Analysis
-
max time kernel
18s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240611.1-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system -
submitted
13-06-2024 22:29
Static task
static1
Behavioral task
behavioral1
Sample
e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1.apk
-
Size
2.6MB
-
MD5
1d9bf853a44ab55b453cffa4ba6ef1df
-
SHA1
bcc42ffb934024eff4ac53d0aae6292f5fa6c0fd
-
SHA256
e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1
-
SHA512
3f46da5eacd7c26286692fe5cad659ca93aab443bf9e8292901f8d5073377c0187150f1688759b79d889c62bf361b38de53894c51bc50eb3f8839b328f887692
-
SSDEEP
49152:2GGPER4IKY4CpoZubs5xApsWgv7zv2gPwd2ofrfpGng:2GGP2Bhpois52KPvEd2ofrfIng
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
Processes:
com.prathamesh.disableheadphoneprathameshioc process /system/app/Superuser.apk com.prathamesh.disableheadphoneprathamesh /system/xbin/su com.prathamesh.disableheadphoneprathamesh -
Checks the presence of a debugger
-
Checks memory information 2 TTPs 1 IoCs
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.eventsFilesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events-journalFilesize
512B
MD5bdaeea0f3b4280c785f3deaf0395e4c0
SHA1037198ded6a78852f4456a1dd0d4385879a50624
SHA2566777c845705a0423051b1c810d325ab2fbfe07b327ffc24ac6b1ea09ddec3bce
SHA512c23b3ee8327e8be4680550a58e77ff358cc5f492d0f099a8767ef420ee9880bc413bcd0b94cc9d1a3d7a5b2bf3d27626b31ead0aff3dd63260b07ec3736785fc
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events-shmFilesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events-walFilesize
68KB
MD568c8418f0f21c345143e7f232d11ee89
SHA1e52d48fffa1b5569778081cd629b6c2e4ff3356d
SHA256c4fab87b3b8ce348dfbe0f778abb11992b73ac47f57227f5bf1a6fde4fd4a79f
SHA512c128b3cb33cfe3d9d7c390ea97ef3f575821dce0f026947063414f3919a98ebe742093202167e756de3ffdb5183fc8c4fb5d904d530ca85e936ffa7a1994c904
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.dbFilesize
16KB
MD57237409e0640cfab7bdbd429bf821a3b
SHA14c3da934842f8d4835dfe2a9c275a300e5123309
SHA2565c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.dbFilesize
16KB
MD5854303e91028d88b51688f0467f07f51
SHA159c48d89eb8c1e0ab70a63fbffad7d4c6f2513ab
SHA2560a7993c493dc677c1446d2cef56e9b856ecae5d7e7d4a36122b6661df2ce50a3
SHA5128c2232684d898e339a429742cdb2b4d23ef0e358b7be92b79efef0a3df7d3c5e154ccf712746bd763245cc230d81dccb6fd07776333b39d16a30c3d12dcf14be
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.dbFilesize
16KB
MD51355d78c6d13f6a1ede1a5a86f958566
SHA1a17eae723f065029568510f912a3f0d348b65769
SHA2568eb34ccaf9b846320301d1a66363b5c81d798325bb3fedb048236b7f21c13afb
SHA5121b51ccb7b5ddbb05c097ba67a7dc033fd1b91960ede911c2be929ba9088225bd54064757dabfcab65eebd6374a5d8eaf28bf66d1385197c870612d2cfff830a1
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.dbFilesize
16KB
MD54807468cd07423c24db982b90dde04c0
SHA161a26d0c84e893d180f7bcde74654ef99e50ac5e
SHA2563003f25abd6c5f336352301f04bffd8fdee6d631dae24309792970e04cc5ad82
SHA5123373b4cef0cb7abf3c26a2b091a57339275efedfd5783865b26ecd0716c4ad89c7303b796f06a2ffcb281d90f1ecbec61766213734ed59ec7a8eb1703cf63211
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.dbFilesize
16KB
MD5d7d9fa24daa2f376b4fe3d4ef73293ec
SHA18b691b8b1a815fb3c76084b9addfca9786b79fd1
SHA256ecbf4e2d60129d67776b0497c3a134d61fd9849805a50035567a59e0ed11d1d5
SHA512a6cb4f63962b231b3e049375496fbf92cace5be95c46714ce6c32ae3008f66fb21f3abdf8e7be9889c0160f86e70caf6ca728161a50d27a7f0c20023be002eb2
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.dbFilesize
16KB
MD544693692da738db6eb133cf0e4cde91b
SHA1e6bda56494c325d8d37ad89552263ae85d9b0550
SHA2568fe0ac9db76d4a2dcd3b3d54c0efedcd223e25aabf716506493d50e243a7a2d4
SHA512b34ddfe1ae343b1b12f7029ae476a0ba8e1b4043ccb520afb412b3f71335ef679bf29723c9a5c00af7e922e9982d5b3af54b2ed779da8cb601f378e5b9d26be5
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journalFilesize
512B
MD57be94c5adf1894ae2d1c73e4d28e96a0
SHA1dd5ba3328cc20989c288bb670b82a8da66a2e03a
SHA2561bdae1153cf634ed4126c5db223b1a1e8c26b1bc97d6efe768cbce805d141e69
SHA5122109b58331122ae01ceb4f4a814d9d4298ed50e99c34a9d001559ecd7eb26d1ed64d934b761ebc8d78052bc515617ad44bf796fc982d597034a096237c0de3d0
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-walFilesize
36KB
MD5ee7cefa3c13b949afddf0f97a8bb811e
SHA12976662f8c606702f60a691b53c409d830bddaa1
SHA256de35166677f2405740a4b4a6add4fb0f36e805b95105715d688ea9b8074359ce
SHA512bda9e81bb52b801807655d15a7989285b2d001824af87b945d75c0b49b9d656b8e860f75057c56407e3a1873d2db249d1f32f14f0c134e6b4f0cfebb03948d6d
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-walFilesize
4KB
MD50dda446ecdb8b13fda6aa873f1163efd
SHA1a218eb07edb54db1f4fb33857f7410ea99eb9992
SHA25608f4d03cda288a9ad8a9648dc6c5b969c6d8dfb26b48be8b2b568df98641585d
SHA512968625c319d954423c6ff077ad6df8a1fac0b5025aebed9771267d17a694e36ebd1723882ef01f63571684400553f85791ef7d85feaf7a4e8052eae6035b4e10
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-walFilesize
4KB
MD55f5f6a4495cd88bd67f21281a96cee8d
SHA1f8ffa0217ddea425fbe45d49bc5386cc0a502a22
SHA256c791329d00b29581c2c1fef08911d9e731455014cc08d7a02e042074591b62fa
SHA512f70c8d158cec92d13533d6218a7bbb94e9d2aebbf9aacc0ea5c4b9ffe92a85a05127d1865add4933747e3116ab4ce743582931bfe10f63467478212502ab47d2
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-walFilesize
4KB
MD5f5a697cd7f48e4dbde855554f44d2b5a
SHA1b5ccd2c88928727cfa0e74265a7cde6994d442ad
SHA25664ab39c42733a8eb87fd9c35390cf3b3e4420bba8d08b47aca0d66a853d50d9b
SHA512006b8d0b35803f5904fead12f59fa90c0f2c520675e53c175a86b904d045796de3771fbb898e7a92518df35b493026bde74384eae590ea5d3ebd8f75d0e97fc4
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-walFilesize
4KB
MD56521c9954e881ea25b4299056b933091
SHA1dff8e550ff48f76411c9d6420b3fbfab0dfbd807
SHA25698e6f237f9f645403ddf8a82172256490edd1e0c12987694acaec73f33fd123d
SHA512ecbd0299436c59567be921aabcdd56a03600a830f8a2807f858604e6afc1d0a614ae55d425c179046c6a8ec5c73f031a4a86d1f3451d6fc36a8024eae8fe452f
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-walFilesize
4KB
MD5f8da20d5343220bb2521d776f503bc76
SHA1ebf85512b5d894284d97a8d1f6659443a6344113
SHA25642860fb705365d455b38fa07913754d5cab6e4e88e4cde3c652b9ce4f441dd2d
SHA512b9535010de19bfeed5ef39d9d1701afbf90eb3c69fb43f735cc5086a87eebad6140522034367053dbf2b11682b510235c2ffe3e4f032c75f1643d222b23aacab
-
/data/data/com.prathamesh.disableheadphoneprathamesh/files/.com.google.firebase.crashlytics.files.v1/com.crashlytics.settings.jsonFilesize
737B
MD5069d6375fcae563ce552adf27cbcfbba
SHA1328ce4aaa1253fc151a1dfb9b6c1534166985baa
SHA256ffd9a9be721020f4968c48f76bcd12bd4d176fb1a1f17af9ac602178fd145591
SHA512ccfc17221d9312944b686b2a8d2fe3eaab2ddc113bbd44daa1212afb3532d0c74aa2ae854da011859061c5ba595794979c2dc123d2af6b13347effe0aa48d469
-
/data/data/com.prathamesh.disableheadphoneprathamesh/files/.com.google.firebase.crashlytics.files.v1/open-sessions/666B72CE0283000110D6C4A2D09822A7/reportFilesize
762B
MD51960ee8efb208458f11c06c93b5d35a5
SHA1d6cefb2c84f8f53508b95283074706085927ae4b
SHA256bf1123dedeb7cbdab4930f433e50593f2b866821f400bf2f524b65ae31d13cad
SHA512462846bb62866ded9419c9710617861f7af18f06e7fe3b97b22b21471bf81f4f1dea56ffb5bece3d0b826157ee4f3864fe914e5a8da8701bc081376df1d7f0e0
-
/data/data/com.prathamesh.disableheadphoneprathamesh/files/PersistedInstallation4599351075187869739tmpFilesize
90B
MD51a506c31e1a4d134cc7c76b85c5a6b98
SHA1617449bfe8c0fc1de4b88993c7d4e77a9cd08360
SHA256abd7f4b66fb0e42bf99a5fd9eafa471795a0d18f847f58fa3d37af6397e66e7e
SHA512418076e4a49dab2449452ee18a88f9cb79b633407f4536c43e0c121080eeeda450247a7c957cde389b7e387228145e41fb2e796428cec18202311a15d29488e0
-
/data/data/com.prathamesh.disableheadphoneprathamesh/files/PersistedInstallation5423944552118088642tmpFilesize
566B
MD5754379240cace3e3695ef84b809c7b06
SHA122b09118ae867ddbc90f1ee18c49ce406011721b
SHA256a278c9a38f63a227e35bfa79d12a75376312f4cbe9a88887d406901f07c7eed5
SHA512b3df775b2b2c536731fcf119542509b0e087963cdd9e6c1a39253e21fae3304b26d278e234d93371e4c70258919458b7cdbbecedff45742779173db17c48c770