Analysis
-
max time kernel
16s -
max time network
132s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
15-08-2024 22:09
Behavioral task
behavioral1
Sample
Live_Net_TV_1.1.1_.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
Live_Net_TV_1.1.1_.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
Live_Net_TV_1.1.1_.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
Live_Net_TV_1.1.1_.apk
-
Size
11.9MB
-
MD5
f2cc29dad8d228009d8ba0427e80d862
-
SHA1
67833d6b9da1dadd22e523ecd7057e52fa8dcdd0
-
SHA256
a1647fd5225a321a2fd16e3a08cc2b4bfed6e645ccc1ab3d854d5ecd9bc3b633
-
SHA512
7e6d3c37672c23cd3512fb951e3c184aebf5e6ea99eaafaf6f33731f9dafd9fa953556fd453b2abd5a5a368ba999d30e3fcd1aa952fc48670a8fd38c480c1d51
-
SSDEEP
196608:BV1DluXHrLs5k01rFQRRwanrEheTOFoxSMh6D/OkuJ0Dt0L+4zFzSvu4+9Coq12N:BLDoXLLs57rFUyeqFQ9eOkuJQtuh5F4C
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 8 IoCs
ioc Process /data/local/bin/su com.sportsmasaladev.livenettvapp /data/local/xbin/su com.sportsmasaladev.livenettvapp /sbin/su com.sportsmasaladev.livenettvapp /system/bin/su com.sportsmasaladev.livenettvapp /system/bin/failsafe/su com.sportsmasaladev.livenettvapp /system/sd/xbin/su com.sportsmasaladev.livenettvapp /system/xbin/su com.sportsmasaladev.livenettvapp /data/local/su com.sportsmasaladev.livenettvapp -
Checks Android system properties for emulator presence. 1 TTPs 1 IoCs
description ioc Process Accessed system property key: ro.hardware com.sportsmasaladev.livenettvapp -
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
ioc Process /dev/socket/qemud com.sportsmasaladev.livenettvapp /dev/qemu_pipe com.sportsmasaladev.livenettvapp -
Loads dropped Dex/Jar 1 TTPs 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.sportsmasaladev.livenettvapp/[email protected] 4474 com.sportsmasaladev.livenettvapp -
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.sportsmasaladev.livenettvapp -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.sportsmasaladev.livenettvapp -
Reads information about phone network operator. 1 TTPs
-
Requests cell location 1 TTPs 1 IoCs
Uses Android APIs to to get current cell information.
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getAllCellInfo com.sportsmasaladev.livenettvapp -
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.sportsmasaladev.livenettvapp
Processes
-
com.sportsmasaladev.livenettvapp1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Requests cell location
- Checks CPU information
PID:4474
Network
MITRE ATT&CK Mobile v15
Defense Evasion
Download New Code at Runtime
1Virtualization/Sandbox Evasion
3System Checks
3Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
16KB
MD59d815160f4fbe3b69bedb94797069f4a
SHA1bc6d4e07ab7b1285da82eef6c86ae65934b9c9af
SHA25600cd3a091bedf58f29383e7de3938cbef36f4479565af4ef7ecfa3fe75b013c1
SHA512b396a0cd83569ffd70d94a636dbe85eef490a669260350e84189d82f4e067e9cd2198e912af40e5e4108662627c768f5f40085ef6b1bd2e0dc2abd4ea85cdcd8
-
Filesize
8KB
MD5c0fbad6787f3410fa44ae8f564c3bf43
SHA19905fed5902941889edd98a1d9b9617bdf41ea0e
SHA256dc2abf0bc5e6ff4de6ed0a16b453d7c63e26a4bd369e34d31d4d68e838f12f7d
SHA5122f3c5a00261c7b14588ddcb3b93c9ddc21fd53bd09170f8b214136877ff6b68b34bcc5cbd219251555c5fcba7430d01bc902d50f3680362540e2162d8a0da947
-
Filesize
8KB
MD5a992f89e276b1d0085d91322cca7ad96
SHA19d36455b541c91c065ad9295733bac04c40eeac9
SHA256d0cb575b3778030c8424d5384b2af4527dfcf3a6f189fc6d117b9be64fe44161
SHA512d98b5aeadbf56507b8b2ed877f59f0c7789364a545b96f749f3a465585ab242a738cd63117aa09406b3295fb63286b9935e8dffa7128c45ceafb0681ab9ed814
-
Filesize
512B
MD541e5bebf61e4ebfc66549029176e7502
SHA1c38518189b6948b9d1c7501220280e697aab09dd
SHA25639db9c26fd28b0d818fcc60894f16dece3f53a3bc3f2f55aaa20fc25ac84c02b
SHA512c1403114e95b7bcda99831d54c3ad5f88da64fb3811f3f8351b11e5801f50dccedd1232cf4f99663560167ef7d8bc552755d32d9448a01f70bbf277e05e27a2a
-
Filesize
8KB
MD5ab3b4decbcbabc70bf5d8107e7d9ea38
SHA18601061cb219626cd7a413510c8033bdc5c914a6
SHA256103d84ac92ddf4ea3d5e504207ceb880e82236ef8e612c80fb8acfd282e109dc
SHA512a941d0719f5aa2e1c2e7008bf0c1580555f51493439e2c71b0fbad943fdc3a82b3058530470b9719a385ecb31e8f61d1f0388d305701698bd33e0bec446e4d40
-
Filesize
8KB
MD571dba868d76100f6596ce0271c5ab8cf
SHA118c7e4450f43850c4f1d99f4eeae31068a00ffeb
SHA256477a1af971443e28ee032d3b18164bfe6805c36ba9e1c39821fdad2d453f15dc
SHA5124dff64fa9b1570bb3eaac517d9e6bfca092d0d6d93ac1f3ee02ada0b4b43a71b6a329cfc57470a1e82168af2c2cf1e7a025be2f1b0e07bffa306139d131c49f3
-
Filesize
8KB
MD500a5845f0fe6ece4635f00a73ddfb1b8
SHA167c5f04cfb29f859a610fde692c6a09c7e5e05ad
SHA256164f0ab96c38634dbe5dc0583865e7cd83d2571ac967b4e0863f0b3bed7fd2de
SHA51275df52816457f9a7e501912d4b583a5d1d7ae615541fac5ff3f2c6272999387031dc725ec3d0db68f26d17244724c89683ac9d0283a1a4fed3f6e1f65fe56732
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD5a9eb4048d0d4cc9c7a08c3d944f60390
SHA1417fdc841c77be9810575fb070b83e43224987ad
SHA256c326d69f573614c5b2ce99ce75f651de6a6885af791cbd106f3b3f0d3af4eb42
SHA512a57bef8e768a399a3d255428a8d323abdd6f51b8cbffb04f1b7f966f26f86dce52ebdac3984839af2d55eb1189e306dee135bce699c40dc3129905d0f3d560dd
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
88KB
MD543a55e239ce88803bccaef8983925705
SHA1821687febe81928f9e090e87096f48bea717ffd8
SHA256f1576c745118387676a49f98409f62011265677322bea2d3ae9c52bd7e18117d
SHA5124dc1d2e7eabd882e43186664ba4992f018b3b7a530e2861ea1adb80a3e3aa08f4c5d4b59f0a3be82dbdb15799838927c6abb981c664b7f60d8f82ea95f5df06e
-
Filesize
16KB
MD54c518cd189433fd5a4501123459fe151
SHA1a609bec82849947e3df632c4b1cdcc3fd80f3028
SHA2564cdf32938bc725188cad3c5328f90e753444e0caf355a18c4ed9a32a80593f4b
SHA512f922a69f14b3a8777b060b6709fd5a87c7f00d9d54d881f1d8247248ba589696e594b19477652a61da1c9a1cab1de8ccd3a84ddf3694381919330008bb27c7e9
-
Filesize
16KB
MD5138dea1a72b76471e2e7e947006d127b
SHA16dd3b2d17aef9a6fd2ea292553c3b7b71638da42
SHA256d5a5dc273e29058ef64f7f8f06e73747c61f9ea7c4782a7b21cdb39c6f6fcea0
SHA512e80a4eb9045fa5d2769a6d52733772fba6dd595308ff5fe72dc9e525870ce3f1140dabe7d6dedaca55d643f2027a906dc03be02af2d88c8df478cbe752bdaf99
-
Filesize
512B
MD5a5362936636bc5b7e2aeb91570c375fb
SHA115c0c4a39fa447d2cac3bb9f7d5c40c62ecc7b7a
SHA256bb0c08026e325c5e577495ed21b643ae984aad6c1fb799511ea49998bec3905c
SHA512dddc235af619e2ddb82ccb9fa1ed6d5030ebf4277c7aae5a6f3567d8bf899b1c1195f25d782cc8f12902ea8cda7c0a22cbd19f65b5ce2cc10beacf1516096cf4
-
Filesize
8KB
MD5e82f9973dadf1f64d703071bb839ee65
SHA13ba99309985e6efc27b26d118a32bd474616fa30
SHA2561d2bd5a1da5447032a0987ef807cc03f8ff17c1392243a8d78dbb05eedc4d890
