Analysis
-
max time kernel
8s -
max time network
137s -
platform
android_x86 -
resource
android-x86-arm-20240506-en -
resource tags
-
submitted
10-05-2024 21:08
General
-
Target
FilmApp4.4.0.apk
-
Size
13.3MB
-
MD5
ad8685363a026eb8a22c8eb507d1cf08
-
SHA1
1e1ac8dc688841052c589e533c4f39d334f9f858
-
SHA256
92f211adb0da4cd916dd9f7e74582abe2fdf4d35fc590c99db297114949c5643
-
SHA512
5d4fb4e8ebfba021fc4cb32c3f2d42c0fcfcde7843dd588b3a3fc3658f641034e27c71deec49fa0e5cc7aac0bad94cffc754b47d81599859c02c922bd66b1e43
-
SSDEEP
196608:Of7U2ybMql+wzQ3CFO0BEetR2kpXPhJ5jWuhM6GrOiJbZhmqH4DxhIlltNgB6CXP:Q7Xyb5zj/ppJRWuhpMvbZEqHdtI6CXKA
Malware Config
Signatures
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Acquires the wake lock 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
-
Legitimate hosting services abused for malware hosting/C2 1 TTPs 6 IoCs
Processes
-
com.digitalproshare.filmapp1⤵
- Checks CPU information
- Checks known Qemu pipes.
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
Network
MITRE ATT&CK Enterprise v15
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD50f34e8a7aecf17ecf3fb065e200f7c2c
SHA1e465de8b8b404e9a9c8640697a94b8071ba54658
SHA256f23e68ef2311b7f389873e9982e9df4c72d614222ae80ec35b8d2a343e87c0cc
SHA5128d0f485a019ea65ef29510a9c3de0245f3e3a8ee63b2a7e08286048ba39a1b92bdcd9b94a9dcd852891be5178cb8ebce44e4f1928c40d665a304c44939fa7164
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
88KB
MD569d22d06e24f414b1df8cf8bb1fcf7d2
SHA12b2a055327993c0e8041e9ac9e610c58d14c88e5
SHA256a0a6a309cec3f414e46ba9c9d6dfefcdfdb6445afc438eb776bbce719c4d8b45
SHA512bc43866f36546b817caa6b1457145919d0ae9fdf792727f804885b560d5420d9710f709c8d06c3d478ad31ff8c547818a24c41f252458441bbdfe31011037b26
-
Filesize
16KB
MD5cfbeec959b99304f1eb27bbc56f28d2c
SHA13d135afe573ed337529a6a37754bd3f3ce9fc2e5
SHA256cd0d85cb89c9f063ae3f362ea3c71a4975407cb38f477f80fc0b7292445190a8
SHA512923cc398a6b15a84a9c0289a16fe036a5a95a3f11b9fb8e0f138386db74b5b5fd68d8c51e4f9aa1b517382dfd49284de8c9c440b6fb5cd8594b395e046bcf5b4
-
Filesize
2B
MD599914b932bd37a50b983c5e7c90ae93b
SHA1bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f
SHA25644136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
SHA51227c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd
-
Filesize
259B
MD5f91e160f65b9a8f0a56c566d4f3c131e
SHA1e56522196e027324403a39a841f9662a47a51849
SHA256ff2f9c4d098c1d5941f84901189b2f335d7d6b28ab41f174c0de976a6af9f664
SHA512e72e999d80bd5f42f7c3811cfd849d3ececf5e843c5e1b6caeb0c287f637e7a6da024278dd2098791d5b0b233db20d3f8962b7afbbb8284f31bee98e5f0d3f44
-
Filesize
63B
MD5869733008f8bba9c75d712ada5e66dd6
SHA1b607957ab914b233b8eec0f7b1d1e16ce5080f69
SHA256e09b14c7c5eacfbd4e9ae98c7006da56912f48103ba71a4b2fe89268b5da5d90
SHA5120dca3996c4994f25d0191061177184dc8f89ec8ae82e519d0f17be5e3b358f3d17f0dd9136b107acb54eef10e22df2b901350d434bc706d9034746c060273c8b
-
Filesize
4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff