Resubmissions

13/06/2024, 13:59

240613-ravdws1hmf

13/06/2024, 08:11

240613-j3aaesvarm7

Analysis

  • max time kernel
    161s
  • max time network
    143s
  • platform
    android_x86
  • resource
    android-x86-arm-20240611.1-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240611.1-enlocale:en-usos:android-9-x86system
  • submitted
    13/06/2024, 08:11

General

  • Target
    NewPipe_v0.27.0.apk
  • Size 11.1MB
  • Sample240613-j3aaesvarm
  • SHA256 33a701d2d6fcc598a41cc9e1d095af830a3a084541db192e070330f9efcd39e3
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

  • Queries information about active data network 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • org.schabi.newpipe
    1⤵
    • Queries information about running processes on the device
    • Queries information about active data network
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4306

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        newpipe.db-journal

        • Path /data/data/org.schabi.newpipe/databases/newpipe.db-journal
        • Size 512B
        • SHA256 4f89df6cc79d50dbd17f02a0c1983a507bc0c1d41448239710e825161283921a
        • MD5 SHA1 SHA512

        newpipe.db-wal

        • Path /data/data/org.schabi.newpipe/databases/newpipe.db-wal
        • Size 16KB
        • SHA256 8152aef0966a63e0fa96f7786c6d4c90a18bca845e75e675359120debcbde548
        • MD5 SHA1 SHA512 SSDEEP

        newpipe.db-wal

        • Path /data/data/org.schabi.newpipe/databases/newpipe.db-wal
        • Size 144KB
        • SHA256 24bd588fdbfabb3fe5027f736e088a9a65347fac88ab218bc3c2661516b89b1c
        • MD5 SHA1 SHA512 SSDEEP

        profileInstalled

        • Path /data/data/org.schabi.newpipe/files/profileInstalled
        • Size 24B
        • SHA256 222a40ddea7ba367f29a407c551b01022f87bcf946a9d8cf32f0f631550a06ba
        • MD5 SHA1 SHA512

        profileinstaller_profileWrittenFor_lastUpdateTime.dat

        • Path /data/data/org.schabi.newpipe/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat
        • Size 8B
        • SHA256 0a9e8d24173d4f792e6d55dd84b1abc641348e2415531e488504ea4510e35b7a
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/data/org.schabi.newpipe/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512

        androidx.work.workdb-journal

        • Path /data/data/org.schabi.newpipe/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 143be195b543601e9bc1337e0bf7a83d4353385ce1c38df6c439dd53879c885a
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/data/org.schabi.newpipe/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/org.schabi.newpipe/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 e6bc20c710bc006d51cb977ce10958f9c1a200a5c59deb22869a0618c3e4604d
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/org.schabi.newpipe/no_backup/androidx.work.workdb-wal
        • Size 112KB
        • SHA256 b415a4f3adf1fe220c9b94595bbe7e907028c7dc0d52ac4148d22cfdf6a0bdab
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/data/org.schabi.newpipe/no_backup/androidx.work.workdb-wal
        • Size 120KB
        • SHA256 c94cfa5855e9f1756c3d49217f5a33ea9d7abc9c1477b6fbedd3f2a6e591e614
        • MD5 SHA1 SHA512 SSDEEP

        primary.prof

        • Path /data/misc/profiles/cur/0/org.schabi.newpipe/primary.prof
        • Size 3KB
        • SHA256 b2b5c67c97338aa60f74775aac9a19249c178fb421de33dc3e0337efe1318005
        • MD5 SHA1 SHA512

        primary.prof

        • Path /data/misc/profiles/cur/0/org.schabi.newpipe/primary.prof
        • Size 15KB
        • SHA256 06b5c6d25bdadbd401d5da66b0518d594a25446c8ee822f9ad4e453e52d055b4
        • MD5 SHA1 SHA512 SSDEEP

        0e4ee463cf83e40437b4cfd9c72baced.0.tmp

        • Path /storage/emulated/0/Android/data/org.schabi.newpipe/cache/picasso/0e4ee463cf83e40437b4cfd9c72baced.0.tmp
        • Size 7KB
        • SHA256 a103135b4493149cfff029907ddd029da6a2130c6a53889cef658017d594b504
        • MD5 SHA1 SHA512 SSDEEP

