Analysis

  • max time kernel
    47s
  • max time network
    157s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    28/08/2024, 22:06

General

  • Target

    f8e8b7e2ea22f679623abdfd88434e03e653cc1124e067489dff0c28705d4bd9.apk

  • Size

    1.7MB

  • MD5

    6126d217443289d4d71596c0e55aecab

  • SHA1

    a2372df50c4c9474b559bd3b983997c2b4479194

  • SHA256

    f8e8b7e2ea22f679623abdfd88434e03e653cc1124e067489dff0c28705d4bd9

  • SHA512

    8fca3e2f6886319153b7d08f51c61eb77677a8d7e2f1f3af6df82582dedf20621103dcd2a52a0ddfa6630c3f39010c705ff3557f46188fec062e195f1f6a7c00

  • SSDEEP

    24576:9vSBkfh+Jk962IE6B8hK+vru46AVETBk6gkqHrJlgqn:njHK+vh6GE66gDHrJKqn

Malware Config

Signatures

Processes

  • com.deepfack.news
    1⤵
    • Obtains sensitive information copied to the device clipboard
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Checks CPU information
    • Checks memory information
    PID:5063

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.deepfack.news/files/profileInstalled

    Filesize

    24B

    MD5

    e11996ef2c32016f1dda96a87ad3a14e

    SHA1

    6c233e5d20993ca9fc5946bcdba937fc89c388a1

    SHA256

    f92c321dab8c9cb9c71de626019a0a5f4dbfb0aa67dbd59e68ff5955c073d8ea

    SHA512

    08663da5048894b69b3101a23b2ab9b73c1962767d6abdd100cc3d193d5e28fca4204d1946ffbc445438a36d3ed4fbf1c9bbcf00b75dfcf8044b0c7326e41936

  • /data/data/com.deepfack.news/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

    Filesize

    8B

    MD5

    f348cadf9cfabde7639d0291e2e9bd11

    SHA1

    9bdac11b23452a271c86163d557bb81b3e969d20

    SHA256

    90bba67d636ae550df4ec35a687e168bb100ceae615f4508824ad996c96744ad

    SHA512

    2e90d26683f8b956e10f075f3ca25b04af5ab4d5a937825833c0ae091a82d753c496c86bee30b7b7b6a0475a759166efbec3e331d587235ec117d968f99bfabf

  • /data/misc/profiles/cur/0/com.deepfack.news/primary.prof

    Filesize

    1KB

    MD5

    c38c80810f3c4b71ee35ff3f398e94cb

    SHA1

    fd8f96d8e8f0f8de6f323cb9ce79bbc04882ba47

    SHA256

    9017cd4271507c306e9961c85717ee625d21262eddeeb31614e39c2093a5243f

    SHA512

    08fd02aea7ad9b0111a221c360e50a76d103f358300df35b328d37254888d2baec149170effd760ef5a77a25e3161e458b2e7c6ce105ba98737299d8081502e9

  • /data/misc/profiles/cur/0/com.deepfack.news/primary.prof

    Filesize

    1KB

    MD5

    62dc3f7a732116fc585fc305bd2a6653

    SHA1

    78a1ef1da21a39a5ba2c6c3c9a0ad67d5959897d

    SHA256

    6c586668b1ee538ba1db069dda7bd6734447cc76c1ecb0f09f8a803156f11634

    SHA512

    551a0593d21dae86d7e59ad05118e0c2dd5a35972d06b823248ddf4696aab9749fd70b4264e92047567d343b86c32f42f4759176593b4ff99db36c7412754d7e