7774c84de0f094b254ec867c0015ea0a906f10239ea213ceff9b6aacb55f689b

Analysis

max time kernel
149s
max time network
156s
platform
android_x86
resource
android-x86-arm-20240624-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
submitted
04/11/2024, 04:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

Unconfirmed 985028.apk
Size

7.4MB
MD5

6afaae1b22d81c415ae596706e1d92d6
SHA1

f83c7b0acb4db88440f88defae3dd35867839aaa
SHA256

7774c84de0f094b254ec867c0015ea0a906f10239ea213ceff9b6aacb55f689b
SHA512

e70e44eb9a9646aed4e7b1c0b8277b956c9211c9e2cad57633f1697bce1816ec7c20ef67736377e0c26e2eb401e48748a76d97c852eadf3a1986d3f6d51adbfb
SSDEEP

196608:TlYiXXzC/o++i1MtuNsa6KdLv5Go2cblu4:TrOo+Wt2sapdLv5scbw4

Score

6^/10

discovery evasion persistence

Malware Config

Signatures

Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

Application may abuse the framework's foreground service to continue running in the foreground.

evasion persistence

Foreground Persistence

T1541

description	ioc	Process
Framework service call	android.app.IActivityManager.setServiceForeground	com.rewards.officialpoint

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.rewards.officialpoint

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.rewards.officialpoint

com.rewards.officialpoint
1⤵
- Makes use of the framework's foreground persistence service
- Queries information about active data network
- Registers a broadcast receiver at runtime (usually for listening for system events)
PID:4267

com.rewards.officialpoint:my_process
1⤵
PID:4320

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Foreground Persistence

T1541

Privilege Escalation

Defense Evasion

Foreground Persistence

T1541

Credential Access

Discovery

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.rewards.officialpoint/files/profileInstalled

Filesize
24B

MD5
7d8184c8102099f60ae7cc397b3b9e2a

SHA1
f28f08fa68025c1dfa42f87c5c74d0d041bda013

SHA256
d8da5d34ae35a2fb3099a03e9cd9dccb64b07c87108d5e626f7627131f33362c

SHA512
94f8d8aba376c5b5326eef31256378cbc3cb6f2628366ee2c9de5618f1fa50891c6d9222c0576f9388ffb016eeb96ae0e2f004e246af65815c674ca081e14750

Download Submit
/data/data/com.rewards.officialpoint/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
06b6881f0570d0d549e8b0a07adafe4e

SHA1
ca21af1d876833dbc54f34eb0c512e274ae634c4

SHA256
9c30e4319603816da2763f22cfeb38d208a504248d3a5bfcbcf0bc876fb3f0be

SHA512
a0df2a90457604f95e9831208a6d526dec56660f47fcf033b3e2b2f52f33a3b6ccadf02b86cb2092f5e3eab4026d9a8610046911f10a579e03f808a0f0f87393

Download Submit
/data/data/com.rewards.officialpoint/no_backup/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.rewards.officialpoint/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
9fa6a1d9dc9eb1f9fa53035701db7e20

SHA1
34445fb7766caaab987278137cf5271ff59f7cfc

SHA256
ea30e52996fc03161dc51818e8d2f38e0404d6e723232463811d935ecf0a25e6

SHA512
ebab367f518510586ba18b023186e9c313c25fa765e7c49743e829ac356b3dc630d750e372bdfdccb3f958723bea3d8512e00f68a6d8d74a503ba09e687e5186

Download Submit
/data/data/com.rewards.officialpoint/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.rewards.officialpoint/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
893ed9a3aad6830bd78dec9fffdfee47

SHA1
cc6271b924612cc4508a5f38603015fc919d125f

SHA256
37502ee4667968cd233e4245a7352cf002843b426c55e486624370ec870bf5d7

SHA512
83d683bedf5e7f717355cc29a79377e7b82b933a66a15468945af92f7f48726a08dd2ecaaff9e74a732ef2806af602e8326fe6a86f4a1f486817662880121a96

Download Submit
/data/data/com.rewards.officialpoint/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
97faae70d99b1bb61fcd02d1e76287a1

SHA1
d7954f62491626bc528f315f7d786bb629187a74

SHA256
886c7fee482f42c5b7a633eb97bb65eb6945cc78a02add968250c2cedb98fa70

SHA512
613c39ad85b3fc75dd086fda6c5680ed42e983a20aab2d5c434a2018a56c42ffb3c4820bd2482b3d5a585dbde0a61a44cb6a1342de2203bcd9b59a420ffc688f

Download Submit
/data/misc/profiles/cur/0/com.rewards.officialpoint/primary.prof

Filesize
8KB

MD5
50df53ec4515fdfe05b2d37f726ff301

SHA1
c61a4fbe1d9c0e8c806b0a110a15fd957c21a91a

SHA256
6df1dfee7097395e4ea2669144bedb6f0540ae8326536640f1d432415549955e

SHA512
de229cb2a72805347bd9dee17e9f57a22f775afa6b294ad552ab42a3bbd1f31fcb9eb0dc5cc88a3982a13ee1bdf956ee403667989f5693a16d90a359dd3d6f1f

Download Submit
/data/misc/profiles/cur/0/com.rewards.officialpoint/primary.prof

Filesize
8KB

MD5
1c415840ccdf5fb28a7939b55fde87c6

SHA1
ac1c04824b073bd2646c97d3fc2d3bc0f802980f

SHA256
0fe2a000d9f4021c6b4f5a8f3b98cb9a281e59cdbf0f379e8cc8e9dd2c2c086d

SHA512
94c28a616d1a3028051582b2cc78ea0f7dc6bb71e1516e13deca49d8d82dbe52865f89e0a0c2a04e3282bae2a61f9a020888abb60a13f3857993ea1e1bb59a3d

Download Submit
/data/misc/profiles/cur/0/com.rewards.officialpoint/primary.prof

Filesize
2KB

MD5
70cb64cf38a6a5e15341de9c3ab460f6

SHA1
7b29617f921e444f7cf168d064d0e1174ed51bb5

SHA256
5e84b8c16315390d7a61d6e4dbf5648f8d25b6a78cb343cef1fc1e6e79e745fe

SHA512
b482725a0c811e23c9909cb769328153b85286b2f6926cc0f5d3252bf6b712920a9aa82fb8b35e581fae86bddd669f2083597c5a0642448e3f2110239e538cec

Download Submit
/data/misc/profiles/cur/0/com.rewards.officialpoint/primary.prof

Filesize
8KB

MD5
5f42de361ff1cd89565bea818442e7bc

SHA1
3ac0abbcef52b99efd3cbd39db5ebd87230572f0

SHA256
2054a5b953f1191d2df339464c11962de0a82f0ebb7618dfbc19a2b3b94071a8

SHA512
3249ba94aab3d3aea0fc43158bdf485bf941bb8639e4d21119a39108da2182c24c5c5cf395976fc673c1df46aee4a50c50138d269e61dead83d3eafe5914c632

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads