Analysis
- max time kernel
5s - max time network
170s - platform
android_x64 - resource
android-x64-20240514-en - resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system - submitted
16/05/2024, 01:06
Behavioral task
behavioral1
Sample
1ef0c4d0484f9c859cc0e61223d71579a817736bf741bc6001dab472a95c56b2.apk
Resource
android-x86-arm-20240514-en
6 signatures
150 seconds
Behavioral task
behavioral2
Sample
1ef0c4d0484f9c859cc0e61223d71579a817736bf741bc6001dab472a95c56b2.apk
Resource
android-x64-20240514-en
2 signatures
150 seconds
Behavioral task
behavioral3
Sample
1ef0c4d0484f9c859cc0e61223d71579a817736bf741bc6001dab472a95c56b2.apk
Resource
android-x64-arm64-20240514-en
2 signatures
150 seconds
General
- Target 1ef0c4d0484f9c859cc0e61223d71579a817736bf741bc6001dab472a95c56b2.apk
- Size 2.8MB
- Sample240516-bf5ttadd84
- SHA256 1ef0c4d0484f9c859cc0e61223d71579a817736bf741bc6001dab472a95c56b2
- MD5 83ae44741a62282a0133cbbda73cb65f
- SHA1 d2ed103e8aa54981b02eba1bd20039dcc4c3d945
- SHA512 f54afbfd1bbd5001dcbb0fc2ed7b52f1da61f31c7938181f5a892a5ff6dd6685bf337f9696381b6625d30fa01335d880477f5c2f1b15dfc21d424b6ddb4936fa
- SSDEEP 49152:f/QOZrOHIERZDYQEhuErSdlHdEcHDiwy326P4vUpOspgDAT4cfO0teaHrpyId6J+:3/uDbEhuecHJeiWOspuEl5UasN4
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.mycarroll.app - Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.mycarroll.app
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.mycarroll.app/cache/~test.test
- Size 4B
- SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
- MD5 098f6bcd4621d373cade4e832627b4f6
- SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
- SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
- MD5 SHA1 SHA512
- Path /data/data/com.mycarroll.app/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 f87366661eb1757d48a7cd1ca5cdf40191ce71a3942cab3754db76035627bc79
- MD5 ce1e913b69bf61975d98228d41d238a8
- SHA1 a25da66ee4a0e6306f4f652fcd1959f1cfe29a57
- SHA512 11889638af750e64910ac961c301602f6efa53f8558ffbfa623f0d1d8ab03c4d6066b954a8a553ba2449c119009d0b6e0ffe3a8873e47419adb833b9d07c6154
- SSDEEP 6:l9bNFlsls1ylO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6GRf:TLiEy9zmzrfRmBEyPbP/P+/0Fl6mOo7
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mycarroll.app/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 077aadd6f30f56258d9bd9819f8d0c8ec315ffc8049cf0fbe99392fc1e4ef6a1
- MD5 9eb22a2c3eeeb721ff5d94babe5c4f38
- SHA1 d78791e4943c73a20df89a3852b2552cf0b8bd1c
- SHA512 f822867caf8802e47a3ed3072754a522b948fda6ab54088850d5025164c2eb4a1cac2ef02b676d8bcd68f48d14fb8c13d1414af1dd16af6890f4cf4b4c83a882
- SSDEEP 12:TL1Ev9zmzrfRmBEyPbP/hr/gW49blqYFlieKDV+/0Fl6mOo7:TLQpmzr0GSP/h1499F5K5lFBv
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mycarroll.app/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
- MD5 eb52a90bb70b76e946b62f50b6f7fb85
- SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
- SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
- SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mycarroll.app/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 e84c0ee1efd4820160c9149b1a526ab7e1d910266e1ffd2e5930bc7eb8ff3a46
- MD5 26362657da70151579e4ad117937ec1f
- SHA1 b79fdd068ed84533bf260b7333056be935c3ec98
- SHA512 7f1ac0cc8e3796b38d9e6be834fc372c07860d8904ba52c4bfcefd02720a50e13401a54ffe50d3e1da4057031215ce9c5a0dd00b23f5d3d158f7a72d23a5e4bc
- SSDEEP 6:7+/l9mrg9bNFluls1EhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK4:7+tUrqL8EEh9zmzrfRmBEyPbz
