Analysis
-
max time kernel
10s -
max time network
158s -
platform
android_x64 -
resource
android-33-x64-arm64-20240624-en -
resource tags
androidarch:arm64arch:x64image:android-33-x64-arm64-20240624-enlocale:en-usos:android-13-x64system -
submitted
02/10/2024, 05:17
Static task
static1
Behavioral task
behavioral1
Sample
Hikari Anime 1.7.3+60.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
Hikari Anime 1.7.3+60.apk
Resource
android-33-x64-arm64-20240624-en
General
-
Target
Hikari Anime 1.7.3+60.apk
-
Size
59.9MB
-
MD5
6aa184768ec65256b096b65d478b9df3
-
SHA1
82c090d2c81bacb3b9a9378f475572348799019d
-
SHA256
2853a10a2da6f3af0a1adc3d13b5ab100cea52196888e310e24f32bd5427d4b0
-
SHA512
3b2ad2f00c395ee411c434f28abf54270cb11696973a13785cca73b2756668733cc3ffb98b70142c72e02aa790bcbeb9deab456ef435ad04e0707f2a0765822c
-
SSDEEP
393216:1r5DRkiY9ccM3IAx66WdTWBEsFAk8aib27YzsUS47xX29qow2qesau2qTMJzXVn2:F5DRkiY9ct16ABE5usXAwZMRXz43
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 TTPs 4 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.extensions.jar 4361 com.bjf.hikari_anime /system_ext/framework/androidx.window.extensions.jar 4361 com.bjf.hikari_anime /system_ext/framework/androidx.window.sidecar.jar 4361 com.bjf.hikari_anime /system_ext/framework/androidx.window.sidecar.jar 4361 com.bjf.hikari_anime -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.bjf.hikari_anime -
Legitimate hosting services abused for malware hosting/C2 1 TTPs 3 IoCs
flow ioc 21 raw.githubusercontent.com 22 raw.githubusercontent.com 23 raw.githubusercontent.com -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.bjf.hikari_anime -
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.bjf.hikari_anime -
Checks CPU information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/cpuinfo com.bjf.hikari_anime
Processes
Network
MITRE ATT&CK Enterprise v15
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.bjf.hikari_anime/code_cache/flutter_engine/36335019a8eab588c3c2ea783c618d90505be233/skia/9d530bb0bcbfd571ee3d820fdd79ff859d61e2cd/25511d7dfbcb15ba0bd125ff192bfd54433600c4.temp
Filesize1KB
MD57377c402dc5840d2ba3bd6e363eb0e8c
SHA126b04ee15df653c56f4c97321810f072fba28e45
SHA256f667a5846b0f9768eec8c501ab37e5e5cea8344a35b2ea9ca2010c02b101781f
SHA5122760c68412bf991e70ee7d94981e23b0fa4ec8a40c161779fb38fb5ace95a1d39861fd22da58b0620d5124818f13a0ad40a4b18dc64e787ae97fb58dca56ab5b
-
/data/data/com.bjf.hikari_anime/code_cache/flutter_engine/36335019a8eab588c3c2ea783c618d90505be233/skia/9d530bb0bcbfd571ee3d820fdd79ff859d61e2cd/29c33f4b367fada4e7c955100a6c2f3dfd8557ea.temp
Filesize1KB
MD54b9749870dabb43832b0fa4d137b386d
SHA11403ed383edb62b20567e8126f99452f1bcf1784
SHA256aab9680884c692758d81c59205bc9303f8c80905cb9944f8f3586fd6abf4aa97
SHA51213892e9a24c49e3b34315cc9874e342e35c0a8d457e05fa53d5780089e0487ae777936f25da627f92dd9f4f6d8b8418ed975ee7048d3064c0467fbbead318319
