Analysis
-
max time kernel
35s -
max time network
157s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system -
submitted
03/10/2024, 02:24
Static task
static1
Behavioral task
behavioral1
Sample
fb316717892ce1a5236b1d22727e48d959a4e6f6264164e81ee60cd02ceb03c3.apk
Resource
android-x86-arm-20240624-en
Behavioral task
behavioral2
Sample
fb316717892ce1a5236b1d22727e48d959a4e6f6264164e81ee60cd02ceb03c3.apk
Resource
android-x64-20240624-en
Behavioral task
behavioral3
Sample
fb316717892ce1a5236b1d22727e48d959a4e6f6264164e81ee60cd02ceb03c3.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
fb316717892ce1a5236b1d22727e48d959a4e6f6264164e81ee60cd02ceb03c3.apk
-
Size
4.2MB
-
MD5
9d27fd1802f804975df523bdca5e8b11
-
SHA1
4d3d6ce98fdd491f8c5f4ef63db5bdb86d0a9a3a
-
SHA256
fb316717892ce1a5236b1d22727e48d959a4e6f6264164e81ee60cd02ceb03c3
-
SHA512
31937cc4e9d3cf75b75d28e6d3e9ffcbd1156c10891a5e4b35d457eda024919d3556a5f3cf174bc12896adc58305d6fd6eb7e25e95fec85e1a356bb9ca62f1d4
-
SSDEEP
98304:eC7ckPA2J+YujH/Phl54pBClkRM4cu0LCrdfwW3:/7cUJkHhlSp8l/4cUwK
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
ioc Process /system/app/Superuser.apk com.smamolot.mp4fix /system/xbin/su com.smamolot.mp4fix -
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
-
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.smamolot.mp4fix -
Reads information about phone network operator. 1 TTPs
-
Checks the presence of a debugger
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.smamolot.mp4fix -
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule com.smamolot.mp4fix
Processes
Network
MITRE ATT&CK Mobile v15
Persistence
Event Triggered Execution
1Broadcast Receivers
1Scheduled Task/Job
1Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
56KB
MD5c516127bab1e8f523ac0bd5d20347d9e
SHA10be3c245c19b5101223f617f0ce73e900fe48af5
SHA256b66f0c5dcb7375bfbb2798d7d5487b39da068970822a31a0a14f41a771b1a396
SHA51225ac71a73099bfc2c639e6a8f8a2719ebf9124803ada9a7e84d03d7033578db3959f2538a1688bc7ab7cee28d4e3948b527da8c76ba4b9e1cd55b285f4467390
-
Filesize
24KB
MD5d9a3ad3d9279db87139f87aede63b962
SHA12d180fe7a2d3502c0ff27d43975c15c09904aab7
SHA256f8347d184b84b74a51b52784eab3a94eecf533b9755d853d7ae7216fc7f4f855
SHA512da0c4d1704f9abb1fc427b4c854954d85d471b391864416fdd879a48adbb8d20bbdc27cfb1f55e3068d7bfe80f1ef66e4f43d5f859452583019139a7a3df90f3
-
Filesize
16KB
MD5e7dd290504094a01aae177644d19f4eb
SHA1ddf463f20225e7b2b5ade74d3d73b66d799c2b4b
SHA256acb69409a532aaf8f684afcab69fe75d8c55df3cc991852ea6daec7eda87782a
SHA51252583f96e7f4b0c0bf41207be0c95387a905cd314d729220c43e0de91cafac24f155de07f90de8cc8cd05a3c25811a9a4657d188f19c235658c90425120a286c
-
Filesize
512B
MD56dd1bec4412fe779d837f62fae82c2ed
SHA12cb8682333ec8f5bdfec26babf28e6a37a596664
SHA256d7418c1fa5d48679e5c6a2ceb9780b3adc9794d3d332521b8fa4b0bde0b33d61
SHA5122baa08cfef0715b329b9beb1389a9212c42c73fb9b1bc44f12797a3d471ca8b6b565535fffb6ec58d0a626f443b766b0f2328601c62a73c4078782cfa8ed6943
-
Filesize
20KB
MD5b9e6449c3d7821f62f32eb0abb67e48c
SHA14b99e7106b113b3b284d83067ee1a9a49cd5bb3d
SHA25619e9574d591eb34930bdfb34eeec06095289c259dba2f2650e7ec09d48852474
SHA512c23fcb462a4f7c1e98e669eb41530c7f580a3112a8ff06702ddb67c98fe2ec35d6d7d05173853aa79e951232d0a470bcdd5adc366ea306029667ac378f0e0b87
-
Filesize
8KB
MD53b15865d50c18cb5a08d9d5a10bb1d3b
SHA126e85424782751ca8eca50407e56d852222f7b35
SHA256ef38434bf36e61dcf41df2a459f97f166d94f72cdd9960fa81f79fcfbfc8dc23
SHA51231e728dbdbfcd8f090b008394292e218fe36601ea97872786af2880d73514c762076d0bc4c5f82ac79d900c1fa9bbd910b6f763eea7e53c776b7b0cda51046fc
-
Filesize
8KB
MD5091318519be331b917fa90bca6e28c16
SHA188dbd3ca954640c7f418895aa871cc254d1db57f
SHA256f97684a88a52279ba744e2a210839fb741ac0e3c98c648f527872ca7f875c266
SHA512b439e8059cf48e3de5ba355cf1b826fa4ec6b6e1e6e5ad97342d18976c2df52a8170053283856832fd5c2c557b65517810a661d8b437a8093bfbb297c5c48c40
-
Filesize
16KB
MD5eb52a90bb70b76e946b62f50b6f7fb85
SHA142d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0
SHA25648472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4
SHA512b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c
-
Filesize
16KB
MD533d54953fbfe15ad784d86938e0084ce
SHA120cfbdc37e75f9f50f5ec190746bb688a2491c0c
SHA2568390e128031efe67b8f109518f3f3b10f8bfb1d5e50c1f373d34933d383d7f13
SHA5122b7442372fc6fd8af01071a3c83a4e0bda29f8d4539e9def65f5bb0dbffd2256ae686c32aeb6a2fbd7bcbef6612de5d2dad71cb3cdc59aec9c79fde2ae95d352
-
Filesize
16KB
MD50a9e56b4d6b372cd650932e6296216dd
SHA1998a5dba950df445f8d32640416596a07b2632dc
SHA25655e6c505c066bd817ebb4c627a42ad0e224f18112b9658ec7e9d31a31146878e
SHA512e2c81a8a08b4de1963cf3551d39f8d4135d5725620dafa3e5250356009dd35668d8ebfc1dab665bc9f574b3eefc8ee70542b821c76d444406bca7ad9727158b1
-
Filesize
16KB
MD58c5e0b91a8ce97ef6a8f786190c0d726
SHA12563e38b0f7b5b43569b242c2346ff17affbb963
SHA25650c715513f054093ffbd6350546be18d480579d483e540c582886a7abab6f984
SHA51228fe29d2202ae2f0b4f945e39a6a0abf99fd304317059d0570646d37a8d8da20e0f9627287a38ab9fb818e46884358577ff19b421e9eb882c68e0f6addfec26c
-
Filesize
16KB
MD529c0015d4740d361f4bed5c115712f79
SHA1dd77ef0e9013c25135a656c1f68f949167a8cbb4
SHA256e506f987912435f23ab6eeb63d0350e0da982ae5ec0f5547e04704fb13468fab
SHA51272dd2f5340d08c48c111d57bec158452ead91bc6fb20c135227a769bf845885becf92a3900906910ee5fa04f92fbbc9a8d60a249efb765042b5b3baa6c03d0d4
-
Filesize
16KB
MD53c5fb7d7a57348a16faab267f2f5e05f
SHA10f1f8fa0d1fd8c569debf94fba8120a10f71aa27
SHA256b557fb68a5aa7a3868a47cd1172d754fa4368a2b6170c1bfdbe3d74fcaf2bc61
SHA512589c6320fbbaadbfe89d710110b2923470010f88e4283616bcae304097cddaf66af84eaf20823ec0bcddaed9f4d590e0268e856099cc053d1c1ccd6193c9bbb9
-
Filesize
512B
MD5d3d43f8d55cb6e7551198ddd9e1c5f5a
SHA178ebfb31fc159f188be05ef1ba2278a6c0df6dea
SHA256cf0bd2c81dd9d0987b1059200deda996c1b3c5afa03fab49d05594d525651a6b
SHA512dbba87f905162e9b442b2d95dda80a6d1dc7b3f7749709ba72334373144a1380fd94abb10960334131f4ff0fb44e7037cf781b5db2b0d460844fa963d0c62c4c
-
Filesize
8KB
MD58a06c60746ca321b0bbf710e9165c389
SHA10b5ac4b35818f27786a6e947ad6546744e6bef43
SHA256ea2733a969be8501d53936fb379b57f156f7f8bc6ac1bb1f539721112b7ff8e7
SHA5126bbd713558c4830bc861935dea644894b164008cbb4c3459cfdd122073b2af0211334693315d01a988ce145a15f90444272409d3446a5db1b15838379ba59b12
-
Filesize
4KB
MD5051bb5016fc4025d0f13024ebe715f12
SHA1594cae41f1700c1cd6ecb7f2e8d346daeb4612cf
SHA25613870a9c623e3545deca70d6483b3804e7d821dcb4553b4f851a6fdac437f254
SHA5120cb78ad474c6d5b64cbbb63cffd3625e448db771bdfe05a1b5de72330fa1ddb29b130f7cfa85ece806ce359d03fa7416a599af012aba8cc640e4b610b4557e99
-
Filesize
8KB
MD5c203d261c1febe1c941a826bbfed9487
SHA157c629694b7aa2be10b9f65ab889494ad6883c9c
SHA25611db8c3fa1f37a6d4e23a86eaa0be88f2632410c5ef14d8dce7b28fbde62ced9
SHA512adfe24a0d6c0aacea66131faa7e211b54bd149dac4cbd88c3f4861257dc9ed7455e885a3d85144abefde2d55a9217b62cea502d745247b192121cbf13d5cb1b1
-
Filesize
8KB
MD550df11debf8be30fadb710d31bc31b29
SHA16fda39244e79e1b885a8da1670d70bde8501760f
SHA256c9208191c5d982cb747b5ac92b5eddd637cc37154755d0f1378bb2242ae6fa92
SHA5127b6df04027e8966724e37645c4eabcc7dc478b5352a44a8cc05554b9a96fe9da90b9b3569f282800b1d182498937649bf054b0c4695443ea461b484c2654ed0c
-
Filesize
8KB
MD57b604da9056d0cf8b92e3acea0210b79
SHA18fba274579cfd1871328bde34bae4d4d16abea54
SHA256e67e465862e81d51ede6f253291deba7514fbc18b60d933773c38f1ffc026213
SHA5128e7b29aa982b9f21e9b8b69fcf7fea4247f6efc46e57ecc6b5186904d65bae26c0e6cfe42dfbf905a83674c528e8ffbd51c07f7f1925aec7a63d7394a6025e6a
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5126830faa1ffc707a450999301b777fa
SHA140db881cefd7cf9682dcf77290724c67424b9b75
SHA256b6250c55736c220365478fca3f3a3f23570d42275327fbef9a11252fdb2fadfd
SHA512d63c4bf57c1c8bf17923472cde415b0c742c111b789cc46ce982efa0c29bd1bf691c06a04148d3b66fda84a5e4efa21e0030433eabd4634838e35e3fb3c4aaa5
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD51fd314001258f339218f9a695248f091
SHA10a4f5296353479e25be9567ee0e3b379f06514ca
SHA256501bfb54e19e35fb6089fa444ed8750054eda2e2cda62f7ddbefc18fb818bcfc
SHA512273dd0ed85bba1139937877def89c9cb88126d8cdec5331cbe51d70cade2720280d8a70b17ec9e476d73192b6e6f48b01b8d35c37b2d7aa0247fd7f1d12a2d1c
-
Filesize
36KB
MD533ea41f21deb9042ee171ae63a616870
SHA1d92667b892f01a64a603b40343c03bb5f81fd5f1
SHA25670320d6a123bcfa8e4f9dcbbbcdd0e0d9eae12d3aac2200e87e040d6511f02cd
SHA51244a320eff193457321321f001ea540f0b18ff4c03882d1d10c97af20866ec7ed5a187c57198245f5acdf42e77f3befddd7a5a50e3a50df14f50bdb3d4c4739a7
-
/data/data/com.smamolot.mp4fix/files/.com.google.firebase.crashlytics.files.v2:com.smamolot.mp4fix/com.crashlytics.settings.json
Filesize715B
MD52a0753300b549a95ded939a409373f3b
SHA175e18b557e285dedb9065670063296bcec2c7ace
SHA256b4862abb249dea84eb174ff80eb296e736b5f9e704856ea2085a360d0b48824e
SHA512e40e9dfae5fdc0bc5001d4f83d561451255405c9d0f47d984329d5be88577aebe0408b4d6234e05c65a110a33743fca9db41c85299179f503b06accd9fd4565e
-
/data/data/com.smamolot.mp4fix/files/.com.google.firebase.crashlytics.files.v2:com.smamolot.mp4fix/open-sessions/66FE0050024B0001134125BE34108F59/keys
Filesize32B
MD54a8625d02a8d7e3d71f3f53306544c69
SHA12b699900b0eec212e546a366ad144d34ca2aee36
SHA256fd4edd1a3690a3744acbfc57d2473ac0f8f1b0496a128224b81c259c5f79590d
SHA512ea68def20c97dded4e2a0b7255f2509103531c3873376d4ff13a6bb78f53c181b86b1f30e9bc0b466735f50e63b2342d191bd4bc7c7b261ef12d7d15863aa636
-
/data/data/com.smamolot.mp4fix/files/.com.google.firebase.crashlytics.files.v2:com.smamolot.mp4fix/open-sessions/66FE0050024B0001134125BE34108F59/report
Filesize793B
MD530c8f56b2f997955b87429e6f4ff5bdf
SHA1f8262c910e0fa4316b03884123b203a2575f196e
SHA256b1a4b6614575cce501bc1cf396fc0d6b7358d98c69d3ea63e7cb3c5c32b50451
SHA512b0a662f143ed78a25f379c70378f288aae29b4958e3110b4a0564e782c43a51b078599d85a9af0843c90e6d8efa33c88994dab5cc24aa4271cf12ae5d24e493b
-
/data/data/com.smamolot.mp4fix/files/.com.google.firebase.crashlytics.files.v2:com.smamolot.mp4fix/open-sessions/66FE0050024B0001134125BE34108F59/userlog
Filesize169B
MD5ff5b0e4a304da0db4f522f9343fb7f42
SHA180448c0bb12ef7453ff20b0cc144cfa1cecb38e8
SHA2561e8e20752aa8a71a4fe2c8d0993eba26a58b413a4c35e95a42ee5c5940b4528d
SHA5128fac7be37db0050dad22bf9f1fd9dfcb5e4bb2d202a18bd5f5f1290a2583dcb97abda124b748967492c08caea07ab139cae15cf0bc202b35128d84d214aa8b37
-
/data/data/com.smamolot.mp4fix/files/.com.google.firebase.crashlytics.files.v2:com.smamolot.mp4fix/open-sessions/66FE0050024B0001134125BE34108F59/userlog.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
Filesize
562B
MD5eb971b2caff259a56434f0a63c2ba7e1
SHA12d329ca6c6665a4ca168dbf25c88bd027640a110
SHA256409d0f31e18e82ef0cbe3a718fde89146cd7002627f7f740eed81c26cee82a25
SHA512297bb41b41c0df0c369cd575432f15894c79d0809865b28a5cb34681e0e95ffa8527948fa1a2100df14fa52f6495d6be8d7cd9758c326c569a90030d704cb12c
-
Filesize
90B
MD595eab860eba6b5a5faea9525eb682a3a
SHA1e7f6161606774d01ab03815264f50b285d4210d4
SHA256021cab80e05d4970b530847175f7f536bc1939d755ead909f753f18d96c68539
SHA5122ec7b52934688d44f95033b65938b418a482bc3643b42d9d1e0e403154c1979b72cb3c22e7eb99dc35be43a4bacab2c77a3de35e3fefc67db1e354a7dd47cb4e
-
Filesize
33B
MD535b51faac8b5af3886e70bb5a885dab1
SHA1e6cb282da46cd4bf113e25c8573268578dcd11b6
SHA256af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b
SHA5126ad5e9766cc03a4436e1440b9e47c44da6c6440a3c94b1cc988f8c5680043cde6f7b7e02b2b4c71b25df4209c39ed099fb65fdde02a9f09464609a1abe6af8fa
-
Filesize
75B
MD5944e6a5a08cb971370c65c06061f0ab4
