907b61dc435d6f09ad170dd38b4da22ee4e0bdab1613552b9f5d061f1bd7c80c

Analysis

max time kernel
179s
max time network
193s
platform
android_x86
resource
android-x86-arm-20240514-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
submitted
24/05/2024, 11:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

MyBuddyTCC21e.apk
Size

9.9MB
MD5

1297beb74475f29894a9b7ab9108d4ca
SHA1

cbf4bec4d9e39e32dad7791bd006948354cfc8e2
SHA256

907b61dc435d6f09ad170dd38b4da22ee4e0bdab1613552b9f5d061f1bd7c80c
SHA512

cb998da038700d953df875b9bfad2e901981ea0143fdbd2c4eb66ef44be9e86bfef71aba6011cdfdee507a39598fa5e0680ee93fb9d0f09f66eadb681756ccca
SSDEEP

196608:aUtVH3IiKBpz4e/9rPsasyk02nzDp3l7TSVYpvrkDNjq8RAH+atJzbNqEZ:VVXI7bzrFrkwqR17T5pvri1qEAH+atJ7

Score

7^/10

discovery persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.my_fleet.firebasetest

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.my_fleet.firebasetest

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.my_fleet.firebasetest

com.my_fleet.firebasetest
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
PID:4272

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.my_fleet.firebasetest/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.my_fleet.firebasetest/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
99d92683fdd4a44fe61f279bbcfd7c24

SHA1
5d8473d0fde4bb30a5cc71cdbd4a59a9062046e0

SHA256
71fd767ee5f2fcaee025b9b1466a09cf3106c8d97c40ca3ed9df7d9f00f45826

SHA512
06dac56855d65ad985858fe30bd14cbefe489910bd011c2928b3b140ab49f3f58cec4d2e531ff5109b7fb6bafe46a07ad05ba48b8cda151ae5870365b511e4cc

Download Submit
/data/data/com.my_fleet.firebasetest/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.my_fleet.firebasetest/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
6db009eb9f758781e5f7237a9a376455

SHA1
b10178f8a12665066dcd4925758ddea83e7c35b8

SHA256
b43031edd0f182cc4171ed1f0ac761d09e3737f8cc75f5192d5b61fa2c1119d4

SHA512
f9e2a7bc4d051a3f1abe4d12df7bed89e02250f4d3fd708158d9b8e7ddd1b67c824f7a94841ae9b8375ad245ec26a3806036f563c221ebe39e1916ea8541d986

Download Submit
/data/data/com.my_fleet.firebasetest/databases/google_app_measurement_local.db

Filesize
16KB

MD5
9c53c18f264d6f1ef35677ead7e02b19

SHA1
c149af7301b56ee581375f353c59f66f832967f0

SHA256
521ae360ad5af8a23df272540a5f78399914c7581db0ca1c6bacd710fa647032

SHA512
50a83727ed75a01e4a8dc22bb989aa757fe85c372575017592f25c7dfe9e3783dda6d8223643945e897d4678692ae4b7c40bbbebea8d2487ee2644030ca53050

Download Submit
/data/data/com.my_fleet.firebasetest/databases/google_app_measurement_local.db

Filesize
16KB

MD5
424e0c8fcb69f4668815aa8372889075

SHA1
f94cdbd6fb2e69f76809ce38307c97d95ddfc155

SHA256
47393a24fe9f1ae8d6283778548c1c1bffe505013bc1e001b8d5ab7cd68c2d5a

SHA512
e6f3563a20753c07939bfcd62920c7cf3cb4789d7e4569f8114809d8d605cf8a03e3908fc190fdde9ece0c48619ec1bf71e5149f698d8c251392d2835e0aa892

Download Submit
/data/data/com.my_fleet.firebasetest/databases/google_app_measurement_local.db

