Analysis
-
max time kernel
46s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system -
submitted
03/10/2024, 02:24
Static task
static1
Behavioral task
behavioral1
Sample
fb316717892ce1a5236b1d22727e48d959a4e6f6264164e81ee60cd02ceb03c3.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
fb316717892ce1a5236b1d22727e48d959a4e6f6264164e81ee60cd02ceb03c3.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
fb316717892ce1a5236b1d22727e48d959a4e6f6264164e81ee60cd02ceb03c3.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
fb316717892ce1a5236b1d22727e48d959a4e6f6264164e81ee60cd02ceb03c3.apk
-
Size
4.2MB
-
MD5
9d27fd1802f804975df523bdca5e8b11
-
SHA1
4d3d6ce98fdd491f8c5f4ef63db5bdb86d0a9a3a
-
SHA256
fb316717892ce1a5236b1d22727e48d959a4e6f6264164e81ee60cd02ceb03c3
-
SHA512
31937cc4e9d3cf75b75d28e6d3e9ffcbd1156c10891a5e4b35d457eda024919d3556a5f3cf174bc12896adc58305d6fd6eb7e25e95fec85e1a356bb9ca62f1d4
-
SSDEEP
98304:eC7ckPA2J+YujH/Phl54pBClkRM4cu0LCrdfwW3:/7cUJkHhlSp8l/4cUwK
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
ioc Process /system/app/Superuser.apk com.smamolot.mp4fix /system/xbin/su com.smamolot.mp4fix -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.smamolot.mp4fix -
Reads information about phone network operator. 1 TTPs
-
Checks the presence of a debugger
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.smamolot.mp4fix -
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.smamolot.mp4fix
Processes
Network
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD53e5f5fb2c53322780ca12f0439e99f5f
SHA13136c8453a4c5b8e76a630eb28e7a4585210a993
SHA2565bbc6920cc7022b85a460c416b556d1a7b80b792dc5e37b8ba775ac3433e1436
SHA5127f89bb8046f4183bffea33dda7803f9ead791c5e8e1d7b50a3c2d6bff5b00df26b77a838b5f4b7417b5994a193d076d63cb47e4164f6441901f3ca9e9306c114
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
132KB
MD5d6dac75d0e59a808c2bda408eef29390
SHA1d023ed6ecf31ebaa71748455119dd6b21ad621c4
SHA256c3c30df376b62b0b22388a39a629acc32de818cd2da56d816d4909b0757411e3
SHA512acbb5c0caa4b74c9fdfbda75d2ebb19590b75d93d589736bba43c3e237e420769da78a7f51b90a9f656c1361ded8957f803b93b28aefbf6b9b5ce294a25be025
-
Filesize
16KB
MD57237409e0640cfab7bdbd429bf821a3b
SHA14c3da934842f8d4835dfe2a9c275a300e5123309
SHA2565c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
SHA512c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
-
Filesize
16KB
MD582a03cd729f7e73a621bf1f683d917cd
SHA1dae00138966d0c4ec112775b756551ef2f7ca707
SHA25662fc0df9db3db175cdda4813544327addfc35884efdcf4722fdf80283f6ff8b8
