Analysis
-
max time kernel
48s -
max time network
262s -
platform
android_x86 -
resource
android-x86-arm-20240514-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240514-enlocale:en-usos:android-9-x86system -
submitted
02/06/2024, 20:43
Static task
static1
Behavioral task
behavioral1
Sample
Download2.apk
Resource
android-x86-arm-20240514-en
Behavioral task
behavioral2
Sample
Download2.apk
Resource
android-x64-20240514-en
Behavioral task
behavioral3
Sample
Download2.apk
Resource
android-x64-arm64-20240514-en
General
-
Target
Download2.apk
-
Size
4.2MB
-
MD5
9d27fd1802f804975df523bdca5e8b11
-
SHA1
4d3d6ce98fdd491f8c5f4ef63db5bdb86d0a9a3a
-
SHA256
fb316717892ce1a5236b1d22727e48d959a4e6f6264164e81ee60cd02ceb03c3
-
SHA512
31937cc4e9d3cf75b75d28e6d3e9ffcbd1156c10891a5e4b35d457eda024919d3556a5f3cf174bc12896adc58305d6fd6eb7e25e95fec85e1a356bb9ca62f1d4
-
SSDEEP
98304:eC7ckPA2J+YujH/Phl54pBClkRM4cu0LCrdfwW3:/7cUJkHhlSp8l/4cUwK
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
ioc Process /system/app/Superuser.apk com.smamolot.mp4fix /system/xbin/su com.smamolot.mp4fix -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.smamolot.mp4fix -
Checks if the internet connection is available 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.smamolot.mp4fix -
Reads information about phone network operator. 1 TTPs
-
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.smamolot.mp4fix -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5f5786a233627af2622d1cdbb32a87972
SHA1648c255e96f0d7cb820d0ba47ddd3556d475e936
SHA256e89b95dc2689309193820ca87020228867eb0d42d9c3e6d3de487d538f8b6dc8
SHA512714dd880ed8c1038d4efe9162a99db93ca6f03a050043b7e4a65425c490725ff937c861df5b2108ae5a458502ebe073984257356ad59a3397208bf4919b6d382
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
132KB
MD5b4cee0e66871602bfa389f9a55292dfd
SHA1d9c64a0f2173828a2de1daa92fded2e7cb005ad4
SHA256a5cd5492e64b6d17b290f33ce4b52c0bd5857d35f5da33495e2f15636817c2a1
SHA51284ef70a60f1e759c84aa7acd1da8d1a7ce8be4fdf699e47f3feaf72e6bdb3bd077b217b62a82036a31fea865a27012bb1b8100e8991e2fe4b854a18255dd36a1
-
Filesize
16KB
MD57237409e0640cfab7bdbd429bf821a3b
SHA14c3da934842f8d4835dfe2a9c275a300e5123309
SHA2565c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
-
Filesize
16KB
MD552306e5d9fa02455ca688f78ca13d5cb
SHA199189e2e0b23f012da99d4df941d7e8874c57da7
SHA256117cca3d00140c29dfb4fc0e73b5f2725a095e09252fc1e562e054a58f0f2012
SHA512e96b39365f531bebc79db40523dc8256ede3a15d17e318319bb4a10b953e21c47012a5f445786766bc9d0ad12fc6d25e536fcf08665f118fef9bef5141a6fc35
-
Filesize
16KB
MD59c52afbfe65ecbfe1ec5b09a0f56ebb0
SHA13914b491e2960ea8ae60d8637791e446e6a4d8c6
SHA256c675366872462fc22c0a120e0aa4bbb5699b0a20fb228371de4c48b525c178a6
SHA512ed12914e14d39426b5a7cc53ac8f710baec824a908ac05ceab43a8fa0ce23c6fd4dcf247b364a4544b2ba1fbf8b1a57e48a4cceb94c00a9f966fdde9c2f7b67e
-
Filesize
16KB
MD55495225245c8bf09ff25c7ee96489a64
SHA19430fedc17b23020cd87151cc695df982a6c2975
SHA256c62cdde664eae7ce54020d1b25c6e42c7c28d8115f4031442dd9e1ede6bf9c83
SHA51279476d33bdcf15e9440697cc4b8a1ab40e2f1f7e4396032fc624486dfd9215838b1036b88571f51796eebda1ab0e0aecbff525e995e24066688760f944726ce9
-
Filesize
16KB
MD59ee23e878ed795f58d0996cfad86580c
SHA12f9aafba5308ccc532f0199152da2e784e486b5f
SHA25603fc073ea627711528172689495cc765b1cf32046f8d57db55a02712c7aec842
SHA512962e1a92e1257f49f53cc9b8631d52a9c4a031ed62b4644a92add244ee9b5c7720eceec4e45530efcd1f57b18853df4e49dbb370e0e4a09205f65a680542cf0d
-
Filesize
16KB
MD505b42f7f08420b385c5ac0e6befb1ba4
SHA167e540e19f223b0fdf341e500ec7594f60a15a41
SHA256d0a1d473283c18912dd662264c94b72dcd5a831f6d174f87bdb193dc2a30748d
SHA512d7738ecaaaec2d9baa157214f8b19c77af3e76645d9c5d16874d873024da7b4c04d2d21b22f153a297c6c563180dc63692cfc0fa7085fe0a3b03f27b5dd27958
-
Filesize
512B
MD546d554795d9a3e9b7aad035ef9a46646
SHA13a06b821af1d608a72c9bb5ca6077fd850d147e0
SHA2563571ae6a08ac8f59c30f2cec4a9e94b44c7f1885a912f8c2dcb0dd2097568fc0
SHA512dcb3f15a082b34b072956dbdff99106e0641ce8764c61c0a071b4af1daef176ea54edccc605aebef04278a0884bbf7ffa001b70164c32aa5a07b671b4bbf3599
-
Filesize
36KB
MD5f4708daa258194d7ee889485a109ebd2
SHA101734f8e668c162a071d767a49c5b0fea4ce103b
SHA256fd3560dfb0c1cbb0412a09516c319ad23b58d563c979297cfec14e7afc64ab48
SHA512af7fe17280b969f894f1dc07547bcae8b8fee80e6ba91bee2c848a5c6c8ddeaa903944f2fa3a6e05c0394c4ab2fccaf17f90168531015f3492ea530aa0ad9b10
-
Filesize
4KB
MD54c981ebb8fa8c78a850d38eee912b74c
SHA1e9a9b52318c07fccebe3aa09bf8868f30107255b
SHA2562aa57c3eeeb406023aa00152751b5df2f5a211d6ed9d8bcf2e15b2a21755de77
SHA5128206efa69d95549d8add4ae9c63b81757a85f73207ab2445f657c64b5b2668994ccccfe5bdcd9ee28aead7081ebd4743af3a239dadd32067111b1ea0e887222a
-
Filesize
4KB
MD555674043678b01d0c28ef3e235a03d9a
SHA1bab035cac44052c7ffc6c8e46a0718846a3ff55c
SHA2565018a72ab7ba1f6119f10b39f8f6629addee8f69b6a115057fc031a8c03cf77e
SHA5123a767f8272438b2a901fff629b774595634a2cbc676ec5e43eead375a476af562149e8358248ede0ce534a1e8c7e8c2d45f19550c1c24a5b682b1ee6d6b45132
-
Filesize
4KB
MD512d91748ebc4b1795d4027fee283a5eb
SHA16c749039ef87314a407fed7c141a71ffac09f0db
SHA2564f67376a15091c296855e42145c661eaf872e55ec1b1bb2da5188a6b2040b746
SHA51232bb4ab337fa747f6f5f34aef94199dcab917c42fedb73e32379abcab8cf7a36cd0c82c2dde53e76f3f19e94cd1a81c6e382dd7142f9bc37a78af6eba6bf99ad
-
Filesize
4KB
MD5092021454dca67af31be63ad252db07c
SHA114eded3b54a13b3c0660c2cd13efd6a2288cecb2
SHA256944e75a6767f7ca12ca14f63efa826e303608457e23f9a11b770b8902cdfbe86
SHA51292a59af6ae1d7f1a6881b85f678354b548e3f2ac0fffb9df80449a6ff8f68bfec1d2a50f80afffb7fcd610b30be8cfd84a57814d27e4e12fea6462a513501b0a
-
Filesize
4KB
MD57b07c56a8db3425fbe7963dfbc3a537b
SHA117857439c59c1eb8feec9d5d450ae29d98df5d73
SHA256eab9e86b530d825d23e94f057666e47edebe5afcf7806eb16d5bb4e7705cb6cd
SHA5128b0ab8417db46abae708094cb8341413f4ae6bd2a324e481bc66b4f5d458aea09e754cf6aa9cb70c185856998411635ee5c1943fe5b9342ad38e2481a22e2187
-
Filesize
512B
MD55d08a0aad52aeca141e9e61272989282
SHA13784360f54df97c7e83fd003c8106bf203423488
SHA256bfbba9b1c9358a57004905fcf8baf0b2f138b7ee22cb2a198e901a30c5ca2e99
SHA5126e3c2dade90ed7979f6a4d8fbc2111fe533f56033ea07bcdedb9fe5b58ff1e98654c7087ca7f29cd04d06d49b8c441c828283d20e46abcd9126b40f9ba143180
-
Filesize
16KB
MD5ba8a45ffab70d0801a1bf55dcb8efeb5
SHA1ff2a504ae1bba58a09d87a04fa26aa75d766c736
SHA25689018c0cc3d4a504e8492b653aeb50852c39510ad09e330650f1f7c3dbd2be9b
SHA51272191f978d3d565fa6417a247a200917600dcc961999c9807d6d521be241b85ee30bcbd6b737721e854d5014b3e7aa5054da9813a20f03d2a7e5d3a23d51fa71
-
Filesize
36KB
MD5a83ef7d4e20242a4eaf6f347717649b0
SHA195f8cd7bde9cf413af5d8a663f061937223281c2
SHA256f0bffdb81d9f58a2aab74e9fd307f388f21a5497dfba534aca29d818313dfe60
SHA5120a5f34fb5d1cc32441575fbd7929307ef48b6b58cb48f0b43468c4b672e2c023a645506ee85d072b4e48b84f963f5c4392b6f5df5262c9a670137b6cfd0ba874
-
/data/data/com.smamolot.mp4fix/files/.com.google.firebase.crashlytics.files.v2:com.smamolot.mp4fix/com.crashlytics.settings.json
Filesize715B
MD59171aa9952ca3923475c78969e431616
SHA183064ef10d754557794d1aaf3fc211ee590b53d8
SHA256d84d2fd9c0f2566f417e9735ea2a29e8d33090fd4b0e489e44ea68c72f17519f
SHA5121ceaaaf23d8047e1d5324dcba2a42c63ba39642726a15adf34c459d855e3125e0763c494c6d17f5b601ce715bbe2f6af2806852c8a0c39e3b1c09d91bcfc86c6
-
/data/data/com.smamolot.mp4fix/files/.com.google.firebase.crashlytics.files.v2:com.smamolot.mp4fix/open-sessions/665CD97602E6000110ABC05E896A195B/keys
Filesize32B
MD54a8625d02a8d7e3d71f3f53306544c69
SHA12b699900b0eec212e546a366ad144d34ca2aee36
SHA256fd4edd1a3690a3744acbfc57d2473ac0f8f1b0496a128224b81c259c5f79590d
SHA512ea68def20c97dded4e2a0b7255f2509103531c3873376d4ff13a6bb78f53c181b86b1f30e9bc0b466735f50e63b2342d191bd4bc7c7b261ef12d7d15863aa636
-
