09d4a5a09adb12d0153535d046d96849d4d83c8551b0be818626505e206e4a5c

Analysis

max time kernel
155s
max time network
185s
platform
android_x86
resource
android-x86-arm-20240611.1-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
submitted
12-06-2024 14:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

09d4a5a09adb12d0153535d046d96849d4d83c8551b0be818626505e206e4a5c.apk
Size

4.8MB
MD5

e95e1f342ea8a16136a6ba8b5c461cfd
SHA1

2d7f51101fec9ecc3d84313088a6fdb7702fa02a
SHA256

09d4a5a09adb12d0153535d046d96849d4d83c8551b0be818626505e206e4a5c
SHA512

a88cc1361d5740f0caf81638d5de4bdf2c211e5f5b37817385f3c6e20c464e954b4f4a89a008024094a64814d53d428ba7598098a2e5d0636dd0de3666cf6bfe
SSDEEP

98304:lk5QKPD6MteM/0KBSj57a4PQ+vqJBBEypgZGRqnzK1YFqaPo/KrMJ:CP6L1GWqXB5pgARqnzK8p+

Score

6^/10

discovery execution persistence

Malware Config

Signatures

Queries the mobile country code (MCC) 1 TTPs 1 IoCs
discovery

T1422

Processes:

com.hadifetrati.notebook

description ioc process

Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.hadifetrati.notebook
Reads information about phone network operator. 1 TTPs
discovery

T1422
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

T1624.001

Processes:

com.hadifetrati.notebook

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.hadifetrati.notebook
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
execution persistence

T1603

Processes:

com.hadifetrati.notebook

description ioc process

Framework service call android.app.job.IJobScheduler.schedule com.hadifetrati.notebook
Checks CPU information 2 TTPs 1 IoCs

T1633.001

T1426

Processes:

com.hadifetrati.notebook

description ioc process

File opened for read /proc/cpuinfo com.hadifetrati.notebook
Checks memory information 2 TTPs 1 IoCs

T1633.001

T1426

Processes:

com.hadifetrati.notebook

description ioc process

File opened for read /proc/meminfo com.hadifetrati.notebook

description	ioc	process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	com.hadifetrati.notebook

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.hadifetrati.notebook

description	ioc	process
Framework service call	android.app.job.IJobScheduler.schedule	com.hadifetrati.notebook

description	ioc	process
File opened for read	/proc/cpuinfo	com.hadifetrati.notebook

description	ioc	process
File opened for read	/proc/meminfo	com.hadifetrati.notebook

com.hadifetrati.notebook
1⤵
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
PID:4272

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.hadifetrati.notebook/cache/adivery-cache/1qr8dl8wps1jpzi951vok34zi.0.tmp
Filesize
29KB

MD5
5aaaec90a9729e4f660795be2fd48620

SHA1
5297e2b0cb795ba6e6c23ec90384bea31b3ab045

SHA256
a36b1c41a44eee1682fe431661ea0ed622582637d5f49609c8ac7f8bf48c66a6

SHA512
4c91460ccacd7670cce042841968c1b49252d6fa54dea3f9c385ab160c30c1c2f51badda29abc9465134b8f53c6543c5196ac73efd2aac1da314f5bea553011a

Download Submit
/data/data/com.hadifetrati.notebook/cache/adivery-cache/2iluxnebe51hekcjg8v1g5fq4.0.tmp
Filesize
27KB

MD5
8efefa3227e4d782a80d5f9da22a0058

SHA1
934293af173c80e3ca62e717d619acb57005a517

SHA256
fd9db8d1519624107a19b6a69985d592c5cb178706f1ea62bd13719400618fe2

SHA512
e9e2f3ca150c6b1cf7573cafe7d5866057094fe28a1eabfcfe2e86df7885a4ddcafde12dce53224c4e263fe2047d68dc626be45bda2f837756a3a8b2c606667b

Download Submit
/data/data/com.hadifetrati.notebook/cache/adivery-cache/2mpzv0ywwt0br3layyg7kosn0.0.tmp
Filesize
79KB

MD5
b4ba18af5e4803b5406d04d682f9eb51

SHA1
d6877e0b6c25047129e54c4629d9814b5b6845a3

SHA256
4a23b0af124d823f1d9877a51fa42fa8fc959810dc9c7efd23ca9e610f0a45d5

SHA512
fbef24e61151fe8c19339306a06752b4d6bfec9b7f50cee518c419ba277591af24a17d87a0e5b4d8e65936d63f14fd598e0fefe53b73c4f59c80e1895d4a9cb3

Download Submit
/data/data/com.hadifetrati.notebook/cache/adivery-cache/2uhrrdkqo8jjq7ppyhxsxfdm.0.tmp
Filesize
163KB

MD5
9c9d3dd3fb276bee23da93f639ae46ed

SHA1
cfaba0922e79567ed03dbb2f7b4c6c497d27d8d0

SHA256
b857723004b2357dd3152b526403cfb2b91fafe2957a283975c1358f28cc02a8

SHA512
b94c2329f973208de3002542a21fca629643caecbb6b83d100c69a2554a1a371e35ffa4a555e595bd44d3c472dbffa5c4c86049c3f54ed5f5c81ccdaf4a2f82f

Download Submit
/data/data/com.hadifetrati.notebook/cache/adivery-cache/4im4mehi8oql8ccqtzqzuowhp.0.tmp
Filesize
5KB

