Analysis

  • max time kernel
    127s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240603-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240603-enlocale:en-usos:android-9-x86system
  • submitted
    04/06/2024, 03:06

General

  • Target
    8f8a468acb35106fafd7893f36428a8f.apk
  • Size 4.2MB
  • Sample240604-dlyc2abg44
  • SHA256 dbc82167bd33f85b5fb78303de64a56aeb8da555cbd202f6d179dc7d6822f497
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

Processes

  • com.dm2photo24
    1⤵
    • Checks CPU information
    • Checks memory information
    • Loads dropped Dex/Jar
    • Queries information about the current Wi-Fi connection
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks if the internet connection is available
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4284

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        www.chartboost.com.443

        • Path /data/data/com.dm2photo24/app_sslcache/www.chartboost.com.443
        • Size 10KB
        • SHA256 d672ae4f8b525ee82b6b92f7b5e847c0aa5a4070f19a94aa1e17148fb9fb1468
        • MD5 SHA1 SHA512 SSDEEP

        www.chartboost.com.443

        • Path /data/data/com.dm2photo24/app_sslcache/www.chartboost.com.443
        • Size 10KB
        • SHA256 014af1ce648371a8c4fcbf53318b1c92c9f43f7f8b36aa33b1e0a2be9125e8c3
        • MD5 SHA1 SHA512 SSDEEP

        ads2292803383136322178.jar

        • Path /data/data/com.dm2photo24/cache/ads2292803383136322178.jar
        • Size 2KB
        • SHA256 ee2de01a238f9e1834f9f9934dd1f5b267bdf9747965641d2fd636d740041f9b
        • MD5 SHA1 SHA512

        tapcontext

        • Path /data/data/com.dm2photo24/databases/tapcontext
        • Size 28KB
        • SHA256 e97f7a884c3bc033bc5c6e490a39cba7e859659d03bf0f311e3e8caaa17e6f8b
        • MD5 SHA1 SHA512 SSDEEP

        tapcontext

        • Path /data/data/com.dm2photo24/databases/tapcontext
        • Size 28KB
        • SHA256 cead145121adf043450199025d9c1abe5fd5a4199fc9c228ec7082d644609c4b
        • MD5 SHA1 SHA512 SSDEEP

        tapcontext-journal

        • Path /data/data/com.dm2photo24/databases/tapcontext-journal
        • Size 512B
        • SHA256 a5a7077d0b93ed2f418baf3231e1c3d011d5aeb0b3b3263e46d3f5762ecfe860
        • MD5 SHA1 SHA512

        tapcontext-shm

        • Path /data/data/com.dm2photo24/databases/tapcontext-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        tapcontext-wal

        • Path /data/data/com.dm2photo24/databases/tapcontext-wal
        • Size 40KB
        • SHA256 3b4e22dbcd18feb7b81c88f1b26f31ee2ab6d8399ca34cb6af5a8fd07617f2ae
        • MD5 SHA1 SHA512 SSDEEP

        tapcontext-wal

        • Path /data/data/com.dm2photo24/databases/tapcontext-wal
        • Size 12KB
        • SHA256 50deb540a50fd5b475da8d1926af4598cafb4c3224d0ac6f708ef7fbc13151c9
        • MD5 SHA1 SHA512 SSDEEP

        eula.zip

        • Path /data/data/com.dm2photo24/files/eula.zip
        • Size 63KB
        • SHA256 e72d6614473f140732c907c5df5c041cad180d5015a2b86050abc3edc5644a5d
        • MD5 SHA1 SHA512 SSDEEP

        offline_eula_body.html

        • Path /data/data/com.dm2photo24/files/offline_eula_body.html
        • Size 22KB
        • SHA256 a40a4a11b0a2e8ae227e6d101cbd27a3f7736292795ba223f5d086753cd3eb60
        • MD5 SHA1 SHA512 SSDEEP

        offline_eula_footer.html

        • Path /data/data/com.dm2photo24/files/offline_eula_footer.html
        • Size 13KB
        • SHA256 1f075332b57fdfbb9417718f3c0d9f27ffbb2c135b3291aca4b9f2911d7e9e3b
        • MD5 SHA1 SHA512 SSDEEP

        ads2292803383136322178.jar

        • Path /data/user/0/com.dm2photo24/cache/ads2292803383136322178.jar
        • Size 4KB
        • SHA256 f3c142f78cadcb57d7da3d8e4dc5f8c7b05377417c639059910696c844afc1f9
        • MD5 SHA1 SHA512 SSDEEP

        .tapcontext

        • Path /storage/emulated/0/.tapcontext
        • Size 18B
        • SHA256 8cdfa9505fbe0d9617f08d27d7d99d3f5dcbae701cfcccb9549b342cd16c253e
        • MD5 SHA1 SHA512