SHA184d47725cc29bf167b782c702575bce4bf2ecc5b
SHA256ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab
SHA512bdc404233927a6a99160492d0b3e2cf00776d51b33612b8c9ecba395747b3572cf1790269fb199915aafe84c546d30e3259833c9d00af8c412823396882ca783
-
Filesize
121B
MD5ffcbf87665a36fc21782400bd0537e79
SHA13dbfbdbfdcde953317b089f9a9fa0bbe50c698ee
SHA256a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d
SHA5127f98ac150c422eb4f1126d86501d0435817ceaa7eb5549e4d21a295d57be3d3fed4388cda782c084130c4ac8d57a4f225139a2e42e8a12b34cc1679140d16b57
-
Filesize
163B
MD5dcf7d6c1cfd5e7b56074e3001577c78b
SHA1b8eba89aee9f6688ecda6675ef8ff4998da0b141
SHA256ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91
SHA51242d75be824d69de23d2e8605d60c3608db20ed5c059f5b67c63ca2845484c67150aea88a3aae36aae12a4ea266fb6b469d09f765bbcd444350d836ab83f7695d
-
Filesize
212B
MD51b946bff98a092aedf665b1d6ca7d4af
SHA12ee813752c2f126e36b3660cf75b60b1e29d5699
SHA256df391d1445a27c6c702673acb3e68342ac68d86de83797ab6d8e8b2bf3323d5b
SHA512ced655055124f3d4f1b7de276b85481e8d62764c9880af12145e64dd238b048e4d78dc80c2fa620f021796e7650d9403b39922031528d3407359fa6820f92322
-
/data/data/com.smamolot.mp4fix/files/frc_1:620496936909:android:167d50e04556260f_firebase_defaults.json
Filesize240B
MD5e46fbbc75b62b9784bca2bb9710de8f0
SHA1b083aa81b9897cb66324ef4d3dfbc14d5dd2a326
SHA256a07b82b8a9a83014578de795dd9afbe55a0760fe10ea42fd59effeed09e490c7
SHA5126e7406dc1fdcb2c1a635826e13ef54dba2e6ad1d48e7408e85c61b1ed3bd749ccae2528cbfb8f222b76d9fafdb46ac0a0fc70c18a690d9e6c7e025a3bc24b71f
-
/data/data/com.smamolot.mp4fix/files/frc_1:620496936909:android:167d50e04556260f_firebase_fetch.json
Filesize246B
MD5033fb2cafe9966526d606eb67dd5e349
SHA1b4e0b45bc286141b7b38c94a1a0f0bc91122ca7a
SHA256de1ed503c070379fb11d6fadf8d050576d8420f272c5858d35b735fab4fc1f5f
SHA512410fde8924eb8daa7b7ab8cbee94339437c7d5b33a45db8640ef77cf47428403cf72bf90113b0635025bd4f290a38df5d4010d7c0bbed71c42882ccdebb91cc5
-
Filesize
24B
MD590564a67956b46b4ce701f9e048eafc7
SHA12faba5525e571128c0c633f4e2f239a4f1cfb703
SHA2563c7e03922c29c752a44925faf236808895bbcca0ef9daab6c1e0ba8edd8f42ce
SHA512be032ac7b22a23bbe1930223b5df070a88d15a8e472240fefbb6202968b58ac44cb920ac127ea577c1d4e5cd548c5a0fb0c43c253396162dcb47d328bce84b1f
-
Filesize
8B
MD59179aa1d394a945a0d065e712c71706c
SHA11e34125c68ad4c5ece3676f659de1411ea9632e1
SHA25658ad110f8ed5f5be076596c92ef188fe4cf30f1430cd6e539065ec3d4301b937
SHA51290f7dcf937eea80e48ef99ac3af965ce769fc3571a9edf168a1f9a84b2867458fa0fc46e8d2d1f7360dd179c43475c7ce9ed5dd58f7b65808c8ddc16876ea7e3
-
Filesize
5KB
MD52b946d08385c31cbb4312c14cf33ab7f
SHA1f707355ad03df82a6228e726ed1bfbbd2aee7440
SHA2563ca7d63a085029b780bd5670906c277dc46c4f9ccfd84f97663fd2751e2c4105
SHA512bf09ca96f351dedcc8f480113fa557668b7a54150c6fae7170637ef964231a9208e8d1835529e6b695e240c2d37c27bb4cfea8246b318e8cba850a5bf3a68f2c