Analysis
-
max time kernel
8s -
max time network
339s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system -
submitted
21-05-2024 13:52
Static task
static1
Behavioral task
behavioral1
Sample
aa527745ac7d2caaa8010b591aafc1631c29ff6217bf689dc4245bfe50d7e2d5.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral2
Sample
aa527745ac7d2caaa8010b591aafc1631c29ff6217bf689dc4245bfe50d7e2d5.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral3
Sample
aa527745ac7d2caaa8010b591aafc1631c29ff6217bf689dc4245bfe50d7e2d5.apk
Resource
android-33-x64-arm64-20240514-en
General
-
Target
aa527745ac7d2caaa8010b591aafc1631c29ff6217bf689dc4245bfe50d7e2d5.apk
-
Size
7.4MB
-
MD5
589427addc1786f27efabece4f062ecf
-
SHA1
8a32f6a2f51c02783fbabf03e1ba033b6cb87473
-
SHA256
aa527745ac7d2caaa8010b591aafc1631c29ff6217bf689dc4245bfe50d7e2d5
-
SHA512
9920a62f8eea6c52898b7137f69b52f8224614970d9bf74190df16ea78d288c83f3ae1db0cbd82c3256ffbdd00204695fbb595ca90ac26ca7ce1fd04b6063d46
-
SSDEEP
196608:4Scd7vKiHvqf1RgTK22w3gfygec7R7UbZ6mVuaKpx:4tvTPgg+HkPgV7R7UtvVIx
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 4 IoCs
Processes:
com.camerahd.dslr4k.proioc process /sbin/su com.camerahd.dslr4k.pro /system/bin/su com.camerahd.dslr4k.pro /system/app/Superuser.apk com.camerahd.dslr4k.pro /system/xbin/su com.camerahd.dslr4k.pro -
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
Processes:
com.camerahd.dslr4k.prodescription ioc process File opened for read /proc/meminfo com.camerahd.dslr4k.pro -
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
Processes:
com.camerahd.dslr4k.prodescription ioc process Framework service call android.app.IActivityManager.getRunningAppProcesses com.camerahd.dslr4k.pro -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
com.camerahd.dslr4k.prodescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.camerahd.dslr4k.pro -
Acquires the wake lock 1 IoCs
Processes:
com.camerahd.dslr4k.prodescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.camerahd.dslr4k.pro -
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
com.camerahd.dslr4k.prodescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.camerahd.dslr4k.pro -
Reads information about phone network operator. 1 TTPs
-
Checks the presence of a debugger
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
Processes:
com.camerahd.dslr4k.prodescription ioc process Framework API call android.hardware.SensorManager.registerListener com.camerahd.dslr4k.pro -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
com.camerahd.dslr4k.prodescription ioc process Framework API call javax.crypto.Cipher.doFinal com.camerahd.dslr4k.pro
Processes
-
com.camerahd.dslr4k.pro1⤵
- Checks if the Android device is rooted.
