Resubmissions

13/06/2024, 13:59

240613-ravdws1hmf

13/06/2024, 08:11

240613-j3aaesvarm7

Analysis

  • max time kernel
    48s
  • max time network
    170s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240611.1-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240611.1-enlocale:en-usos:android-13-x64system
  • submitted
    13/06/2024, 08:11

General

  • Target
    NewPipe_v0.27.0.apk
  • Size 11.1MB
  • Sample240613-j3aaesvarm
  • SHA256 33a701d2d6fcc598a41cc9e1d095af830a3a084541db192e070330f9efcd39e3
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 TTPs 4 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • org.schabi.newpipe
    1⤵
    • Loads dropped Dex/Jar
    • Queries information about running processes on the device
    • Queries information about active data network
    PID:4348

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        newpipe.db-journal

        • Path /data/data/org.schabi.newpipe/databases/newpipe.db-journal
        • Size 512B
        • SHA256 6958245999b05ca4520059560de7593683242426ce6d78df8497ba4a37499ccc
        • MD5 SHA1 SHA512

        newpipe.db-wal

        • Path /data/data/org.schabi.newpipe/databases/newpipe.db-wal
        • Size 16KB
        • SHA256 0fbd50ad30d92ccc714768444d4f328e12534296d02ad5e330db3e570d9fa1f7
        • MD5 SHA1 SHA512 SSDEEP

        newpipe.db-wal

        • Path /data/data/org.schabi.newpipe/databases/newpipe.db-wal
        • Size 144KB
        • SHA256 696fe6584e703a7beff5c0b99e234e0375bb46d8048d49a69419e9f11f2c6089
        • MD5 SHA1 SHA512 SSDEEP

        profileInstalled

        • Path /data/data/org.schabi.newpipe/files/profileInstalled
        • Size 24B
        • SHA256 72ab554e44eed978297b80a70c1cb077681da16db7fcdb7dfeddf4a3599674c3
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/org.schabi.newpipe/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 9b681209f1cb6e487871bed35c2fbb2d3139cf5ab1083b1da27e68a25eab0be3
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/data/org.schabi.newpipe/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 b9a8194b71a046e8c0eb30995827b582b4bea834f630a5df2483b778a7d7d8a4
        • MD5 SHA1 SHA512

        androidx.work.workdb-journal

        • Path /data/data/org.schabi.newpipe/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 133fcf5411c5f305df07c2627daa4f69a0d62c2f81def1fbed92675ee0d01e37
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/org.schabi.newpipe/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/org.schabi.newpipe/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 933298d5f67c1889f4580b6b9e6db564382fbcb0fd398a5b30c661872b59801c
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/org.schabi.newpipe/no_backup/androidx.work.workdb-wal
        • Size 112KB
        • SHA256 7df1fc92807cddc5f51db0be58cf8122e95046d0196d49be3460887e46213b3c
        • MD5 SHA1 SHA512 SSDEEP

        primary.prof

        • Path /data/misc/profiles/cur/0/org.schabi.newpipe/primary.prof
        • Size 3KB
        • SHA256 a948b8a754bd35714fc84dceff4589fad502c76a14b04ef8100603c109624a2d
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/org.schabi.newpipe/primary.prof
        • Size 14KB
        • SHA256 688b7fd6d395e4cf55202a78c30a5b0600caa63d80aa2eadbe3d144c4a07e233
        • MD5 SHA1 SHA512 SSDEEP

        0e4ee463cf83e40437b4cfd9c72baced.0.tmp (deleted)

        • Path /storage/emulated/0/Android/data/org.schabi.newpipe/cache/picasso/0e4ee463cf83e40437b4cfd9c72baced.0.tmp (deleted)
        • Size 6KB
        • SHA256 e8ea9171917d3a89601ecf16b1be9b798ffefc9162623289fce1ca26427f460c
        • MD5 SHA1 SHA512 SSDEEP

        0e4ee463cf83e40437b4cfd9c72baced.1.tmp (deleted)

        • Path /storage/emulated/0/Android/data/org.schabi.newpipe/cache/picasso/0e4ee463cf83e40437b4cfd9c72baced.1.tmp (deleted)
        • Size 12KB
        • SHA256 461ba4e6a63d4c52341d554e0edf7b0712f32d77add3ba97da875f2c834dde6d
        • MD5 SHA1 SHA512 SSDEEP

        3ea2c9ba329021f124eb9283fc2dd2e7.0.tmp (deleted)

