Analysis
-
max time kernel
299s -
max time network
300s -
platform
android_x64 -
resource
android-x64-20240624-en -
resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system -
submitted
27-10-2024 01:12
Behavioral task
behavioral1
Sample
base (3).apk
Resource
android-x64-20240624-en
Behavioral task
behavioral2
Sample
base (3).apk
Resource
android-x86-arm-20240910-en
General
-
Target
base (3).apk
-
Size
9.8MB
-
MD5
b15051dc78c8a32ad26bea20f30655fb
-
SHA1
ffb552d6760d74f77a599fb76903bd734767fccb
-
SHA256
b5fd30b9b94327212e8b21f8cfb376b07178b84caca5dc686f51389ff120fb37
-
SHA512
b6c9501ccb193f0a714591a7c31d8fdc475f211edfbea6bf1887d34a122313706683bf57bc7f4e3d3d010906923dfee62aed9baf9ab0811b651bdce6f44b3988
-
SSDEEP
196608:qSHwc4KsH8xP0wau0dxwNROdyPpC3bRfay9rx8zHzfTvqqs9RV:jQDBdxuEOCdBeHvu
Malware Config
Signatures
-
Checks if the Android device is rooted. 1 TTPs 1 IoCs
ioc Process /sbin/su ver3.ycntivi.off -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock ver3.ycntivi.off -
Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo ver3.ycntivi.off -
Reads information about phone network operator. 1 TTPs
-
Schedules tasks to execute at a specified time 1 TTPs 1 IoCs
Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.
description ioc Process Framework service call android.app.job.IJobScheduler.schedule ver3.ycntivi.off
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
52KB
MD5e1941e84ac2269c7b1b8bb7041b14001
SHA1aed569ddb068a94e893702c297683c233d841f6f
SHA256ab03de5564295f5ec34e2fccba9811cff818911b07798e9e456a58309deeb3a7
SHA51299124fc5347f6a7e19e0e30330c4e2f0f2d9074a0fc6a0ab7be25c5bd90d8dfdc66e8abeb1852be871dadb7a5945d7046d2e72ffb4f179c385ed7ffded33c2b7
-
Filesize
512B
MD5455a79dfe5ee588f3fe97aef83f752ea
SHA1b12e3720766a9ff9b0677e17800dca1695259e67
SHA256af97fc60ef427756cec7fec4d45f811bdfca8083c4ddc8d7cd4015c903b8722e
SHA51253755db98ddc99cdfa39ba99d26b5f3936b123e3fc055c55ebba9fe27e506451e9d3c21509297b18ecdb3ad737191aa11ff271cbaa12da49c71af87c799c8872
-
Filesize
8KB
MD5368b43af53771d5430b394ffabcc4893
SHA1ee3546c38b13158985f358001bfe4154a2d80484
SHA256be2008ea8cbb2774b8e15451c7399dfc6f83e230a59e05838653420ef406f074
SHA512a59a918bb99b7cfbf4180257e8d261085c11fb8dce19784e16e9e212c012b9094a0436518a4eca24471f025779363ceb3f45a34870bbc287704ba20ec78f93de
-
Filesize
8KB
MD5d400e21f73d0e47065387cda3f0a71e4
SHA1dfc531fc39f13ae51b085748cb106594db2a15ae
SHA256937d7e143cc18a0be085ad9151b70b202b72f7acef8eb4fb0b7d1ecd1ca87c6b
SHA5123f9906c6ea3efe158b97894ba47832e09919c46450f339bd66cb69824ff27540e077053a071471a412a5d9f0f2f28858d58938bbfdea20eca6b4869646c4eb26
-
Filesize
28KB
MD56fcde5bd8c32228729c0e30ea06cbfe5
SHA121495b45acf0a9060d3d00a8c04d88d951a3486d
SHA2565522191918ee348b4f0accf14a8be2ae4767bebec7f7a456a07a4caf08bbb0ae
SHA51290189ccb2402e0b5d60b886048811e04cd462024e969d977625db249cd90d4dafaf8a9f87061a000f50374168d228cc45c8f0ef3bdf6d7d28e06bd03129b69f9
-
Filesize
512B
MD5c2dfc803ea9aababf758f13efc969bfd
SHA1c8fcf9a9111fdee7555150ef19885018655a05f0
SHA25610f73b96bd4248bbb4fca88af15c041c2cea5374596b2c06c68780b01491b482
SHA512fd8a5a4b042dd745f2b21bfee970187aff040932b908c7ed36c875361acaac648562dd664c7b94afa71f248e5369eeefe6a591f59cbb0d82e1fc519a3715e8e1
-
Filesize
8KB
MD5e853410e2ba3434a14c7d6b87a27653d
SHA1e6f6d613ddedf5d98b406da14e59f2e1ab6d67fd
SHA2565c43dacdc4b6424c581979527c6e936636ab9f934e98f726aac0058e1723eda6
SHA51218d478320575be0cc0ae8ff44609f90a6dbde0aec794ab4c1daad1c01a35c1271b00732fdf048d85818130d32a96ed3f6f7e0aabe35a02c8539f167a540ad48e
-
Filesize
4KB
MD5800844f642e747e953fb785759e93a4d
SHA1f6296fe428d5e1820ea25773e259a4e97eb6b549
SHA2568964c79163e704340b93c6f3bed41755498c629059d1678fe3bcf6a3d12f9610
SHA5121fa4f62c6c3f8ad99ffc7f4fe43c47fa318f8259a4c959f7968975ef3214634da9e78c909f86dd5c65d073b79133f59b5d82fda1af9a5c01d6c5521e2e3d1f2b
-
Filesize
8KB
MD50011161a653f943486158401917d4dcb
SHA1a4f764deb3b2c2df2936dce8492e746596156086
SHA256192335b4c0521b384afcd728aa1208fe24f4cb3755cb4552377d94719c75fef6
SHA512032aae91cc9380e2521cd82bac03a138a1272b7391a91429af68c09837d317c5ebad8c8b69fc0149ab144661e7bafee4a4a2c02ff8ec131ca010b37258b204bd
-
Filesize
8KB
MD5bd73d5fc5f89148d63be7e3633b82952
SHA1f39739503439dccc10d8252b5437f15d0ace6466
SHA256fcc7f751e9fe5f26ee8874eb81f13ef83e0aa5b473242c1d3721102e6616ad5f
SHA5128e0307dfe72199d1108dd114d8d78625724891b1d9d5867d5280e835706f127ee24e9ba00a47f747d16f13ce6bac96c89ca060f77888527d404316b9352eef75
-
Filesize
12KB
MD5d05bdd8b8efae0b40b7e5bfd9594e0e6
SHA1785e29aa0031775528071bf423081494a85233f7
SHA2563993d98af383cfdaba527402af998079a286123ca1557b739722f220574cc5ae
SHA512e61c91232e56bbe5495bb9607c34a6f221ebd6e5a9d851b0cebfc5cd6f25b4ec006f2d8d31a3be4cfa448fe1360d03f7ff949de9eb915141e0a3742c69db3160
-
Filesize
16KB
MD54cb219c48aa0c4a2e4dd301de68442f0
SHA13228983d2d13d3510a4e0ee4dfaad94fbc2e0931
SHA25624adf4d6c8fb6754b0dad405f75f1e97d6552f9683c28e998af5fa8b30e249bc
SHA5121b1d30bd25be193574eda68687cd92941b35517c03aae60e626d5b8df365b8f990d83bb640e2f6aef8569f52507f2178df80bfa2c83d909523cf9a67b3629804
-
Filesize
16KB
MD59548e33dd308237e5fdbc37238fb3744
SHA1d4485e20c7bcfda7a59d6d3e46b68c1281747e93
SHA25674e55acb42858efec4a5846a70d73bf931ecade1f48caa8c07093056265b576d
SHA512a0730d8c2182c466789c8f476f14da29c5662d908fa326d609d150b48a6f2222dd423fe735a2670c5325c832df0aae51caa16e0b42327a50b2ce0bc43a61d63f
-
Filesize
16KB
MD557ae3f3c5fae4651e7e4e3c1b9a8c75b
SHA18af15867b6634bafce400e744fbe5c18c210762c
SHA2565f1c369d1210e65407e0a02c60aa55a385243cbe13c2dd4f67a960d92e67812d
SHA51233a4f1c232e622e489863b8e4281cadac6a1b14f6db890d62b9c15acde1f8881ec4e2c50dbe8771229b83d539564c6d652ec86f908597f2b534255f9ec3a4573
-
Filesize
16KB
MD5344d375faf4c0fa6b5b7a31c09033661
SHA1d5799d5161c665577c719d57bfc19e3f9c6aff06
SHA256de6b30fd9c2cee4722f243a46e405a688d89da4c3fe296d2a899d5dde4974655
SHA512cfdb18eb6f8a7edd6f45218bbe011089d5b7ff3a63fb4ebefedab2e6395c11c26a85811d935f7073e4b70a0f02e0559527e9b3fd664007a3db3a61d1c91f608d
-
Filesize
16KB
MD5b2922c6bbbe3c5b9d802751cd250e699
SHA1b831fcf73c717a5c4435b02e25e49e46abd56753
SHA2564a57ef3bd072a334951b177ee57481e4c3723d8dd0c815119d1564cc470221f7
SHA512b9c1b3941a0ffffd3391fbb8dfc49cf043c3756dd958da94dfc8af95db1c4d8dfc1e8f811f38160852627c1c3c0452e742fbaa25b36ab5d7272beadf52767bfb
-
Filesize
16KB
MD596397d456cdabd74d321eed8930a07c5
SHA1335278c2a66bee0f6ca3c0f44158884f76868b06
SHA2562209dfc9946a00cbf0728da08772b5f8d707cb54dfb65360b8b2644d169f8067
SHA5122fda1f6e650bfaabb754b9bc1c822b195bf38874a5e6408b2430fd35bb7023e5b7bf19bbcd07fdeb05bf399bca6c8bed58c3854466f2d76278e1bd48dc1c5cb6
-
Filesize
512B
MD51e0ede98c8d3296689554fcc1527a3d9
SHA17d8a5b98e849f8d7492ba61fcbd928809c54285b
SHA256a62f908c1b3c9db34b985091067b58a6cdeac5586a61fb35a805c97b1088a71c
SHA5129759a893297b4ef19229e0798334c6ff278d4081748b652441ff025a15b9a00fa355b72912124146f22b0dfc9d99bed7be406f538f324fa6eb4ef3580fbe189b
-
Filesize
8KB
MD5e0f557513c3a2e53cc11b5278dbba70d
SHA10874cc8aa5758517f46f5ab45b0968f4c93a1cde
SHA256921c8a7625c739a3ab1d64e39c8f9b0034e9a27e49a079797323b6eb37b07355
SHA51279b3f8db0f722c0e51c4dbadd3ef512f4cce52aa7c6713a1307dade03b847cda0e96279703a712754cd09d7a1c8d57abc5633e287a568f20930ad052da058132
-
Filesize
4KB
MD5eb868b4c7ac08caceb374ff5f924f610
SHA1ae182bc6789d5b0f0665cebe9bcd027de4b370bc
SHA2562554aa68e5d467f155ce675f952f4dcc2b15eee596f2b800e191fb142853e466
SHA5129ccca05b09d56964e69fa3a3baa32ed672fe742d779c532e27e21b957eb5797a371d665a2e9606602621f05f78951c9d4c2d8ad227dce89052d5e4cc38c241ec
-
Filesize
8KB
MD5e6def7d8facb7cb4c016584e8b022213
SHA17972419aca53233f290d84665372fee45d3d0ccd
SHA256fd5a75582f42971b99f074b08f2353ae9b0a8657960ba0c11cac1e1589df2b15
SHA512d2a3656ed557f382f605a31896efeb8c0ec1ab10f45febce50be00e1854783e2d65a5bc292787406c06e1d19acbf8a391a62b3b86f74c96095d216fbfa144752
-
Filesize
8KB
MD55e253bd39bbd0cb1bc7e9bbcace34fd8
SHA1698dfbfc4c4b9824d6163eb53963a817a472d90e
SHA256d4c821934eed84ef9c4b57a70438c94480b30f425c9c81922d910f7c0f38f3fb
