Analysis
-
max time kernel
87s -
max time network
155s -
platform
android_x86 -
resource
android-x86-arm-20240624-es -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-eslocale:es-esos:android-9-x86system -
submitted
28-08-2024 17:40
Static task
static1
Behavioral task
behavioral1
Sample
Crunchyroll v3.58.1 (PREMIUM).apk
Resource
android-x86-arm-20240624-es
General
-
Target
Crunchyroll v3.58.1 (PREMIUM).apk
-
Size
17.3MB
-
MD5
af130e5c035618cafa8398724f7f5a2f
-
SHA1
6d2c12b2e01564b031fdd95c6df5a4010e9548c0
-
SHA256
deb2bc28f86b83ad8bb50c87c09abbabae2df7f14e9959b9c8cd296e0551e349
-
SHA512
5822a5afcdb7c67b57c99b7414287b049d71f144dbe646fb3261f903321dac925422aa3fc52900d6d041016e83aa3c41d61f0717609793c9d2b138f7e5df50c2
-
SSDEEP
196608:jkahSmZ7tMmZixfNcNwek5+I+YnOMYWLUJrjGkKilmiNVA5r9XN/u7fz:jkahSKnZevh+frH/lJc5r9dC
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
ioc Process /system/app/Superuser.apk com.anilab.android /system/xbin/su com.anilab.android -
Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.anilab.android -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.anilab.android -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.anilab.android -
Reads information about phone network operator. 1 TTPs
-
Checks the presence of a debugger
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.anilab.android -
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.anilab.android -
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.anilab.android
Processes
-
com.anilab.android1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:4239
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5c4b5f52928fc4cb7f5ccbcf11b4616d8
SHA1fc9d70a0cdf2a53bb87ba68942da62fee411adcc
SHA256c33ecc00c3bb5b0ccb196f3c6830a0fa54ddf4b5adc6a36697c2ba317fa49746
SHA5122ed52f02c0feced18dd3b282dc140d3fc75504f8f79ce8114857c785e840e5edc8554a39cb3ef54a0a193f0a74c593b9984c08be49652e6f59caf057b982b9a2
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
140KB
MD597bce07f3786de06479f87c6b75f01e2
SHA1a3e7e39f2766ded61d0d8774c423fb93b69d0b5a
SHA256d76c42ba047c981f1e5e5eb59219a8683698bebeb3295462f7648b1c22e329c5
SHA5128a6462123dd37f5e8ec958df67e51d123d6e0bdf1ffd6a22d09e0871ed81b91f290ef2503c767da471368ff3bc757311897c25a1195c497ccc27ae405ccca906
-
Filesize
16KB
MD57237409e0640cfab7bdbd429bf821a3b
SHA14c3da934842f8d4835dfe2a9c275a300e5123309
SHA2565c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
-
Filesize
16KB
MD5e8bb9dabb444c2ff4e7e449b2996eb45
SHA1504e592d9da4e5c4c537eac0dc179435791aab00
SHA256eef5507cd1a9f535266cfa5e6e9150534feeced459956b758551195251944e87
SHA512cc5e50e21198493cbaabaeec67d0de039a730273ff322cf763b84f5f260e05e8486e1ffdff15d0d65aa282d20ebf6344b204b77677b7f0a5ad1f1480d01faa97
