28893f41351c2a7daf6184fd167f3e0f8b7b4fd20eaf393aae39bc79ebd6de40

Analysis

max time kernel
18s
max time network
155s
platform
android_x64
resource
android-x64-20240221-en
resource tags

androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
submitted
03/05/2024, 02:54

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

com-cxinventor-file-explorer-216-67003085-959dd7b70c8adb1c7bca071a3350bb6d.apk
Size

7.9MB
MD5

959dd7b70c8adb1c7bca071a3350bb6d
SHA1

e1614def2fbe98c54e40142bb04ca249ae013207
SHA256

28893f41351c2a7daf6184fd167f3e0f8b7b4fd20eaf393aae39bc79ebd6de40
SHA512

e04f7d8ffda34c9e41772d28f514064edf5f46cf979e6cee553d0c3f145077a28252ed0662f86475c4746e9c8ee637d62233fd1b727547b7f9f313e5e54920c1
SSDEEP

196608:L++AouvcjCrBDV/ZX8LH5wXuBYaMJOGjc53xeNRa+0+F:brjCrtV/6fBDIPjc53GRaaF

Score

8^/10

banker discovery persistence

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.cxinventor.file.explorer

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.cxinventor.file.explorer

com.cxinventor.file.explorer
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
PID:5055

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Software Discovery

T1418

Security Software Discovery

T1418.001

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.cxinventor.file.explorer/databases/com.alphainventor.filemanager

Filesize
20KB

MD5
b838a020a62fa414a25023274c291a92

SHA1
b450548e63194378ee9d7aed0c7c77661ca1c4eb

SHA256
500003e308c3ca4bb95989c3952c64e127ad37837e5c9cc6f3fd204415432543

SHA512
a26ba8664d57c52d83db8bf5900a622ffbb8bf6744dd34fe6ac8e9a40811c52c2a40981c925d68c0b87bb62232cc997efc307d14ab99d3cce474a78a38b2e5a3

Download Submit
/data/data/com.cxinventor.file.explorer/databases/com.alphainventor.filemanager-journal

Filesize
12KB

MD5
5d01237ff3fe45ce3112cab16dec8438

SHA1
aeaedf82e50a8e8158efd1a9768f8c2d1ef57ff3

SHA256
e95cbe2a481f6eb30cdb136446ab38ea981639c1c830500f4c056b38b61d40ea

SHA512
9d874c91740e133495ddff3382f82317e42baf0e7171cac8ac7b51b6ccfb29a3ca7ac50020df56bde09ec36c1763fd89d44e05e33af9dfadd4c08900244c86ab

Download Submit
/data/data/com.cxinventor.file.explorer/databases/com.alphainventor.filemanager-journal

Filesize
12KB

MD5
ff05cd87511b2c0ab22547522482e5cb

SHA1
025d3898832d16172a4b5f36e86939a6cc8eeca9

SHA256
e63132c4c9f7a487455e0936e17f55c371898595722d43115ed26db3e974b7be

SHA512
89a9720e29b643078011eb9c1ada1d8577f8483f54cc80853ab21a6418ce488644e64ca9c3d3036efba1f8ac91ec42d05187ad0b0a9a76432b69662692b7e9fd

Download Submit
/data/data/com.cxinventor.file.explorer/databases/com.alphainventor.filemanager-journal

Filesize
12KB

MD5
cfa184666dcd42078219de8f5e6dd16e

SHA1
2b979874d6b41a50443d150816094fd91b613f7c

SHA256
6c5a346b609922eabbb1e31899af591756f9dd6c61ca7da8df5754106303cab8

SHA512
c517bd069c8eac0ed04773602c8f6f68889d4c4849b4a60f307b57f61ae384f6ebddd3c65510f1b176956f7f82840a8ce7663f3d52f5f21fcc3e495803e72fe5

Download Submit
/data/data/com.cxinventor.file.explorer/databases/com.alphainventor.filemanager-journal

Filesize
512B

MD5
cd42749b8d494724af90370374db3b7a

SHA1
976755e9cccc164c100bf2ff4e88b1a8d08ce181

SHA256
cc839e02d1df45d40332038b07ddd9156ab6b2610d23625a01228e714277c96d

SHA512
41f2524cfa0ee20e1f8fe1786ad09c9f795d0ca779a4656f933771249cb9e3360710cf1d48166f02b4bff9abed61386e9cbeb4bb7c3aeabca1fc9a99bb1b0cf9

