Analysis

  • max time kernel
    179s
  • max time network
    192s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    23-05-2024 01:32

General

  • Target

    5cb1fdde075753692ebc51e12bd3e1b0617163c91cc817ee0c1195e93ad0e67b.apk

  • Size

    17.0MB

  • MD5

    c53693d288c5f5891d2a51290834d56a

  • SHA1

    a86ca601046258565d0e26bcf5c57a781b208be0

  • SHA256

    5cb1fdde075753692ebc51e12bd3e1b0617163c91cc817ee0c1195e93ad0e67b

  • SHA512

    8bc659d6b1f00460c2d243a7403d23dab5f777d22c63915b9cc1a9d817e67e71028c58b53eec8fc0f8a25843f5bab4c0e8b43a172b8ca5ebfcb5a44ba253b80e

  • SSDEEP

    393216:IveEHRFEKvZeGb1pJXYXpNp45O78QUFw5N:m9vEKv4U1pJXgPr2i5N

Malware Config

Signatures

  • Checks CPU information 2 TTPs 1 IoCs

    Checks CPU information which indicate if the system is an emulator.

  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

  • Acquires the wake lock 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs

Processes

  • com.houdatv.app
    1⤵
    • Checks CPU information
    • Checks memory information
    • Obtains sensitive information copied to the device clipboard
    • Acquires the wake lock
    • Checks if the internet connection is available
    PID:4475

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.houdatv.app/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    d9cf75fdd1c2292d986f6c3d5d60f2c8

    SHA1

    07ecb1d3a26d952ae5fecf54f36699ab498510b1

    SHA256

    2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

    SHA512

    442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

  • /data/user/0/com.houdatv.app/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    055bcfb0ad0a21ca70529d82ca0a812a

    SHA1

    b4e5996458356526ac60be01d1dd36c32e876e5b

    SHA256

    3294589cdb22049aa6ee0dc3cd6457313c8d1bcff462faec3ba0e191c49a4c0f

    SHA512

    c89d3cfcaeb788b942ea8e1bdf611c00fee39a797b0d8f7d42af7e6cd66ada7aeaf86da17b80b4f4be216bc935181b38be792b18a4aa27c23e0812c8e063b9dd

  • /data/user/0/com.houdatv.app/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    1b9f16b1246b7f25ed2fb00d30c61f9b

    SHA1

    7be62f92a7c5ed115899cfd4cdad4da5d20a690d

    SHA256

    538148ea76a9d3be21ce21a67856eb06c480e2daa23ab4fb25a98ded651f321e

    SHA512

    9e03b13d4b60bf921114ef3b248ff83c8f5b0d56b362fe6bd01a7ee953ddbbb63fd34504796d0fab7f2df2a3bc462183c18fa8d541dec1097e8a3293c7943eef

  • /data/user/0/com.houdatv.app/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    78785ecf2fc353998dfd063d302689f0

    SHA1

    bfdeacb8c1bf02b2ecaf38eb10e0b224f3093afa

    SHA256

    30ce0d4b126760c93a1c6a96455d8da9690510e7370ddfc7135c77d498421b9c

    SHA512

    062ad43e514745460a7a308350121b17133094e668dcd0f6cec6bc2be6c449b6563951486b3b5b23408ca1fc8903e4d330dc8e45a6bcb02e52d34c778c6b7885

  • /data/user/0/com.houdatv.app/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    6efe7877e65a0773500bfa024bd6893f

    SHA1

    f476f005c807cd1d1986302ee1fb05607e87289d

    SHA256

    56d55d35e335865dc6242941e45c14e266c0957456e119847bc7330e697fa92a

    SHA512

    d5af0fed6c14974ad7abb92697007f1b7d495dbcd6fd2dc681bada8ea8d3510a7278e150df2f1ff081818d024da4691c371f97079db3dbed8f5e476488214df4

  • /data/user/0/com.houdatv.app/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    75430622a43555d46553fbb88893335c

    SHA1

    dd99b14798fe149b598cfd897f74d09e2b789f9f

    SHA256

    a2e2aafd8db8ab0f85c84e10b27abd126383e444068b4f33361f901622e92df1

    SHA512

    fd7f1793eeb0fe851da22285434f3c34c686893364867190b1cdd66a8ad801ca04ee374a5d0a05795c764dc371875d6d9abf4d068f6765da1985b13424ff7219

  • /data/user/0/com.houdatv.app/databases/google_app_measurement_local.db-journal
    Filesize

    512B

    MD5

    a4e04d95613e24b826e24c262210fab5

    SHA1

    295a82f7ffb1b4eefca51e64594d15bd41cc91bf

    SHA256

    542b85bedb834a8079d103f67eb9ee26ce56eacd3143c43545b6f4013ea35066

    SHA512

    f0eed9b6505930fdcc09e9679de94a71c4f3e9e50aa33df001fc9bc31d842efd7a7a3dbd97adc87bf1b600d9c1bbd48d585bd7c8aa1432ccc32f419560bce0c7

  • /data/user/0/com.houdatv.app/databases/google_app_measurement_local.db-journal
    Filesize

    8KB

    MD5

    8ccc181bfbc2ddaffabfa3fb1fddb5b5

    SHA1

    40e4b3509ad0913ea26ea16b09fb79ee5d77f650

    SHA256

    1d2dfcc0b3611dbb168a15ffe03111054a3c687220c0babe74ce535070cdffd0

    SHA512

    27c858f2aff89742030c46e7eb17ad237f77c11b562d1eb503b10d2a3d7613fa40d8c96a36861294debc88c16d9d3bd9b4b1aa73695973f5544e19ffac538885

  • /data/user/0/com.houdatv.app/databases/google_app_measurement_local.db-journal
    Filesize

    4KB

    MD5

    39b9093f3cac1eec28589d1351db2a9a

    SHA1

    a9358b532065015c191f8bab668850322b8db4bf

    SHA256

    9784204e3a97665109005553f2e02b72c0e5aaecbce00b1a5d51beeaf08354b1

    SHA512

    46c458ea24d2cdccb04040981a992a5410bf602d9da277596ae49043245b3c95824b228a45bf364e2728af369bc020f67910f2ebc15679837aec3c86df278f23

  • /data/user/0/com.houdatv.app/databases/google_app_measurement_local.db-journal
    Filesize

    8KB

    MD5

    f51978c032c2b758d6f2b2094d63cddc

    SHA1

    de64ab962890e935a213594888c11367c3615dbd

    SHA256

    6ca333fa80321bdb3920be2f35abcfe1efd6039ddfae9997525991f82c54c677

    SHA512

    548f2d3311cc5e2157581caf87827af45331563fceb9d907dd973dee255dc26408012d8d54fd7badb418d62df4f82370b1a303da3f5ab6486203f39777fce31a

  • /data/user/0/com.houdatv.app/databases/google_app_measurement_local.db-journal
    Filesize

    8KB

    MD5

    cec89df6c51e2935d27bed383c7e502f

    SHA1

    f2e17c6286e59336db58297589d9236ff768aa8c

    SHA256

    abddde4522062920bf74456b3ea97884baedf4523a1b07ae12c56aaa659fabee

    SHA512

    0b988d9896dae466c2528544102028ed1042f53b9c17c58209f8c50503ff9edeb9fcc771afde3f935e6b8dd5e84295519c0b8896070061b28cdbd48a15b6de19

  • /data/user/0/com.houdatv.app/databases/google_app_measurement_local.db-journal
    Filesize

    8KB

    MD5

    b5fc56f6a952966a4d13abd83d3cd2db

    SHA1

    67005281a462fd7f12a62296ee078ac33e499fc2

    SHA256

    816025da7ba7abf91e8bd0b7439013515ea7f812903a9c6a7221220e88b03568

    SHA512

    82d719ef758eb0a19e20e4b96558a231c2239c58b44cf1890be50f5770cfc85c383a3a597d1b314b955e5d889e39eee33305f2e8aaaac2f5a474d9e824f66a7b

  • /data/user/0/com.houdatv.app/files/PersistedInstallation3273486853222334985tmp
    Filesize

    79B

    MD5

    4caaf864aa69dba073586d966219a427

    SHA1

    741509b611d9ecd02c1f671831deeccd0d85d36b

    SHA256

    507c04706a5ca0f521e9b6c86eabf71841b62be4bf278b072d726f4b182786a4

    SHA512

    b0341dbca3580ef407ddc7d0ba0db0f3a487349c4f7617d96459622d6c6892a4bca8f931aaf59ac7afcf2da935c4b4934f555ebd8f17226691c4374cde723503

  • /data/user/0/com.houdatv.app/files/PersistedInstallation5910863278105520950tmp
    Filesize

    561B

    MD5

    6993d626abd546d580dfe9a28bb8736f

    SHA1

    cb4b77b04a0f104d0f9186008e4c6e9eb76d028a

    SHA256

    3719c86e13a7a2029f731ea410cb2d19c8025089b91dcd8cf4fb1d99f92240c7

    SHA512

    a76e88b9cb04a669824ef269f0e274b91cb87bb310228bbc8f6e399191d299df19ef9d0c09a0217ae213093a5b70223b4d4d362ef1d8e6e8e1094c5a654c8a4b

  • /data/user/0/com.houdatv.app/files/font
    Filesize

    149KB

    MD5

    62027b7aa5859e5ecdf9a09a5ee7cdac

    SHA1

    91e36b6ef56ff61b29ddc8ff9a57ee1b0cb84cd2

    SHA256

    33413ebb0ff003b260a3ed3f9c6c327c0ca5f15b89a04fea1dfc73ce8e306952

    SHA512

    e8a09e9fb32db04a5a3b58bd47f8eafefa5e0dfb1cf9289f6bc0fe543337b13676f5700dcfb86fe277fba4179fc2febb34825b471c735ab357330eee8d642731