- Checks memory information
- Queries information about running processes on the device
- Queries the mobile country code (MCC)
- Acquires the wake lock
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4610
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
MD57daa8bf70cba1177c0aaa35143f5ff54
SHA14ddb8e3e373296808fd5a3832a454ea9c0c60b0a
SHA256f02ded6053bd0f124da16cdf40849fb201797ddfac5536ab36e1feceb21564a3
SHA5127178eae8e99b2f8b571bd333a3c6916bd088c96dc2c6d5b074ac388e58a345de6a82daceb39994019cbdc5c2d4065912eb0c52787ec50d9e1f746ba92bcee22f
-
Filesize
512B
MD5d24158d0cf6249256adb7f69c3244de6
SHA16ea84a67b236dd99e5b9c02d08cb3da5cad96e52
SHA256031ffb8b87a98ad2ade29fcbff073da85f4251ea0f80cfdc21a0b893b6fdecf4
SHA5128c635510db5b06a645675f14781c0e55b6963d63b6e308984e6d8d9de775a34d082510ca4b4af52b38c2f1608d9f7a4fb22d97b837944c248a5fb46b202d7d0f
-
Filesize
8KB
MD59edd4363e21c4ade1ce11fb5b3897e12
SHA13e633afb765a994b9a96c27432d929e494040434
SHA2560ae1ec4f938cfaf278f47b119ffc66febf224d8a29280b91164f40587f96f187
SHA51236357e165baf42b2b6ed2d8b8d8cecd652b37846a5740acd229a8c96b7dede5794b9d04a54f25490aa92dd4edc723cea4fae7fc1dc05a594d9d4be91f2ddc1de
-
Filesize
8KB
MD58611f42fdbbffe7994a91cac3dd89b84
SHA188aeedfabfd6d085cb65c63c0dbb13c46008bb7d
SHA256aec9969936f801e95cf59c08eb285f85bdfd6f23ad0bcc086af9709b34bf4540
SHA5129d23caa3a391e1506daf17bb1e1c448b9b841f4f9f9740a57e3a1db97b6a9bbd56ce05963e6dede53d5ba67cbde8d65f0cd9efc20ec0e10ad6b40cef446203a2
-
Filesize
16KB
MD520e5c472a14a4c624e4ef14078e75d45
SHA11c88feca3e37b9da7a75760d81f8484a77159e6a
SHA256cf4aa833335fdc517e2f6f203f21bfcf0d6eff6fdf3e8d17cd89a15539c15a20
SHA512519ecf97c6e7b0059782a4ace14541d85b5657900688c13263b4a4d8c8334d023751b2557adb92257cbbcf9eebb886fd81df2fc756ab1b7036ee99786cf29376
-
Filesize
16KB
MD557b718f3a00268a2e74aa89a4f623c22
SHA165922045b18d5e3edddc12e6d5c766fd7d49a6f1
SHA256712524524935766c8864770d1b7746abab0f37b060dfb7cd8bd27dda78cd62ef
SHA512f5a0744a841af13e8b5b5f1bfbf39de15f3f9cd95921a666041dd7e31f8d99d82bd70522ce3fcba927a7e1faa49f3da15024e4c9afeddd2748c24b96d96a97eb
-
Filesize
16KB
MD58d41bf477d713e375cad487651d2e008
SHA1e1d4f178399bb8d9a7f77a7965dbecbc7ed25a40
SHA25654c532134cada824fc41ec582998f3fb71cbfb91cbea5055488d76ee9b58727a
SHA5122a2a83f25cb8cf4f6bfb4974625e7ab1a1064ea18898589a91df69a9f60c3b408dc984958c6ca6a6ecef255dce05343b3d52fd2341bb60f40cbb6198d281e0f1
-
Filesize
16KB
MD5807afa26496cddc70f31aac93d801c7e
SHA17ba69dfd3bdb5f3829a7bbac848122c5710bbb7b
SHA25634b3553c8c0e0a5bf5a7e2a251224da352fac5ce74326822ac8c0d3126b83c0b
SHA5129e2ae0f2593a990806f8799f4f6e8a0bea7d3b9a491299a5818203be579dc39d6683d3533e8d8fb8772d7d7a64780033c4d525e0ab17d6251fafd3f05ebe054d
-
Filesize
16KB
MD5991941363f84d82b4d0145ce472c16c2
SHA1fcab282a3c9c242c1ea7fd92dea69af08f437944
