92f211adb0da4cd916dd9f7e74582abe2fdf4d35fc590c99db297114949c5643

Analysis

max time kernel
5s
max time network
133s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
26-10-2024 18:41

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

92f211adb0da4cd916dd9f7e74582abe2fdf4d35fc590c99db297114949c5643.apk
Size

13.3MB
MD5

ad8685363a026eb8a22c8eb507d1cf08
SHA1

1e1ac8dc688841052c589e533c4f39d334f9f858
SHA256

92f211adb0da4cd916dd9f7e74582abe2fdf4d35fc590c99db297114949c5643
SHA512

5d4fb4e8ebfba021fc4cb32c3f2d42c0fcfcde7843dd588b3a3fc3658f641034e27c71deec49fa0e5cc7aac0bad94cffc754b47d81599859c02c922bd66b1e43
SSDEEP

196608:Of7U2ybMql+wzQ3CFO0BEetR2kpXPhJ5jWuhM6GrOiJbZhmqH4DxhIlltNgB6CXP:Q7Xyb5zj/ppJRWuhpMvbZEqHdtI6CXKA

Score

8^/10

discovery evasion persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 8 IoCs

evasion

System Information Discovery

T1426

Processes:

com.digitalproshare.filmapp

ioc	process
/data/local/bin/su	com.digitalproshare.filmapp
/data/local/xbin/su	com.digitalproshare.filmapp
/sbin/su	com.digitalproshare.filmapp
/system/bin/su	com.digitalproshare.filmapp
/system/bin/failsafe/su	com.digitalproshare.filmapp
/system/sd/xbin/su	com.digitalproshare.filmapp
/system/xbin/su	com.digitalproshare.filmapp
/data/local/su	com.digitalproshare.filmapp

Checks known Qemu pipes. 1 TTPs 2 IoCs
Checks for known pipes used by the Android emulator to communicate with the host.
evasion

System Checks
T1633.001

Processes:

com.digitalproshare.filmapp

ioc process

/dev/socket/qemud com.digitalproshare.filmapp
/dev/qemu_pipe com.digitalproshare.filmapp
Acquires the wake lock 1 IoCs

Processes:

com.digitalproshare.filmapp

description ioc process

Framework service call android.os.IPowerManager.acquireWakeLock com.digitalproshare.filmapp
Queries information about active data network 1 TTPs 1 IoCs
discovery

System Network Connections Discovery
T1421

Processes:

com.digitalproshare.filmapp

description ioc process

Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.digitalproshare.filmapp
Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
persistence

Broadcast Receivers
T1624.001

Processes:

com.digitalproshare.filmapp

description ioc process

Framework service call android.app.IActivityManager.registerReceiver com.digitalproshare.filmapp
Checks CPU information 2 TTPs 1 IoCs

System Checks
T1633.001

System Information Discovery
T1426

Processes:

com.digitalproshare.filmapp

description ioc process

File opened for read /proc/cpuinfo com.digitalproshare.filmapp

ioc	process
/dev/socket/qemud	com.digitalproshare.filmapp
/dev/qemu_pipe	com.digitalproshare.filmapp

description	ioc	process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.digitalproshare.filmapp

description	ioc	process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.digitalproshare.filmapp

description	ioc	process
Framework service call	android.app.IActivityManager.registerReceiver	com.digitalproshare.filmapp

description	ioc	process
File opened for read	/proc/cpuinfo	com.digitalproshare.filmapp

com.digitalproshare.filmapp
1⤵
- Checks if the Android device is rooted.
- Checks known Qemu pipes.
- Acquires the wake lock
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks CPU information
PID:4306

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Discovery

System Information Discovery

T1426

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.digitalproshare.filmapp/databases/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.digitalproshare.filmapp/databases/androidx.work.workdb-journal

