a1647fd5225a321a2fd16e3a08cc2b4bfed6e645ccc1ab3d854d5ecd9bc3b633

Analysis

max time kernel
85s
max time network
189s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
16/08/2024, 01:18

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a1647fd5225a321a2fd16e3a08cc2b4bfed6e645ccc1ab3d854d5ecd9bc3b633.apk
Size

11.9MB
MD5

f2cc29dad8d228009d8ba0427e80d862
SHA1

67833d6b9da1dadd22e523ecd7057e52fa8dcdd0
SHA256

a1647fd5225a321a2fd16e3a08cc2b4bfed6e645ccc1ab3d854d5ecd9bc3b633
SHA512

7e6d3c37672c23cd3512fb951e3c184aebf5e6ea99eaafaf6f33731f9dafd9fa953556fd453b2abd5a5a368ba999d30e3fcd1aa952fc48670a8fd38c480c1d51
SSDEEP

196608:BV1DluXHrLs5k01rFQRRwanrEheTOFoxSMh6D/OkuJ0Dt0L+4zFzSvu4+9Coq12N:BLDoXLLs57rFUyeqFQ9eOkuJQtuh5F4C

Score

8^/10

collection discovery evasion persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 8 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/bin/su	com.sportsmasaladev.livenettvapp
/system/bin/failsafe/su	com.sportsmasaladev.livenettvapp
/system/sd/xbin/su	com.sportsmasaladev.livenettvapp
/system/xbin/su	com.sportsmasaladev.livenettvapp
/data/local/su	com.sportsmasaladev.livenettvapp
/data/local/bin/su	com.sportsmasaladev.livenettvapp
/data/local/xbin/su	com.sportsmasaladev.livenettvapp
/sbin/su	com.sportsmasaladev.livenettvapp

Checks known Qemu pipes. 1 TTPs 2 IoCs

Checks for known pipes used by the Android emulator to communicate with the host.

evasion

System Checks

T1633.001

ioc	Process
/dev/socket/qemud	com.sportsmasaladev.livenettvapp
/dev/qemu_pipe	com.sportsmasaladev.livenettvapp

Loads dropped Dex/Jar 1 TTPs 2 IoCs

Runs executable file dropped to the device during analysis.

evasion

Download New Code at Runtime

T1407

ioc	pid	Process
/data/user/0/com.sportsmasaladev.livenettvapp/files/audience_network.dex	5001	com.sportsmasaladev.livenettvapp
/data/user/0/com.sportsmasaladev.livenettvapp/files/audience_network.dex	5001	com.sportsmasaladev.livenettvapp

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.sportsmasaladev.livenettvapp

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.sportsmasaladev.livenettvapp

Requests cell location 1 TTPs 1 IoCs

Uses Android APIs to to get current cell information.

collection discovery

Location Tracking

T1430

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getAllCellInfo	com.sportsmasaladev.livenettvapp

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.sportsmasaladev.livenettvapp

Checks CPU information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/cpuinfo	com.sportsmasaladev.livenettvapp

com.sportsmasaladev.livenettvapp
1⤵
- Checks if the Android device is rooted.
- Checks known Qemu pipes.
- Loads dropped Dex/Jar
- Queries information about running processes on the device
- Queries information about active data network
- Requests cell location
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
PID:5001

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Download New Code at Runtime

T1407

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

Location Tracking

T1430

Process Discovery

T1424

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Location Tracking

T1430

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.sportsmasaladev.livenettvapp/databases/StartApp-d6864f2502af7851

Filesize
16KB

MD5
84c1bee45d30aec6b9c50a221c6a28e9

SHA1
c2f0f5c92ed4db47e0c16b7bc3e35f1f29376f51

SHA256
4f28e90d0edddc90f9dac23a3329bd463b1c0a16d11514918c56b6505ebb1a98

SHA512
03d5f523637c42a8ac96b98a4dc4e188d218d7e6df2dec0a6d1a6bb5b305bda66553433f741d3f8f48ed8861e3ba072f742c5c93baac10851dfb1733dde8c8aa

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/StartApp-d6864f2502af7851-journal

Filesize
8KB

MD5
113f7ae4061cbb4bfd1571be704459d2

SHA1
99426fb2589e9ba34fb610c1e9dbf0d8482aa721

SHA256
faa8048cf510c684b593a546c195d6c2bbca7f073e7babe7adaaf0430bbed8e0

SHA512
72a1e57433e9f00ca6b02fc361e622e2f6ba09f04419fe584732944fdc72621dc1bfe1bf471231f2db4a0f874ce53dbf8136516495a602ba7c63466914d302ca

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/StartApp-d6864f2502af7851-journal

Filesize
8KB

MD5
dbfac2a8b9c060c464c58a58fa6b2195

SHA1
7a6f7f87913622c9e473036336573cf8f6fa25dd

SHA256
9791a5e0e82d3fbe7aaeea7d9f251e30213fcc484182949449d9bb5df0961289

SHA512
e34e739c67357d8d5c5363e5068b64b3db01793f99247ef372999d2095c97ca91789e620044f9c8c598313c19ac8de879ab68504c630a4a25ed7e87d063f42e0

