Analysis
-
max time kernel
11s -
max time network
329s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
21-05-2024 13:52
Static task
static1
Behavioral task
behavioral1
Sample
aa527745ac7d2caaa8010b591aafc1631c29ff6217bf689dc4245bfe50d7e2d5.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral2
Sample
aa527745ac7d2caaa8010b591aafc1631c29ff6217bf689dc4245bfe50d7e2d5.apk
Resource
android-x64-arm64-20240514-en
Behavioral task
behavioral3
Sample
aa527745ac7d2caaa8010b591aafc1631c29ff6217bf689dc4245bfe50d7e2d5.apk
Resource
android-33-x64-arm64-20240514-en
General
-
Target
aa527745ac7d2caaa8010b591aafc1631c29ff6217bf689dc4245bfe50d7e2d5.apk
-
Size
7.4MB
-
MD5
589427addc1786f27efabece4f062ecf
-
SHA1
8a32f6a2f51c02783fbabf03e1ba033b6cb87473
-
SHA256
aa527745ac7d2caaa8010b591aafc1631c29ff6217bf689dc4245bfe50d7e2d5
-
SHA512
9920a62f8eea6c52898b7137f69b52f8224614970d9bf74190df16ea78d288c83f3ae1db0cbd82c3256ffbdd00204695fbb595ca90ac26ca7ce1fd04b6063d46
-
SSDEEP
196608:4Scd7vKiHvqf1RgTK22w3gfygec7R7UbZ6mVuaKpx:4tvTPgg+HkPgV7R7UtvVIx
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 1 IoCs
Processes:
com.camerahd.dslr4k.proioc process /sbin/su com.camerahd.dslr4k.pro -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
Processes:
com.camerahd.dslr4k.prodescription ioc process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.camerahd.dslr4k.pro -
Acquires the wake lock 1 IoCs
Processes:
com.camerahd.dslr4k.prodescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.camerahd.dslr4k.pro -
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
com.camerahd.dslr4k.prodescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.camerahd.dslr4k.pro -
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
Processes:
com.camerahd.dslr4k.prodescription ioc process Framework API call android.hardware.SensorManager.registerListener com.camerahd.dslr4k.pro -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
com.camerahd.dslr4k.prodescription ioc process Framework API call javax.crypto.Cipher.doFinal com.camerahd.dslr4k.pro
Processes
-
com.camerahd.dslr4k.pro1⤵
- Checks if the Android device is rooted.
- Queries the mobile country code (MCC)
- Acquires the wake lock
- Checks if the internet connection is available
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4295
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD586cefa8e5a2b1461bd2197167b0a1528
SHA19aa756b640a6721e79ee61a0b429d14a6ef65267
SHA25602f68fbaa1047ee4dbce054f88eec7527343467d3c6e8cc0a0db09644dfff521
SHA51261fd091b2c3cec4c3baf6e02d9cb13733f9aa163ed976e95e3eb5688361d2db7b5f0160f613582a702d3466ee8ed130e928a14a8472d3d302c911a596d67329b
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
44KB
MD5d81d22eb198c78d2a1b74e6a89d2c5cf
SHA1503d011e7d4fb090384491c450655b52899ba904
SHA256d9fb1e420bf09295f80640641121c0bf20bf22974f8f35f867bd9b451e10d5b4
SHA5120aa84cfa7eb7b0f53029a30067887aa3d0dbc27dbee5183eb221f3a43627376b9213ddff5efb6b7f27ec57f258f92c5ca72bcd4b3335530ac08257b0e1e4a038
-
Filesize
16KB
MD54def9fbb16ea814c511074cdeed6bddb
SHA1abb601f536d11fc73f400f673b5d8edf1fd6b955
SHA25678130161acbf8772382be00c002a93c8ec40f97b11d7b8ed8c989f187a73fd68
SHA512fba6f2da3da1566cef2024553084ab78ca63343b33c43afc050a9505936c80d1adfc042d1c9d51bda82a45d2da7ccedbaa3f26328adae092bb505d93dba35a76
-
Filesize
16KB
MD5645c3b99c962301b47f35476a5147ffc
SHA13af424ec8574041f88948b1b54fe25b4bb328c4c
SHA25606896417615c2732f603a62feb4288e820e5c3dddbbc64cb65d6ece33710a2f5
SHA5124c02ac0b223a4040d88cc55666a6aa3e16440d1c60b3e13157ff0876c826c2a2c2d83afab0c4fc64e843870a16cfd705f04e88ebf32317180e45256387e52af2
-
Filesize
16KB
MD5622721242c41b1e0b8f5e2a3df000b6d
SHA16c0b022ba66d3bd027e1d171f35a2beaafc9f52a
SHA256db91a6fec3b4a39e7adc5d6b1910d2d2e7bc2231ae1750d877ad451268c983f6
SHA5121931550138fe41f3385841caf47923651fb233ae983d13835a72c3d282fbf979de33826c6d2483e08646eb393e59c2f2886bd41fde818f69d6d5f9204e2aa86c
-
Filesize
16KB
MD5dad7460a327c664c1cdae7d831671faf
SHA1e5e4140e734a973b0d39ea636af26b07cf92f9f3
SHA256ae50163c654685ed886de5d0823a07f1e457ebd2259f9470b2403318c67ae13e
SHA51253a8aa0476c34a2b967348a75eab50fd22b44806c8a16ad72174660bb4ed41fa7245a12948b40546c1b1a1ad7918dada555b9775c493f7ac2ef0f6cdb21d25d8
-
Filesize
16KB
MD5307c62c40fcec23f8434f6bb73cf4e33
SHA1fc6eba059e3d2badda8ac70bc6b20f5eec39b8bb
SHA256aee6e320456a24947475798099b642721851f1838121ec2a1824858a0b840916
SHA5126019aeeb0ddda969a5f59d66708a4f77834c40d3708b29d9bbe0cd59cabbe563bc84ced0d570567f3e16bdd4dc8f97acf3c0573cc50c967c237ecf8f792408a3
-
Filesize
16KB
MD57237409e0640cfab7bdbd429bf821a3b
SHA14c3da934842f8d4835dfe2a9c275a300e5123309
SHA2565c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
-
Filesize
512B
MD580ed57b84b5c2b5c2c812483ad4f4ae0
SHA167ce8af300976d04cb6e3dc492b83c54a39a2d43
SHA2560ab9647c88db87668d671437812a868302d802bdc15c9653a2f8a12afcb78091
SHA512e703f1a5f7b82c712862ba4d15a2d4465b677478597adf2016578fd56f1028db8242c0075bbbb8f66947153822f2113915e64c0573b17eca02a812275ddeb0bb
-
Filesize
36KB
MD573a7b3fbe307fe09e099a703b81d31cb
SHA13cddb07f455afb625bfc507291fd7ff657449b6f
SHA256c33708c74b11577c73c440891dcf8596920970b5635641a3ed979128173fffe8
SHA512cdac4ff449c5a64a13aa4befd325e1299610fa7aa9ac75f9c3a30228c9be712e25ae3322412aa25e651ffc169152218404a7ddeea87e3f9f11baa2558b0b0a15
-
Filesize
4KB
MD5df935658026bf6fdd126f1b3b9b7a49e
SHA135949a6dd9282b4e8a44d43a0bf2c349fc0302d8
SHA256f915cd630282fae5ffbb442acb1c985974208f7787a4ae5c2ac091634a399438
SHA5128f90a4d72a7575e4dce805a92d277561ab54e465f99a32e91f1ba0b861226099ae02a5501ffdd3d93fc808fe3951dbbd0046129d15843cde1b2b1059d537269b
-
Filesize
4KB
MD5b2a1ec989e69b575f253b4f6f80de7de
SHA1ef2c91eeef81e42081154a18aaea4f992fb1275e
SHA256e08e24af6cb40d303d57a04694450dddfc3b5dfc6467814084d53de971c185b5
SHA512196b25c1d36729ab11c0c6cb23abb8b1e063b80ddc27b05e6e1a1d8af43913c128a73f325acadd1d6c30f21d3346783247a5c1fea3065aee12105b2067b93383
-
Filesize
4KB
MD58d5661811430f1338aaaddf75bce1194
SHA15dd52026b288040d7f3f319586bd1fe257128624
SHA256a2fe2aa4b356b2646f5fb4546724d5b7f3f6dd107e0b96f7bbb75db1b8b3efb7
SHA5122137982f56a0ca7ab8d0661fe2995af9f7787c768713d9d0d42685d3b80b5a102cb1cb52b60dde49c15f0fb5e124a36b4feec0676fbfbfb349c1d77a8cf5f808
-
Filesize
4KB
MD5feee42ee04f7defdb598e8ebe2eb9611
SHA104678318eeffd8709bbb527b6a78ec7262892254
SHA2561c2ad07ea2f5f8627f6f2c577239b07c3250708399129f177c9908dba8d3098e
SHA5129a1a8463ac2a8253eca05b853ace0eb4106dde5dfab54b5ad494a8d52d247974e63c1dffd638acf247a39add84681616a6cc0c606526c11bccaecdc0ff2f497b
-
Filesize
4KB
MD5839ca6c0ebaab9580d3fb3b7c1dca146
SHA1b4d7afa433d2b17520f8f9a32cf394d78bf0214b
SHA2566fc830597f6f32a7f7c4bf21a0846123df3f4b09602a18eb7ba703d83dc7776a
SHA5121b46e438f2ac2bf4b7288b991eb906527b4feaa77be4ed077084d667994fed4295c2e2d648c0dd05460eba5ddc2098d0c5d8f6328a719c39f2830e1d8006da4e
-
/data/data/com.camerahd.dslr4k.pro/files/frc_1:656133991335:android:5fc3e4a6ac14e842_firebase_fetch.json
Filesize74B
MD5f0ef95c0301dbe7423c06f313859293c
SHA19246b25b40dd2f741cf5c32ec7a3043414646b9c
SHA2565ac980a00000982012888560a7542fd1781e0564f192c4063b500d89fa6a3794
SHA512a91bdd3021fbf4486842c590231712acfbd9ccca333b4b8ad5d042f725c165ea438878f3f5f9b61a7f1aeb56911bc16404a8ca5fa40732724ea4585b27d8d786
-
Filesize
63B
MD572d02c1319fec922f2c5a467af1fdb87
SHA1ecda8e2bd15898597201ed1ab275deaf6dbf1f9f
SHA25697420bcffb942c2d58c4501bf066809a201c6809aaed06579ef7378e1aed6f17
SHA5124da9ae2fb4a128c4c885ebee79d3fbcb8a97846df76bee939983b2b34ce447fa6610250e9da55772f36f12514b540eba32f993bfc7ef85a36cf90c68e19ac132