        • Path /storage/emulated/0/Android/data/org.schabi.newpipe/cache/picasso/3ea2c9ba329021f124eb9283fc2dd2e7.0.tmp (deleted)
        • Size 6KB
        • SHA256 b3ab4c4d97057654900752435b610de3f15af8726bad8f1df3a8d9c9eff42c50
        • MD5 SHA1 SHA512 SSDEEP

        3ea2c9ba329021f124eb9283fc2dd2e7.1.tmp (deleted)

        • Path /storage/emulated/0/Android/data/org.schabi.newpipe/cache/picasso/3ea2c9ba329021f124eb9283fc2dd2e7.1.tmp (deleted)
        • Size 14KB
        • SHA256 02298aef5df1378fdd0084d1b4b4f46237662a2556ef79525ca843dbbc9ad1c8
        • MD5 SHA1 SHA512 SSDEEP

        4515e28803047ae1da7e81eed25807a3.0.tmp (deleted)

        • Path /storage/emulated/0/Android/data/org.schabi.newpipe/cache/picasso/4515e28803047ae1da7e81eed25807a3.0.tmp (deleted)
        • Size 6KB
        • SHA256 57f647fcb008bad4b60ebdfd0f2f4b16ee399b0d6b2f6d7599492592a34d5e99
        • MD5 SHA1 SHA512 SSDEEP

        4515e28803047ae1da7e81eed25807a3.1.tmp (deleted)

        • Path /storage/emulated/0/Android/data/org.schabi.newpipe/cache/picasso/4515e28803047ae1da7e81eed25807a3.1.tmp (deleted)
        • Size 30KB
        • SHA256 f73e56cb8521f3c155a950781e4cea344290f1705af936b51c42baedd51a0c05
        • MD5 SHA1 SHA512 SSDEEP

        8b7707273f89ceffe7a7c125681b91e9.0.tmp (deleted)

        • Path /storage/emulated/0/Android/data/org.schabi.newpipe/cache/picasso/8b7707273f89ceffe7a7c125681b91e9.0.tmp (deleted)
        • Size 6KB
        • SHA256 677e4d10bc88644f51cb7245e04d304c7e092a6d7b3da15c6c6db5f059c210d8
        • MD5 SHA1 SHA512 SSDEEP

        8b7707273f89ceffe7a7c125681b91e9.1.tmp (deleted)

        • Path /storage/emulated/0/Android/data/org.schabi.newpipe/cache/picasso/8b7707273f89ceffe7a7c125681b91e9.1.tmp (deleted)
        • Size 16KB
        • SHA256 88f1a1f3cd4cbe9f065592cd4cdf8d6f7c3c504a89e3a284a788da293110a05d
        • MD5 SHA1 SHA512 SSDEEP

        a760bc445e5df64ddc6399c31e8b348b.0.tmp (deleted)

        • Path /storage/emulated/0/Android/data/org.schabi.newpipe/cache/picasso/a760bc445e5df64ddc6399c31e8b348b.0.tmp (deleted)
        • Size 6KB
        • SHA256 69bcd0785f815a824c14ea900a532336f08ae03d92cfd350e1e5a57559a53192
        • MD5 SHA1 SHA512 SSDEEP

        a760bc445e5df64ddc6399c31e8b348b.1.tmp (deleted)

        • Path /storage/emulated/0/Android/data/org.schabi.newpipe/cache/picasso/a760bc445e5df64ddc6399c31e8b348b.1.tmp (deleted)
        • Size 18KB
        • SHA256 f4dc78980517ac0d2c026dd925dfc14f27ef34284f7e5a4e6f2e2b54fcd7bf5f
        • MD5 SHA1 SHA512 SSDEEP

        journal

        • Path /storage/emulated/0/Android/data/org.schabi.newpipe/cache/picasso/journal
        • Size 481B
        • SHA256 9e8acd7231831bcad2abed23eeae2adbbabfb329dd76d39101997c36cdb87238
        • MD5 SHA1 SHA512

        journal.tmp (deleted)

        • Path /storage/emulated/0/Android/data/org.schabi.newpipe/cache/picasso/journal.tmp (deleted)
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512

        androidx.window.extensions.jar

        • Path /system_ext/framework/androidx.window.extensions.jar
        • Size 123KB
        • SHA256 8e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
        • MD5 SHA1 SHA512 SSDEEP

        androidx.window.sidecar.jar

        • Path /system_ext/framework/androidx.window.sidecar.jar
        • Size 25KB
        • SHA256 9195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
        • MD5 SHA1 SHA512 SSDEEP