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/StartApp-d6864f2502af7851-journal

Filesize
8KB

MD5
31c10cd300fb3e2c92fdd37b444e1817

SHA1
60dc3f4e4e77edaa70689591a49f07b40a05012d

SHA256
fef0313445c2ff49c073ffdddad58bb8451c4e5a4c147305d8ee6bee08e291fc

SHA512
9c44acafe2268bd166daaf958120c530998cfd4e268e82b28152348723f443af00679bbd303e003e1c1f3deb4c08a1aa7ff71e9450b045224035515049792180

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/StartApp-d6864f2502af7851-journal

Filesize
512B

MD5
9eedb41bc7d44b7eab45fc2aa720c5d9

SHA1
0a7b6c4c9674e7ea3f59bb0840f141bc824de05a

SHA256
067d2930960f58be287b51391e740b60966e05932cd097257f5d112d044dd65f

SHA512
c9b98d35afca34f6a0f84796e8fc8cc5d04e9c6b5c1af615dfcf5046b484ec6212e6c0e9c481c690697fe95f55b8f34c6e0c05710cfe5d38f427a1c2b41df808

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/StartApp-d6864f2502af7851-journal

Filesize
8KB

MD5
7304d6037164f7e20faaef32c4f1b8df

SHA1
abae93e7e4058f36aaa6e77e4478de3e1d8f5064

SHA256
a7c36ac2624aba90cf257a39e914009f43521ac7e3a21fd4d611997c180986c4

SHA512
57c0e08ee8c334f89a6b7f3805f51093c5edb1ee1dd2a1b6191547281d13c168349110d27143bc1e677098eb5a8723dea69082ceeb4bfb335e4b1af0fd789638

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/StartApp-d6864f2502af7851-journal

Filesize
8KB

MD5
21c0aa236965c8d0380684d7ad03d014

SHA1
e163c7c494c02f51ba3345a6bc090f9e80e34a3f

SHA256
a22cc29d0908d186b1739fe4e11e1d37141b71e98dd33a2b597c2b3831378ca3

SHA512
8de2fb182834f3eb18b80ea88d654859a241700cf2a945cfeac40aa83a4db34c564c8fe98238503d49c80d5870edfbbd26b02c58da287d31be57c448f5a1a18e

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/androidx.work.workdb-journal

Filesize
512B

MD5
b83f48bfea05076a10cf41f25bf662ba

SHA1
66ea1bff6bdb38eae1a54960e21f7ee5f6b6d530

SHA256
e87f41128297b1186fefe204430d8ab0d2a58a5fd849ee5d88f19874c2398552

SHA512
b99066b2ba970d36d9069e2bc6e5bb09e22e6c9c65d047b55d19a9e308b31f2dcd214e693fa2e231ee215c8fc85772771e0d55d85d32abbf72e63be7ff3225f1

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/androidx.work.workdb-wal

Filesize
88KB

MD5
5eb1373fa046b736f926893771d85a87

SHA1
14c581266901df90be76162ffa0d0ffb7da30980

SHA256
16d8b48bc6b6ba439822a42f98fbe6a81fca8961108af630ed8317086d1de841

SHA512
762685194d5ee1ff4486a616a3d970a0229d014c7fea84c4629cc80257a1366c2c1019c7e18876f60f92bbb171b3acc3c3fd1d4c958a838205bef6b39e494088

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/androidx.work.workdb-wal

Filesize
16KB

MD5
6b08f123a0ca2fe0f391bdddc20b7f4e

SHA1
71a5ae50c3bb16b181166a5fb2ea72c77e9488ba

SHA256
1284699726a2383c17d118941ce403112ad405341461ffede8f966ed682260e6

SHA512
489ffdcb866547f4bd6928c861613cec9d95dff67cbc72f6c422dd061cf75371354fd3d5a734496a5dd9358ccd4f36b06b36afd27d21aaf1aff4d0d0a84bf4ab

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/google_app_measurement_local.db

Filesize
16KB

MD5
c37b04e1c5341ba6ea283ba0f7964664

SHA1
c13868849b1b85de3232d5677ab62908bcf94897

SHA256
93847d79b16e79b0c497c2b33803e2e2eea12b2ca86c6e9e1c0a24918ada71de

SHA512
69f56aadf8e8b731431f535a09500f18c73a734905b0c3baa86e1f03cc1efbc98aff04339dea8fd672025c9eeed759c8d4f945e2d3b2e4e779daa5c054ce9392

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
bbd83a71811721214616b00d0c8507f4

SHA1
0550f2a840e5f42e7b4ed5267e28948d74502498

SHA256
8a056c6cbd79ae0589f4525789e2e0904b5f349e6aac4f1951673c3d6d41f7ac

SHA512
207119fc2b25098ca3238dcb9b5f98a16330ec87643ee71f3f467f593cc0c8ffa2ab67714eb3d7a62349492fefbc146e8195c056cbf07fd4c05f7759d4806fdd

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
b4dab5ef58f762145dc5be5e35104589

