0f0394685b75b300ce26cbe6e51ce96a4c238b1e6b28fd36ae8f508b42e91320 | Triage

Analysis

max time kernel
123s
max time network
136s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
19/09/2024, 10:32

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

bnl.apk
Size

20.2MB
MD5

00e63b01da32e808931bbbb89035745b
SHA1

9464778cd19b68db9007060f69066505bd83fd73
SHA256

0f0394685b75b300ce26cbe6e51ce96a4c238b1e6b28fd36ae8f508b42e91320
SHA512

d90be5b5c7cf78ce5e86adbe81e0a20239f31694b1563296ce797f7c709e311760acd175018e0d2578cb2a32a4c900ddcf401f8429cb21e3e17e9a08f0290d11
SSDEEP

393216:JqFXa/vigbABTB0z9UrVN0S98+o6L4c9uM9O5iiK+EEU6f:sXMvfMBmGrVN6+ojc9T9O5ph

Score

6^/10

discovery impact persistence

Malware Config

Signatures

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Broadcast Receivers

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	cm.aptoide.pt

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Data Encrypted for Impact

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	cm.aptoide.pt

cm.aptoide.pt
1⤵
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4976

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

Broadcast Receivers

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/cm.aptoide.pt/databases/aptoide.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/cm.aptoide.pt/databases/aptoide.db-journal

Filesize
512B

MD5
16a2a802671ae0095a211a968d578639

SHA1
af6127b33f4e32ac141a6d064b3ea328e03646c8

SHA256
e932dd936ab9651ed13f576148ea125583598ee8594200e66f96b7bab8e735fa

SHA512
1bdf843043955c362d7e718f1d14d3607fa08a6a5e120ab95195821cd693637a89884774d6bc2864a5fedbff0afa5beb6ef8ac9f1c24861cdfce7e0d8f65dec8

Download Submit
/data/data/cm.aptoide.pt/databases/aptoide.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/cm.aptoide.pt/databases/aptoide.db-wal

Filesize
136KB

MD5
914cbb4e510d312804d06dad3eddf9cc

SHA1
172a574810b4efd57713380e4187464d27dc9a44

SHA256
5081ce9168498369e19638fb860c858163c1bb3b98a421072937007547514094

SHA512
9d68c7a4a86b51feac40eeccfb94b2d3f60c494c3311a13fa7551be55e2201d14762f6febbc1ef4cde735baa757dc267aaff63c3b6e886d4dc6649b3bde37fde

Download Submit
/data/data/cm.aptoide.pt/databases/aptoide.db-wal

Filesize
16KB

MD5
6705028226b9a42c5ee20a55462c2a73

SHA1
a4ae51608a7357b9f8c45df080a168462f225e3e

SHA256
eac356f813ab51fd4ee2ec24ca468b55e46f201c13a143437490baa53c704c86

SHA512
83677ab50790a6bfaf5c1fe7eaeef47d7ee0f5cecc8fb625c3a5b756933ce30b085fc1ab5595d4664208215ee889e9335197abeaddf1c2f5cc09227a595a9504

Download Submit
/data/data/cm.aptoide.pt/files/.fstreaming/fInProgress/currentFile

Filesize
2KB

MD5
12aadd8af0ddc9d76a0f5401164a57c3

SHA1
a1c9851e668f24dd211b15a7606c7fa6bbf3ea52

SHA256
35481e69ce37767e87ee3db3a90dfcbf93e5156663616e6050ec2593d3c7ee8a

SHA512
189d2bc62d69ddb324909752fa98647e76e6e4f528a511dcc272a8519d1aee38974334c1c75025c96fc370ccb83a28104b4af7129ea0202b0d1b8e0202883e3b

Download Submit
/data/data/cm.aptoide.pt/no_backup/.flurryNoBackup/installationNum

Filesize
100B

MD5
6e8b7c3870c08486288c4f2cb2ac11bf

SHA1
8a5063df78a75e929559f7bea0be2448ca62ad08

SHA256
15d75ae35f1d9d24192bc569a994404ed0d79f839c20336616255815e22e73e8

SHA512
1aa1b539b4e4f6cd0a993139798b5ea77570e5f849f3d0fb489162f6de7b18d9161dad88d6c5d285cb75ddbcadda5c7bc5739c37847a0b38ba547dbe1dd56d42

Download Submit
/data/data/cm.aptoide.pt/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
aea69c90c8b221b8c068438d92ef9f2f

SHA1
5d4825a8c984dfbe0d1eb126c69f4493e8af9eb4

SHA256
752e902f7a51915b834e2ab10ac6f32825f51cdee423a5227dc27d56b2a7971b

SHA512
c9c8180235d8634e16fc9383c441fe5764919f045968640f3656ebb54171c9b017ffb722b017fccb5b52159292b992849580e104522386b76a2dfeccf1607644

Download Submit
/data/data/cm.aptoide.pt/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
45bf955fd019c97a752a908bfbe81007

SHA1
343139dd4bbf37b9a950e9bb711ca06557bb9345

SHA256
fac466610dff9d0cd05efa3beef62cea7921d592cd788825e2202d4675bda1bd

SHA512
f68874316f142662b59c77f6bb81f04a0e0ba0347519f867c2076befca27e82c1d961d154ebff25cc198b7752ad4e00b24f385bd88d8058ee93cad60dfb1495c

Download Submit
/data/data/cm.aptoide.pt/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
2f03883bee272aabd8145bfe261d36f1

SHA1
bf7e5ca79744fd58029af8e77d0283da6a990bc7

SHA256
0616fbc1bef888aa12876232a12fd04a352511d505976ae9d28f6607376dce07

SHA512
3af96e1cade1f585d82400c45085de8f07f9b5393f81ce5774e4f8c93c2992d4a1e236cab017ef361da6480087f59ebd9208bdf15f5574e1bbc0265a0a0b83b4

Download Submit