hxxps://www[.]mediafire[.]com/file/4wlprj9mdltdj0g/DELTA_2[.]616[.]655[.]apk/file

Analysis

max time kernel
1793s
max time network
1661s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
18-04-2024 13:52

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

https://www.mediafire.com/file/4wlprj9mdltdj0g/DELTA_2.616.655.apk/file

Score

7^/10

collection discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 3 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

T1633.001

T1426

Processes:

com.android.chromecom.android.chromecom.android.chrome

description	ioc	process
File opened for read	/proc/cpuinfo	com.android.chrome
File opened for read	/proc/cpuinfo	com.android.chrome
File opened for read	/proc/cpuinfo	com.android.chrome

Checks memory information 2 TTPs 3 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

T1633.001

T1426

Processes:

com.android.chromecom.android.chromecom.android.chrome

description	ioc	process
File opened for read	/proc/meminfo	com.android.chrome
File opened for read	/proc/meminfo	com.android.chrome
File opened for read	/proc/meminfo	com.android.chrome

Reads the content of photos stored on the user's device. 1 TTPs 1 IoCs
collection

T1533

Processes:

com.android.chrome

description ioc process

URI accessed for read content://media/external/images/media com.android.chrome

description	ioc	process
URI accessed for read	content://media/external/images/media	com.android.chrome

Requests dangerous framework permissions 4 IoCs

Processes:

description	ioc
Allows an app to post notifications.	android.permission.POST_NOTIFICATIONS
Allows an application to read the user's contacts data.	android.permission.READ_CONTACTS
Allows an application to write to external storage.	android.permission.WRITE_EXTERNAL_STORAGE
Allows an application to read from external storage.	android.permission.READ_EXTERNAL_STORAGE

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:4410

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
PID:5279

com.android.chrome
1⤵
- Checks CPU information
- Checks memory information
- Reads the content of photos stored on the user's device.
PID:5536

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

files/dom-0.html
Filesize
235KB

MD5
5ff95088501920a8d60e0c220ab25b17

SHA1
30bff04cf91f10ba7b4bb58c832548790449774b

SHA256
ae8d57bb669238a8320ef79305d85c3854ce0242c0ffe1875ed27d5a522f2969

SHA512
0af930366ef55cd7644bc764904cfb6386981c6c1864a515c4fe4aa7bad92a5e81ded6c7c37fdc554b456208f7bde06c3703c467dcb68adb1c66d83308afd1a1

Download Submit
files/dom-1.html
Filesize
127KB

MD5
3d7628e145498187491039c06f0974ec

SHA1
a6a8061cc64e3cf6bedd87822bc4fa21ebf5079a

SHA256
d830db5d36254490e878134b00bd9705a9fccef1d88b59f4413966f05fdf7da2

SHA512
05880161c87623ecfbe09a1203091bb5e6b967210d7a4a786027f265d0d1223847754948d4f3f6398bbf41ce7a81a80389c097ca23bd7fc59a137d9d1ca7eee2

Download Submit
/storage/emulated/0/Download/.com.google.Chrome.VV2iYu
Filesize
13.0MB

MD5
aa63ebd97dff5e157312ac52ac1a4c88

SHA1
efee36722bd721ab71e1de55ce318d044ae8eaf2

SHA256
7ccc745fb24b7ef17d0dbb3902f0ed729bca7c1954252bff9b7c169b76ed5fee

SHA512
482d3800af4ac89520d989d149220641f85b7d4191abe5f14a9ea7088ce64450fc51edce394b80d0a4ed335141b37074d09d29e9089de8a139dfe3f747392898

Download Submit
/storage/emulated/0/Download/.pending-1714053168-DELTA 2.616.655.apk
Filesize
131.6MB

MD5
053b3be141f24f0643af0776cfeefca9

SHA1
14a5e88ecbdfe12524457b5bc033af6c4b74c949

SHA256
7347bb03a5e9be4aaa63af8bb600f061c7ec1f8814eb84641aa4c96f74257b3c

SHA512
b21f8d74e5e348b4ed0fe8dae464e33a2fca5534404fa620db0115f8247fa00e2c462e273df63dc2238f70c1071e8891694e52fa29aa8bf6289685ad29033c75

Download Submit
/storage/emulated/0/Download/.pending-1714053168-DELTA 2.616.655.apk (deleted)
Filesize
512KB

MD5
59071590099d21dd439896592338bf95

SHA1
6a521e1d2a632c26e53b83d2cc4b0edecfc1e68c

SHA256
07854d2fef297a06ba81685e660c332de36d5d18d546927d30daad6d7fda1541

SHA512
eedb6cadbceb2c991fc6f68dccb80463b3f660c5358acd7d705398ae2e3df2b4327f0f6c6746486848bd2992b379776483a98063ae96edb45877bb0314874668

Download Submit