SHA1
5a039266c4366caa411ba5e4b83b3bd3ad968b87

SHA256
4dc8df5f15e509f04905f38870bc235257159ee89a2afc3c5216faef271b4a59

SHA512
c15f22abd6d81c13f5af8e1ecb001827fa9c53a2125ba5fe6a2860f37a429985abdad0f717f4c28d77f087c0d12b1e88d53564d226d19cfd45480c64515695b5

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
b6b6021b97ba9042a1b32ca4bc7b9cbe

SHA1
580fb0c946500e4032092cdf919c01eb501afa20

SHA256
e361d00ae96d905177c944958abd0265de0ec92303795a39a4a4b93f12cbfed8

SHA512
573d20e1ac005e241e91405c1454be4556da6ac742d2cb326b5adecc217b1a0a467d8fb0221083396ae8a18db6ea462eef8e93cb285a8bc84399803faba0bdcc

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
1e3d3b9594004a33da723aee0e76ddb9

SHA1
cd7f5da1d906edd5c03c8eeedd7439a21e5ebd19

SHA256
2983c72738540d8694f6ea421d2e5f16182bc05cf889663a90ed2eab85832118

SHA512
98525e40afd6fc318b95858ee00bbfd5b10fb045d54602a90136f2fc79d46979915c8e649bc96d41f97dea9d0d9ceddd9f3a77842432ec2084266368da64e745

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
a6303ff8b4035d65fc0bfb9533d778ef

SHA1
2c611a34d20e5b3b45b5228d6ecb6e905633a3c9

SHA256
f5b7926084a267d8e1cacf272ff7ea37958550e612fbed721d7c36ae0338e525

SHA512
e17daa18af84c75485b848a89a56283db89d1fa175d704d59fb503b541367bff1f56b0a822f7514091655141d9683748db0145e67b79999eab7df2278328ec5d

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/files/StartappAdInfoMetadata

Filesize
1KB

MD5
962030f640382dc432d211a315da9373

SHA1
dd9e092305f39efc4cfbcd8a073d359874ba92f3

SHA256
a95a7b36fc40b925a3602b1c2f1762d697582b16bbccf9c5d34e77300fc115dd

SHA512
a93049f659dfd420e955e147dc05b55e4e98fa7e19b6ea45213adce785514cf7953a7dd1b4dab46d2a0c8018d5226490c9fa1e452262a32aca7c0c31bfc2c060

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/files/StartappAdsMetadata

Filesize
2KB

MD5
477383024814479845712605568a3761

SHA1
9f758c22396a57bfee2093f9c36c2cce40c98424

SHA256
0b2ead202c01d9ae14dd76be9301c57ae6d7e4ef49869e0723f12d6bcf38b912

SHA512
97a11b2a22c61055d1df7b15c958ae788ebab4a16bd1e617da81f8b35bde9d56003b8cc85d9a1fccfb75bacc0f150089d0c765b2521b8db034451757940336c5

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/files/StartappBannerMetadata

Filesize
719B

MD5
0bb8aa5a3510fb98f74a7eb6f9c2d3a5

SHA1
57c61988738af76f1feb1a9f53cc86558a1883db

SHA256
05a7be94c1197782ff06ed4ccc31625efa90dd1e1983b29ee9295101d8872105

SHA512
a3075427c33ec3d9f1f971ef540b3eba56a2c298912d02c8d447d8218acb94944ea5db58fed13988edd11847e9972d76884d294567e33fc05e0e313e750a7684

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/files/StartappCacheMetadata

Filesize
884B

MD5
dad84ac9f386f3ccf07e4834f5b19355

SHA1
25c11358a51cf723ac67839297d00b6a8868c77a

SHA256
5e5b3c030c5469de14cb6f9687b7c003aa8216660c0f03035f2ab9e2e71ea09b

SHA512
c34565c19ed20d7b3e9f102eeb93e2a2d88322a800aaac0312f3fa70ac71efb47e32097df9f9188d50df13074a8cba614a57bfb277efc8f711020079cf024a18

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/files/StartappSplashMetadata

Filesize
1KB

MD5
4262ca4487ba649cc1a9edc24ccc8a62

SHA1
eadaab53ea9792c3e94c5edc7794a08376eeb672

SHA256
afa4a22f320ae1da2ed9fb5ed8abcfe193d5afcf37b40710b807b9a0e6f7e70f

SHA512
a02694b98bc80e46ef2d31f47e62c43b8c7da04b16af7ef8af4efcc2c8b8b72381347aaa7e6fd54af1e46dfcff2d52f10f9fc2e5c39353041007b3e18e955c55

Download Submit
/data/data/com.sportsmasaladev.livenettvapp/files/audience_network.dex

Filesize
3.2MB

MD5
69cf159b893eefff9a8106cc3ee37e03

SHA1
165207adfe8c6047ce9f3dd38aed50796c1660d1

SHA256
26fb1a790377e11135bf8bfa7552cc2797d351df60154ea032ceeb4463776fdf

SHA512
379960366739517c1c856834227aaa1a30a20a9bab730d4229f200192f2c643b69a3e2e114dbdd743a69577e0b7b477c0d14e71c31ee491e137ec405f79e71aa

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads