHA1 SHA512

Submit Download

evernote_jobs.db-journal

Path /data/data/com.lana.fapp/databases/evernote_jobs.db-journal
Size 4KB
SHA256 56c5511bc07e03b4c3ac02e70843833f24581d01eb038867921f34b224820819
MD5 14607c9050173b6085ce4a906d8861a8
SHA1 5bfd0cab0a3412d4a396706d0c682c4ee79ec56a
SHA512 0c9f86292e0d3c8346398dd8e48e7ba85e5008d085277db1aebf2b55130fb22bc28bfc81731f122d996c39a5d79733f9184541eddbdc645af6131b636ca2a805
SSDEEP 3:O6DllLNll2Nll:OOll
MD5 SHA1 SHA512 SSDEEP

Submit Download

evernote_jobs.db-journal

Path /data/data/com.lana.fapp/databases/evernote_jobs.db-journal
Size 8KB
SHA256 83fba674142b8fdb71312de96d080b733c19b94ce13ca4efff56af35e4c78e3e
MD5 ebc9ec019244ac7bb3901973fa546da8
SHA1 27ce5941a0c5ae3c7af0f49b3011698f28f756c9
SHA512 ba2312cf9e434140922c55328f2af337dab173caedf14f6afa1be89f9fe6dd8084aefa16d08b0206396ec65c7c83ca65127d06d340751831617bd04b0f07423c
SSDEEP 12:q6bWoipWLvqvqLiepN0KkYrZASBMAB1G0d/P6dMbWAz9m9W3dOsuA3MTzeRmBEyH:PbWoYWLvqqLZpOKRvTZYAZ3mGSz
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.lana.fapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 b9ec7ef3639b78ce794fd930256c63a5971d6c591a575b72c2565e88b226f0f8
MD5 9af32e6e45cad9c22a0beff7e5a3b5a1
SHA1 5a29f2bc3632484e3b47e1c6f08bf5f9de1cc49d
SHA512 eccbc029247794c094a0ee62de06ac5017ef3c8097d132efb40af9487224eababd73ed51be4e681cefa2d9bb8b1041bd51fb26ddaa2f0b15368b1114ce5d1837
SSDEEP 6:l9bNFlsls1ylO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/Wzl8:TLiEy9zmzrfRmBEyPbP/W
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.lana.fapp/databases/google_app_measurement_local.db
Size 2KB
SHA256 3b75983c2b910777ac7e25c58003e39d1186d6dc23067551e161c66d5ca1bfd7
MD5 e48e9efebd5bba121e43936c98ddae25
SHA1 1cac79fd8a30d40908af0e47e44a2090e9f30487
SHA512 140c240b70ef328c899c8c9fd74325e9494d6333d026e96f1ecd957ef9051b4a1b711c8d5d645e3d3cfd96d65f92073d5c325830f6f9a243abaade064cfd5ef7
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db

Path /data/data/com.lana.fapp/databases/google_app_measurement_local.db
Size 1KB
SHA256 efee3d084d02c5e24f2b19270eec0075044adad8101f97ef6013516ec551f670
MD5 9fac569af1ac651ff272c6825562b7ee
SHA1 815b837cae6abb516991297a05fb0483133dd781
SHA512 99bad501e193059fb6c798c2a0022b6ecd14ffaa41fab095cb9a73205c51269d128dafbba41d704616fac367a4b50e9ba63ebbf6e51fa827904279a9145dd595
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db

Path /data/data/com.lana.fapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 e865a7c82641d41aeca46c2cf2236e68f0936a220052a6cc7297ca6977b8d0f6
MD5 17ea09dd1082a9aa9a7bfb9c74a7d6fc
SHA1 02fa58d1738eb6d68f5c350ff4bab4872e8f7fb6
SHA512 48bfe266bd0c6505e6ab055cba4a94c56adb8bada381b7712df7ae3acf64ff24c7c27e1ef902a233993176cbbe3b97040a05ca9855c52f5a85924abd55628ce7
SSDEEP 12:TL6uEp9zmzrfRmBEyPbP/n06iv2OS/UiCvkWlVBlV:TL6Xpmzr0GSP/n0vOTxYt7V
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/com.lana.fapp/databases/google_app_measurement_local.db
Size 16KB
SHA256 15511c91fa8a2cce288838f06f5f60324ae8aa8fb239f28ed81fc7290cf5bd8e
MD5 4ef27b18ea94c65dea83267460d82c3f
SHA1 9e7f1d2a3cb74dc10c430145530fcef5fa539448
SHA512 abad0958d0fd645ae9604a3f978728edd3d86f6ca20ed16843b778530ad4027eeb2b24ea6c57d8f44ac97bd0495e5a8ab1b0968b1f04ac43afb720452d2a2f51
SSDEEP 12:TLWuEOe9zmzrfRmBEyPbBvOwu8FAiOLauK/6AUvkWlVBt:TL5epmzr0GSNuOKary5t/
MD5 SHA1 SHA512 SSDEEP

Submit Download