Analysis

  • max time kernel
    174s
  • max time network
    134s
  • platform
    android_x86
  • resource
    android-x86-arm-20240514-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system
  • submitted
    02/06/2024, 22:41

General

  • Target
    cfef439e4d4fd657e81e204c606044c8a787e8f2115feea7a3a7e4223e4d29f0.apk
  • Size 3.9MB
  • Sample240602-2l4rtahf81
  • SHA256 cfef439e4d4fd657e81e204c606044c8a787e8f2115feea7a3a7e4223e4d29f0
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • grocia_shop.in
    1⤵
    • Checks CPU information
    • Checks memory information
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Acquires the wake lock
    • Checks if the internet connection is available
    PID:4267

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events

        • Path /data/data/grocia_shop.in/databases/com.google.android.datatransport.events
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/data/grocia_shop.in/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 27abb573fe0f085ee0672197b9db46ccf0af7db1dbe2eadc2f5af1a554cc813a
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-shm

        • Path /data/data/grocia_shop.in/databases/com.google.android.datatransport.events-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        com.google.android.datatransport.events-wal

        • Path /data/data/grocia_shop.in/databases/com.google.android.datatransport.events-wal
        • Size 68KB
        • SHA256 4b7abef609bd106e000682cefcc3459a7e696121657e2fdda58b2c1ad042eacd
        • MD5 SHA1 SHA512 SSDEEP

        PersistedInstallation422852896939125044tmp

        • Path /data/data/grocia_shop.in/files/PersistedInstallation422852896939125044tmp
        • Size 90B
        • SHA256 dc35aac96811c0cdf83c25ab06bd5d14b390c3c3f8af20d67b7935513dabaf41
        • MD5 SHA1 SHA512

        PersistedInstallation8242415507014813393tmp

        • Path /data/data/grocia_shop.in/files/PersistedInstallation8242415507014813393tmp
        • Size 569B
        • SHA256 5fb57720ec353709e66351246b159e6e3c764d7b1e14a3e363ca18b76578dab5
        • MD5 SHA1 SHA512