fadb7686d81a1bfb3029f33fd08de4ce26402d93b3be30a1f661befac197b811

Analysis

max time kernel
4s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
17-05-2024 03:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

1ef0c4d0484f9c859cc0e61223d71579a817736bf741bc6001dab472a95c56b2.apk
Size

2.8MB
MD5

83ae44741a62282a0133cbbda73cb65f
SHA1

d2ed103e8aa54981b02eba1bd20039dcc4c3d945
SHA256

1ef0c4d0484f9c859cc0e61223d71579a817736bf741bc6001dab472a95c56b2
SHA512

f54afbfd1bbd5001dcbb0fc2ed7b52f1da61f31c7938181f5a892a5ff6dd6685bf337f9696381b6625d30fa01335d880477f5c2f1b15dfc21d424b6ddb4936fa
SSDEEP

49152:f/QOZrOHIERZDYQEhuErSdlHdEcHDiwy326P4vUpOspgDAT4cfO0teaHrpyId6J+:3/uDbEhuecHJeiWOspuEl5UasN4

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

Processes:

com.mycarroll.app

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.mycarroll.app

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

Processes:

com.mycarroll.app

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.mycarroll.app

com.mycarroll.app
1⤵
- Acquires the wake lock
- Checks if the internet connection is available
PID:4615

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.mycarroll.app/cache/~test.test

Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit
/data/user/0/com.mycarroll.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
4dc4e468abfd91bf65d133699d23ef7d

SHA1
9fc2f7cfeda38aed2e5a243a0463c79c2cbc6061

SHA256
c9400f4d8dcbc844d80adaf34a021f8007516b37b9b5246c45ddfcd41a615e5a

SHA512
0e10c47d547e19e7c8cff4eba2f77dfa7a902fac6efb7160a61b2d8b23580936d80ddac5dedef4b46cddba7342b3bf13d15c284b4c595a88485bcac113afd62b

Download Submit
/data/user/0/com.mycarroll.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
bc854b50b715bcd746402fde3c0d2791

SHA1
844ec8a79904ffede05104047a1f51802d589a37

SHA256
1144f863b5cb29d95c2f71ba81b4d89a4853294d52be9b8f31eceea086512d1e

SHA512
2388a790d1adc3c2d86a768d5fd4d632c44c5f27b64798a18d755f8ee93bd37fc6275cd9a5c8ae7e1e11ed520870f112fb84a60cd093434605dbe64604c3827c

Download Submit
/data/user/0/com.mycarroll.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f21614f1808e2732735f59efe7c1778c

SHA1
6f32799449593a3003dd896bac758ebd6042a31e

SHA256
9330cfab0a1279a3b298acf04a8ba5ccd2b11bb8b82a4f8018a36cbbeb769cc9

SHA512
a60542a850182da18e58e352b6acb102517a70a69e7317923f9826570a6de473b88378907f0520bd7ccba880d20cf0e2cd6667ffa85e2d0ec14a3bcde2678bed

Download Submit
/data/user/0/com.mycarroll.app/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d9cf75fdd1c2292d986f6c3d5d60f2c8

SHA1
07ecb1d3a26d952ae5fecf54f36699ab498510b1

SHA256
2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

SHA512
442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

Download Submit
/data/user/0/com.mycarroll.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
a28dc4594c1a02ce07340ca40fa8dd02

SHA1
3366260babb2799a4a42190dde05b0a2c288ac1f

SHA256
66bfeb64f4d1f4bfd13a47410053decf995ea3c2bcc6ac9c59ee614a5d53fd9a

SHA512
428c2c6abb46e2d73c0463f8c758f37c958b9d35a5689e4fb887f343d4928a0e9688d17cf03ad6e62d077bb7d9d55af9dee92ffc8463f59e7e124a249fbb88c4

Download Submit
/data/user/0/com.mycarroll.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
915332306915fa187ec9d5b5c3ea5765

SHA1
57421245c9c7ec665949b280beec5f876a653984

SHA256
6005146a63784623a9d218879eadf694563a3abeac45cd593084e83bdc9fbece

SHA512
1ae040014e8e072150fb27c4631cd124e8fda3ad46227b2bac4e982a2334ce7ea480a071a11b2d03edd123b153a69cbaaada2a9474c737bd336694392df126b5

