Analysis

  • max time kernel
    546s
  • max time network
    554s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240221-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
  • submitted
    24-04-2024 17:14

General

  • Target

    https://modilimitado.io/spotify-premium-apk-3/

Score
7/10

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 1 IoCs

Processes

  • com.android.chrome
    1⤵
    • Checks CPU information
    • Checks memory information
    PID:4411

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • files/dom-0.html
    Filesize

    345KB

    MD5

    40995038fda00665849ca3385d62cac2

    SHA1

    7a6fc15bb327644b7dbe3c297c71bb109ba90ad0

    SHA256

    bba0c72ee8d05c6136dd5704c09f2fc872dc2b1aeb585dd4ebacd2adbe99b5d3

    SHA512

    6a4c0eec3a92912d316e6d182cdfd9c7c556af10bb3c8ce819b21d88955d5f9ab87782d0f17c896727d69749be11aaefb5ef2e9f0392b0f2463ba3d5b7f0aef3

  • /storage/emulated/0/Download/.pending-1714584056-Spotify_Premium_v8.9.4.304_Modilimitado.io.apk.zip
    Filesize

    78.7MB

    MD5

    5599d0b9e16ea17e336e2ac810e309f6

    SHA1

    42de5f8f90c981352fbcc96f36197331b013a7ee

    SHA256

    5114e8a3fa211b75a783db42921208edf756be2f209d27ebfab94ed05f10d75c

    SHA512

    3d3a6befe35d4f4e57ef0ba63e791bdee90f0681cce9408614cc8b89808550d60efd78e802f49d5daa2cb8a9f3453916b52d7156901226f1eec170a6bbfc741c

  • /storage/emulated/0/Download/.pending-1714584056-Spotify_Premium_v8.9.4.304_Modilimitado.io.apk.zip (deleted)
    Filesize

    4.2MB

    MD5

    13feb04693e34ed804b93d232e1ad8e5

    SHA1

    2a399c2fa83e28ca960bcf3b5b9da4c7ff509fdd

    SHA256

    e375e1eb9b708fdd9090e55f665884907be353e5e981282f5090bcb531daf108

    SHA512

    8e5747c67c19a61f05b34f40554bff4c8bc67a01a248b9755016c9417e621c5a256f1a0b469e48c9cbdf056d2a3bd5c5d422762bf507d452e49b12cf7c103aaa