  • /data/user/0/com.houdatv.app/files/ico_share
    Filesize

    1KB

    MD5

    9769e88e084bee48eac8c479b429a556

    SHA1

    8bd33f69407f65bdc02453562a356bb51f581f56

    SHA256

    003772e5bb3502eaad74c39dcc197ab9009d9c0f0b679487b83b8c55eacf2332

    SHA512

    d8164f54fbadfa95d785519c622cdf5d9affac22eff67acc352dcf00266bd5407e9e2fea01d158d59a1e71744a0b28609d75763489f7b4a13fd54a09f489ebb5

  • /data/user/0/com.houdatv.app/files/splash
    Filesize

    99B

    MD5

    3be54e276c1ac41c4a0618f1df4e4ad4

    SHA1

    ba0c04e100e92a18a9d31c1da59d77e861d6055c

    SHA256

    be5d3cf6c8cddef930d412bc15d8af24ba654ca0961d6659b57ca7554866326e

    SHA512

    e1cf440871316ae3aa76e06821f49b06cc2429f4493317ba812a1cc52a335dbc7452815235cb5c625158c44dfccc5ce74de0543be7c6edac1a4bfc372639e30a

  • /data/user/0/com.houdatv.app/files/vinebre_ac.txt
    Filesize

    19B

    MD5

    35a4d19b17a03950f9f64d4e0792839f

    SHA1

    8fcab69d96ad983f5e23be35dd69682db1166dcb

    SHA256

    39a7a1c84907c901d4641067e8bd6d5f5cd36acdd36dc9997c2663e7696f7fe3

    SHA512

    82d7e743e3b0c77439cbe42853d2b1cf5b504ecc1e0caa04fcafe3b38b7c35489fa888db0633cf9f4170f60fc0ec2d230a9a21448bd9d539bb57b6b9fca0b1d8

  • /data/user/0/com.houdatv.app/no_backup/androidx.work.workdb
    Filesize

    4KB

    MD5

    7e858c4054eb00fcddc653a04e5cd1c6

    SHA1

    2e056bf31a8d78df136f02a62afeeca77f4faccf

    SHA256

    9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

    SHA512

    d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

  • /data/user/0/com.houdatv.app/no_backup/androidx.work.workdb-journal
    Filesize

    512B

    MD5

    abf3861948f9a670033e441518d43516

    SHA1

    998bd8bbceeaf726bd238c586467b16259c62a66

    SHA256

    a457a7b88897ee3d96593480373f0048318de1e4539b357867cb68c634cee990

    SHA512

    4366fd84ccd9e71eb76e99f5d7a360e62866f6302748c83a406ed0c9edfdd4f9908571d1efd5b6184d6b5497857f6b5c89068b44385351c627031a073c8a5b96

  • /data/user/0/com.houdatv.app/no_backup/androidx.work.workdb-shm
    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/user/0/com.houdatv.app/no_backup/androidx.work.workdb-wal
    Filesize

    16KB

    MD5

    c854d61f333ddb1b3dab7463c26ee9da

    SHA1

    6f6be0b308d9a17a5f8bbd3ec6603f39d6ec7ad4

    SHA256

    6986ce9edd1e7536ad58a585ec61205f923b96a0f9f5da50c931eec244160b8f

    SHA512

    c24e28f6d32ab86d59ac9af86560431bda855cfcbc10941806b7a42dc9f7da600331339cf16c3877a892da6a83d47ac69964efd1f46302efc75166acaba3cd61

  • /data/user/0/com.houdatv.app/no_backup/androidx.work.workdb-wal
    Filesize

    108KB

    MD5

    76934eed9fa0928582395febe1523c34

    SHA1

    a6dc40a518072f4f33774622b1af7756ae73fa9f

    SHA256

    b0271d40f6293b3b4ac077e71e41a10bd65eeaba0433773cd882b262a9925b8f

    SHA512

    4a51d8c78b35cd39b4044f77ce7f80ac4af22aba8cb1b1df4c4eced24dfef0aaf42a01d6e7b656ef7e30cb314bf2ce1ae33bac0ebe5af5fd6f37db5fe788684f

  • /data/user/0/com.houdatv.app/no_backup/com.google.InstanceId.properties
    Filesize

    2KB

    MD5

    9990d9a029d87d6af53209709515772b

    SHA1

    fab3579d0cfcdaf4abf00ec3b4ce5958b9d5854d

    SHA256

    6bfafdd163e166931a0fbabc5d1c541f9489e189ffda1ee907a5cdcf89958469

    SHA512

    2dce27b6b084c08772ebce4c52a1bccdb67a696d0b20889395de5849119d8dbe9e783a7d064ded6aa22c42897f977e47000eb1dcb4e570588357203ec4697c71