dc33197e20539aa65e89c1a1039007c57ee70624815f7e4976dab0686e93a5d5

Analysis

max time kernel
26s
max time network
33s
platform
android_x64
resource
android-33-x64-arm64-20240611-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20240611-enlocale:en-usos:android-13-x64system
submitted
11-06-2024 15:20

Sharing

Reason

exit status 1: "{\"level\":\"fatal\",\"error\":\"emulator exited with error: signal: segmentation fault\\nWARNING | userdata partition is resized from 6 M to 16384 M\\nERROR | resizing partition e2fsck failed with exit code 8\\nWARNING | cannot add library /opt/android-sdk-linux/emulator/qemu/linux-x86_64/lib64/vulkan/libvulkan.so: failed\\nWARNING | Requested adb port (28052) is outside the recommended range [5555,5586]. ADB may not function properly for the emulator. See -help-port for details.\",\"time\":\"2024-06-11T15:22:03Z\",\"message\":\"Execution error\"}"

Report Analysis Logs

General

Target

sharkbot.apk
Size

15.8MB
MD5

879557e8d40e9d422d3702bcaa4a806c
SHA1

90517ba5890eda56bef0ab032eea8e004b559181
SHA256

dc33197e20539aa65e89c1a1039007c57ee70624815f7e4976dab0686e93a5d5
SHA512

1e67393a7fc209c0941d6fb6b060c86d0a6f5bfd07855cb12f5df4d2160ab768ab94cef1b9d1363a48eeaf621934cc9a3395ef7d1c1e00c5e50ee0e751d39b97
SSDEEP

393216:6ZfRvpBmacX7X52NWdXJq2TN2t7dwhpBrfum7Se:6vv7qgY5TnZSe

Score

8^/10

collection credential_access discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 1 IoCs
evasion

T1426

Processes:

com.superlimpiador.acelerador

ioc process

/system/app/Superuser.apk com.superlimpiador.acelerador

ioc	process
/system/app/Superuser.apk	com.superlimpiador.acelerador

Loads dropped Dex/Jar 1 TTPs 5 IoCs

Runs executable file dropped to the device during analysis.

evasion

T1407

Processes:

com.superlimpiador.acelerador

ioc	pid	process
/system_ext/framework/androidx.window.extensions.jar	4243	com.superlimpiador.acelerador
/system_ext/framework/androidx.window.extensions.jar	4243	com.superlimpiador.acelerador
/system_ext/framework/androidx.window.sidecar.jar	4243	com.superlimpiador.acelerador
/system_ext/framework/androidx.window.sidecar.jar	4243	com.superlimpiador.acelerador
/data/user/0/com.superlimpiador.acelerador/cache/1664557424545.jar	4243	com.superlimpiador.acelerador

Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs
Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.
collection credential_access impact

T1414

T1641.001

Processes:

com.superlimpiador.acelerador

description ioc process

Framework service call android.content.IClipboard.addPrimaryClipChangedListener com.superlimpiador.acelerador
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
discovery

T1424

Processes:

com.superlimpiador.acelerador

description ioc process

Framework service call android.app.IActivityManager.getRunningAppProcesses com.superlimpiador.acelerador
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
evasion persistence

T1541

Processes:

com.superlimpiador.acelerador

description ioc process

Framework service call android.app.IActivityManager.setServiceForeground com.superlimpiador.acelerador
Queries information about active data network 1 TTPs 1 IoCs
discovery

T1421

Processes:

com.superlimpiador.acelerador

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.superlimpiador.acelerador
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
execution persistence

T1603

Processes:

com.superlimpiador.acelerador

description ioc process

Framework service call android.app.job.IJobScheduler.schedule com.superlimpiador.acelerador
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
impact

T1471

Processes:

com.superlimpiador.acelerador

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.superlimpiador.acelerador
Checks CPU information 2 TTPs 1 IoCs

T1633.001

T1426

Processes:

com.superlimpiador.acelerador

description ioc process

File opened for read /proc/cpuinfo com.superlimpiador.acelerador
Checks memory information 2 TTPs 1 IoCs

T1633.001

T1426

Processes:

com.superlimpiador.acelerador

description ioc process

File opened for read /proc/meminfo com.superlimpiador.acelerador

description	ioc	process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	com.superlimpiador.acelerador

description	ioc	process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.superlimpiador.acelerador

description	ioc	process
Framework service call	android.app.IActivityManager.setServiceForeground	com.superlimpiador.acelerador