-
Filesize
16KB
MD5abcbdbf6dd3a02f684492d42b58dd8ff
SHA1670888a5ad3ab80748db2b4c1cfee91a9fef74d5
SHA25631094874ca2e5d29c5b96c1181addb8c3bd9e6a9e049b9e0f3a3928c28b40a59
SHA5120dd3fe8a6691b454d3be31810148298ac6309c30c9a0d38eeb7aaf3a9bc18f869cf3d3cf39464e9a25f6ab00747a0f95dd44e5ac8fc7b1264c1d39d069a76885
-
Filesize
16KB
MD5df632a12d8e3e43ee0e5e86920b60a0e
SHA18bb90ad71dc711aa1ce2c8bf0c4fa94d8903b373
SHA256d6c390fffb7a5d0d18ef6dec5652b026c275f4039f5c5e5857e8be2be8f50018
SHA512de2aea09359546a4ad979d063460a1f8fac44bbc33347a105e78d6d2a2bb42b92e805e2ab065cc3989a0827d1affdf7a3c7654f5b116faaf6a2a07bf8f2da88f
-
Filesize
16KB
MD51857abb6f7c6738f0d4702927a184a49
SHA1c9943476f42c0c47baddc23a4aab2d003e81c20a
SHA2563bc400d7fd188a647bbad686f5c91aec0ba83f37d027c023e5f2ec18c9f173b9
SHA512c9454d1aeb0a8ee86cfdb7989a3f1506eed35b3e97ce537f6e2e995a4fdbe5f0fc083a47bdd64a5f555fd14964593888a9149502553052907669e0cf748685f5
-
Filesize
16KB
MD544693692da738db6eb133cf0e4cde91b
SHA1e6bda56494c325d8d37ad89552263ae85d9b0550
SHA2568fe0ac9db76d4a2dcd3b3d54c0efedcd223e25aabf716506493d50e243a7a2d4
SHA512b34ddfe1ae343b1b12f7029ae476a0ba8e1b4043ccb520afb412b3f71335ef679bf29723c9a5c00af7e922e9982d5b3af54b2ed779da8cb601f378e5b9d26be5
-
Filesize
512B
MD59064c5043545cd54c59a4568989cceed
SHA173bc74bfbdc3af825d00c325ee8b343a68e229b5
SHA256dbdcc2cc8782c818aea2f527044f776d89f2bd05fd0e1615319a11d57ef721f1
SHA5120629e1619d54db47a48a7617433496c2b63e7b272186425c2c1e058d1ec7256723993a91d97f095a22dc10ac8d0fafba0c5f79498cde823fd0f285bb75b93af5
-
Filesize
36KB
MD5fac0eb0fa2f1cabd10fc4359484583f9
SHA1ae3b161e45b05cdefcbe888ea36da3412c067f50
SHA2564e0ad07e07ea4bbb4f50b98d29f4548337aa7ee120dcedafb7105d5680beba89
SHA512a4a42842236f357560b620ef3a76c875db13e24348e37a7496c95fb1d65fa711b9dfaa2548e7d4e12e5c5151d0e8360af17b329b02f8fe48b00315ba291bb50f
-
Filesize
4KB
MD5281e3df9756729a3f2f793aceb159106
SHA1436bf3285e735871729a59732413f022de9ec0bc
SHA256eeeb48a37b416bd8cea7f4f99d072a2031a9bcaa71f911ea8ce43b7d0e3768d9
SHA512cce09e00e6d82e7a437aaf0ebb7487498f745fb74dc20b3e194638544af1eeb2e91bab28db0f59d57e7c99e951a78ff9e34e9d1b9336299dc4c42136d204a298
-
Filesize
4KB
MD50eff5f9a86973f704c75045afa37642c
SHA1c1c9d89135077be92ae71eba7b36b10bfac32258
SHA2560d46704a2e9192c431b8fb0c1a2737e6401579b55de34152674976cde8240969
SHA5127875a528a3ea116e24b427ae5eb7d099e165cb3f3723c9a630af5fcd08adda13d9a058158c03dbbcf3a4be6d1c5f4b149bbb58c73f56dcc4bb7146afd81461ae
-
Filesize
8KB
MD5185b35df920d34c7a831fb682223991d
SHA14b3285f6cd97901b6cd375ac247b8d1a1c4b7f49
SHA256750851332a614ae9cda723b48ec12408e93e8644281291f0a133bb3918817cf7
SHA5127f1189049acb09133204dc3ba74c597c320a4ec0a7546441369f0c68feda50d94a48783b744959eb569865afd4cac38d76801d334109e350d7b3afb70e530ddf
-
Filesize
4KB
MD5f33bcf53ee92279ed6c316e0b77aecc7
SHA10b53bd65d9e074635683a4721f7bcd038a4c9e82
SHA2568538c55c986176f727a5f563188a07d412953e4d38fe227018b70bab5de01e7d
SHA512b2c86be29a80288667c936aa564062ff6b3a8ec913ab30929b0ac097c97551b16fcead751323d956f9c7f85070dd3b5513ec236887930cd90259898f85199d98
-
Filesize
4KB
MD50c1f1014066abaf816d79509c1bd0a1b
SHA12d73e3e16bc1904aba73e467c360c63edb47e468
SHA2567f1102ea511f06b70c856b9c02cf49ed3eb524539ae5b866c417ae731c014c95
SHA51204b63097a07a953ba3e74b2cca3ffe04d4558ff0460f998c97e02ada8a47369c3452796df3ccb8d0ad01293271568e4688c0be7570522e3627bd52b73439a21f
-
/data/data/com.anilab.android/files/.com.google.firebase.crashlytics.files.v2:com.anilab.android/com.crashlytics.settings.json
Filesize714B
MD5c9ebe58ac9ba1bb4aeb2d07ca6a82b1b
SHA1409b332fc54614d512bf92cbaba70907e6a7ff22
SHA25646b37c7f52fb6976d84d33d0abb1d891a9436b58a23fe8e9af73e4ca737e21d4
SHA512b52e90e87aa08b028211cbf4c868e85e4dfebd51a9530555b89b1abbf15965981621bc359158e6526986d3ecea14c87d882b1b8690441d6a3758c3d2091e4237
-
/data/data/com.anilab.android/files/.com.google.firebase.crashlytics.files.v2:com.anilab.android/open-sessions/66CF615800A90001108FBFC6CEC01DE4/keys
Filesize27B
MD5026d4f398c10c7f2e524188821c53ef3
SHA1b22302e6e4e53b33d76f47afb1a94ccc5c63385b
SHA2567c6e294cfd7b731f579ed3274282331053d7ade4dc276f5c63cf20a67cad96b1
SHA51243894da81b9f9edcf1db8fde9579a2a836501368532b1043b171c8078fe885fe953ee5336bdf6561829d5ec4044c6e084bbdc4aa03f8a5d2c6f7bf400907415b
-
/data/data/com.anilab.android/files/.com.google.firebase.crashlytics.files.v2:com.anilab.android/open-sessions/66CF615800A90001108FBFC6CEC01DE4/keys
Filesize37B
MD588d2ffe495317d86f14c280d3ec14823
SHA1a382d01732bffd7810500b1bd5c91465b39e6733
SHA256aba53b5aac52e729d400d7ff51416bc0af5589e4dae9c6b07650e14f9213a5cf
SHA5124167dff4ed1e3425f323440884e1ffd42a19ce6b2ca8cacbe58e16695f3e94fdd1fd872207c1141cd9255c36b210b74093fe0d8cc0f652a3f565508ec12b3129
-
/data/data/com.anilab.android/files/.com.google.firebase.crashlytics.files.v2:com.anilab.android/open-sessions/66CF615800A90001108FBFC6CEC01DE4/report
Filesize795B
MD5c1ccf63cf8ae05e29f881cd8815abf21
SHA1cc485de5e313f06345ed8c1457e4f69702e600c8
SHA2567047da823cee4d2ccae151c12c44330c4cde4ccc8959908910652b6c3863b976
SHA512b9446821946a941a289c8e4dae3ba60121267f52de7921f2af9ab491d09103b3aa8f50c189c1b0981fc448a79247663bb2500e1edd67ac316983bfe670df42b9
-
/data/data/com.anilab.android/files/.com.google.firebase.crashlytics.files.v2:com.anilab.android/open-sessions/66CF615800A90001108FBFC6CEC01DE4/userlog
Filesize190B
MD5824f6cafa092c0813346839ce2ea7f9f
SHA178896586eb84c79321fdf35af6af5355d4e26fe7
