Overview

overview

10

Static

static

10

ae56c32ca7...12.apk

android-10-x64

ae56c32ca7...12.apk

android-11-x64

8

ae56c32ca7...12.apk

android-13-x64

8

ae56c32ca7...12.apk

android-9-x86

8

Resubmissions

12/04/2024, 07:27

240412-jac6lsgf9510

20/12/2023, 11:50

231220-nzvt6sade810

Analysis

  • max time kernel
    203s
  • max time network
    308s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240221-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
  • submitted
    12/04/2024, 07:27

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    ae56c32ca785a39cd513c3b69d4d31aff6969fbe87ddc6606002e1cdcfe49b12.apk
  • Size 6.2MB
  • Sample240412-jac6lsgf95
  • SHA256 ae56c32ca785a39cd513c3b69d4d31aff6969fbe87ddc6606002e1cdcfe49b12
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
bankercollectiondiscoveryevasion

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs 1 IoCs
    bankerdiscovery
  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

    evasiondiscovery
  • Checks known Qemu pipes. 1 TTPs 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

    evasion
  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

    evasiondiscovery
  • Queries account information for other applications stored on the device. 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect account information stored on the device.

    collection
  • Queries information about running processes on the device. 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Reads the contacts stored on the device. 1 TTPs 2 IoCs
    collection
  • Acquires the wake lock 1 IoCs
  • Checks the presence of a debugger
    evasion

Processes

  • com.st.launcher.lite
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    • Checks CPU information
    • Checks known Qemu pipes.
    • Checks memory information
    • Queries account information for other applications stored on the device.
    • Queries information about running processes on the device.
    • Reads the contacts stored on the device.
    • Acquires the wake lock
    PID:4687

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Lite.s3db
        • Path /data/user/0/com.st.launcher.lite/databases/Lite.s3db
        • Size 32KB
        • SHA256 31f8c1194d880349e8424a6749b7a2b32c31fa7a6b4fd7caf5ff572d7d2c3904
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Lite.s3db-journal
        • Path /data/user/0/com.st.launcher.lite/databases/Lite.s3db-journal
        • Size 512B
        • SHA256 6eca51fc02a27a9d0d094b1cae5ad82e919f6d9c171fa9969f71c030dc7aad37
        • MD5 SHA1 SHA512
        Submit Download

        Lite.s3db-journal
        • Path /data/user/0/com.st.launcher.lite/databases/Lite.s3db-journal
        • Size 8KB
        • SHA256 5a5fd17f8158e8c31059414f56aaf210349af811c04723ce670cadbe72a5efbb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        Lite.s3db-journal
        • Path /data/user/0/com.st.launcher.lite/databases/Lite.s3db-journal
        • Size 8KB
        • SHA256 02b3d10de5c120750de5b91bb98e37e7aa3e84e9462eafad67a56c7ad173fdd1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events
        • Path /data/user/0/com.st.launcher.lite/databases/com.google.android.datatransport.events
        • Size 32KB
        • SHA256 f02ded6053bd0f124da16cdf40849fb201797ddfac5536ab36e1feceb21564a3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/user/0/com.st.launcher.lite/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 e94df5a2b8f7385e74ba4eee10f4b76214f82eef868723af80e7b5eb5df8cddd
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/user/0/com.st.launcher.lite/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 83e64ff68673e0af8538b6df7e15cfa7207b611db7cc44db94f2a9c9dca8cbb4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/user/0/com.st.launcher.lite/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 3969edc8e0c5c16ab4fe3c32649a0852ec6ed07a6041bda15d2e74afeedefee5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.st.launcher.lite/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.st.launcher.lite/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 6679678c607d201a9851e244ae5cbd2e0814a53e0cf2e90c3ae61cead0a89f0f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.st.launcher.lite/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 a0db9f095bbb320173884a7cd85bcfebc3d970a81bd0fc7bfbb4759f76de844c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.st.launcher.lite/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 59ae6053539e982f9036cc4f0ba22565bb11f21bb1f3511cee9a112328fff8eb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.st.launcher.lite/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 fe2792d6de41430d8c23e1967b6f00253a01331a0d9b8cd060ebb60afc9718fd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.st.launcher.lite/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 3f9864cc670fe0b3cf2ff11726cf1ea8d2519da4c124114a1e3c87959915d314
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.st.launcher.lite/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 121bef9a864805cd5c7834f82f2ab32a5e773e08268bd02d772ad050970e3f92
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.st.launcher.lite/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 e30ffafa5e2df6bec82de3ad4f5e5d117a7dc5a33fa0edb483c73f77b6e5c6b2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.st.launcher.lite/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 94f39e5046f5502df5ab74863d59bb0a42dbdf39cf36a7e7b1d87848ccba6a83
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.st.launcher.lite/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 574fffdeb46c52932423e40a3ff639fabbf561c7ac839ce2176432173e9ac830
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.st.launcher.lite/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 b5e3443bcda13bd0929af09464084abd15a0b059407bff65cd0a094f61cdd4e7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.st.launcher.lite/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 db8bed153975f12a8900c9830bea7779a6e1eefd7628af1b7d6e5efcd154b5f8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        6618E2770054-0001-124F-991156F05D95BeginSession.cls_temp
        • Path /data/user/0/com.st.launcher.lite/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6618E2770054-0001-124F-991156F05D95BeginSession.cls_temp
        • Size 77B
        • SHA256 ff0e9b56d3cb7842151108932baa842db94dd86f1bbbb41e4332ad1a1850523b
        • MD5 SHA1 SHA512
        Submit Download

        6618E2770054-0001-124F-991156F05D95BeginSession.json
        • Path /data/user/0/com.st.launcher.lite/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6618E2770054-0001-124F-991156F05D95BeginSession.json
        • Size 132B
        • SHA256 febb610f1a949b60a87bc71c74e9c20964dc07878fe0aac1c23ee400e025b0ac
        • MD5 SHA1 SHA512
        Submit Download

        6618E2770054-0001-124F-991156F05D95SessionApp.cls_temp
        • Path /data/user/0/com.st.launcher.lite/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6618E2770054-0001-124F-991156F05D95SessionApp.cls_temp
        • Size 114B
        • SHA256 a7c6f4a610d11a4e145adc12cfbede442fe18bbe0be24625f6560be2d2414542
        • MD5 SHA1 SHA512
        Submit Download

        6618E2770054-0001-124F-991156F05D95SessionApp.json
        • Path /data/user/0/com.st.launcher.lite/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6618E2770054-0001-124F-991156F05D95SessionApp.json
        • Size 228B
        • SHA256 afc5ffa495e0b03845cd1cc6c74c85eb65539ff9b32ef4a6f263d5bac7f45385
        • MD5 SHA1 SHA512
        Submit Download

        6618E2770054-0001-124F-991156F05D95SessionDevice.cls_temp
        • Path /data/user/0/com.st.launcher.lite/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6618E2770054-0001-124F-991156F05D95SessionDevice.cls_temp
        • Size 48B
        • SHA256 c25c4343eb1a5f5bdfd98236189db99a2b1409fd660727641972dd37006ce116
        • MD5 SHA1 SHA512
        Submit Download

        6618E2770054-0001-124F-991156F05D95SessionDevice.json
        • Path /data/user/0/com.st.launcher.lite/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6618E2770054-0001-124F-991156F05D95SessionDevice.json
        • Size 202B
        • SHA256 d52e892b9eae1463272e56f61f6e4e81633454e772c1f3eb92ced87e4c25a978
        • MD5 SHA1 SHA512
        Submit Download

        6618E2770054-0001-124F-991156F05D95SessionOS.cls_temp
        • Path /data/user/0/com.st.launcher.lite/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6618E2770054-0001-124F-991156F05D95SessionOS.cls_temp
        • Size 15B
        • SHA256 1ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d
        • MD5 SHA1 SHA512
        Submit Download

        6618E2770054-0001-124F-991156F05D95SessionOS.json
        • Path /data/user/0/com.st.launcher.lite/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6618E2770054-0001-124F-991156F05D95SessionOS.json
        • Size 55B
        • SHA256 b843f05ed78cd137c272ba7f0ce8ede3aa853098a856863e51d5c223b58f21c7
        • MD5 SHA1 SHA512
        Submit Download

        session_analytics.tap
        • Path /data/user/0/com.st.launcher.lite/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 401B
        • SHA256 8f40a9591c1ea7a507d366c090bc8d5048b70c559d86fdfb173878e7e3bbc8b9
        • MD5 SHA1 SHA512
        Submit Download

        session_analytics.tap
        • Path /data/user/0/com.st.launcher.lite/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
        • Size 3KB
        • SHA256 e6ae3ae59ba6535de9d031aca494bda3d1add3f0bb0a114166cc1e7c102b7b37
        • MD5 SHA1 SHA512
        Submit Download

        session_analytics.tap.tmp
        • Path /data/user/0/com.st.launcher.lite/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        sa_afea59c2-fba9-44f5-bcba-1f1655b23804_1712906877050.tap
        • Path /data/user/0/com.st.launcher.lite/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_afea59c2-fba9-44f5-bcba-1f1655b23804_1712906877050.tap
        • Size 322B
        • SHA256 c15b5f05b032791fd451654be5096a49c34564ac068f778edce7314503e6efcb
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation3907470736929259877tmp
        • Path /data/user/0/com.st.launcher.lite/files/PersistedInstallation3907470736929259877tmp
        • Size 572B
        • SHA256 bba2dd3096c12d6b8177be1f4f3b07af2fc81c7adbde71bc6eaf9772bb239ed0
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation5094696418214842315tmp
        • Path /data/user/0/com.st.launcher.lite/files/PersistedInstallation5094696418214842315tmp
        • Size 90B
        • SHA256 8bde17f8b7538b6f267993c0887de66923b98b45567822635e16c89a111d37f1
        • MD5 SHA1 SHA512
        Submit Download

        frc_1:1074765900605:android:b26d373d9a9aa3fbd6b354_firebase_defaults.json
        • Path /data/user/0/com.st.launcher.lite/files/frc_1:1074765900605:android:b26d373d9a9aa3fbd6b354_firebase_defaults.json
        • Size 106B
        • SHA256 6c70ab2b1bdd08bbf3126129d0fbc1a405537f8e74cc4846a109b25dc25f6ad4
        • MD5 SHA1 SHA512
        Submit Download

        frc_1:1074765900605:android:b26d373d9a9aa3fbd6b354_firebase_fetch.json
        • Path /data/user/0/com.st.launcher.lite/files/frc_1:1074765900605:android:b26d373d9a9aa3fbd6b354_firebase_fetch.json
        • Size 118B
        • SHA256 797a552f487c8d236e5e42e6e049a5d6e15c2fa402cef1ed1e63ce62f764a5d8
        • MD5 SHA1 SHA512
        Submit Download

        frc_1:1074765900605:android:b26d373d9a9aa3fbd6b354_firebase_fetch.json
        • Path /data/user/0/com.st.launcher.lite/files/frc_1:1074765900605:android:b26d373d9a9aa3fbd6b354_firebase_fetch.json
        • Size 118B
        • SHA256 50a244e95a3df5281011cdda24df8fca540dc902041c2a221ad555cfd0faddb7
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb
        • Path /data/user/0/com.st.launcher.lite/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-journal
        • Path /data/user/0/com.st.launcher.lite/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 9e285e00a3bc1790f28bed3f21f5953cee142bcc3041ac9e9ce65b7f5ed235ac
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/user/0/com.st.launcher.lite/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/user/0/com.st.launcher.lite/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 38aca3068312409b2c5bdb3ce3a4086cc0f4725782d594400ead4be021eded92
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/user/0/com.st.launcher.lite/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 6af0bb5e7d7bc695ce4c7edc4e4465be5ab559844b31518666c915f6dc020234
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/user/0/com.st.launcher.lite/no_backup/androidx.work.workdb-wal
        • Size 177KB
        • SHA256 1e5cfd71adbf88b3ef517963a0bf17356d0aeaf142b3fa5e5390153911afa984
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download