Download Submit
/data/data/com.cxinventor.file.explorer/databases/com.alphainventor.filemanager-journal

Filesize
8KB

MD5
78cfcb29b4f1f929d6e9020b1b9adf67

SHA1
15e0ed0b6de155fbd226736fd5e4aeada11038b1

SHA256
b5544fb2d08580816bfe7a81c2df5111cb16fa02f0c7c51221b2b4b36d7d14de

SHA512
027684f31e11966762e0ab33257302beab30a382fe43bf500581ffc1e227cab48600a11964b2eb7395fb87bf66d2a49b88044c744d550bd1ab266f5b40a67d71

Download Submit
/data/data/com.cxinventor.file.explorer/databases/com.alphainventor.filemanager-journal

Filesize
8KB

MD5
e22007528132e51163148b82f953e138

SHA1
7964e2087f83793158d2415e232af91042c3d604

SHA256
a721235a30e09e16fbc2ac584c6196e0b1c720a7f97a0aeb4d8e135bdd97f92c

SHA512
f268c15e570b8b1535e522df4b3ac7f42d62c80e2dbc31f7fa0f36edd48a514a91b5cc989974c274577f6770e0ed5092591e5c7e9a9c2c95c1403ad439818102

Download Submit
/data/data/com.cxinventor.file.explorer/databases/google_app_measurement_local.db

Filesize
16KB

MD5
eb52a90bb70b76e946b62f50b6f7fb85

SHA1
42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

SHA256
48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

SHA512
b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

Download Submit
/data/data/com.cxinventor.file.explorer/databases/google_app_measurement_local.db

Filesize
16KB

MD5
a8ddb9087c77ee9080d2825841382a9c

SHA1
732bcb46ff1e3e91b7ce9b91bddda803dfa81b7a

SHA256
2f987e18f530563edea459cb56de60d1631cd947fe24ffc6e1730fd18a14b7e5

SHA512
e4d035a89c6c02bced176526945978612c126e12f9988b2385338b23e3fe6a158d895c742d001c28367a72728b7a1b3c0a7fa352a936b148f5bb4adbd4751a62

Download Submit
/data/data/com.cxinventor.file.explorer/databases/google_app_measurement_local.db

Filesize
16KB

MD5
387564610d21e49f5ed803f4ed8a8a84

SHA1
2687d37b9739bcedf8ff39a3208ff550ee743d08

SHA256
ac246e5878aa27b2ab3d89857261bde62d69b13ec0f202b6e42c112d5aae04e3

SHA512
1a7c5d864615ba1dded275a14fb3fa1aba556ff9f1fc1a60ea01e44c683cc6493a5f9e4aeaeb430abfa0cd65e010221b40e05c5a839ede3b1b177d0e4e2883f9

Download Submit
/data/data/com.cxinventor.file.explorer/databases/google_app_measurement_local.db

Filesize
16KB

MD5
4caa76349dc2f26daea3e6c998dc959c

SHA1
2537a9762ac0baa9c00b526d06cfab89221f28bf

SHA256
3d71202efd653cf6365d80c35e2fc9db41476713efcfdc2155cc2bf360bf4e2c

SHA512
aba83682dfff1ec895628dc20e97b51d2ca05a641f2ccfd822c845e25f42a322e1ab261155ae439706a76478828b1a04b9c41b3af6e806eadaad4ed65c0ad13a

Download Submit
/data/data/com.cxinventor.file.explorer/databases/google_app_measurement_local.db

Filesize
16KB

MD5
1da4c48697cca33df9dab0c4e29e85ca

SHA1
e20fe1db474acd42c7dc19f12597f5f770ad7242

SHA256
070e4b771e031cd7510b6aa7806891fb64f2c02c563030a41fc829389cd006ee

SHA512
9388154e5af88f19b4aa9d502ea41b0a67792dfbd050c1cf50f3862abdbe8e5c9cab77377e6f2adc570a41d7fa810eedc73f3d17324eb5de4e13d43e1d26afd5

Download Submit
/data/data/com.cxinventor.file.explorer/databases/google_app_measurement_local.db

Filesize
16KB

MD5
9d0a604e5554b74ee63040bfff28d5be

SHA1
ff97923a695c2aef4bb10124bb3c41d122c5fd37

SHA256
46eeb0bd5fd5e8dd3736adbae11b0a38f2a5ec70f80a99d51994a1475ecb8f9d

SHA512
d756b990237bf3ce1b4cef9c13d4046bc59f663bd0faaff8ee29c48decf6b4c312c138666dd074706d541ade58d9aff773bc2444c4d70151b0e09807b898d0e3

Download Submit
/data/data/com.cxinventor.file.explorer/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
ee5a556cfaeefe410dbb7bc9e045d62a

SHA1
9f0b6ec20b7ca0f8b2a9eec5c728a56f94bccbb6

SHA256
f1fb661a84e8167bf18f5bdfbd29b82c29ef13494009eeff927cf5d8ccd989ca

SHA512
c7fdca06c18341c8f3aebab78a2f461b6bab87d93c6ab62e14a8d2189f624738897f6a670b31f38eed29276db21ddcd6b9b57ec9e92b37beff14bdfcad550c42

Download Submit
/data/data/com.cxinventor.file.explorer/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
3cd6325b5555e1cce3b4d06f22ec466d

SHA1
3ea3b09e623e5edd6d8b9791df1501d28c48858c

SHA256
6c4aaf19f7b47e62c5724b4e1fd2ba27b1e099eb2c53edddf2e78e8d337815f4

SHA512
e810c3a0c48241be08761c02e26d9ca85fbf2e4df3da6059f97e61cca759db4d59782807d8993c01c49f14f214fe7766670d2b446f6681eedec37c8cda83834b

Download Submit
/data/data/com.cxinventor.file.explorer/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
ef5a052045cf2f058561ab10e1725b93

SHA1
41ba0401316f978b0f14cd803b7330a67253023a

SHA256
2577948edde5e74aae49c60f7c455ea5aee0c38964243cb00236af5395d11ae8

SHA512
786d1663261c33712c6fe9aa381e4e6ceb03e84cd33ba22e7715737b29300c07427ef5d9a0dd30fe399d45d23f74239a5a59c79bb17c7ec11160e7889bf0e9ee

Download Submit
/data/data/com.cxinventor.file.explorer/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
c0321f0d7873d6da64610f76e17393bd

SHA1
5e260a391845547019bd565a9f4bc455fb644aee

SHA256
82e975112956cafce831af237c791f67f96520040b11fb1162f4abb480e76243

SHA512
de119ae1df5dcdad56028d4c6c112a77578ea4d2037f1d86d5cbf863450cd2abee9a41eaee668ef671e8536e381cae160d8ef2eb92f10c7313ff296d6c5f20d3

Download Submit
/data/data/com.cxinventor.file.explorer/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
24915c6309e227c432b3c3b864b82473

SHA1
b86836580dc070e9510a5c2539e855b4022f7037

SHA256
6a60f4a861ebf17d6db547bc37e53b9f2b2e8ad0ddd4725d8cdb14e406347985

SHA512
b4a140ac385cd206f8a9e74c3bc8d4e42509b087816ca77a80bd2fa1bb02792a2368fdc94c2215f92fd3af461059a5cefcebb8485041912b0f19117da619624f

Download Submit
/data/data/com.cxinventor.file.explorer/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
94c9661cbfcd4b8857c7dfd56b910ac1

SHA1
434763b7073d1f81d5dcfd6bfeb88f24f503d809

SHA256
4aed25cec33a79109ab5284c232b9cb86661860ee18045d95de4cb39ac29ff25

SHA512
81f8f0cd9fa44d3303cdf1356774072389a8f191d560e8a29346a30d7aaa05e6052342da6373dafe0aba6815013b5aaa172b61d6557721a839ebff568d072f08

Download Submit
/data/data/com.cxinventor.file.explorer/files/PersistedInstallation520110290497773201tmp

