823a55ab682c86583af694a3f4d94dc900a2328011b28cb421f5ed967c4d9dab

Analysis

max time kernel
8s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
22-05-2024 12:15

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

FollowBegir03.apk
Size

3.8MB
MD5

13b639635e2785583ba65b3150138f8a
SHA1

29e2a1dda4f8324a925ba631ff675c46bcc98263
SHA256

823a55ab682c86583af694a3f4d94dc900a2328011b28cb421f5ed967c4d9dab
SHA512

bb2220bc910cca8c7a71160e51a189f9a021ba3ce340f8ab31e50ded44c82a6fec560c0b54e1a4a5eac37ee61787041d602662927a6a1579f5703ba5eadefb1e
SSDEEP

98304:bG3BfTJTo1JrbecEqENn/R3+9J4FvmTIPD0J/Bml5yw:bGRfybebBpmEvvD0d8

Score

6^/10

discovery impact

Malware Config

Signatures

Checks if the internet connection is available 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

service.api.insta

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo service.api.insta
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

Data Encrypted for Impact
T1471

Processes:

service.api.insta

description ioc process

Framework API call javax.crypto.Cipher.doFinal service.api.insta

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	service.api.insta

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	service.api.insta

service.api.insta
1⤵
- Checks if the internet connection is available
- Uses Crypto APIs (Might try to encrypt user data)
PID:4318

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/service.api.insta/cache/com.batch.tmp.f797f981-99bd-40ec-8751-b31c5fb320c2.json
Filesize
77B

MD5
8a7af37d508d647541f6f6cef4f32306

SHA1
8ce8d98ca3a6102b6a8d8f6b867863c5c295aa3b

SHA256
b03ee21104f39020d78a437deb2dd2947cbc06f40df7fbbf757dbc28fe6354cd

SHA512
a2c82da09b876b798f7526d432aeccd90546775ba4f6b86681b7081f4d727042a97033696878eb78d2a672f2cfa7307fac0f934389ddca31aac531eb7cc868d6

Download Submit
/data/data/service.api.insta/databases/LocalCampaignsSQLTracker.db-journal
Filesize
512B

MD5
e7ec5b19112855f9f7cac2a4ac3cd006

SHA1
343069256625fb9f738194548e08206e046f5567

SHA256
85a150900512f72bcad891a2cdc395d7de5d7312a02074289c105f2f67145baa

SHA512
f685e401356b62e529b8b20bcd9ba31601f38fbd471d51449a19134faeeb906c71b7f5521d5ab76f7bcabe3d085f0cfa48ca3044c0b4b75f318a77bfa39a9155

Download Submit
/data/data/service.api.insta/databases/LocalCampaignsSQLTracker.db-wal
Filesize
36KB

MD5
2343f244b0768ec496d03e4be18f2930

SHA1
b3c017b4825bd094cae5d1e7b1cec31c4ef28825

SHA256
fa9d41bdfa1b646447f3cad4b2c020c4253154fbd8851cf0d88f1b6f30e3bb9f

SHA512
80b6aa92ebafe45db05eb7929bd3beb30243a046042d082badb52861017dcb41b19f48c5edfee6af14d89f2632b5e52a8b9bbdceba12b7e654a07b3cfaa0e327

Download Submit
/data/data/service.api.insta/databases/ba_tr.db
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/service.api.insta/databases/ba_tr.db-journal
Filesize
512B

MD5
5bd0a7ba4b2b12ffd95461a9d550ca6e

SHA1
ccf55da6449dd373c6c1af3e014451d0ba9e5a32

SHA256
6e1da6eb42d5e0f9941110ad8bfc55b99919981e69fc736e0803237e0f00506f

SHA512
9da865d36c99a50e7b524289de86bcfcf8a44a2b6fe30ec554bf13ce5765c0d05f697df5c0cfa0c9aadf2cc53b62384049682c6a8a48f77fd16a604d1b00fb7f

Download Submit
/data/data/service.api.insta/databases/ba_tr.db-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/service.api.insta/databases/ba_tr.db-wal
Filesize
48KB

MD5
9fb3abd62b5c2de94888796f952b0b19

SHA1
335962a2cc055c893b11d8f27455abd0bea653ef

SHA256
cfeb206062223fe8d9664dde20509620ad688de001781cc3c15f662be88592a8

SHA512
af4662fa7ee0f438c328565851ae176de5953fd1ccf2b37a20fd674e334aa7320e4daa5c01655caea823bf6b9b72c8869ef9656ddfe1618dc60d83f2d8577c4e

Download Submit
/data/data/service.api.insta/databases/i_user_accounts-journal
Filesize
512B

MD5
66137f3d8670f9f092e463f754f0c0ac

SHA1
acf056e3ea4216fb69565f99856a2ffdfcf03ca6

SHA256
15ca15e8d2b28e2870c64c801e65f6c9be72952faa163ab67fdb2415d5a662ef

SHA512
40be9b437ddc0074aa1d8eab6fb3e1ab2671f1e31a243ee7e344923df861bb2ffdef2a7e6a4091634634163ba0c5a442437872cab539fdfe4544b29c9af08ce5

Download Submit
/data/data/service.api.insta/databases/i_user_accounts-wal
Filesize
32KB

MD5
bb881192dce17c7d2c9b3648e3ee9fcd

SHA1
4bac2caa81aa350d9bd8eec4387f767af3b7a108

SHA256
b5ba88940788f6118e2609de20468f99e5fb2c8b9a342d0553b495d19131b673

SHA512
e7b845f37401c161655faf9dc1fc0b89a0e6d5bbab04f4b9365523a04f92acebf07102bb3d59377c169b9c2f87227da2245fa8e594a14ecb74b24454707eb889

Download Submit