Overview

overview

8

Static

static

6

5246c3b5d4...1a.apk

android-9-x86

8

5246c3b5d4...1a.apk

android-11-x64

8

Analysis

  • max time kernel
    148s
  • max time network
    147s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240611.1-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240611.1-enlocale:en-usos:android-11-x64system
  • submitted
    13/06/2024, 02:15

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    5246c3b5d4ce006bb4295eebf3f836693623ef7769c3f0aab219b2c0902a9d1a.apk
  • Size 15.8MB
  • Sample240613-cpv7eavbln
  • SHA256 5246c3b5d4ce006bb4295eebf3f836693623ef7769c3f0aab219b2c0902a9d1a
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
discoveryevasionimpact

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 1 IoCs
    evasion
  • Loads dropped Dex/Jar 1 TTPs 1 IoCs

    Runs executable file dropped to the device during analysis.

    evasion
  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Checks the presence of a debugger
    evasion
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
    evasion
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
    impact

Processes

  • com.alienmanfc6.wheresmyandroid
    1⤵
    • Checks if the Android device is rooted.
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    • Queries information about active data network
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4460

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        [email protected]
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/[email protected]
        • Size 3.2MB
        • SHA256 6233ba1598115f3646b60b99e1556ce1ff0b66458c67620cd2a94fd9a59140bc
        • MD5 SHA1 SHA512 SSDEEP
        Download

        com.google.android.datatransport.events
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/databases/com.google.android.datatransport.events
        • Size 56KB
        • SHA256 1b7d7ff8b1d6f479fb57415022324637b7e08c57dd198247b7ca45ac33dfca3b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 ba651175fb15a2fff2d230ab7769a85624c6f881a658359a144436ac9410d335
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 e2903ba972e8ffab11d091e1d5190b638bd5fc73c4c496138508931c022917fb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 d4fb5998405fdc2146c71884f5ac6a8dd9240d3f9e75fcdf150627e467e4a909
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_analytics_v4.db
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/databases/google_analytics_v4.db
        • Size 28KB
        • SHA256 8366da796d5e2774c8b9637e6c562751aa7516a59a61ea1ab7469d9573d5c966
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_analytics_v4.db-journal
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/databases/google_analytics_v4.db-journal
        • Size 512B
        • SHA256 7ca1c152e262a3499fa70b0f17b739d97f5de65ca6b3e79d19e3cfe0a2c297e9
        • MD5 SHA1 SHA512
        Submit Download

        google_analytics_v4.db-journal
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/databases/google_analytics_v4.db-journal
        • Size 8KB
        • SHA256 e464f3763ed48f72fe54288a55463ee6b420ff9db53f965ff1a4fcc6d9070942
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_analytics_v4.db-journal
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/databases/google_analytics_v4.db-journal
        • Size 4KB
        • SHA256 c66f6e511cbd8623c90b4b65a1fdfb031458364d90550a12c7a138b9a6171898
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_analytics_v4.db-journal
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/databases/google_analytics_v4.db-journal
        • Size 8KB
        • SHA256 86286dd48b73cafa507cf6601b37435c9db5491db648d455d075235b5ee45433
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_analytics_v4.db-journal
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/databases/google_analytics_v4.db-journal
        • Size 8KB
        • SHA256 f2dd2cac6305f0f44ac9ef005181028e341918bec627538e982ebcf5045c3795
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_analytics_v4.db-journal
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/databases/google_analytics_v4.db-journal
        • Size 12KB
        • SHA256 e24ef85cb6607b9d00c2ba1ad7cce643e30e8b87b6e21163b042a5b75150911c
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 2a786d4234e45106aeb0f5664d5ddb1624a827f726597b1d347611dfefa0ef60
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 085ef113fa389ad4f3adf418091c1df80ac10b9192e0bc4261fd667d600ac6cc
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 87590912a17ea27d754306f5e838e49deb675c2a377617053bccc819b5d530f7
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 973a636386d3e4e76ba6825e53337087d984af95d93bebddd9c4f94c8e2432c9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 b0b63a87432b7a3e63f22203c036adb36c4801f6de19638226107cc4bc94c68d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 8355be93282f0719698cb9025b263e70e1591da820ee8d07ef23e6c4944f09c0
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 ed3978895ce9fd29c43b2072e7134e80356d739c88c07233023c3a6c57315110
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 8d8772435097d08cddb407bf2ce1f3b9764ba2d27f742a32356f8ee622a299a9
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 91e876dab50827df369b6785d3802cf69d0ee09b4a5dd8c1bde13e2bc91ed0b8
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 d149e9177f574919b6eff0c493f038589b300a0a23caf177f6f0948120b5b232
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 fd425e2bfa2de75d830dcb801b4a931d9d49e3f28230783831d45f12c2bf8645
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        PersistedInstallation6345454890974143851tmp
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/files/PersistedInstallation6345454890974143851tmp
        • Size 90B
        • SHA256 1ef0cc80d68c3881c2d2fc713611340b06bb641dabdb8634097095bac62f2c0b
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation8014683662223256962tmp
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/files/PersistedInstallation8014683662223256962tmp
        • Size 562B
        • SHA256 fa0ac5d4767df208ed1bd3c1e2c94858ebb1014e25e67baa981dae09103acbe3
        • MD5 SHA1 SHA512
        Submit Download

        coverage
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/files/coverage
        • Size 65B
        • SHA256 7f715727fe1b157f076242462406dddff0398ce24952d00d3dfa81b2120a6260
        • MD5 SHA1 SHA512
        Submit Download

        coverage
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/files/coverage
        • Size 54B
        • SHA256 b2c3de313ddbe97841fa2256287f0b03a7b86ceffe6056c4402eb6a114efe24b
        • MD5 SHA1 SHA512
        Submit Download

        DATA_DETECTION_ADDRESS_1
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/files/facebook_ml/DATA_DETECTION_ADDRESS_1
        • Size 240KB
        • SHA256 b20563ed7cf7284fde09065b8fbfc3c215efc8679e82bfdbfcee39842a9f3f2e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        gaClientId
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/files/gaClientId
        • Size 36B
        • SHA256 54fad57afefb100344ebe51ff0981084e5dd38b882d837513a1fcafdcdeec405
        • MD5 SHA1 SHA512
        Submit Download

        gaClientIdData
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/files/gaClientIdData
        • Size 32B
        • SHA256 1e55d3a359877766681004c51d6c5bb3bbeecf1efcbf314d6a7ed7fcd1fcec51
        • MD5 SHA1 SHA512
        Submit Download

        gaid
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/files/gaid
        • Size 85B
        • SHA256 313f40fc13694ebeea962400a4bc7218446e511fce7f686355c46b3aa4cb7fe1
        • MD5 SHA1 SHA512
        Submit Download

        regulation_consent
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/files/regulation_consent
        • Size 1KB
        • SHA256 a8e2a40f55593015d1ca37f8b90e69934fb541a7fdf9c4700137444a409c4c8c
        • MD5 SHA1 SHA512
        Submit Download

        server_synchronization_status
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/files/server_synchronization_status
        • Size 113B
        • SHA256 f91c4758326194d12adaa31e40111eed67827c442d7118e37aa5e6e828946c02
        • MD5 SHA1 SHA512
        Submit Download

        server_synchronization_status
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/files/server_synchronization_status
        • Size 98B
        • SHA256 94363d4079068c5b103f3d7fd19942f69d783974e7b97c50feffd75aa8621c9f
        • MD5 SHA1 SHA512
        Submit Download

        server_synchronization_status
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/files/server_synchronization_status
        • Size 161B
        • SHA256 54dc7360e4f3c0045ce8ab87e75120b1015dbc38611437bd0c11b4f3971bcc16
        • MD5 SHA1 SHA512
        Submit Download

        server_synchronization_status
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/files/server_synchronization_status
        • Size 160B
        • SHA256 75285ea6e5a478c9f496911781f9b443a88c468ff26e75cea50fcf42f31c98e3
        • MD5 SHA1 SHA512
        Submit Download

        settings
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/files/settings
        • Size 602B
        • SHA256 de1ef3bf255414323689a019375f9c4c04b8c1c523bbfec739630cb600d88f08
        • MD5 SHA1 SHA512
        Submit Download

        settings
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/files/settings
        • Size 602B
        • SHA256 94dee8c991212dc903a43f1364af25a0d875e7c0c3df67bffab053870b57c00f
        • MD5 SHA1 SHA512
        Submit Download

        settings
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/files/settings
        • Size 695B
        • SHA256 9d989c17b4d3067a69437faefe750724b17321ce522484768d8a9d215367101c
        • MD5 SHA1 SHA512
        Submit Download

        should_attach_if_allowed
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/files/should_attach_if_allowed
        • Size 31B
        • SHA256 53ade896a4b756ca5058942117acbe4b3d069c77c64b75662da74d2fcc558e3c
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-journal
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 2acb7f0c5b4ac5e5e2e2095a292ca8d8e24c56a9b356216f2374660d90b17b25
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 82676ff19e9dbda233d5a40cb092b7b090dbe09d2990c436c612af8c2ec7f922
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/user/0/com.alienmanfc6.wheresmyandroid/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 2f9e99a7310fcd576d1224eb69e03db6dc5199840075c21c0a4d02b378e4a7a4
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download