Analysis
- max time kernel
17s - max time network
150s - platform
android_x64 - resource
android-x64-20240611.1-en - resource tags
androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system - submitted
13/06/2024, 22:29
Static task
static1
Behavioral task
behavioral1
Sample
e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1.apk
Resource
android-x86-arm-20240611.1-en
3 signatures
150 seconds
Behavioral task
behavioral2
Sample
e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1.apk
Resource
android-x64-20240611.1-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1.apk
Resource
android-x64-arm64-20240611.1-en
3 signatures
150 seconds
General
- Target e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1.apk
- Size 2.6MB
- Sample240613-2ed8kswgrn
- SHA256 e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1
- MD5 1d9bf853a44ab55b453cffa4ba6ef1df
- SHA1 bcc42ffb934024eff4ac53d0aae6292f5fa6c0fd
- SHA512 3f46da5eacd7c26286692fe5cad659ca93aab443bf9e8292901f8d5073377c0187150f1688759b79d889c62bf361b38de53894c51bc50eb3f8839b328f887692
- SSDEEP 49152:2GGPER4IKY4CpoZubs5xApsWgv7zv2gPwd2ofrfpGng:2GGP2Bhpois52KPvEd2ofrfIng
- MD5 SHA1 SHA512 SSDEEP
Score
8/10
Malware Config
Signatures
- Checks if the Android device is rooted. 1 TTPs 2 IoCs
ioc Process /system/app/Superuser.apk com.prathamesh.disableheadphoneprathamesh /system/xbin/su com.prathamesh.disableheadphoneprathamesh - Checks the presence of a debugger
- Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.prathamesh.disableheadphoneprathamesh
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events
- Size 56KB
- SHA256 ad741c9b4c5ce0b2a9785f927529ae6430ff6708bb2dd329fddd44068a0656fc
- MD5 701f679efba4454188320b5e73a9a70c
- SHA1 d683d280bf7d572eb47cb4dee8a9a7919c555086
- SHA512 a841d6bfcebfc13c6c51fa5ca5eca9fba55cf4ea03747fde7895b12391dc16c9668a5666c4ac9731369f2c906eeeadfd5271ba1eb92d64a0211a772b68f1cc7b
- SSDEEP 48:T3g59MENZBdUdndVd/729IvdldHlq8/Jq4qPSM:8MEX0wIyNjaM
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 d349db6684291531ee265edd9a3b063de066a023b4c65445f835287b31432eab
- MD5 2ee657a8686c5eb3868d1f600e36992e
- SHA1 c8faea9e9b84e9e72adb1f071b81b0dd5e22a697
- SHA512 69296e0c8e3e8008b8479a6d82d2fc40def3df31966f7d7237db596e7bef20d08b87e693db1316f71ffcaef9bb92ba00017d7fd090ebc328978ca0e44d98b129
- MD5 SHA1 SHA512
- Path /data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 eace43dc34094f0b69280bbbc9bca7a77d45d4fd4848a3803d376aa21d99adac
- MD5 c0e4d01468b5134c0de941411e568767
- SHA1 f2f72b21bd8e313e6479b3297aac227dcfdc6c83
- SHA512 70f02d7178bbdcfe7c5c73d9373d6f2f129163170f439157e9e30a1f26fd843bff05dd19a713ee47559b7ca30c8862353b7cf9988f02bbdabc154a3909b32db7
- SSDEEP 6:7+/l9Ul/gn1Nang9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKF:7+ti/5nqLiuWdwRmBEyPb+
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 426dd87bcb5708dba4b2756d52f872dd6851e7a33c4835101b7055ad767bbafb
- MD5 c600d21e646897c8191f0563dbd57cf9
- SHA1 3ea596ff07296708a6c5c5b3199fcedc7e6cbb08
- SHA512 6c290318a081142b9e2bdf157a5abade2c1ad0b7d089ccfeacaf7fb2f0f02e32f854cfbc464c7c825e434a5ea78935d9a865a1342fc165922365278f49caa3a8
- SSDEEP 6:7+/l9k/OPg9bNFlLdrlOERX4PBX4ogLugMBX4suuK7xC/Mn:7+tNqLJdTRmBEyPbrM
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
- MD5 eb52a90bb70b76e946b62f50b6f7fb85
- SHA1 42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
- SHA512 b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
- SSDEEP 6:l9bNFl4/Sls1OelO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TLWuEOe9zmzrfRmBEyPbBvOwk3
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 0332f506841c3556f779b3c4ead7af8df6b7fa53f81c3968667c2239fce080ab
- MD5 b636bb7053da8fc43e32da231ab0c065
- SHA1 649f74559e965733656806bf9ba197f7fe6b3bd3
- SHA512 634306327fbb77ed062c433bd5eb6c360e862f4cd0dab762450fe0035aa72f5717ddb53562996de40d4377e4e05e81c78f4f671ec957dd2031ef782a5f5d46d3
- SSDEEP 6:l9bNFlsls1ylO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/RCM+/lulvl6gEr:TLiEy9zmzrfRmBEyPbP/P+/0Fl6gM7
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 331e0b118e673f26cbb38e9f7d1f01402a8947b70aee57edb080ecb933ee4ec6
- MD5 e8addd6b8cfce59ee05badba9c8e528a
- SHA1 8d745fe4ec32512aad7ef325da3c0b36eb608afc
- SHA512 cf6fad3b1a67176d394a11b6dbeb9d581f8712f6149773ffb247477c8d6f1d38336bb54650e4449df07b940944040f0b7ddc73d0ca4ef7c435c1b724c8109f25
- SSDEEP 12:TL1Ev9zmzrfRmBEyPbP/hr/gW49blqYFloZ4+/0Fl6gM7:TLQpmzr0GSP/h1499FZlFY
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 815fd7b9c7667f070dc264a72c005201d75ea4ec87024ec237db3a44d2afffd8
- MD5 35a6352e895b75d2c96895b42e7f3a17
- SHA1 3ba37565f89b668b39a4149dc34ca8ee29f54e75
- SHA512 c23fe2971d1f47554fa10f9f51777efdc217b2195b77eb9b34ec4849cb50bfb3f2d3f45bc9acded1ca54dbb67baf103138079bae55892ecbbbe4d0b6898c1dfc
- SSDEEP 12:TLIEQv9zmzrfRmBEyPbP/JOLabCAUEWlCuUyWlkG2449blqYFloZ4+/0Fl6gM7:TLEvpmzr0GSP/JKabCCbM4499FZlFY
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 7d842ce7e9c6c9afa5838c973f4600ff9ec59437b833c229f579a3c02c7be450
- MD5 54bb27e0ff30068e42a2c26cae6dbe13
- SHA1 02ed6ff05f579704a105caf02593396a6270c7cf
- SHA512 5de0c13eb2ca87972c5b7c9b9dfa5b6d5363020a2b3c6b99a974d30b4082c0ca1f7bd7993a66250f0829d5cf479d0f323cceaa98e89d7f06fef3f79ffcdb0a88
- SSDEEP 12:TL6uEp9zmzrfRmBEyPbP/uOLabCAUEWlCuUyWlkG2449blqYFloZ4+/0Fl6gMv:TL6Xpmzr0GSP/uKabCCbM4499FZlFI
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 458aa953a9e0adbf5b8765ebcf6b51bc5b5a48b7664e85d25c7a8ce9781a2d5c
- MD5 2f1eeee3602c828b8e9f81f6fbd20d41
- SHA1 d240b568bb6929702815b9a5edd05ad635671caa
- SHA512 a8642cc12cb9af0cd9d3fdc4bb1fe3b246d02af6b36714d80cdd2809def699b0b93eb585187c17f0a8e19801879e2e9edef7963ee416ae9e8cc35fd9cede2859
- SSDEEP 6:l9bNFlgls1qlvlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK+/WK:TLuEev9zmzrfRmBEyPbP/WK
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 e4d10cde0e4514ba5b65290f830a10b909dbf260132e1704208824b4889db09d
- MD5 ef3bfd62b47dc3e25c4d87a8195c994a
- SHA1 eb773006933a6bfa182bac46aa2680846a59c515
- SHA512 b46704bb1ac4bcdca858d3002023c1a6a6578bcfbf6a9569e9045d08d9ca0e54f198525e38cfea8194b8741c3effcc05d1cc95cb9e3a63847ef07a245d4160b5
- MD5 SHA1 SHA512
- Path /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 f07eade56679820ae34b38bd1a98d66cd0a6e7b7a005f49eb943f66e14cc6acb
- MD5 e440511413ff8f3e4023237e9d8ae1d8
- SHA1 53327340ed31aa3e56344bbf2400c6472383eeda
- SHA512 b4cb44e2acb334ac35ab89ea275b9ad784fae9254d99a639d4f006630d747daca475bbd72e4319b204f8a9db0b00b0f9e4846b5845b6c0a31faa8eaa601dca41
- SSDEEP 6:7+/l99QGn1+pg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKmQ:7+t8qLiuWdwRmBEyPbXQ
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 22bf5a232e6eeac68a9f5507e0b64ac3afa9af19c68d366dbe89065af9a8dd96
- MD5 9220598d6c60029ece4c8d4a39e495c5
- SHA1 d8bb7ee20e790320055abe3fb520cc55500ea41a
- SHA512 3453ee960d0ccb00d6f1ddbd0a6c31701471506daf46551624e5d72c8ef35b39e67d50be08190bf5d9478c6e421d744b76d36e1634e30c5febccd2b8465e4b32
- SSDEEP 6:7+/lb4Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuKu6n:7+t0qLJdTRmBEyPbf6n
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 8f2002f8b20efa663a423763351e4839e5cee4de0c46d09cf936fcb27289919e
- MD5 6bc8f0482cbd91246d8b843f1d471d95
- SHA1 bcaccae56b211dc78329ade81fa199a3e68dadae
- SHA512 ea170da4bfec6394aa975ce708a3b171907ecbd96a7596dde29d9aa7cd0a4fb594f4291a98fc62523019a4d5c76b0b37c21cd18cf40342bf795244e9b54c7de3
- SSDEEP 6:7+/l9pPg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuKZl9M/C:7+tPqLmqCRmBEyPb0l9sC
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 897e22db3f02c41da65eff7986a8d8a36ac6bb6fa3516077f5bf38bc16cb8a6b
- MD5 6ac40f39892d3c05082582622e3b849f
- SHA1 b8ef6f9a37b4a1ac396d7f935028a0659e6c68a2
- SHA512 e577bef6ce314db8046f400e47a5ca5509ee3a0140de7b5f9a66c9d72b8df2b9bfb4e2eaf9c2729d5f790f8f116db742c6768ad7a4012665b4256b09cf919d49
- SSDEEP 6:7+/l9/Wg9bNFluls1EhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuKwZ:7+tgqL8EEh9zmzrfRmBEyPb/Z
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 1ab43c4380a1a2fdd62b12a08eeded14b91368c140ec9d01b2c1dfc1c2a10254
- MD5 ac6e2ab1de5f8192546b6776aac4677f
- SHA1 080963a50fd6984de3f0750f53d2ad5006cf031d
- SHA512 12e05468f0c81654d3d80e66734d1e5faf7e8c7bebc1afe2638170115b1c7261c3a5fa30aa9a67a8df7afd7ea19c32aae62a2180d0d1b9a322dc8e2cc0837bf1
- SSDEEP 24:7+tU2KabCCbM4499FZlFZqL6Xpmzr0GSE:7MUabCCbm5FZq2XArSE
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.prathamesh.disableheadphoneprathamesh/files/.com.google.firebase.crashlytics.files.v1/com.crashlytics.settings.json
- Size 737B
- SHA256 25c1805ba9466aa1466923c26e55b93a462498acdf799f2c6b96364ac92e8946
- MD5 c3d9986f054a28f399fe2a6eb5d214fa
- SHA1 dc6e53d7a8311f7a76d8434a063f0326c9af186b
- SHA512 75e8bbf3d088f45b7052c40cb66abc1b0013e3543e4e3901c021fe4a82b7a632b30cc51b50f546ce57211c285eaa0cfaee5831660483a13d95adc113d9171a88
- MD5 SHA1 SHA512
- Path /data/data/com.prathamesh.disableheadphoneprathamesh/files/.com.google.firebase.crashlytics.files.v1/open-sessions/666B72CF003E000113FBF77F513FB2A1/report
- Size 763B
- SHA256 d932baabbcba038cf290cb335e2f58f5b5d5efe7cf164c69e37eba074ae6df6a
- MD5 0e10cb345d16cd9fa4720332b2844769
- SHA1 199a4188a19ccb3ea5041cf5e44ff084924b0385
- SHA512 1c7172df4ffc4a382ee7f9a51b87c16f12b4efee4999f265734880ca8ca1c9fed4e26b1501a2fbd1ecf43809727eefa7c601bceda0dbe39ed3b7def55254ee64
- MD5 SHA1 SHA512
- Path /data/data/com.prathamesh.disableheadphoneprathamesh/files/PersistedInstallation3149037576315904635tmp
- Size 568B
- SHA256 6f1964ab47bcfd20098372f722ee916052e616544261643b17a389123a30406b
- MD5 65114ed6d7bf816f3777feb7dc3c291b
- SHA1 8ddf5d95509ef318d7d5c85656a829feedab6cbc
- SHA512 f6a1c433b60a568e20b78bf1495c77f79327227233799db65d399b9abda616f63875957b8a74655742e8e86055bcbd0bc38c6a4e4d482097b9818faf7b44cd45
- MD5 SHA1 SHA512
- Path /data/data/com.prathamesh.disableheadphoneprathamesh/files/PersistedInstallation4291989059445668451tmp
- Size 90B
- SHA256 4852f926fc95dd142741dec7d6ce82743fd30d0c39432fe9790e76cacd3884c9
- MD5 2d957030fc9468d5ec24e30577e7d426
- SHA1 09f650255b4dae79fdb6f9a5394486415abc0d37
- SHA512 22c4ec531a3f8249d5f307129d04ccf905dd4f169418af92f472317f085d248731a72860f0a571af65497e7aec42942712ed52daef5d0ef2f12a42817210fae4
- MD5 SHA1 SHA512