f9a66340c0d1af937a27b9eb2f2997bd90aa4ac3b16f7b2ac5db71c93534c544

Analysis

max time kernel
66s
max time network
148s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
21/05/2024, 22:01

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f9a66340c0d1af937a27b9eb2f2997bd90aa4ac3b16f7b2ac5db71c93534c544.apk
Size

2.2MB
MD5

1ef20c5fea7d23ca0c3d369a05200047
SHA1

1b5d31af4b6a97ae049607c803f9f16b48696ed6
SHA256

f9a66340c0d1af937a27b9eb2f2997bd90aa4ac3b16f7b2ac5db71c93534c544
SHA512

31825a71bfc6ea9d9b575840df68fb3858168a61ddeb6a150a9e41a0b34d91fee99e1dadf90b40da390bb89b7f96aad116cbe58003b3ee58575f1ae3c24f23ba
SSDEEP

49152:SORjOY8nzOG/tieyPpNtttttttJd8yRDErpFji23NnZwMnf:sYozBK98y2ji23NZwMf

Score

7^/10

persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	c94.hjk9.cghgg554

c94.hjk9.cghgg554
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4252

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/c94.hjk9.cghgg554/app_sslcache/au-859ef-default-rtdb.firebaseio.com.443

Filesize
8KB

MD5
1eea1ff6b36d8dab41e669416a94f0db

SHA1
9c466eafb9371a696e7ee245d305611582479484

SHA256
90326b5cf4d1530c57d2b2e94b04d5019da79c25fc5bdf2ec9b4e7130a3ed074

SHA512
f59d950c36904c22c83b871bf61b10d598dc3bdaac74486a4667acbeeb0a53ebf80820d6599da1248f11446694964d1be25a14091cb2697bc7e59f1516009155

Download Submit
/data/data/c94.hjk9.cghgg554/files/profileInstalled

Filesize
24B

MD5
b92512a43beb1b50cbea740dc6c9a3e7

SHA1
a166754902b41b1feae7b866b7badd8cb50cad1e

SHA256
ff5e1acf393febba595ad506c2c739935a4cf1166c71e6c456a7296378c9d8c8

SHA512
892b0d550fc7f3c5f7fcb3cc68c095bf06503d40b96107a17ee7e56aa9f01b80cf7f7dac1d8eb65edab34e63b648a5fee66a143560b04a3ddc74af100189117b

Download Submit
/data/data/c94.hjk9.cghgg554/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
76d848f8c19fd078766dd8675fc4b84c

SHA1
059732288b5fa3c78d8366764ace8263cae03d4e

SHA256
cb1ea8b31f39d01118053ce4f16b534f56e48dfdecae598286f4950db57ac2ce

SHA512
c6cf767b30f416748a8eb67712a070edc443642663d2980e24c3ed9bc1b1ce6f4c5c1d2a0ea8e8559aa6cbfaba31512b190c58ce026709ef4190754798a5e4a2

Download Submit
/data/misc/profiles/cur/0/c94.hjk9.cghgg554/primary.prof

Filesize
1KB

MD5
7e9308786887209030dee1c0349cdae2

SHA1
37f7a72401bdf456d5c531156985367812db4138

SHA256
8cd7f50dcfe64f50d7f3424045854d9e6f121190bae96f64a712ae94a09611a2

SHA512
c2ae753bae681e1eed37d24cdc7ece602597dba2a91bcac7c50f01000bfd4ae0a44aca615ef3689001cdc3eb5f41fdac6a022feaf468d2555d5ebaa0c1835037

Download Submit
/data/misc/profiles/cur/0/c94.hjk9.cghgg554/primary.prof

Filesize
2KB

MD5
4975bde9f722f05e4dad20a04cdd7991

SHA1
2c649b2e8c7954b2771f1caa5551aac412e34f09

SHA256
c1e15fc938c7dbcc00ce018f4e6c147dd0ff2b1b8583f9e5368915dccbb9d88f

SHA512
6cb71f93e5608347e55d36bf6e163346ec5a07b19291ebfa0e0aa9be105b28ca16c43a39a1cb6ebfb59e3e588eeb7988c4bab0f00209ffa051804d1615d99504

Download Submit