SHA51284ebf3d58d0a41cbe68fef5482d87409d3ca1431e6e2f265a928c878d27b70bf89ff0398dff748b6f18c05cb620d0ae602d053bb74a1b7197026f5bc6a5926e7
-
Filesize
4KB
MD5669c1c92963aed9438917ebfe18ec4ca
SHA17b296776eab6a890d6f5ca27586501af3b3fdf95
SHA2567a1d82398ee0a520365a533d27a67c5041e65d3249e6adadeb484724d16257c2
SHA51272ec230defb272f5f9143c886fbfb006169eed5ef0382d01154e5d8c5a310b29fd7dbcd03cf6ac6256bf1f025a397eb8e5dd458b829775007431078d68aa71d0
-
Filesize
8KB
MD53f2ef490319496e0bcc331fc489fb73e
SHA12f763274a419eaf30946d6e842b6d1cd95c3ea18
SHA25673a4385afa866c3a4a8c722569ead3e959ae981a56392159e104add83c1dde69
SHA512280b5ab54d3c2e78224adfc716f4b736a0854ffc1c3f15c758f13497d429908e32c49ed5e79a53f48f637484c9e4de42e2b4c7eb8feb8d9ca7209a4c2bca7c4b
-
Filesize
8KB
MD560c44a62345bc3d4059b38235a5d8f01
SHA1f7638a09c21027fb8fabd42fa8b2b6490ce08353
SHA256f8267946aa3a22d458203b790e0b219395b430117e4231d0d542338a216725f5
SHA5128b7e4064e6c391cc9ab028661140f909a9636a818a1259a11ad45a3b7836420d7627e14cfa48101fa7bf8414baa2a48428f3f9e89893be562cd0bb0f04a1cdb6
-
Filesize
1KB
MD5c91060a1d4d1d8cfe8ce0adcfd7f5317
SHA1e91d58338f6885e4ce329726bfaea6d98a2937c9
SHA256f657f84a54a3e823c2dca1fe3831cf2ce49398c10554ebf72100321b7b7f7afc
SHA512109ad815b6b7bf515076f5df24613a7a9902385b65d7b47f2cedfa0bbaca0ef5f677d4b35cc05f0ce8ec121547b18600af69742b96bcb746263796b64f7ac8af
-
Filesize
2KB
MD5477383024814479845712605568a3761
SHA19f758c22396a57bfee2093f9c36c2cce40c98424
SHA2560b2ead202c01d9ae14dd76be9301c57ae6d7e4ef49869e0723f12d6bcf38b912
SHA51297a11b2a22c61055d1df7b15c958ae788ebab4a16bd1e617da81f8b35bde9d56003b8cc85d9a1fccfb75bacc0f150089d0c765b2521b8db034451757940336c5
-
Filesize
719B
MD50bb8aa5a3510fb98f74a7eb6f9c2d3a5
SHA157c61988738af76f1feb1a9f53cc86558a1883db
SHA25605a7be94c1197782ff06ed4ccc31625efa90dd1e1983b29ee9295101d8872105
SHA512a3075427c33ec3d9f1f971ef540b3eba56a2c298912d02c8d447d8218acb94944ea5db58fed13988edd11847e9972d76884d294567e33fc05e0e313e750a7684
-
Filesize
884B
MD5dad84ac9f386f3ccf07e4834f5b19355
SHA125c11358a51cf723ac67839297d00b6a8868c77a
SHA2565e5b3c030c5469de14cb6f9687b7c003aa8216660c0f03035f2ab9e2e71ea09b
SHA512c34565c19ed20d7b3e9f102eeb93e2a2d88322a800aaac0312f3fa70ac71efb47e32097df9f9188d50df13074a8cba614a57bfb277efc8f711020079cf024a18
-
Filesize
1KB
MD54262ca4487ba649cc1a9edc24ccc8a62
SHA1eadaab53ea9792c3e94c5edc7794a08376eeb672
SHA256afa4a22f320ae1da2ed9fb5ed8abcfe193d5afcf37b40710b807b9a0e6f7e70f
SHA512a02694b98bc80e46ef2d31f47e62c43b8c7da04b16af7ef8af4efcc2c8b8b72381347aaa7e6fd54af1e46dfcff2d52f10f9fc2e5c39353041007b3e18e955c55
-
/data/data/com.sportsmasaladev.livenettvapp/oat/x86_64/[email protected]
Filesize548B
MD57653b1c95107e49480a72b5dcbdf8a19
SHA122850ef35986792daa2d56eac398cba774db8782
SHA256e68639fad0ae2c1ecfe79576cc2a19190190fe3e4f08c195476b8b8722f9a755
SHA51261ab1756bd2b1dfb2688950a2266c593bab8f2eb31855b04c7b4f0fe62e929bc17ec2712fd68ad590c21d09251bd78a369d3ff267eb2a699924058a75968a416
-
/data/user/0/com.sportsmasaladev.livenettvapp/[email protected]
Filesize3.2MB
MD569cf159b893eefff9a8106cc3ee37e03
SHA1165207adfe8c6047ce9f3dd38aed50796c1660d1
SHA25626fb1a790377e11135bf8bfa7552cc2797d351df60154ea032ceeb4463776fdf
SHA512379960366739517c1c856834227aaa1a30a20a9bab730d4229f200192f2c643b69a3e2e114dbdd743a69577e0b7b477c0d14e71c31ee491e137ec405f79e71aa