Analysis

  • max time kernel
    8s
  • max time network
    339s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    21-05-2024 13:52

General

  • Target

    aa527745ac7d2caaa8010b591aafc1631c29ff6217bf689dc4245bfe50d7e2d5.apk

  • Size

    7.4MB

  • MD5

    589427addc1786f27efabece4f062ecf

  • SHA1

    8a32f6a2f51c02783fbabf03e1ba033b6cb87473

  • SHA256

    aa527745ac7d2caaa8010b591aafc1631c29ff6217bf689dc4245bfe50d7e2d5

  • SHA512

    9920a62f8eea6c52898b7137f69b52f8224614970d9bf74190df16ea78d288c83f3ae1db0cbd82c3256ffbdd00204695fbb595ca90ac26ca7ce1fd04b6063d46

  • SSDEEP

    196608:4Scd7vKiHvqf1RgTK22w3gfygec7R7UbZ6mVuaKpx:4tvTPgg+HkPgV7R7UtvVIx

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 4 IoCs
  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
  • Acquires the wake lock 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Checks the presence of a debugger
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.camerahd.dslr4k.pro
    1⤵
    • Checks if the Android device is rooted.
    • Checks memory information
    • Queries information about running processes on the device
    • Queries the mobile country code (MCC)
    • Acquires the wake lock
    • Checks if the internet connection is available
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4610

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.camerahd.dslr4k.pro/databases/com.google.android.datatransport.events

    Filesize

    32KB

    MD5

    7daa8bf70cba1177c0aaa35143f5ff54

    SHA1

    4ddb8e3e373296808fd5a3832a454ea9c0c60b0a

    SHA256

    f02ded6053bd0f124da16cdf40849fb201797ddfac5536ab36e1feceb21564a3

    SHA512

    7178eae8e99b2f8b571bd333a3c6916bd088c96dc2c6d5b074ac388e58a345de6a82daceb39994019cbdc5c2d4065912eb0c52787ec50d9e1f746ba92bcee22f

  • /data/user/0/com.camerahd.dslr4k.pro/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    d24158d0cf6249256adb7f69c3244de6

    SHA1

    6ea84a67b236dd99e5b9c02d08cb3da5cad96e52

    SHA256

    031ffb8b87a98ad2ade29fcbff073da85f4251ea0f80cfdc21a0b893b6fdecf4

    SHA512

    8c635510db5b06a645675f14781c0e55b6963d63b6e308984e6d8d9de775a34d082510ca4b4af52b38c2f1608d9f7a4fb22d97b837944c248a5fb46b202d7d0f

  • /data/user/0/com.camerahd.dslr4k.pro/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    9edd4363e21c4ade1ce11fb5b3897e12

    SHA1

    3e633afb765a994b9a96c27432d929e494040434

    SHA256

    0ae1ec4f938cfaf278f47b119ffc66febf224d8a29280b91164f40587f96f187

    SHA512

    36357e165baf42b2b6ed2d8b8d8cecd652b37846a5740acd229a8c96b7dede5794b9d04a54f25490aa92dd4edc723cea4fae7fc1dc05a594d9d4be91f2ddc1de

  • /data/user/0/com.camerahd.dslr4k.pro/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    8611f42fdbbffe7994a91cac3dd89b84

    SHA1

    88aeedfabfd6d085cb65c63c0dbb13c46008bb7d

    SHA256

    aec9969936f801e95cf59c08eb285f85bdfd6f23ad0bcc086af9709b34bf4540

    SHA512

    9d23caa3a391e1506daf17bb1e1c448b9b841f4f9f9740a57e3a1db97b6a9bbd56ce05963e6dede53d5ba67cbde8d65f0cd9efc20ec0e10ad6b40cef446203a2

  • /data/user/0/com.camerahd.dslr4k.pro/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    20e5c472a14a4c624e4ef14078e75d45

    SHA1

    1c88feca3e37b9da7a75760d81f8484a77159e6a

    SHA256

    cf4aa833335fdc517e2f6f203f21bfcf0d6eff6fdf3e8d17cd89a15539c15a20

    SHA512

    519ecf97c6e7b0059782a4ace14541d85b5657900688c13263b4a4d8c8334d023751b2557adb92257cbbcf9eebb886fd81df2fc756ab1b7036ee99786cf29376

  • /data/user/0/com.camerahd.dslr4k.pro/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    57b718f3a00268a2e74aa89a4f623c22

    SHA1

    65922045b18d5e3edddc12e6d5c766fd7d49a6f1

    SHA256

    712524524935766c8864770d1b7746abab0f37b060dfb7cd8bd27dda78cd62ef

    SHA512

    f5a0744a841af13e8b5b5f1bfbf39de15f3f9cd95921a666041dd7e31f8d99d82bd70522ce3fcba927a7e1faa49f3da15024e4c9afeddd2748c24b96d96a97eb

  • /data/user/0/com.camerahd.dslr4k.pro/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    8d41bf477d713e375cad487651d2e008

    SHA1

    e1d4f178399bb8d9a7f77a7965dbecbc7ed25a40

    SHA256

    54c532134cada824fc41ec582998f3fb71cbfb91cbea5055488d76ee9b58727a

    SHA512

    2a2a83f25cb8cf4f6bfb4974625e7ab1a1064ea18898589a91df69a9f60c3b408dc984958c6ca6a6ecef255dce05343b3d52fd2341bb60f40cbb6198d281e0f1

  • /data/user/0/com.camerahd.dslr4k.pro/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    807afa26496cddc70f31aac93d801c7e

    SHA1

    7ba69dfd3bdb5f3829a7bbac848122c5710bbb7b

    SHA256

    34b3553c8c0e0a5bf5a7e2a251224da352fac5ce74326822ac8c0d3126b83c0b

    SHA512

    9e2ae0f2593a990806f8799f4f6e8a0bea7d3b9a491299a5818203be579dc39d6683d3533e8d8fb8772d7d7a64780033c4d525e0ab17d6251fafd3f05ebe054d

  • /data/user/0/com.camerahd.dslr4k.pro/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    991941363f84d82b4d0145ce472c16c2

    SHA1

    fcab282a3c9c242c1ea7fd92dea69af08f437944

    SHA256

    6da221d3a048febb711f8b92dc000b7e4b7d45b29b4278395a25a6df99b8b4ce

    SHA512

    428ec45c1a7d9cc14950ca1bbc39a17f7627681eff321aff9138281e68a509763b787a655fa5419f3e612b0a75b6c9adce4a35c24e838da44f13a50930958bdf

  • /data/user/0/com.camerahd.dslr4k.pro/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d9cf75fdd1c2292d986f6c3d5d60f2c8

    SHA1

    07ecb1d3a26d952ae5fecf54f36699ab498510b1

    SHA256

    2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

    SHA512

    442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

  • /data/user/0/com.camerahd.dslr4k.pro/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    b6cf37dc953b5fd7746248fb5d284b49

    SHA1

    1eb1aa86e6902b52a3377ac97eec457dd9b200cc

    SHA256

    63616a650d7fa9070528733d23bff2afff07934a9e87c6f2f5e17e228b1f52b6

    SHA512

    632c84fc9484b4328b3b5562ab127e499c8921c79becfe544b2a083a896e1fb28d14bb2e8e232adf0ad61341f0fa4456aa244ec91c7e7f0dc27f10ce7de6f1db

  • /data/user/0/com.camerahd.dslr4k.pro/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    00bc15ac28ba91ccf1f48b1186d64cce

    SHA1

    94b60cdb839561ae626f42991dc419dd374050cd

    SHA256

    0a76f856e4bc5170177d01d5c1f3e764fc421b4d842e8c461178294f3a9342e6

    SHA512

    c1d8ced7a91a20f44b4b5b1e36e72a72042187ccd45e80f1d75971dbde45cef8b567208342ed8022bdd4f2d0dd2643abf38407ae74f031f9c80ed84762fc4cc3

  • /data/user/0/com.camerahd.dslr4k.pro/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    861645ac2be359ab1505bc83e95fa857

    SHA1

    e1935c76f9b83e2027fa10f3def4a8e57ff8ea6d

    SHA256

    2b688e4d6ba69b7033aed0e23b09bf4600e302bb2e80df2ceeecc08db5e16000

    SHA512

    3c25cbc93f7821002b8ffea09d94e1bfbb42e25df8ab9aa871866e5d670e7a178fe1c4c15cbf0bb00c3768e437f49c01bf57162d67f1e5b2b9c73c977a9f39b5

  • /data/user/0/com.camerahd.dslr4k.pro/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    74af0b68ad72ba113cef451ee14ac763

    SHA1

    80866e0351c89466fc357f9a5ab5b7dd304aea95

    SHA256

    d81e0d413640fab2ee8bd7eba829c7aa06ed9fc5ce558a68510fae8ff9c53aa8

    SHA512

    63c2abe312ccbb458398e50f7e993522bb4e067927b376b3294393c44c0c003c0ee9e80babe0279e725abc786087d96cdc788f73fb309e38355124a8eb9c6d7b

  • /data/user/0/com.camerahd.dslr4k.pro/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    1ab5b3f20c1da7cad2535f2f83416f7a

    SHA1

    b9a9f512f8550d2f4a3cbd653c5db05473da3da2

    SHA256

    2e84af10e9114975508a4478afc3d59a6b1317b3e10a56e2233f785b85aac655

    SHA512

    f0616da09f56d0704558d34cbf387ab9b3a64440e1bdeaa089b08fe09a8ac4f24f956ac45899fb1f5f3c550624d124af2d71e98550bf0c768045d081bfdfcedf

  • /data/user/0/com.camerahd.dslr4k.pro/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    50919e4f00c782fd87f4e701ddd5d07d

    SHA1

    7ddf207f43c3401e3919262bc3140fc1c55ab754

    SHA256

    2d09b0d7d88e09f07b0afeacf528d467aeace8027270b610805fd3d5db8a29f7

    SHA512

    65179a326b76a820b701037f6f0db71886e6aa679cec1b22ffcc53df30ee2baef663ed38c49fb6d677271b8d255da5824b3c5afbdb302825afc8e8ebaddbfffb

  • /data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CA74D0169-0001-1202-ADD072C52BAABeginSession.cls_temp

    Filesize

    77B

    MD5

    ab159dae5ebbe27d6a166f512a449960

    SHA1

    c35a5682d69b7a46c35c58576d47b54807c4c186

    SHA256

    b22026227f95dbbdf30daa25a12dc89065e9214b47add15d4b930bb8f43927b2

    SHA512

    2a450cc3cc68c5b268eebff73223828a8a2d39aff6db940b483a93841c5daf9806a5bf6b1194dae57abea7bbe87b2ac58c24e92692b6d1014106c810510ab766

  • /data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CA74D0169-0001-1202-ADD072C52BAABeginSession.json

    Filesize

    132B

    MD5

    7c75398e12fdc987b7ef393367316a0a

    SHA1

    ae0d82024ef58d76b0f0714fd30095857ca02db2

    SHA256

    56905be71b5a55d269d4c357054fa354f1cec74eec5f88f1fc4e87e49f8d1f7d

    SHA512

    3a9839903d6f26acdc22bb1946ad0c3d95f1d83b8eaf6a022401224c3f4f6466f8a9e33b8507a257e77a89abad13c911e7488ebe4d2f565794e90bb36fbe201e

  • /data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CA74D0169-0001-1202-ADD072C52BAASessionApp.cls_temp

    Filesize

    117B

    MD5

    4d68835da26aa05c0d01355541606390

    SHA1

    e2939d132542f609d6d91bac33d91d4b26368699

    SHA256

    50c24dde771d3603010dad4dffb1d4622ae717df5f740066a7d277444fb34654

    SHA512

    b9604205b95c42ff02dde7c48325fdbe690da3cd067c0c42ee87f5a15bd3bf42ffbd65230f0ae57258f18db465b2fcc99c1a34833b4257a516a54ba4e97f0cf8

  • /data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CA74D0169-0001-1202-ADD072C52BAASessionApp.json

    Filesize

    231B

    MD5

    86dc0a6b2f31c9644741512db3db2bf1

    SHA1

    78ac7a73a9fbf06a95684599ad5a96b082420223

    SHA256

    75d564a16429222da40ac04d01c26479d1d4eb3fa5dba19b80b658979674c6be

    SHA512

    80e537ce353ee39e7bc61249e4c5fd6f1233c26ac026a6b38ca299b73272025b463e6032d9c36dc94532454e0ff2d6e4450f4223be5bbafb13c480af1fa30e0d

  • /data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CA74D0169-0001-1202-ADD072C52BAASessionCrash.cls_temp

    Filesize

    39KB

    MD5

    53e97d271e331d7e27c71c5e9b7b8569

    SHA1

    80bcb2f54467395ddfd2d038d087f879fded2030

    SHA256

    35bc04940fbb70f9d0a88d59745963eff1e18c3888664df4ff89dc5d9984e97c

    SHA512

    9028c382bcb3daa0c159cb05817492cb20de1b1a68c400c3322196a5b3cc0affe4e49aa61b3c106b46b194f6affa285970a580f545792f251586c00881be6465

  • /data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CA74D0169-0001-1202-ADD072C52BAASessionDevice.cls_temp

    Filesize

    48B

    MD5

    fd6372364a5c5c9cf8945ac3ea7a5d94

    SHA1

    3c798cab71f6ae7a81e71e58712368231230588a

    SHA256

    7400bf714ca32b64dd89440c9d5ace4e0115ddce44d169839e465df0e1638641

    SHA512

    a18b18d061dfd979bce1e0b769009668c322300e7174f51d2532e86dc6018769194507a106dd30b97317f8c1a7539d13a7baeab2900c1e00da7c74e899dab276

  • /data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CA74D0169-0001-1202-ADD072C52BAASessionDevice.json

    Filesize

    202B

    MD5

    eeeb942571fa704cf8ae49731fbe9789

    SHA1

    b5989c4cb932ffc779ee25bb3f7bfb79cf720427

    SHA256

    78809f7ae96de01e3922b6d3a134c3f7e9a0cbdacef313f70e8d9345bf5fbd71

    SHA512

    71e55c16f9f8fc936f8607448916bbfa1ba233b7120b8676fe11552916ac4dd3e3a7b0f9c31e14048933c8bb9c9d6d630ab7d28389f31749640cc965b2636565

  • /data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CA74D0169-0001-1202-ADD072C52BAASessionOS.cls_temp

    Filesize

    15B

    MD5

    b3d9541cc92a9153d14e5160f8d8c008

    SHA1

    2e1ac80eb381dd82a03795b682f92020348c0113

    SHA256

    1ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d

    SHA512

    78074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f

  • /data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CA74D0169-0001-1202-ADD072C52BAASessionOS.json

    Filesize

    55B

    MD5

    fc1dcee4e422d77e7fab7c08c8a41344

    SHA1

    d5340127e9d5f735b9d33b9dc61c772fb0e2dc15

    SHA256

    b843f05ed78cd137c272ba7f0ce8ede3aa853098a856863e51d5c223b58f21c7

    SHA512

    3ec07617e3e1008572f6f2528de9d4b827050cc5a7cf19a1604c961f9ec370ede6f5fd83bfcc252c0ee286fe244ee6734046ef1aa638dcfc689cd4407a6a8f61

  • /data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CA74D0169-0001-1202-ADD072C52BAASessionUser.cls_temp

    Filesize

    4B

    MD5

    3ed7a02f7ecd29e9a0da73bbd02b94dc

    SHA1

    ac0e7b5b3976127f95e987bd1f27e504b343a305

    SHA256

    dd385bd6d860af19cb2c132d628e3d6872d7b89b3bd2d50f56253bfcb84c78ae

    SHA512

    115fde1208bce0530dea2a5ce627349653d304274582103eda80da3e254ac4c3963444af769ecbda4bc609d89b2816e6620c2eae88f7b3cf3c5e9de5491855a0

  • /data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CA7510172-0002-1202-ADD072C52BAABeginSession.cls_temp

    Filesize

    77B

    MD5

    5205392bdc045f98a8c6a946fc18ee7d

    SHA1

    e8c74424b9d81cf644d5e0e84f701e0a8e2e684f

    SHA256

    2c53d1a74d19aa5759a97a9a91a5a265818e668ce1186d0d5157677f6282a55a

    SHA512

    55072ee14debba5aa23cd38e5b98c45251b5c6d57797c5c7c4f7f8482d534e5e4fda77c90d55774235bc0dbbadc14e8e11acd13b8eb3f4df4c9080d221ee38d5

  • /data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/664CA7510172-0002-1202-ADD072C52BAABeginSession.json

    Filesize

    132B

    MD5

    4b013abd765fde0233cb47e3236a219e

    SHA1

    5aa6b2c42e0a4e9fed7a32c616a1d57a0b7c88ac

    SHA256

    2349be17263fa32b864a08d9880362e3aa120109cf8719583d44b1e41f5c1813

    SHA512

    05daea980172761c081e5bb7ca19965cc86124a458b68daabfbbbb95847ea369af3ce86f49cd5dc3249f9b24bccdbe9e170311b114e62faded0a1251a909d3ce

  • /data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

    Filesize

    407B

    MD5

    cb97b82af6f16888b23d4c1c461a3269

    SHA1

    6a81dbfd570ca46a3ea4084f8dbfc9d1432da443

    SHA256

    9d53fe7445b5ae6614f432294b02e6c3908a700e639fc46d47d86bce2a3bf6d2

    SHA512

    bbcc5d7ae3dec10068a7b093eaca5e34a1399b1d396df3cb2b4e9d4a0921784af18cd3558bac98aa4c5a935328609422745e0f0a260a243e7205313786ed07d4

  • /data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

    Filesize

    2KB

    MD5

    73d781c5d5541d01b0133439b2454963

    SHA1

    f958deba7153e13914ac6b7b57d0ee24792cbbae

    SHA256

    6715b274f982b39e1c1b15bb936dc6b0857591e2786b22b3b60ce0c2c586af19

    SHA512

    c3dceec3f32e01e9ef584a846619641cb924efdbd4b24a44ce86ebf0a4245011929d33237969df5c0413887e92833d57bd498e3418133ab07bf911b72762f48a

  • /data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/user/0/com.camerahd.dslr4k.pro/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_86345728-6272-4ada-986e-e15befaa214b_1716299600446.tap

    Filesize

    329B

    MD5

    8ecf3c1263c03ac398c99bb919ba5129

    SHA1

    93d923927d80e07f1a01ef3139eadf592d9ea581

    SHA256

    4d42128605a6fddd5298beec13d436dacebd4f50b297307cfbcb582f535afe70

    SHA512

    5de0723ebe8d55d3103d6c924ce56462d302d17bd36d90558a790d047836f320cd6a0f5bed7237131dd513f46bb807e4308f7c9c54937f37045a5c0be07e329a

  • /data/user/0/com.camerahd.dslr4k.pro/no_backup/com.google.InstanceId.properties

    Filesize

    63B

    MD5

    85d2154d2a66a02d647206ebe0ef673e

    SHA1

    96c403576d63419057f4c1618d19eab0b9811db8

    SHA256

    fd557340f1caef5aa8b488cf7f24efec7f77801b4b1a92403131784eb9aa5b92

    SHA512

    e680f4de96473a0cfde5e72f5738e9d48acbac8ec7cfa2b55591767fa8f0370e72c5cc8eb988c44bb5dce5235776a6ad44ca3aea048102c7548738ae0999649c