92f211adb0da4cd916dd9f7e74582abe2fdf4d35fc590c99db297114949c5643

Resubmissions

10-05-2024 21:08

240510-zyvnkacg68 10

10-05-2024 21:06

240510-zx4j3shf4v 10

Analysis

max time kernel
7s
max time network
150s
platform
android_x64
resource
android-x64-arm64-20240506-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240506-enlocale:en-usos:android-11-x64system
submitted
10-05-2024 21:08

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

FilmApp4.4.0.apk
Size

13.3MB
MD5

ad8685363a026eb8a22c8eb507d1cf08
SHA1

1e1ac8dc688841052c589e533c4f39d334f9f858
SHA256

92f211adb0da4cd916dd9f7e74582abe2fdf4d35fc590c99db297114949c5643
SHA512

5d4fb4e8ebfba021fc4cb32c3f2d42c0fcfcde7843dd588b3a3fc3658f641034e27c71deec49fa0e5cc7aac0bad94cffc754b47d81599859c02c922bd66b1e43
SSDEEP

196608:Of7U2ybMql+wzQ3CFO0BEetR2kpXPhJ5jWuhM6GrOiJbZhmqH4DxhIlltNgB6CXP:Q7Xyb5zj/ppJRWuhpMvbZEqHdtI6CXKA

Score

7^/10

discovery evasion

Malware Config

Signatures

Checks CPU information 2 TTPs 1 IoCs

Checks CPU information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.digitalproshare.filmapp

Checks known Qemu pipes. 1 TTPs 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

evasion

System Checks

T1633.001

ioc	Process
/dev/socket/qemud	com.digitalproshare.filmapp
/dev/qemu_pipe	com.digitalproshare.filmapp

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.digitalproshare.filmapp

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.digitalproshare.filmapp

Legitimate hosting services abused for malware hosting/C2 1 TTPs 6 IoCs

Web Service

T1102

flow	ioc
42	raw.githubusercontent.com
43	raw.githubusercontent.com
97	raw.githubusercontent.com
99	raw.githubusercontent.com
100	raw.githubusercontent.com
114	raw.githubusercontent.com

com.digitalproshare.filmapp
1⤵
- Checks CPU information
- Checks known Qemu pipes.
- Acquires the wake lock
- Checks if the internet connection is available
PID:4814

Network

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Web Service

T1102

Exfiltration

Impact

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.digitalproshare.filmapp/databases/androidx.work.workdb

Filesize
4KB

MD5
7e858c4054eb00fcddc653a04e5cd1c6

SHA1
2e056bf31a8d78df136f02a62afeeca77f4faccf

SHA256
9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

SHA512
d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

Download Submit
/data/user/0/com.digitalproshare.filmapp/databases/androidx.work.workdb-journal

Filesize
512B

MD5
2268775e55f4238d78020fc154599f53

SHA1
17a22e25eb3f9e27867813376be76b237bec536a

SHA256
f2adad20dec4b617729f483c2fe2bd3a036ee13f9331ed15057edb630f5926c3

SHA512
8cb559599c5d88235181374df09ba8874a9084d79074f9edecee7375f6a02402e62e36229fdf286e936a1f129fa0a79709cda6483dbbcbea478b3583ac7238f2

Download Submit
/data/user/0/com.digitalproshare.filmapp/databases/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/user/0/com.digitalproshare.filmapp/databases/androidx.work.workdb-wal

Filesize
88KB

MD5
ff3724312fc72e583da3daf6c88661b6

SHA1
53159d328b76ec4c93ed92267ff1b787df068323

SHA256
006ef7332bb385b5756c63a830bf5e5c5b410a93993eb127bf0f5cafac983f15

SHA512
79d4e7f56a41fb32d9666cc94da3f74a37568326df451c187b1f3dac69263cbb806b900cc26900ade05a7c4c16a6941b472f297fcc187228c27d46068bc2f8c3

Download Submit
/data/user/0/com.digitalproshare.filmapp/databases/androidx.work.workdb-wal

Filesize
16KB

MD5
a3853fc54a2bb32ce81cd3e577f1b677

SHA1
65ecdd80e0b0a72569cb3f53f5d24692fd99c1eb

SHA256
643483806e53135a548a9e1a8b446555ccad47772d7791d32636658166a9750a

SHA512
123dde9eb26b03d2880d0dfa8aa85160f0ce99e79a72b6f28b991ba8d61c0b99e2d9f04a9b69378bc7f96aab4a418496e53ec0c08a733327d9312d503bcd122c

Download Submit
/data/user/0/com.digitalproshare.filmapp/files/UnityAdsStorage-public-data.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
/data/user/0/com.digitalproshare.filmapp/files/shared_prefs_sdk_ad_prefs

Filesize
257B

MD5
040f64c798b4b95e26739c5813c31c54

SHA1
5c3703d103fefc96c8ce2a38c7bd0738ac225f4c

SHA256
3b348b8fcc80592bc4ce85fd3b954431458be048c6888257ad2a773c6ba48df2

SHA512
4f85b85a75228e77189f47db0d54367d1f1528126b5acd9962de2c78b336e8aac0092e46d81df794ab5a1268b0f2fd30985db748b77b44316061641199cd7389

Download Submit
/data/user/0/com.digitalproshare.filmapp/no_backup/com.google.InstanceId.properties

Filesize
63B

MD5
81ab297bc0b77e86975bd1b35549abbc

SHA1
ecb8ab435d1c984e25d860f82afc7a51f7f26824

SHA256
93e017baf32a8b37cb4de1c680ef357e93dc8af901972c5540784e5b8b6017cc

SHA512
c7ad526403c88a4bb298ad30b60d1e82da89bb8026b2874f4669a806a10f36e2f1b2bbb1c01e47cd47023a1b26e9b7f4cc8013ccd991fe92c660420ac4695112

Download Submit
/storage/emulated/0/Android/data/com.digitalproshare.filmapp/cache/UnityAdsCache/UnityAdsTest.txt (deleted)

Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit

Resubmissions

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads