Analysis
-
max time kernel
17s -
max time network
150s -
platform
android_x64 -
resource
android-x64-20240611.1-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240611.1-enlocale:en-usos:android-10-x64system -
submitted
13-06-2024 22:29
Static task
static1
Behavioral task
behavioral1
Sample
e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1.apk
-
Size
2.6MB
-
MD5
1d9bf853a44ab55b453cffa4ba6ef1df
-
SHA1
bcc42ffb934024eff4ac53d0aae6292f5fa6c0fd
-
SHA256
e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1
-
SHA512
3f46da5eacd7c26286692fe5cad659ca93aab443bf9e8292901f8d5073377c0187150f1688759b79d889c62bf361b38de53894c51bc50eb3f8839b328f887692
-
SSDEEP
49152:2GGPER4IKY4CpoZubs5xApsWgv7zv2gPwd2ofrfpGng:2GGP2Bhpois52KPvEd2ofrfIng
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
Processes:
com.prathamesh.disableheadphoneprathameshioc process /system/app/Superuser.apk com.prathamesh.disableheadphoneprathamesh /system/xbin/su com.prathamesh.disableheadphoneprathamesh -
Checks the presence of a debugger
-
Checks memory information 2 TTPs 1 IoCs
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.eventsFilesize
56KB
MD5701f679efba4454188320b5e73a9a70c
SHA1d683d280bf7d572eb47cb4dee8a9a7919c555086
SHA256ad741c9b4c5ce0b2a9785f927529ae6430ff6708bb2dd329fddd44068a0656fc
SHA512a841d6bfcebfc13c6c51fa5ca5eca9fba55cf4ea03747fde7895b12391dc16c9668a5666c4ac9731369f2c906eeeadfd5271ba1eb92d64a0211a772b68f1cc7b
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events-journalFilesize
512B
MD52ee657a8686c5eb3868d1f600e36992e
SHA1c8faea9e9b84e9e72adb1f071b81b0dd5e22a697
SHA256d349db6684291531ee265edd9a3b063de066a023b4c65445f835287b31432eab
SHA51269296e0c8e3e8008b8479a6d82d2fc40def3df31966f7d7237db596e7bef20d08b87e693db1316f71ffcaef9bb92ba00017d7fd090ebc328978ca0e44d98b129
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events-journalFilesize
8KB
MD5c0e4d01468b5134c0de941411e568767
SHA1f2f72b21bd8e313e6479b3297aac227dcfdc6c83
SHA256eace43dc34094f0b69280bbbc9bca7a77d45d4fd4848a3803d376aa21d99adac
SHA51270f02d7178bbdcfe7c5c73d9373d6f2f129163170f439157e9e30a1f26fd843bff05dd19a713ee47559b7ca30c8862353b7cf9988f02bbdabc154a3909b32db7
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events-journalFilesize
8KB
MD5c600d21e646897c8191f0563dbd57cf9
SHA13ea596ff07296708a6c5c5b3199fcedc7e6cbb08
SHA256426dd87bcb5708dba4b2756d52f872dd6851e7a33c4835101b7055ad767bbafb
SHA5126c290318a081142b9e2bdf157a5abade2c1ad0b7d089ccfeacaf7fb2f0f02e32f854cfbc464c7c825e434a5ea78935d9a865a1342fc165922365278f49caa3a8
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.dbFilesize
16KB
MD5eb52a90bb70b76e946b62f50b6f7fb85
SHA142d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA25648472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.dbFilesize
16KB
MD5b636bb7053da8fc43e32da231ab0c065
SHA1649f74559e965733656806bf9ba197f7fe6b3bd3
SHA2560332f506841c3556f779b3c4ead7af8df6b7fa53f81c3968667c2239fce080ab
SHA512634306327fbb77ed062c433bd5eb6c360e862f4cd0dab762450fe0035aa72f5717ddb53562996de40d4377e4e05e81c78f4f671ec957dd2031ef782a5f5d46d3
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.dbFilesize
16KB
MD5e8addd6b8cfce59ee05badba9c8e528a
SHA18d745fe4ec32512aad7ef325da3c0b36eb608afc
SHA256331e0b118e673f26cbb38e9f7d1f01402a8947b70aee57edb080ecb933ee4ec6
SHA512cf6fad3b1a67176d394a11b6dbeb9d581f8712f6149773ffb247477c8d6f1d38336bb54650e4449df07b940944040f0b7ddc73d0ca4ef7c435c1b724c8109f25
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.dbFilesize
16KB
MD535a6352e895b75d2c96895b42e7f3a17
SHA13ba37565f89b668b39a4149dc34ca8ee29f54e75
SHA256815fd7b9c7667f070dc264a72c005201d75ea4ec87024ec237db3a44d2afffd8
SHA512c23fe2971d1f47554fa10f9f51777efdc217b2195b77eb9b34ec4849cb50bfb3f2d3f45bc9acded1ca54dbb67baf103138079bae55892ecbbbe4d0b6898c1dfc
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.dbFilesize
16KB
MD554bb27e0ff30068e42a2c26cae6dbe13
SHA102ed6ff05f579704a105caf02593396a6270c7cf
SHA2567d842ce7e9c6c9afa5838c973f4600ff9ec59437b833c229f579a3c02c7be450
SHA5125de0c13eb2ca87972c5b7c9b9dfa5b6d5363020a2b3c6b99a974d30b4082c0ca1f7bd7993a66250f0829d5cf479d0f323cceaa98e89d7f06fef3f79ffcdb0a88
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.dbFilesize
16KB
MD52f1eeee3602c828b8e9f81f6fbd20d41
SHA1d240b568bb6929702815b9a5edd05ad635671caa
SHA256458aa953a9e0adbf5b8765ebcf6b51bc5b5a48b7664e85d25c7a8ce9781a2d5c
SHA512a8642cc12cb9af0cd9d3fdc4bb1fe3b246d02af6b36714d80cdd2809def699b0b93eb585187c17f0a8e19801879e2e9edef7963ee416ae9e8cc35fd9cede2859
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journalFilesize
512B
MD5ef3bfd62b47dc3e25c4d87a8195c994a
SHA1eb773006933a6bfa182bac46aa2680846a59c515
SHA256e4d10cde0e4514ba5b65290f830a10b909dbf260132e1704208824b4889db09d
SHA512b46704bb1ac4bcdca858d3002023c1a6a6578bcfbf6a9569e9045d08d9ca0e54f198525e38cfea8194b8741c3effcc05d1cc95cb9e3a63847ef07a245d4160b5
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journalFilesize
8KB
MD5e440511413ff8f3e4023237e9d8ae1d8
SHA153327340ed31aa3e56344bbf2400c6472383eeda
SHA256f07eade56679820ae34b38bd1a98d66cd0a6e7b7a005f49eb943f66e14cc6acb
SHA512b4cb44e2acb334ac35ab89ea275b9ad784fae9254d99a639d4f006630d747daca475bbd72e4319b204f8a9db0b00b0f9e4846b5845b6c0a31faa8eaa601dca41
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journalFilesize
4KB
MD59220598d6c60029ece4c8d4a39e495c5
SHA1d8bb7ee20e790320055abe3fb520cc55500ea41a
SHA25622bf5a232e6eeac68a9f5507e0b64ac3afa9af19c68d366dbe89065af9a8dd96
SHA5123453ee960d0ccb00d6f1ddbd0a6c31701471506daf46551624e5d72c8ef35b39e67d50be08190bf5d9478c6e421d744b76d36e1634e30c5febccd2b8465e4b32
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journalFilesize
8KB
MD56bc8f0482cbd91246d8b843f1d471d95
SHA1bcaccae56b211dc78329ade81fa199a3e68dadae
SHA2568f2002f8b20efa663a423763351e4839e5cee4de0c46d09cf936fcb27289919e
SHA512ea170da4bfec6394aa975ce708a3b171907ecbd96a7596dde29d9aa7cd0a4fb594f4291a98fc62523019a4d5c76b0b37c21cd18cf40342bf795244e9b54c7de3
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journalFilesize
8KB
MD56ac40f39892d3c05082582622e3b849f
SHA1b8ef6f9a37b4a1ac396d7f935028a0659e6c68a2
SHA256897e22db3f02c41da65eff7986a8d8a36ac6bb6fa3516077f5bf38bc16cb8a6b
SHA512e577bef6ce314db8046f400e47a5ca5509ee3a0140de7b5f9a66c9d72b8df2b9bfb4e2eaf9c2729d5f790f8f116db742c6768ad7a4012665b4256b09cf919d49
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journalFilesize
8KB
MD5ac6e2ab1de5f8192546b6776aac4677f
SHA1080963a50fd6984de3f0750f53d2ad5006cf031d
SHA2561ab43c4380a1a2fdd62b12a08eeded14b91368c140ec9d01b2c1dfc1c2a10254
SHA51212e05468f0c81654d3d80e66734d1e5faf7e8c7bebc1afe2638170115b1c7261c3a5fa30aa9a67a8df7afd7ea19c32aae62a2180d0d1b9a322dc8e2cc0837bf1
-
/data/data/com.prathamesh.disableheadphoneprathamesh/files/.com.google.firebase.crashlytics.files.v1/com.crashlytics.settings.jsonFilesize
737B
MD5c3d9986f054a28f399fe2a6eb5d214fa
SHA1dc6e53d7a8311f7a76d8434a063f0326c9af186b
SHA25625c1805ba9466aa1466923c26e55b93a462498acdf799f2c6b96364ac92e8946
SHA51275e8bbf3d088f45b7052c40cb66abc1b0013e3543e4e3901c021fe4a82b7a632b30cc51b50f546ce57211c285eaa0cfaee5831660483a13d95adc113d9171a88
-
/data/data/com.prathamesh.disableheadphoneprathamesh/files/.com.google.firebase.crashlytics.files.v1/open-sessions/666B72CF003E000113FBF77F513FB2A1/reportFilesize
763B
MD50e10cb345d16cd9fa4720332b2844769
SHA1199a4188a19ccb3ea5041cf5e44ff084924b0385
SHA256d932baabbcba038cf290cb335e2f58f5b5d5efe7cf164c69e37eba074ae6df6a
SHA5121c7172df4ffc4a382ee7f9a51b87c16f12b4efee4999f265734880ca8ca1c9fed4e26b1501a2fbd1ecf43809727eefa7c601bceda0dbe39ed3b7def55254ee64
-
/data/data/com.prathamesh.disableheadphoneprathamesh/files/PersistedInstallation3149037576315904635tmpFilesize
568B
MD565114ed6d7bf816f3777feb7dc3c291b
SHA18ddf5d95509ef318d7d5c85656a829feedab6cbc
SHA2566f1964ab47bcfd20098372f722ee916052e616544261643b17a389123a30406b
SHA512f6a1c433b60a568e20b78bf1495c77f79327227233799db65d399b9abda616f63875957b8a74655742e8e86055bcbd0bc38c6a4e4d482097b9818faf7b44cd45
-
/data/data/com.prathamesh.disableheadphoneprathamesh/files/PersistedInstallation4291989059445668451tmpFilesize
90B
MD52d957030fc9468d5ec24e30577e7d426
SHA109f650255b4dae79fdb6f9a5394486415abc0d37
SHA2564852f926fc95dd142741dec7d6ce82743fd30d0c39432fe9790e76cacd3884c9
SHA51222c4ec531a3f8249d5f307129d04ccf905dd4f169418af92f472317f085d248731a72860f0a571af65497e7aec42942712ed52daef5d0ef2f12a42817210fae4