Analysis
-
max time kernel
71s -
max time network
148s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
-
submitted
24-05-2024 12:40
General
-
Target
b2livecam.apk
-
Size
3.9MB
-
MD5
c9f96cf69638d9644e2a31ca656ac8f4
-
SHA1
afae9b0c961119acf66d977c0d22814b58f32451
-
SHA256
f69b553926e56ee3790db11d05464c31e9ad14e561842590f7ba2e155999ba19
-
SHA512
8c53b239230cc2ef98082a6e0cc6723b10f6195e0e1e96e8bd934ca5b3357d6c2425c91e7fc8faa03f10f3b23380a71130206dd9c36506e374c64fd316fec851
-
SSDEEP
98304:wrL0Vvg9pn6hnEG4hx7+FNFbEbW4u5UXLbZ+Or2p+:wr36hEG4+jFoC4uGLN+gL
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 1 IoCs
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
-
Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
-
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Acquires the wake lock 1 IoCs
-
Checks if the internet connection is available 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
-
Checks the presence of a debugger
Processes
-
com.b2livecam1.appdeploy1⤵
- Checks if the Android device is rooted.
- Checks CPU information
- Checks memory information
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Acquires the wake lock
- Checks if the internet connection is available
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.b2livecam1.appdeploy/databases/OneSignal.dbFilesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/data/com.b2livecam1.appdeploy/databases/OneSignal.db-journalFilesize
512B
MD57e773dd4cabd1f0b7cf078a446241bdd
SHA16fedc0bbb101b8b4d0e642f6ed08fc5c3f9321f1
SHA25684d30de657384b47a4c706011f5a99c003b1019f19287f60b8f4c39c75157a7b
SHA5121815ee74da238a6aeb82881951357fd9fa13cfe8a0680b58a5830accf51211aafff4457875df62cfd573b901e03263c15a47a581bff80761b71b376b5b54a8ea
-
/data/data/com.b2livecam1.appdeploy/databases/OneSignal.db-shmFilesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
/data/data/com.b2livecam1.appdeploy/databases/OneSignal.db-walFilesize
32KB
MD5711184b48c1ac081a3e743d7ba44dd75
SHA1f9efdfe52a1a98f8457be9a66362b01c02b5b0c3
SHA2560d579a190ac98c528b62b7474ab8b775843c4336ab464fdadb63c43d4429671f
SHA5123bb9c71fe94ea1570e343c278b1096d402ff6bec0f411b9e071b901d371d5ed280a5b8e6530a12e947646d948d1c5a8996108d73f03e2a881bb4a355e7729974