a1647fd5225a321a2fd16e3a08cc2b4bfed6e645ccc1ab3d854d5ecd9bc3b633

Analysis

max time kernel
47s
max time network
163s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
15-08-2024 22:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Live_Net_TV_1.1.1_.apk
Size

11.9MB
MD5

f2cc29dad8d228009d8ba0427e80d862
SHA1

67833d6b9da1dadd22e523ecd7057e52fa8dcdd0
SHA256

a1647fd5225a321a2fd16e3a08cc2b4bfed6e645ccc1ab3d854d5ecd9bc3b633
SHA512

7e6d3c37672c23cd3512fb951e3c184aebf5e6ea99eaafaf6f33731f9dafd9fa953556fd453b2abd5a5a368ba999d30e3fcd1aa952fc48670a8fd38c480c1d51
SSDEEP

196608:BV1DluXHrLs5k01rFQRRwanrEheTOFoxSMh6D/OkuJ0Dt0L+4zFzSvu4+9Coq12N:BLDoXLLs57rFUyeqFQ9eOkuJQtuh5F4C

Score

8^/10

collection discovery evasion persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 8 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.sportsmasaladev.livenettvapp
/system/bin/failsafe/su	com.sportsmasaladev.livenettvapp
/system/sd/xbin/su	com.sportsmasaladev.livenettvapp
/system/xbin/su	com.sportsmasaladev.livenettvapp
/data/local/su	com.sportsmasaladev.livenettvapp
/data/local/bin/su	com.sportsmasaladev.livenettvapp
/data/local/xbin/su	com.sportsmasaladev.livenettvapp
/sbin/su	com.sportsmasaladev.livenettvapp

Checks known Qemu pipes. 1 TTPs 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

evasion

System Checks

T1633.001

ioc	Process
/dev/socket/qemud	com.sportsmasaladev.livenettvapp
/dev/qemu_pipe	com.sportsmasaladev.livenettvapp

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.sportsmasaladev.livenettvapp/files/audience_network.dex	5108	com.sportsmasaladev.livenettvapp
/data/user/0/com.sportsmasaladev.livenettvapp/files/audience_network.dex	5108	com.sportsmasaladev.livenettvapp

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.sportsmasaladev.livenettvapp

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.sportsmasaladev.livenettvapp

Requests cell location 1 TTPs 1 IoCs

Uses Android APIs to to get current cell information.

collection discovery

Location Tracking

T1430

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.sportsmasaladev.livenettvapp

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.sportsmasaladev.livenettvapp

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.sportsmasaladev.livenettvapp

com.sportsmasaladev.livenettvapp
1⤵
- Checks if the Android device is rooted.
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Requests cell location
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
PID:5108

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.sportsmasaladev.livenettvapp/databases/StartApp-d6864f2502af7851

Filesize
16KB

MD5
7e0f5b4da3c3b5708fcd81e988344f79

SHA1
b0ab8624a330f0426f260ddbdcdb740bd770d90d

SHA256
e294acb9868be42124e0a45caf61df325d7bab0ebf2381180d02f6e82162d975

SHA512
516eb20a45a0b85cde29ed8d5e48febee3fad4cc6f8726fa799ec023d9bc194ab8c80bd7e3554f3f16fd2f70b52cbcd6f35d6424a71d36ff2e588821c89ba612

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/StartApp-d6864f2502af7851-journal

Filesize
8KB

MD5
c4e14fdb459b1eda08a5d5f1b573d7ee

SHA1
00bdb84611fb6f271259a140e7260bfd197be416

SHA256
7b9a85490b7ed6f75caf0fd7242a35b0ed7f852207b1129f3a6e2cef90b1d1cc

SHA512
4c3a5ce04eef22f5c35cfde159fa3593c851f96bedec50f5ded6efbb181bc36ad3e4351cb351b88e4098ee5f94917ef906299ca6bfbd72d8c79c35f473d5c89a

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/StartApp-d6864f2502af7851-journal

Filesize
8KB

MD5
5bdd05a2c16fa2a67eaa66ddbff3881e

SHA1
4e5e09b28899caca11221e8bb0565b89ace3c2e4

SHA256
27a7d8233288341efa72e93e1e9b21e4ec40e3dd30a5635dc671f1f7915532a2

SHA512
095ee8f097d9ba3ff4a66ad1cb6e1b57ff9da68bab61cc06a68fadd8ebd5e0feb0170f9a52a769c7e6369c4086625f31193afaa0ea691db7df4ed50ef4aa072b

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/StartApp-d6864f2502af7851-journal

Filesize
8KB

MD5
7cb44a1306f757ff058aa73a0c66fe69

SHA1
c79514ff43d964961dc04c34a1b38377828a01bb

SHA256
a3916ca8af0f072d29324905fc816c7251d5d47287ec2af8c848732193e9a5dc

SHA512
0daf9bdfa31a65ba8322d34b6338c24c1ccb383b2ec98f3c135fdeef49f82671ce2c3b0e7c3fd78663bf078c269ed18a4ce07c977c2057085a3680851c0db530

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/StartApp-d6864f2502af7851-journal

Filesize
512B

MD5
e963f03135f42cee6499b63586e056dc

SHA1
97993943b79186cd4f1d9e7cadb99b308d86ff96

SHA256
0d5f4750137f18d5d679cbb9c063b322062ceae800221f982a406a4e54e49944

SHA512
1f6f6d4cfc962a0266996842e8009631ec5c1bd7954e6a5c8689366987f081b133acc7a886fd778162188bc9c8be5d03f70b30de93eacf4e02579ee314ad0318

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/StartApp-d6864f2502af7851-journal

Filesize
8KB

MD5
9f91d442005faf2498b56aa9acbdb461

SHA1
494e4007120fd57a487a7dc5515195879a209400

SHA256
be1bda365e8aba1d7aba0d1d87214b1c126ba051cb78576e7d0488f5fdeee2c8

SHA512
09d7ece7fb865d34e224a13bd0159b53050df11ee0b1a78e13379d2f76897de21903cef0699155bc929a6d4369afd247a8642ff52fe9583f6b99b2d9ff6b1cac

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/StartApp-d6864f2502af7851-journal

Filesize
8KB

MD5
ccd37fbd962566dee411e27f2b82aeea

SHA1
758dd5201fac26e5f1b60a9a2e2cadfa90363c06

SHA256
3a838393200a10da40b5ec2c3a4218230a13ea0eadca27cd6b443cd1aedc2c14

SHA512
391d26050d58c46c58b28d4302f9cb3d0f6131d80e5049606165ece3bca9560c94894a68b6de6ef3c1c14e9415bf6323b6cde942f948f483bdcf1ca7e79995fc

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/androidx.work.workdb-journal

Filesize
512B

MD5
418b3e1e718f9cb5fcb7a66b9f9d9112

SHA1
02f706dd1c6005ea6d537f4b0ae4a0828b0eadaa

SHA256
d8f9290d64daba29897a25fa4379e162e44bdfa0887a7dcfe8eafe04f2488eba

SHA512
cf071159161c7750ffcbba1ea902cce470ca1360ac9d09629d66ab432ade5a4ef276779b938c21b3a3ab71a48ab208906f4fb5c8300521e77c0f0a2e4e41b13c

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/androidx.work.workdb-wal

Filesize
88KB

MD5
a75cef8719505a3597fa214130c62fe0

SHA1
cf2cfc53aecb2d6aa12d05af94a3d7643ca7cda4

SHA256
2cee52f10e9ef1d2975ffba7c634f34c46dbf95ebc561f8d404b92a4827a7d25

SHA512
e9ed012f90a22f21025d725fcb2bf766795f0914ccf56fde3377c0ab2f9bf7bd40362b76d295cb330ea98d179dc37a5a57e10b5ecdfa2300cfa3ad096361c3ab

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/androidx.work.workdb-wal

Filesize
16KB

MD5
2c71bf6619f7a886f78353731a4ba6e9

SHA1
95b5ffd9ab3919756c70aecbf5b83d44ff1900c7

SHA256
aa04363f1df20ed485e9f9f8b01e95ec80389528fbb9b8af7f284b9335d171b0

SHA512
f18fe520ebcccf3c76427890188776496bd49560c2ce3eed2929bf2b4f77d1c5904e660ce1af1584e2adf5d71a9232c36ab02cfd5a89ff619176ba3ffb2757ee

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/google_app_measurement_local.db

Filesize
16KB

MD5
c37b04e1c5341ba6ea283ba0f7964664

SHA1
c13868849b1b85de3232d5677ab62908bcf94897

SHA256
93847d79b16e79b0c497c2b33803e2e2eea12b2ca86c6e9e1c0a24918ada71de

SHA512
69f56aadf8e8b731431f535a09500f18c73a734905b0c3baa86e1f03cc1efbc98aff04339dea8fd672025c9eeed759c8d4f945e2d3b2e4e779daa5c054ce9392

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
6c4f8cdee8a2a4d3c461af24d769c3a7

SHA1
c80bee93df74cb076e48184f3cf0ea1d803da850

SHA256
ed9c049007bff825dd0406979de28d35583725da8782c94528f5193245b64508

SHA512
2dfc2396694098f05e1932ce53309a36773c17b2046ea7a301601d3b9f07113419fe228aee913fdd060a8037f5912c9e8dc45024b902029d4358bfcb776255f4

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
b6bbff4893d0d51032efbae7f5b957ff

SHA1
ec49f26ad1052b7268cd8772433c9fe0909032bb

SHA256
d4ec06733bd670ac7a848ca66ca5989c96d9ef50f69c5e36ff6eec9c750ab6ce

SHA512
c537fc75c2d0f7d3e8630703b2d44d064de92d12a56fafce5dec2ffa2de47ee5f81cc89b31bbf5efad76f4efe70c10a92474e3626291e6d0579769cb805a6767

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
0394009899c6cec39d263fce80be7c04

SHA1
65ce49175388761cb191e4e36e2f4b0b803d6ff3

SHA256
56446a0575209cec32dd09e80c8f27a9815399202abf05c740821223e41d5a9d

SHA512
058fee347c8e3e61ab85d3b5ea3f5c82e98e50e45a75cf1ea20d41230c8aedb056a56a2dc191d24f5881262d83a015075f6b5ae69f4bf1677879ff4f1d08647f

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
431c9475cac5b8c983657b71179cd06f

SHA1
4d141fdfc4bb44ecc1be0a5cae168972d13628af

SHA256
43c26ed6b9e798caeda6e7aa20e57a188a2c7d945823f0fc571a4e979a16a372

SHA512
aec3a2c44a839c9b7e6e05f1ac602904f4ea255949d33acab0c09fec259a8f42a6a1f3721f3b7a52afac18b8e3e024fd9a4e5e84ca2fa3cf8958baa851270f38

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
31bdfd4d86ccf498b72c9cd06ee2a929

SHA1
cc01e22ef943d15d81c66d44da30436083ca8a9d

SHA256
e18f30b910ad686093cec714a050f79c2bf1031debf20b810dcff23a7bb49f02

SHA512
2634c7ef9ccbd0e7425432a3a8aaff8f91c88f05c262eccff31087125f00038da8ede47a8f242fb540f1dc77eb04bc82bbdfed089cbf63ac5801ad770b7e5478

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/files/StartappAdInfoMetadata

Filesize
1KB

MD5
4dc50e30686bd97fbe8c7383c13060db

SHA1
502911bacd02f76b2a29454ed08afec685b22140

SHA256
4c6225a54471cf42147529328be9d82b64ca4dd986b0f0ac23fe800c558699c3

SHA512
3c844030123cac143fd998eaa555f51808cea7f2e23f323d49996773cdc1dedb67469c2be8a1eba53bb5738e08b915f5cef168d1e0804558c5b0ca4ffa5845d3

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/files/StartappAdsMetadata

Filesize
2KB

MD5
477383024814479845712605568a3761

SHA1
9f758c22396a57bfee2093f9c36c2cce40c98424

SHA256
0b2ead202c01d9ae14dd76be9301c57ae6d7e4ef49869e0723f12d6bcf38b912

SHA512
97a11b2a22c61055d1df7b15c958ae788ebab4a16bd1e617da81f8b35bde9d56003b8cc85d9a1fccfb75bacc0f150089d0c765b2521b8db034451757940336c5

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/files/StartappBannerMetadata

Filesize
719B

MD5
0bb8aa5a3510fb98f74a7eb6f9c2d3a5

SHA1
57c61988738af76f1feb1a9f53cc86558a1883db

SHA256
05a7be94c1197782ff06ed4ccc31625efa90dd1e1983b29ee9295101d8872105

SHA512
a3075427c33ec3d9f1f971ef540b3eba56a2c298912d02c8d447d8218acb94944ea5db58fed13988edd11847e9972d76884d294567e33fc05e0e313e750a7684

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/files/StartappCacheMetadata

Filesize
884B

MD5
dad84ac9f386f3ccf07e4834f5b19355

SHA1
25c11358a51cf723ac67839297d00b6a8868c77a

SHA256
5e5b3c030c5469de14cb6f9687b7c003aa8216660c0f03035f2ab9e2e71ea09b

SHA512
c34565c19ed20d7b3e9f102eeb93e2a2d88322a800aaac0312f3fa70ac71efb47e32097df9f9188d50df13074a8cba614a57bfb277efc8f711020079cf024a18

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/files/StartappSplashMetadata

Filesize
1KB

MD5
4262ca4487ba649cc1a9edc24ccc8a62

SHA1
eadaab53ea9792c3e94c5edc7794a08376eeb672

SHA256
afa4a22f320ae1da2ed9fb5ed8abcfe193d5afcf37b40710b807b9a0e6f7e70f

SHA512
a02694b98bc80e46ef2d31f47e62c43b8c7da04b16af7ef8af4efcc2c8b8b72381347aaa7e6fd54af1e46dfcff2d52f10f9fc2e5c39353041007b3e18e955c55

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/files/audience_network.dex

Filesize
3.2MB

MD5
69cf159b893eefff9a8106cc3ee37e03

SHA1
165207adfe8c6047ce9f3dd38aed50796c1660d1

SHA256
26fb1a790377e11135bf8bfa7552cc2797d351df60154ea032ceeb4463776fdf

SHA512
379960366739517c1c856834227aaa1a30a20a9bab730d4229f200192f2c643b69a3e2e114dbdd743a69577e0b7b477c0d14e71c31ee491e137ec405f79e71aa

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads