Overview

overview

8

Static

static

6

Kipod.apk

android-9-x86

8

Kipod.apk

android-11-x64

8

Analysis

  • max time kernel
    172s
  • max time network
    130s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    22/05/2024, 11:42

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Kipod.apk
  • Size 10.9MB
  • Sample240522-nvgrradf6v
  • SHA256 918581b2275bee57ef1fe46920e52e765ec8a27f4103f9f5f8e763fc64885c48
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
discoveryevasionimpact

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 7 IoCs
    evasion
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery
  • Acquires the wake lock 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs
    discovery
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • com.etick.mobilemancard
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about the current Wi-Fi connection
    • Acquires the wake lock
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4516

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        tokenFile.cfg
        • Path /data/data/com.etick.mobilemancard/tokenFileDir/tokenFile.cfg
        • Size 163B
        • SHA256 23140afaaadf70b6ec366795bcb7e43323475aedfb69722031185304b279a231
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events
        • Path /data/user/0/com.etick.mobilemancard/databases/com.google.android.datatransport.events
        • Size 32KB
        • SHA256 f02ded6053bd0f124da16cdf40849fb201797ddfac5536ab36e1feceb21564a3
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/user/0/com.etick.mobilemancard/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 06b7db3e009885fc67385ede6a74626e8c27448bcdde9d1cd683a174ae4c5c62
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/user/0/com.etick.mobilemancard/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 1d18d8dcfe251bb275e745ec254daaf0d9637f8d0b3150557995cd0be5b7e232
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/user/0/com.etick.mobilemancard/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 ea3fe81a901f8bcc6b3e61212d5704abca2ffad5bb7a10907e5f46e2c5f4ed8e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.etick.mobilemancard/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.etick.mobilemancard/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 9ba3a8d575f3d9b854fac8ce1d7b29e1d89bbd4d2edbe9f314818ac6809c251e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.etick.mobilemancard/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 8b27bd9eff2133c10c8dea6677064e7f72c08fb09aca5fba258df8c345700dc1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.etick.mobilemancard/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 f5e8835cd78f430f0adb2691ee4e2c8e428c3f6d1340407613cadafb6f59e4c8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.etick.mobilemancard/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 a6f3d8e423664544e00a9fa669c5a517f6ac42e09803fd06918512bc707c3530
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.etick.mobilemancard/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 9505098dd43b235ea13f6cb66e165582c717d70eec1319350f0059cffddd83bd
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.etick.mobilemancard/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 cb9e80edbb19eb0c3aa23e7f83938f8db43cacfb12954687e71e64d657a78fe7
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.etick.mobilemancard/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 a806104a8903a49da853c0dc6d47adfd898b4cf4a0acd1872728fc738760c6a4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.etick.mobilemancard/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 ff0d1ced332303deedd1c84a9af7bc7489cde95bb3746c33ccb74a531037ec55
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.etick.mobilemancard/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 2bc0164c8fbfa23cb5ff035df282b52692ec94dc623c4f698d5a45a17fc1df41
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.etick.mobilemancard/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 d2e3cda9cf47245e8de1edea151b107e41ea8ca6e6736b73ce51aac6dc73ae96
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.etick.mobilemancard/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 2f9a76695be5337813eb3565be1b7aa8395025ee1d75b90c75b1318c20149c90
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ir.metrix.sdk
        • Path /data/user/0/com.etick.mobilemancard/databases/ir.metrix.sdk
        • Size 36KB
        • SHA256 f64d84ba182bb65128c0f4b39c9d3aa7e48e1353c3f69346df47f26493c432c1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ir.metrix.sdk-journal
        • Path /data/user/0/com.etick.mobilemancard/databases/ir.metrix.sdk-journal
        • Size 12KB
        • SHA256 f775f1325d4ec8330abe2a8b5d06aefafacb1101fc0e212eb10f331321c95947
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ir.metrix.sdk-journal
        • Path /data/user/0/com.etick.mobilemancard/databases/ir.metrix.sdk-journal
        • Size 12KB
        • SHA256 fe67105bb616448edd15fa7f8b8b3f2486723b3b46654eb16920201b2f95a081
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ir.metrix.sdk-journal
        • Path /data/user/0/com.etick.mobilemancard/databases/ir.metrix.sdk-journal
        • Size 12KB
        • SHA256 bf6ca188f054914894a7ed8cf4abe3695a1dd3f106118a35abd8d587b1bc3358
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ir.metrix.sdk-journal
        • Path /data/user/0/com.etick.mobilemancard/databases/ir.metrix.sdk-journal
        • Size 512B
        • SHA256 de387ed2cee12558af0a93b4355b7dc8316d7fe6564ffcd05c59339bee3bcd0b
        • MD5 SHA1 SHA512
        Submit Download

        ir.metrix.sdk-journal
        • Path /data/user/0/com.etick.mobilemancard/databases/ir.metrix.sdk-journal
        • Size 8KB
        • SHA256 6d8d0f99c41e4a6206b630dd9fe4798653e77a1651e23c7b17be4e706099488d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ir.metrix.sdk-journal
        • Path /data/user/0/com.etick.mobilemancard/databases/ir.metrix.sdk-journal
        • Size 8KB
        • SHA256 7ae9dfb3961ed5f1ca853e43cd37cf7832250255d85d5607ed7bf3ca8cbee0e1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        PersistedInstallation7919326195516800142tmp
        • Path /data/user/0/com.etick.mobilemancard/files/PersistedInstallation7919326195516800142tmp
        • Size 90B
        • SHA256 57c38a5547f5fdd95fbecfb3d6eb7dedef7a70e81b130d3b4b0511e4719f1c08
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation8457806975850986913tmp
        • Path /data/user/0/com.etick.mobilemancard/files/PersistedInstallation8457806975850986913tmp
        • Size 561B
        • SHA256 8618f786e15b6fbfa031ef276a52c37a2d26deab6a3b09b87afd8a23a98a7c34
        • MD5 SHA1 SHA512
        Submit Download