Analysis
-
max time kernel
9s -
max time network
128s -
platform
android_x64 -
resource
android-x64-arm64-20240514-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system -
submitted
22-05-2024 11:50
Static task
static1
Behavioral task
behavioral1
Sample
FollowBegir01.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
FollowBegir01.apk
Resource
android-x64-20240514-en
General
-
Target
FollowBegir01.apk
-
Size
3.8MB
-
MD5
9fb1a834a864301799d773d7080415c8
-
SHA1
0eeb5ef21f4f9c062069512e6f48be8c8c95cce9
-
SHA256
dfd2bbbf788375de717c51ae2c050a58f8c227c8eec36b7338f36f7fcf909b21
-
SHA512
e615fd04986a1a32558b55d61c02aaa10c18ce0aae02a11e0c9092d8612b46e44024647771767fd9e0091e9bdbf58cf72938a7f4c8df3c19816f86b422b9b7d8
-
SSDEEP
98304:R3BwTJTo1JrbecEqENn/R3b9J4FvOTIPD0J/Bml5yr:RRwybebBpJEv3D0dP
Malware Config
Signatures
-
Checks if the internet connection is available 1 TTPs 1 IoCs
Processes:
service.api.instadescription ioc process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo service.api.insta -
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes:
service.api.instadescription ioc process Framework API call javax.crypto.Cipher.doFinal service.api.insta
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/service.api.insta/cache/com.batch.tmp.d4859d9c-cd80-4475-a3fd-57c791d64138.jsonFilesize
77B
MD5c61820515397e0d3686ec770c2f6ce34
SHA11360bf67cf9c8fb53ba865f2fd04cd2c1c571e5d
SHA256b7f8241d39f3e4613191ed27c858899444efaec8de4359b340ee261dec136ed1
SHA5125e4844938fbf75a786dd19ffdd88ddb15616257f044afbfd884e08b3b25202e511db44d1c7e600cfff7e7b7763b6bb4ed058035439bb9df5379170e71c6b1f4b
-
/data/user/0/service.api.insta/databases/LocalCampaignsSQLTracker.dbFilesize
24KB
MD578dfb71ae220ffa608f09caa1a85920f
SHA1cb55f39d84d78d4426837c25944ad9d114d0fe4e
SHA256831c5da06e12d1e9cf69797541d0f0b81f5a2cac69fb883e59c56630d83d1e59
SHA512397721f0447e4853edd947c3a8b9f2762e8f192ead431c8aa391d499fab6f013a71c8277b40eb6388695b11111b49bef1bfbb1fd8a24b25a0cd19977e36b0c78
-
/data/user/0/service.api.insta/databases/LocalCampaignsSQLTracker.db-journalFilesize
512B
MD5c071e6684cf546ede0e593fb64abb009
SHA16f2506ed8bd590f074d9508c32c3429618edc7f2
SHA2567661c1631fb4ecda57c3e753711cde7b41477dd860f918aaf59c14c871871318
SHA512c0e49eb96ae756f982f4120899a362f11a8f72e31a894f08756488060e3805e558b307adc949ecf941c4a40db71ce1869d982d3429522aed6f320ed5884eaeed
-
/data/user/0/service.api.insta/databases/LocalCampaignsSQLTracker.db-journalFilesize
8KB
MD5ee399605e54f6fe8e54d7b0ee83e0c26
SHA1adb7bb6202afa9a77d2952c95b2f3cfa9f022f6d
SHA256591a95a53fbfc3bcc57057c7d8674a626c17ad04910d04d1709f862bb2444177
SHA51238ee140eb2417f8c787465ecdb8f02fcac74748a6504f15c0fd0bbdc4e10027fcbbddd84036249438539350926bb61639aee1be7339e4f8af8793405752595f5
-
/data/user/0/service.api.insta/databases/LocalCampaignsSQLTracker.db-journalFilesize
8KB
MD548143009e1e09ffaa73d160c10d4bd79
SHA1e3b5a0142d633b133b4076f17cdc96ba9f1ac21f
SHA25659e046fddb0dab2ae22ffa2b88ed710cc3501883534ea2066c872077f26e9074
SHA51269a5f7f997ef525db147cd1fb4e3c812fea002514aa0f96f5e8eaf7d6b0471e4ac3876e73d4d24d1ed6a145d0c1696401812fae68135d3b232e60cb2c8a7c705
-
/data/user/0/service.api.insta/databases/ba_tr.dbFilesize
20KB
MD5c920a07b750a60a7f0c9a3d123c9a670
SHA1906b175ff00852667299321dc770d1a25c4a03a7
SHA256f38d18b51f7dd05b6438a00957b548b1ed812e0d1b1455286847f5c0acd9bae1
SHA512b9e74949a5181d1df4f5080b04e78feb73bd48db5a9562eaac768a631adc457ce360833c1a73abfa9f3fd1cff0c1fd719920de9b102094cea975a49be5a9aae4
-
/data/user/0/service.api.insta/databases/ba_tr.db-journalFilesize
512B
