Analysis
- max time kernel
52s - max time network
155s - platform
android_x64 - resource
android-x64-20240514-en - resource tags
androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system - submitted
25/05/2024, 12:08
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
adwqdqhhb_51150.apk
Resource
android-x86-arm-20240514-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
adwqdqhhb_51150.apk
Resource
android-x64-20240514-en
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
adwqdqhhb_51150.apk
Resource
android-x64-arm64-20240514-en
3 signatures
150 seconds
General
- Target adwqdqhhb_51150.apk
- Size 2.6MB
- Sample240525-payefahd6x
- SHA256 39ac2086f9a99aa7e61d66eca0d421847de8e701e835d173361d9fd776925716
- MD5 c283a86c04ce3f3e0aa54b6be4229fd0
- SHA1 029cf046239fc55dd82f0cb7246b47e65d77646f
- SHA512 d9f4229c87fc59225f3ee52e2667fec02ed7cd364f604e01eeb9204c962fcfc3c5e5988a771de1a36c404446be6494c04fc0cab35635bd66144b7c621931c7fa
- SSDEEP 49152:rRxRsD1ZOYav2cmnJVq3fNSr38a3d0OSR6Ou2b:rRCUYav2hJVaor8/O72b
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Checks CPU information 2 TTPs 1 IoCs
Checks CPU information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/cpuinfo org.adwfreak.launcher - Checks memory information 2 TTPs 1 IoCs
Checks memory information which indicate if the system is an emulator.
description ioc Process File opened for read /proc/meminfo org.adwfreak.launcher - Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
description ioc Process Framework service call android.content.IClipboard.addPrimaryClipChangedListener org.adwfreak.launcher - Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone org.adwfreak.launcher - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver org.adwfreak.launcher
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/org.adwfreak.launcher/databases/launcher.db
- Size 20KB
- SHA256 e6ddf950d3502ae5185c329bb5ef76f85c7cbeb10b8277746568bf9ab3d55e15
- MD5 f018ba075fba4d40d6de1cb92f449636
- SHA1 71c1e35c1dd2068871312db4eb8ebd4fbd920fef
- SHA512 af4ab62a4ad124728c99e8cc98bfb63d5e74d6b8757306a12909c419a5bd4d7b3a8e9de9a3489add2925982ba524a28c9d4b6a5749ff4db2f9b59711cd5bb6e9
- SSDEEP 48:TaWqVWt9JdqVL9GSBlitsliErkliGNurdbBA:mk9WGtpENIKBA
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/org.adwfreak.launcher/databases/launcher.db-journal
- Size 512B
- SHA256 dfda81cb67168ce6d8090b604177b5d24eeb588c10ac0e8ab05d0e0a94421a94
- MD5 fa13b1cc2827a323324a9e5047238b64
- SHA1 9cb8e4a17773857fff50ce3db2a843a1af2d3e85
- SHA512 6fd5aa1e87d02e0b5d96dc357d7d5403b3f2ff1acb6ba2caad808a06e9ba29ffeab0e82fd0dca4a0bc55b2d74531182509df2f52316784f546b09181bd3cb52a
- MD5 SHA1 SHA512
- Path /data/data/org.adwfreak.launcher/databases/launcher.db-journal
- Size 8KB
- SHA256 b528134f3f646a1740614634a72f3d2f211ec48acf1e0d11f87d959e35d07c3d
- MD5 9b8a04d58ba102f974098535ede70e5d
- SHA1 133cfb3dc64ab718fc272c21a3fbb19e473a1812
- SHA512 aac44c7d55077f4fb1229f219a303e1124e4f6b66d2a8deeb94a5893c52a11a9dd82ea8939ed008077ef95d5480ba3718dadfad318d3a106878ac4a3b6c00cc3
- SSDEEP 6:7+/l9otgn1g/vg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKVn:7+tQvqLiuWdwRmBEyPby
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/org.adwfreak.launcher/databases/launcher.db-journal
- Size 8KB
- SHA256 0da7da66f82189fbfb5cb0242acb3914ab17c8ebaeac565e643411f85cb5f001
- MD5 88d4544683985d431f9f80937569d45c
- SHA1 4c21de8b5e0d813b4e9d955740bb3427d7b2d268
- SHA512 3ece2af6cc0c62e39fccc09afaa0750b0d367c201f8096fbe8ab76f31880a208e8162b553770e0306eadf0442f645176a0dd6da1e240b9033830b482c433f18d
- SSDEEP 6:7+/l9WGHPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKu//u1:7+tYYqLJdTRmBEyPbFX6
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/org.adwfreak.launcher/files/launcher.preferences
- Size 15B
- SHA256 9bd54ce2fe34faa03d173df22621b5c747e544ed354e521889b692c031ba99b3
- MD5 8045cecd3d5a4c893e3a75d47b17121e
- SHA1 61f08d6c53ae857cfd4be1bf607a6c80e5e78b23
- SHA512 70d34c24ccb3f90cdf930f0e24d67441e2aafc5baa5ae95c5e288b788cf25df394254f9bf55d45a5893b78457873b6169b8868a4fd45364c2b485f90bd4c0099
- MD5 SHA1 SHA512