SHA256e833ba0737e50dca6b7cace9d670d95a0bd18597a7ebe124615f68f28d936a7b
SHA5121ab4a0657522be56160fd42908961ab85c8cc2ed10d1c2dc94650bd2c0d04ac9160c8bbf6a43cc90a35fcbd882bf36fb3652550853be1486c18e32d6510ad414
-
/data/data/com.anilab.android/files/.com.google.firebase.crashlytics.files.v2:com.anilab.android/open-sessions/66CF615800A90001108FBFC6CEC01DE4/userlog.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
Filesize
570B
MD56331ef5d87ea7b1f48e4cdbdbfba3144
SHA1eee597e3a10a8ce60a96f7692a64276fdeebb271
SHA2563b530d0320b2d9c52f8bbbad47fce04bf2debfe41fe7371d4cc55ddbdfa3ff05
SHA512061d28b0197109a12379e3b9b230228f5bd13d5b9612f5a8f0244bdd7a1de7a1262214ae3a69bba2a5de967ae1af7f7e45bda411e0eb2f96741c367911810a7d
-
Filesize
90B
MD565692186d261a89edad491fd68ee2ecc
SHA1c756f219a6c8ae9606f92637cac1b176758b006f
SHA2563f0c12ac734fd012c74b4d16fd897917f98cd4c8cb7b7d5915c76a32f96237a4
SHA51240fa640390cfc854be4b00616f696180acbf5f4f1440cd850186bfdf585b7601b0bf68cf9b222b3a75b206ba6292866a65a9d05708194f344646db154a507e89
-
/data/data/com.anilab.android/files/datastore/firebase_session_Y29tLmFuaWxhYi5hbmRyb2lk_data.preferences_pb.tmp
Filesize50B
MD5704a6f383eb9418ce15d2e8f9d709aec
SHA1088b8eeb3e9090e4644d08abc1fc1ebe6e18637f
SHA256a95e54ba86bc669755153f525df3736bc7a4435d0abeba48ca92468876b2484c
SHA5121f6cf9ca01799b486d16f491ea8ef897fbaab35b8940d9846a643fd8910cf2b38bb74e989e9f5f9212eb55d1765d7e64422194b3a6e70fd789d169301fd85764
-
/data/data/com.anilab.android/files/datastore/firebase_session_Y29tLmFuaWxhYi5hbmRyb2lk_settings.preferences_pb.tmp
Filesize33B
MD5a65b9b3e4670dc3b48a9609f816ad531
SHA1682a73f2c248815fba0cb50c45031a53d6f8dbcf
SHA256a4aaa2a4e0cb12123b405a9d33bdd7edf8cbb41ea92e75deb1ba21bf1db5b2a6
SHA5126c06e6791dd41c1c8d8e0246e9bf7fed81dbdb5e918e7dd78cc2af1f002f8a532ec28335b229a0ec5c1ee220861092cb1a7c7f4060663394e420d80ed391179e
-
/data/data/com.anilab.android/files/datastore/firebase_session_Y29tLmFuaWxhYi5hbmRyb2lk_settings.preferences_pb.tmp
Filesize75B
MD506bd63584cc699cbc92ade3aeab0ac42
SHA1e21167e5419847271e7f67b3b286916b8124165d
SHA2561e58e88b20702d0a80025c1fbacc9ad5fe2565311e2230d581d669fbd7e8b0ef
SHA512675f177e388425023df5e19cda634ab1e7673681feabfa7bb860089105353166491d15b8c86b5408833230dc5b0ac43e2b5a61e1d36ea0b40d6ce7166bfc385e
-
/data/data/com.anilab.android/files/datastore/firebase_session_Y29tLmFuaWxhYi5hbmRyb2lk_settings.preferences_pb.tmp
Filesize121B
MD51fbccf7b936a9b713de5d42c6d8a075d
SHA17c8bbdf9151e7f53e2675329d471e552446e9ad3
SHA256232f9626cbee2e063e25f61a08f46575d019b62f02a6753c1325957a95e1c513
SHA512b9177426b3facda6d86b5a83d05805a4dd2f5357d4979ca7282a13ce3f08ef7e7a0c5922675ada826bde264450b1b4ddcc54eea4de62249fd3eab1ec9acf32cf
-
/data/data/com.anilab.android/files/datastore/firebase_session_Y29tLmFuaWxhYi5hbmRyb2lk_settings.preferences_pb.tmp
Filesize163B
MD514770edbc1290230aebe82f8dcc730a0
SHA1f86874de3ff45c2dd7c982f9ada6b5fc979f082f
SHA2567495b9faf55ff02d0a2906ca3e3f4b356abd96e421815f9d07f893682da6eaf2
SHA512c6be6c93262e0c42527722af20fdd3be2c9936eb601280c36492e0bb2151bb63f88bfb150690ae361c75d01a33647c2440bb49e290af38c5c5af5a707320e3de
-
/data/data/com.anilab.android/files/datastore/firebase_session_Y29tLmFuaWxhYi5hbmRyb2lk_settings.preferences_pb.tmp
Filesize212B
MD56a0a8a413a043ad6e3b719a53fb28d53
SHA1a09d7c91257c5a66f842fc57854ff57405c84bf7
SHA25682e9a4f2447d0837e9b2a01a1e03ce9b265350e06ebb4476e96bec7b3f62aabe
SHA512f2d3726c8b2e8b50b9df08366bcae2c3f3878b1d7b639edf7bcfcd132cb89d58ac3fba12d1b5f9e7d15f0005980f6c8d1f97b063f48509223d09447d6cfb633e
-
/data/data/com.anilab.android/files/frc_1:625497243390:android:9c537d76a9f1b911de6faf_firebase_fetch.json
Filesize352B
MD5789d424ead659d0b908db1eafa3fd524
SHA1c1d5c2926ce40ca572f1625244b05a4a63cc6bf0
SHA256827ffd5039db1c9953afe6d3b3aa2f06828d1ed072b9a574cfbc03ddf2900a55
SHA51225b39846f1f4c13462411b4e8da46a73d7a3de67c0b8a5f8683726aa74a0b5150b1c0074b300c55629fb9a707f4ec9a690874492d1cf15921f0f13f078f019ec
-
Filesize
1B
MD59e688c58a5487b8eaf69c9e1005ad0bf
SHA1c4ea21bb365bbeeaf5f2c654883e56d11e43c44e
SHA256dbc1b4c900ffe48d575b5da5c638040125f65db0fe3e24494b76ea986457d986
SHA512fab848c9b657a853ee37c09cbfdd149d0b3807b191dde9b623ccd95281dd18705b48c89b1503903845bba5753945351fe6b454852760f73529cf01ca8f69dcca
-
Filesize
24B
MD5a515b09a96d26dc0859ff10bf50a2305
SHA17fae11722ab066a20933ed3bbc9f460b0177292d
SHA256ac3746c613c66ade5dfe9fdb76992791a9cdb1df3a5edb7dd129a305fbf9d335
SHA5129b8de696a76bca3f3fa7f3f7e1efe94ee8d3cb53c877df97547a792e37edb8254cbd6384ad8c25727266821f23419fcfcf2d86a43a094c61eb36ea57cf69b193
-
Filesize
8B
MD5e204a184c806ab76a6164005019f4370
SHA1c6e76a37ebde706a44291eb672f1994ccb9c384e
SHA25606eb9890ff7c141ca9521b55a30a9c725d7f53713c6581b34040f7e2fba40bb3
SHA512f7f392d34386ffdd6068abb8dd87b90d1dcd3e19d1dbe7eb108717bb57fd6bc726af0c9e30fdf09f066289de790613b6356f3312ef430fb06892cfa2d5e26ed9
-
Filesize
2KB
MD5f1dbdd9549629d4ac50e7301304211fa
SHA1d48f879f876ef2bfd81639c5d5e995bc768349ef
SHA256636634f2f4883521411087e50f4a69265bddeca801b3b81c01ba622c04e90b13
SHA5127b9ebce43e6c4222ca2295907bdaffba297c1d7ebceeae1b76da68ce41e26644b0047a6eb1bf9acf73d3c2cb3f2d076acead4aee7532daf5d9d3e9e740dd2ce1
-
Filesize
9KB
MD584fec0545beeaa8cbd015f2b93607f28
SHA12f4380d59fb2ce629203cefa8da100e4ff12aa60
SHA256c9935748ad45253d28bd15f26333d0ac101f2b4adbe1313bbda9113fb08d6a85
SHA51225ad432e9bd52a205012aa3451ecc1e6b8eebc5952964343e3f9a765c8e16ee705fcda23c50260f26d2b62c51adc71b1518ae294c0f90ffe7d07c766532b60cd