Overview

overview

8

Static

static

6

5246c3b5d4...1a.apk

android-9-x86

8

5246c3b5d4...1a.apk

android-11-x64

8

Analysis

  • max time kernel
    147s
  • max time network
    136s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    13/06/2024, 01:15

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    5246c3b5d4ce006bb4295eebf3f836693623ef7769c3f0aab219b2c0902a9d1a.apk
  • Size 15.8MB
  • Sample240613-bmfhhasdpp
  • SHA256 5246c3b5d4ce006bb4295eebf3f836693623ef7769c3f0aab219b2c0902a9d1a
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
discoveryevasionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 1 IoCs
    evasion
  • Loads dropped Dex/Jar 1 TTPs 2 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Checks the presence of a debugger
    evasion
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
    evasion
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • com.alienmanfc6.wheresmyandroid
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Queries information about active data network
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4267

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events
        • Path /data/data/com.alienmanfc6.wheresmyandroid/databases/com.google.android.datatransport.events
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.alienmanfc6.wheresmyandroid/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 43d7631c61c41c5a23947d02bc6dd8b8e4dfda9194c95d43fe024f9f92039326
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-shm
        • Path /data/data/com.alienmanfc6.wheresmyandroid/databases/com.google.android.datatransport.events-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-wal
        • Path /data/data/com.alienmanfc6.wheresmyandroid/databases/com.google.android.datatransport.events-wal
        • Size 68KB
        • SHA256 1b9f38a9e4226349a587f47c3755dbe6c47eee08568598bb81dd14dedeab652c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_analytics_v4.db-journal
        • Path /data/data/com.alienmanfc6.wheresmyandroid/databases/google_analytics_v4.db-journal
        • Size 512B
        • SHA256 92c3958b7d4bf41002a2ec99dc520a8af70d336ff566712ae43c6417320d215d
        • MD5 SHA1 SHA512
        Submit Download

        google_analytics_v4.db-wal
        • Path /data/data/com.alienmanfc6.wheresmyandroid/databases/google_analytics_v4.db-wal
        • Size 68KB
        • SHA256 d7d6719db09c256655db1b317ede66339858ff14357e89523042b95ad0e278d9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d3cb81362082b4d5b7c784de03b6493ad31d71f390bd5372be3e76cff495f159
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 4665ae1f87b1e99e41cc0888499acef6874571ebc7f353b898f720df233bded0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 f160ca88b527537d5e7566b4c619122c2279d77f89439e6d81c0c7f8d71129e6
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 3a4f06b8a999012544dbaee0d380b7715bcb352dd526337e2b003ac848b2bad5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2f0a99ba8d927ef83d9e653ad169cee72ae639b0e002394a8e45119206f2f4d2
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 9036dda0f0703c5a4f285356aee9ade09333adbc9e9552b6c1b781ad270fdea6
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db-wal
        • Size 36KB
        • SHA256 4d70747ab4239125e3ded0fd69247da818955bfa4fab7743d2be10cf17b97141
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 d301c4defaffe7c8734ec701a693e8334cdc8555dbc5f97da42edc2d50b4e86b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 d2019ba507bccd15a4bc830720eae4b62c29375d54e458589c15ecb1c10ee642
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 77cb4ea903dc2e208dd8d7d0807e4416abdac7467dbdb6e39b06017352b29653
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 7f82e9a333b93694b970b12122e9a56b62f18e088f0afa6441cbd042a026d4e0
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-wal
        • Path /data/data/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db-wal
        • Size 4KB
        • SHA256 d7c7cbe8c5b7aa7c3648343a0cbbe91856e2fcaab49a72ff2cd82a7a476094b7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        PersistedInstallation8982865867578098602tmp
        • Path /data/data/com.alienmanfc6.wheresmyandroid/files/PersistedInstallation8982865867578098602tmp
        • Size 559B
        • SHA256 27db8a6f83604a25774a05b7d32e1c5bd7916a6556141bf77a32576809b42995
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation9011997629144091059tmp
        • Path /data/data/com.alienmanfc6.wheresmyandroid/files/PersistedInstallation9011997629144091059tmp
        • Size 90B
        • SHA256 0e612eee9bff922f061d20f2b106209759225e15ff8a24cf6adfc18cfdfcdf05
        • MD5 SHA1 SHA512
        Submit Download

        audience_network.dex
        • Path /data/data/com.alienmanfc6.wheresmyandroid/files/audience_network.dex
        • Size 3.2MB
        • SHA256 6233ba1598115f3646b60b99e1556ce1ff0b66458c67620cd2a94fd9a59140bc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        coverage
        • Path /data/data/com.alienmanfc6.wheresmyandroid/files/coverage
        • Size 65B
        • SHA256 dc40d49fa0c7444194f0c0e67766bbf82986926b2075f0a124a2f7d60b90fb05
        • MD5 SHA1 SHA512
        Submit Download

        coverage
        • Path /data/data/com.alienmanfc6.wheresmyandroid/files/coverage
        • Size 54B
        • SHA256 b2c3de313ddbe97841fa2256287f0b03a7b86ceffe6056c4402eb6a114efe24b
        • MD5 SHA1 SHA512
        Submit Download

