Analysis

  • max time kernel
    18s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    13-06-2024 22:29

General

  • Target

    e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1.apk

  • Size

    2.6MB

  • MD5

    1d9bf853a44ab55b453cffa4ba6ef1df

  • SHA1

    bcc42ffb934024eff4ac53d0aae6292f5fa6c0fd

  • SHA256

    e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1

  • SHA512

    3f46da5eacd7c26286692fe5cad659ca93aab443bf9e8292901f8d5073377c0187150f1688759b79d889c62bf361b38de53894c51bc50eb3f8839b328f887692

  • SSDEEP

    49152:2GGPER4IKY4CpoZubs5xApsWgv7zv2gPwd2ofrfpGng:2GGP2Bhpois52KPvEd2ofrfIng

Score
8/10

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
  • Checks the presence of a debugger
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.prathamesh.disableheadphoneprathamesh
    1⤵
    • Checks if the Android device is rooted.
    • Checks memory information
    PID:4310

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events-journal
    Filesize

    512B

    MD5

    bdaeea0f3b4280c785f3deaf0395e4c0

    SHA1

    037198ded6a78852f4456a1dd0d4385879a50624

    SHA256

    6777c845705a0423051b1c810d325ab2fbfe07b327ffc24ac6b1ea09ddec3bce

    SHA512

    c23b3ee8327e8be4680550a58e77ff358cc5f492d0f099a8767ef420ee9880bc413bcd0b94cc9d1a3d7a5b2bf3d27626b31ead0aff3dd63260b07ec3736785fc

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events-shm
    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events-wal
    Filesize

    68KB

    MD5

    68c8418f0f21c345143e7f232d11ee89

    SHA1

    e52d48fffa1b5569778081cd629b6c2e4ff3356d

    SHA256

    c4fab87b3b8ce348dfbe0f778abb11992b73ac47f57227f5bf1a6fde4fd4a79f

    SHA512

    c128b3cb33cfe3d9d7c390ea97ef3f575821dce0f026947063414f3919a98ebe742093202167e756de3ffdb5183fc8c4fb5d904d530ca85e936ffa7a1994c904

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    7237409e0640cfab7bdbd429bf821a3b

    SHA1

    4c3da934842f8d4835dfe2a9c275a300e5123309

    SHA256

    5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

    SHA512

    c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    854303e91028d88b51688f0467f07f51

    SHA1

    59c48d89eb8c1e0ab70a63fbffad7d4c6f2513ab

    SHA256

    0a7993c493dc677c1446d2cef56e9b856ecae5d7e7d4a36122b6661df2ce50a3

    SHA512

    8c2232684d898e339a429742cdb2b4d23ef0e358b7be92b79efef0a3df7d3c5e154ccf712746bd763245cc230d81dccb6fd07776333b39d16a30c3d12dcf14be

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    1355d78c6d13f6a1ede1a5a86f958566

    SHA1

    a17eae723f065029568510f912a3f0d348b65769

    SHA256

    8eb34ccaf9b846320301d1a66363b5c81d798325bb3fedb048236b7f21c13afb

    SHA512

    1b51ccb7b5ddbb05c097ba67a7dc033fd1b91960ede911c2be929ba9088225bd54064757dabfcab65eebd6374a5d8eaf28bf66d1385197c870612d2cfff830a1

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    4807468cd07423c24db982b90dde04c0

    SHA1

    61a26d0c84e893d180f7bcde74654ef99e50ac5e

    SHA256

    3003f25abd6c5f336352301f04bffd8fdee6d631dae24309792970e04cc5ad82

    SHA512

    3373b4cef0cb7abf3c26a2b091a57339275efedfd5783865b26ecd0716c4ad89c7303b796f06a2ffcb281d90f1ecbec61766213734ed59ec7a8eb1703cf63211

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    d7d9fa24daa2f376b4fe3d4ef73293ec

    SHA1

    8b691b8b1a815fb3c76084b9addfca9786b79fd1

    SHA256

    ecbf4e2d60129d67776b0497c3a134d61fd9849805a50035567a59e0ed11d1d5

    SHA512

    a6cb4f63962b231b3e049375496fbf92cace5be95c46714ce6c32ae3008f66fb21f3abdf8e7be9889c0160f86e70caf6ca728161a50d27a7f0c20023be002eb2

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    44693692da738db6eb133cf0e4cde91b

    SHA1

    e6bda56494c325d8d37ad89552263ae85d9b0550

    SHA256

    8fe0ac9db76d4a2dcd3b3d54c0efedcd223e25aabf716506493d50e243a7a2d4

    SHA512

    b34ddfe1ae343b1b12f7029ae476a0ba8e1b4043ccb520afb412b3f71335ef679bf29723c9a5c00af7e922e9982d5b3af54b2ed779da8cb601f378e5b9d26be5

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journal
    Filesize

    512B

    MD5

    7be94c5adf1894ae2d1c73e4d28e96a0

    SHA1

    dd5ba3328cc20989c288bb670b82a8da66a2e03a

    SHA256

    1bdae1153cf634ed4126c5db223b1a1e8c26b1bc97d6efe768cbce805d141e69

    SHA512

    2109b58331122ae01ceb4f4a814d9d4298ed50e99c34a9d001559ecd7eb26d1ed64d934b761ebc8d78052bc515617ad44bf796fc982d597034a096237c0de3d0

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-wal
    Filesize

    36KB

    MD5

    ee7cefa3c13b949afddf0f97a8bb811e

    SHA1

    2976662f8c606702f60a691b53c409d830bddaa1

    SHA256

    de35166677f2405740a4b4a6add4fb0f36e805b95105715d688ea9b8074359ce

    SHA512

    bda9e81bb52b801807655d15a7989285b2d001824af87b945d75c0b49b9d656b8e860f75057c56407e3a1873d2db249d1f32f14f0c134e6b4f0cfebb03948d6d

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    0dda446ecdb8b13fda6aa873f1163efd

    SHA1

    a218eb07edb54db1f4fb33857f7410ea99eb9992

    SHA256

    08f4d03cda288a9ad8a9648dc6c5b969c6d8dfb26b48be8b2b568df98641585d

    SHA512

    968625c319d954423c6ff077ad6df8a1fac0b5025aebed9771267d17a694e36ebd1723882ef01f63571684400553f85791ef7d85feaf7a4e8052eae6035b4e10

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    5f5f6a4495cd88bd67f21281a96cee8d

    SHA1

    f8ffa0217ddea425fbe45d49bc5386cc0a502a22

    SHA256

    c791329d00b29581c2c1fef08911d9e731455014cc08d7a02e042074591b62fa

    SHA512

    f70c8d158cec92d13533d6218a7bbb94e9d2aebbf9aacc0ea5c4b9ffe92a85a05127d1865add4933747e3116ab4ce743582931bfe10f63467478212502ab47d2

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    f5a697cd7f48e4dbde855554f44d2b5a

    SHA1

    b5ccd2c88928727cfa0e74265a7cde6994d442ad

    SHA256

    64ab39c42733a8eb87fd9c35390cf3b3e4420bba8d08b47aca0d66a853d50d9b

    SHA512

    006b8d0b35803f5904fead12f59fa90c0f2c520675e53c175a86b904d045796de3771fbb898e7a92518df35b493026bde74384eae590ea5d3ebd8f75d0e97fc4

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    6521c9954e881ea25b4299056b933091

    SHA1

    dff8e550ff48f76411c9d6420b3fbfab0dfbd807

    SHA256

    98e6f237f9f645403ddf8a82172256490edd1e0c12987694acaec73f33fd123d

    SHA512

    ecbd0299436c59567be921aabcdd56a03600a830f8a2807f858604e6afc1d0a614ae55d425c179046c6a8ec5c73f031a4a86d1f3451d6fc36a8024eae8fe452f

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-wal
    Filesize

    4KB

    MD5

    f8da20d5343220bb2521d776f503bc76

    SHA1

    ebf85512b5d894284d97a8d1f6659443a6344113

    SHA256

    42860fb705365d455b38fa07913754d5cab6e4e88e4cde3c652b9ce4f441dd2d

    SHA512

    b9535010de19bfeed5ef39d9d1701afbf90eb3c69fb43f735cc5086a87eebad6140522034367053dbf2b11682b510235c2ffe3e4f032c75f1643d222b23aacab

  • /data/data/com.prathamesh.disableheadphoneprathamesh/files/.com.google.firebase.crashlytics.files.v1/com.crashlytics.settings.json
    Filesize

    737B

    MD5

    069d6375fcae563ce552adf27cbcfbba

    SHA1

    328ce4aaa1253fc151a1dfb9b6c1534166985baa

    SHA256

    ffd9a9be721020f4968c48f76bcd12bd4d176fb1a1f17af9ac602178fd145591

    SHA512

    ccfc17221d9312944b686b2a8d2fe3eaab2ddc113bbd44daa1212afb3532d0c74aa2ae854da011859061c5ba595794979c2dc123d2af6b13347effe0aa48d469

  • /data/data/com.prathamesh.disableheadphoneprathamesh/files/.com.google.firebase.crashlytics.files.v1/open-sessions/666B72CE0283000110D6C4A2D09822A7/report
    Filesize

    762B

    MD5

    1960ee8efb208458f11c06c93b5d35a5

    SHA1

    d6cefb2c84f8f53508b95283074706085927ae4b

    SHA256

    bf1123dedeb7cbdab4930f433e50593f2b866821f400bf2f524b65ae31d13cad

    SHA512

    462846bb62866ded9419c9710617861f7af18f06e7fe3b97b22b21471bf81f4f1dea56ffb5bece3d0b826157ee4f3864fe914e5a8da8701bc081376df1d7f0e0

  • /data/data/com.prathamesh.disableheadphoneprathamesh/files/PersistedInstallation4599351075187869739tmp
    Filesize

    90B

    MD5

    1a506c31e1a4d134cc7c76b85c5a6b98

    SHA1

    617449bfe8c0fc1de4b88993c7d4e77a9cd08360

    SHA256

    abd7f4b66fb0e42bf99a5fd9eafa471795a0d18f847f58fa3d37af6397e66e7e

    SHA512

    418076e4a49dab2449452ee18a88f9cb79b633407f4536c43e0c121080eeeda450247a7c957cde389b7e387228145e41fb2e796428cec18202311a15d29488e0

  • /data/data/com.prathamesh.disableheadphoneprathamesh/files/PersistedInstallation5423944552118088642tmp
    Filesize

    566B

    MD5

    754379240cace3e3695ef84b809c7b06

    SHA1

    22b09118ae867ddbc90f1ee18c49ce406011721b

    SHA256

    a278c9a38f63a227e35bfa79d12a75376312f4cbe9a88887d406901f07c7eed5

    SHA512

    b3df775b2b2c536731fcf119542509b0e087963cdd9e6c1a39253e21fae3304b26d278e234d93371e4c70258919458b7cdbbecedff45742779173db17c48c770