Analysis
-
max time kernel
132s -
max time network
142s -
platform
android_x86 -
resource
android-x86-arm-20240624-en -
resource tags
-
submitted
26-10-2024 18:39
General
-
Target
SnapPlus.apk
-
Size
12.1MB
-
MD5
504d24b231072148bd3573111631ab4e
-
SHA1
0e5d11da02fcf991989ab28943f4ca96a5c5f81b
-
SHA256
2d81efabf6b5aa167fed70bbe07e30fab07569b8a992b8ff9f55b4b86169b84c
-
SHA512
b4dda944b767321cb4a11076d79aa9e267465abe1d62fcc35c0262b04776457b4e787be50b120783ec7934239ee3b5d4449c2bfc76d1d7480c2d45046894a41c
-
SSDEEP
196608:uTzqgG5BRSzDfFyfVBlFjGMWWmjbwXiMpBdyLih7d+dyfCOO7Qdkc/cbjy6iJp:mq3PfV577m/wSMpBduyfCO3dx/aa
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 1 IoCs
-
Loads dropped Dex/Jar 1 TTPs 3 IoCs
Runs executable file dropped to the device during analysis.
-
Queries information about active data network 1 TTPs 1 IoCs
-
Reads information about phone network operator. 1 TTPs
-
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
Processes
-
com.onlyfansclubpremium.onlyfansclubpremium.toplivestreamingtips1⤵
- Checks if the Android device is rooted.
- Loads dropped Dex/Jar
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
-
/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.onlyfansclubpremium.onlyfansclubpremium.toplivestreamingtips/files/audience_network.dex --output-vdex-fd=62 --oat-fd=70 --oat-location=/data/user/0/com.onlyfansclubpremium.onlyfansclubpremium.toplivestreamingtips/files/oat/x86/audience_network.odex --compiler-filter=quicken --class-loader-context=&2⤵
- Loads dropped Dex/Jar
-
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
891B
MD5e29862b9ee083ba3e1bb2ca413ad45fd
SHA1d2c9aed68f0d1bfce2eef10cfca442e49eaca5e3
SHA2566b1d8f183f92def2f11435c2d8a0e88ba27d2fe5c31bca0be9a1d150235ff15b
SHA5128f81dcdaf9afdbc8c8484a52c26cf2ffd31efa0a2244ee6f76789f7edb24e33f6314113d652922a17be50ccbf14309c2c9ff8d34a7d304f38c3396fa1335f41d
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5237469c9cfd228e74d6fb136afd311c7
SHA16b2cf631b98e98588780c613b4b14c9597e37e22
SHA256aebe00e6569f10b6715f489b5177bd230ab3333a291a99f32b784daac3ef52eb
SHA512e9a9f90a7b8ab49b3182e2dc28cfe1667c3e51441e87090c4b443924d85ee46f266daab6900168a8a04211279628a574ec3082ab9b7c345aea2611fbf012025d
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD525f886cd69fe582100707dd579240b12
SHA1f0fd68ebb5d2c97fb721e5c50c99287a24349601
SHA256bccba1142d93a24cad3d0ccdc448a86bbd93f9d191d00b703946e19a935fdd88
SHA5128fd3ebe62c663d04293a21e819bc6ae74357283a436835093997341c55ab0d0745864fc16a9be88c2e4dc26fb2eab52c647a17fd5cec97847c3c180f16c4a64f
-
Filesize
88KB
MD50c44cf61d572b4d03ff7c9578b4d9f70
SHA153a6112b4ae412d22d2fd034e1355474cd0e025c
SHA25611f239d7d2116e3e320dd163912d578030350e5debb02ce6dae7890f8b7561a9
SHA51260cd21e6d175d9f15d1f12a91693d1f939f80155ad8a1110d6336d7a08be93a7e7c83c1f9cc09f1e11f62507edbd3524714bf6dbc4279e4f38628d3726514c66
-
Filesize
3.2MB
MD54905ee4caebdf455b9debee76ea89cae
SHA1461d5626e22bd87e0f0afa3440d5ce61d2363571
SHA2560bfad0c78e6e439d2c70d43568d1dc541bff8d4b4c5bfda9e81e03ae790dd864
SHA51289bce0984264008e30a635852cbd3ba0c822b0917525a9029ff029a33409c161dad0f60ccf67406bea62e3d42ce0364250f3a9f502db8bbcaeba277787b2fc3f
-
Filesize
346B
MD5fc1ec19399c5d84bb7934a4d548a3be1
SHA194ce63df27df906a203d89fe82dccc2c24a09d8e
SHA2565b0baaca8f3f751915dbc3b4ca8431294a261fccfb9746a1b559847c5959f08f
SHA5127a178272b989f7fc08e0b62cd5333912faa2fad3aeea66c6957056a18c7bd1e2c826c18883b3d23ac958f99ec2366c4bca48777f3262b14981aecf1fa4400a0c
-
Filesize
3.2MB
MD5ee2b9a04cd72ebd68698c64b68080c1a
SHA119b1e3933e4c98cf9204a2753c339bd430fc4143
SHA2565959c653491523d6b9241d91b3a3dba3f17a14b56eefffdab7baa490f93bb257
SHA51219c31c39ed3ce9c0eb20a05a91d085329ec36feaa75bca39a7eb1992316e32b6db61547db83262b2c8c20e1790de74e8c6207c46edfcfee62230a3efb747db21