Analysis
-
max time kernel
16s -
max time network
148s -
platform
android_x64 -
resource
android-x64-arm64-20240611.1-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system -
submitted
13-06-2024 22:29
Static task
static1
Behavioral task
behavioral1
Sample
e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1.apk
Resource
android-x86-arm-20240611.1-en
Behavioral task
behavioral2
Sample
e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1.apk
Resource
android-x64-20240611.1-en
Behavioral task
behavioral3
Sample
e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1.apk
Resource
android-x64-arm64-20240611.1-en
General
-
Target
e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1.apk
-
Size
2.6MB
-
MD5
1d9bf853a44ab55b453cffa4ba6ef1df
-
SHA1
bcc42ffb934024eff4ac53d0aae6292f5fa6c0fd
-
SHA256
e58887019d4a937c0eaa04f6f239b72f8d700781c08d65277dd313006121eda1
-
SHA512
3f46da5eacd7c26286692fe5cad659ca93aab443bf9e8292901f8d5073377c0187150f1688759b79d889c62bf361b38de53894c51bc50eb3f8839b328f887692
-
SSDEEP
49152:2GGPER4IKY4CpoZubs5xApsWgv7zv2gPwd2ofrfpGng:2GGP2Bhpois52KPvEd2ofrfIng
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
Processes:
com.prathamesh.disableheadphoneprathameshioc process /system/xbin/su com.prathamesh.disableheadphoneprathamesh /system/app/Superuser.apk com.prathamesh.disableheadphoneprathamesh -
Checks the presence of a debugger
-
Checks memory information 2 TTPs 1 IoCs
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.eventsFilesize
56KB
MD5d1c22bfbf36b1b26b796e979995cd0b9
SHA14315892d52b6a2bfdf89512646bdd66c395894aa
SHA2563ddfcff80eb2ac17513c0ba743126ef2ef0a4ff289464f3a14e2643e0c14d44c
SHA5123e48959cb36136d22b5c22e67ef093eaeb2bbf29ca032a637069afb6b5d9db6f5a304498ccd5b6d0fa4546dc8b58f83c1d7d9f26cd84bda7d2ad516894e04345
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events-journalFilesize
512B
MD5ff594d29a4da39c4a3693c5fc00e5ac1
SHA1e29a7353b73040e2c7e74b4b6e3af273404cf0f8
SHA256c2d043b0680bd8ef17a85547261e80fa2f6c5741fb0bb4c6058b6af9629d31fe
SHA512b0533419a69e3f61e79c0bcceffb28bfa0b535f6e32c21452c94b3a0ea169b640b819d521de1e4bb42f7143f62a8df4908b8b8d2835dc7174f3ced5030d33481
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events-journalFilesize
8KB
MD5594650c4c4995bb166177fcdf80d2aec
SHA14bc61ae988ffd680a23487a0ace41fcd8bdb9bcf
SHA2560cba5bc286dfe555d96902aa435d0faaab260b5db3f820c8fa1525dee3d51d0b
SHA51246a4d8af3d3708c6450647670d81b8ddc8d153ed8c5b6a01fde9ac16e5f343341575f8fa96d67194b51638b3140fef1ed3bbb3c16c27d541a61254e12de4f17d
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/com.google.android.datatransport.events-journalFilesize
8KB
MD536dc070c18969c2ec6ddee19c9516fa5
SHA1b7ffa7c13f95a0595e61a6b4b23a520d0c43ea80
SHA256035ee2e0b33e0784238c853649f68102c05cd7b0fb7d42a0e405bf5be6a0498b
SHA512a6a2833938500ca66cd9b4fbc31e24b88b7e90d4c102a7a7ebd06e51dbe173011df147434ae3827ac87b72b7d2f61bb2748cba40989ff3ffa99b234c41a30a05
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.dbFilesize
16KB
MD5d9cf75fdd1c2292d986f6c3d5d60f2c8
SHA107ecb1d3a26d952ae5fecf54f36699ab498510b1
SHA2562d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
SHA512442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.dbFilesize
16KB
MD5250dfb852b6e9651749b98bf6ea31391
SHA1ac58b596e4911535969208cf46f5a3a743ecd7c4
SHA2569de25c6fddb5628c996480007f85ca4f9eaac2edd2068f0c3c94ac4c8de2e9ef
SHA512eef95254afe6937134795273d70ed773033b16abc6678d2ea2dc2c6e5774f83c0845faf2c2c5f57320bc4f25e555982e1a4ca11842e48bf9d2f56b0622dd57ef
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.dbFilesize
16KB
MD51b52d334839a101547a79a164f34ebfe
SHA147dc02003294f6aa8d148421e76d72458970eefd
SHA25693d2d14da40546c866c9afb8cf302d39403d0462e41a384d307eeacd8646bb1b
SHA5122365a34d85f2aee2570eaeeed29f7253d75bdb78f910cf9d2be964779eb269c980643defd5b2b801ccd8bd458cb38dda0b62c48f8654068886d72e88a968f2a8
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.dbFilesize
16KB
MD5ef766206ba9cc62aa62f1f0cd8b6fc29
SHA1a5031dafbabd0e78210d0598fe063369d651aea3
SHA25667392c69c2e50eb7f5fc5489aee4ff1fc64f9b71051ef9b7d77f70ab087b01cd
SHA51295967aba487f4890966266fb73c5efc8a8aa6437eb43dde9d78cb160aa0d9b06fc7fd9d84a9b70d9fd222ac2d0c3f0c3f81021b4d29587bd5dffe1e090fb17e1
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.dbFilesize
16KB
MD53817bdcd35a098b056c8a661a83fc9cd
SHA1fabfeaab900bdf1b18adfd81189b2399d0489d5c
SHA256c73ac8d03ce68e1e190323418449ee8a9b39e1c93135d29e1fcb6011ec6db607
SHA5126772135bb991ac1c74d0bebabab2bdafb87c31531b2320c0a73e1d5a923cdba716bebd4aaea0a685846e9fbe0834609dcdca8f9bf83c14672fa78aa459537347
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.dbFilesize
16KB
MD5818548be1885386cc995f564f36a8e8e
SHA1008b0c602ed55b1122dadfb3a20db517d55c10b3
SHA256b4765a86f69c122307448d0c6e81cebd52ffbc59b0d19da42971e2857f773e6d
SHA51247840561a1eded73600b656576a7a9195bd1beddb79b08090b9e6bd9ab610de6cfb0a334310bfefe0b33ef157d420aaa17c6315fa2e689398da3328c4460a02f
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journalFilesize
512B
MD599298663bbdd1f8d7d6715e162ff118d
SHA1188368fa18745c002f220fceb5f21aa035df7d02
SHA2562a45c201a2584170cdb03c58431d5e427cf2823f6e80eb14d5df7edbc2a597e8
SHA5127327f89abadcbaa6f780a709160debedd0942c73d689bd83fec5f4889a4bf4dc69edb54b9e1fc8d360b856fd0d2c0239a295ad1ee1c562249b3248c65ab63726
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journalFilesize
8KB
MD5c6f12c451a9ff48e1c50229072e0483d
SHA15abaa03c37b09a37f63757d92e34686b20ec9e09
SHA25669823f52f35de7b2030cef7fbcd2b23868b83dccbb41a1993e6cb468df849dd3
SHA512cf48b46481418a58a7d7130f1ca6304848738b4943a5d3bb2e5dfbad719863e7771adde02fc63647d605a06a9cd66ac1148ef81797b688f23434aa014919ff31
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journalFilesize
4KB
MD52412229b1a5167f8b89ec1287dd0b6ed
SHA1f9de05cf498706e191ae57c8fe2e7eed572b865e
SHA2568dac10ef20a1e6d3197fcf81f35182f7a2028538b252289d984811827d090faa
SHA51298a1892c3faa1f78fe417b14f0456b874fe49d84c3f773c1d37c7790214deb39af94ca8ea11be4922b04825f7a08d2fd00a14d984685112d2faff19a03b43bd3
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journalFilesize
8KB
MD5cd286403e165ee2b4350265045bc7096
SHA1071304e44e1cf35da936b146fa2a9f67c4ca64da
SHA256711dbf8d61a2936daf9a2c6936c82930f136b5581212767d8271ff1a10d08116
SHA5121f20ec2e57fd067c3a2be50e4ee57e66a0c2db5ba72faf91af436a89fa4d40a848fdf05e83c85fd466102a0bb584de967d1c47855cce4ddde56291a8f58612cf
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journalFilesize
8KB
MD5bf9c49bd668d5419906f5e95f660812b
SHA14f7578a65bcd56132391705a6e07ce5cf2ad90b7
SHA256714e17286b0bf1734a8c31e7b9c9003dfef97c5515ff2eb93d6e5c8adac75a8b
SHA512ec0e29176d72d76abf17285b9dcbb4f4e775556edb4b443a63fb150d0047bf88b0b3799ef1e0a59c2426728f0cecfde19211ed5a6870651b38cd7f4eb2521d93
-
/data/data/com.prathamesh.disableheadphoneprathamesh/databases/google_app_measurement_local.db-journalFilesize
8KB
MD587791f7a988d89c0481191a676fb1244
SHA1cef1f3e1147a9d3985dd93736988fdaf2d504dc1
SHA256030e07a2d9ba57436984b2e32fd939b0c334bbe06f07a59896982b0c5776d480
SHA5124368c7f0f896b3673c50e7cfa8e0dc5d93f34a71f7534243d02001cb03f70fe6e90ff24066ec4bd6b3ecca01c0f8ee6f6b0364b3e7a184a359b06bd08536c0bb
-
/data/data/com.prathamesh.disableheadphoneprathamesh/files/.com.google.firebase.crashlytics.files.v1/open-sessions/666B72CF01C9000111CF7785CFE3AF2C/reportFilesize
763B
MD51acce45a27bc9ff98854084c0bc4dd39
SHA1c8e672992ec1df1fd539e93c4c60a310e1dcf269
SHA2567861288d65b3178605c59cc1490aff578130e8ce749a0e271afc1285627979f6
SHA512b182d4228825449e381cf9bf329b3152abade16690ef75d94c17f5dd5d6f7eda34d8e5b5869e4269161b73923eb6f8de3df83bebc32b7cfb7a8f00970d67a68c
-
/data/data/com.prathamesh.disableheadphoneprathamesh/files/PersistedInstallation5189287841242141209tmpFilesize
90B
MD53aa54d3684c4ae8f2c518e3bd5303e56
SHA1f80337de005e6a92a70b704d80d055eb43dee0ef
SHA256239449a573d3c748eee6f5d7e2ee982d639548ceadd21cf983e7bddb9c6770e5
SHA5127c7473d7b1cecb59801c7bc10af5dd82c1f9b664040cd03fa7d08c7efd216849089260c2f5e8825dab590e14cb3b4f95a0b16f4e423643f439b52f6f14c9eeca