Analysis

  • max time kernel
    5s
  • max time network
    137s
  • platform
    android_x64
  • resource
    android-x64-20240221-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
  • submitted
    02-04-2024 10:20

General

  • Target

    e974bfe5c6bacbe466b3bb8fef673b32fd7dc4a6cfbbe1e8260b5776af1ce145.apk

  • Size

    2.8MB

  • MD5

    a5accdaea323327f083cacefe0683caa

  • SHA1

    b5bf43f2ef1751a27cc2f251a7717cceba6daf4a

  • SHA256

    e974bfe5c6bacbe466b3bb8fef673b32fd7dc4a6cfbbe1e8260b5776af1ce145

  • SHA512

    5bb7792fe8d040eb186ae4d16045ee04806961dbccba22fa9ecce0de31e2c3e392ab29b4d0c335b184630772cf5e88309125a9dca43c41dcda677857dbcdf9f3

  • SSDEEP

    49152:t/hml99KMTSHh5dA4bwrpXulxFQ9M/UR+kN4FQhYMXlBu59kk:lsZTSHh5FgpXIxdkN4FItu59kk

Score
6/10

Malware Config

Signatures

Processes

  • Mad1sal.com
    1⤵
    • Acquires the wake lock
    PID:5056

Network

  • flag-us
    DNS
    ssl.google-analytics.com
    Remote address:
    1.1.1.1:53
    Request
    ssl.google-analytics.com
    IN A
    Response
    ssl.google-analytics.com
    IN A
    142.250.180.8
  • flag-us
    DNS
    google.com
    Remote address:
    1.1.1.1:53
    Request
    google.com
    IN A
    Response
    google.com
    IN A
    142.250.187.238
  • flag-us
    DNS
    238.187.250.142.in-addr.arpa
    Remote address:
    1.1.1.1:53
    Request
    238.187.250.142.in-addr.arpa
    IN PTR
    Response
    238.187.250.142.in-addr.arpa
    IN PTR
    lhr25s34-in-f141e100net
  • flag-us
    DNS
    android.apis.google.com
    Remote address:
    1.1.1.1:53
    Request
    android.apis.google.com
    IN A
    Response
    android.apis.google.com
    IN CNAME
    clients.l.google.com
    clients.l.google.com
    IN A
    172.217.16.238
  • flag-us
    DNS
    rat-remote.online
    Remote address:
    1.1.1.1:53
    Request
    rat-remote.online
    IN A
    Response
  • 142.250.180.8:443
    ssl.google-analytics.com
    tls
    1.3kB
    6.0kB
    9
    8
  • 142.250.178.14:443
    tls, https
    1.4kB
    40 B
    1
    1
  • 172.217.16.238:443
    android.apis.google.com
    tls
    11.2kB
    12.7kB
    34
    37
  • 216.58.213.4:443
    tls, https
    455 B
    40 B
    2
    1
  • 216.58.213.4:443
    www.google.com
    tls
    8.6kB
    8.9kB
    26
    36
  • 224.0.0.251:5353
    3.7kB
    11
  • 1.1.1.1:53
    ssl.google-analytics.com
    dns
    70 B
    86 B
    1
    1

    DNS Request

    ssl.google-analytics.com

    DNS Response

    142.250.180.8

  • 1.1.1.1:53
    google.com
    dns
    56 B
    72 B
    1
    1

    DNS Request

    google.com

    DNS Response

    142.250.187.238

  • 1.1.1.1:53
    238.187.250.142.in-addr.arpa
    dns
    74 B
    113 B
    1
    1

    DNS Request

    238.187.250.142.in-addr.arpa

  • 1.1.1.1:53
    android.apis.google.com
    dns
    69 B
    109 B
    1
    1

    DNS Request

    android.apis.google.com

    DNS Response

    172.217.16.238

  • 1.1.1.1:53
    rat-remote.online
    dns
    63 B
    128 B
    1
    1

    DNS Request

    rat-remote.online

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/Mad1sal.com/cache/~test.test

    Filesize

    4B

    MD5

    098f6bcd4621d373cade4e832627b4f6

    SHA1

    a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

    SHA256

    9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

    SHA512

    ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

  • /data/data/Mad1sal.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    7b9917e99169743d46d37a0e630ed19e

    SHA1

    c0daa3b5de6587257fd111de429132931d2743fd

    SHA256

    4c76d7ab640d5c1045da7f6893337cd1ae4b59f25a99f18e329aa2636bccf86a

    SHA512

    3b283c5904e3030e1606bcd4b224b80c9b640abd49abdc846bf5fb4316e008642ea0022966c7ff6322b4c1793f716afde302065f41b0462d3923eba8c4b004d7

  • /data/data/Mad1sal.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    1893054e5b0a5d6a96df4894454cbab4

    SHA1

    36df990ee39de1e31db2924c52c5466869fc56bb

    SHA256

    332fb2484c3be50fbdbc660562341b281a3d80590ffda2886e198bc1833cca05

    SHA512

    8029c388efa38bb6eb4e5d248d61c6adaf60f96b2f29b638224535cf640b5178cd3d28953c6f4ac436f0ba170aa5d1145244c00f9117f6c3050319e0b83214c6

  • /data/data/Mad1sal.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    91912f63507bf5879b7f7358ed1ee1aa

    SHA1

    5a2754ffe4ced08ac11b5acddb7e9d8eb95578ab

    SHA256

    59e930e469d078d29fd6d0c071a85b3c06ef841ee4743226f030807004f7038c

    SHA512

    8b92b5a03f154b8e5effc6bdd971448e354dbc4111f6e9aaa40b0eea5e8400500d5459bab3831c47ba43f7282d344b5e097ec1d34c4ee70796b04f51a5c3e110

  • /data/data/Mad1sal.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    eb52a90bb70b76e946b62f50b6f7fb85

    SHA1

    42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

    SHA256

    48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

    SHA512

    b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

  • /data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    dba4e05e2505cdaa3c05a9b899b3e086

    SHA1

    555c0524d4f9267ae5d4ea40c648886065fef5b3

    SHA256

    cd0396a83c60028f7510a76657f08461a29f65203a13940dc987748f7a7e6fe2

    SHA512

    fd6714decb1f2f3627beb67e258f2b824463de8dbb8c805098ec03b618c1e414bd5ecc32b4cde9aaa201d1fe5c4408de4b4fd2816b18e83687e878afa08be2a8

  • /data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    b347f2116692c59b107d7ee86f3b8124

    SHA1

    89a6bd58b3c7c4fd9e7ef6047a994d3503f31a72

    SHA256

    888ef8a93804241ef77108aefe9f06716ed3f1116ef8aa1c4e0f8db697557567

    SHA512

    a9490bdb3a3f17e3b9a930feee5e66d5871edb079f30656d0ebf3b2fe72663e13709d9f766afd99dafe2f5ece6602e70b06c15bc655a53ce3e6ccb2d3e6ad8e7

  • /data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    9e90c710ffefee11cd87ad3680af10fb

    SHA1

    517ed985ce486441d322908b0a344b975a04acbb

    SHA256

    922c3e65ffb4beae5aee578f9eb7c3ffa17be8ae4391a3c9676c808f8079a1e7

    SHA512

    1cae58f7aa90c641767c8bac4613a2a36c76d3a64ff004e561fd22f4bed53b39fb864e9af9299916f332b5060813fa122481f1be277bdf0fdfe56d1521baccce

  • /data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    afe97fa2fc6e1c5e265b4bb028ca2e80

    SHA1

    69eb20e7d0d09fc83c7acced80767e222e5b32a4

    SHA256

    0afe4e6a434f3cdc8a079b4569409705d6ed616dc4f80e738902086ee16cc22c

    SHA512

    e7109c384f6642cf19f2c64082a33c3b28b9829182abd53b1c442e3576c0b32bf70b5d98b06cf50fef9d70cc5ab40078e54181aee5723cb6b3284597bf5fe492

  • /data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    5c251f584c749c5542e523d2954754ab

    SHA1

    752fef3fa7c02246f5d6b6d7e1bd871aa7cdf9fa

    SHA256

    4e3c979e328bda10973918a822aab45b8b1a73dca597e8b5807297e3bbd70e44

    SHA512

    b7b14cf5aec760df24261bb0fba0726479756eaf6b5dab71dea1ae871b8bd31170e758dd06084494a5ccd8088551246cc55950061c74d561f7ebd61fde4d6e0b

  • /data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    e4b2b36558b9e3ebe71f5344efe19f3f

    SHA1

    78c4104869a3777025c5c09307d6cebd17f51afb

    SHA256

    addb37cdb556374da5dd65b61a33d5f2bc1e55a55def64968f7149b00c30e757

    SHA512

    82ebc23ab5af72252b6901c0dc01b8ac80d00a10a8b4107e1f15e64e272fe49d54b15eacf4423bcbb1b63acf0e307dacac20f692a4950eb583a192e93c049f33

  • /data/data/Mad1sal.com/files/PersistedInstallation1000683941520078618tmp

    Filesize

    569B

    MD5

    1c1c3549ced4eccad0a23f05f4909f3c

    SHA1

    bc681b49b61327b4e1e4411d3fe1bdfdd8d5c3cf

    SHA256

    ecbc6bcf571bef0515e8c61cbf0c989b8b337640897d606d9485f69dc55cd6f2

    SHA512

    085d63517fecb4c0eb3a30f555e1ac61ec9779d90ffbd04f1a7258db90a1331995dff5485236b4cbbba6af3bbc0b0672bd113abc0689bec89566103a1ca92979

  • /data/data/Mad1sal.com/files/PersistedInstallation2434222558961865907tmp

    Filesize

    90B

    MD5

    c8741c6c49f8b3575a0afe620a2a9613

    SHA1

    cdca936a41f4e5de5db6d27399ef08d21d8a579b

    SHA256

    18ec115e0f49aa8acb8dcfc503334756747ee5f374f5e2aa2b7d40b720e2e054

    SHA512

    429b261dc68cc68d2934fbfe41f6533e0274b4affa414b8b04b03528536dfc40beee9cc9864185be79bb790716c71e743bb1c2245734fafc9f2cdc686b0e4daf

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.