Overview

overview

8

Static

static

6

app-release.apk

android-9-x86

8

app-release.apk

android-10-x64

8

Analysis

  • max time kernel
    12s
  • max time network
    154s
  • platform
    android_x64
  • resource
    android-x64-20240624-es
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-eslocale:es-esos:android-10-x64system
  • submitted
    14/10/2024, 16:52

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    app-release.apk
  • Size 10.7MB
  • Sample241014-vdn8tsvgrb
  • SHA256 a54bf9c7ea17bedf3ed32fd1f3f8794d76e5f281334820b8e34381e6fdfff1a0
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10
collectioncredential_accessdiscoveryevasionexecutionimpactpersistence

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
    evasion
  • Obtains sensitive information copied to the device clipboard 2 TTPs 1 IoCs

    Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

    collectioncredential_accessimpact
  • Queries information about running processes on the device 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to collect information about running processes on the device.

    discovery
  • Acquires the wake lock 1 IoCs
  • Legitimate hosting services abused for malware hosting/C2 1 TTPs 4 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
    discovery
  • Queries the mobile country code (MCC) 1 TTPs 1 IoCs
    discovery
  • Checks the presence of a debugger
    evasion
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
    persistence
  • Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

    Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

    executionpersistence
  • Checks memory information 2 TTPs 1 IoCs

Processes

  • com.darkdeveloper.kawaiianimes
    1⤵
    • Checks if the Android device is rooted.
    • Obtains sensitive information copied to the device clipboard
    • Queries information about running processes on the device
    • Acquires the wake lock
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Checks memory information
    PID:4995

Network

        MITRE ATT&CK Enterprise v15

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        room-copy-helper723931303278519399.tmp
        • Path /data/data/com.darkdeveloper.kawaiianimes/cache/room-copy-helper723931303278519399.tmp
        • Size 12.6MB
        • SHA256 c7b94369aaa793c66c478312ab4557f1620855acb331c22fe0729bb8c529a230
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events
        • Path /data/data/com.darkdeveloper.kawaiianimes/databases/com.google.android.datatransport.events
        • Size 140KB
        • SHA256 36f38e6ce7044a79b648304038a19b814fce275b96d428a04e52b277b8edc209
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.darkdeveloper.kawaiianimes/databases/com.google.android.datatransport.events-journal
        • Size 24KB
        • SHA256 2106559c28c52fa69192af3b1a02e10b9b225cb15679ee5e1043746b514b6a36
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.darkdeveloper.kawaiianimes/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 432525a6696bc8f0414ee1fca22a3df945a01abced3d8c86242503055bc81763
        • MD5 SHA1 SHA512
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.darkdeveloper.kawaiianimes/databases/com.google.android.datatransport.events-journal
        • Size 28KB
        • SHA256 f6d6da424c1014646bb6fa20578407fa2c06e5655ebc2d39929dbb5978c1dd2f
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.darkdeveloper.kawaiianimes/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 07682058cf545389922bf96dfd0fbfb38df52b1d96e26925353e24361572c637
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.google.android.datatransport.events-journal
        • Path /data/data/com.darkdeveloper.kawaiianimes/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 3367f9aba820d9fbd10c6fad52f457dea6d4598fec0b730c863077eab3f5da7e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.darkdeveloper.kawaiianimes/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 6fa60a9ff738dfd6232add81b393e7d2ce99a50ea6fc30e02bb32964809e2f07
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.darkdeveloper.kawaiianimes/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 d5de2384ba957bd0cba38e0b2fb91010cb251fd8aa472fe3cf6d1684cca7ea85
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.darkdeveloper.kawaiianimes/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 f3af152b9f658435a2909ed00a3ac9af69499612120913700af96dc951701f21
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.darkdeveloper.kawaiianimes/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 3fe79739efd30683749b8940a4287d8643ca165a0e0cbcc0a4f53354050bcd5d
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.darkdeveloper.kawaiianimes/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 75e3b96dae43331aa329a9608eef1dc2057b5bf9c753ba7e87ec7e7b3b56f264
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db
        • Path /data/data/com.darkdeveloper.kawaiianimes/databases/google_app_measurement_local.db
        • Size 16KB
        • SHA256 694af02bbabc377cf9d0cb9a4b36269510b2f690bc5471b643c9431c154c3e2a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.darkdeveloper.kawaiianimes/databases/google_app_measurement_local.db-journal
        • Size 512B
        • SHA256 76140c38cf30a296050e66d0532de8c029fd2ae9485197eed7a476bb3f37348a
        • MD5 SHA1 SHA512
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.darkdeveloper.kawaiianimes/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 82acc917288b6b48b44dc94334642888cdd7b74846c13ed5db6055a2639ec9e5
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.darkdeveloper.kawaiianimes/databases/google_app_measurement_local.db-journal
        • Size 4KB
        • SHA256 4645bf8e5ccaa5d04164d2badb4a9b8ba16371834ad3a1a75ed5e0b536fcb459
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.darkdeveloper.kawaiianimes/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 9b8d5365b1694a87fc7766238f37b8f95c1aab2241888c6c2fe9010ac79ada09
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.darkdeveloper.kawaiianimes/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 776df9ee3f22f03395a6b31de67c90c9b572766e4a4b41498bdd8bf6a7dace77
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        google_app_measurement_local.db-journal
        • Path /data/data/com.darkdeveloper.kawaiianimes/databases/google_app_measurement_local.db-journal
        • Size 8KB
        • SHA256 edf766c4d0eef49c975e632eb76cde5105dce49c09033c99b53057abeabbe007
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        com.crashlytics.settings.json
        • Path /data/data/com.darkdeveloper.kawaiianimes/files/.crashlytics.v3/com.darkdeveloper.kawaiianimes/com.crashlytics.settings.json
        • Size 726B
        • SHA256 232f8ad64aa9814ac531c080fb4b47077986780c73c47f7ac98acb4be0c55129
        • MD5 SHA1 SHA512
        Submit Download

        event0000000000_
        • Path /data/data/com.darkdeveloper.kawaiianimes/files/.crashlytics.v3/com.darkdeveloper.kawaiianimes/open-sessions/670D4F9E01AF00011383DA20AF44B4FE/event0000000000_
        • Size 77KB
        • SHA256 f8c25e4f015012a239b0195069012fc42f35b5cee40b44a44cf3a2818eac360a
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        internal-keys
        • Path /data/data/com.darkdeveloper.kawaiianimes/files/.crashlytics.v3/com.darkdeveloper.kawaiianimes/open-sessions/670D4F9E01AF00011383DA20AF44B4FE/internal-keys
        • Size 107B
        • SHA256 2e5b79823384123598ae879303e552f5ae0bbb28f2c96b74e82a2e8abcb6840f
        • MD5 SHA1 SHA512
        Submit Download

        report
        • Path /data/data/com.darkdeveloper.kawaiianimes/files/.crashlytics.v3/com.darkdeveloper.kawaiianimes/open-sessions/670D4F9E01AF00011383DA20AF44B4FE/report
        • Size 804B
        • SHA256 6b91891c725031d427844832718b878fbdfd500f7692386bc1783b2ae3c5886c
        • MD5 SHA1 SHA512
        Submit Download

        userlog
        • Path /data/data/com.darkdeveloper.kawaiianimes/files/.crashlytics.v3/com.darkdeveloper.kawaiianimes/open-sessions/670D4F9E01AF00011383DA20AF44B4FE/userlog
        • Size 88B
        • SHA256 845c511f43f63c5416e9b1ff0bc2c6ffe4e299bafbc04ee4920d1271116665a9
        • MD5 SHA1 SHA512
        Submit Download

        userlog.tmp
        • Path /data/data/com.darkdeveloper.kawaiianimes/files/.crashlytics.v3/com.darkdeveloper.kawaiianimes/open-sessions/670D4F9E01AF00011383DA20AF44B4FE/userlog.tmp
        • Size 16B
        • SHA256 35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
        • MD5 SHA1 SHA512
        Submit Download

        report
        • Path /data/data/com.darkdeveloper.kawaiianimes/files/.crashlytics.v3/com.darkdeveloper.kawaiianimes/open-sessions/670D4FA8000E00021383DA20AF44B4FE/report
        • Size 804B
        • SHA256 e9ac7d4da9af05cdafef9b171e122a15e696b265e71d548040af5f04836c3d41
        • MD5 SHA1 SHA512
        Submit Download

        670D4F9E01AF00011383DA20AF44B4FE
        • Path /data/data/com.darkdeveloper.kawaiianimes/files/.crashlytics.v3/com.darkdeveloper.kawaiianimes/priority-reports/670D4F9E01AF00011383DA20AF44B4FE
        • Size 78KB
        • SHA256 1dd91f5e5c7422383f58957ea2bc10f2fcfe579235af0de4a8f9112e86ba1c6b
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        PersistedInstallation3280114622130599549tmp
        • Path /data/data/com.darkdeveloper.kawaiianimes/files/PersistedInstallation3280114622130599549tmp
        • Size 570B
        • SHA256 db93ca6199e3e8332831ba6a53755e49ce029888d888ad4d005319f1ff13311e
        • MD5 SHA1 SHA512
        Submit Download

        PersistedInstallation4787450337976201753tmp
        • Path /data/data/com.darkdeveloper.kawaiianimes/files/PersistedInstallation4787450337976201753tmp
        • Size 90B
        • SHA256 32a282b53ce2447ed2753a14ab73d5550b143ba4d6c65ea611b333b6b3f05a73
        • MD5 SHA1 SHA512
        Submit Download

        UnityAdsStorage-private-data.json
        • Path /data/data/com.darkdeveloper.kawaiianimes/files/UnityAdsStorage-private-data.json
        • Size 57B
        • SHA256 7e2fad0a9e96d4aaacf5882c1e3d851a2043f351feb3d1d0a7ca7d20853925aa
        • MD5 SHA1 SHA512
        Submit Download

        UnityAdsStorage-public-data.json
        • Path /data/data/com.darkdeveloper.kawaiianimes/files/UnityAdsStorage-public-data.json
        • Size 2B
        • SHA256 44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a
        • MD5 SHA1 SHA512
        Submit Download

        firebase_session_Y29tLmRhcmtkZXZlbG9wZXIua2F3YWlpYW5pbWVz_data.preferences_pb.tmp
        • Path /data/data/com.darkdeveloper.kawaiianimes/files/datastore/firebase_session_Y29tLmRhcmtkZXZlbG9wZXIua2F3YWlpYW5pbWVz_data.preferences_pb.tmp
        • Size 50B
        • SHA256 5a080f24e9f291447b6ce6b26ea409217f4ffade110ed6f2750205ad22727973
        • MD5 SHA1 SHA512
        Submit Download

        firebase_session_Y29tLmRhcmtkZXZlbG9wZXIua2F3YWlpYW5pbWVz_settings.preferences_pb.tmp
        • Path /data/data/com.darkdeveloper.kawaiianimes/files/datastore/firebase_session_Y29tLmRhcmtkZXZlbG9wZXIua2F3YWlpYW5pbWVz_settings.preferences_pb.tmp
        • Size 33B
        • SHA256 a4aaa2a4e0cb12123b405a9d33bdd7edf8cbb41ea92e75deb1ba21bf1db5b2a6
        • MD5 SHA1 SHA512
        Submit Download

        firebase_session_Y29tLmRhcmtkZXZlbG9wZXIua2F3YWlpYW5pbWVz_settings.preferences_pb.tmp
        • Path /data/data/com.darkdeveloper.kawaiianimes/files/datastore/firebase_session_Y29tLmRhcmtkZXZlbG9wZXIua2F3YWlpYW5pbWVz_settings.preferences_pb.tmp
        • Size 75B
        • SHA256 1e58e88b20702d0a80025c1fbacc9ad5fe2565311e2230d581d669fbd7e8b0ef
        • MD5 SHA1 SHA512
        Submit Download

        firebase_session_Y29tLmRhcmtkZXZlbG9wZXIua2F3YWlpYW5pbWVz_settings.preferences_pb.tmp
        • Path /data/data/com.darkdeveloper.kawaiianimes/files/datastore/firebase_session_Y29tLmRhcmtkZXZlbG9wZXIua2F3YWlpYW5pbWVz_settings.preferences_pb.tmp
        • Size 121B
        • SHA256 232f9626cbee2e063e25f61a08f46575d019b62f02a6753c1325957a95e1c513
        • MD5 SHA1 SHA512
        Submit Download

        firebase_session_Y29tLmRhcmtkZXZlbG9wZXIua2F3YWlpYW5pbWVz_settings.preferences_pb.tmp
        • Path /data/data/com.darkdeveloper.kawaiianimes/files/datastore/firebase_session_Y29tLmRhcmtkZXZlbG9wZXIua2F3YWlpYW5pbWVz_settings.preferences_pb.tmp
        • Size 163B
        • SHA256 7495b9faf55ff02d0a2906ca3e3f4b356abd96e421815f9d07f893682da6eaf2
        • MD5 SHA1 SHA512
        Submit Download

        firebase_session_Y29tLmRhcmtkZXZlbG9wZXIua2F3YWlpYW5pbWVz_settings.preferences_pb.tmp
        • Path /data/data/com.darkdeveloper.kawaiianimes/files/datastore/firebase_session_Y29tLmRhcmtkZXZlbG9wZXIua2F3YWlpYW5pbWVz_settings.preferences_pb.tmp
        • Size 212B
        • SHA256 be09cdca0cd9545058382153808a1e3f24101c4a17e0d66150725a0e3e523dbf
        • MD5 SHA1 SHA512
        Submit Download

        frc_1:416783254479:android:133b454731b166bca508ba_firebase_defaults.json
        • Path /data/data/com.darkdeveloper.kawaiianimes/files/frc_1:416783254479:android:133b454731b166bca508ba_firebase_defaults.json
        • Size 178B
        • SHA256 63887941fd7768f850e29bb768300cead18f338f4772b439b65073451f8e0989
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb
        • Path /data/data/com.darkdeveloper.kawaiianimes/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-journal
        • Path /data/data/com.darkdeveloper.kawaiianimes/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 93cb6202f754c49e14fa9ffdd37cd9f22a505e9fcc803bbfd3df81c9bea1aa0a
        • MD5 SHA1 SHA512
        Submit Download

        androidx.work.workdb-shm
        • Path /data/data/com.darkdeveloper.kawaiianimes/no_backup/androidx.work.workdb-shm
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.darkdeveloper.kawaiianimes/no_backup/androidx.work.workdb-wal
        • Size 16KB
        • SHA256 2ee92ee4c6358165dafcbfbb087b092989245fe9ad25546ae860b639d81a3ceb
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.darkdeveloper.kawaiianimes/no_backup/androidx.work.workdb-wal
        • Size 112KB
        • SHA256 f83442cd6409883dc6429c0a5bd74559aaefd98912f2ea7e7efb8c59f9dde948
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        androidx.work.workdb-wal
        • Path /data/data/com.darkdeveloper.kawaiianimes/no_backup/androidx.work.workdb-wal
        • Size 189KB
        • SHA256 5e81f72197839b4b565b21ede3cdf8b97db4e9071bdee9af95df4d56e6f8b423
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        UnityAdsTest.txt
        • Path /storage/emulated/0/Android/data/com.darkdeveloper.kawaiianimes/cache/UnityAdsCache/UnityAdsTest.txt
        • Size 4B
        • SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
        • MD5 SHA1 SHA512
        Submit Download

        UnityAdsWebApp.html
        • Path /storage/emulated/0/Android/data/com.darkdeveloper.kawaiianimes/cache/UnityAdsCache/UnityAdsWebApp.html
        • Size 2.2MB
        • SHA256 a4fe79ae1b2039c3a1f24147330318d675e894f455dd0de9ef10f147d11b366e
        • MD5 SHA1 SHA512 SSDEEP
        Submit Download

        UnityAdsWebViewConfiguration.json
        • Path /storage/emulated/0/Android/data/com.darkdeveloper.kawaiianimes/cache/UnityAdsCache/UnityAdsWebViewConfiguration.json
        • Size 659B
        • SHA256 a3b85f543c096e8ef222fcda817785b47938496f51258956806917556265eacf
        • MD5 SHA1 SHA512
        Submit Download