Analysis
- max time kernel
47s - max time network
146s - platform
android_x86 - resource
android-x86-arm-20240514-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system - submitted
25/05/2024, 12:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
adwqdqhhb_51150.apk
Resource
android-x86-arm-20240514-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
adwqdqhhb_51150.apk
Resource
android-x64-20240514-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
adwqdqhhb_51150.apk
Resource
android-x64-arm64-20240514-en
3 signatures
150 seconds
General
- Target adwqdqhhb_51150.apk
- Size 2.6MB
- Sample240525-payefahd6x
- SHA256 39ac2086f9a99aa7e61d66eca0d421847de8e701e835d173361d9fd776925716
- MD5 c283a86c04ce3f3e0aa54b6be4229fd0
- SHA1 029cf046239fc55dd82f0cb7246b47e65d77646f
- SHA512 d9f4229c87fc59225f3ee52e2667fec02ed7cd364f604e01eeb9204c962fcfc3c5e5988a771de1a36c404446be6494c04fc0cab35635bd66144b7c621931c7fa
- SSDEEP 49152:rRxRsD1ZOYav2cmnJVq3fNSr38a3d0OSR6Ou2b:rRCUYav2hJVaor8/O72b
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo org.adwfreak.launcher - Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo org.adwfreak.launcher - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone org.adwfreak.launcher - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver org.adwfreak.launcher
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/org.adwfreak.launcher/databases/launcher.db
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- MD5 SHA1 SHA512
- Path /data/data/org.adwfreak.launcher/databases/launcher.db-journal
- Size 512B
- SHA256 576986d54c2950f73b0006a2a75ae4d5374824961fd543a6ad93e4cf0028472c
- MD5 f1730e8395166f51281fed157dca132a
- SHA1 3e89cc9f59f68d884f0a7c9c6eacffb805ae2b83
- SHA512 3fb9f1a8a7742faef6bd0cbc5d6ef0b0e6b8fb1531b84dcd060ab4e2c08e0829bf7063a3c32779ee98a98921a5051b80a1ac9b068b5d4ba065fed91f9c4542c9
- MD5 SHA1 SHA512
- Path /data/data/org.adwfreak.launcher/databases/launcher.db-shm
- Size 32KB
- SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
- MD5 bb7df04e1b0a2570657527a7e108ae23
- SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
- SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
- SSDEEP 3::
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/org.adwfreak.launcher/databases/launcher.db-wal
- Size 32KB
- SHA256 17bc55e2a668c34850d63db1b608f71d2e000d2576500c62dc90680d62e47d7e
- MD5 d85bb3af3034a6ed4b1167e1c1ebdb79
- SHA1 05c2432b3a6794d1d5deadaee326110c5e8f42dd
- SHA512 38c71e3c0ab61063f9bebe3819861971321f91e5b67cadde439ecde4ae202b38d1d590c8e63568ebb53935f1f5fcb0005ba0ef23f092a78276a46465489b7da9
- SSDEEP 48:OqzNSP/mcWqVWt9JdqVL9GSP/YPlitsliErkliGNurdbBA:v0P3k9WPg8tpENIKBA
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/org.adwfreak.launcher/files/launcher.preferences
- Size 15B
- SHA256 9bd54ce2fe34faa03d173df22621b5c747e544ed354e521889b692c031ba99b3
- MD5 8045cecd3d5a4c893e3a75d47b17121e
- SHA1 61f08d6c53ae857cfd4be1bf607a6c80e5e78b23
- SHA512 70d34c24ccb3f90cdf930f0e24d67441e2aafc5baa5ae95c5e288b788cf25df394254f9bf55d45a5893b78457873b6169b8868a4fd45364c2b485f90bd4c0099
- MD5 SHA1 SHA512