Filesize
90B

MD5
2ea644ca26460f98298e1392dbc15068

SHA1
0cff3f405b1c37add61f1c1b003b339e03a35557

SHA256
02e8a09b355ae866af95d5343f55d786578203f97ad326e3d744382100347d2c

SHA512
5f6ff5f5da69426836d4b2ff51245703af5ff548437a84c451228d026d90aa4e6fc91b9715c4748995953444c20b4f9ea6e52120ac032ba481115fb6ada0ef2c

Download Submit
/data/data/com.cxinventor.file.explorer/files/PersistedInstallation6447831405120362536tmp

Filesize
559B

MD5
41365e6e6e967c260abfa4de2fa3c52c

SHA1
473a45c96ba801fcaccfb433f03008f7ab6e9c66

SHA256
d3526a33b531365e7e10123019a6ddafd66dc22c05df7eab8f744421586ad294

SHA512
5b9cfc9b2afe9e3e49d773225d337ac74a6982b9d87fe8494ba9a4dba4168b98ffe78cbe6ce1f159002175b6574ba7b5cb7cfae3fd8a8458355bab98ab20e81c

Download Submit
/data/data/com.cxinventor.file.explorer/files/frc_1:324424549089:android:c447488ae444d622_firebase_fetch.json

Filesize
142B

MD5
00ee7d60384441ec1e905e4faf9b4ccb

SHA1
21f9a3f0b51f49c53a522d0f987c789ddd7cb473

SHA256
52e4e435a4a86abfe30fa0fbe8bbdff81015b9a4c0104759f810accbfb8af241

SHA512
bc5e1346952e39654012b3c3c79dd25808148cb4065c7e383f19650e470d0f8be793a8e479f7cba43d159ec7033e5f5802210db5be6e48a705f2cdad57438808

Download Submit
/data/data/com.cxinventor.file.explorer/files/storage_index/appcache_en_US.tmp

Filesize
10KB

MD5
0cbdbbcbaad5994226e487524cf02e5c

SHA1
ac7a5fdb6c3fb621a505ff7165e82a83ae4bb56a

SHA256
73fcc0e46a12f8fea9f918b85fd272020f9757d8b5d3ae1480393503b425dce5

SHA512
8c6154f55e49fdbfc931f0202652d43dfce893715708b1b1dcd23b1066edff6e18f91a9907085c2d95230eaf0e1a15b9f03fd3758a8eb96a3b3ce94e5a4facad

Download Submit
/storage/emulated/0/Android/data/com.cxinventor.file.explorer/files/scanfile.fast.tmp

Filesize
745B

MD5
571e785d37d595ae15f852a279a14455

SHA1
e5b4b5739c098538919caa23727a2c7ed2cc7039

SHA256
26b22fb1d80225e6f411d96cfdfb246491238d9f1fb0198a604b52319e3cc41e

SHA512
2719d907823069986875b92f1f464840b999da987c56671f79f9289e4046dea92771f6b896c9d977fb47e13fc5947ae39c274d1e39e57908f1bed24d6b9a5c72

Download Submit
/storage/emulated/0/Android/data/com.cxinventor.file.explorer/files/scanfile.full.tmp

Filesize
807B

MD5
d73cad19870612106befdd2060685e50

SHA1
7ee16ed8f2a0815762c552adf32cab6aea32c3c9

SHA256
25e8c8fe6c61d4d443f37b90674f6b0a1fe89b1801ca1e01687c22571f58eb3c

SHA512
5ba7480dda75e56393704ebf55fd83b48979034212c253d7d77ab0e586bacf111806dc4c54a11d502e749cea7a7378957797680ae518604f2468bc2fd19581bc

Download Submit
/storage/emulated/0/Android/data/com.cxinventor.file.explorer/files/scanfile_new.full.tmp

Filesize
2B

MD5
b026324c6904b2a9cb4b88d6d61c81d1

SHA1
e5fa44f2b31c1fb553b6021e7360d07d5d91ff5e

SHA256
4355a46b19d348dc2f57c046f8ef63d4538ebb936000f3c9ee954a27460dd865

SHA512
3abb6677af34ac57c0ca5828fd94f9d886c26ce59a8ce60ecf6778079423dccff1d6f19cb655805d56098e6d38a1a710dee59523eed7511e5a9e4b8ccb3a4686

Download Submit