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mycarroll.app/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 f340e33bd6be414d384d3d5da42861fefcd29449667ad77e5292ce1be2deccf5
- MD5 e7ca2897b6c1e6e9744e47197876d955
- SHA1 9b881d846f62e3745fe63be0a9fd099682c9b1c0
- SHA512 09de7562745bd070b22b6e497441ff5dfcc2b03a14d3b094ae4d7f895a0a9c2d618c33ba42a7a4d226ba3aebfb8fbfa48edf2988e34be84f7dc2cfafb0d1ab0c
- SSDEEP 12:7+tF+/0Fl6mOoFvqLiEy9zmzrfRmBEyPbtn:7+tFlFB5vqLApmzr0GStn
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mycarroll.app/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 c948b70b27c7e8e8c37a5a690a6a12e4648c04ef6a0a03b617e0935be1caf492
- MD5 41a4e01cac58131c7bd961639698d70d
- SHA1 1cd5f507970f9c0008ff50468f56b76e997c7e73
- SHA512 e256f5924e2d62a138e8492f73b0e6db2991ded14ea92d1711cabbed48a5c076c973a1d0c70e28d5075fa4ca07f60d8a4ac4e8dcd3aeb6ad701c45651e6bfb68
- MD5 SHA1 SHA512
- Path /data/data/com.mycarroll.app/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 0e4f39b09ab654c610aefee2bc5ff89c3131aeca6edf5bd11112fb949fabf955
- MD5 b6757d3499e8c0671d514d1f600fa1d9
- SHA1 b6b09fb5929b675348a65557f4e7fbd1760ade83
- SHA512 418fe09127b4efb9cd3c87ec6f128aa54bd67e209f1a043027692b8d70dab4d84c38f1d9826e2ae51d50137c52bb342742b326c160099259df5d7e107ad54380
- SSDEEP 6:7+/l9G4n1yg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKv:7+tsqLiuWdwRmBEyPbA
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mycarroll.app/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 8345fb85c6ee1aaf1c49fa1df9c2957c0eb52e0476fdc4ba1bad1e8eceea5eb9
- MD5 3e89c90e5b8eaf01718c3ac2ce0dbac8
- SHA1 ab032a1ad8d474a7b65e311aae0cc09712a928ff
- SHA512 a08fb1b1345e2c3eb8b907f6f821ea76bf8909ca72ef94086223befdcbc446e77190c550f0bb62060a9b20e427e08237ebb73d2f55c960fe288fce463b1adbae
- SSDEEP 6:7+/l9Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuK6h:7+tZqLJdTRmBEyPbLh
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mycarroll.app/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 5afc6d591aada686c00de349685e75a613414ba46998daba62452891a1f95b6b
- MD5 c6d8c8fbcb09d3b2e6a24a09ae438f12
- SHA1 219ca3f2ac4bd54860c4f407825efaad361b674b
- SHA512 e53cdad3bff22b3f8f35eff8ae0bd73679dcaff3097d0101ee10fb9a54704e4dcc3d732a37877fbceae91bbf7ddd0f57c5cb61efa2a15c266c89cf15f6d0fd93
- SSDEEP 6:7+/l9agPg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuKij6ts//G:7+t84qLmqCRmBEyPbEsG
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.mycarroll.app/files/PersistedInstallation3477351480173284065tmp
- Size 90B
- SHA256 52f81891ab283eeeb0c26e7bed8357b6981a10cb2679a998e46c6d8c85077f5a
- MD5 17169d7837810ce3259611be0f9e0c0a
- SHA1 22ecfd37a4b9fdcffbd73d6618bce00bd08252dc
- SHA512 b838eaef1661120c73a7df6abfe4dfee46efab2b4b19dac38c6657c6290bbce302827859ef78ea21bc039211ff1bc9dc32cfbb7890d21a33dba142131daf8539
- MD5 SHA1 SHA512
- Path /data/data/com.mycarroll.app/files/PersistedInstallation7787334119095824275tmp
- Size 570B
- SHA256 6f8bcc480c901ea8aa3f8eced93f11a58f6622d1110e9166e2f4c16f17a793ee
- MD5 81ec39188f8c62adb61a65b7a05fcf73
- SHA1 4b2433ee2c6c06b00cc70c0e65cd3fc9384b941b
- SHA512 f98035173230744d4835023cd4deaff81e2575e4c349391c34c9ebf8b99157a13612b97bfd1f5d3c462647c1538b8d85fb8242383cfadf0564d3b0799a746968
- MD5 SHA1 SHA512
- Path /data/data/com.mycarroll.app/files/port.txt
- Size 6B
- SHA256 bab3ce5611fdd6dcb48e24c4a8f7d34e2f0b2eaca95418ce0c26152e8f2a844c
- MD5 b143bb9b14c916972f31e4ce92ce9fb3
- SHA1 9d365fb5be0934e134cede71eaf6c29e5170f656
- SHA512 89993f29ebad7daee5fe55c460082c86eab646647666d2d6113dbf8c7739bd42425857f539b1c071dba7047c590b4ae11b95b0da2f4de3ab9a95639046453ed2
- MD5 SHA1 SHA512