Overview

overview

10

Static

static

10

0ceddb3d12...98.apk

android-9-x86

7

Analysis

  • max time kernel
    147s
  • max time network
    160s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    13/03/2024, 14:44

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    0ceddb3d128503a8c36e7b02cfcb7b5ddbaf7744443c293685cae91f11420e98.apk
  • Size 11.2MB
  • Sample240313-r4f4csfe5x
  • SHA256 0ceddb3d128503a8c36e7b02cfcb7b5ddbaf7744443c293685cae91f11420e98
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10
collectiondiscoveryevasion

Malware Config

Signatures

  • Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
    evasion
  • Loads dropped Dex/Jar 1 TTPs 6 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Requests cell location 1 TTPs 1 IoCs

    Uses Android APIs to to get current cell information.

    collectiondiscovery
  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.propublica
    1⤵
    • Checks Android system properties for emulator presence.
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4193
  • com.propublica:Metrica
    1⤵
    • Requests cell location
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4268

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        EVRFemMSg.dex
        • Path /data/data/com.propublica/app_pqx2ld3t606rt3kxogvi/EVRFemMSg.dex
        • Size 2KB
        • SHA256 28008ff0b3755ae094b3aedc95f17a553882e23a4d4c363026384127d99a0e49
        • MD5 SHA1 SHA512
        Submit Download

        propublica.dat.jar.cur.prof
        • Path /data/data/com.propublica/app_pqx2ld3t606rt3kxogvi/oat/propublica.dat.jar.cur.prof
        • Size 86B
        • SHA256 9dd6fd1cb452f570c3c2a2a9bc5b7789d7029a223898b98ed4c29d3c81aef64b
        • MD5 SHA1 SHA512
        Submit Download

        propublica.ext.jar.cur.prof
        • Path /data/data/com.propublica/app_pqx2ld3t606rt3kxogvi/oat/propublica.ext.jar.cur.prof
        • Size 904B
        • SHA256 abc4290c74b18317ec421dee816b70f2150c460e27f0a82372dbb9ae9acc7421
        • MD5 SHA1 SHA512
        Submit Download

        propublica.dat.jar
        • Path /data/data/com.propublica/app_pqx2ld3t606rt3kxogvi/propublica.dat.jar
        • Size 2KB
        • SHA256 995937f06cbba7ecdf9a4e0afcd3c097e6933549c34b277fddeb1278b997f1d8
        • MD5 SHA1 SHA512
        Submit Download

        propublica.ext.jar
        • Path /data/data/com.propublica/app_pqx2ld3t606rt3kxogvi/propublica.ext.jar
        • Size 2.5MB
        • SHA256 9ae2e84860977202be7eceb01cc1d17db44123be765e56914223310eba7bbede
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        1582435991586.jar
        • Path /data/data/com.propublica/cache/1582435991586.jar
        • Size 9KB
        • SHA256 f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        50c3285d060b2ee7fc333f1604afc1cb.0.tmp
        • Path /data/data/com.propublica/cache/picasso-cache/50c3285d060b2ee7fc333f1604afc1cb.0.tmp
        • Size 485B
        • SHA256 b6665dff486c61ffaee02a49a6fc567a564881d4aad6f016907033d3388202ff
        • MD5 SHA1 SHA512
        Submit Download

        50c3285d060b2ee7fc333f1604afc1cb.1.tmp
        • Path /data/data/com.propublica/cache/picasso-cache/50c3285d060b2ee7fc333f1604afc1cb.1.tmp
        • Size 34KB
        • SHA256 6d34d6f5209a83889a6d489eaa6033cb729c575fc2d7fbd88d2d80aa03edeeec
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        67917ec0c6262f941037130637f12517.0.tmp
        • Path /data/data/com.propublica/cache/picasso-cache/67917ec0c6262f941037130637f12517.0.tmp
        • Size 485B
        • SHA256 808d6b5225c666f75ea79c661f1ad613c4c643aa7be45f6a59b75877e381ab7e
        • MD5 SHA1 SHA512
        Submit Download

        67917ec0c6262f941037130637f12517.1.tmp
        • Path /data/data/com.propublica/cache/picasso-cache/67917ec0c6262f941037130637f12517.1.tmp
        • Size 65KB
        • SHA256 bf0b67f4bd61ad326f617a1ff503e6fa2da88f8c3ee128db40c9357f2752f400
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        8ca8ddedd1684c2d7d75611fdaafd119.0.tmp
        • Path /data/data/com.propublica/cache/picasso-cache/8ca8ddedd1684c2d7d75611fdaafd119.0.tmp
        • Size 477B
        • SHA256 fe554e3987a810d41d7b107d01aa6ab6e75415c35b91884f50bb935da095f859
        • MD5 SHA1 SHA512
        Submit Download

        8ca8ddedd1684c2d7d75611fdaafd119.1.tmp
        • Path /data/data/com.propublica/cache/picasso-cache/8ca8ddedd1684c2d7d75611fdaafd119.1.tmp
        • Size 17KB
        • SHA256 cfdeb7fd04a25a6ca82439e7e6f7e9e4282dd1a1bf15cffad884ad407e2cac91
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        journal.tmp
        • Path /data/data/com.propublica/cache/picasso-cache/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512
        Submit Download

        a
        • Path /data/data/com.propublica/databases/a
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512
        Submit Download

        a-journal
        • Path /data/data/com.propublica/databases/a-journal
        • Size 512B
        • SHA256 c72f9e9c7ed2e32a7962c4126ac06652166af12700f1aa38317060d8c7654e8d
        • MD5 SHA1 SHA512
        Submit Download

        a-wal
        • Path /data/data/com.propublica/databases/a-wal
        • Size 16KB
        • SHA256 b38b45cb60fc91319bf0a48680d2b7967c1c608e37ce07c9cfc3fb396b564d78
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        apps.db
        • Path /data/data/com.propublica/databases/apps.db
        • Size 16KB
        • SHA256 46ec36702ecdbe377c42bf1aaa0d7fa320d598e8d99e3e9faa820d7cff2c06ab
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        apps.db-journal
        • Path /data/data/com.propublica/databases/apps.db-journal
        • Size 512B
        • SHA256 ac9d5261b0073d9dae48441414e01119c9db35adf5a06661656146075e649d35
        • MD5 SHA1 SHA512
        Submit Download

        apps.db-wal
        • Path /data/data/com.propublica/databases/apps.db-wal
        • Size 28KB
        • SHA256 606c5ee582619a7083c456c70e7b7dd4c49f1667f22f153f14258c72625eda64
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        propublica.db
        • Path /data/data/com.propublica/databases/propublica.db
        • Size 2.7MB
        • SHA256 258b3aba66a1fb38da134fa9990ae2a7fdcb5195becbe0260d107dde43757fd9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        propublica.db-journal
        • Path /data/data/com.propublica/databases/propublica.db-journal
        • Size 1KB
        • SHA256 edfa9ac93811c9b05907625f2306718110338c9eea2624fcf6ec3c81f2824d28
        • MD5 SHA1 SHA512
        Submit Download

        metrica_client_data.db
        • Path /data/data/com.propublica/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 7ad9f5df9dcb9f5913a603aded0b7a5ef8ad84b6f38e013bfb021ac9b5b31a35
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/data/com.propublica/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 882faff2a0f007164d5dbda7bd7f803306423b5eb48a88b1bb72bde65b77e50a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db
        • Path /data/data/com.propublica/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 667b87bc91f971ef986d4fcbea4628ed2248b7dd7ec2c3bc0559eb2407e4a1c0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-journal
        • Path /data/data/com.propublica/no_backup/metrica_client_data.db-journal
        • Size 512B
        • SHA256 da59c7ef947012558d107b986fa87cc60f9ba7c95227f6708f64621eb87aea34
        • MD5 SHA1 SHA512
        Submit Download

        metrica_client_data.db-shm
        • Path /data/data/com.propublica/no_backup/metrica_client_data.db-shm
        • Size 2.7MB
        • SHA256 f5da2d82db3a3fdec5601259f562980cd9986f291d7a2b9d845a68876c567839
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-wal
        • Path /data/data/com.propublica/no_backup/metrica_client_data.db-wal
        • Size 32KB
        • SHA256 2f748d361d5b4f476669735e3b1b8a8f6b3ac2beb2a8fc8ec6b4502e93f80690
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-wal
        • Path /data/data/com.propublica/no_backup/metrica_client_data.db-wal
        • Size 8KB
        • SHA256 6087c46e8ee0528cbd09fb9e945d719429a1898b1258300875638f0d605205cf
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_client_data.db-wal
        • Path /data/data/com.propublica/no_backup/metrica_client_data.db-wal
        • Size 8KB
        • SHA256 504f9f04cb731a4b02823bcb36fa0ab61a3f51e528276ffb5d24f3c6a60fe78a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_data.db
        • Path /data/data/com.propublica/no_backup/metrica_data.db
        • Size 32KB
        • SHA256 3f6cd5f480ae69859b7841450f3d032c528ba385ebf9f371b9c8fdc6eb4231be
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_data.db-journal
        • Path /data/data/com.propublica/no_backup/metrica_data.db-journal
        • Size 1KB
        • SHA256 1ccf3f8a6b3a35c1d296015c971098d549b3e2f7dcaec80bfd14588ea9185678
        • MD5 SHA1 SHA512
        Submit Download

        metrica_data.db-shm
        • Path /data/data/com.propublica/no_backup/metrica_data.db-shm
        • Size 28KB
        • SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        metrica_data.db-wal
        • Path /data/data/com.propublica/no_backup/metrica_data.db-wal
        • Size 2.5MB
        • SHA256 25b7ec478f212a395ab2d713eac36911079575c665336bfee254f6d49d5c32f4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        EVRFemMSg.dex
        • Path /data/user/0/com.propublica/app_pqx2ld3t606rt3kxogvi/EVRFemMSg.dex
        • Size 4KB
        • SHA256 656dcc97fdccb480de16d143c74469ddc9eac46eb6be30b8909fd154dcdc3853
        • MD5 SHA1 SHA512 SSDEEP
        Download

        propublica.dat.jar
        • Path /data/user/0/com.propublica/app_pqx2ld3t606rt3kxogvi/propublica.dat.jar
        • Size 7KB
        • SHA256 255304dd53935f8f0f2e5422158d06a2bef45439111d682ddcfbdca72e525db0
        • MD5 SHA1 SHA512 SSDEEP
        Download

        propublica.ext.jar
        • Path /data/user/0/com.propublica/app_pqx2ld3t606rt3kxogvi/propublica.ext.jar
        • Size 6.4MB
        • SHA256 f27f4f5d4fc8811f942c25fc2aacf44b0e34dca0e98b7de8e709e819d7d29402
        • MD5 SHA1 SHA512 SSDEEP
        Download

        1582435991586.jar
        • Path /data/user/0/com.propublica/cache/1582435991586.jar
        • Size 20KB
        • SHA256 2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685
        • MD5 SHA1 SHA512 SSDEEP
        Download