Analysis

  • max time kernel
    16s
  • max time network
    148s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    13-06-2024 22:29

General

  • Target

    e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1.apk

  • Size

    2.6MB

  • MD5

    1d9bf853a44ab55b453cffa4ba6ef1df

  • SHA1

    bcc42ffb934024eff4ac53d0aae6292f5fa6c0fd

  • SHA256

    e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1

  • SHA512

    3f46da5eacd7c26286692fe5cad659ca93aab443bf9e8292901f8d5073377c0187150f1688759b79d889c62bf361b38de53894c51bc50eb3f8839b328f887692

  • SSDEEP

    49152:2GGPER4IKY4CpoZubs5xApsWgv7zv2gPwd2ofrfpGng:2GGP2Bhpois52KPvEd2ofrfIng

Score
8/10

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
  • Checks the presence of a debugger
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.prathamesh.disableheadphoneprathamesh
    1⤵
    • Checks if the Android device is rooted.
    • Checks memory information
    PID:4559

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events
    Filesize

    56KB

    MD5

    d1c22bfbf36b1b26b796e979995cd0b9

    SHA1

    4315892d52b6a2bfdf89512646bdd66c395894aa

    SHA256

    3ddfcff80eb2ac17513c0ba743126ef2ef0a4ff289464f3a14e2643e0c14d44c

    SHA512

    3e48959cb36136d22b5c22e67ef093eaeb2bbf29ca032a637069afb6b5d9db6f5a304498ccd5b6d0fa4546dc8b58f83c1d7d9f26cd84bda7d2ad516894e04345

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events-journal
    Filesize

    512B

    MD5

    ff594d29a4da39c4a3693c5fc00e5ac1

    SHA1

    e29a7353b73040e2c7e74b4b6e3af273404cf0f8

    SHA256

    c2d043b0680bd8ef17a85547261e80fa2f6c5741fb0bb4c6058b6af9629d31fe

    SHA512

    b0533419a69e3f61e79c0bcceffb28bfa0b535f6e32c21452c94b3a0ea169b640b819d521de1e4bb42f7143f62a8df4908b8b8d2835dc7174f3ced5030d33481

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events-journal
    Filesize

    8KB

    MD5

    594650c4c4995bb166177fcdf80d2aec

    SHA1

    4bc61ae988ffd680a23487a0ace41fcd8bdb9bcf

    SHA256

    0cba5bc286dfe555d96902aa435d0faaab260b5db3f820c8fa1525dee3d51d0b

    SHA512

    46a4d8af3d3708c6450647670d81b8ddc8d153ed8c5b6a01fde9ac16e5f343341575f8fa96d67194b51638b3140fef1ed3bbb3c16c27d541a61254e12de4f17d

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events-journal
    Filesize

    8KB

    MD5

    36dc070c18969c2ec6ddee19c9516fa5

    SHA1

    b7ffa7c13f95a0595e61a6b4b23a520d0c43ea80

    SHA256

    035ee2e0b33e0784238c853649f68102c05cd7b0fb7d42a0e405bf5be6a0498b

    SHA512

    a6a2833938500ca66cd9b4fbc31e24b88b7e90d4c102a7a7ebd06e51dbe173011df147434ae3827ac87b72b7d2f61bb2748cba40989ff3ffa99b234c41a30a05

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    d9cf75fdd1c2292d986f6c3d5d60f2c8

    SHA1

    07ecb1d3a26d952ae5fecf54f36699ab498510b1

    SHA256

    2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

    SHA512

    442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    250dfb852b6e9651749b98bf6ea31391

    SHA1

    ac58b596e4911535969208cf46f5a3a743ecd7c4

    SHA256

    9de25c6fddb5628c996480007f85ca4f9eaac2edd2068f0c3c94ac4c8de2e9ef

    SHA512

    eef95254afe6937134795273d70ed773033b16abc6678d2ea2dc2c6e5774f83c0845faf2c2c5f57320bc4f25e555982e1a4ca11842e48bf9d2f56b0622dd57ef

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    1b52d334839a101547a79a164f34ebfe

    SHA1

    47dc02003294f6aa8d148421e76d72458970eefd

    SHA256

    93d2d14da40546c866c9afb8cf302d39403d0462e41a384d307eeacd8646bb1b

    SHA512

    2365a34d85f2aee2570eaeeed29f7253d75bdb78f910cf9d2be964779eb269c980643defd5b2b801ccd8bd458cb38dda0b62c48f8654068886d72e88a968f2a8

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    ef766206ba9cc62aa62f1f0cd8b6fc29

    SHA1

    a5031dafbabd0e78210d0598fe063369d651aea3

    SHA256

    67392c69c2e50eb7f5fc5489aee4ff1fc64f9b71051ef9b7d77f70ab087b01cd

    SHA512

    95967aba487f4890966266fb73c5efc8a8aa6437eb43dde9d78cb160aa0d9b06fc7fd9d84a9b70d9fd222ac2d0c3f0c3f81021b4d29587bd5dffe1e090fb17e1

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    3817bdcd35a098b056c8a661a83fc9cd

    SHA1

    fabfeaab900bdf1b18adfd81189b2399d0489d5c

    SHA256

    c73ac8d03ce68e1e190323418449ee8a9b39e1c93135d29e1fcb6011ec6db607

    SHA512

    6772135bb991ac1c74d0bebabab2bdafb87c31531b2320c0a73e1d5a923cdba716bebd4aaea0a685846e9fbe0834609dcdca8f9bf83c14672fa78aa459537347

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db
    Filesize

    16KB

    MD5

    818548be1885386cc995f564f36a8e8e

    SHA1

    008b0c602ed55b1122dadfb3a20db517d55c10b3

    SHA256

    b4765a86f69c122307448d0c6e81cebd52ffbc59b0d19da42971e2857f773e6d

    SHA512

    47840561a1eded73600b656576a7a9195bd1beddb79b08090b9e6bd9ab610de6cfb0a334310bfefe0b33ef157d420aaa17c6315fa2e689398da3328c4460a02f

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journal
    Filesize

    512B

    MD5

    99298663bbdd1f8d7d6715e162ff118d

    SHA1

    188368fa18745c002f220fceb5f21aa035df7d02

    SHA256

    2a45c201a2584170cdb03c58431d5e427cf2823f6e80eb14d5df7edbc2a597e8

    SHA512

    7327f89abadcbaa6f780a709160debedd0942c73d689bd83fec5f4889a4bf4dc69edb54b9e1fc8d360b856fd0d2c0239a295ad1ee1c562249b3248c65ab63726

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journal
    Filesize

    8KB

    MD5

    c6f12c451a9ff48e1c50229072e0483d

    SHA1

    5abaa03c37b09a37f63757d92e34686b20ec9e09

    SHA256

    69823f52f35de7b2030cef7fbcd2b23868b83dccbb41a1993e6cb468df849dd3

    SHA512

    cf48b46481418a58a7d7130f1ca6304848738b4943a5d3bb2e5dfbad719863e7771adde02fc63647d605a06a9cd66ac1148ef81797b688f23434aa014919ff31

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journal
    Filesize

    4KB

    MD5

    2412229b1a5167f8b89ec1287dd0b6ed

    SHA1

    f9de05cf498706e191ae57c8fe2e7eed572b865e

    SHA256

    8dac10ef20a1e6d3197fcf81f35182f7a2028538b252289d984811827d090faa

    SHA512

    98a1892c3faa1f78fe417b14f0456b874fe49d84c3f773c1d37c7790214deb39af94ca8ea11be4922b04825f7a08d2fd00a14d984685112d2faff19a03b43bd3

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journal
    Filesize

    8KB

    MD5

    cd286403e165ee2b4350265045bc7096

    SHA1

    071304e44e1cf35da936b146fa2a9f67c4ca64da

    SHA256

    711dbf8d61a2936daf9a2c6936c82930f136b5581212767d8271ff1a10d08116

    SHA512

    1f20ec2e57fd067c3a2be50e4ee57e66a0c2db5ba72faf91af436a89fa4d40a848fdf05e83c85fd466102a0bb584de967d1c47855cce4ddde56291a8f58612cf

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journal
    Filesize

    8KB

    MD5

    bf9c49bd668d5419906f5e95f660812b

    SHA1

    4f7578a65bcd56132391705a6e07ce5cf2ad90b7

    SHA256

    714e17286b0bf1734a8c31e7b9c9003dfef97c5515ff2eb93d6e5c8adac75a8b

    SHA512

    ec0e29176d72d76abf17285b9dcbb4f4e775556edb4b443a63fb150d0047bf88b0b3799ef1e0a59c2426728f0cecfde19211ed5a6870651b38cd7f4eb2521d93

  • /data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journal
    Filesize

    8KB

    MD5

    87791f7a988d89c0481191a676fb1244

    SHA1

    cef1f3e1147a9d3985dd93736988fdaf2d504dc1

    SHA256

    030e07a2d9ba57436984b2e32fd939b0c334bbe06f07a59896982b0c5776d480

    SHA512

    4368c7f0f896b3673c50e7cfa8e0dc5d93f34a71f7534243d02001cb03f70fe6e90ff24066ec4bd6b3ecca01c0f8ee6f6b0364b3e7a184a359b06bd08536c0bb

  • /data/data/com.prathamesh.disableheadphoneprathamesh/files/.com.google.firebase.crashlytics.files.v1/open-sessions/666B72CF01C9000111CF7785CFE3AF2C/report
    Filesize

    763B

    MD5

    1acce45a27bc9ff98854084c0bc4dd39

    SHA1

    c8e672992ec1df1fd539e93c4c60a310e1dcf269

    SHA256

    7861288d65b3178605c59cc1490aff578130e8ce749a0e271afc1285627979f6

    SHA512

    b182d4228825449e381cf9bf329b3152abade16690ef75d94c17f5dd5d6f7eda34d8e5b5869e4269161b73923eb6f8de3df83bebc32b7cfb7a8f00970d67a68c

  • /data/data/com.prathamesh.disableheadphoneprathamesh/files/PersistedInstallation5189287841242141209tmp
    Filesize

    90B

    MD5

    3aa54d3684c4ae8f2c518e3bd5303e56

    SHA1

    f80337de005e6a92a70b704d80d055eb43dee0ef

    SHA256

    239449a573d3c748eee6f5d7e2ee982d639548ceadd21cf983e7bddb9c6770e5

    SHA512

    7c7473d7b1cecb59801c7bc10af5dd82c1f9b664040cd03fa7d08c7efd216849089260c2f5e8825dab590e14cb3b4f95a0b16f4e423643f439b52f6f14c9eeca