Overview

overview

10

Static

static

10

069d6258fd...66.apk

android-9-x86

8

069d6258fd...66.apk

android-10-x64

8

069d6258fd...66.apk

android-11-x64

8

Analysis

  • max time kernel
    123s
  • max time network
    151s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    03/06/2024, 00:00

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    069d6258fdcf9b13fc9065fa58d4d6cf5a65849bcf74d5bdb154786c74577466.apk
  • Size 3.5MB
  • Sample240603-aaej1adb25
  • SHA256 069d6258fdcf9b13fc9065fa58d4d6cf5a65849bcf74d5bdb154786c74577466
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
discoveryevasionpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    evasion
  • Checks memory information 2 TTPs 1 IoCs

    Checks memory information which indicate if the system is an emulator.

    evasiondiscovery
  • Queries information about the current Wi-Fi connection 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

    discovery
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Checks the presence of a debugger
    evasion

Processes

  • com.ticketcreator.barcodechecker
    1⤵
    • Checks if the Android device is rooted.
    • Checks memory information
    • Queries information about the current Wi-Fi connection
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:5114

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events
        • Path /data/data/com.ticketcreator.barcodechecker/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 fe81c174dedcbc5d17c185f0022ed4a80ce35849e006dc8153f9787f47c51e12
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.ticketcreator.barcodechecker/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 22dcce07ae42aa7970da616c53e2954e3aff545c40d367c5d520a3b418f058e8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.ticketcreator.barcodechecker/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 6d2dd8d9d04d0e3c0b43cd1f08fb24fdfed5207b34d888b1dbfe49fc646085e9
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.ticketcreator.barcodechecker/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 65dc14c7206e81c22d206d460b9614790e14e68a9541e5d122825bcdb87797f0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ticketcreator.barcodechecker/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ticketcreator.barcodechecker/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 0af235299ef815caa3e3b51a3ba7a1d1835549e287d14fe2b267f96553aa6866
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ticketcreator.barcodechecker/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 1b61891a11f559dae9ec26badc9ec3271fdffe261ae88ecefb987203068fc1d2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ticketcreator.barcodechecker/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 9ac02b955d5fc9ffb4a3a5ef476d223e947997a160db317c58a96bae4abce3ad
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ticketcreator.barcodechecker/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 b4b5dc3aa00c06d9ab9110da11e5e8d28e895ed468b1c911b0afa31cb9131666
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.ticketcreator.barcodechecker/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ticketcreator.barcodechecker/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 1df433ac2186c6346b5aa0f697e6c23e0a3d379133a2ec37030e909c454e0a25
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ticketcreator.barcodechecker/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 ca94381b811cb4946d572bac73e8965469c59083ca0f73af0b84d95b1bd47963
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ticketcreator.barcodechecker/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 ad6adfb82c80e7bb62c1e376b659bfccace9a8bac889ca22162a3853c34d8bdc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ticketcreator.barcodechecker/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 846440461b86d5ab293439a6278222ffb379e56333df1c953471cfac40281f4c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ticketcreator.barcodechecker/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 adc1b5db2d0fdc3d1ab85206bbc20398894a7b01db30cf2d2110ac600accf7ba
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.ticketcreator.barcodechecker/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 0d479eb6f7192b38fbc02c2022bd0bc2943fcc8f707b7ad7a1df2c9d9f67647e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/com.ticketcreator.barcodechecker/files/.com.google.firebase.crashlytics.files.v2:com.ticketcreator.barcodechecker/com.crashlytics.settings.json
        • Size 728B
        • SHA256 1762a91fd07ef95e6b01a8341f5fc1816b404fa2ddad99d01437c4bc0d5a0093
        • MD5 SHA1 SHA512
        Submit Download

        report
        • Path /data/data/com.ticketcreator.barcodechecker/files/.com.google.firebase.crashlytics.files.v2:com.ticketcreator.barcodechecker/open-sessions/665D079C0259000113FAE3743388E6C6/report
        • Size 742B
        • SHA256 5b91b426fc8013698ddf6aacaa1c4375daa83b4ca9507ad2d96fbeabe10e29ef
        • MD5 SHA1 SHA512
        Submit Download

        userlog
        • Path /data/data/com.ticketcreator.barcodechecker/files/.com.google.firebase.crashlytics.files.v2:com.ticketcreator.barcodechecker/open-sessions/665D079C0259000113FAE3743388E6C6/userlog
        • Size 182B
        • SHA256 8ede8b1a0a6d8a6e06ae2e03c381059164de6074ae75c3b90ced3e895c57def1
        • MD5 SHA1 SHA512
        Submit Download

        userlog.tmp
        • Path /data/data/com.ticketcreator.barcodechecker/files/.com.google.firebase.crashlytics.files.v2:com.ticketcreator.barcodechecker/open-sessions/665D079C0259000113FAE3743388E6C6/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation2036458530066334178tmp
        • Path /data/data/com.ticketcreator.barcodechecker/files/PersistedInstallation2036458530066334178tmp
        • Size 562B
        • SHA256 4c76e9f61be5ea5d9f8a1d339e36c65e51e0751865b5096e11cf6c89591b99c4
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation8072952991299205968tmp
        • Path /data/data/com.ticketcreator.barcodechecker/files/PersistedInstallation8072952991299205968tmp
        • Size 90B
        • SHA256 3677990086ead4dfff9b206b1b954f6e83724bc4cb72c2280b477e963e3adb24
        • MD5 SHA1 SHA512
        Submit Download

        uid.txt
        • Path /data/data/com.ticketcreator.barcodechecker/files/uid.txt
        • Size 44B
        • SHA256 25a339c55a9a7667626684608602057f6f9e325383687962771c037ad33e0450
        • MD5 SHA1 SHA512
        Submit Download