Analysis
-
max time kernel
147s -
max time network
130s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
12-08-2024 02:23
General
-
Target
5246c3b5d4ce006bb4295eebf3f836693623ef7769c3f0aab219b2c0902a9d1a.apk
-
Size
15.8MB
-
MD5
2c8debabd9af9be1f05ba4433bbd1b30
-
SHA1
eb9a28783246a2a324081685f5746854fded8355
-
SHA256
5246c3b5d4ce006bb4295eebf3f836693623ef7769c3f0aab219b2c0902a9d1a
-
SHA512
fdb873cf10544edae03eee9b0193622f40579a1beb108560728b176d25618b67f7d5bb52eda8f119e68c72842b9ac4f6bef095ef09b99da89670c41a0948d994
-
SSDEEP
393216:MdUVU8y/rtX1XuK+5QRiGSQOLGLuRgZW7v7WxwezZ:MCVUlNY5QAhZgMqued
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 1 IoCs
-
Loads dropped Dex/Jar 1 TTPs 3 IoCs
Runs executable file dropped to the device during analysis.
-
Acquires the wake lock 1 IoCs
-
Queries information about active data network 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
-
Checks the presence of a debugger
-
Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
Processes
-
com.alienmanfc6.wheresmyandroid1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Acquires the wake lock
- Queries information about active data network
- Listens for changes in the sensor environment (might be used to detect emulation)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.alienmanfc6.wheresmyandroid/files/audience_network.dex --output-vdex-fd=100 --oat-fd=101 --oat-location=/data/user/0/com.alienmanfc6.wheresmyandroid/files/oat/x86/audience_network.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD555bd3df949bc06244f99a5f5c0838a9f
SHA1ca640f14c665f8c34cef8f07c118b37066208f18
SHA2562193b132e87eec03239fcef85aeb6acc0916d3c3333defc7861b7a1df145b49f
SHA5123e7bef4e947ca972adbfda1eac41ce768628f3d8624f42c7ea7163e81ee33692c3b3583f6e0e7b05c4bc364de6c8e8466399a192e60a79254be0e75f8270cb84
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
68KB
MD552eaa1a56c4d8ed0472870fff55b6a84
SHA1962f0aa8e3789cca7194998bf5a766ac7c8b664a
SHA256466a4fdbbe98d88c83f296f8a299677e5bcc65e96dfbd861b7a69ad110a2826e
SHA5121aec15f90969a12c568b106c2dd8da92b93009691494d82fe443a63c2eb10bb57d1d815697542cf3ca938e19b9b17758c86e0e5dea4eb06338bf7911000a2709
-
Filesize
512B
MD5ea2595d4065fd38608ce58acd1214332
SHA1778347f2401ec1fbe25a3b7c1cd3b17c073aeccd
SHA256676602dc73949f6264bdefa0bd4bf0d48c364ec51a0ec22a9fd59fc50c85a2f9
SHA512d71415d55a34ebe4bc6934e0d3846c93a353c5b9837addd10bb929d2bea95ebd6a9ccc8cc0ee377563c7efbccd707e943b3743f1678f25bcf4f9e31d0977686b
-
Filesize
68KB
MD5c565b286a93f998190e81ac168452601
SHA19a89ce1a6e70e369282d5116f2e9ca135affb061
SHA256a939846f1b6e639d5b082483d457567be6b9cdc85d3aed639f142ccbae7aa56d
SHA512012e864216174f30007d586735c0caff97320985b0b90befed1d427402e536719550a9355339efeca1b88ab4a2d16ccba5cd268a19e667dea4a494a266f33c83
-
Filesize
16KB
MD57237409e0640cfab7bdbd429bf821a3b
