Overview

overview

8

Static

static

6

Picsart_25...ne.apk

android-13-x64

8

Analysis

  • max time kernel
    179s
  • max time network
    170s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240603-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240603-enlocale:en-usos:android-13-x64system
  • submitted
    05/06/2024, 14:56

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    Picsart_25.0.11_993825011_arm64-v8a_armeabi-v7a_mod_apkdone.apk
  • Size 74.5MB
  • Sample240605-sa1rcaba59
  • SHA256 b0c6328caa8e08b60d869e2c5fcd596a7a2cf78845b6bcb62829c5b303c872a5
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
discoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    evasion
  • Loads dropped Dex/Jar 1 TTPs 8 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
    discovery
  • Reads information about phone network operator. 1 TTPs
    discovery
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
    evasion
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact
  • Checks CPU information 2 TTPs 1 IoCs

Processes

  • com.picsart.studio
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Schedules tasks to execute at a specified time
    • Uses Crypto APIs (Might try to encrypt user data)
    • Checks CPU information
    PID:4305

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        journal.tmp
        • Path /data/data/com.picsart.studio/cache/appboy.imageloader.lru.cache/journal.tmp
        • Size 31B
        • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
        • MD5 SHA1 SHA512
        Submit Download

        bugsnag-exit-reasons
        • Path /data/data/com.picsart.studio/cache/bugsnag-exit-reasons
        • Size 4B
        • SHA256 4a147f223b0bb73bc4b50d456afb6063e6cbb0d28fd09e9844ef76475429362a
        • MD5 SHA1 SHA512
        Submit Download

        last-run-info
        • Path /data/data/com.picsart.studio/cache/bugsnag/last-run-info
        • Size 67B
        • SHA256 da731d687400934bea5e647ed90766710215d2e224d53fd2912f6acbea356d5d
        • MD5 SHA1 SHA512
        Submit Download

        user-info
        • Path /data/data/com.picsart.studio/cache/bugsnag/user-info
        • Size 64B
        • SHA256 95083611f4139116c10bdfd3c5e130852a8c4672997884bedc235aca5492423e
        • MD5 SHA1 SHA512
        Submit Download

        Y5KAH1c4huC1BKs8kgoeLpnc7j4.5279706372418738086.tmp
        • Path /data/data/com.picsart.studio/cache/imagepipeline_cache/v2.ols100.1/43/Y5KAH1c4huC1BKs8kgoeLpnc7j4.5279706372418738086.tmp
        • Size 1.0MB
        • SHA256 02686b2909d05417142ed5cb62f5f9d710ccd576625606611b649d242b003ae5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        kBpz_LLu0cSqxUdUHvTp2Mw5wMU.2335789726426749732.tmp
        • Path /data/data/com.picsart.studio/cache/imagepipeline_cache/v2.ols100.1/62/kBpz_LLu0cSqxUdUHvTp2Mw5wMU.2335789726426749732.tmp
        • Size 1.7MB
        • SHA256 70acca25ab7cd443c4a5c2ce9cdb3e5d8dbde471d9607606565f7eb22e7f81d4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        PjdysmfLupv9ad_Vj-AwrBpHXW4.7312107910713943210.tmp
        • Path /data/data/com.picsart.studio/cache/imagepipeline_cache/v2.ols100.1/81/PjdysmfLupv9ad_Vj-AwrBpHXW4.7312107910713943210.tmp
        • Size 1.9MB
        • SHA256 d77e40f3f3f6eb43ebabe6cdaa2bcfb2d543bf3bfa2571d0b53bec125c8efdff
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        0605140bfdabd0bbe5bd1796bc154202.0.tmp
        • Path /data/data/com.picsart.studio/cache/network/settings/0605140bfdabd0bbe5bd1796bc154202.0.tmp
        • Size 6KB
        • SHA256 a5b17555cfd75e3e00916a8121908eea071f9b4ffcae1a935b3111963e44c114
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        0605140bfdabd0bbe5bd1796bc154202.1.tmp
        • Path /data/data/com.picsart.studio/cache/network/settings/0605140bfdabd0bbe5bd1796bc154202.1.tmp
        • Size 227KB
        • SHA256 37a803244cc06e40fb54160b21395ef1918b27c3182d2f1136b7c6358277a855
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        journal
        • Path /data/data/com.picsart.studio/cache/network/settings/journal
        • Size 126B
        • SHA256 7319bfbc8337006c21eeae7161a18b2196f4ed3cb631f21e122db6afb4035e81
        • MD5 SHA1 SHA512
        Submit Download

        journal.tmp
        • Path /data/data/com.picsart.studio/cache/network/settings/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512
        Submit Download