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.superlimpiador.acelerador

description	ioc	process
Framework service call	android.app.job.IJobScheduler.schedule	com.superlimpiador.acelerador

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.superlimpiador.acelerador

description	ioc	process
File opened for read	/proc/cpuinfo	com.superlimpiador.acelerador

description	ioc	process
File opened for read	/proc/meminfo	com.superlimpiador.acelerador

com.superlimpiador.acelerador
1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks CPU information
- Checks memory information
PID:4243

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.superlimpiador.acelerador/cache/1664557424545.jar
Filesize
10KB

MD5
dfb68e70e8eb84d844c9ce623ee069c1

SHA1
369e761858a904fe9fb89efcfc9bd3e6e56ee44f

SHA256
8ba015cb192f34326e6a46f765c6712d87c3797661541275c84b9a30ee449eec

SHA512
0d5f8ff91d3cd5c976cadf774b8d5cd6f276793b9eb9f3d8e7168eae122b0bfcffd833be9762de441d4b52f7bb3eb3850479aea37ac327be9b71910c6fdc566a

Download Submit
/data/data/com.superlimpiador.acelerador/cache/oat/x86_64/1664557424545.vdex
Filesize
948B

MD5
480d07e0214aeb0d51a0d29f6f0a6a22

SHA1
bb1a0580bf436ffe93d91756a9e2e646e449be9f

SHA256
e9e16898bfb89b40c3e9972f977730473d9b45ed0fdc5cbf868ff0e71f064290

SHA512
31c58c4bbeb49cc1ca7c705b829c55b50d980e9248277f9c96f1602fb1e6be8e7e3d3add5d3b002d28015822dc277e21905eec9dcc5685567c36e5ab97444171

Download Submit
/data/data/com.superlimpiador.acelerador/databases/google_app_measurement_local.db
Filesize
16KB

MD5
da4c81d9a032121236a4ed034c0cc9d9

SHA1
6ea1d3d14a34c4dbe056fc4380747d3970cb3498

SHA256
30b7dde5771b5ef3cb6cd033fa2b1618a0674f41f47c1441855f3da24887a0ff

SHA512
e61d8e6af3d48cc6e95e34568209bc24308db9d751dd1451538907df0e7caa67e329c4615911b0c6614275f3e5cfb2a8a38288f5818487c5d292c18dd857849f

Download Submit
/data/data/com.superlimpiador.acelerador/databases/google_app_measurement_local.db-journal
Filesize
8KB

MD5
37975aa3c7cfdd03431f771bb00a764c

SHA1
1d2dcf782a077f9ef227be6886067e4ca103e03e

SHA256
27be67d26c70ee983a28eb5f652873c7d04d2123aae7060903d465f847dd798b

SHA512
89219612c5bf0553a92d385d699a219b8611138f1f0724c926d25406f186b1a278f0910bbfbde51d139c1011e7086eddb48aeb3598a50bd9f6bdd792199c3fbc

Download Submit
/data/data/com.superlimpiador.acelerador/databases/google_app_measurement_local.db-journal
Filesize
8KB

MD5
53ba99056113a0b92375ddb52772beab

SHA1
045d7e15278ceb8c8fa7b0f03c512c40fb4849a7

SHA256
55911b23934517224064db7090017ae5a6d960979b0492b469c9f77113147243

SHA512
28c70f8d64a0db86af3aeff3313aaca976512627c088ed825035a97ca2104e6e30efd37adc5d53c1386db80222f6d36f3fcb57103201e92dec2e6f38d5a08c51

Download Submit
/data/data/com.superlimpiador.acelerador/databases/google_app_measurement_local.db-journal
Filesize
512B

MD5
d4984b7413e027e1985323402b7a7624

SHA1
501b132b0f5aa6055e78856e0f48fea096efa3a9

SHA256
350ad796e2c975ddde38bdb39c80945cc26f12588004376af97374dfeca95c7b

SHA512
b6a5d2c6aedcc2f07eba406f30a07e0332daf8f2be8145c263879890786a91f0f98e11267a857af9d04b7616f6cbd5b2a9ccd76f6b7417976df61d4ef93caba3

Download Submit
/data/data/com.superlimpiador.acelerador/databases/google_app_measurement_local.db-journal
Filesize
8KB

MD5
3283ed800a20f0aad7e5b1cc76209bee

SHA1
b9242b7ca8d3294ddb72175d55c95418d8dcd32d

SHA256
07c1ab4f020c440fec52f2ccf843e5ac8e9a46266531f847f6d52f7b98987f8a

SHA512
6b516150b01338120e0e0b893e3d54b94f9e75c370d84cb88d7850c83f6fd7dadff6a0256f55a48f02c92a73ae4c9a47f91b83beb3a0a562dd6a55e38f90938f

Download Submit
/data/data/com.superlimpiador.acelerador/databases/google_app_measurement_local.db-journal
Filesize
4KB

MD5
92a26b93b73164d699a4b280d7587b9a

SHA1
3af54e924beb4b32c7194fef78ff7ffa903bd84d

SHA256
188e5133542053ce9346626ea08e09418996dc0564338569c07de7719b917041

SHA512
f143cc764134da3fbf5e487a1c883eb596e3d6abb159c01b934853ba537e4b3c681e49b04ac1d84e94944652f750badc7b04eef062b519c2518c4a3308fee11a

Download Submit
/data/data/com.superlimpiador.acelerador/no_backup/androidx.work.workdb
Filesize
4KB

MD5
0eb157e1a86d4d00aa601dd2f6ff3ee3

SHA1
fee434f784e73cc7916322e949f727caf8363102

SHA256
b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4

SHA512
b9b79b8c3af8a3f140df230fd89e95206358ba50ff214e7323a2dbbe2937b795f970e588302ffd5d721318bd597ce0a27af26d6cdb07f45569c30209845082a8

Download Submit
/data/data/com.superlimpiador.acelerador/no_backup/androidx.work.workdb-journal
Filesize
512B

MD5
074634407fcb24e602d4741f52b7c7fd

SHA1
efd3b21d6a5f45ea80081ee82c68007c8de4fb9a

SHA256
2fa5a7da0f5e56cb7e0398601f02fd7fb1996fee2faf34b5b02c13a929982941

SHA512
878ea19b42e888f278ccc5fc5d795d4ce2150ded9dd56dec5b5097bee0c9445b97bd2c2aba89e943ac6b07b2c97ad706b6174fce09c2b01068cff874f1dc396c

Download Submit
/data/data/com.superlimpiador.acelerador/no_backup/androidx.work.workdb-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.superlimpiador.acelerador/no_backup/androidx.work.workdb-wal
Filesize
16KB

MD5
90de7b95e100ebd40936f7831b56359c

SHA1
a8a723123888434393d576c07a405ebbe6e613b3

SHA256
42cf425d1f8d2f76237c4a3d5dd59c6c6896112630e1b0af6aed62a50f21966e

SHA512
3e265d5b6087a69c5fb48aa9678a2e56058e628024184409bfeef6c328d7b04ebe63a8761046849b7b30e6b087d8c41f8d888b9fbb336f05b8bbd0bf2258d87c

Download Submit
/data/data/com.superlimpiador.acelerador/no_backup/androidx.work.workdb-wal
Filesize
108KB

MD5
7720955c68af62b3839a7c796632c65e

SHA1
649a7b5a8af4cb3928c4709a4147d0d3a746d9a2

SHA256
0c038f0cf335b2d282f9e76b0af4d66022b0771c8ef4be814180e391a22052fd

SHA512
b228fe15faa2b2b443555db4b75b3a11748c34d7442721a1b90deeb32d1203005cbf43b7c549ff48de1288fec2117a40bf8372abfb98ff22b0f8be739c2d0375

Download Submit
/data/user/0/com.superlimpiador.acelerador/cache/1664557424545.jar
Filesize
21KB

MD5
722310b17c81cc3d780d23e1a63eb450

SHA1
0a0c1a939f923570e5da88aa5c7b105052f056e3

SHA256
9f2d7ff525ca785553557c351812252c0beface31440517e2f19929fe76472b1

SHA512
1a48e9383a0befb0c6b4755a8b56f352fba317910308f701e13ce8189c465cade6b0af510165d586745f1913a61cc68f91395949202394336a59c34596691a91

Download Submit
/system_ext/framework/androidx.window.extensions.jar
Filesize
123KB

MD5
3056e1bdb7d4e19789d0319eff484bd0

SHA1
6791ae47aa9466fe0bca27ad6643f846853bbee4

SHA256
8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0

SHA512
c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658

Download Submit
/system_ext/framework/androidx.window.sidecar.jar
Filesize
25KB

MD5
29469324e59dfcc052f24b5af4e7b2c4

SHA1
10c1e17ac6f598037bb51baa07945663645de4eb

SHA256
9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a

SHA512
5e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2

Download Submit