23a14acbf3f127b1708d7218bd996502b37d24101661b12a18e643e4e17bc3e2

Analysis

max time kernel
14s
max time network
1772s
platform
android-9_x86
resource
android-x86-arm-20240910-en
resource tags

arch:armarch:x86image:android-x86-arm-20240910-enlocale:en-usos:android-9-x86system
submitted
14-09-2024 17:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Solid Explorer 2.8.49.apk
Size

18.1MB
MD5

ac35e6b5273ef3cfe2f8c2352869d61f
SHA1

57105e401bb9d0ea477d3c99f66d578651d57ac5
SHA256

23a14acbf3f127b1708d7218bd996502b37d24101661b12a18e643e4e17bc3e2
SHA512

2b9b84920cb953b7a18d16b8be35be7f2b0ec948712dad3ee86dc069dac4cb2b4ecf2ebb272adccc82b0b0a3bd872bab5afebe359074303ec0449ed7b5eebed5
SSDEEP

393216:BVDwjRM/9m5g3KIwZK4xUuMj25wQbsaK41f6fm+ReHfb86YAccikdO7:LDURvsKIwtqux7IakteHSAcpQY

Score

8^/10

banker discovery evasion persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	pl.solidexplorer2
/system/xbin/su	pl.solidexplorer2

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
banker discovery

Security Software Discovery
T1418.001

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	pl.solidexplorer2

Checks the presence of a debugger
evasion

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	pl.solidexplorer2

pl.solidexplorer2
1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4205

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

Software Discovery

T1418

Security Software Discovery

T1418.001

System Information Discovery

T1426

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/pl.solidexplorer2/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
d988b348fdcd0f2e38e18a807947c927

SHA1
2503032664e6e0fb291d041ed88a0d9ecd25cc41

SHA256
19e4742fa270c3365a30d0a61b52edb83004af848742962b83dc03e5300271c4

SHA512
6b2456e0014da44c4cd3a87336e6fcc233dd7a6c082f920f356c71a6c31bc497dc942cc67f28ae760792a96153917d0330d77f341dcbf7505418457f213cf62b

Download Submit
/data/data/pl.solidexplorer2/databases/com.google.android.datatransport.events-wal

Filesize
68KB

MD5
d7bf414e661f6b15256db616edbcaa2d

SHA1
a53c5779e3226b07bf840a6684e9ac060d70924c

SHA256
7e460d6ba746309a75725ef2a7b8addce055cf832f51b28692e8a3007769c527

SHA512
ffb0534b1e7d286557ff341eb686b34ae2c6393d7b3221e8834868931a22c16ebcec7a316debaff6e3c2a7ee1f58c2d392aabb9335bb5d6e48fe344b6fabf530

Download Submit
/data/data/pl.solidexplorer2/files/.com.google.firebase.crashlytics.files.v2:pl.solidexplorer2/open-sessions/66E5C3A601CD0001106D20A6C0CDE1E9/report

Filesize
745B

MD5
ce810644d8fcea1fd164c0f6688842e6

SHA1
21b5b6567330f3e70f03d4a6c5cf2d2ad56e518c

SHA256
d45fa947f682cbaf5b3eb8f42dc5d3ce448c7f962d11d9addfa5450c65e38479

SHA512
8fe4a7bb6f8a46e38bce97d4513f4ef0a5042bcc89b599ff51a643bb903060ffc919d9961f7bfc97fb791e6252b552325a6d09cdcfb1fe5ce9ee7b8861381266

Download Submit
/data/data/pl.solidexplorer2/files/PersistedInstallation6236431494157888413tmp

Filesize
90B

MD5
ea1906016da1f547074f62758881b203

SHA1
8878ff7b37a1a0bb7f312c44c8767b9ca263f867

SHA256
6099e45410f1c57b18228f52069abcb59e459b43638839dc077ec6cbb420ea49

SHA512
06d665c02c31ec49dcc8064f48bece721357213af6e71c159e18fc260b887b4790896a827ebacea9e726d00e3e1e569bd2b39fc179c8f2568d08852d22c797ca

Download Submit
/data/data/pl.solidexplorer2/files/PersistedInstallation8004204886684822792tmp

Filesize
559B

MD5
df0a72c5beda8108221986a96364a16d

SHA1
7ce63a9d4935547e392acfab8fd5ed17a646ae18

SHA256
e2c24d1c56098d1a811ccb31ece7aed4b753917abea326af6c0e94c8b2322009

SHA512
5a774f3eac0c534dcd9956c3e90ae027b614dde2eb9100445ca252d8694f2d2f2834c2a8e158a34916e50fe3eddd4f20f1c33f82cd9ea2ce51471fd3970c3f5b

Download Submit
/data/data/pl.solidexplorer2/files/frc_1:569945128489:android:0183e53a04973139_firebase_defaults.json

Filesize
260B

MD5
de456af8ad6d0270fa3e11f901e5404d

SHA1
de2a2e83cfa5c8008e3aac447d4dd97a177c704b

SHA256
bbda943a406903360d0f7bf2e42bcf4f318d00e2619ed309f4c33ea6437aafed

SHA512
e048630b6bc46821ab705c296311563f4dabe3a1e77899cfe0daff3746a4342069f88df24a7096fc51eb20ae19bf0dd29004be1b1eef5ab3753eba39b1475f1b

Download Submit
/data/data/pl.solidexplorer2/files/frc_1:569945128489:android:0183e53a04973139_firebase_fetch.json

Filesize
1KB

MD5
d2c8d248e97931aabb777d277db8218b

SHA1
4de80f73241e8d6c642ca55f6eb88588e8a432af

SHA256
7358450bbe420f4e7903adac1bcd9b8b328a4dd49ec590e9a2903fb085f188d3

SHA512
85c8049a199d32a762fa0c61b6fdfeee39157530d9505e068723938d51b94ea22fd25d02d4fb53d9b5e69d3cefb17326a0dc188cdcec77b659d8a4336bbbaa7a

Download Submit
/data/data/pl.solidexplorer2/files/profileInstalled

Filesize
24B

MD5
35ebb75a6e0e7bc2cdceeb36ed54ecc3

SHA1
f4708431be981b658ac75d2a236e70cd6526eeef

SHA256
ea5199be8bc2ced46e9b099b8e96696b4cbe60b3dfc61d7376b0865b37be8a06

SHA512
38a69c8ddce92e1f780bd9c7877385137235816d351156a191e3f1641b266c28fa53efc0a1282d62ede5462fff4d54928beb10e94889134543fece408e10e837

Download Submit
/data/data/pl.solidexplorer2/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
2d4f628f38f602f1a5400db1368a8bc2

SHA1
5ab6e900a9a554a7057d27129126e04d8e0ebef3

SHA256
1ebb4df7c44019f966e64a6f768a924422d08e8c0fe429efe00c7050c7175a8c

SHA512
ab595b550bca1fd796568355733ae6fefb57736469a0b4611b8f9f755ae851c219007c4341cf14f50216f3ad5e8c5804a4db761ff3011631eb6f784aa18767b9

Download Submit
/data/data/pl.solidexplorer2/no_backup/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/pl.solidexplorer2/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
5ddfa1b71f0bd4b431e67bc6ca8f415a

SHA1
635a7c7cfd05e7e60819028e5e225e0568670859

SHA256
0068954e4c3933297082567186c31b78585f009eca27f8f2c2c9876932ddb48f

SHA512
55530938fb9bb13381e8d3b36337d947a1e32a5bb4fd2be88024dcb5ed5b7874d1b81341e6841d13e11f7607072b8382a2ee7817c5f10082b045d76c5228884a

Download Submit
/data/data/pl.solidexplorer2/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/pl.solidexplorer2/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
7a94e42b58327f730fe6bf5956662713

SHA1
e599eb77f78bad1548f3edcd36ff0b518f3fba38

SHA256
7ac20d486ea0cf00407ef55a7411198d3f9b0c30e08b0ae429955c3dea50be21

SHA512
950921574761047b57ebea3e8eaa674eb3a6b1151b5160bc532feae82797a6e7c798c44d5dc68038212a1f12ea7f41dd833805a1e3040a2ec8b4107ec29968fd

Download Submit
/data/data/pl.solidexplorer2/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
a08135507455256e01c206c07a86f1a5

SHA1
135a8acad3ac11315cab36baf413026401ee5236

SHA256
8cf9047b209bef4b96c0a3b7d4470a8f3aadcfb7046a3bbf08aa57ccddc3db30

SHA512
0ad650c7922ab99d68080dd36df053ebbf33fb23d9f96d108b588b79ae983f9751e7f3c626aed2bb8b25e9072688f5cc7f0ba9fb2958e909a14f2afa2c40576b

Download Submit
/data/misc/profiles/cur/0/pl.solidexplorer2/primary.prof

Filesize
1KB

MD5
f03151955fe472eeb3f8b1d771b9af7c

SHA1
ea95088484f97ceb06ec536952d2b359bb8a4d8b

SHA256
06768f26b5c5b332480caf83593d37c626ff97b1283e39b4584ec6873a27d448

SHA512
eb7bdae47db26878af993057acca0377c0c2c48dba92c1aa6c5ad39d0a8d311b63ca2c36a31fcc89e59df69c33ee1c45ae00ac5f225d5ce0c316c67060bc61e9

Download Submit