b71c500a245b290374c806444f70356693f09e064ca648ea9b02674dd1d7b657

Analysis

max time kernel
179s
max time network
153s
platform
android_x64
resource
android-x64-20240514-en
resource tags

androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
submitted
23/05/2024, 12:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

V7.7.2.2_Test_dev.apk
Size

5.6MB
MD5

216b6774a74276a064433a66ee5f452f
SHA1

e8ea73aacc6988890cfc899d7ea652a34b1f7f07
SHA256

b71c500a245b290374c806444f70356693f09e064ca648ea9b02674dd1d7b657
SHA512

19dd07052e12ac7a52a3cc4345a9fe15af33dccfbe7036f9e6a408e923f0d87548d8d775986b6e2ccb9d81612a5d1ac527dae1d4f8a76554f73752a7e8bdaecf
SSDEEP

98304:dN1wnBKVhrG3F2Y6La4N+JrBJsbioM+0Ts/XY8r/89m7L:6KV43MNijlg/XY4Z

Score

7^/10

persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.fanasa.fnapp

com.fanasa.fnapp
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:5053

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.fanasa.fnapp/databases/dbfnver20210309.db

Filesize
292KB

MD5
3838716cbdc9bba1eca2a64bfcb7fd83

SHA1
9704985d7ab51fed33fcdbfa9cec3584cd9e2b92

SHA256
42fe584742137baf02e775a58cccb81e01480ff4a4517c9db16b49041bea2689

SHA512
d687fa049c2b1a85f8c9f1c75b3da4982135a0e84ed36c0070eba839ee3860e5891ed63d29f1f7fcbfd20683e6679af19a7eebc554620fd30c5e876ca6d43d10

Download Submit
/data/data/com.fanasa.fnapp/databases/dbfnver20210309.db-journal

Filesize
512B

MD5
7631c33f8b4eca04a06526632c3add33

SHA1
9df05f5d6355b7f8e05959f92e0474f23d03478d

SHA256
65a165f499a473fcd3417e8f128d88d0b90a39f5e8928fdd18b126e347c421fb

SHA512
8201103b5d3a69196b8c3f97f40c9d3a4cd38dac5026e3841d1860b185366eea235ea104a44dcde30fe4f8ce9ebffdd5923faf1bc99672ef78b842dca6f5cd4c

Download Submit
/data/data/com.fanasa.fnapp/databases/dbfnver20210309.db-journal

Filesize
8KB

MD5
0f13a085ef561affd3eac3f945ec34ea

SHA1
aa4d575efba7e035aa729baeaf6da5af2ce226bf

SHA256
0313e0a2e697fa284b98b5944ff727e8069ddcfa00e96d9e4df2d1290c9922d2

SHA512
357a9eac621bce132e64484f035e62749ed1edd85ed59459b30a665b3026df0cced912f7591949d910c9ea3ff90930203f6496b8791013905eb800af244ed8bb

Download Submit
/data/data/com.fanasa.fnapp/databases/dbfnver20210309.db-journal

Filesize
8KB

MD5
44c399ad8c3242b4d24173b3619a7a24

SHA1
55f3183408a8656596a0d5471cba9fa3c5c85630

SHA256
d1e2593308232c896d32b7e96843f78bcbb39e7d9ac0ab6f73d20e0ef70121f1

SHA512
5849820f1f0b7f3c3a84182316aaa57ad3673f3e7fdfc6fa645858c3776251ff64af894ce8816f2e1d00951e6eeeb82b50de61f8ff6f1d773e487fcf45681d10

Download Submit
/data/data/com.fanasa.fnapp/databases/dbfnver20210309.db-journal

Filesize
8KB

MD5
a5824a539a41f2a4a49309027f5575e2

SHA1
791a765efb79d073914c884c74fee358b5273b14

SHA256
a001f019c8fd53ccdf53618d91c21276a5578e7c707c191bec793ef1c1ec4afa

SHA512
22ef4df58113317fda869110970e31e990a6ac6019f0758a6cd49584a0cbf6563192ae22eb81eac7c319a70f244010d0c5cf79d1dbe406b7d06db1faef4be5c3

Download Submit