Analysis

  • max time kernel
    5s
  • max time network
    135s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    14/09/2024, 19:58 UTC

General

  • Target

    com.procam.camera.apk

  • Size

    2.9MB

  • MD5

    5942a2e46b29ddc1dd5d9373a8c419ad

  • SHA1

    acd09025a9e3537748047d211e584b55f2313e94

  • SHA256

    673f309c9939db4040d2dcca2088244f2384b99103d4bc20719a37bd188de164

  • SHA512

    a7a23072b5018d71550dfb2b51f8fc6a3e1b3250d9a1e12aaab083776a5d591436e54033a641be31e1d57b97be59d3990890a09d76c7d0c2ea2ca52d4998cf9c

  • SSDEEP

    49152:XmbUavA/qQ4GsA1+Np4KYbYddBNMuZzAnIszMzU6JEWhT1PLpo/KrGHD:XmvI/r4n4+NrAYdBu2zyRz4bLpo/KrGj

Score
1/10

Malware Config

Signatures

Processes

  • com.procam.camera
    1⤵
      PID:4971

    Network

    • flag-us
      DNS
      ssl.google-analytics.com
      Remote address:
      1.1.1.1:53
      Request
      ssl.google-analytics.com
      IN A
      Response
      ssl.google-analytics.com
      IN A
      172.217.16.232
    • flag-us
      DNS
      procam.icu
      Remote address:
      1.1.1.1:53
      Request
      procam.icu
      IN A
      Response
      procam.icu
      IN A
      8.219.76.99
    • flag-sg
      POST
      https://procam.icu/proapi/permit
      Remote address:
      8.219.76.99:443
      Request
      POST /proapi/permit HTTP/1.1
      Content-Type: application/x-www-form-urlencoded
      User-Agent: Dalvik/2.1.0 (Linux; U; Android 10; Pixel 2 Build/QSR1.210802.001)
      Host: procam.icu
      Connection: Keep-Alive
      Accept-Encoding: gzip
      Content-Length: 0
      Response
      HTTP/1.1 200 OK
      Server: nginx/1.18.0 (Ubuntu)
      Date: Sat, 14 Sep 2024 19:59:25 GMT
      Content-Type: text/html; charset=utf-8
      Transfer-Encoding: chunked
      Connection: keep-alive
      Vary: Accept, Cookie
      Allow: GET, POST, HEAD, OPTIONS
      X-Frame-Options: DENY
      X-Content-Type-Options: nosniff
      Referrer-Policy: same-origin
      Content-Encoding: gzip
    • flag-us
      DNS
      android.apis.google.com
      Remote address:
      1.1.1.1:53
      Request
      android.apis.google.com
      IN A
      Response
      android.apis.google.com
      IN CNAME
      clients.l.google.com
      clients.l.google.com
      IN A
      142.250.200.14
    • 172.217.16.232:443
      ssl.google-analytics.com
      tls
      1.3kB
      5.8kB
      8
      8
    • 8.219.76.99:443
      https://procam.icu/proapi/permit
      tls, http
      1.8kB
      14.1kB
      18
      18

      HTTP Request

      POST https://procam.icu/proapi/permit

      HTTP Response

      200
    • 142.250.187.206:443
      tls, https
      857 B
      40 B
      1
      1
    • 142.250.200.14:443
      android.apis.google.com
      tls
      4.7kB
      8.4kB
      14
      22
    • 216.58.201.100:443
      tls, https
      454 B
      40 B
      2
      1
    • 216.58.201.100:443
      www.google.com
      tls
      8.6kB
      10.6kB
      29
      36
    • 224.0.0.251:5353
      3.7kB
      11
    • 1.1.1.1:53
      ssl.google-analytics.com
      dns
      70 B
      86 B
      1
      1

      DNS Request

      ssl.google-analytics.com

      DNS Response

      172.217.16.232

    • 1.1.1.1:53
      procam.icu
      dns
      56 B
      72 B
      1
      1

      DNS Request

      procam.icu

      DNS Response

      8.219.76.99

    • 1.1.1.1:53
      android.apis.google.com
      dns
      69 B
      109 B
      1
      1

      DNS Request

      android.apis.google.com

      DNS Response

      142.250.200.14

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.procam.camera/no_backup/androidx.work.workdb

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.procam.camera/no_backup/androidx.work.workdb-journal

      Filesize

      512B

      MD5

      31f915642d417f9392e56286056af61e

      SHA1

      2362845288d76e516c1f4d490ae893288eba5e31

      SHA256

      8577032e90b36fb9e4f5c9b8530797782c556265940023734636293de6b4c61d

      SHA512

      f48d79e7f91162eb81941aa510d72001d9e05efd98bd9bc109d89665465b2baa6e38030ad80c6247fa11287096c32f6f94fc2f21b64fff10a00c6cb48c44fd18

    • /data/data/com.procam.camera/no_backup/androidx.work.workdb-shm

      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    • /data/data/com.procam.camera/no_backup/androidx.work.workdb-wal

      Filesize

      16KB

      MD5

      cd368eeea201cadb99aa4bb60fe24045

      SHA1

      873ffe35bb100f038e90732514d7d475629f88fa

      SHA256

      cefd3cdb52b5ccd37e3f70ea3b0db4ab6f7e75a7407bd6c1593f029d7c13d9e7

      SHA512

      4beb1b6219956646f4b40c5f48315da48a5437998dd61b531980c27e46fced2dcbbfc7253abb73e5c93928deafc6445f2561f3b5d7c9f8ca8f5fe317325a004e

    • /data/data/com.procam.camera/no_backup/androidx.work.workdb-wal

      Filesize

      112KB

      MD5

      1c030bb7d0627b80f53fe5e28cc16a40

      SHA1

      a17813aaee8d26158e6cb73ec26d165f04d5934e

      SHA256

      4b80cd457af96519996e18936839471226ee107df423c2a261f4ce6ef310cdaa

      SHA512

      beb3145e4982f7a493e0d3db6d15af7eeb00664845fedc868f10c11a038959701aa268d9bd61fda69f9c241dbeb35de82c61a1f1824f3c2f58abe858f42e959e

    • /data/data/com.procam.camera/no_backup/androidx.work.workdb-wal

      Filesize

      120KB

      MD5

      98f9e8cb3227e70c033d856c58ded5eb

      SHA1

      5466005897e634e5aaa7b7b798b58f95479db200

      SHA256

      dd1a4c7a97cfee5ba333c1ce30cc14d45e34a9a854975cfba813e19a1dc8f3da

      SHA512

      151512c8f9c85f143500dec0eece0bbb58f0d930967a48f4fd1a610339b31925b7e7939789fc3bc113d1eb521fb983653c6e64680692b17d16303ab838e473e2

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.