        DATA_DETECTION_ADDRESS_1
        • Path /data/data/com.alienmanfc6.wheresmyandroid/files/facebook_ml/DATA_DETECTION_ADDRESS_1
        • Size 240KB
        • SHA256 b20563ed7cf7284fde09065b8fbfc3c215efc8679e82bfdbfcee39842a9f3f2e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        gaClientId
        • Path /data/data/com.alienmanfc6.wheresmyandroid/files/gaClientId
        • Size 36B
        • SHA256 4b28a26843492388649193c5708af5b86f4370118f4cf9176c2c7900f8275b58
        • MD5 SHA1 SHA512
        Submit Download

        gaClientIdData
        • Path /data/data/com.alienmanfc6.wheresmyandroid/files/gaClientIdData
        • Size 32B
        • SHA256 18a8a568de6fc317bdb0309d6ab4d1bf3ed281c326e14ea94c26e96abd21b5b4
        • MD5 SHA1 SHA512
        Submit Download

        gaid
        • Path /data/data/com.alienmanfc6.wheresmyandroid/files/gaid
        • Size 85B
        • SHA256 ad2cab207602e04b0987f2da6f3e1bd050e1608ac22558b078c5a15a7f615a77
        • MD5 SHA1 SHA512
        Submit Download

        info_list
        • Path /data/data/com.alienmanfc6.wheresmyandroid/files/info_list
        • Size 380B
        • SHA256 03f277957c4887119c12d47961f91cacb2b487ce4c0fbcc637bfc7c8f3d628ee
        • MD5 SHA1 SHA512
        Submit Download

        info_list
        • Path /data/data/com.alienmanfc6.wheresmyandroid/files/info_list
        • Size 407B
        • SHA256 0eeaac76f4adbc6579d0f38e643de6c4fda7b9c0351fc6fb211e1299d32d82b7
        • MD5 SHA1 SHA512
        Submit Download

        audience_network.dex.cur.prof
        • Path /data/data/com.alienmanfc6.wheresmyandroid/files/oat/audience_network.dex.cur.prof
        • Size 812B
        • SHA256 b14c02f19943f7af3a2b81bb5796875c8f44c1795cf2a87ad2362da004e9ea76
        • MD5 SHA1 SHA512
        Submit Download

        regulation_consent
        • Path /data/data/com.alienmanfc6.wheresmyandroid/files/regulation_consent
        • Size 1KB
        • SHA256 e1e02a7419f96f6ba1c71b1a23f57f7047b8ad8bec2bbcbe37f50ac7ca97c8dc
        • MD5 SHA1 SHA512
        Submit Download

        server_synchronization_status
        • Path /data/data/com.alienmanfc6.wheresmyandroid/files/server_synchronization_status
        • Size 113B
        • SHA256 f91c4758326194d12adaa31e40111eed67827c442d7118e37aa5e6e828946c02
        • MD5 SHA1 SHA512
        Submit Download

        server_synchronization_status
        • Path /data/data/com.alienmanfc6.wheresmyandroid/files/server_synchronization_status
        • Size 98B
        • SHA256 94363d4079068c5b103f3d7fd19942f69d783974e7b97c50feffd75aa8621c9f
        • MD5 SHA1 SHA512
        Submit Download

        server_synchronization_status
        • Path /data/data/com.alienmanfc6.wheresmyandroid/files/server_synchronization_status
        • Size 161B
        • SHA256 54dc7360e4f3c0045ce8ab87e75120b1015dbc38611437bd0c11b4f3971bcc16
        • MD5 SHA1 SHA512
        Submit Download

        server_synchronization_status
        • Path /data/data/com.alienmanfc6.wheresmyandroid/files/server_synchronization_status
        • Size 160B
        • SHA256 75285ea6e5a478c9f496911781f9b443a88c468ff26e75cea50fcf42f31c98e3
        • MD5 SHA1 SHA512
        Submit Download

        settings
        • Path /data/data/com.alienmanfc6.wheresmyandroid/files/settings
        • Size 602B
        • SHA256 de1ef3bf255414323689a019375f9c4c04b8c1c523bbfec739630cb600d88f08
        • MD5 SHA1 SHA512
        Submit Download

        settings
        • Path /data/data/com.alienmanfc6.wheresmyandroid/files/settings
        • Size 602B
        • SHA256 94dee8c991212dc903a43f1364af25a0d875e7c0c3df67bffab053870b57c00f
        • MD5 SHA1 SHA512
        Submit Download

        settings
        • Path /data/data/com.alienmanfc6.wheresmyandroid/files/settings
        • Size 695B
        • SHA256 47aa021d24c36071372bf69d85b506663d4195ef9b65c93f54ebbc0143b00f2b
        • MD5 SHA1 SHA512
        Submit Download

        should_attach_if_allowed
        • Path /data/data/com.alienmanfc6.wheresmyandroid/files/should_attach_if_allowed
        • Size 31B
        • SHA256 53ade896a4b756ca5058942117acbe4b3d069c77c64b75662da74d2fcc558e3c
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.alienmanfc6.wheresmyandroid/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 b5dad352d01ef4792e6b583412af0a52baa138c502e8b4b6238971e02ba64d8f
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.alienmanfc6.wheresmyandroid/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 b6599a56856a32c83bf8acb8aa980b7d3a8b5395186af10761b5d4221f18466e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.alienmanfc6.wheresmyandroid/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 a1eab26c39ae755977bd9dfb03ef75783a4366aede4390c07de4cdac07033926
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download