-
/data/data/com.bjf.hikari_anime/code_cache/flutter_engine/36335019a8eab588c3c2ea783c618d90505be233/skia/9d530bb0bcbfd571ee3d820fdd79ff859d61e2cd/2bbbb4beb4e5f32a1b49f4a93d65f13f30798ff8.temp
Filesize1KB
MD54610e941ea84cead5dded089ef95e2ea
SHA11754cb2dfdcce4e96db3a2f02decd1be9c95373f
SHA256681760f1fa445bbe2c5550f9fd1fb1f31a964ca51501173e67a4d16029035439
SHA512122a07745d81b43b72145db8e347118fd27dd5bd4453f1f5affca89f50755a3b3c346415c0dbf75c0d4654e6f0db9abaa52d484ab49f144347670c384fe01c23
-
/data/data/com.bjf.hikari_anime/code_cache/flutter_engine/36335019a8eab588c3c2ea783c618d90505be233/skia/9d530bb0bcbfd571ee3d820fdd79ff859d61e2cd/37cc3ba0020da10157d3e193eeb4cd7310f67853.temp
Filesize2KB
MD56103ffc4cf2d3f8c344a35298709a7d1
SHA1765eba9aac3a23aaf8c36af9e9e770ffb1a8023c
SHA25665b4397f8a49cc69f9f130466d22b53e18ad74652290c8bb4259dda16c419a2f
SHA512620bc704c1c5e853187bb8419bfe7b86e1ff0f135de9527ad22fc64868169f802ac3df602dc97f2e053eff6efb0a998a2a34ca49cb6b5cd0a055e7a92d7c3c67
-
/data/data/com.bjf.hikari_anime/code_cache/flutter_engine/36335019a8eab588c3c2ea783c618d90505be233/skia/9d530bb0bcbfd571ee3d820fdd79ff859d61e2cd/5879efb57f742e73ee08ad55c6be19e852d27baf.temp
Filesize1KB
MD52e52203313028b55bbac3d9d8a5f7b22
SHA1828256150256d963154ea07084131b2075e572ab
SHA25652b5b062318ab7fefed12d39074157bc2dcc831b2cfae2d44af5ed0529cbca4b
SHA51278a120d9a048efe41638e3d11479a125420e6937b0f0ffdde20e120014b2cd2d0a3758cb0390cf556ff45506900309af5bc62ad79d0467d0549c7ae7ef5b104a
-
/data/data/com.bjf.hikari_anime/code_cache/flutter_engine/36335019a8eab588c3c2ea783c618d90505be233/skia/9d530bb0bcbfd571ee3d820fdd79ff859d61e2cd/5a551daf3d51192724478ed516c3602fe7474765.temp
Filesize1KB
MD5c0444e5a1bac2d7079e77b09d49f5057
SHA179dbda0a4c58cb8b7c1dc44041b445e8046d4880
SHA2566a5435b57acc6d5dc467a341d8d283957d2ef380a4c47d1abd9ba2962eafbaf6
SHA5122511d379c314224d7d2759cbc21cad190f60abae55af95728a8a9b5025eae2970a35e18950d712a92aaeed81941ff0585e2af312d7285ed2916808f486caa3ef
-
/data/data/com.bjf.hikari_anime/code_cache/flutter_engine/36335019a8eab588c3c2ea783c618d90505be233/skia/9d530bb0bcbfd571ee3d820fdd79ff859d61e2cd/5f5dd003eaa24005e7ab14db902f3efb7ca955ae.temp
Filesize744B
MD58f8b22a2193c906428bad44f798c357e
SHA12b6915f04c164c08100584d3dae68706d1c9eb8d
SHA2568a5638801e24b70259e83e267de06c69cc6a58d661aa9ec6449b7748403d2748
SHA512cfde87b03702f670f09c3fb6e73bfcd7eee75eee9515c2cb2ea68de9dfdec3a7364afc4442151cb25695ceeefb64f0ff7e1e1bdcc9b3e1d6f7087812a35c1e53
-
/data/data/com.bjf.hikari_anime/code_cache/flutter_engine/36335019a8eab588c3c2ea783c618d90505be233/skia/9d530bb0bcbfd571ee3d820fdd79ff859d61e2cd/70d338766ae20514eca6f5d387445bc8d553f73f.temp
Filesize900B
MD577ff49f0e5d9301abd84fbcb1f1d961b
SHA10d52a5b720e182efcece683d1f7795a43f2c01e6