Filesize
512B

MD5
8a24ee8ed2d455fca7910f5099171da1

SHA1
edc865899ff2dda64e69c8d30b1e68a1ec73ec64

SHA256
4d74461399a9b48b77d572b855b2058f29a708757c8c412930a8aa43323bb8fd

SHA512
f7e00f6dae0a0d1379bb99326b78805265591dc6ac9edbe6895e763e473a61c716ef9feba22a9618abb2a90195c781864b10d9d8e971c1372a154aaf6f3e13b1

Download Submit
/data/data/com.digitalproshare.filmapp/databases/androidx.work.workdb-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.digitalproshare.filmapp/databases/androidx.work.workdb-wal

Filesize
16KB

MD5
6b5b1b29784cbf3c7d7af59764f9e38d

SHA1
a2787b733d789ab782af4ae28b4e123f526b7f71

SHA256
47de75b0bcb612a76d7f165ab9a10e97d810f9509f88316a52a70365cfc90ca7

SHA512
09afb149c9003f07cb8277b69686739226641cd820e46f426e7cda3f95f184c5bd92f4faecc263ebb3d4a8f781bff82b50313f65951d6c10842ac63ee314c35b

Download Submit
/data/data/com.digitalproshare.filmapp/databases/androidx.work.workdb-wal

Filesize
88KB

MD5
9d5dce6cc73512e04e669d9d1380768e

SHA1
de474f09beb4209f03aee2183009de68fc91d505

SHA256
8dd31638d2e6848143183e9de0ea3169a2c4563b72a21f5a325f8ac972d64dfd

SHA512
551d6c8e62b1dd27a950f3944e52e9543b40518a9b1c45651a74791dce0ffbfcf84f7c2978dd1cf500dd3f4ab9b5a5f596298c31b8e68db484083cf4e7ecc4f4

Download Submit
/data/data/com.digitalproshare.filmapp/files/UnityAdsStorage-public-data.json

Filesize
2B

MD5
99914b932bd37a50b983c5e7c90ae93b

SHA1
bf21a9e8fbc5a3846fb05b4fa0859e0917b2202f

SHA256
44136fa355b3678a1146ad16f7e8649e94fb4fc21fe77e8310c060f61caaff8a

SHA512
27c74670adb75075fad058d5ceaf7b20c4e7786c83bae8a32f626f9782af34c9a33c2046ef60fd2a7878d378e29fec851806bbd9a67878f3a9f1cda4830763fd

Download Submit
/data/data/com.digitalproshare.filmapp/files/shared_prefs_sdk_ad_prefs

Filesize
257B

MD5
3347ccaf373e87417246ad1cd29f75ee

SHA1
57d19cf24c917e9ba52c8b1f89a0630096de6efb

SHA256
9eb95bce6ac2faae96c5957c2359743a63af936fb215447a83d3750d7dad78e8

SHA512
1d8f57824a62ecbc5ce32161113ba4a01c69dbf447774a3d05884f35336fed5e3d8908627b883b3eb75c5abd3f2a28692a42239cc4dd2f71f2135c1e40b6925a

Download Submit
/data/data/com.digitalproshare.filmapp/no_backup/com.google.InstanceId.properties

Filesize
63B

MD5
67109183412ad7b81ad203d7ba5d1ec6

SHA1
d23e28199d20c049c89827a3ca1ab142d42dfc38

SHA256
d791e76084bf8c369623658b72376baa950f44ef4891188b732cf97eb95d4a9f

SHA512
a73916e17ce45aaceb93edf501e3a27a10463bb643b29f11302e9cafc7c5b25404ef430903454777fb2bccaa6e1aa3b79ab79f1c2aa45d9aa780ef3bb7292740

Download Submit
/storage/emulated/0/Android/data/com.digitalproshare.filmapp/cache/UnityAdsCache/UnityAdsTest.txt

Filesize
4B

MD5
098f6bcd4621d373cade4e832627b4f6

SHA1
a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

SHA256
9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

SHA512
ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

Download Submit