SHA512be0a6887e45f6d9deef9277dccb4f0239cc9199e701b684102070186f675f3893864772b0235feff3d6f6cdf4db110d6d9eb50910dec312e00e6a18338ac6cdb
-
Filesize
16KB
MD57308dc17b103a1b67109c47348826c47
SHA196add7b2ec54f00a22920d74ee9caf666cdb6105
SHA256e11487fa6abdd41cceaaa9e6be768707c508985d259e09307ccf63e018bd8c37
SHA5127b46595fd8526fff0f612c277a56b13bee99fcb13defd1bb580223c80af98d0a10433a2245f502eecf5f3245f37a577a2ebd0b15659bb9ee396fb8aa1a1b3d0e
-
Filesize
16KB
MD5356ff21f537162a483211895347e3ece
SHA128bf6fa3e0d04f5edfe71f12272596456677d92d
SHA256ca3f9b01e57c44fb67fef2d42b9d6215258d994a7fef59a8d1deb5568b2c1d76
SHA5120bd1a7e336f0444a3b2345b997269c8ec4d9b7e04a8d8e5b60a98c5ec016bfd85c712165f661d175eed7687fa18f532385891014b1e43a231fdc447f378376a8
-
Filesize
16KB
MD58e38669b558f84044bc046e7f4b91f6f
SHA1c6ea218306190f2117df8e000795ecb4c55e0210
SHA2565eafcfbbb4246b8047735e6efb7cfdb0f6319c0cb51fd0a247ebb980950c07ea
SHA512fa1beb1cca6273b09191fb0f0f5cb6a311328ced0e82cd6349766ce21ad7a1a47ea3c8e5e5076208a7b5fa62eb32f377434b25c694dc0954b37ff4fa691fb35e
-
Filesize
16KB
MD505b42f7f08420b385c5ac0e6befb1ba4
SHA167e540e19f223b0fdf341e500ec7594f60a15a41
SHA256d0a1d473283c18912dd662264c94b72dcd5a831f6d174f87bdb193dc2a30748d
SHA512d7738ecaaaec2d9baa157214f8b19c77af3e76645d9c5d16874d873024da7b4c04d2d21b22f153a297c6c563180dc63692cfc0fa7085fe0a3b03f27b5dd27958
-
Filesize
512B
MD56c7d95d46a48e3c544562c549f0fae2d
SHA15593bdb2a78bee16faa4a999bb7b3f7d1343c45e
SHA256346f968d8c9579ae47790a0f6859a90c3256a7d099e3033fcded534c97e4c351
SHA51226c6dbcea85e6f4df5fcca1f7749de75d40646510075dff59a266c710073f88b444b1d513716222b9d93096d539d5d4eb80b3d3a8ddbffde102c706ed86766ef
-
Filesize
36KB
MD521892027e0862e5bfea01e7ee7b7d9da
SHA1352ca482f838ded0e7be0728a9c11b26a00ad895
SHA2569f6b100f4164388d6a9f68701aaa0c281c943ae22644286dffc9a642f0e5c9f9
SHA51274e53fae10c838058ce663a04fc330c7d5ba2a6744ce590e548a54a1ccf370a113c0f9a2b0e4389b68731f1630465b8b41b7023c9630c6ed19aab3b92c463ebd
-
Filesize
4KB
MD5be211b4f86e3d022adf9df0c939e152f
SHA181f7d796a4d686756e0e360d2064ce3460f5268c
SHA2565c38bc5c2a6a123f0bf5efbe9e0283fbfa8ccd4cdf525eedcbd7249d826d2fdf
SHA512c71b3b86c78a82c38da571783a0e0e48724e68d919bb9de7501c454d8a585524255dd27196c6a313140d3fbfe12c9e74318b0568496491538c9fc2ab82e43154
-
Filesize
4KB
MD54f69a7a3183ba0b7857007b936953b0f
SHA18c369f8b1ff6cea0a74d11c7e5b90804db5841c4
SHA256389b0ec3bfeae30b6cc00317c38b07b86c76497a04004b2379b914a532401083
SHA512ecd22482458494ca0b5538b138d6fe8cda8d41c743f4ac3ec9a61fdbdeaa45d1b8df2f8c1a53987e288927980d4223942992c01a6de8ef6d469a5192a8d03b43
-
Filesize
4KB
MD503277b3acb1206a13ab957ee0aec2a12
SHA1334aa3531b8f4377578f88021fdd49a5a11ce310
SHA25619ceb6a03b8881386c7d307badbd7216e75fe3c94c33e74dd4248d19bf88462d
SHA512a3b2aeb55c40fa6e79c40c5a95d1aa6e0a172a259942ad3d9856a74d83593816a2ced3ce04f3b197fb836a4733438d8bbdd8f7df1136be2a840a8079f9ec04c5
-
Filesize
4KB
MD5250bbc0d78a8d0a5a33a564133b7bfc2
SHA17161d4fdf259f309ce9856cc45acdc76a2038533
SHA25628bf37d97af4b9fea4ef26139b4aef30fc48d98ea94200de068a4c857f682172
SHA5120fd8dd6e1ea3bbabc277a9954bb1365dce1e3e0d61fde75f1a832ce08b8026aaec47e816bff93dd4948496ed7f210903adab76712f2d00b1d06d77426d4c790b
-
Filesize
4KB
MD51b2e0b8e3634c61c899e2ba349536e42
SHA1999155cbbee41078d5ddd62da21b59ca4cd463b5
SHA2564280c252720beedef0164f9abf4e2664b134e66acf40bf78dd6af7b9feac5a45
SHA5127f7426a67e81643103875f12d12854c9e5e73a02b48505d11559ebde51e6077a757a82cf982181175d3e7c7bf9b098819331700caa8b9826c209f08564f98947
-
Filesize
512B
MD5da21fc790cc0461a0f135c82793a301e
SHA147bb29daa906769f3a648401c633338bf22a09d8
SHA256c2d8ece904e0f5ef66c0291329278a70097248e54fb18dbd4d03eea03832ce65
SHA512e2efe51d8b0fd41d1595efd9a71fecea6aeabfae77687135db8abb42c6ebcf18ad3a0b2090b4e0e94b2236535c10904c2c20713b185f001ee3f10656ffae7113
-
Filesize
16KB
MD59f7280bd061fd79ac6cc8b4075b8048b
SHA110c26b83ed0923a0b1e38e94e97171db7c9dba21
SHA2567009423c1dd0b170fe16bb175fa4e1b4f3ca6a6abecf3b7189366cdfa55cdc4f
SHA512bd32f7544ca80b99ede2f39c87af3e3603e5341252da5703e33f157e5ec53cbfa704e8bd0492acd119fdc725c5726d6a7507a494e18cb4c8db7ed753586879ae
-
Filesize
36KB
MD5880823108d3baef06ed82fdf81110ea0
SHA1166232487ec3311fb88c095df08aa6e79f17791f
SHA256ab6d353af9aefa61d7bc68727d5ed6126fcbc959eaec3f22518265463724dbd4
SHA5121496c74e9b53cc47b0c01efde865091ded3bda19d3e660b712a9e84ba06e115042fe0efad94fc311585cafde6769a21651dd626be967f8758ddeb1fb3706d41b
-
/data/data/com.smamolot.mp4fix/files/.com.google.firebase.crashlytics.files.v2:com.smamolot.mp4fix/com.crashlytics.settings.json
Filesize715B
MD51ae9a9203b9c3a2b45c8571ec36bb148
SHA1a8de0e306e9da7c98b29c322b78c18abfd36388f
SHA25670b17ab9b51d2d370c35d1ae617678c78a0c236a0d3e0294c399f67c23f513de
SHA5128df2edf4d54bfcfe9b62225b4d0620dfc68467c1d1307839da84fd328e13a9c1a0989baa576bac8e702dc2d5ed55eba178e17446896429f819bb4faa6ebafefe
-
/data/data/com.smamolot.mp4fix/files/.com.google.firebase.crashlytics.files.v2:com.smamolot.mp4fix/open-sessions/66FE005000BC000110A15BF42886805E/keys
Filesize32B
MD54a8625d02a8d7e3d71f3f53306544c69
SHA12b699900b0eec212e546a366ad144d34ca2aee36