MD52530873d1edb2a409ee569641858e9c9
SHA1dfad6a564d634c5a87bde7f0264ceb7a7ad932be
SHA256c7502898e19d108ba071da04436ad1c2e8b8fdb43b3a9de04522018ce4063204
SHA512d9dab8706505d745eb6b3d7b272f0c112382d41a9408ef9010ab3f8f9510f2a60859882c064b91647073d5e59c1b528b95219b85c2417f8449ebc94fa1c3d1ff
-
/data/user/0/service.api.insta/databases/ba_tr.db-journalFilesize
8KB
MD5c579afd973f365cf3732144dbd887f3a
SHA1df790cca18573760c6ce5d7abf1d38340ac42b0d
SHA2564d55faf25ffdebf3ca729864ae80a29b0bcad8e3125f5e0726b84ac98000cd0f
SHA512c81098a5a9e5d10a247fb702fe226c50adbb6d8d9f2e3c4fc96b5fe1eb22d0ccae6cd7b62571c3f7660c555c4a4dc3725d4a62b99a25185a2a3e838ee96cc82e
-
/data/user/0/service.api.insta/databases/ba_tr.db-journalFilesize
8KB
MD5cea0c53303b04a74a9edcc3ee7eeeaa0
SHA11b060d73971a77e22b4b5fc1af6ba08c8189eee9
SHA256274b235028a9d63448ed2d44f7c59f15837264efd7267a54253804ab57efe662
SHA51245dea9f3dedb463d30a64c8fd0645876fcae976ba9c37cabf9d8e937178747b84eb4d3b46f9ab9bb007fe4694d1ba8bfb7c791140d9fd69db7ad3520b0cab7da
-
/data/user/0/service.api.insta/databases/ba_tr.db-journalFilesize
12KB
MD5ef66b6fafc37da46184e67a809e1d2b2
SHA1076a82500a6975487bae2d82c5b3eb8302ffdbdb
SHA256fcec48fd965fef7e18e44c6312dbe8fefd49d7ba12a16c13ce7027e0c53214a5
SHA5121b9064160dfe6820732fcc16bf96de6eee2533a34f849fa09cb8c73c93e0fc4a6913a9e861dcb7e74f95ee169a75ffa47a6048f9f86c51d81c7b34767209abcc
-
/data/user/0/service.api.insta/databases/ba_tr.db-journalFilesize
8KB
MD51c7cbf412e34a66475d249aa61427622
SHA14e240fcbe713712ee3b99516cc711fcd325aca88
SHA256c1f4fe1bc153c0e221af6c348bcd239e864a74ced67866b685ec67fcbf2693f8
SHA5120d8ec9c6063a88423de333bd4e143e03015905ca9af8b963f24fd4da64ad1af99f60608eb442b2ea10aab9244f5d55c4d90ee4a3f18a6bbd14c6926296f1b22a
-
/data/user/0/service.api.insta/databases/ba_tr.db-journalFilesize
8KB
MD51794fccba70000d75a182a7dd95a9756
SHA1f7697e22124d5214343342f940a78f88ebd592b9
SHA2568243e4286e1ee5e3281cbd021448e3d57803781634d461e3ca9825ff1dca19a1
SHA51289e955f8061b90be8c6813f363d49dea5a2f4ebbf2607062945ef34c3ea778ac94e20a135f2c7777b0ae6bbe03cf101b581c1d569004ed65c8c655df21059d78
-
/data/user/0/service.api.insta/databases/i_user_accountsFilesize
20KB
MD509a6926c399a760f83b0de3e7e0da5d5
SHA19f05d0887829fdbad70daf7dc4d3324111be8060
SHA256baa824a3c9c829d19a4d89fe0daac534a97f0a7eebf6ca15d9e12a24b0228e60
SHA512d9b26a548c91e0cb3e54d997bccb7a01ad951231783dba79b10bf5a9e14c05efd6e29afd3006ec17dee93d69ed7cb6394da9ff96c099f475ff72467190d60bf7
-
/data/user/0/service.api.insta/databases/i_user_accounts-journalFilesize
8KB
MD5b5e26bb784548d9f68a7a62b48f8a81a
SHA17c856418fcae0854b6e9499dc8e190bf63fd7772
SHA25672fe2bfd06ee4f5ec76bbcad879c2ac1c6459fde936dd7dea816830a5bf09f70
SHA51222e4bfd85b5b601b8edb58cc4fa4f823a06f55999cd2d8cef68e31277e0aa0a7ac6f2bb07d30255859156621f825955fd0e4ed4d94973f47d2483cc641f82269
-
/data/user/0/service.api.insta/databases/i_user_accounts-journalFilesize
8KB
MD58db707112018911d4a76cc5b88fce00d
SHA1f5742b9c19db2409c50e16c024299afadb503b52
SHA2563087a829e857c49188a030514618914ec980bbb70301026ae47b6c151e0dbd24
SHA51274e784da15a6768130167a6e7d69f4e05f663ed8a6d06f17d2d6226c2f56ce47fdfb7804c88f68a5e0dd6e25fd4669f55ee3204076a5aec9c16cdd22b519cacc
-
/data/user/0/service.api.insta/databases/i_user_accounts-journalFilesize
512B
MD5f2583971f10f661178d0c020ee7ad7d2
SHA1812741e9da24f26d775661293d5489c645d021a8
SHA256b979e6b3ce8d7ebc77c9a4ea021754c348badf73321469d5e05b7d7d76f4aa67
SHA5121fff92cf38eae85576e7992e7115af031ec2e2c49a8cedd39c8049189575cb777c4ca8346a59e2bf170825077f40b8d40343bcc322924df1b4d4024e72eb0088