561e4a360da1048aad44d97a4eff10c7a95133126316bfe93f6b5061aba9f6aa

Analysis

max time kernel
18s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20240514-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
submitted
26/05/2024, 13:11

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Boosted.apk
Size

5.9MB
MD5

064975c19037a3085b6d845a6f8d0f05
SHA1

131410e2de2a82f3ff533f81e9a8a6ae9214c10e
SHA256

561e4a360da1048aad44d97a4eff10c7a95133126316bfe93f6b5061aba9f6aa
SHA512

1b7074c72b82e0d3f60231f01969bb4a10c3b3da435a45da9c924b826f92f4f672f96775341df4ae3819240475fe17b3892e51f04c03ca2c01885996a295688e
SSDEEP

98304:A608kAmt3Bm9CAG+c1DNNrw9Hr3QANyFn7UsuqSOhMi64ag1BhfExcji6NsWmg92:S8kRtxICAG+YxYsAEnueSJyM2ji8JQr/

Score

8^/10

discovery evasion

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.boostedproductivity.app
/system/xbin/su	com.boostedproductivity.app

Checks memory information 2 TTPs 1 IoCs

Checks memory information which indicate if the system is an emulator.

evasion discovery

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	com.boostedproductivity.app

Checks the presence of a debugger
evasion

com.boostedproductivity.app
1⤵
- Checks if the Android device is rooted.
- Checks memory information
PID:4517

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.boostedproductivity.app/databases/com.google.android.datatransport.events

Filesize
40KB

MD5
1cf3f63c021d755a21623e6d0e86dbc6

SHA1
e40e0f1faa61abcca7ba3394c54c92ff7334b49b

SHA256
100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895

SHA512
38d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466

Download Submit
/data/data/com.boostedproductivity.app/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
d442ad578ae1f8b4b885c11bd4734e5a

SHA1
ed2e87d16871f1fbd6ca1d835b71ef5f52157ea0

SHA256
6f11380d470b29ef1bb73906d0dce957f65a750e7c478007cb730cd87b3b5fa5

SHA512
d8d62f61c06d8acfd7deaf9ab13bd676704c2e6f27bb63e5e29694534100ff4cb264b4f5c8a74eaf0619b6108050afa610980927b996733cfb11a8f9976abb1f

Download Submit
/data/data/com.boostedproductivity.app/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
0c8386189159478eda655c3ba4535c75

SHA1
039012d78ab31c8122bbd6c68f72c67b2e06aac1

SHA256
8d9308b8156d3711bcfd1c4d103c3f13dc6498a923be9476daffb0abefd3ce3b

SHA512
86b5705121b1326164360152bde7e62ebb7c962bf353909a92907f4c51e22fb11ea1238957f4a8d54fbd53f5c9048201c6542e58dad9db98aab76e711403d438

Download Submit
/data/data/com.boostedproductivity.app/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
09f0dadf301eec1b93566d7b1c6be661

SHA1
ffe05796cb85f126b5e35c912d312d65e1f744a6

SHA256
12e2ff6b481af72d276f964cdb8a40ed6be1b8f46043704614466a3967615d62

SHA512
833acac63f3d6effef319dfc0888f789a207af99b9423548f248d44c1dc104e8576becc4a93d0d791d5849fe10a4f357d56a540af24dc393559bb460122256b2

Download Submit
/data/data/com.boostedproductivity.app/files/.com.google.firebase.crashlytics/report-persistence/sessions/66533E8503A6000111A5EFA4B7BDB7EC/report

Filesize
747B

MD5
10ec6d22700bf737ead9a63a0cd1ac3a

SHA1
65f68e4090f365c00ac06cc61ef1a9ed18d14e42

SHA256
53cd76661255987efc79b23e9f1e9f6523afd24c9a39ed4f9ab4c899bc43d6eb

SHA512
5fd8efcff35af234c378022677e568fb880eb4572966173906c57ee6e53c508620b03afe49ad2c84a9cd8ba61d09260495577f24e3e00e1a62c43cc7dcceeb52

Download Submit
/data/data/com.boostedproductivity.app/files/PersistedInstallation2741242592898769426tmp

Filesize
559B

MD5
bf583355e60989189690f9953efb134c

SHA1
186b282f7b00b90e693f136cd502412931b2e82c

SHA256
81a9fe16ccc1f8b79f33b961724e9b4d1de7434169f4e968e224e48b73ade4b2

SHA512
7d60158231f9860289ce34a8408107bf15f196dd68acc3e6cb943be8cb5d53337b97712735fe5ee7d4d7c86f1d7055f71caa1fe2ca52e9661b3a50894f1cc609

Download Submit
/data/data/com.boostedproductivity.app/files/PersistedInstallation6625453542429062356tmp

Filesize
90B

MD5
dddf9c47ebc4061a8058b0e8168208c8

SHA1
a632bd9cfe37867b29b85164bd381b199478d429

SHA256
dbeb50253665bd0d5efda9666c84ce476a26a34d7dd0874310e388d38eef172e

SHA512
6bf7951fef30c60643d0411b96ac313d58fd569d96222e58095ed7d13fdbf49ad6dec3a0a9ba47c84ddc1be7b6b36f5102f6b88d3faeaae5d3ccfdf20c8e8ac1

Download Submit
/data/data/com.boostedproductivity.app/files/frc_1:142007999268:android:4aa819f34c0ab1aa_firebase_defaults.json

Filesize
887B

MD5
4a10b2c26e65d15a34ba6572f2d8ab18

SHA1
df6db7ec186b1d0d2dc28fe6026bd354293f1303

SHA256
531df969c1ec647a5527e7e118e1b6af3a232d562b4edf23bf0d79abbcba9fdc

SHA512
26a5d41fb24fb951a4b4fa0af943c80470a8457e2ca276cda4866a70db5698331ac2afe6c7d0c2fe4915cd788abc6c5c3ee86fd3c9c351602aaaec2e2c7d85e7

Download Submit
/data/data/com.boostedproductivity.app/files/frc_1:142007999268:android:4aa819f34c0ab1aa_firebase_fetch.json

Filesize
450B

MD5
aca3fa10e5ae07763bef27022ad7ee89

SHA1
65d975094ca273848c8526e5242dc4c48a80a435

SHA256
70f60f8b43c44363166990d54f2221a9d07ed14238cc973d316ccc887d300e88

SHA512
1a09ba2f3e293f4e7857a0fd383e2cdfb4c7aaf2092b880e60b07b5e2d2ba79bd55d03fa2ed6fff75f634b656858d599180f19525b010304e75b9a2f9595eb2b

Download Submit
/data/data/com.boostedproductivity.app/no_backup/androidx.work.workdb

Filesize
4KB

MD5
7e858c4054eb00fcddc653a04e5cd1c6

SHA1
2e056bf31a8d78df136f02a62afeeca77f4faccf

SHA256
9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

SHA512
d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

Download Submit
/data/data/com.boostedproductivity.app/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
05538da2da160db299b015873febb104

SHA1
cf716da5ae4901976cd5cecc4c31920a569cbad1

SHA256
0a3fe302a54aa061091f2fcef2d9472c2204ac4984bba707fe9d686a3ba12c99

SHA512
cec8b906ba9593ddcfe2174950a47ce1f600f32bd07ceba94a7d4d78ef9bb0920c10022f76aa05893e9f5fd346c4c1d53a64b4d7a5ac367985c230cd898e0cd7

Download Submit
/data/data/com.boostedproductivity.app/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.boostedproductivity.app/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
14a8264e985a0618a1a992759cafe012

SHA1
5f885dfb4c6ef4e7d86e052d22bb8755dd42eda2

SHA256
91ff3a88909c2ab0c09a4fb45a722d86d169588c055d54b9f8a9a349ed122b27

SHA512
7d8642a88d5ec2417b2d79b67291a1dd1edea85cd15ab8fed1352435e0deedfa2d1585a27ae4171a68f57ab11a61ab089e6272830dc419d7590faf88739a2737

Download Submit
/data/data/com.boostedproductivity.app/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
79ff9dd3ff3d0c661fa486d0b4ec953f

SHA1
41d1212797310454a00b3623f474b17faba1ff6f

SHA256
bab3428ea17301260e63c749c5bdf2004f22a7f2bc942ca4206ceec243fc1508

SHA512
103a4a0af839352aca77a03851c71865144ae489053d7f17168f0da9b2fec1e144ef1a22182efeae5e3ba6611ca6099ca86488b89182c6792e3e5d0c335b978a

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads