Analysis
-
max time kernel
58s -
max time network
69s -
platform
android_x64 -
resource
android-x64-arm64-20240624-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system -
submitted
04/10/2024, 09:26
Static task
static1
Behavioral task
behavioral1
Sample
sportsfire1.0.5.apk
Resource
android-x64-arm64-20240624-en
General
-
Target
sportsfire1.0.5.apk
-
Size
13.5MB
-
MD5
b6fde0b885f3a6bfc1f30d1510ca487b
-
SHA1
e580f5acabfdc7ec2fe2206d6b732500143c37c4
-
SHA256
bddc0edd8a79c6ae0919cd52e038717066880d4dbbd0596c6023cedb0ea12018
-
SHA512
52963aa087a511f10226c45a07b850eeea96255cd8d710cf3d22c0faf33efe107e9a169318a4f9068bee7406c5fe157ee9e5e24bd2995dfb1109215822451ae1
-
SSDEEP
196608:lSXWiBe/AJWTZ3FfaPnPJq7eSbDmdKsBuDYAICzTnbGSAt5J87Hrrx+R5QeqFTKu:lSXU/A43bidKqu1j6S4J8zAhqqy
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 2 IoCs
ioc Process /system/app/Superuser.apk com.leed.sportsfire /system/xbin/su com.leed.sportsfire -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.leed.sportsfire -
Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs
Application may abuse the framework's foreground service to continue running in the foreground.
description ioc Process Framework service call android.app.IActivityManager.setServiceForeground com.leed.sportsfire -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.leed.sportsfire -
Queries the mobile country code (MCC) 1 TTPs 1 IoCs
description ioc Process Framework service call com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone com.leed.sportsfire -
Checks the presence of a debugger
-
Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.leed.sportsfire -
Checks memory information 2 TTPs 1 IoCs
description ioc Process File opened for read /proc/meminfo com.leed.sportsfire
Processes
-
com.leed.sportsfire1⤵
- Checks if the Android device is rooted.
- Acquires the wake lock
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Queries the mobile country code (MCC)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:4660
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.leed.sportsfire/cache/image_manager_disk_cache/050221b3990381d5967dbdc4a115e4301cb1a7b287ff0d2adc171137cfa927fc.0.tmp
Filesize65KB
MD58b60decadaeb9c3274fc078694a945ad
SHA113f984296011674141c21ac41bdfc0d929a48654
SHA256ab7b12626091dbf73c1fbd9ab39fd944aed4ed18268cb7385c49479e2b742464
SHA51272bd4cf28ed57f6816988998a76e7d7007e36a79d4824027554d993bcee4585c5e7e5dd2174e6c2f04ac1be8f8d0c6eee0169c0e3e1889e28960e1500393f4f3
-
/data/data/com.leed.sportsfire/cache/image_manager_disk_cache/3a07e69baaa0050c7f7732462ac695e276a5fbcea92cce8b4eec14d63dec29f1.0.tmp
Filesize173KB
MD5ad1ddd00b4dd4f3d60000763d984c813
SHA1ef1374f7f4f684055eff930bb1207d2aeb2d0574
SHA2567133203859b466f15cda3983acba14af73892de3efe9140c7115ebc8cb482108
SHA51229fd5157df54ceee95ce37e89f42d06be05ae69553b00fbb75dd438b3f459a1548678e3d55834638deb18d41339b8c3262bcfd2287bb432836672e4a7141032a
-
/data/data/com.leed.sportsfire/cache/image_manager_disk_cache/9d3e1cd62f68c4a7a05eae96c64bd7a8bbf29a5edf3683641732c10143514d7c.0.tmp
Filesize26B
MD5e7404edfad85075e9dce282f29eb7698
SHA1d5480a20134b235c467c2c88dc6b2d9cf4774c19
SHA25609e14054a072ae0fdc57ce19c704a94e4d80fcfa95d7518ed0a4aae7565cf8bc
SHA512d35d073e01c3df2cffab41793618d6fcff48efb1511244ce14148455f6ce326f498549c1c829f2e3706e0f82e976afe10b20d6ff80c046ca41c369d411dca479
-
/data/data/com.leed.sportsfire/cache/image_manager_disk_cache/a66655f8e6e359ecbf3547c0750619c3333fe3accbddf2c93a3304db9578d018.0.tmp
Filesize13KB
MD5ceb7e7812b61c31cbb4f89c79223fb69
SHA10e16088a037c9f266b40521cecb07f5c86036464
SHA256465c1f25931f622979abe57149924caf86bb5e92a55744cb5cf6007caf2b24b8
SHA51228c3eebe80007ad9cfe3d9ddb5386fc64ba09655274393898032286c52550261b170bf1c9b7e22964648335a578e872147799fa0010e00d1eb6b2cd0d0f1f100
-
/data/data/com.leed.sportsfire/cache/image_manager_disk_cache/e18f4e5380c8adc27ff2a526e1a3542dc898b8e819197f35e611ca509f2c56a7.0.tmp
Filesize8KB
MD520c1427bcf6dedbef532a82f586b07bb
SHA13aa4bc783ed039486a636b525d741fa4e4536c20
SHA256248adce0ccef2ab39ad19ac04e4414b104f00cb4a876ef8ed38922707074fd0a
SHA5125556ac00eaef6a87f26e37c7d21e174ee07fdf7a210c5939f86aad55574073b147c85a12a048ce9cf6fa73bc5688fbb3572b496ea279f5ead2acc46df0c2c583
-
Filesize
1KB
MD516a08641371ecac341f6714fa76e2d6a
SHA136d3d579a2321ad9ac2234c7439940dfac7f5acf
SHA25659286f439a8d3d43e9e713acc33c053701f8b40f72e3e5199fceaefd75b7da8d
SHA512f7ec8172260b7fc0cbf9f0fd15d37f3a2569a36de72189d0d9c7191078ed2eefbe1930cd4f189d602b93b2649e7589f7ce3486f8bbb649b139516b2ecd4eb246
-
Filesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
Filesize
956B
MD5a9bf97ebb8dd48146904b1b512d69b7f
SHA1515418501dd1b2ecfac815d5433ff6adc085875c
SHA2564f26a557b82b584bdffe33f9cd099536672336fea42a311d7a5f71feb31b9c02
SHA512b0539dd398269d151371f675121f1ca923a0f8b28e0766970615562acb1814e925a81b918317fd45b5bae94c61e25fec9f7e1cb1cfd73382d277fb6b2957aaf2
-
Filesize
56KB
MD575d1c7d6d2d6f31737cd59c08b78f175
SHA16578bd4611da157064dd6c1277b467e63fd4a937
SHA256610269fd4d0654ee09bf62d05f25b9347aff501da80f7a7b697b9eb059bfecde
SHA5126fe54ec4a2cc6aa10636e30da027648bd0b676f7d005a42a569e2a8e6ed107117dfa009bcb1df83bcbb9fa8542c31a44f093604a8fa5e3d2a5c84a33b6ba8015
-
Filesize
512B
MD578ab5ae1c24ed0d22b7add51f35403d4
SHA1a65d996888f45f6b0a584d124b99c21f7126c925
SHA2564ecb8913a73f1019bf079f9296eb6e72070114a5eb9e7e49b72ca3f174e4f0ef
SHA5125419948be33bba71a947de44bc4c0a7ba07d9c24dda6ff8f1f4b82fe7a2d9bdf7f692bac41a5b1c081b14dee7c7db336f6320fea01f9d9152fd76db2eba9b89e
-
Filesize
8KB
MD59fa7bff0a7b013eb9ebff2ae871abec5
SHA18f16c7e72f36e36e9bdcdd2bb23a7295159b7df8
SHA256a8cdc5a4c890c5df4bf4b66f995bd6052b994598b486d7e50b5945a9d0f7a3f9
SHA5124293bfef620bd566a421c78cea31b315bfb449a78a6b67b9ecedf3444954f711e92e879197af305006e8977732c989334f9054ecd58e0350c14a326bb5be778c
-
Filesize
8KB
MD552e806772697548c1b279801d93402ce
SHA131660183da00a005922d7cb3976891c2c56ccc96
SHA256e1e9614ffbd937bc2d224e3adea9eaa2520b59f000bf4ebf70d47bf36d4e7ef9
SHA51205ad23a3b91e639c463524671fa0b5b87337edbfa679d4ef314454c0dc69ad894e269e6c019c3b9e18b3f9b51d96b383455a61c10f55e26042cbbc85cb6642f2
-
Filesize
16KB
MD53a30613963fbc61e03be98d809e38dc4
SHA1e9e1e6660a8d02340b936ac4dd591f54df505b47
SHA25697cb02da965fe288014fb420f57f8dfe260a065945edffd77af20a2f419984fb
SHA512a60b4818fe4f56ca81c524b8e99cab9b9ec155c16a60b2feb192aedd19b2740e0951d4939d8d7141de8e220ed1887b5a2618bb1c67114cae13091e238eb58892
-
Filesize
16KB
MD5c8f9246709a60f836c1bea9375040d48
SHA15911c83ca22751580a074c5281fec3d8b0da345e
SHA2563ce7079b2fc6b448e57b4d748045b7d522a3981d2bc3a5d684ab9643a13845a0
SHA5120e377adc8585c1ba74e7b1d99173f465d566d7a59321d7ebd33abc5affdec9d1ab09e4251914a83d197050f0cb6bbae995819f46efa482624ec6dee6cf01f906
-
Filesize
16KB
MD5489c8b5b01007052f067eebf9fd404e0
SHA13ed92eaca0cdd453a24eca5770f57661462aa07f
SHA256e9bf20c871936967bae197899d186d13df0db4adb927dd3af94c40ef673b7b60
SHA512c4891c9c5b376c8edd79dbb8c7da10f56f0c01111a7ce413c5bf00c1719f0f07b65c6df288f6671d3d41f9254f48952041f9b530bd2171412fb5ba15149e1d40
-
Filesize
16KB
MD5a97c1c880d5e5662be35f419ce18b578
SHA178b1732fd54231a4ba14e73643b61507e8f8bac5
SHA2566adec039acf565b6cf931729c2a5963a646a82edf5998c29cc77033991ef7d27
SHA51267ce74fd2cd751cc91a4f6a85d8b150b6ec47442bb3d07d37e7705c882ccab7d824fd5a12fb55fa98d40681dd5c693d525f3fa31e956da996979e1abd7d67c54
-
Filesize
16KB
MD533e45b67e616494460dbe4d9a030832b
SHA15ead109348d8bf7cc7fa0fa29c55da836b3b2e6a
SHA2562b65217eaafc04667bf31889ff3de3f805fd4f496c44d6d092ea2cc49791acb2
SHA51278e4ef52a262c912699975a4baab3ed4bed93ab36323f9ad75bd17964e1100a1bcaf51746d1027cbaf7175c9bcdb8d5577d80b5dc13eb4370205eedae7159ae8
-
Filesize
16KB
MD54cba6711f8edffa476c67c7c46a748f7
SHA105bd072f69d16feb6448ca1dbadbdda11ac8b2d5
SHA2567552815f109e5b218c8dd14942c16e4656a42840393cf152324a10174a6c12a0
SHA51288804c8ee3184072dd8fb3b5b5c32e6c25cebef78e5736cde776e9144fd97f3ec0dc3fae44e23fd5918d7bd3df9989ba70db9aa2ecfa3219dbfdca237240f540
-
Filesize
512B
MD54ff9af265b6d412f8b8a4d333a53be5f
SHA1687f9c0a28209ed930e4d93ad9d2a68c558bed18
SHA25612359d008bb1dc2c2080e000b6571e23fb1da8cf15599c1c86116f3046980501
SHA5125f56dc239a2a818287390859ad09977543719229c17666948e0746775e5b1e9466ca8426245a1551331b68f95f1a33d3205558d19cacb5a1456f8dc104357123
-
Filesize
8KB
MD596d950b1450d8f111bbed0db12e027ad
SHA19217be333360eb9f916bc2eba4b6eaed50ca0599
SHA25670e4be369960593292e450f715792373da0330a989998d369cd3ac09b2199d81
SHA512e5f914065cefe978f6c97b0c253f385d7efb5fca283b60420b2243694e89e2caf1166da8cef4bfdab01f105fe9c809019aa939eea297cb837044806e537e0550
-
Filesize
4KB
MD57db8d71283b23d6d20a2ba4ef58b968e
SHA1a7dcdb669545001476e051053b741a3bdd060797
SHA256c1da6d2efb7e46de5fd8839d7c81118d1450af894b471d0e3b2879699cac8ad1
SHA512593aaeb9f5e85246b9a959f2a2bcf06d736f393eabfb4e2d137c56060476d949fba1dbb1455a24b01f59c7d6b66fe2c2c4f68d8cffab10fdaf150536968c4659
-
Filesize
8KB
MD5acf153262a71859c09f8ed8f27931900
SHA11102075559d235a08ce540a3c944d460a1c4742a
SHA256fd22287c57ff26465cba909d5134a6745ce655945cf9468a0cbee1e68aa6ed44
SHA5120ea3607b10a25914be38b2c87c4d00891092912f5cdb9d490b46d29d65705b7a6f70fe0849d09f12ca113ca3a98c84e596fa12f26e3637c1c794838c17d4b0cc
-
Filesize
8KB
MD54748362796dd9e95c672065a22c18f56
SHA1d93fe5e202cb1155b0ffd0193eead0f998632efd
SHA256b2a5bb4f942510a3a176915f2496fbaee97b962c83e4392458e9e7627d9bb877
SHA5126cdef2ac407e64f220a6d8b5a15c69a64ce2e44fcc8a7af8a850f33a54ab44dd06d4bad080f799bff970bdaa3e9acf1c7dbea41f5786c3a09b11a57d8807da26
-
Filesize
8KB
MD56af1d66c9d87e118328d12bc12b5b109
SHA1ea54ef97976a9db95435eb0528872b3f55739191
SHA256125d369889c7b5c0dd90c765d71b71560ee6701be6613ed35f56a50d1a7109fc
SHA5126ffd0fd0c77f5dbc6e2f0af8148acf0752de1e55c9806eae6a68e209792a891290ae03a70cb7baa6e6dd5bea7b0bbcf816f0d623f9fc180f10249a4a052b4710
-
Filesize
20KB
MD50f2ffc1150a160b30e86e6dfa173b416
SHA1873101344e9e6857921014861ef657ef6da36b7b
SHA2562543d89c822ea3d89ac8d376ec5751d8e75ddd60aa4f516bed891bcf780c7bfb
SHA51238ecee99ca3a62f07d658d546c19ae0584eb049c3e316cd942cfdfb12a782830229fadc5f6e8c4fef4f3c5e2ec49d5bea4d18059a869940e99fc2a9b64c3263e
-
Filesize
12KB
MD58e7578a6f31d63e85e4c5c7e9ca60093
SHA19818ae00db690a8d02d7a0b32f6fca49983354a1
SHA2566d8f5aa5114de104358158405eb3dbedbeed467051fe07ca3f9a0ce4a8322c27
SHA5128ddac46e0826498cc31313905a662d389078ea9104625016a005d89f4b2d260649239ed099f914133f0280e97113b277b0564cb583b244ff06913fc6773e3ecf
-
Filesize
512B
MD58ad0ddc752ed7da162f76d3a30d64722
SHA1b95412ee59f4e0f476b91b3d6b0b7f92e3810e3b
SHA25619dddc21aa5808d0a25eb85bb87847976ee79d3d075c1bc6de972b8685b5b198
SHA5127c78eeb0fac737c276bce067b52e732a11882811d97509bd62643bb8ff14333567fc312c50787ca54841f76a83b343191881420fc482a47bcbe65da72de77543
-
Filesize
8KB
MD5826e89c1dc7b023cf39bae74391ff244
SHA115d6cb11ba1dfd4b773877906938a899232c3dbc
SHA256c95a5e15bf2c6cae4df026bca123197bd85d962a2e031a2c18a5f88b6ddf5163
SHA512d8f978c3ba20145602dc02c86a06817ce5574a9b8bbbc7c7df023edd8cc43b53f7ad4e1bc1f0f58df3ce5bb904782c628ff80b2db14011d9ac53a3cca13ee578
-
Filesize
8KB
MD531d0fd9be70251d488c1535954905dd0
SHA11ce22c548d72bdebadd3353ee10d752bb9387ce1
SHA2562206a89b4dd28eedabfd9d7622befdf728601537724ad6f2bb523c39cd5bdc30
SHA512bef8c3b4a3082fbb1e6e49832c0b3e0747459e4f408bd84a73e47a283ca02e6ed15704fcf31fb109e8597f396f3f035474a1e8d5e98ea6c28f6d384dd4f88466
-
Filesize
8KB
MD55186ecc698b454c9ae1e8fd99464b8de
SHA1d556aad31b1dab29c24b86ceebea0270696869b3
SHA25653ffe295df3e7831558a3382327bf8a09f6db3509dfab7a5aeb89aced4ac1a93
SHA51247d150e49ed004a30802e72fe2a40feffb4d10b4e3f23161b1046fa35fb1ec0d1e0c0f42ca8370f821067d0f3e7b0eae1554ce897dd2471914e856849734d6ed
-
/data/data/com.leed.sportsfire/files/.com.google.firebase.crashlytics.files.v2:com.leed.sportsfire/com.crashlytics.settings.json
Filesize715B
MD51023cd26000480a2f6cfd5a34d9a9277
SHA1661b82285b6606a87c42294b152811b96c2b35b3
SHA256efc34cbf196e45cd617821245c60e2c7d73b2c4c7cd6954301a33374fb5e28c4
SHA512ac4455f4f52114d87db1e399bd33fecc601342fc30281d12fc979d40bb10d72223178509189b38a8bd8cdc60eee07255611821eb85863d520242c1ccef9be958
-
/data/data/com.leed.sportsfire/files/.com.google.firebase.crashlytics.files.v2:com.leed.sportsfire/open-sessions/66FFB4EF03770001123454778B5BB17A/report
Filesize741B
MD563dff6330714e4952f8f82642915c7b7
SHA1804e651f9889dd330484566a68eaebf7625449ff
SHA25617980072f8ec0f4ce44dfd191d5fd35566e2e09d3127df8b4f2c60f6c895e5ad
SHA5127b9e201bc689a00d9e1c8f607a246ded428921dec82f6ba8a843f8ec1c472188293a4fda3ff9119c81a5332cd7586ee4e13352e7cfea98af44f33e11399c9830
-
/data/data/com.leed.sportsfire/files/.com.google.firebase.crashlytics.files.v2:com.leed.sportsfire/open-sessions/66FFB4EF03770001123454778B5BB17A/userlog
Filesize465B
MD51411594395d7a205b9ff0d997e6b9846
SHA12bb09e58fc7ae364607eebfe699375a35e57dcfb
SHA2569964059832fe5f1014f42050a6bfe546e1b50bd288eae9378781b83f943478cf
SHA512f47edec76c100aad5af0f897b4bc0c15e025fa69f2a6af8b23afc404d94b682d951253917bddb0f7a6a0753c563763ff9b816f2839cae225a103871ab3d9fca7
-
/data/data/com.leed.sportsfire/files/.com.google.firebase.crashlytics.files.v2:com.leed.sportsfire/open-sessions/66FFB4EF03770001123454778B5BB17A/userlog.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
Filesize
90B
MD5ee898f4e3b186512ef25a12a7143c0e5
SHA14baf0e3e694ca9a7ba20256dbecf5d7418ef4571
SHA25601dffd371045ffafdc0be0893b93ad9c3a7314d7f8dda37ef2685de37f00f779
SHA512434be987f52b4ec323e9c8524d659e22d0335d2028aa6d64e075650c3f5483756d9fca7c233e6a169743adf0a4502f79faf7ac0a90f36f5ae41bf473c16518b4
-
Filesize
567B
MD57ce6069dc8ff516198abcc2b640348ca
SHA1a0e4688a7a66a7b6a1ebf3a5f1d66eaa28487fbc
SHA256cdbec72196ef011c4dd80ec12548da3a8b8312ffa879a0c809ebdaaf792301a1
SHA512db37ddf5dc4fbf6493636be343552456cb5f433be195ffb26ebe0fb8be31a4223ed460810495af3f4554a050f6157142b60523702212b7928e9b16f2db914561
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD5fccf40421ccec125c61fa70371316e8c
SHA1bd1a92870aaa2f0036c52c7e0b9cfb5eabefdd9b
SHA256b3ed9269e17dcd56578afffac69c4e2d79597aeb25be31a0320f1a1a0b08044c
SHA512e34228b3165769958a1980e1092903c2a012183be0d831b1cd09474acb6018240c1cc2cd9f436a451308f99513257990d11fab66de532a640c4483fe1a1f1d14
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD5e259ec06721f46bafc8833f08b695d3e
SHA1dfb1bc154a85015329072addce7e373093dea691
SHA2561abcae12d54bd911a567cba8ac8fb2d7c306c2d0518f9790b305678799926ea5
SHA5120c67a13a22a9013499d7c47539bc8ee8d8ae76257547a7b5fa1bcf883ba4650e2ee9e60273db2d953f727299cb20904560f0813e93b7dfe7c824cc2d3ff96f58
-
Filesize
108KB
MD5cf70b4b089699854585a24f05e321488
SHA10f45944796646a38d2993e8bd891d6a77c22cc54
SHA2563fbf2d53e916e27a773b7967e7d8f80a41006260b0e93ddf13b700bb913d6ef4
SHA51296da835438b668c9c61ee2569c00e700ba470ba2aef3516e4eff6978880ccc8b1a93bfc2fe417c0e0dcb9c9ab203f368a99249632934f861db282a33a6b9a6ce