        ShopItemsDB
        • Path /data/data/com.picsart.studio/databases/ShopItemsDB
        • Size 32KB
        • SHA256 b02f07e69aa10f32877606df8c2152d9e6756aca48c22e6445462d480a1797a0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        ShopItemsDB-journal
        • Path /data/data/com.picsart.studio/databases/ShopItemsDB-journal
        • Size 512B
        • SHA256 da1a1a68edf0ec8daa8e7112790b39e9106017f61fe836852f72453c1975dccc
        • MD5 SHA1 SHA512
        Submit Download

        analytic_data
        • Path /data/data/com.picsart.studio/databases/analytic_data
        • Size 64KB
        • SHA256 06d2e38b5e51e510fdcedef01d79343f187d050a6ac0078c6d248861f32300e9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        analytic_data-journal
        • Path /data/data/com.picsart.studio/databases/analytic_data-journal
        • Size 512B
        • SHA256 8b25ed9814929e306a248ce496f06037674c4796418f117a508863d8e6cd09ec
        • MD5 SHA1 SHA512
        Submit Download

        analytic_data-wal
        • Path /data/data/com.picsart.studio/databases/analytic_data-wal
        • Size 16KB
        • SHA256 6cebc55dfe6c1917a91a2a5eb0d0c22e40abc5577687253c769866129623978c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        analytic_data-wal
        • Path /data/data/com.picsart.studio/databases/analytic_data-wal
        • Size 52KB
        • SHA256 7dbb6f2eda1e423a55ff384daf9e29352f853d3f17b51089efefbdba138b65e7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        analytic_data-wal
        • Path /data/data/com.picsart.studio/databases/analytic_data-wal
        • Size 406KB
        • SHA256 c15397678e7fdb23455a6757f15b65a53ec6acf19a1fa80f3c7e73e7f8c368a6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.picsart.studio/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 ae68a13a621026651d8e95669ad33996367a7df80f667bf598e8a1619f686963
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.picsart.studio/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 4e88fd3309df6564a26f75e06b9633b29fe9d03e16424895a1cf934d039abf7e
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.picsart.studio/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 a3e636472743ed1e269c957e73bae24e85919957e3e17fff5d97ab605f94b83d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.picsart.studio/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 68e6fe052562835345060ae7a3b8c55bfb760ae39adcef229e6420cf6f2a1a4e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.picsart.studio/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.picsart.studio/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 4a159f33c7851449458fa41c6f42acab275225a11f5ff252efdb7adc7224f98a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.picsart.studio/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 a75fc8f2310f6ab04a870ef32a29871eaa181270334a44208a58df246cb8733d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.picsart.studio/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 99ff029de35b9b004b6e2f616004427566fe597c7724fc03ef3740f4be7d94d1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.picsart.studio/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 09d28bc2dbb09c19b375adbd56660a251ca28db3ef112997c4f164436a4afce1
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.picsart.studio/databases/google_app_measurement_local.db
        • Size 32KB
        • SHA256 e8f8242fcca83662956ef3743e1e620d994bef17ec544f3bfd7cf62d376771ec
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.picsart.studio/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 a33810716a410926164806d76659a0b65bf1cf213837da842498bcee930da77a
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.picsart.studio/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 28f8fcfdf7decdf133ca604e9006a8c8215817d2df0fb732e4f0998169fd5c42
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.picsart.studio/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 9dc189e32355472834cc8ad56a0e88e0849aeba6da7bed0e80cc158f100c2345
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.picsart.studio/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 ca2cf476ded1eca8334f60542df8a778c5d74ffd381a170cebe79a7ccb0839af
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.picsart.studio/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 e8ab948ac59d5bba05fb73622b397c81baaa3602674dba4126c211a89b30693e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.picsart.studio/databases/google_app_measurement_local.db-journal
        • Size 24KB
        • SHA256 bc93d27fb6ea449610e655e3a51eeeda81ce5d202ed42fdf232e3e750c033c47
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        1717599844485
        • Path /data/data/com.picsart.studio/files/AFRequestCache/1717599844485
        • Size 3KB
        • SHA256 850a9521ca7ffd489b1e6cf7b694c8d783ef816f37027a71933f818339bfaf57
        • MD5 SHA1 SHA512
        Submit Download

        1717599846484
        • Path /data/data/com.picsart.studio/files/AFRequestCache/1717599846484
        • Size 3KB
        • SHA256 ff5c765b34f4cb2c4e7fe2688b48cd79ec95424bc26f3644255bcb1429bb5fb5
        • MD5 SHA1 SHA512
        Submit Download

        1717599851595
        • Path /data/data/com.picsart.studio/files/AFRequestCache/1717599851595
        • Size 3KB
        • SHA256 ccb351d4405d577b9b40b58eb608cda604864d29e24bd4963c00235b4bead779
        • MD5 SHA1 SHA512
        Submit Download

        AppEventsLogger.persistedevents
        • Path /data/data/com.picsart.studio/files/AppEventsLogger.persistedevents
        • Size 7KB
        • SHA256 7a286456ecb88f6f231f7fbfc686bd4a07f6b3af3bc3db3300c5a08cbb56ecd7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        AppEventsLogger.persistedevents
        • Path /data/data/com.picsart.studio/files/AppEventsLogger.persistedevents
        • Size 14KB
        • SHA256 e2d92874000c918e7ed64c582c4ab582cfae35a40bbe71a9c12ede3d56f69947
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        PersistedInstallation1500321369702139896tmp
        • Path /data/data/com.picsart.studio/files/PersistedInstallation1500321369702139896tmp
        • Size 90B
        • SHA256 e46bc350816b7985e12afe0e5853a299fdbce70da3052d0d6c297232a4a32a32
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation3247947108688927296tmp
        • Path /data/data/com.picsart.studio/files/PersistedInstallation3247947108688927296tmp
        • Size 562B
        • SHA256 bb4ab4381cfedebdde182417c9726b297eb30746cc0acf0781e8b4bdae49f6c9
        • MD5 SHA1 SHA512
        Submit Download

        crate_flow_cached_json_path
        • Path /data/data/com.picsart.studio/files/crate_flow_cached_json_path
        • Size 2KB
        • SHA256 3e8bf336b82bb8a62d5e58a438edfac939e396eccc9bff0b671b51caeeec323b
        • MD5 SHA1 SHA512
        Submit Download

        v1.bin_tmp.tmp
        • Path /data/data/com.picsart.studio/files/detection/mnn_face_model/v1.bin_tmp.tmp
        • Size 559KB
        • SHA256 608cd9c29c124463df0140e0e80eceb6aa674b02fbd932158e68e297edb8e754
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        v2.bson_tmp.tmp
        • Path /data/data/com.picsart.studio/files/detection/mnn_landmarks_model/v2.bson_tmp.tmp
        • Size 8.6MB
        • SHA256 aa1a267582f240e30077ac81ab90615b2cf7e90af83a62a4912a6cf8cd5d329f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        v2.bin_tmp.tmp
        • Path /data/data/com.picsart.studio/files/detection/mnn_segments_model/v2.bin_tmp.tmp
        • Size 5.8MB
        • SHA256 3de6a124d3d97bdcf02f3be32d76ffcae65244ef9e9cb9f1e7912a6a1e1bee7c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        v2.bin_tmp.tmp
        • Path /data/data/com.picsart.studio/files/detection/mnn_teeth_model/v2.bin_tmp.tmp
        • Size 913KB
        • SHA256 5be60dbd19015e96099d722f971dd358e5b5108e752b00b9c6d0a5e0d75787d9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        device-id
        • Path /data/data/com.picsart.studio/files/device-id
        • Size 45B
        • SHA256 0f34341ca93e94f9a5af781c8975e6b171e93828aa668d516ea75688a4ed9455
        • MD5 SHA1 SHA512
        Submit Download

        internal-device-id
        • Path /data/data/com.picsart.studio/files/internal-device-id
        • Size 45B
        • SHA256 6277614b7bca3e9c6265c1a699d5afc6257b36934044740a6cbb7886429e1a35
        • MD5 SHA1 SHA512
        Submit Download

        profileInstalled
        • Path /data/data/com.picsart.studio/files/profileInstalled
        • Size 24B
        • SHA256 f386af120bc270639515453b56e16bd5f9083be35381dd71557a83f3ee796fd3
        • MD5 SHA1 SHA512
        Submit Download

        profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Path /data/data/com.picsart.studio/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 07c71c36c47acfbac8e72e4903a5d2a3fb52ad1f837e0e2d34e1779f25f57dfe
        • MD5 SHA1 SHA512
        Submit Download

        tmp_settings.json
        • Path /data/data/com.picsart.studio/files/tmp_settings.json
        • Size 1.6MB
        • SHA256 b52ea12426ad34bfd80e20791a00949538cbc645976bcfa9cd18895b71071c14
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.picsart.studio/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.picsart.studio/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 74ed1f88b2960b9321db2552dabc83d18562f38e1934ed4226a316adb2238dee
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.picsart.studio/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.picsart.studio/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 89ad1579ab53f01eb70f3b249f03c3b1832affe1e0d92a506ef8b2c43fe4a109
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.picsart.studio/no_backup/androidx.work.workdb-wal
        • Size 112KB
        • SHA256 614e97a941627a9f78426e46c5b645e0f1fea4d11797a52c6df0a2957266f0a0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.picsart.studio/no_backup/androidx.work.workdb-wal
        • Size 177KB
        • SHA256 162b075541eef5812babce8ad5fa97095ca6e4175970241d12c3d99884788cf2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        [email protected]
        • Path /data/data/com.picsart.studio/oat/x86_64/[email protected]
        • Size 176B
        • SHA256 db7a14514cf29a95dbbe7d09de145d9d95a42ce95ad522a3dd79038bee018023
        • MD5 SHA1 SHA512
        Submit Download

        [email protected]
        • Path /data/data/com.picsart.studio/oat/x86_64/[email protected]
        • Size 308B
        • SHA256 db50c570a351b2ab05ec0d67e5071803798367d1bb095fba50d5f1e129c86437
        • MD5 SHA1 SHA512
        Submit Download

        [email protected]
        • Path /data/data/com.picsart.studio/oat/x86_64/[email protected]
        • Size 156B
        • SHA256 5b24c8c4e2b951120927ac13d5b7c434c732562167ceb8a59ca53f659cdcf461
        • MD5 SHA1 SHA512
        Submit Download

        [email protected]
        • Path /data/data/com.picsart.studio/oat/x86_64/[email protected]
        • Size 156B
        • SHA256 1f640bb8859f2ba2b0b03b2384f0f65cdd9fa4a1b2980df06d5a794264fbe0f9
        • MD5 SHA1 SHA512
        Submit Download

        primary.prof
        • Path /data/misc/profiles/cur/0/com.picsart.studio/primary.prof
        • Size 25KB
        • SHA256 579afe9536bccd251f05c4f863574643b6a8c2a55906b3fcc000532299b1ab01
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        [email protected]
        • Path /data/user/0/com.picsart.studio/[email protected]
        • Size 12KB
        • SHA256 445db7e82ef1b927f7176a746c353b40b202a18033229c4d18d495163f836874
        • MD5 SHA1 SHA512 SSDEEP
        Download

        [email protected]
        • Path /data/user/0/com.picsart.studio/[email protected]
        • Size 22KB
        • SHA256 19b314a696d2c932ab6fcdb147b930b0287e036b87fa0ca4b86be91490da2977
        • MD5 SHA1 SHA512 SSDEEP
        Download

        [email protected]
        • Path /data/user/0/com.picsart.studio/[email protected]
        • Size 11KB
        • SHA256 6c25e3eeef0b1607ae21ff248b7fa286a5aee41b19fa01167aaa39d3951540c3
        • MD5 SHA1 SHA512 SSDEEP
        Download

        [email protected]
        • Path /data/user/0/com.picsart.studio/[email protected]
        • Size 10KB
        • SHA256 f4b81ad5a3336f3b7653faf6da2a281edcb4967bb60b5a06b1d88a19e3e39da7
        • MD5 SHA1 SHA512 SSDEEP
        Download

        androidx.window.extensions.jar
        • Path /system_ext/framework/androidx.window.extensions.jar
        • Size 123KB
        • SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
        • MD5 SHA1 SHA512 SSDEEP
        Download

        androidx.window.sidecar.jar
        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 25KB
        • SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
        • MD5 SHA1 SHA512 SSDEEP
        Download