SHA256fd4edd1a3690a3744acbfc57d2473ac0f8f1b0496a128224b81c259c5f79590d
SHA512ea68def20c97dded4e2a0b7255f2509103531c3873376d4ff13a6bb78f53c181b86b1f30e9bc0b466735f50e63b2342d191bd4bc7c7b261ef12d7d15863aa636
-
/data/data/com.smamolot.mp4fix/files/.com.google.firebase.crashlytics.files.v2:com.smamolot.mp4fix/open-sessions/66FE005000BC000110A15BF42886805E/report
Filesize792B
MD52826371e251a6eb51e205e1512f1bf32
SHA1c6c04ed3f147c32b109755e8affd4cc679e31034
SHA256bb8dd5931e62461ec3e934a56b21dff087fdabfdf6f6e46b65e686750d443721
SHA5129c8bcad03c3c5204b00a7bc37ec7f7db8113b4119627abee4b3148b0bc57c4f5751e1faf19bc4eaf371309cca4fc64b0eb11ec49c7a7b4d0df77292deba4e550
-
/data/data/com.smamolot.mp4fix/files/.com.google.firebase.crashlytics.files.v2:com.smamolot.mp4fix/open-sessions/66FE005000BC000110A15BF42886805E/userlog
Filesize170B
MD581a1c4b53995d5244def44b0ed57f507
SHA11029975f706e39bf482c31df91df00591d914c9d
SHA25689419d66b93a3aecbcdf3b337adcd7e7d5cc151b966e901eb2d80f3bca83da7d
SHA512b7dc840fb6a1b109d4cf013553771b21bdb51d3ecd9fdd757a57b6783830d864f6f836dd6f6ba4af7b7f6852a693cc8664530c8d2f8827543218335e17be5b07
-
/data/data/com.smamolot.mp4fix/files/.com.google.firebase.crashlytics.files.v2:com.smamolot.mp4fix/open-sessions/66FE005000BC000110A15BF42886805E/userlog.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
Filesize
90B
MD5bc2df299f0cdee03fe098954e432c5dd
SHA1bc08e8dfff77f7e555ea225e3c072c6c60e7697c
SHA2563b82f487167f685ed466e0523dbe9082ff2f5ef9e711164b096f75dbb22fc461
SHA512d309195f65d23862bac6f3c109ac7ae7c9792c373ca22a27b09c64ea6aad13c816f368fab3b4b28ea86b930e2f67076f75e5cd244ddc7f88c59f6ce491555c46
-
Filesize
561B
MD589b5d46842e7b0ded78e0a3aee9d2e9a
SHA1cbaa88fe5ebabf807f229361b603a0e3d08c4fdf
SHA256da3298a1f104dbe3e5d43f8b063d02f04ac1e42fab356b4bd4971d3dffdc364f
SHA512553bc77758214961e3b00d13e38a8345735bdd413b8d36a8e6fa063dfe1c9d31d276f6c7d3966d0eb0fe51c9cb6a4fc6beb876296b3761084a138f31b069e2fb
-
Filesize
33B
MD535b51faac8b5af3886e70bb5a885dab1
SHA1e6cb282da46cd4bf113e25c8573268578dcd11b6
SHA256af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b
SHA5126ad5e9766cc03a4436e1440b9e47c44da6c6440a3c94b1cc988f8c5680043cde6f7b7e02b2b4c71b25df4209c39ed099fb65fdde02a9f09464609a1abe6af8fa
-
Filesize
75B
MD5944e6a5a08cb971370c65c06061f0ab4
SHA184d47725cc29bf167b782c702575bce4bf2ecc5b
SHA256ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab
SHA512bdc404233927a6a99160492d0b3e2cf00776d51b33612b8c9ecba395747b3572cf1790269fb199915aafe84c546d30e3259833c9d00af8c412823396882ca783
-
Filesize
121B
MD5ffcbf87665a36fc21782400bd0537e79
SHA13dbfbdbfdcde953317b089f9a9fa0bbe50c698ee
SHA256a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d
SHA5127f98ac150c422eb4f1126d86501d0435817ceaa7eb5549e4d21a295d57be3d3fed4388cda782c084130c4ac8d57a4f225139a2e42e8a12b34cc1679140d16b57
-
Filesize
163B
MD5dcf7d6c1cfd5e7b56074e3001577c78b
SHA1b8eba89aee9f6688ecda6675ef8ff4998da0b141
SHA256ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91
SHA51242d75be824d69de23d2e8605d60c3608db20ed5c059f5b67c63ca2845484c67150aea88a3aae36aae12a4ea266fb6b469d09f765bbcd444350d836ab83f7695d
-
Filesize
212B
MD5a512c29bc3c1bea698e31170384cd2f9
SHA1b730962a0ff3a2072e2e29fc927614e2333f406d
SHA2569f3c32d064c64abfc21cabc409812c0b058666cd06a7ec9be260cceff597868a
SHA512496de6f15e2432b2ca8fb52d6ab54b217418130c9afe00bc89df2f3db559cb2253c3cdeb6ea527150cfcc9a9f07ee1f1ba0f82337bd60d4ea1a71ea216291c2f
-
/data/data/com.smamolot.mp4fix/files/frc_1:620496936909:android:167d50e04556260f_firebase_defaults.json
Filesize240B
MD5e46fbbc75b62b9784bca2bb9710de8f0
SHA1b083aa81b9897cb66324ef4d3dfbc14d5dd2a326
SHA256a07b82b8a9a83014578de795dd9afbe55a0760fe10ea42fd59effeed09e490c7
SHA5126e7406dc1fdcb2c1a635826e13ef54dba2e6ad1d48e7408e85c61b1ed3bd749ccae2528cbfb8f222b76d9fafdb46ac0a0fc70c18a690d9e6c7e025a3bc24b71f
-
Filesize
24B
MD50ede1c6c5edb4f1ebb48a5dc6c381820
SHA1d54c979aea16ece754dac520945ae8c1106a1869
SHA25638b090ce4e8a15a77df4eab0749b270cdc590bb7d1c23fabf657cf18d63c729b
SHA51260cb2b1a2975abee412d0b3f59096860622aef62275130c9ed750621977fdb47dc7b0bd508111dd9c1edf1ea75cab84957d24bd0bcd651dbfbffc70b8d4d7878
-
Filesize
8B
MD5fb4e152fec52018788924e724183282c
SHA10893cd4dfb3d80925802090f7f845eff96de9c4a
SHA256b5260fce5341c09410600fcdaa4852bae53bdb4dbd6e05b429bb38fdeab5d570
SHA5122e8d8b1c8db82ee3984a2213d16c1c8762c108b6446bf4c9a19461b1b3ddf9ef60a2341e66de30fbb8294ce328245eeff06715e07133e590cef762323343a3e5
-
Filesize
5KB
MD52b946d08385c31cbb4312c14cf33ab7f
SHA1f707355ad03df82a6228e726ed1bfbbd2aee7440
SHA2563ca7d63a085029b780bd5670906c277dc46c4f9ccfd84f97663fd2751e2c4105
SHA512bf09ca96f351dedcc8f480113fa557668b7a54150c6fae7170637ef964231a9208e8d1835529e6b695e240c2d37c27bb4cfea8246b318e8cba850a5bf3a68f2c
-
Filesize
11KB
MD5e5f95e9d86e8675eebc8c8eb50ce8934
SHA187d9a43a0e6da21be42afff53b5e44949acfe732
SHA256055fd7a69ea5b624c3703974d6fb08c4238ce2137583a6cdf5c75c211de4dcfd
SHA512e6e0bcda51ec4dd70d3aaa5f1d06c9c164212dcc76f3ceba6fe0cb70123e89ae15ab21ee90bcf832810d7783bf06054f46923779e7fda7ddbdae9149a42071ee