SHA2566da221d3a048febb711f8b92dc000b7e4b7d45b29b4278395a25a6df99b8b4ce
SHA512428ec45c1a7d9cc14950ca1bbc39a17f7627681eff321aff9138281e68a509763b787a655fa5419f3e612b0a75b6c9adce4a35c24e838da44f13a50930958bdf
-
Filesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
Filesize
8KB
MD5b6cf37dc953b5fd7746248fb5d284b49
SHA11eb1aa86e6902b52a3377ac97eec457dd9b200cc
SHA25663616a650d7fa9070528733d23bff2afff07934a9e87c6f2f5e17e228b1f52b6
SHA512632c84fc9484b4328b3b5562ab127e499c8921c79becfe544b2a083a896e1fb28d14bb2e8e232adf0ad61341f0fa4456aa244ec91c7e7f0dc27f10ce7de6f1db
-
Filesize
4KB
MD500bc15ac28ba91ccf1f48b1186d64cce
SHA194b60cdb839561ae626f42991dc419dd374050cd
SHA2560a76f856e4bc5170177d01d5c1f3e764fc421b4d842e8c461178294f3a9342e6
SHA512c1d8ced7a91a20f44b4b5b1e36e72a72042187ccd45e80f1d75971dbde45cef8b567208342ed8022bdd4f2d0dd2643abf38407ae74f031f9c80ed84762fc4cc3
-
Filesize
8KB
MD5861645ac2be359ab1505bc83e95fa857
SHA1e1935c76f9b83e2027fa10f3def4a8e57ff8ea6d
SHA2562b688e4d6ba69b7033aed0e23b09bf4600e302bb2e80df2ceeecc08db5e16000
SHA5123c25cbc93f7821002b8ffea09d94e1bfbb42e25df8ab9aa871866e5d670e7a178fe1c4c15cbf0bb00c3768e437f49c01bf57162d67f1e5b2b9c73c977a9f39b5
-
Filesize
8KB
MD574af0b68ad72ba113cef451ee14ac763
SHA180866e0351c89466fc357f9a5ab5b7dd304aea95
SHA256d81e0d413640fab2ee8bd7eba829c7aa06ed9fc5ce558a68510fae8ff9c53aa8
SHA51263c2abe312ccbb458398e50f7e993522bb4e067927b376b3294393c44c0c003c0ee9e80babe0279e725abc786087d96cdc788f73fb309e38355124a8eb9c6d7b
-
Filesize
8KB
MD51ab5b3f20c1da7cad2535f2f83416f7a
SHA1b9a9f512f8550d2f4a3cbd653c5db05473da3da2
SHA2562e84af10e9114975508a4478afc3d59a6b1317b3e10a56e2233f785b85aac655
SHA512f0616da09f56d0704558d34cbf387ab9b3a64440e1bdeaa089b08fe09a8ac4f24f956ac45899fb1f5f3c550624d124af2d71e98550bf0c768045d081bfdfcedf
-
Filesize
512B
MD550919e4f00c782fd87f4e701ddd5d07d
SHA17ddf207f43c3401e3919262bc3140fc1c55ab754
SHA2562d09b0d7d88e09f07b0afeacf528d467aeace8027270b610805fd3d5db8a29f7
SHA51265179a326b76a820b701037f6f0db71886e6aa679cec1b22ffcc53df30ee2baef663ed38c49fb6d677271b8d255da5824b3c5afbdb302825afc8e8ebaddbfffb
-
/data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CA74D0169-0001-1202-ADD072C52BAABeginSession.cls_temp
Filesize77B
MD5ab159dae5ebbe27d6a166f512a449960
SHA1c35a5682d69b7a46c35c58576d47b54807c4c186
SHA256b22026227f95dbbdf30daa25a12dc89065e9214b47add15d4b930bb8f43927b2
SHA5122a450cc3cc68c5b268eebff73223828a8a2d39aff6db940b483a93841c5daf9806a5bf6b1194dae57abea7bbe87b2ac58c24e92692b6d1014106c810510ab766
-
/data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CA74D0169-0001-1202-ADD072C52BAABeginSession.json
Filesize132B
MD57c75398e12fdc987b7ef393367316a0a
SHA1ae0d82024ef58d76b0f0714fd30095857ca02db2
SHA25656905be71b5a55d269d4c357054fa354f1cec74eec5f88f1fc4e87e49f8d1f7d
SHA5123a9839903d6f26acdc22bb1946ad0c3d95f1d83b8eaf6a022401224c3f4f6466f8a9e33b8507a257e77a89abad13c911e7488ebe4d2f565794e90bb36fbe201e
-
/data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CA74D0169-0001-1202-ADD072C52BAASessionApp.cls_temp
Filesize117B
MD54d68835da26aa05c0d01355541606390
SHA1e2939d132542f609d6d91bac33d91d4b26368699
SHA25650c24dde771d3603010dad4dffb1d4622ae717df5f740066a7d277444fb34654
SHA512b9604205b95c42ff02dde7c48325fdbe690da3cd067c0c42ee87f5a15bd3bf42ffbd65230f0ae57258f18db465b2fcc99c1a34833b4257a516a54ba4e97f0cf8
-
/data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CA74D0169-0001-1202-ADD072C52BAASessionApp.json
Filesize231B
MD586dc0a6b2f31c9644741512db3db2bf1
SHA178ac7a73a9fbf06a95684599ad5a96b082420223
SHA25675d564a16429222da40ac04d01c26479d1d4eb3fa5dba19b80b658979674c6be
SHA51280e537ce353ee39e7bc61249e4c5fd6f1233c26ac026a6b38ca299b73272025b463e6032d9c36dc94532454e0ff2d6e4450f4223be5bbafb13c480af1fa30e0d
-
/data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CA74D0169-0001-1202-ADD072C52BAASessionCrash.cls_temp
Filesize39KB
MD553e97d271e331d7e27c71c5e9b7b8569
SHA180bcb2f54467395ddfd2d038d087f879fded2030
SHA25635bc04940fbb70f9d0a88d59745963eff1e18c3888664df4ff89dc5d9984e97c
SHA5129028c382bcb3daa0c159cb05817492cb20de1b1a68c400c3322196a5b3cc0affe4e49aa61b3c106b46b194f6affa285970a580f545792f251586c00881be6465
-
/data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CA74D0169-0001-1202-ADD072C52BAASessionDevice.cls_temp
Filesize48B
MD5fd6372364a5c5c9cf8945ac3ea7a5d94
SHA13c798cab71f6ae7a81e71e58712368231230588a
SHA2567400bf714ca32b64dd89440c9d5ace4e0115ddce44d169839e465df0e1638641
SHA512a18b18d061dfd979bce1e0b769009668c322300e7174f51d2532e86dc6018769194507a106dd30b97317f8c1a7539d13a7baeab2900c1e00da7c74e899dab276
-
/data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CA74D0169-0001-1202-ADD072C52BAASessionDevice.json
Filesize202B
MD5eeeb942571fa704cf8ae49731fbe9789
SHA1b5989c4cb932ffc779ee25bb3f7bfb79cf720427
SHA25678809f7ae96de01e3922b6d3a134c3f7e9a0cbdacef313f70e8d9345bf5fbd71
SHA51271e55c16f9f8fc936f8607448916bbfa1ba233b7120b8676fe11552916ac4dd3e3a7b0f9c31e14048933c8bb9c9d6d630ab7d28389f31749640cc965b2636565
-
/data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CA74D0169-0001-1202-ADD072C52BAASessionOS.cls_temp
Filesize15B
MD5b3d9541cc92a9153d14e5160f8d8c008
SHA12e1ac80eb381dd82a03795b682f92020348c0113
SHA2561ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d
SHA51278074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f
-
/data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CA74D0169-0001-1202-ADD072C52BAASessionOS.json
Filesize55B
MD5fc1dcee4e422d77e7fab7c08c8a41344
SHA1d5340127e9d5f735b9d33b9dc61c772fb0e2dc15
SHA256b843f05ed78cd137c272ba7f0ce8ede3aa853098a856863e51d5c223b58f21c7
