Analysis
-
max time kernel
8s -
max time network
132s -
platform
android_x64 -
resource
android-x64-arm64-20240506-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240506-enlocale:en-usos:android-11-x64system -
submitted
10-05-2024 23:44
Behavioral task
behavioral1
Sample
92f211adb0da4cd916dd9f7e74582abe2fdf4d35fc590c99db297114949c5643.apk
Resource
android-x86-arm-20240506-en
General
-
Target
92f211adb0da4cd916dd9f7e74582abe2fdf4d35fc590c99db297114949c5643.apk
-
Size
13.3MB
-
MD5
ad8685363a026eb8a22c8eb507d1cf08
-
SHA1
1e1ac8dc688841052c589e533c4f39d334f9f858
-
SHA256
92f211adb0da4cd916dd9f7e74582abe2fdf4d35fc590c99db297114949c5643
-
SHA512
5d4fb4e8ebfba021fc4cb32c3f2d42c0fcfcde7843dd588b3a3fc3658f641034e27c71deec49fa0e5cc7aac0bad94cffc754b47d81599859c02c922bd66b1e43
-
SSDEEP
196608:Of7U2ybMql+wzQ3CFO0BEetR2kpXPhJ5jWuhM6GrOiJbZhmqH4DxhIlltNgB6CXP:Q7Xyb5zj/ppJRWuhpMvbZEqHdtI6CXKA
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
Processes:
com.digitalproshare.filmappdescription ioc process File opened for read /proc/cpuinfo com.digitalproshare.filmapp -
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
Processes:
com.digitalproshare.filmappioc process /dev/socket/qemud com.digitalproshare.filmapp /dev/qemu_pipe com.digitalproshare.filmapp -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
com.digitalproshare.filmappdescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.digitalproshare.filmapp -
Acquires the wake lock 1 IoCs
Processes:
com.digitalproshare.filmappdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.digitalproshare.filmapp -
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
com.digitalproshare.filmappdescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.digitalproshare.filmapp -
Legitimate hosting services abused for malware hosting/C2 1 TTPs 6 IoCs
Processes:
flow ioc 22 raw.githubusercontent.com 51 raw.githubusercontent.com 53 raw.githubusercontent.com 54 raw.githubusercontent.com 55 raw.githubusercontent.com 21 raw.githubusercontent.com
Processes
Network
MITRE ATT&CK Enterprise v15
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
512B
MD57eb1ba7f11239bd47ecd16b89a48aa31
SHA13bb5aaa61b33e3a72b353428b8d9e9da5db5d907
SHA256ed43d55e28cea377071ef2a2091ec2fc91dc8fcd6edf1d9ae2c2da065a6eb425
SHA512a8baeb445b4daeb9f8d07e6b38c88a24a9010e11b8599e0b49964b232842f5c3c71776918d452fd2441ab05e251dbef7599f1d6421c121775fa5172f7861d02c
-
Filesize
16KB
MD5a0611b5805a09df726464787aa387bea
SHA131538fab1a396b82473c357ce42e0606f4dcddc6
SHA256d1f8f0fb6c333d8ca62a1ec19bd11f156bf088d77b2d5e632b74d6c65e67248a
SHA5126a2e3dea26cac4a4adf8783c11a192e4529f37bb9d919d507aae7713efad683efecf62da90e7e3eac71d0d1f6d44c5c47e0622ab088bc5d5f1b478453017f6cd
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD51654c9f2c362f7f6afaafa8d017c47a5
SHA12c1e91f21ced2cc5c092b9d65c7e6f7d0e8309bc
SHA2564157e884fac48116f42fa1cbc15a32720aeb1483f34523b724c46a2c6e038951
SHA512c1c0a2664a6441322b7843da3de4b3c8e0c487d6eb59b09448385087be80f52bab251c7541b8f9632dd4de64df8664c87e3e1f5309f9b9492a47f644b5b6ed7f
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
88KB
MD5a3b4a594952e763b8c8ab2e890d8a36b
SHA1cfa3bca2e94587b2f53851389b5d37c538c5a9fe
SHA256f069f7bbdcc46beedb72a8c781ce63078e74fef8b176ef95d02dcb1e240b54fb
SHA5124a0fc9b8128ed495e819e7c95edac9c0fd0bbf10e7d2bd71954131f57ce5ecde2322ea67fc5edab81fbd4be30789eedac06fd387e2f7e7277b200e9147bb1f55
-
Filesize
16KB
MD5a3fe9aeab056e308a0c0bc2ea52c273d
SHA1dc23de633e467f6321e70c6abdd5d14aa9fb17e3
SHA25687b3d8654f8794cb118fc40f6bfae7afd176a5a333eae6729e33450367cbce59
SHA51219c94e7f718809486090daaac192ec5460aea364123a9684996448675c7b97bc952e1cf484c2d57eb4cb052ce8375139392e2559cb29975f0cb4188b75fa5fd3
-
Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
-
Filesize
257B
MD57a6906f563dc1cde38d22dc6201f3e38
SHA1cf6fff58d732d923fbdcde97f8e881cd8c2978cf
SHA25653eaaf04b1d69abf5a0f30565b588e1b860b420a3ac072454720426d4ae43ad3
SHA512d8b53c7f26db7589f478e56d173dd7e0402c48c7d50e3931619c553b5e04d9346bf777328d41ef3432935f6712eb3568f1bc765e0c7b74d9c526ad14668ff54e
-
Filesize
63B
MD5f6fe6b05692e9e05307dfb95a3aadd3c
SHA1b6731ca6615948f05331cac090a4ce65ac8bd915
SHA25668fc925269863efcac00ce6c3c19ce2b7b0d5a762826cd999d60e1ebbecb175b
SHA5124ef57202e87404957a463a905dcefb9f24be6d638248416e7226df19ced7e011819b8721ce9ea13a9c6d4b38569a8d4c20ec91a2c35f8173372d420db4047cb0
-
/storage/emulated/0/Android/data/com.digitalproshare.filmapp/cache/UnityAdsCache/UnityAdsTest.txt (deleted)
Filesize4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff