Analysis

  • max time kernel
    17s
  • max time network
    150s
  • platform
    android_x64
  • resource
    android-x64-20240611.1-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system
  • submitted
    13-06-2024 22:29

General

  • Target

    e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1.apk

  • Size

    2.6MB

  • MD5

    1d9bf853a44ab55b453cffa4ba6ef1df

  • SHA1

    bcc42ffb934024eff4ac53d0aae6292f5fa6c0fd

  • SHA256

    e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1

  • SHA512

    3f46da5eacd7c26286692fe5cad659ca93aab443bf9e8292901f8d5073377c0187150f1688759b79d889c62bf361b38de53894c51bc50eb3f8839b328f887692

  • SSDEEP

    49152:2GGPER4IKY4CpoZubs5xApsWgv7zv2gPwd2ofrfpGng:2GGP2Bhpois52KPvEd2ofrfIng

Score
8/10

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
  • Checks the presence of a debugger
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.prathamesh.disableheadphoneprathamesh
    1⤵
    • Checks if the Android device is rooted.
    • Checks memory information
    PID:5115

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events
    Filesize

    56KB

    MD5

    701f679efba4454188320b5e73a9a70c

    SHA1

    d683d280bf7d572eb47cb4dee8a9a7919c555086

    SHA256

    ad741c9b4c5ce0b2a9785f927529ae6430ff6708bb2dd329fddd44068a0656fc

    SHA512

    a841d6bfcebfc13c6c51fa5ca5eca9fba55cf4ea03747fde7895b12391dc16c9668a5666c4ac9731369f2c906eeeadfd5271ba1eb92d64a0211a772b68f1cc7b

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events-journal
    Filesize

    512B

    MD5

    2ee657a8686c5eb3868d1f600e36992e

    SHA1

    c8faea9e9b84e9e72adb1f071b81b0dd5e22a697

    SHA256

    d349db6684291531ee265edd9a3b063de066a023b4c65445f835287b31432eab

    SHA512

    69296e0c8e3e8008b8479a6d82d2fc40def3df31966f7d7237db596e7bef20d08b87e693db1316f71ffcaef9bb92ba00017d7fd090ebc328978ca0e44d98b129

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events-journal
    Filesize

    8KB

    MD5

    c0e4d01468b5134c0de941411e568767

    SHA1

    f2f72b21bd8e313e6479b3297aac227dcfdc6c83

    SHA256

    eace43dc34094f0b69280bbbc9bca7a77d45d4fd4848a3803d376aa21d99adac

    SHA512

    70f02d7178bbdcfe7c5c73d9373d6f2f129163170f439157e9e30a1f26fd843bff05dd19a713ee47559b7ca30c8862353b7cf9988f02bbdabc154a3909b32db7

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events-journal
    Filesize

    8KB

    MD5

    c600d21e646897c8191f0563dbd57cf9

    SHA1

    3ea596ff07296708a6c5c5b3199fcedc7e6cbb08

    SHA256

    426dd87bcb5708dba4b2756d52f872dd6851e7a33c4835101b7055ad767bbafb

    SHA512

    6c290318a081142b9e2bdf157a5abade2c1ad0b7d089ccfeacaf7fb2f0f02e32f854cfbc464c7c825e434a5ea78935d9a865a1342fc165922365278f49caa3a8

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    eb52a90bb70b76e946b62f50b6f7fb85

    SHA1

    42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

    SHA256

    48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

    SHA512

    b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    b636bb7053da8fc43e32da231ab0c065

    SHA1

    649f74559e965733656806bf9ba197f7fe6b3bd3

    SHA256

    0332f506841c3556f779b3c4ead7af8df6b7fa53f81c3968667c2239fce080ab

    SHA512

    634306327fbb77ed062c433bd5eb6c360e862f4cd0dab762450fe0035aa72f5717ddb53562996de40d4377e4e05e81c78f4f671ec957dd2031ef782a5f5d46d3

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    e8addd6b8cfce59ee05badba9c8e528a