SHA14c3da934842f8d4835dfe2a9c275a300e5123309
SHA2565c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
-
Filesize
16KB
MD5fe35de3f9ff51bed2d97f0d9a77ddabd
SHA1e05a1aa3ac18cc0c54c26b23c8a50e8d070513ce
SHA256e8846fc7819b560005f886224267ae40a32773243c5bd48971cd7d25ef2b85a2
SHA5120b5ad8c6b090eec996feae6759ea7b185f6ba80091b084489a41adf77b05b7622bb711c0f52272a37e08d7d209768e97ab09985ca32bce9a91d551545d78e493
-
Filesize
16KB
MD531e7b559ddbee6c3db5ebe3122ddb92c
SHA1703948eabcf9259f52d309fdf8963699679ccb2c
SHA256beaef3f901cd26e18d9e0d450e441a08b338ed07e7b79cc8c129057ff7af2710
SHA512cada9f52b6b728fcda122b131460d001fb3bd96424fe3c7358f77268a67b3be85908a8207e0368de7414b3968fddb2abce6baaaf5118da6cd55dfae5e982765d
-
Filesize
16KB
MD5480c2d761f3b1979e793c3eb9d41bf35
SHA1ed87e94f7910390515d435e249f943c183061300
SHA256ed2a25cb41772d39217e0af9e81b533fa6895195c0f871b4a21fff39befe9fd2
SHA5127df38b7924b95a0c2065c035cad10c45bbc9e5f1c4f1ca819be89505bb9b4cf45efb803df1c0ebae390c4e014bea04c5fefe20bc378d50456b0ae0be199da09b
-
Filesize
16KB
MD598b92fbba732b31cfe90c84ceff9e9b2
SHA1a94fad7bace0b313b13e592c361d808ef65263a4
SHA256e93ebce600e6e436de1b26c4e0c60326d3461b95c962ab7528b6e8f3eb34c853
SHA512b702f5408fc76cfbc2e10c876fdc26996e8ffded028a2ba0f318e579aa4a032bb627008b03751d6cf18bd8f11a68154f7be08c22883b0c5f994f514cc7bfd714
-
Filesize
16KB
MD5a1a24b47ce4a58a49c982a81ff846289
SHA169faac036ef0f29b0c4c0e89f1bfcb8357b60cb4
SHA2562f0a99ba8d927ef83d9e653ad169cee72ae639b0e002394a8e45119206f2f4d2
SHA512708a5abcb4d908d2842a028b76aa1eabf66a6114ccd580667198fec6c07444c7665ed257ceda7937f124e1c8f81325d89647783398e9ce3655f01018ae75f3ec
-
Filesize
512B
MD5a8213020c3fc5cbd7e4083bdf73c0433
SHA135c8b64fe61504c12ab98f524b7ea8ce7abf2b3b
SHA2564edcf00ae4cf249906f5cce9e2bb8c35617e33dd09a2a8689d6bfd1dd6cc8561
SHA5126bec686a69673cb014956cd9fbccac3b101c003030be0896fe05160b9977db40b4ee5f88df5aaa4c7e4f52abfb75637af0d2e70c96e285d1619edb6bb55a6586
-
Filesize
36KB
MD58e33d0240ce71a029c38511afb0a26f0
SHA1af9bd0c232c27524bbe2c3f7b3eb95cdc60d1a31
SHA256441e48525a4c18f43f73778632990088f8391a1cdae53695a2b0480198b37bb8
SHA51276bb5ab040be1de11a17e3fc45641a68bc9f152b9ad72786e9d75c9214e83cb8599498da3a80c51ad7d94fdf94bc068b7c3fdd650016b78c70ee6d8bdd9eac0c
-
Filesize
4KB
MD519c5e07171c83f44f9cd4b8cb0815abc
SHA13f90cde495833e641971d25b8d4a67778d2f629d
SHA2563512b97a43cef7d975bc61c9b142a013803764bdf8e291e890c96387b1ff3bac
SHA5127846fef8a0d27a530a013a847f72ccb6519771a7e88aba216a9c7e372c542fbb3391059431558e6cd22c784a42b9bbbb417df2d3c841fcdafef899f28152d201
-
Filesize
4KB
MD5b9467434f25484d1a87c45a7a5a55ef3
SHA113930d251553ac23cde162df8812e96bc231a8e6
SHA2562edfd2fd179a35869370fc7c0d82ca38b3b55578bcdf0f67704297dd42826188
SHA5126dc6ffd38a412ad2065dae59d50005b54067bb92d82d028c133bfbbd2b141d8770c8fe7173c258e7075d123d75fd6af32f32057542f28b6af31ee9be4024bd06
-
Filesize
4KB
MD569cf16595840b079f390d4d02671ea7a
SHA1c2069057cfc3e3d9d5595f272328c8123ff8b72c
SHA2565c1fbb00fa8bb56145b0ee8422d530ccf5e3c066e618583a5e0f5030f2e8300f
SHA51261b4f875e2af9fa1a37cae66e0a93bbd02ab46a479b547b70c25f23a1fcef85adc4574a441944102c1576dc9d71d1fa2268879089560cc643e8d4331a3e3d25e
-
Filesize
4KB
MD5fbd348728a30b5c3b1ca654602f14aa0
SHA1b259ebd216332eecd8af92b48252e9dcf9ca8623
SHA256d420e87ec3d39b82cf9494a5af20b2f0953c7c2f5285d7cda2c9375cadc5b5d1
SHA512a08d5988ff7c1e2aca96badcf8f532b77d617d09df534e7c3c81ea13db75e51f7d8f3a6075a7e2345aca92b0cc1d5c1df837bf73157f30229ba359811ccb19c8
-
Filesize
4KB
MD5844ab64ca00919f435dd2abef0f7183a
SHA17f322ca348ec0e063cd2a013aa5e05c786bad4a3
SHA25609268a74f8147856fbb64a0417d259693a7e6f6e6ebd44700a28a14fcacbe85c
SHA512679c06374560a31ee6456d45654d96950e0f1b630c37ce914ef3b584c7a7d2313ad59e69fe5a5c5359bfeb2d90dfb33395475a515daff3121dd45295bd285b9e
-
Filesize
90B
MD5c7057a74aa238bce8777e1254278159c
SHA1fbbf897d5458c4aa60e0e8d02e329b812e733dc0
SHA256ce3e784ee25323fc5a72b448e1c3fbeaf7fd6aaa6309327606190efaa2cb5e65
SHA512ab87ad70159c7ed116fa271a298ae5cfe112ac3622a9bafff2afe542db8c1abfdb5e5c663275a4dc091a210f8fa44cf5477fbc3c0824914cf741a853baa70b17
-
Filesize
559B
MD591545542031b7106f0b991a0582282fa
SHA1d7d54ec1b2525282268e7e3eafc6871ba1446b7a
SHA25614af7381fa20f44f325c7912a38b2099196b77217255c4c8a80496e7e043db81
SHA5122031e1229abe745171cfef2e091f998e6c6b28fa65c6eb9d8f2de08b4f76753350f537a604f20580d7a6b70903e45f4af36de637ed6ea14cc9e2932197b9da75
-
Filesize
3.2MB
MD5e8267ce8fc81e9d1c7099d480486d960
SHA10aef0c04cd5ebe6f4fde6e2526937b7c64f7d109
SHA2566233ba1598115f3646b60b99e1556ce1ff0b66458c67620cd2a94fd9a59140bc
SHA512a1da017e8f0316a7f391b49c10cc94c877c425bc0f5320ddacb6f076ecb7dfe3c6132a74d74d025e25c038dd4f220811517c4e9eabbf542836080b83e182ba2f
-
Filesize
65B
MD5eaa9c9260f4fb749a71436945434c438
SHA13e0c0715c546e95bf241afd1fa58c146d9e98f14
SHA2566b4373ff3080c31fb1901b7d6ed96e9afd8da5f8e4cf80172b86488df8745f82
SHA51223201080fe0834aeb1d9e982702591b3f464070717216ad2985e283075785dbe3f313dc142b79f62799cbb9af20c408300be1c5e91945d82652b8c7aa347ff07
-
Filesize
54B
MD59e48aba6f4f0734d4613d40e081c06ca
SHA12ea298430e7230ea979624e50c9594a4110a5a8c
SHA256b2c3de313ddbe97841fa2256287f0b03a7b86ceffe6056c4402eb6a114efe24b
SHA512120ea561a6cfd4bb9a6abe3cfae5af109cb7cb066341bb61ce33ec6bbc6d770802c6753a3dfb5faf97d5be19ef79fb9678d917bf4f1701aaa864b1454f875841
-
Filesize
240KB
MD526e37998b089275a4e2ed9c1be930879
SHA1c48a03938a072a835e403c4f3ae5ca41835d9eb3
SHA256b20563ed7cf7284fde09065b8fbfc3c215efc8679e82bfdbfcee39842a9f3f2e
SHA512e9b888557deced806b6e4e91f229a643e5c50e6a9ab5744c7c30c1cab9b5582e858fc00024cb6e1a8bf90562b8c6cf48dac255668a15f72a5b8d7b43166cbd38
-
Filesize
36B
MD52f49c2e6d6bef6d7e06f4223d8a8963e
SHA1f5ba07992f1b20644e194f20a9a5d30cd1dc13f1
SHA256b3177ddb9e445413559f25b11fe7c31057cd063147b78b032fc6d6101d5bab6a
SHA512718e7b965fdbd75c9bfc67eb192bb2efed7f5de715aeb7ecf914e76e08af8fd15e928224fc4aa5d041d4804bf7d25aa50c94a74211cac8fceb6432bd1ff12774
-
Filesize
32B
MD5f279e77c84ec9e15fc67090c8617cd1d
SHA12ddee578da5e4c15c71b81b22121d2fba852706f
SHA256d307fcd5512a070af6c847e67894b175e3f0a16ed02ff7aafe4d415720166834
SHA5127d82274aa87de5d788e7babcab2a373756d61c8e37a1d606fba5999067bd614254f340146c74bd88a1b7a2e75e17eba23bbc1563d40f34a0f538d0aec109663b
-
Filesize
85B
MD5f53bb9b0c6774d2224752a1fff8f1896
SHA184c0eb83c4a2c125e3a76050c14bd8f5717b18d2
SHA2568e453e242b415dea4d236353a4058ea24294f57f8e0cea77218a0da9204f91c6
SHA512265c3fa2117ca737e60add2d8b828f8c9a39fa8fff9b08276bc614f8d48e0ef7d2fccbbcff110b9bfb950350b21f83cf345004e92ab4e3ee21f62f7f04fa2a41
-
Filesize
379B
MD5134a6694638893682e21e17997e725a4
SHA1ebbd209b7e057bcd6982998739f75f2714049c9c
SHA256ede47061094e4715871f66b61f3749f55f068a5bb7242622909bb30e35d1f8a3
SHA5129b6bfe971b73146e0b1c0d6ec5eb136b513f04d7ecb553ef403518564dc03b9012d729d6fb3b3bb20debb604e24c78f0ba07b4a7921d3b6bf59bffa16bb78889
-
Filesize
406B
MD5432c7a07f00c93b376ba2dbe2994ff3c
SHA17ca22e2ba4cf3f0ccb2d456b8dc4292015747a6f
SHA256e5fc3f5f739361bf19f3ca7b51c77aaa169902f7bc5fa1ca114dcbb7fca05797
SHA512d06e7964a483ff981a2af76b3b0950d570717c0b120c2a307def51b5a5006392f67cb72704ba6d46392766a4a8b852eb6800e28c7274240781f8c1b471db12fa
-
Filesize
678B
MD5f47f22fb6d4a102ad6acb5e6fcab5803
SHA105e462c5957bf637404a9052138e8603bad67e55
SHA256bece3c23958579fb919691fbfec00db4e8e416167299cdb50ada4486f255f2be
SHA51221493d0a9202b95e93f75667d40cc08e677eae5be701a92541b79b69aae8a89c1d2033605d11ad39274dba9dcdff69741680eeb5116235226eccecbdd0e7a326
-
Filesize
1KB
MD5ad2aa38295167d987e0306caa34a2758
SHA1b3e6682daca377a07721247cbc67296520c7a453
SHA2568368c5343fb5647d03e58369c0ddf995aa619ef4598225508dfb52b4623c4cdc
SHA512f4d801d2a58b8f5bd0b74f392e3976e94136a085a045f6d5434c6d1139f4f9fcc0ae624ca335b911b64520b3f61a3f707513cdc023441dcb326b04b0ffbd55e4
-
Filesize
113B
MD5b234f1b1b44be765682ff7d7448e101c
SHA17542e023b9af9dcbfbcd3188e8accf62e5bbe37e
SHA256f91c4758326194d12adaa31e40111eed67827c442d7118e37aa5e6e828946c02
SHA5122fa93fe54f216405b1db4f150905affbdf8cdb47f0f1c188481ffbeb8b211df1fbf9ad6d756eff91f0ce58ce85cae80c786d97aa5a6c7e1e7a751fcf09ba5721
-
Filesize
176B
MD5a42582dd04b8af0ee34e2d5ecea49454
SHA139fc8c6126b6a18010e8dad19d27f02746ce10f7
SHA2566d507386cefba47e11c85d05b2451c67109e592ce44e69e81361a89079ea19cf
SHA51235743b0afecb2ad6c204fba3c1d96e51d16d06a2557ad94c692b90dedbcfeeb75e6c39ddcb635502c4d57b0739732740b3b0d6d02e4b4f89b64507d4e1736dbc
-
Filesize
161B
MD5ea4e4ead84589588ebbbea2a832429d5
SHA192e07d583cc436a8427a732c375f7e94bf828536
SHA25654dc7360e4f3c0045ce8ab87e75120b1015dbc38611437bd0c11b4f3971bcc16
SHA512e04d5494cb67536f05a26487090e7c7a24190e6dcd85af22197fbaba856db0e2002430b3746fc5ccd0c762c89fd9a91f952a19b8ba6532b3de211e440601677f
-
Filesize
160B
MD5100854ff712935ad119aa4e68b592a09
SHA1d474226cac594276f970a4a488aee3d0d63dfa55
SHA25675285ea6e5a478c9f496911781f9b443a88c468ff26e75cea50fcf42f31c98e3
SHA51266c7ae0acb7e783b140228c115a386dda96912cd22446efb3d5a58acc8f0360170498ac8738a163e7d55c9cd363f824f49bf0b4ac12d79aa6e16965a765ca43f
-
Filesize
602B
MD59e329ba70726df63aa018bcfc9ab0be9
SHA19cca7ad4974f60f0e4652d4262e249d2aaf69954
SHA256de1ef3bf255414323689a019375f9c4c04b8c1c523bbfec739630cb600d88f08
SHA5128bfed8d7c84d975a794402ead9f39bdf7e9053db9f9f7aa557d6f0c73981eca3a81dab097c0723df2d0f789faa1eb6ccb184715c7850594f05d31c772de482ce
-
Filesize
602B
MD527c87dcd63719c4fb0ffb621bf576f32
SHA1336fdfb577b4dac1f4cdb7f574d6894bc5fa6dea
SHA25694dee8c991212dc903a43f1364af25a0d875e7c0c3df67bffab053870b57c00f
SHA512bff80550e760ed049081fa0fb18462f4a6adb44785e60c54ba7e93b0ace91d71d904efa35f51282b712667aa194166457f6875de795c593d1261d3f575fdd4b6
-
Filesize
695B
MD510607c47be706f90a0c9f7027db92b4f
SHA147a690879c8b344c51ca55ca5dd3c28c8fac343d
SHA256cc91d9da5b8eacf870235e76f9783eeb352d45f242a41061b6f5c6b8c08302af
SHA512373883cdca76696930250e69cdc80499b6f5c8196b786f460f9e50be4853960edaf68b745b68765e9db749b206f4be30b552cad1c8b9aba65570410c7755afe3
-
Filesize
31B
MD5f0d3e2c136373efc547c9839dae404db
SHA16be3693b277815ccdc975fdca921cc46fb901417
SHA25653ade896a4b756ca5058942117acbe4b3d069c77c64b75662da74d2fcc558e3c
SHA5126a77842ed9d7b3d5f701ddd2f34f3c7d4264936d8ba98a3f8d4893bf44424480c36fd32416caa794a06ed81d4781f8b35fa9205fc92e428bae1df4e536dba03f
-
Filesize
512B
MD5bc7db59ca1a1021b93d79517b2821297
SHA1a60304aebe1be54ec40e8acfd0d41736cc136112
SHA2564382e25d9dcc1b1538680f30565890deed7253a0afa6b4d4496de99cd8d588d3
SHA51272ec01cdbd187ca9faae017014dc6b7b3361b14673c5b54e24832e71abc17040c24f537ab86515368440dd4355998c3172f350178fff334c8d63dbc4ece4e76c
-
Filesize
108KB
MD5c2d442316262fc4572792177ac490817
SHA159e23de75083af116506856e37ba5201a4b7f580
SHA2563403ec46a0cdcc4816e8448abfc48df6e0f6f52b209e35fde92b9363d00e971d
SHA5120b694d621de485e8f011ffc3166624b26e0626f42545b7a897d6d56c5d206884cce7b1dd1b54cb364e0651898715f861ce98ac454d59bb4ae4f23ef2d612f3ec
-
Filesize
16KB
MD5e49ba2ab6d9ddb827bfc3ac56f9ad887
SHA1d6e7225a0b2b8d3601d2cfec5c61231a6a87a34a
SHA2564345c973fc5100be6815430f6ff05ab1b86b9d95c4c6dab2deaec2056feb5349
SHA512f36e5427bd840dbd69cb06eccb592e3a788465a967233df8399c87d0c0f06992bb1891401df1da2b9d00c770497d3dccf9a039d4d52921afcc1869c841c45c17
-
Filesize
3.2MB
MD5b97301854f16eae75f5afbb0e8e877ab
SHA110e1c5eb0beea7e3239684554edb37e70d1b610f
SHA2566caa4acdd8e8c5122e984101e68ed24529e0f377efc162cf8e1f5dea4fac49d4
SHA512828aff6cfad833877656baebef511b935c1e6d23baed69246070e12a491a0ea3ab11417a58bd31df55c8ce6948a88b68ce26ab1ce4a608acfc0361f3f990ad39