SHA2565191e2151a3041de54bb2095768943ec0d91045d026ab70b3105d2d030a4cbcb
SHA5125c8b5118cd2b23941b7e986d708419937acf52de3de8c10bee96c8a3d96dd030bcc9e3a8020acfc1e94bba77961f4b49d42a8d68659a32de578e7e3f05a11857
-
/data/data/com.bjf.hikari_anime/code_cache/flutter_engine/36335019a8eab588c3c2ea783c618d90505be233/skia/9d530bb0bcbfd571ee3d820fdd79ff859d61e2cd/96347f94bcb4932a71fcb799d580d17b6db427b8.temp
Filesize1KB
MD58232d5d254814e42c5611332a5bdf673
SHA11a91ff36856e364cb6db4974d40d7e8e92d19289
SHA256ebbac9d0e3225d3b32a67fac7392d6666a4d840ae7209f254afa6cad12e14805
SHA512c08ceb439213c3447b8ffa5a2786fc6a13da584a9f4d89fe43edc2b4c4a7e8ab18093d1407fa461c761e3aca38e8e8cbc35270aa2fcd0df942674ffb63b11419
-
/data/data/com.bjf.hikari_anime/code_cache/flutter_engine/36335019a8eab588c3c2ea783c618d90505be233/skia/9d530bb0bcbfd571ee3d820fdd79ff859d61e2cd/ae67dda6ab17be64e90251b8b5b579dc16e74891.temp
Filesize4KB
MD50c210e1a07cb01c30bd333f2ca9c0b1b
SHA1299c2861b16febd123457a1264d4f17ff60c1cb1
SHA256e2d40418bddb6bf7768a2bb1f8c052c22eb62c6e88809e0c0bcd16db4da1f1e4
SHA512ebbe4f272e9356e21c894733aa52cd519008c937521159622f35cb545d01f5b7defc660c51a44d33f1d9014dd6705d78523907d822475a1a140ec61c6bdba124
-
/data/data/com.bjf.hikari_anime/code_cache/flutter_engine/36335019a8eab588c3c2ea783c618d90505be233/skia/9d530bb0bcbfd571ee3d820fdd79ff859d61e2cd/e290c573e0efc9a3f8857382e6e4388caa53027a.temp
Filesize1KB
MD5d101488dcbbce98a7c87625f08537d19
SHA17d26d50ead6e0dac7ee69669cbba4644ca16a6a3
SHA25678c3346f37d0e79c9916da466d8217d09f0296ff3471289d94e70cac3390d499
SHA51220a9851b61b1559854a7a4ec30a4502ddaabb3a15c0946256e2ebcfab8cd8a03fc54bb19225b6cdad08305e7e837b6332e340741ef6ff462d93f0fc94a29e842
-
/data/data/com.bjf.hikari_anime/code_cache/flutter_engine/36335019a8eab588c3c2ea783c618d90505be233/skia/9d530bb0bcbfd571ee3d820fdd79ff859d61e2cd/f17ec4e6286c3fb2ab7c368367a730d9712a1a4d.temp
Filesize1KB
MD5e078d70cd2cb3dc0a09bb4ad40709902
SHA11683b4eb6b7acf5f27ae01aed83d7e7d885ba645
SHA256372d64f4d7ab1d05af0be19f534f76613714da33af2077b01e2bbe6dbb139ccd
SHA512361cb6b8c5094e138d96fa94c55d4aeac6a9ffeb193b5c1fce3af0bf9e17ec413513381e50e14bff3be0a5d7ae9f08d4278c4f6fb958cebfd0f5ab81d51e1526
-
Filesize
44KB
MD50dd2ecb769847155da3777e3f39feb95
SHA157b57fa2b3561a9342f579c1f3722ff6ab5fafe0
SHA25695e9b377226822d9e6202c14e6ed9aeae6242b8155226cd7563909b8b1a08b09
SHA51280539e631f86821a83e03084123d8b04227fb3b6a7c86a1999b9b91e521c95080108623fefbc1a05e513d71abe8929c60068f8eb858bd9f02ca20608b972249b
-
Filesize
512B
MD58b29b8af9fb786732ca41cd3525e4da0
SHA10dd3a36467f3e5ba010cccc62fb60b1f201e3838
SHA256cadf196285fa86d79c02b1604cd5c79ed64a25ed61c932d8abc4001cefda740d
SHA5129edce4b2877c1d6f2d53cab58a7d6c74d716a7dbdf4e0bc9f02aca8c2c5ffbc3b678c684b66d1934f4c7d9588224b836456e5222c6adaad091c0e4aeded3e990
-
Filesize
8KB
MD53681d2c962f02fe0484184a08c53ae3c
SHA1799e54b3954835bf0a2fc5ccf3a7dfa8b0d69de1
SHA256e320a39b62d42a957fe0b1d5b1d5e001f5cd95d68b97a6632de26dafc6e10bf1
SHA51258d9fb4790cc58873a0b47378694446e3adb713d210ed4642d771d96371f420ba5c7edd6a27460f2c210a88ec76c6b71855f3cc401ea01698da80c6c1f394c30
-
Filesize
8KB
MD59b88208536a9cdcf6ae0650b44892406
SHA15e0e8b263c4ca328dd0a8ccd924be2034f3b3657
SHA2565000b066a48519cdacdb9a664671ed4a2024bd7f6abb6a592a5dfe333b4957f1
SHA512256c67e36470fa2b0280bb69e5a8a2b619264cc04ab1a61bae986df345975a55b0713d8b36aeb071bf9ce88f936f75a0af97a3e5ff1e036fb4eeea98262c1b21
-
Filesize
56KB
MD5615f50b454fcbfd619e3f7d132f1459e
SHA1193000486d05a67e5979011b69299c627022911f
SHA25688c5e59225f761493c41cc80e85ef9cd38641db0c4b7fde3ec730d6fddfcb967
SHA512718c221dae46480dccdd8bb57b1ea137d77732d7613e7d92e0116e5d22605fb4a150a268616af35016482d380fbdda4fdd777442c940e20db67bff02ad755805
-
Filesize
512B
MD5eca10f5a0779fb7af1d10405871b4008
SHA1c5b50fe9e305d4edf1f6d2272ec2952b2f967114
SHA256995e9dce98118f5a39f3bbe5fac5dc8699347d1d06a5e140f4d51777b86b80ab
SHA512e7d4ecb9858ad8852b4da107a0d95e5b0a71e707ce3fd1136c00a7fda020b8228636489922f37c53076d412a155d719f2a93735409c1a5f826be412c36945335
-
Filesize
8KB
MD561051f0d8071556fb16433bc2a7c47b1
SHA1cc4d815929d4d119cee10bcf3caff53f7094a906
SHA25615116d550487d505ed9d6c68809e154a79cc2859e2d3da85578efa462f974e98
SHA51250cf6dd3e632b9bc8342ab2fdf2ebcc1df4a6fa17deab6f80c281b1f0116d7d2b59e455d60c33fc121f2e5b310449fda449058a9b15eddf264bf6d878c8e4726
-
Filesize
8KB
MD55ef08559ca04538ad68b9a2997a3d42c
SHA199bfde15d8a465cebfb6926a2423a4f92eb4787a
SHA25668ef43930bb2a5ee48d8ca2e08b4391fd44dd73df6495783ad8ca7ca3543683c
SHA512a6b11d17bb5ca4090bf6faee5db340e4e37fbf091b84c746b9569fff9a59a0fd1b16bf91efe7374cd74159533c5158e8f4214b9a47dfe2a09405e796e61e0b4d
-
Filesize
24KB
MD5e0687b5126a2d9318401deec2314dba3
SHA1c0ef5cb277a0104a6140c9ed252aa81a43802358
SHA2561f64b5f978e264272729f9954b023808ba28d76224bba284bbd6a201ebd4ef7b
SHA512143baee17edb44f0919261b7d5e9334de74f3bed724d0ac6fa47893347aacdbc48c0e59c18518fd72e4af087403aaebca44ea85db00c5015c39962f6d049a73b
-
Filesize
90B
MD55c05c0109aa95de0445325776574d365
SHA17a5b48facb5be349292c4a8827fa0bd9c2f3195f
SHA2563a099eaeee7e707016e382b83f497b3b8b3e1142c2480d4f4b0ae88c3313fdbb
SHA5121d57986460b08c498ccaacecbe12f65c6d21df4836bfb7d2fe8c4194a49ec70cc4fbc1a364fa53a0a1dc3f49caf58f2702959759eefc8c3806654aa44f962f5f
-
Filesize
567B
MD5864b03d929500f42a32f9075779aaa77
SHA1279c7fd7fc9e92c377246c616c2213241a44f90c
SHA2560b30155b7574a5759bbc6283fa1d8d675cf890007a698a3ecdf383c993932beb
SHA512bc050abc7db62b04944c9daf5587cf27cafdc09859ac3520639d52af251a35b331da02ecfda21e646db1720e2e85e3ab7e8577a7d3342c0c34768d5b2bb35c97
-
Filesize
226B
MD55f4f17fd6c9f7108841542fe7d31ff2b
SHA1d02595000daa2c151be280c4037aa13a4fb1926b
