Analysis
-
max time kernel
7s -
max time network
136s -
platform
android_x86 -
resource
android-x86-arm-20240624-de -
resource tags
-
submitted
08-09-2024 00:03
General
-
Target
SwiftStreamz_APK_v2.4_Download.apk
-
Size
21.4MB
-
MD5
b9670781a6220f5db33c9dbd6c25238d
-
SHA1
d7b5125f47ffadc06b6e27ea900fa0dfa1f1cc6b
-
SHA256
7e41cd654128fdab2606a0975d132dddf036320744615d39118ace060608e6a8
-
SHA512
a18f1c5b326b8bab3df03a474e77c27414aea61e04f123651e4d1981bce1a39619f9954190b70ac1ac7eecffb09fbe60083c061b3bc66811890dc6582382a993
-
SSDEEP
393216:KD51hYo9wYYoIPH9Sg/2BUozTNR4pgka1SiDded0vQ5ofh5B:KF1h3aY/IPdSg/2BUozzSicd0vQ5M5B
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 8 IoCs
-
Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
-
Acquires the wake lock 1 IoCs
-
Queries information about active data network 1 TTPs 1 IoCs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
-
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
-
Checks CPU information 2 TTPs 1 IoCs
-
Checks memory information 2 TTPs 1 IoCs
Processes
-
com.swiftstreamz1⤵
- Checks if the Android device is rooted.
- Checks known Qemu pipes.
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Checks CPU information
- Checks memory information
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
512B
MD584061c50da6238ce0956ce7055d817de
SHA1c9deaa1c644fd7f27baee52c10279351703a16b1
SHA2567c8c6a94c8431a310fd468d252d4909296797cec1f05f751ce8de893026259c3
SHA5129c88bdc4e29fcb602d3fa2b2990ab406708288bb139ea597478c4945881e044e5c976009bddca0cc73f83631492283a40415603c576b0e9e9f4e61972184c497
-
Filesize
64KB
MD5a0dec291c6430d6e222e29b6bcbe3c41
SHA192c77a1733607051506f08470a677f3dd8d26a15
SHA256c93f35557faff3f13f76ea5de719b403056e2e3004b153574cf84858f3639df2
SHA51299def6e4f5427febac50041b007b03fb5c4da32a2174611747b2b4b437321fcd4430bbdc01ffbfd7a3d105b3344466ea1428e307879b8847d88aad767370827c
-
Filesize
512B
MD50f31683b6c76b36ef59d49d6e13ef96b
SHA1b5f921979c44fc25617cd78e04182614572107e6
SHA25666a2d4673ff8203d3e0cabc4514e3016aead6e2032e8c90a485f1bc7558a5eaa
SHA512ac20b37f13ed66577685058d6ca001fd8439d180103f8903c99ed3cc1c182bfe6fa012ba4e1f35085138bcba099899736d7702621cd943ab7ee0f262f8d98fba
-
Filesize
36KB
MD5a59710413851c8b17b1172c84025cd67
SHA168da6b2cba87bad70a75e7257da654dda7d3a874
SHA25646908b1204b32f1f954e4caa1078cd570d78dbacb83ea2582ab44f54a018e5d7
SHA51255323ac870792c5c9ab0565755f30f2e274a0d383f98ecf5649ffa867cfbb7024b5d90a8f0918c1c36f823b6fab31665eea14ca3ab80c238fa84977fe3819e94
-
Filesize
5B
MD59dcf2a6f12095ecff342e9fa0c5ca72f
SHA1c815f34691be353caa9de93bbdb00a31f62a9ed3
SHA2564e68143408826326220a32d6bff59e1cca3dd85f74b018aebd6723c5686c54e5
SHA5127ba3449f5ec3363bbee33d47abe471286cf78034dd70379fa4d0de5fd59215e8c58287eddffed1b9c3c74e157f6a9ad69b0c551001a62d04790bba49df48231c
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5de40264a17a3bd6b95ed264de637c2cb
SHA1e3c42eff218a84d41d5e2509af8685c0f41b2385
SHA256792a3dc7d85b0e0c8d5c131d1282ebe46290e3a4c66eaae911f24551f817e7f2
SHA5122bfa535244a32b8d240f6697bb1ae73580127644f43e790b9f400a986c158dd74abff3f1cfb25b3c94c4ac774fccf574f33963f235d56501a17f1732ea20b23e
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
108KB
MD5f32d00a9f67b488f9fa22b941f551e26
SHA1ebff64aacae3171c8f5fcec16f2583e906250919
SHA256fe2f54d3bdd7455031c3ce8d3c68978b6629255b7d06af4145aaa3533746ff1b
SHA51273c0ee4b44d450c9f65b7ac087c1ac152c4721dc49e29c9dd4c9c210a35c6050d58a61618e1ca88ce80886d12c33c1ff90f0a4e851407f8b2fa40ac02e1f42e7
-
Filesize
16KB
MD551090cecd2d94bef8d5fa29eab58c4c6
SHA125307f80c2241eb290d8e79af821f0cdc1bcdd45
SHA256a4e45a91c153734054775c26fd322bef117f43e445dd0caa1e5fe77882a1accf
SHA5124ff4bee0b52f106c6d1b0182f912cd4766f788fbd9acb11b073780865b8905d33688b46a50f83cd06a8f43eef73e18a75ce3d1e22d861f1a538a1b3b60ee6640
-
Filesize
2KB
MD54d19361361e43fc859e771d4e4465254
SHA10e1a8b243a128deeff0bea6a7febdabd36a04368
SHA2567981fab6228d6471a5401ca58ec58713181e3b8b184ccc693423a85c47aea072
SHA5120fafe4f5e2dcfa76744fff88fa2e3fda359f8155a4bea9fe7e2b53f8853b9ebda292b65f4ea37d55d71812a05909a38756560199802333d21c7cc8f5f65383d3