Analysis

  • max time kernel
    33s
  • max time network
    149s
  • platform
    android_x64
  • resource
    android-x64-20240221-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
  • submitted
    10/04/2024, 11:53 UTC

General

  • Target

    73729646a7768a5bd4c301842c19b3b16bb190e435af466a731ad36544982098.apk

  • Size

    4.3MB

  • MD5

    f10c5efe7eea3c5b7ebb7f3bf7624073

  • SHA1

    fba2097378b0fcc82fcc4e85e7537331f6df4b94

  • SHA256

    73729646a7768a5bd4c301842c19b3b16bb190e435af466a731ad36544982098

  • SHA512

    0dadcbf16c82bf4d94447cf609c71b1edcf47f57a2d93336a48ae70a075bcc7c21cc10e609244e1a5f4f1cda513fb9f387a0f1267294935ee4597a41a2cd7775

  • SSDEEP

    98304:g6f0tR1SoR1ykRfvAzzUCTIruJD+WyVyB8LGzOPkwyqhho:Fo1S2BRAhIrUMVdJho

Malware Config

Signatures

Processes

  • com.pdf.google.vm
    1⤵
    • Removes its main activity from the application launcher
    PID:5043

Network

  • flag-us
    DNS
    ssl.google-analytics.com
    Remote address:
    1.1.1.1:53
    Request
    ssl.google-analytics.com
    IN A
    Response
    ssl.google-analytics.com
    IN A
    216.58.204.72
  • flag-us
    DNS
    semanticlocation-pa.googleapis.com
    Remote address:
    1.1.1.1:53
    Request
    semanticlocation-pa.googleapis.com
    IN A
    Response
    semanticlocation-pa.googleapis.com
    IN A
    172.217.169.74
    semanticlocation-pa.googleapis.com
    IN A
    142.250.179.234
    semanticlocation-pa.googleapis.com
    IN A
    216.58.204.74
    semanticlocation-pa.googleapis.com
    IN A
    142.250.187.202
    semanticlocation-pa.googleapis.com
    IN A
    216.58.212.234
    semanticlocation-pa.googleapis.com
    IN A
    142.250.187.234
    semanticlocation-pa.googleapis.com
    IN A
    142.250.200.42
    semanticlocation-pa.googleapis.com
    IN A
    216.58.201.106
    semanticlocation-pa.googleapis.com
    IN A
    142.250.180.10
    semanticlocation-pa.googleapis.com
    IN A
    142.250.200.10
    semanticlocation-pa.googleapis.com
    IN A
    142.250.178.10
    semanticlocation-pa.googleapis.com
    IN A
    172.217.16.234
  • flag-us
    DNS
    android.apis.google.com
    Remote address:
    1.1.1.1:53
    Request
    android.apis.google.com
    IN A
    Response
    android.apis.google.com
    IN CNAME
    clients.l.google.com
    clients.l.google.com
    IN A
    142.250.200.46
  • 216.58.204.72:443
    ssl.google-analytics.com
    tls
    1.3kB
    6.1kB
    8
    9
  • 172.217.169.74:443
    semanticlocation-pa.googleapis.com
    tls
    1.7kB
    6.3kB
    11
    14
  • 142.250.178.14:443
    tls, https
    857 B
    40 B
    1
    1
  • 142.250.200.46:443
    android.apis.google.com
    tls
    2.8kB
    7.0kB
    10
    13
  • 216.58.213.4:443
    tls, https
    455 B
    40 B
    2
    1
  • 216.58.213.4:443
    www.google.com
    tls
    8.5kB
    8.5kB
    24
    34
  • 142.250.178.14:443
    520 B
    10
  • 216.58.212.226:443
    520 B
    10
  • 224.0.0.251:5353
    3.7kB
    11
  • 1.1.1.1:53
    ssl.google-analytics.com
    dns
    70 B
    86 B
    1
    1

    DNS Request

    ssl.google-analytics.com

    DNS Response

    216.58.204.72

  • 1.1.1.1:53
    semanticlocation-pa.googleapis.com
    dns
    80 B
    272 B
    1
    1

    DNS Request

    semanticlocation-pa.googleapis.com

    DNS Response

    172.217.169.74
    142.250.179.234
    216.58.204.74
    142.250.187.202
    216.58.212.234
    142.250.187.234
    142.250.200.42
    216.58.201.106
    142.250.180.10
    142.250.200.10
    142.250.178.10
    172.217.16.234

  • 1.1.1.1:53
    android.apis.google.com
    dns
    69 B
    109 B
    1
    1

    DNS Request

    android.apis.google.com

    DNS Response

    142.250.200.46

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.