SHA256d569ac2f32d1dc07ea9feb5fd881d78786e724bbd95743de69e2d82a940048c9
SHA5120ad3ef5db835583c9fa0128e1f2636262e34e94869d7ad0f8a6e74e3bae4f82a44ff422e2f4f58299cafbc78faa815b208bd66e47c8169aff9df20e4c26da4ce
-
Filesize
384B
MD50a2a83801b78b066e86bed6f5ee4f404
SHA1cd7a439c321cdc31983c2a5b6d5bf1d88a3b3320
SHA256f684aa95bed418557daaf207f7f6b87cbaca3b7f9e45589f65490eb3c0e9b4e5
SHA5120380469fd72af13a6a458d869063f37b11c7103992318267ee5532b56379dbc548e160389169ed2dd0718114121d2efc6fcab53ea69fd6ec4d2dfee4dbc4bbb2
-
/data/data/com.bjf.hikari_anime/files/frc_1:313894689179:android:87783908848844a47e693e_firebase_defaults.json
Filesize154B
MD5970bc15689c8b8e68fb6160db432feb1
SHA1d72450b78aa153bfc9cda54bb2ccc644fe47b505
SHA256afb4396e7436b889fb5f31e54de06a2cdb8c7f2d7fd1b01960a44c0878945fe7
SHA512ba0e8a8be065056d78792b4ffdb1e4f4a5529ed428ad0e227564eab93413516aa95f69179ece1a90b6ef85b57cc7376bd483fb011d9ef68dddb23e3c194cb889
-
/data/data/com.bjf.hikari_anime/files/frc_1:313894689179:android:87783908848844a47e693e_firebase_fetch.json
Filesize2KB
MD5c4e208fa868bd72468d5ed1fc77f1b1a
SHA168b00ad504e18269d5744a8f35990171ea2200b7
SHA256b67e897b65eacf33c8bf0abb2fcb4ffed48631dc46ed26858a5c219c0bfb1f69
SHA512fba46424bba4185f2a85cf99c44df4452c712fb844ef9aa23677928127543aa689a15553fb2e53293d61032f960f3e282de6c479586a03b623d1522300789612
-
Filesize
24B
MD5373fa44779fa1ccadb18040393131b19
SHA1041a53a0286efc8ee81991263a573f15fecd389a
SHA2563e306a6a4139c71e41d8b7a4968b811aa639db71cf549ff2b4e7fefea510587b
SHA512b3871ccb38b195267fd569bb84b0510c1a389b5d89a2fd2ce57dd487aa85cf48f6bdc23d8a10451954a40c5786f7033b7c7193a94daec2e3c812a7bec2bb5623
-
Filesize
8B
MD5f5a888837bec958cb8d9e4149dd8186e
SHA1ffdff07c8135b169221aab5c056f0412c851ab7a
SHA256e462f4151796f28940d247513ba99f0e60513237f6f769f06149928c3d24b765
SHA5123944bdf813708b52f2c782707c9ad14b496261a58dccd152a1d64ea3bb4d7ef3e44cc6230a64b2f8147f85fb17a0d9dac24a3baf5759d851437b73a73d77147d
-
Filesize
1KB
MD59122b5035e322ef73e971bc8a325a2a9
SHA1412377fa43180501e17395df7f470cf1287f048c
SHA256e422bec660606bc0855a0a614d6cf4a05093063db4180c557fd1d65d09ba8de0
SHA512703968c6c714bd0c2a46e249d8753c5e33535d459b0450747c96a6332e62fce1af20a3273f1fd33dc15f25e059367a8abc75188b02c1a5313e26ad6ce0ba0da1
-
Filesize
123KB
MD53056e1bdb7d4e19789d0319eff484bd0
SHA16791ae47aa9466fe0bca27ad6643f846853bbee4
SHA2568e6331a07c9f2ac139214c527dcaff2c82d126bbe7bd3420cdc36d6a8c9204b0
SHA512c790980fd68d9f89e32743bc28846807d5e5947c555f494de47714dec5cbd0c08d81c3260fa463759d1b17a953af3c44ec30b14fb08bf6b29db3837346c9f658
-
Filesize
25KB
MD529469324e59dfcc052f24b5af4e7b2c4
SHA110c1e17ac6f598037bb51baa07945663645de4eb
SHA2569195dc6a1c75a841384050240dfc972e48178964993fba6619788625f4b40d1a
SHA5125e27c2b1431369a248298f2f749136a575005584f9999f2a4c204a0c47adce2e33c8df9f058bdafa1bde1c99e46d175560cedfcddcd8581718ed1d9973c37cc2