    SHA1

    8d745fe4ec32512aad7ef325da3c0b36eb608afc

    SHA256

    331e0b118e673f26cbb38e9f7d1f01402a8947b70aee57edb080ecb933ee4ec6

    SHA512

    cf6fad3b1a67176d394a11b6dbeb9d581f8712f6149773ffb247477c8d6f1d38336bb54650e4449df07b940944040f0b7ddc73d0ca4ef7c435c1b724c8109f25

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    35a6352e895b75d2c96895b42e7f3a17

    SHA1

    3ba37565f89b668b39a4149dc34ca8ee29f54e75

    SHA256

    815fd7b9c7667f070dc264a72c005201d75ea4ec87024ec237db3a44d2afffd8

    SHA512

    c23fe2971d1f47554fa10f9f51777efdc217b2195b77eb9b34ec4849cb50bfb3f2d3f45bc9acded1ca54dbb67baf103138079bae55892ecbbbe4d0b6898c1dfc

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    54bb27e0ff30068e42a2c26cae6dbe13

    SHA1

    02ed6ff05f579704a105caf02593396a6270c7cf

    SHA256

    7d842ce7e9c6c9afa5838c973f4600ff9ec59437b833c229f579a3c02c7be450

    SHA512

    5de0c13eb2ca87972c5b7c9b9dfa5b6d5363020a2b3c6b99a974d30b4082c0ca1f7bd7993a66250f0829d5cf479d0f323cceaa98e89d7f06fef3f79ffcdb0a88

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    2f1eeee3602c828b8e9f81f6fbd20d41

    SHA1

    d240b568bb6929702815b9a5edd05ad635671caa

    SHA256

    458aa953a9e0adbf5b8765ebcf6b51bc5b5a48b7664e85d25c7a8ce9781a2d5c

    SHA512

    a8642cc12cb9af0cd9d3fdc4bb1fe3b246d02af6b36714d80cdd2809def699b0b93eb585187c17f0a8e19801879e2e9edef7963ee416ae9e8cc35fd9cede2859

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journal
    Filesize

    512B

    MD5

    ef3bfd62b47dc3e25c4d87a8195c994a

    SHA1

    eb773006933a6bfa182bac46aa2680846a59c515

    SHA256

    e4d10cde0e4514ba5b65290f830a10b909dbf260132e1704208824b4889db09d

    SHA512

    b46704bb1ac4bcdca858d3002023c1a6a6578bcfbf6a9569e9045d08d9ca0e54f198525e38cfea8194b8741c3effcc05d1cc95cb9e3a63847ef07a245d4160b5

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journal
    Filesize

    8KB

    MD5

    e440511413ff8f3e4023237e9d8ae1d8

    SHA1

    53327340ed31aa3e56344bbf2400c6472383eeda

    SHA256

    f07eade56679820ae34b38bd1a98d66cd0a6e7b7a005f49eb943f66e14cc6acb

    SHA512

    b4cb44e2acb334ac35ab89ea275b9ad784fae9254d99a639d4f006630d747daca475bbd72e4319b204f8a9db0b00b0f9e4846b5845b6c0a31faa8eaa601dca41

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journal
    Filesize

    4KB

    MD5

    9220598d6c60029ece4c8d4a39e495c5

    SHA1

    d8bb7ee20e790320055abe3fb520cc55500ea41a

    SHA256

    22bf5a232e6eeac68a9f5507e0b64ac3afa9af19c68d366dbe89065af9a8dd96

    SHA512

    3453ee960d0ccb00d6f1ddbd0a6c31701471506daf46551624e5d72c8ef35b39e67d50be08190bf5d9478c6e421d744b76d36e1634e30c5febccd2b8465e4b32

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journal
    Filesize

    8KB

    MD5

    6bc8f0482cbd91246d8b843f1d471d95

    SHA1

    bcaccae56b211dc78329ade81fa199a3e68dadae

    SHA256

    8f2002f8b20efa663a423763351e4839e5cee4de0c46d09cf936fcb27289919e

    SHA512

    ea170da4bfec6394aa975ce708a3b171907ecbd96a7596dde29d9aa7cd0a4fb594f4291a98fc62523019a4d5c76b0b37c21cd18cf40342bf795244e9b54c7de3

