Analysis

  • max time kernel
    87s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    28/02/2024, 22:26

General

  • Target

    ad03d79e25aeabcc04e4ef053245cf1f.apk

  • Size

    2.5MB

  • MD5

    ad03d79e25aeabcc04e4ef053245cf1f

  • SHA1

    8f4f14a4a7857a7cf3d1ddc834340c9edf6b9aec

  • SHA256

    2f4ce33224f0c7551fc77e864ef2e401351d78e6c96ac2c440d2c65f666eabc2

  • SHA512

    5c29767606d12a1d98a9b208eeae901316e55c5956d2c2d1607b605101292c0745cea6271313eea225a1f1761ac0af297cf7c372071d89ce8293c19001395d2c

  • SSDEEP

    49152:4CF27/7n54+hblJ37avFS7z+ieXHs3Tb9P3ygoEa5E3tfu:g7Hb37awn+ieSTb9zVru

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.rainbowdeveloper.transparentcaller
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4457

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.rainbowdeveloper.transparentcaller/cache/1582435991586.jar

          Filesize

          9KB

          MD5

          e8e0527a01aefdb89afd2c508f131da1

          SHA1

          f1103e6b260c657ceb3d95f1b023af3fda8b133a

          SHA256

          f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce

          SHA512

          fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

        • /data/data/com.rainbowdeveloper.transparentcaller/files/gaClientId

          Filesize

          36B

          MD5

          9a0cf808b4a172a07036ae8528c45cfe

          SHA1

          a28db28f78ea71151045dc1a46ee30bd68591a4c

          SHA256

          b44eee99e33b7677c43e061d95fd4f4d415e45b1de9202a656b387a8988c753b

          SHA512

          191897b998995ea90197661ee819d153eff20d1396902dbc34b8fc31411afbae0369a7b66848d65205f67b3414c4a711a01dd4c71341568b8a6c6949fa830e49