SHA5123ec07617e3e1008572f6f2528de9d4b827050cc5a7cf19a1604c961f9ec370ede6f5fd83bfcc252c0ee286fe244ee6734046ef1aa638dcfc689cd4407a6a8f61
-
/data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CA74D0169-0001-1202-ADD072C52BAASessionUser.cls_temp
Filesize4B
MD53ed7a02f7ecd29e9a0da73bbd02b94dc
SHA1ac0e7b5b3976127f95e987bd1f27e504b343a305
SHA256dd385bd6d860af19cb2c132d628e3d6872d7b89b3bd2d50f56253bfcb84c78ae
SHA512115fde1208bce0530dea2a5ce627349653d304274582103eda80da3e254ac4c3963444af769ecbda4bc609d89b2816e6620c2eae88f7b3cf3c5e9de5491855a0
-
/data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CA7510172-0002-1202-ADD072C52BAABeginSession.cls_temp
Filesize77B
MD55205392bdc045f98a8c6a946fc18ee7d
SHA1e8c74424b9d81cf644d5e0e84f701e0a8e2e684f
SHA2562c53d1a74d19aa5759a97a9a91a5a265818e668ce1186d0d5157677f6282a55a
SHA51255072ee14debba5aa23cd38e5b98c45251b5c6d57797c5c7c4f7f8482d534e5e4fda77c90d55774235bc0dbbadc14e8e11acd13b8eb3f4df4c9080d221ee38d5
-
/data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CA7510172-0002-1202-ADD072C52BAABeginSession.json
Filesize132B
MD54b013abd765fde0233cb47e3236a219e
SHA15aa6b2c42e0a4e9fed7a32c616a1d57a0b7c88ac
SHA2562349be17263fa32b864a08d9880362e3aa120109cf8719583d44b1e41f5c1813
SHA51205daea980172761c081e5bb7ca19965cc86124a458b68daabfbbbb95847ea369af3ce86f49cd5dc3249f9b24bccdbe9e170311b114e62faded0a1251a909d3ce
-
/data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize407B
MD5cb97b82af6f16888b23d4c1c461a3269
SHA16a81dbfd570ca46a3ea4084f8dbfc9d1432da443
SHA2569d53fe7445b5ae6614f432294b02e6c3908a700e639fc46d47d86bce2a3bf6d2
SHA512bbcc5d7ae3dec10068a7b093eaca5e34a1399b1d396df3cb2b4e9d4a0921784af18cd3558bac98aa4c5a935328609422745e0f0a260a243e7205313786ed07d4
-
/data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize2KB
MD573d781c5d5541d01b0133439b2454963
SHA1f958deba7153e13914ac6b7b57d0ee24792cbbae
SHA2566715b274f982b39e1c1b15bb936dc6b0857591e2786b22b3b60ce0c2c586af19
SHA512c3dceec3f32e01e9ef584a846619641cb924efdbd4b24a44ce86ebf0a4245011929d33237969df5c0413887e92833d57bd498e3418133ab07bf911b72762f48a
-
/data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_86345728-6272-4ada-986e-e15befaa214b_1716299600446.tap
Filesize329B
MD58ecf3c1263c03ac398c99bb919ba5129
SHA193d923927d80e07f1a01ef3139eadf592d9ea581
SHA2564d42128605a6fddd5298beec13d436dacebd4f50b297307cfbcb582f535afe70
SHA5125de0723ebe8d55d3103d6c924ce56462d302d17bd36d90558a790d047836f320cd6a0f5bed7237131dd513f46bb807e4308f7c9c54937f37045a5c0be07e329a
-
Filesize
63B
MD585d2154d2a66a02d647206ebe0ef673e
SHA196c403576d63419057f4c1618d19eab0b9811db8
SHA256fd557340f1caef5aa8b488cf7f24efec7f77801b4b1a92403131784eb9aa5b92
SHA512e680f4de96473a0cfde5e72f5738e9d48acbac8ec7cfa2b55591767fa8f0370e72c5cc8eb988c44bb5dce5235776a6ad44ca3aea048102c7548738ae0999649c