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journal
    Filesize

    8KB

    MD5

    6ac40f39892d3c05082582622e3b849f

    SHA1

    b8ef6f9a37b4a1ac396d7f935028a0659e6c68a2

    SHA256

    897e22db3f02c41da65eff7986a8d8a36ac6bb6fa3516077f5bf38bc16cb8a6b

    SHA512

    e577bef6ce314db8046f400e47a5ca5509ee3a0140de7b5f9a66c9d72b8df2b9bfb4e2eaf9c2729d5f790f8f116db742c6768ad7a4012665b4256b09cf919d49

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journal
    Filesize

    8KB

    MD5

    ac6e2ab1de5f8192546b6776aac4677f

    SHA1

    080963a50fd6984de3f0750f53d2ad5006cf031d

    SHA256

    1ab43c4380a1a2fdd62b12a08eeded14b91368c140ec9d01b2c1dfc1c2a10254

    SHA512

    12e05468f0c81654d3d80e66734d1e5faf7e8c7bebc1afe2638170115b1c7261c3a5fa30aa9a67a8df7afd7ea19c32aae62a2180d0d1b9a322dc8e2cc0837bf1

  • /data/data/com.prathamesh.disableheadphoneprathamesh/files/.com.google.firebase.crashlytics.files.v1/com.crashlytics.settings.json
    Filesize

    737B

    MD5

    c3d9986f054a28f399fe2a6eb5d214fa

    SHA1

    dc6e53d7a8311f7a76d8434a063f0326c9af186b

    SHA256

    25c1805ba9466aa1466923c26e55b93a462498acdf799f2c6b96364ac92e8946

    SHA512

    75e8bbf3d088f45b7052c40cb66abc1b0013e3543e4e3901c021fe4a82b7a632b30cc51b50f546ce57211c285eaa0cfaee5831660483a13d95adc113d9171a88

  • /data/data/com.prathamesh.disableheadphoneprathamesh/files/.com.google.firebase.crashlytics.files.v1/open-sessions/666B72CF003E000113FBF77F513FB2A1/report
    Filesize

    763B

    MD5

    0e10cb345d16cd9fa4720332b2844769

    SHA1

    199a4188a19ccb3ea5041cf5e44ff084924b0385

    SHA256

    d932baabbcba038cf290cb335e2f58f5b5d5efe7cf164c69e37eba074ae6df6a

    SHA512

    1c7172df4ffc4a382ee7f9a51b87c16f12b4efee4999f265734880ca8ca1c9fed4e26b1501a2fbd1ecf43809727eefa7c601bceda0dbe39ed3b7def55254ee64

  • /data/data/com.prathamesh.disableheadphoneprathamesh/files/PersistedInstallation3149037576315904635tmp
    Filesize

    568B

    MD5

    65114ed6d7bf816f3777feb7dc3c291b

    SHA1

    8ddf5d95509ef318d7d5c85656a829feedab6cbc

    SHA256

    6f1964ab47bcfd20098372f722ee916052e616544261643b17a389123a30406b

    SHA512

    f6a1c433b60a568e20b78bf1495c77f79327227233799db65d399b9abda616f63875957b8a74655742e8e86055bcbd0bc38c6a4e4d482097b9818faf7b44cd45

  • /data/data/com.prathamesh.disableheadphoneprathamesh/files/PersistedInstallation4291989059445668451tmp
    Filesize

    90B

    MD5

    2d957030fc9468d5ec24e30577e7d426

    SHA1

    09f650255b4dae79fdb6f9a5394486415abc0d37

    SHA256

    4852f926fc95dd142741dec7d6ce82743fd30d0c39432fe9790e76cacd3884c9

    SHA512

    22c4ec531a3f8249d5f307129d04ccf905dd4f169418af92f472317f085d248731a72860f0a571af65497e7aec42942712ed52daef5d0ef2f12a42817210fae4