Download Submit
/data/user/0/com.mycarroll.app/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
2f5cc34c40d2bf6709fc9fd257f352f0

SHA1
c5512202f646c0f9b0856ac85144d3aa8eacf143

SHA256
8ceaa7d4fe5dc78669e4e6392b999c4b970c783b2c309d8408acea385107cfa3

SHA512
a92837150afd30415e5079123e4e15a69a34a6e7b694b959384ea7d89f69570e0205c8f17ce554681c971f19669f73d606195409a0af15e73dcbe4bdfb44b3be

Download Submit
/data/user/0/com.mycarroll.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
1c2421735cccca2d72410701119fb65a

SHA1
6b517c0c3169edeff671513c9e72ab0a7e5357bd

SHA256
e074b68b8cd7e830489de0d27e4e4cf2af4d4c899d749960fbfe1d575d16d705

SHA512
aa77ea543ae0d0230c7812e9da145cbebeb9163b6fbffe023c22a7c768a647019c9fa6b74826cb76f29c4ebbae2bfbfed92237ad9d035f615cbc8087ae87c6f2

Download Submit
/data/user/0/com.mycarroll.app/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
87c994edd53acc4967d6fae2724793ca

SHA1
b9b022a78f9a9a237057c05e67a9f5b819dd2a0b

SHA256
ec5cef38a634b84a129c826169ed8d5f6d1f57fd43af12ed2bbc796055681b24

SHA512
80c17b304f7694306550254934d881ae0b6b6b8dc6d9f5f7cb861729db369ac2d6b2a8055833f163435e97a074c2cc5750cd556b78947382b8e3cffae76c1764

Download Submit
/data/user/0/com.mycarroll.app/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
b93f33c2f10c96d08e24b11c54235c83

SHA1
3a7aac5e18af22d9015416c11a353019aec1e36f

SHA256
d9de2c42fd9a31a99d8b407ab27c087f3af2dc4bf421535672a799ff88809de2

SHA512
133130af0d6d2c036d08c8672a80c6bfbb146a93fd6cf85e4f5208cfb1dda2150e804dc66dfe6b44a209c206935e0992a8ab60bef6abbddd12f9287ac781ca67

Download Submit
/data/user/0/com.mycarroll.app/files/PersistedInstallation2637637356825286130tmp

Filesize
569B

MD5
eb35fd6c021e2de72254b72ddc7b067e

SHA1
f26a9e26c513e08b87a19fb2d847846659bfaf65

SHA256
2e4953de337fe9c93eac3e12bc8d3509e701d1c66f114ff2ef61148fba8cb95e

SHA512
8eee824df412e0e44ba947f3c49e8543b2d3348657a1180f4f8557ef3477edd869b8d3830ad680d9ccd274e7841b3d75ab88f2f2e18b0ec7191b90621038f770

Download Submit
/data/user/0/com.mycarroll.app/files/PersistedInstallation3434459993514535661tmp

Filesize
90B

MD5
9b7630dd888285175dec7e211f2508d3

SHA1
1565d2d6a9bd2956ed8232bcb475fde6f3d15c3a

SHA256
bfba7911961be630ab11d9b94d864892cb726557c2723edb720226d8c0167282

SHA512
35718950882c51d59f5140fa988f5a7a7d3f5bbfa5194772e5401ff8c2cd3d30049ad4c15b50315f71617afebd340920326586669c8ec5748d00c1364828a341

Download Submit
/data/user/0/com.mycarroll.app/files/port.txt

Filesize
6B

MD5
b143bb9b14c916972f31e4ce92ce9fb3

SHA1
9d365fb5be0934e134cede71eaf6c29e5170f656

SHA256
bab3ce5611fdd6dcb48e24c4a8f7d34e2f0b2eaca95418ce0c26152e8f2a844c

SHA512
89993f29ebad7daee5fe55c460082c86eab646647666d2d6113dbf8c7739bd42425857f539b1c071dba7047c590b4ae11b95b0da2f4de3ab9a95639046453ed2

Download Submit