Analysis

  • max time kernel
    9s
  • max time network
    128s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    22-05-2024 11:50

General

  • Target

    FollowBegir01.apk

  • Size

    3.8MB

  • MD5

    9fb1a834a864301799d773d7080415c8

  • SHA1

    0eeb5ef21f4f9c062069512e6f48be8c8c95cce9

  • SHA256

    dfd2bbbf788375de717c51ae2c050a58f8c227c8eec36b7338f36f7fcf909b21

  • SHA512

    e615fd04986a1a32558b55d61c02aaa10c18ce0aae02a11e0c9092d8612b46e44024647771767fd9e0091e9bdbf58cf72938a7f4c8df3c19816f86b422b9b7d8

  • SSDEEP

    98304:R3BwTJTo1JrbecEqENn/R3b9J4FvOTIPD0J/Bml5yr:RRwybebBpJEv3D0dP

Score
6/10

Malware Config

Signatures

  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • service.api.insta
    1⤵
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4588

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/service.api.insta/cache/com.batch.tmp.d4859d9c-cd80-4475-a3fd-57c791d64138.json
    Filesize

    77B

    MD5

    c61820515397e0d3686ec770c2f6ce34

    SHA1

    1360bf67cf9c8fb53ba865f2fd04cd2c1c571e5d

    SHA256

    b7f8241d39f3e4613191ed27c858899444efaec8de4359b340ee261dec136ed1

    SHA512

    5e4844938fbf75a786dd19ffdd88ddb15616257f044afbfd884e08b3b25202e511db44d1c7e600cfff7e7b7763b6bb4ed058035439bb9df5379170e71c6b1f4b

  • /data/user/0/service.api.insta/databases/LocalCampaignsSQLTracker.db
    Filesize

    24KB

    MD5

    78dfb71ae220ffa608f09caa1a85920f

    SHA1

    cb55f39d84d78d4426837c25944ad9d114d0fe4e

    SHA256

    831c5da06e12d1e9cf69797541d0f0b81f5a2cac69fb883e59c56630d83d1e59

    SHA512

    397721f0447e4853edd947c3a8b9f2762e8f192ead431c8aa391d499fab6f013a71c8277b40eb6388695b11111b49bef1bfbb1fd8a24b25a0cd19977e36b0c78

  • /data/user/0/service.api.insta/databases/LocalCampaignsSQLTracker.db-journal
    Filesize

    512B

    MD5

    c071e6684cf546ede0e593fb64abb009

    SHA1

    6f2506ed8bd590f074d9508c32c3429618edc7f2

    SHA256

    7661c1631fb4ecda57c3e753711cde7b41477dd860f918aaf59c14c871871318

    SHA512

    c0e49eb96ae756f982f4120899a362f11a8f72e31a894f08756488060e3805e558b307adc949ecf941c4a40db71ce1869d982d3429522aed6f320ed5884eaeed

  • /data/user/0/service.api.insta/databases/LocalCampaignsSQLTracker.db-journal
    Filesize

    8KB

    MD5

    ee399605e54f6fe8e54d7b0ee83e0c26

    SHA1

    adb7bb6202afa9a77d2952c95b2f3cfa9f022f6d

    SHA256

    591a95a53fbfc3bcc57057c7d8674a626c17ad04910d04d1709f862bb2444177

    SHA512

    38ee140eb2417f8c787465ecdb8f02fcac74748a6504f15c0fd0bbdc4e10027fcbbddd84036249438539350926bb61639aee1be7339e4f8af8793405752595f5

  • /data/user/0/service.api.insta/databases/LocalCampaignsSQLTracker.db-journal
    Filesize

    8KB

    MD5

    48143009e1e09ffaa73d160c10d4bd79

    SHA1

    e3b5a0142d633b133b4076f17cdc96ba9f1ac21f

    SHA256

    59e046fddb0dab2ae22ffa2b88ed710cc3501883534ea2066c872077f26e9074

    SHA512

    69a5f7f997ef525db147cd1fb4e3c812fea002514aa0f96f5e8eaf7d6b0471e4ac3876e73d4d24d1ed6a145d0c1696401812fae68135d3b232e60cb2c8a7c705

  • /data/user/0/service.api.insta/databases/ba_tr.db
    Filesize

    20KB

    MD5

    c920a07b750a60a7f0c9a3d123c9a670

    SHA1

    906b175ff00852667299321dc770d1a25c4a03a7

    SHA256

    f38d18b51f7dd05b6438a00957b548b1ed812e0d1b1455286847f5c0acd9bae1

    SHA512

    b9e74949a5181d1df4f5080b04e78feb73bd48db5a9562eaac768a631adc457ce360833c1a73abfa9f3fd1cff0c1fd719920de9b102094cea975a49be5a9aae4

  • /data/user/0/service.api.insta/databases/ba_tr.db-journal
    Filesize

    512B

    MD5

    2530873d1edb2a409ee569641858e9c9

    SHA1

    dfad6a564d634c5a87bde7f0264ceb7a7ad932be

    SHA256

    c7502898e19d108ba071da04436ad1c2e8b8fdb43b3a9de04522018ce4063204

    SHA512

    d9dab8706505d745eb6b3d7b272f0c112382d41a9408ef9010ab3f8f9510f2a60859882c064b91647073d5e59c1b528b95219b85c2417f8449ebc94fa1c3d1ff

  • /data/user/0/service.api.insta/databases/ba_tr.db-journal
    Filesize

    8KB

    MD5

    c579afd973f365cf3732144dbd887f3a

    SHA1

    df790cca18573760c6ce5d7abf1d38340ac42b0d

    SHA256

    4d55faf25ffdebf3ca729864ae80a29b0bcad8e3125f5e0726b84ac98000cd0f

    SHA512

    c81098a5a9e5d10a247fb702fe226c50adbb6d8d9f2e3c4fc96b5fe1eb22d0ccae6cd7b62571c3f7660c555c4a4dc3725d4a62b99a25185a2a3e838ee96cc82e

  • /data/user/0/service.api.insta/databases/ba_tr.db-journal
    Filesize

    8KB

    MD5

    cea0c53303b04a74a9edcc3ee7eeeaa0

    SHA1

    1b060d73971a77e22b4b5fc1af6ba08c8189eee9

    SHA256

    274b235028a9d63448ed2d44f7c59f15837264efd7267a54253804ab57efe662

    SHA512

    45dea9f3dedb463d30a64c8fd0645876fcae976ba9c37cabf9d8e937178747b84eb4d3b46f9ab9bb007fe4694d1ba8bfb7c791140d9fd69db7ad3520b0cab7da

  • /data/user/0/service.api.insta/databases/ba_tr.db-journal
    Filesize

    12KB

    MD5

    ef66b6fafc37da46184e67a809e1d2b2

    SHA1

    076a82500a6975487bae2d82c5b3eb8302ffdbdb

    SHA256

    fcec48fd965fef7e18e44c6312dbe8fefd49d7ba12a16c13ce7027e0c53214a5

    SHA512

    1b9064160dfe6820732fcc16bf96de6eee2533a34f849fa09cb8c73c93e0fc4a6913a9e861dcb7e74f95ee169a75ffa47a6048f9f86c51d81c7b34767209abcc

  • /data/user/0/service.api.insta/databases/ba_tr.db-journal
    Filesize

    8KB

    MD5

    1c7cbf412e34a66475d249aa61427622

    SHA1

    4e240fcbe713712ee3b99516cc711fcd325aca88

    SHA256

    c1f4fe1bc153c0e221af6c348bcd239e864a74ced67866b685ec67fcbf2693f8

    SHA512

    0d8ec9c6063a88423de333bd4e143e03015905ca9af8b963f24fd4da64ad1af99f60608eb442b2ea10aab9244f5d55c4d90ee4a3f18a6bbd14c6926296f1b22a

  • /data/user/0/service.api.insta/databases/ba_tr.db-journal
    Filesize

    8KB

    MD5

    1794fccba70000d75a182a7dd95a9756

    SHA1

    f7697e22124d5214343342f940a78f88ebd592b9

    SHA256

    8243e4286e1ee5e3281cbd021448e3d57803781634d461e3ca9825ff1dca19a1

    SHA512

    89e955f8061b90be8c6813f363d49dea5a2f4ebbf2607062945ef34c3ea778ac94e20a135f2c7777b0ae6bbe03cf101b581c1d569004ed65c8c655df21059d78

  • /data/user/0/service.api.insta/databases/i_user_accounts
    Filesize

    20KB

    MD5

    09a6926c399a760f83b0de3e7e0da5d5

    SHA1

    9f05d0887829fdbad70daf7dc4d3324111be8060

    SHA256

    baa824a3c9c829d19a4d89fe0daac534a97f0a7eebf6ca15d9e12a24b0228e60

    SHA512

    d9b26a548c91e0cb3e54d997bccb7a01ad951231783dba79b10bf5a9e14c05efd6e29afd3006ec17dee93d69ed7cb6394da9ff96c099f475ff72467190d60bf7

  • /data/user/0/service.api.insta/databases/i_user_accounts-journal
    Filesize

    8KB

    MD5

    b5e26bb784548d9f68a7a62b48f8a81a

    SHA1

    7c856418fcae0854b6e9499dc8e190bf63fd7772

    SHA256

    72fe2bfd06ee4f5ec76bbcad879c2ac1c6459fde936dd7dea816830a5bf09f70

    SHA512

    22e4bfd85b5b601b8edb58cc4fa4f823a06f55999cd2d8cef68e31277e0aa0a7ac6f2bb07d30255859156621f825955fd0e4ed4d94973f47d2483cc641f82269

  • /data/user/0/service.api.insta/databases/i_user_accounts-journal
    Filesize

    8KB

    MD5

    8db707112018911d4a76cc5b88fce00d

    SHA1

    f5742b9c19db2409c50e16c024299afadb503b52

    SHA256

    3087a829e857c49188a030514618914ec980bbb70301026ae47b6c151e0dbd24

    SHA512

    74e784da15a6768130167a6e7d69f4e05f663ed8a6d06f17d2d6226c2f56ce47fdfb7804c88f68a5e0dd6e25fd4669f55ee3204076a5aec9c16cdd22b519cacc

  • /data/user/0/service.api.insta/databases/i_user_accounts-journal
    Filesize

    512B

    MD5

    f2583971f10f661178d0c020ee7ad7d2

    SHA1

    812741e9da24f26d775661293d5489c645d021a8

    SHA256

    b979e6b3ce8d7ebc77c9a4ea021754c348badf73321469d5e05b7d7d76f4aa67

    SHA512

    1fff92cf38eae85576e7992e7115af031ec2e2c49a8cedd39c8049189575cb777c4ca8346a59e2bf170825077f40b8d40343bcc322924df1b4d4024e72eb0088