Filesize
16KB

MD5
5622a30d0145c98a6a0c62bf4a76b1ee

SHA1
a7b1ea39c339dd5867b9e5950e836cd50e0a22bc

SHA256
d2c3bccf7652a5f8bb86d32da0f0448a08560b0086e48132f76933c2b4f9e0ac

SHA512
1cc304619490c8aece2428bd9a7dd8530f72957a2acaffc26b91e2fd6782f4bbf5eb52512479be550441a8e5fe49d3c935cdc4e1576c37234c93e2709e2c8e57

Download Submit
/data/data/com.my_fleet.firebasetest/databases/google_app_measurement_local.db

Filesize
16KB

MD5
2eb89bef452b7302bead38f5e09cae51

SHA1
474ac157cc029924c8fe17293db8c001b1456166

SHA256
3b64b31e8f9e715c4a0b0f6b6c9bf57ee07887c48795f64170207ee3e909ddbe

SHA512
8fefc2c28012486fee4d18243086702bcee445597b4e6efd8790c55f67c70fe8de41aa12908297c60cf1c33a23b34d0442c4a233aa362ae39106e2b652e62601

Download Submit
/data/data/com.my_fleet.firebasetest/databases/google_app_measurement_local.db

Filesize
16KB

MD5
9c26b30e8bcf655a769c8f17d4513075

SHA1
c8b70f2b02f1952b00dee1e3f3a024e4c1025036

SHA256
cb2261b75518006c57c6c7a46ad502885fe95b1082ab3f1aa1a2f5b49b219dd9

SHA512
691b0e38a213cad256c64518156ab35175ff62181be820c2015a0db95a1571bac5b7919d1af63cdb81707e2d33c0bc710e1ed0a0acab3212e0201ec9c6d338b7

Download Submit
/data/data/com.my_fleet.firebasetest/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.my_fleet.firebasetest/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
bb30b1acdc82650542f9bb39f1443df9

SHA1
efe1c6c371c747f0cc287ea8ec2a14c01b78e387

SHA256
977cdf3191478426951edc07915bd9f951317df13d0050623f6e2a2aabe98372

SHA512
3b38c8561f5baabf3088bc55d9da3e1b0d5597dab1c7c6229fb41036391f2dcb786840dbeef7bddac80199aadff827d32494d76c9fecbbc4b417a43ac63c4364

Download Submit
/data/data/com.my_fleet.firebasetest/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
41591d2b2d5e803f1b6ff9cea3eb9e08

SHA1
bc67b64dda8130121764bcd10affacff635d43b1

SHA256
2aed296b9d551a0863a377da9284aec226874faa6a8be62aa110283e22d7cb01

SHA512
f0390116619c508b427e5ecbbb91d813af5470a8d194ad7a40fb801b734b31ea37a962ee8e32ea0d1dec8cd06dd62122ff9e59cfc5ef0a25ee1be03eaa2535af

Download Submit
/data/data/com.my_fleet.firebasetest/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
c0b615cbd486a192cdde429cac6f0a96

SHA1
84d69cd492059b000bb64f413aae45a59c92344e

SHA256
a2aaf596f9ee3f66677d42557e0d755c94ab7498c8ed2a1af40251ef4e0d5e1e

SHA512
65264884635eae975227bb1d29735b2206e82ec3ca0ac79e20c2a276c44de40e955cea0cb181fb6d8baddb96b7034d7c8d15fa82902fde0e216fc6baff4afa0c

Download Submit
/data/data/com.my_fleet.firebasetest/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
b1f73ff3abda296daadfc8daa16f2bd8

SHA1
e61356f8205782006dafc3d768aef96418c81984

SHA256
3aa1ff9c7b294856cd3a448ac9fa350b2250bdcc8092054e50ebe4bca1f26436

SHA512
dc435dbfc3603a5713d47d23ffc194a1b8f2718055b80884cc8c058ba2386f2f9dda6bd8b4c34d0358ddde0d07049847f98e9ae57942fe762568cc24c0a7ac82

Download Submit
/data/data/com.my_fleet.firebasetest/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
83416101ef4e4a0dc16355238599e35f

SHA1
e7fd31f1d199cea47b4247911c0bd7d1699d94b3

SHA256
d7e7c29a830448ad7e0315dc6e2f649cb1769e7899d1ac95b1b0fa73d10c7140

SHA512
2db7250b733aa6eb48d2ce2db234305c3a97bdc7c2ab3efdfa685295f941abbc070e764b72cccdf10719618dbef74bffc0f0351d51b53ef8ac256a795781560c

Download Submit
/data/data/com.my_fleet.firebasetest/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
1afd390f5633464a2870cfbf83604a2a

SHA1
14526a32c1cbdae08f4c1f7589c5c5f0cdafe542

SHA256
8e3f941a7821925d8eee1ebf35920d4f40c6e3c48b0177d58c55611cd683d1c7

SHA512
91032063ddc747cdc7bf4be358a8c4168b1ffe5d5230ce40043c4df3c19bf272bee7a18b5336fd67cb27e890ce9a82f5a1a5adf2fa5e3ac3675a3985e6ecc41d

Download Submit
/data/data/com.my_fleet.firebasetest/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
418996755018e5f14e66e76c306613d2

SHA1
a4397795a2a89ac75a43c886110f07d4002bdfdc

SHA256
a654a0a2e45252ed4f49443a3cca7607361e00aa7788d7a77f404287071044c0

SHA512
975c851ca8f3d8a63d296541c40181a9c3f3614b18be122fcf0b31171067179640e169c1af0f4fccb9a87293cdd2ee6be5f5711159fd9e1741c14e4844670916

Download Submit
/data/data/com.my_fleet.firebasetest/files/PersistedInstallation4628621985997412361tmp

Filesize
570B

MD5
17e8b351be10316a724e137808306b05

SHA1
f36d70a95d3bf8da866fe9ababdcbbf587e621d8

SHA256
027788fbed27f1ad1151101e21e09a69693976657c8818c2bf298174ce666325

SHA512
4025e733d57abdf6ba92f6d04e34236a0a503b4fcf128cb3daf24e79d5ae2dbd2a3ef1ec54b26ff35369e9b5d45fe7ab341749a280fe41830fd5cf34ab6f09da

Download Submit
/data/data/com.my_fleet.firebasetest/files/PersistedInstallation4691465307336929218tmp

Filesize
90B

MD5
d461eafa10ac995aa79ca1e3427ba092

SHA1
0cb46a6d27b9fe4039afca2abef119b4e0ecc77c

SHA256
0fa3497e2a5356b80da65e774d598a1d867d6f2ec46e06bf471a2135a2aa6b62

SHA512
0050afb546905386ad604f8256eb4c07d97f70afd27ebec586696572846fc0cb3869e643c26de2ca20486748ac888545d542142443d2db3147ad010be81d6aed

Download Submit
/data/data/com.my_fleet.firebasetest/files/frc_1:184262023253:android:679f852f71690ad5dd1cdc_firebase_defaults.json

Filesize
1KB

MD5
9d0eab8d713163e2e329549b4b3ae62b

SHA1
e10048a127a0c758f24fe157c092347762bc47ae

SHA256
a0fea94f8cac033932cc0d92dd2ec83b093bae3d557a7cc28f9d9c39c5c9d7ca

SHA512
5891628df1ce41c45bd444f057cda5f7b3c076169a87e1fc2efec047c8d17f080e5b7992864f5e70e757b59172ea336de1f5176bb91362eff87bf2a166ed7f24

Download Submit
/data/data/com.my_fleet.firebasetest/files/frc_1:184262023253:android:679f852f71690ad5dd1cdc_firebase_fetch.json

Filesize
2KB

MD5
f420c32c2e25c7c3dde52fc19e84d1a7

SHA1
a32170a927c554e327bd52545d40ddc2ddd43ded

SHA256
51458a1d9aab891793e372b76b45b8a45753327263125e386e541f86f39ee568

SHA512
ed4d12953806bcdc2945561e0abdaf4a910d302d77194cda0ff7ccebde03d46bd26bf876d3e346ace951d4b606d63f7522a7fb31f5ccb3f9417c1683adb98ba6

Download Submit