        0e4ee463cf83e40437b4cfd9c72baced.1.tmp

        • Path /storage/emulated/0/Android/data/org.schabi.newpipe/cache/picasso/0e4ee463cf83e40437b4cfd9c72baced.1.tmp
        • Size 12KB
        • SHA256 461ba4e6a63d4c52341d554e0edf7b0712f32d77add3ba97da875f2c834dde6d
        • MD5 SHA1 SHA512 SSDEEP

        3ea2c9ba329021f124eb9283fc2dd2e7.0.tmp

        • Path /storage/emulated/0/Android/data/org.schabi.newpipe/cache/picasso/3ea2c9ba329021f124eb9283fc2dd2e7.0.tmp
        • Size 7KB
        • SHA256 3c73e11423f45ba321c679515ae00ccaab47fc9cd046e3f63e96a977fc47fb0c
        • MD5 SHA1 SHA512 SSDEEP

        3ea2c9ba329021f124eb9283fc2dd2e7.1.tmp

        • Path /storage/emulated/0/Android/data/org.schabi.newpipe/cache/picasso/3ea2c9ba329021f124eb9283fc2dd2e7.1.tmp
        • Size 14KB
        • SHA256 02298aef5df1378fdd0084d1b4b4f46237662a2556ef79525ca843dbbc9ad1c8
        • MD5 SHA1 SHA512 SSDEEP

        4515e28803047ae1da7e81eed25807a3.0.tmp

        • Path /storage/emulated/0/Android/data/org.schabi.newpipe/cache/picasso/4515e28803047ae1da7e81eed25807a3.0.tmp
        • Size 7KB
        • SHA256 63253c490cdf479bff1c3536885711a11ad7ab44bbd44033075584b6fe07f678
        • MD5 SHA1 SHA512 SSDEEP

        4515e28803047ae1da7e81eed25807a3.1.tmp

        • Path /storage/emulated/0/Android/data/org.schabi.newpipe/cache/picasso/4515e28803047ae1da7e81eed25807a3.1.tmp
        • Size 30KB
        • SHA256 f73e56cb8521f3c155a950781e4cea344290f1705af936b51c42baedd51a0c05
        • MD5 SHA1 SHA512 SSDEEP

        8b7707273f89ceffe7a7c125681b91e9.0.tmp

        • Path /storage/emulated/0/Android/data/org.schabi.newpipe/cache/picasso/8b7707273f89ceffe7a7c125681b91e9.0.tmp
        • Size 7KB
        • SHA256 ba39fc441dda04e796f92b8ea72f6d7b5abda76670bd1efa609d9368ceebb5ea
        • MD5 SHA1 SHA512 SSDEEP

        8b7707273f89ceffe7a7c125681b91e9.1.tmp

        • Path /storage/emulated/0/Android/data/org.schabi.newpipe/cache/picasso/8b7707273f89ceffe7a7c125681b91e9.1.tmp
        • Size 16KB
        • SHA256 88f1a1f3cd4cbe9f065592cd4cdf8d6f7c3c504a89e3a284a788da293110a05d
        • MD5 SHA1 SHA512 SSDEEP

        a760bc445e5df64ddc6399c31e8b348b.0.tmp

        • Path /storage/emulated/0/Android/data/org.schabi.newpipe/cache/picasso/a760bc445e5df64ddc6399c31e8b348b.0.tmp
        • Size 7KB
        • SHA256 1a3f4fce2e3870c0f01c83cf664f920ad4e515c7d7310bd5419eb60a0940ea26
        • MD5 SHA1 SHA512 SSDEEP

        a760bc445e5df64ddc6399c31e8b348b.1.tmp

        • Path /storage/emulated/0/Android/data/org.schabi.newpipe/cache/picasso/a760bc445e5df64ddc6399c31e8b348b.1.tmp
        • Size 18KB
        • SHA256 f4dc78980517ac0d2c026dd925dfc14f27ef34284f7e5a4e6f2e2b54fcd7bf5f
        • MD5 SHA1 SHA512 SSDEEP

        journal

        • Path /storage/emulated/0/Android/data/org.schabi.newpipe/cache/picasso/journal
        • Size 481B
        • SHA256 354f545dc211fc886a30efd95c4feda6a3bd74294f6ef7f14108d0e29778f152
        • MD5 SHA1 SHA512

        journal.tmp

        • Path /storage/emulated/0/Android/data/org.schabi.newpipe/cache/picasso/journal.tmp
        • Size 36B
        • SHA256 7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
        • MD5 SHA1 SHA512