SHA5124b80ff14aad2e7fddbddb2079699c444bc5062499c42dfa1094bde3ae760d744f6badf895248aa39cfd5b3452025a32cbd8603eecc4fb1350157f2c27072ce6d
-
Filesize
8KB
MD5880ac18221248d5a707fe62fcf6c6866
SHA1c68f56e5bc934eae593378b7e2c68e510f484212
SHA2561885efc95d15678e48dedb8fb970cd761d84e7dffba5dbd1443c607e185c3f3c
SHA512a452e1aac62631894335a8c0746cd5d0d78e0678df640fa865656948b7eb5be1e62bbe961c7e7575ab2d18e5dd6ef7d01a50a90ffb2f452bc3c0ce46fb0e1919
-
Filesize
569B
MD5b667ce037c17b4d28e31d23d23f6ff14
SHA1cb8852eb18fef42d8b2f135b5104256491bba861
SHA2560d40932c38066da3c5a0e617d5e23b3e1cf2367d26161a812b4aa917fa94e597
SHA5124763cddf775847cb67752d9a9f6403f104d8922f1af68fcc59791739a55a2373c0eacc72d4545a98252e6e5ff7147688688bf41f55d570ce95f221790117229d
-
Filesize
569B
MD5af9af8a2758dc70321e3ce2296f77147
SHA184d2b9a395a66de82863266bd5fe7a5bcb89eb5f
SHA256fec471cde9c2b36a81fbd1f56f394244ded873a4ac285368dd3dd8f3b0673427
SHA51294f58621fb5c50adc0c26354bc28155b6824d3aab52787b1c577a4f5da2f3d15cd46fe77edb4755becc1029014837ac74f80de933aca319cd1ca7ee9c30b6e82
-
Filesize
90B
MD5dae25a3f04fbb558467cabd7ff5ec8da
SHA13e33d0b3a395b458ff24e20f08515f26f976ccbd
SHA2566979388af56a66e4d0de2c5a4a29f3633cd690ea0a56d3b392c20425e3db855a
SHA51229aa56792de499acb31a0a0a9d51c74833f0a876f031827babdf92b1b04f8ee185ab7659a97ce43c291b5d0ca9073a8637e6008f00dc1253b8865bbe204b14de
-
Filesize
90B
MD53cab5c243f32818aa2db8465fdf0d827
SHA15273ee6f13530641ebb1e56bd6db9427926b329e
SHA256fae0e7783aec6cea6c4d8e2c5c4c4c34e9cf65dc9239bbe1d52ba5fa7ee0b1be
SHA512a522bb403b0c2989b1c4062c28208025b833638d05899495d867581715ddb2e5b6a78aa130f92ee19c4535707ee8678767cf73584cfd10b61ecfa30ae31d0870
-
/data/data/ver3.ycntivi.off/files/frc_1:692330584196:android:68ea9f0c920aa17904cad1_firebase_defaults.json
Filesize154B
MD5970bc15689c8b8e68fb6160db432feb1
SHA1d72450b78aa153bfc9cda54bb2ccc644fe47b505
SHA256afb4396e7436b889fb5f31e54de06a2cdb8c7f2d7fd1b01960a44c0878945fe7
SHA512ba0e8a8be065056d78792b4ffdb1e4f4a5529ed428ad0e227564eab93413516aa95f69179ece1a90b6ef85b57cc7376bd483fb011d9ef68dddb23e3c194cb889
-
/data/data/ver3.ycntivi.off/files/frc_1:692330584196:android:68ea9f0c920aa17904cad1_firebase_fetch.json
Filesize239B
MD5b819c3af35e8d5e10b62998deddce8a1
SHA18eec68ed2706333abec825f10b54257110cbaa16
SHA256a9be44d3d92817b508b1ca8e8a0d92025c8e4ecb94e55605a8d80d90d4962877
SHA5120e05caae3fa876b2e888f4484ec559aee46f0a2c1021df88bb158ff1d2e554c2454b905da01bfce4deff71e3914dec3251e3769321beae8bf466df2afc8fd166
-
Filesize
36B
MD5f450ed3e2315ff13fab72842957727a9
SHA18fc0bad0dd3ae6e0e5fc9ee3d497cf7dc94eaad8
SHA256c4752b45d8b7dc80fc145bdeee3d57df2d3de5406bb27746322783456fe571c6
SHA5126eb9bc8f40707e185b08221ccf120b3601dd6d7231a4e0b5d4944419779d803d139eb6c74c939ce373e03ecc9590903178af0a9e761e9a5066e277dcfa0a5c8f
-
Filesize
24B
MD5f50af4b863730ccb475adb884b9451e5
SHA1a8e07431558a96bbe9e854514eb978f69b633096
SHA2565e3b54f85e4f06b31fa879136b329e47f43abdd72959d31854c32a1f60c9b262
SHA51222991343ed44d92b51895f696e9e63ae39daf27bdb8d322760986f20302ad18035ff8309277604dd101ad77bd97d0d07a09faefe5fbe04e54a83cc785ce4ceb4
-
Filesize
8B
MD5f5199745f8628a545debf4411ec76f11
SHA1c759f1d91e240dd71c9a149d4d43ffc6d382e59d
SHA256058332de8213939a45421b8f18aaa02228d3d286e57c75c52f30d90baaf7f7f9
SHA51210adc731f265ee991cc6a95547eb5c815f865b9a652ee78d6a849f324cb2e351aabb152de3a04387a7166f025cd1bbdc414493fa3398e1f2e6b20d3dc96ca0db
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5f37afbd11fe5a01615bd9153147434e9
SHA1801c575b6a831e96cbc9fefe8912f67f6ac3d9fc
SHA256206c7ff54da6a5bd56f77da5858fbe69cc4958efef0decdc9bf83fb5260d69b8
SHA51247077b858f391951fb73c6dbd9031496d838d9519488c6726dbf060ccfc484788abc96adf4ee6bbd8fd46b05334d70970c4aac7f7ff88df3cd259a70cb422cbc
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
112KB
MD5b6d6edeeaec57c4b8e87b243815bb488
SHA193089bf13d6cc35a10d60524e77182740f848319
SHA2562af90401a053da58d288ce891af444b699decd498eccb8f85f9a13f541ff9b95
SHA51253d3f258692b78749cc192e47254f56b7bb32d366c11ceb7672003738e0791427b23af6f9f67cbca1edac156dac05e95d997ae695880de9f1f0b82386edf4024
-
Filesize
193KB
MD51bc84171bd5a538e4b42e00ceb1238fd
SHA143307c46318df0ff1b3f4633309a70b29cba3905
SHA2560a251a253e2c1d7853a3d28100b0d150060ab977a88c0d5dae1dce1d9d582bd7
SHA51263fc2b131718cce4c4c9952c7fcff86e0c4f3ad7dda1e4b3fcb15eaa0eb6e6a03d02c5f06f3c06aa657995b6df5fa269844b8cc0c2160171bbe8bc57936c1e44
-
Filesize
16KB
MD5fe8d731816084ab76224edc615cf3760
SHA11d22543df9f81b0f9856dd12276ed32a74c62e1f
SHA25696cc4e04944bd30f823d04a9c93234a5e604adc0f09fd05f828aaf00e9e13248
SHA51201da3f952e531428a03b2015ab5b3f58d88d285292e59bc6e557ea4c5a64b81090df844571131b262fd55c37a4b00a7ddea03d296d92c93b747701c5580f5acd
-
Filesize
2KB
MD59cac7702dc28113b9fe1fbb2cf009fa5
SHA12249f96d12b587dd47f69616b8f638663f730b23
SHA2561242935355650217aee59b3a4de907bb9fb2ae6b0360ca8e74060dda14206585
SHA5128cc4bae950806d4432757ab83bdd5b7cd62ced84d356d826e11eefde06b978d2f4721d4346573ed1c7b28b35e0249316f2d3ffc8333e78f42231955fb8589f33
-
Filesize
11KB
MD52dbf66d986a5df44a64fbc2bdfcacfde
SHA15789dc38a4d1531f33db4421ebd78b8a86d2dc85
SHA25646ba18caca2aeb6212af5b4e0967064067aaf996bdf64edd9ef25a5c5b579686
SHA51236c79b057107bed6ef56e281d07aca9b1f0e2fc043c266a45d17e7ffaacc5e7e229a32836e691b6142b974807ba78fbe8cab55ca7a4f10e9fd28a5d7d4a6aafe