0f0394685b75b300ce26cbe6e51ce96a4c238b1e6b28fd36ae8f508b42e91320 | Triage

Analysis

max time kernel
123s
max time network
133s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
19/09/2024, 10:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

bnl.apk
Size

20.2MB
MD5

00e63b01da32e808931bbbb89035745b
SHA1

9464778cd19b68db9007060f69066505bd83fd73
SHA256

0f0394685b75b300ce26cbe6e51ce96a4c238b1e6b28fd36ae8f508b42e91320
SHA512

d90be5b5c7cf78ce5e86adbe81e0a20239f31694b1563296ce797f7c709e311760acd175018e0d2578cb2a32a4c900ddcf401f8429cb21e3e17e9a08f0290d11
SSDEEP

393216:JqFXa/vigbABTB0z9UrVN0S98+o6L4c9uM9O5iiK+EEU6f:sXMvfMBmGrVN6+ojc9T9O5ph

Score

4^/10

impact persistence

Malware Config

Signatures

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Broadcast Receivers

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	cm.aptoide.pt

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Data Encrypted for Impact

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	cm.aptoide.pt

cm.aptoide.pt
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4261

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/cm.aptoide.pt/databases/aptoide.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/cm.aptoide.pt/databases/aptoide.db-journal

Filesize
512B

MD5
44a27db70f5c847915d5ca9508ffddd3

SHA1
f53c61213953a6ae59712b17166ccaf475c7d0d5

SHA256
e22260f34584f373c2df6f28b0a44ceff29cea05705eb4bdaad6cf7aed8e7d98

SHA512
66092bd8f4e391ddd2a620ead08d8fa93fde06e6b68652b6d4fa5fe2738690241c3b76dcc60dc0292258d4eedacafe381fe8932530a911dac0ba794fc1d87b1d

Download Submit
/data/data/cm.aptoide.pt/databases/aptoide.db-wal

Filesize
136KB

MD5
3c92d9b2805215bc9168417def0d06ca

SHA1
83172d8df73e6ee8cec8a4faa9f6f9db85e8f779

SHA256
851f46e010d684b248dd8d2ac6691585817b89b284e74bb5e76dad8e3deacf4f

SHA512
a0ae8c7dadcfc0ba2aa53b1d2a644f66343a81144b770768cd435f2c7a8b0f6c5315b9d5586d2068b2fc045fc3ba56b5d8ee82970d27eaa001276668eddd2350

Download Submit
/data/data/cm.aptoide.pt/databases/aptoide.db-wal

Filesize
16KB

MD5
2aa7ea271b1a65d416cfe37479bb1a98

SHA1
e200ea8f21f84c62b8fffbad17b81249265e0fc7

SHA256
b0733bed82a486bfe21ab531e7549fdc212a4fc7c3db9cf7757f24a03fb0437a

SHA512
89a42cadb033ec4e2af0fa7a57a16f0ce596dfc80a22e44f5b5f85baee3155ae2c5727ac36d98f5fbb65a4a1556f3df3241755d542e88160ebd20119f689b65d

Download Submit
/data/data/cm.aptoide.pt/files/.fstreaming/fInProgress/currentFile

Filesize
2KB

MD5
b6297b5015c3561d6d5baf5fe068f1ce

SHA1
4c96dcb90da0ffef4b8dd451ae40333d086f9a49

SHA256
8395d93d8a0d992618bd29c4f1ebc5418d376b98b1dd986f3c6bbce51abfc783

SHA512
78f93596e2eac1718f1056c5e283977a2917a8b8c3ab7d901abbd1e607a2f82148153e4ea2b9cdd90cc499f9af2d4c9ccc0fe8c1b7f42139c50276f7abfef904

Download Submit
/data/data/cm.aptoide.pt/no_backup/.flurryNoBackup/installationNum

Filesize
101B

MD5
390d3f2aaff127727b91924f2aa84e49

SHA1
39937ef986c434462c3918f94bd0dc39f3c7e75d

SHA256
99147d9eddb3435f1311cca55386214f3635b045e6a1893ce43b4720f322619a

SHA512
ba3ff03809153e3fbda5599bb5ae2a31f80bb19df9008f4b0c3a0f5bfb0f19a33d6b7e53b63ec6635d75db4cd919af2e9bb99500d4373403fa44ddbb6e7f3a27

Download Submit
/data/data/cm.aptoide.pt/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
e321c20cf1f4ad6953e60004399f5334

SHA1
c5d6283859343d1e8274ee97ea90eff496c3d240

SHA256
9a5b13eb1014d2f48185918c6fabcb5e624eb38ec6150f473ab9ac6387417aec

SHA512
785acd6e8ac2dfe52374cb5825752be1703f2df2a5f2fd2c963f44e8627ee7b0a18f2807e4151fba6e104009384a3380c960624a5ced167c7e50aca4dd20f39e

Download Submit
/data/data/cm.aptoide.pt/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/cm.aptoide.pt/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
83c3dcd52c76edef671a7b5c6f35cd3f

SHA1
b65bcf44ee84e885277b4ed728c11142af9e9f0a

SHA256
6a36b89c0e3afd3958d6ad5de01695d7352b726c9f1b3aa7c805cee31554acd9

SHA512
e05d20de56751bdaa6503cb3eed0ef6c16b12f00c5846d399812ccfce38deffd146cb8ca8e8c7c1e4c31e17f1748202189ccac095af39958c9097b97015ff91c

Download Submit
/data/data/cm.aptoide.pt/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
ef347b7cabb335541486a587680cc6bf

SHA1
0fcf37394fd8795ae14560b42535e3f7f8cfcaa9

SHA256
6a7832d18c04ef683cc256743434ef36e73fdc5b2e0b678621b1669585c8b91b

SHA512
6d077299b3fe9247a5996437be0cd71b75414d55d7a4600eefd2659043c1320951f1d89c68a01041ad2b70464c4560fb6c4c7461c94547068b8409cdc29adf32

Download Submit