ab6e32221404debd3ba6fac8df27e63993822cfc06dfef538b2caff98ad12884

Analysis

max time kernel
2s
max time network
130s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
02-07-2024 13:23

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Headshot GFX Tool and Sensitivity settings Guide_1.0_APKPure.apk
Size

12.4MB
MD5

ca944a35ac4878e24e70785e66882f9e
SHA1

3e176cbd56b97512d49f21e3a09ad82038d74f7c
SHA256

ab6e32221404debd3ba6fac8df27e63993822cfc06dfef538b2caff98ad12884
SHA512

b907df3d808d0e7e976eb2e44386e468a1e27dd283d41020e03c7d4dbb7b2d36505283a98ef55de34751c94a1984be00a0c99112a66554e5a2960c1b196dd0cb
SSDEEP

196608:wYs91iQ4bveQ39vZ1CpADbtF23XznpjgNLCGmBV1Dl58wn01cQt/mvWsYP4F:wYQ5gz3d33/tFODZgNLZ4LDccFvWJ4F

Score

6^/10

discovery persistence

Malware Config

Signatures

Acquires the wake lock 1 IoCs

Processes:

com.livevideocallingapps.headshot

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.livevideocallingapps.headshot
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.livevideocallingapps.headshot

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.livevideocallingapps.headshot
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.livevideocallingapps.headshot

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.livevideocallingapps.headshot

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.livevideocallingapps.headshot

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.livevideocallingapps.headshot

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.livevideocallingapps.headshot

com.livevideocallingapps.headshot
1⤵
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4315

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.livevideocallingapps.headshot/databases/androidx.work.workdb-journal

Filesize
512B

MD5
f4ccc991d878e582be51120b88490ad3

SHA1
f8454101b03d73a9617f62f1947f73561c39f2f9

SHA256
bd0e2fe01a501f16a05ede15e5475528db4124e4ce89f209207b4ec9485f3ade

SHA512
4a9fd6ab7ed06686bfd19b88fab01973dcd72bc7b0e4ba330e3ca34dab167a890957d7d7275df12bbb78822a51646c5658dde969229d59ca34ce4f8fee133a54

Download Submit
/data/data/com.livevideocallingapps.headshot/databases/androidx.work.workdb-wal

Filesize
16KB

MD5
7f014b39e956e7fe72d35186343314d3

SHA1
9d8ca15de89ffa8ca4756e0e43aa60e9c444a2ba

SHA256
3c98ea9fd3f12e88dbcdb9ed984cf743d931e643c58ab166af205326557f2e1f

SHA512
038bc513fe6e4eb9e79d76992c48b123b38c5b27dcce243bfc62c32e886a507df527f48e8d0acc0e5f9aea0d33cd0552abbdb0c51a828d41c002b3796e67440d

Download Submit
/data/data/com.livevideocallingapps.headshot/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.livevideocallingapps.headshot/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
47cadd2d5354c6c1a5bcb3903ec196d6

SHA1
5654aff375f62be8602418fee9d0f36a194f429c

SHA256
0d5340ea30b043709c77208de2fc3210a4fae0298f1a2d5bcba22490621064af

SHA512
02176b1df25505403c99939bbb40d27f55e2344a7568d602b7f202a72406ce00e408de9c46ae3dc09b8e35d374f306443cb5cb6c5eebb53d986c2b0b4a429fe4

Download Submit
/data/data/com.livevideocallingapps.headshot/databases/com.google.android.datatransport.events-wal

Filesize
16KB

MD5
e7369e2f3a9bac2db0516012f8ea9fd3

SHA1
aeb68946431d6252357e865257bb0da31ea44a17

SHA256
e735111de45ddb821d0d462540e44c4e26ab3d4e1e35de66a2c5669d5e6b00e5

SHA512
d4ebf6e0bb4d09f42d02ad6ce20897178758f961f870dc6a816530cc22de64305ba523ad4b72023ba89100acf3c80716989551efad1353df4376d814f57c5df6

Download Submit
/data/data/com.livevideocallingapps.headshot/files/PersistedInstallation841826837669307779tmp

Filesize
90B

MD5
02c73ac3570e9f4ff1e74df1eab1f48d

SHA1
269fdadd4951a3cdc3dc668258b9e1b1344ec8f3

SHA256
25adff7475412262d3d1234b36feceea2d8f85510a1205459579072bf94e5bac

SHA512
123236d80a0994247a41a6267c5e89def1b01621ac4a5efe499c663c753f4850416d44793af759c704d8fa7c4effa1c56f21cd3a2f6eeda12f9313fa9f0aa85a

Download Submit
/data/data/com.livevideocallingapps.headshot/files/audience_network.dex

Filesize
111KB

MD5
86bd6ab6ea7ee61a44ac557031863e46

SHA1
004f76d80ec5a9dd2e1793dceb97e92617e20d4b

SHA256
3806a13a3a24328d9d3fde99a374aafc362a861dc3b316bcb3eb631c85975876

SHA512
052987854d1098501c2db4ad691050c0e8a7cea785a3ce1a9548b07c55a2b974d26b38e6cf6b024828d0ee83d227b85d3a7f442c4361671627aefb0fcccbd447

Download Submit