/data/data/com.smamolot.mp4fix/files/.com.google.firebase.crashlytics.files.v2:com.smamolot.mp4fix/open-sessions/665CD97602E6000110ABC05E896A195B/report
Filesize792B
MD578e4e370d834e6654f2f2681ee991330
SHA16a4e2656bcd90a9760150bad0ebea9cc8b71d3e4
SHA256e3a103197549dd14e81565141bfecf33ef22c9988cbe2cfbabf26bed42f803c9
SHA5122bf135dcebe89efbcd9e5104d185720f8e06c8babb2166ff9852222e234fc53cc337f1cce46ddd918e24df93d1bff068a738e5530199590e6a87e4b2d479ccda
-
/data/data/com.smamolot.mp4fix/files/.com.google.firebase.crashlytics.files.v2:com.smamolot.mp4fix/open-sessions/665CD97602E6000110ABC05E896A195B/userlog
Filesize538B
MD5c42ce51ebace4ee71ce36491162de1f6
SHA136766e246322ff2754cf2a51c1a3de525efd7e79
SHA256ec079e6cc9dfe14fa2c1937821dedfff705f5425d3dc1b56ce07deb97e82f8cf
SHA512502af30e40116658d6198964167120cb34b589bf451c9237a38ee8a474c39bec58baa38700351e3b22fca035bf6adf2bc74249a62c6607c0bb681e66c86c21d6
-
/data/data/com.smamolot.mp4fix/files/.com.google.firebase.crashlytics.files.v2:com.smamolot.mp4fix/open-sessions/665CD97602E6000110ABC05E896A195B/userlog.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
Filesize
559B
MD523593516443f55fc9db83f1f5d1e436f
SHA10002695b5148d6a1eae679ff58799ae379a22ef1
SHA256dfdfaef311912f36cd354b0f6da928b59eb0e90c73c75b77506284389688b881
SHA512231f97ce27a807c8b74a4409f592b257cca3605903431ddac6dc3be3499da810fd3a345acf2c753fe080761244df9295fc3ba774081ed239c4519736a626c3ea
-
Filesize
90B
MD51f6c535b0b1110b2f17cb0db04669b64
SHA1f573e1f8587f76c120907cd95b0fa042cc27f93c
SHA256b6cf0aa1520efa9352edee7ca1503b103dc0fc8c3393ce1f782ab47062a8bf32
SHA512a3f906b3c6aa388091be788971b961c746a5bb65b1141d7cd013108ad43fe761cec92b04bb9b5127b87c360367cae2d712fa9da5383300b31eafded22667ce66
-
Filesize
33B
MD535b51faac8b5af3886e70bb5a885dab1
SHA1e6cb282da46cd4bf113e25c8573268578dcd11b6
SHA256af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b
SHA5126ad5e9766cc03a4436e1440b9e47c44da6c6440a3c94b1cc988f8c5680043cde6f7b7e02b2b4c71b25df4209c39ed099fb65fdde02a9f09464609a1abe6af8fa
-
Filesize
75B
MD5944e6a5a08cb971370c65c06061f0ab4
SHA184d47725cc29bf167b782c702575bce4bf2ecc5b
SHA256ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab
SHA512bdc404233927a6a99160492d0b3e2cf00776d51b33612b8c9ecba395747b3572cf1790269fb199915aafe84c546d30e3259833c9d00af8c412823396882ca783
-
Filesize
121B
MD5ffcbf87665a36fc21782400bd0537e79
SHA13dbfbdbfdcde953317b089f9a9fa0bbe50c698ee
SHA256a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d
SHA5127f98ac150c422eb4f1126d86501d0435817ceaa7eb5549e4d21a295d57be3d3fed4388cda782c084130c4ac8d57a4f225139a2e42e8a12b34cc1679140d16b57
-
Filesize
163B
MD5dcf7d6c1cfd5e7b56074e3001577c78b
SHA1b8eba89aee9f6688ecda6675ef8ff4998da0b141
SHA256ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91
SHA51242d75be824d69de23d2e8605d60c3608db20ed5c059f5b67c63ca2845484c67150aea88a3aae36aae12a4ea266fb6b469d09f765bbcd444350d836ab83f7695d
-
Filesize
212B
MD52d2b34c12c0094cbb713ed02ed290639
SHA133102579702d8306057be5867217958e19b59891
SHA256123c9bbc8f6924c68d835e3eb1fd1a882844d7c17f376dee3b0b5ba62a52338f
SHA51209947cff548178515356b682a464fb7f9c6ec047ada825205f1a8342c5619fdc219a5070d622f2111a6b041e368fdde8c8694c66a5d71aeedddf064722d8b391
-
/data/data/com.smamolot.mp4fix/files/frc_1:620496936909:android:167d50e04556260f_firebase_defaults.json
Filesize240B
MD5e46fbbc75b62b9784bca2bb9710de8f0
SHA1b083aa81b9897cb66324ef4d3dfbc14d5dd2a326
SHA256a07b82b8a9a83014578de795dd9afbe55a0760fe10ea42fd59effeed09e490c7
SHA5126e7406dc1fdcb2c1a635826e13ef54dba2e6ad1d48e7408e85c61b1ed3bd749ccae2528cbfb8f222b76d9fafdb46ac0a0fc70c18a690d9e6c7e025a3bc24b71f
-
/data/data/com.smamolot.mp4fix/files/frc_1:620496936909:android:167d50e04556260f_firebase_fetch.json
Filesize246B
MD58de14373107519784a6957be490bd70e
SHA1774640056b1fa6211a15371c06b88ce255a665a3
SHA25678ec83c92c33296b4805c0067843eaf635835115e930811412f2837f6bc49a62
SHA5121ad381cc43f5583accf02daad48fbd01da4920f38644fa2a49493e03ce53e830945024fc50009a8c5cc630aea59fb3717a35d5f35c73cd9a4f03aa24ef7a4e0c
-
Filesize
24B
MD5659b8e2d3dcf0d30d9bdebacd7624184
SHA1296af2458dd9c9e26f5eca9d363616b78f201698
SHA2567a5362e8cd0eb3532d5367e094681734c704882773f4a1285d90b0f1d834e00d
SHA512d5e1775393bc3b5d8535125f094684a9d1bce5a3a1498cbb7ca5829e6ed4ef44895b29644293e0a282726fdb7dfecbfb34fba62fefb3e7759fe79b8b0d02dcc2
-
Filesize
8B
MD591555a4834be9b01f80e05dd5dea70b0
SHA12b709e698939a43f61ef254da234810a3a784504
SHA256bb5b5f78c295651055b3356e1c28e34b8010a6d7c94c592f718f92abd6547471
SHA512c6156d8a726adafb06485c30ce7c82f25ce9d7ffada820ac92b75756308cab5b27f3396a044f8ddcaefe761053c2c98c841fe5de5ee85b1f5a96adb226a06190
-
Filesize
5KB
MD52b946d08385c31cbb4312c14cf33ab7f
SHA1f707355ad03df82a6228e726ed1bfbbd2aee7440
SHA2563ca7d63a085029b780bd5670906c277dc46c4f9ccfd84f97663fd2751e2c4105
SHA512bf09ca96f351dedcc8f480113fa557668b7a54150c6fae7170637ef964231a9208e8d1835529e6b695e240c2d37c27bb4cfea8246b318e8cba850a5bf3a68f2c
-
Filesize
12KB
MD57119650d3ae51a31faf5064af70f4823
SHA19b3426bc3adff5b84efa4309dc4372ab2a43c998
SHA2564e74ac60ce1e0e02a9021d9e94c93f9b11f8a7ce98459e54499bce16d2f4af0c
SHA51286a99c352177ef8b7a973d2009645acbdc136a0a7703cc4e61ec86632bd11d9951b20cc8904983e82fc09e857d61c9f0eedfcac435d1389a77ef5fa080d01e27