Analysis
-
max time kernel
87s -
max time network
138s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
22-05-2024 11:45
Static task
static1
Behavioral task
behavioral1
Sample
FollowBegir05.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
FollowBegir05.apk
Resource
android-x64-20240514-en
General
-
Target
FollowBegir05.apk
-
Size
3.8MB
-
MD5
0d6c7daf5362fdf4b90dea781c73b679
-
SHA1
7f3c9b5df65c15ba5e3b0f051cfd905c0aebf77a
-
SHA256
43e18da04cdb37fd72469cae2e367e3386c4579137af254cc2340bf9d429e7b5
-
SHA512
1b62fadfddec0105a77fdf60422b8fb0dc9ab57c5ff407275a02934cf1def46a045606d1ee01af45adcd9c961cf500e67a73800487f827d3129dc8a838ea3146
-
SSDEEP
98304:t3BlBGKnkaf1SATwvr+4bQ1mQeOTIPD0J/Bml5yz:tRhkaf1SscC4bQRe3D0dv
Malware Config
Signatures
-
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
service.api.instadescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo service.api.insta -
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
service.api.instadescription ioc process Framework API call javax.crypto.Cipher.doFinal service.api.insta
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/service.api.insta/cache/com.batch.tmp.cdd5792c-f85a-488d-9792-0ff3ff607af7.jsonFilesize
77B
MD5326f92ca8be3b0d7e6e8996bdff25094
SHA1add2e0e4e59c37d3e012fcada86499899deebacf
SHA256e5431b0adc0253ec40ac7a0fed5bb31f40ca39360659b3e94156d6a8aa046b4b
SHA5124f0f271c75f4633b2dd44b521b946c740a5c6829587d866b9eb72d8aada8f1e3b1744e8b878ac4b721d1bdd2d600cb8837a7f65d1647897c685e0105ff1c18c4
-
/data/data/service.api.insta/databases/LocalCampaignsSQLTracker.db-journalFilesize
512B
MD554645cd283ae96bde13e6f2cb912465d
SHA1bbbeb81019ddacedd45e59364430449442814b6e
SHA2569a11ea49346f7f7bbccc1556b88dabece930965aeac846f6a5fb83a56c6717c5
SHA5122d67112e0268de05f14b866a7cb3079ba2039bad3ff1dc01bb8835fffe89c4905c8bc317b213cced2043b2b3e6ec9770f15f9a01eff6e8451670d02fc473fd1c
-
/data/data/service.api.insta/databases/LocalCampaignsSQLTracker.db-walFilesize
36KB
MD505e4134d6f4193e0df22bb4f8ff60236
SHA1597862357853eba22c39babd5b986a8ef8ff6010
SHA256ac56f7909390ab50fcd5ded755b2e3d51f7922f2a2918af3de0db8aa51b1948f
SHA5123ee2b2695decf3a64c69e08c01ca206ea877e5fbd29f55c059e270cd6dbebf2891a1f995234a31a4ee2d920de16678d6a32f399735fc9b7bf3813d751502a474
-
/data/data/service.api.insta/databases/ba_tr.dbFilesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/data/service.api.insta/databases/ba_tr.db-journalFilesize
512B
MD5c3abd5f4db0a96db3c1ba956d688899e
SHA10b42aa17882fe94bcfbbff3aa4fc84196117ea93
SHA256b285feb1bb7da40ce3201c27bdef8085347245c6d420df37cf9f4201bcd1f285
SHA51241246051fd722a5a34e3a4ea65347316cf683d309818ad5d70afa3eeea66dd16b912753b99633582c234fe88985e73dd2a6576677c7af863d759a34368ffbd3a
-
/data/data/service.api.insta/databases/ba_tr.db-shmFilesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
/data/data/service.api.insta/databases/ba_tr.db-walFilesize
48KB
MD53700f5c1f801f5f332a3e114615e1be3
SHA1ab91c5d2995d449824a7dc68942ed31395756524
SHA256f599f3b69fc189ec65ed6ca68f91b47bea66daa39af6348c2e6e38520f607b35
SHA512cd5f32b6ab210b4121e7dfc758c019292bfae2d3cfc6145baa9da4cde5312ddc7379cc82d12d8ead43f2839eea0f56216460d75b40689d272208697db14df478
-
/data/data/service.api.insta/databases/i_user_accounts-journalFilesize
512B
MD578d9ac20d951c9930d750d13ac651ab7
SHA1a874e4606d010cf27a6e28dfcb84cab287f7cb0c
SHA2561318a500d985d9a70825feb9da0b0eb10ec0ce7426bc96ed56684c958b16a7d4
SHA512d474001ba2c6cc5711cdbe55598c5c72a948c53b00c5a8874d0b6e0b077a36f7dcf714338f4c1642f86dc41ac6d208f4a4a83f0128f378f9bbe1fc3fbb9aaa10
-
/data/data/service.api.insta/databases/i_user_accounts-walFilesize
32KB
MD5b0bb0af47d322ecf7a0604013a258d17
SHA1483a35c193cc253dad82a49ac15fab35cab73a0b
SHA2562c713a5b90e57cd19da8525889cb1f9c830720ab4d12e681fd15c873c4a3dd3b
SHA51268daa515437f09f5ba6ad1d091c218cc7f524d665aaadf280753d37224c176e6e8bdb926ae3bca9f0d714f7f03c3b9a9795b5fb4ffd3d0a74e346fcb4b41247f