Analysis

  • max time kernel
    9s
  • max time network
    157s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    22-05-2024 12:19

General

  • Target

    FollowBegir02.apk

  • Size

    3.8MB

  • MD5

    5104526aa8ea72e6b87bacce18cd680f

  • SHA1

    8f10eee41f1fd2197974ca4738113b2412209dcc

  • SHA256

    9b1d0060f0f5b0cb26eb90a50ef3208ea75d137ad1a8aac87e70d354d1dd26e5

  • SHA512

    0098c514df9c3c9e0eb78a40cc2649423e3fe3a15252226355e87d8f81c57fb5abda818d3575d425b282f865155a739f440b2fc47ad361e59c4411b899153a3e

  • SSDEEP

    98304:Jc3BLTJTo1JrbecEqENn/R3J2UBTIPD0J/Bml5yJ:JcRLybebBpJ9UD0dt

Score
6/10

Malware Config

Signatures

  • Checks if the internet connection is available 1 TTPs 1 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • service.api.insta
    1⤵
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4290

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/service.api.insta/cache/com.batch.tmp.38191432-8129-4cbf-b3fe-522445c30781.json
    Filesize

    77B

    MD5

    80fcb06a1f8bea50155e03f8945f186c

    SHA1

    7f7cb61917c6e4ef5f163fc59d18ba0f07b87eca

    SHA256

    9fdc80e2f59bc00744caca7ca6b5d7451871ba4c8172e940c67c4c54a8517e15

    SHA512

    02d23486fe3761df11406405e90b61ab708e300bc1747b222546b21cc2780941529fec529f092f5b1acde2d6c142a1001f40b4c3b4b726e2a1d4ea7a4add0afd

  • /data/data/service.api.insta/databases/LocalCampaignsSQLTracker.db-journal
    Filesize

    512B

    MD5

    f911df28672f71e419c4c9476e35aba3

    SHA1

    418bb4dcd22180ca559a4b9a81424f51d1037c14

    SHA256

    92f655e2dac89234319eb1bc84ab7993900973f7b8ebe7bad33de0526594b877

    SHA512

    b6b4e54aa01e4e91bed3c4cd8e428753efadd285b6ad6a9bb14fd1a0834a44c1a2d1d3621dfe689f4888303f2edbe8e986e10d95366481e89b8cda923ae80083

  • /data/data/service.api.insta/databases/LocalCampaignsSQLTracker.db-wal
    Filesize

    36KB

    MD5

    3cca639d870927d2adfa4b4d80707407

    SHA1

    08d35d291cb701ed17a29efbd273a604c5cd17f9

    SHA256

    a9722e66c238e322ae12bf628d710cf7db381727b60fb93e85a5164f217b7943

    SHA512

    716237cf15f9828be03e0d0a80b1210fcc9e4e0c5fa77fde2675a3d865b278907cde7f9de1f5046f39df61648ad384904dafb67022c9d9742109ccd97543cc23

  • /data/data/service.api.insta/databases/ba_tr.db
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/service.api.insta/databases/ba_tr.db-journal
    Filesize

    512B

    MD5

    034eb8823e4d8be3a3040708f1c7ce18

    SHA1

    086d28225eafd39875c53b144ff8580676da9616

    SHA256

    662e11f6961020df7ad7b5a3a3b09d8dcb59602820c6a446c8c1345e4a9c7ab8

    SHA512

    45b309da7e62df48b6d123484f52c79bbc17a8705ec1f4d9bccb9aabfdfd0d777c088f7ef2de9f49c7950ddc7500216f8bb923f4f5a19575bfb4c8435bc77d21

  • /data/data/service.api.insta/databases/ba_tr.db-shm
    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/service.api.insta/databases/ba_tr.db-wal
    Filesize

    48KB

    MD5

    7b0789a16dbeb9e077d793669ac056f1

    SHA1

    d9aaeae46d3178dfa7c59d70a99e85aaba3895f3

    SHA256

    e0198fea83ca4b18eb68c06159c666d0973c6625ffc6905fcc35af05211f6890

    SHA512

    0d2ebd18e13df1f19a7ae87258cc06f22873fec04833cf277f19997f131140daf4c7bfa492b42ab0f9ce40d861655f86da695ea4cb06bdbbf6c3ff3f9442a092

  • /data/data/service.api.insta/databases/i_user_accounts-journal
    Filesize

    512B

    MD5

    59564a7391af60e24bdd1705b9d37d51

    SHA1

    3be6bf2480ddc6f75442aa712afcc7411b85a37f

    SHA256

    bca4923de487a1755aa5abc304a58bafe5faf6813cdf9a696b0385841427d2b8

    SHA512

    226effb4c013ff329917240990f7a0ef79c2dae7ea51ea434fb879483535ab68270e7290e9618a3f72f55db1523841cd50224c311f938c5553c4305dbfc28014

  • /data/data/service.api.insta/databases/i_user_accounts-wal
    Filesize

    32KB

    MD5

    0d79a78b48b147a7737a271e3621b642

    SHA1

    231dfe540739c3bf62cca9edccd5f8a4e3a40f21

    SHA256

    da2def7b019a4c98cdadcc2d79ac0d871239d7102298f4885156b7268ca6ad8d

    SHA512

    730c366f60661003e3abd96fa4da0fc92fb3cdbc77eb09cf61088d0e77747f8a0bbbccc620cf8960147cd6a5e038dbea8fff3913c5acb81fcc30ff297e40bcb7