Analysis

  • max time kernel
    42s
  • max time network
    45s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    22-07-2024 19:03

General

  • Target

    Domino.Pizza.ver.2.19.2.7.build.1.apk

  • Size

    760KB

  • MD5

    54d58ec4d05f837a101fa08f94bb98db

  • SHA1

    77a2853ad6f0402183806899d801b79c0091cf61

  • SHA256

    6008975dfd2aaa07fcb307b12d0c8a273aa6f4882749e29bac1f29e26a035c8f

  • SHA512

    47b66a05d9b8e9588b5a82eeff367c79a4ff0102388f2c3cf0202cd6ae2ca306b5c12c450877d4c66d60ca9fc1855e5523f16cdcb7de9d65a25e9ccca2b295ab

  • SSDEEP

    12288:Lw8MOAsa1a8Lde9/NhRmmw5WmpYshXZPbGwidNpg/FD:LwL0a1a6e9fRmmw5WmD9idNpyN

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Requests enabling of the accessibility settings. 1 IoCs
  • Tries to add a device administrator. 2 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • cmf0.c3b5bm90zq.patch
    1⤵
    • Makes use of the framework's foreground persistence service
    • Requests enabling of the accessibility settings.
    • Tries to add a device administrator.
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4248

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /storage/emulated/0/service player/config22-07-2024.log

    Filesize

    63B

    MD5

    f39cc1f3099a9889dbe0e62fd512df9a

    SHA1

    ea8f0525256ceed2229107f9ee18b90cd7d8aa52

    SHA256

    10771b2ef95f10f10f03267e96aceda33bb8f4b7d20efedf443ae00210b88c43

    SHA512

    8d64ff150977b38d023aab9875e0ae31c3d030d28b3a1b0c859d7088d6d48479dc1176d0333766e60559ceeefc0d2688f26baa7aef3c40346e57dcb9b7720a9e

  • /storage/emulated/0/service player/config22-07-2024.log

    Filesize

    224B

    MD5

    1580e6caee8c4fcb3c6890f35d4c515e

    SHA1

    7002f5cbf1c7f2fe3d536b5152f86ccd18747985

    SHA256

    8f4d02be439709a2b88279b6d061842902d7f51497f7d6c0ceec82bb8b01c3e5

    SHA512

    394a8b83187e4f5d936ac6263c6f114febdfb6cc538373653dbf63a527958bcd5971aecd3ae044d82b1d8719017ae12ba2c52984bb844427eb583e9eb27fdf86

  • /storage/emulated/0/service player/config22-07-2024.log

    Filesize

    66B

    MD5

    8ea3a40e4b1353f5c2942e09bbbded20

    SHA1

    6036904b3e6725b506f129a1bdbc389c1b84c61d

    SHA256

    75bbcf10826f0683795807e39423def1f0fc44047c603b794a32bbadb9c885f9

    SHA512

    15775e257c1f3d19a32e53e96f39f9e3cb004323dde0165a1f036a92770b207a08c50cfefb8ad9315e9bf31e2c43db983f8009db11b0e629d32d83216abfbc19

  • /storage/emulated/0/service player/config22-07-2024.log

    Filesize

    62B

    MD5

    628c328fcbf5c68375916752c0fb77ad

    SHA1

    19a80950993b590099cd4971b86bdf3cebef2326

    SHA256

    bab9b42aac866c2697922e52553650ee2c7f02959b5864776a9be6ba9f3724b9

    SHA512

    9aceb94396d30ba72a107e93863655779190076107aecb8f948e8011231d970b5a65b489dc4c2c6b90fc9ae414bd81bd19a47f9b999636ec6f40a6bc17aa5b20

  • /storage/emulated/0/service player/config22-07-2024.log

    Filesize

    85B

    MD5

    9f28276e107412fffe0eb8c8d7ebb15f

    SHA1

    4f6d9655e12416125b71f2abdca2933c75c308bb

    SHA256

    cccf6f201b0ccf153bafad3cdb362118949d0c2cec949bacf8707e52b0bfad8e

    SHA512

    a077887cd53a69ea84e003d16eb7403fbc8027504de4ce1f5ef47750bff0a980ad2f1f5abae45972bae558cd67bcf961f7b30885d6197ef6007ab82c4285cdae