MD5
bd00afba56e1517c53505a42fabb198e

SHA1
2b5a85dd2767bf33b2a57129226d00c48508d83c

SHA256
0b8ba338ce3b657a75d98d659fce4bea3e578a1af4eb845da33b9fc25ff357a3

SHA512
3eb6f611f33ff2ef5f632ca79f0595089c2ada3620f12ea38ed3ecb307ded38562eb953d0774115ad84004260f903d62c909e55f9c60a5c913ba8cdf2316abfc

Download Submit
/data/data/com.hadifetrati.notebook/cache/adivery-cache/5pbo4a7hddcsyz1wak1oojwhr.0.tmp
Filesize
61KB

MD5
4a3e4671e240fa87f955b86c32818358

SHA1
09c94521f832b980c3196436ef5b5bb9a0f5291f

SHA256
3ac0f177e2a226d398c51f1052c330b0af38e2c925579ab5a59b2438861d9324

SHA512
2b5a0f56a9eb7c3340a0080617179eb83d9880158120c23f44d38f72a7718725954b3fbe4c66f99aa74d8cc1f506390d20352af4e57a59d27b17ea35a46377b2

Download Submit
/data/data/com.hadifetrati.notebook/cache/adivery-cache/5s1oib9dxsbip0phnnqxsx10i.0.tmp
Filesize
3.4MB

MD5
68cc7e7ff81d72b65082da5d0d9b4718

SHA1
6c2ffd9d0b3505ad7efc9ef22bc0bbbcced4ab55

SHA256
11bde99d5cedb1d5aa1425ba3807f8cee8c60f16c6f607027553d167a11eb6df

SHA512
848155ff51abaadb475d7900e8e8494906c02ff85e21f8113f1a48c9002616c07077a8b3a7272d6eada0d5ec7ba2dca7cd021190eb0802c3a13e41d9ae69c68a

Download Submit
/data/data/com.hadifetrati.notebook/cache/adivery-cache/journal
Filesize
777B

MD5
8bd57fae94079dc0c1de5bcfb505bc48

SHA1
fd97ca983b4fb35ea89e650cf75d8e108ffc6f69

SHA256
d415ce7d1cde9d60139af7fd6e33d94e248187020faca7c263e847d5110842b1

SHA512
c5169a63bcb8db7b930039dca8aa07f15132ec58cd116fd61a049821228e250140ddb8e1c6263fa271558b1dad905746b8f897dca4885a5ad8ab21613714b9f1

Download Submit
/data/data/com.hadifetrati.notebook/cache/adivery-cache/journal.tmp
Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/data/data/com.hadifetrati.notebook/databases/ADIVERY_RESPONSE_LOGS.DB
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.hadifetrati.notebook/databases/ADIVERY_RESPONSE_LOGS.DB-journal
Filesize
512B

MD5
13c1f852bb49678fde6eb27b366aae47

SHA1
6d4143dec62bbf9bbd2bb4327d55b1634c413470

SHA256
025af7a9861decedd839b3e379e317f5eb4b11f56e0bf0953fb23e147afe67ff

SHA512
c7f470542a237ecb8b0f3ced09a9dce29468336006a92d96453d000c757a4a62a777b00fe3734f022614dec4957f68fdc4fbca2051db157eee81cc7f0f0e1077

Download Submit
/data/data/com.hadifetrati.notebook/databases/ADIVERY_RESPONSE_LOGS.DB-shm
Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.hadifetrati.notebook/databases/ADIVERY_RESPONSE_LOGS.DB-wal
Filesize
32KB

MD5
231ec15cd3257684ce0f6a286d5a1c6c

SHA1
c2e009e9fb10b07a8673aacb6bb67a66a7b6bc20

SHA256
9154552f7b13fafe648c1c21b5e37a3f8b249164309e74439b46910ba3ea01e3

SHA512
c9da6ac19aa240116bdf91e3b6c01541652241fcd3269da73742abb92e7fc62bffd3f858995dce99284113afae53fed05111eaf325e2063b5d3124577df1972b

Download Submit
/data/data/com.hadifetrati.notebook/files/profileInstalled
Filesize
24B

MD5
237b1cebb1e45f78ef3066fd978fc8c3

SHA1
896f58607f9ebde702f52c92ea803cfac4d9915b

SHA256
caab166e8335e98c0f03df4ff2896c2be31011d170114a103227d4c2e36beb22

SHA512
23af7d9fd7e221b74acc0b59e23fc31420cad93dcfd7cd1841354d0fc092940dc434e3a30dfa1737f9240be9ca45d92bdff2831240eb9aa685b698ecdda238a5

Download Submit
/data/data/com.hadifetrati.notebook/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
Filesize
8B

MD5
0f559d4d91b4e5b0dda6b546aff4f9fd

SHA1
704e642b78bbfdf7526f6015fc9fbf387da6ee95

SHA256
64e13286bf08ee868bbffae662f67aa930d8643344fe5807d1e4a8447bc65bf3

SHA512
6865962497167dcd222fd5f4864ec9ab03c555d46e4c637346db54d834a282fd151128eb3eea4eba2c7be70596c222d5424c1981b33348586f0606cfa70a3246

Download Submit
/data/misc/profiles/cur/0/com.hadifetrati.notebook/primary.prof
Filesize
1KB

MD5
b74110fef75f6bd788b075005de35e9d

SHA1
a80e76ca6f3e770dd1671fdc25c15ee755632300

SHA256
49d617b2ebf59a9dc83afe76ffb69cc54f115d5e0e4bc3cd6742cab5975f0b46

SHA512
6f1e6a39fb607f1c7d4710552cc8bf8f194bd0823f4e6cb50542ce294a5292ad265b91e9d856a8d824869063f19c18815847243ce9ece31aaf1f48405434106d

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads