Analysis

  • max time kernel
    6s
  • max time network
    141s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240624-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system
  • submitted
    07/11/2024, 12:24

General

  • Target
    5816aec65efd679db9f4bee0ab69bf79.apk
  • Size 95.7MB
  • Sample241107-pk4dfavkfp
  • SHA256 1cb3b612d48f644f2fee71e61a70b8d1f4c058ed7375e65a8e9a090fec82fd80
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • im.hhtmqewknh.messenger
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4489

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        com.google.android.datatransport.events

        • Path /data/user/0/im.hhtmqewknh.messenger/databases/com.google.android.datatransport.events
        • Size 32KB
        • SHA256 f02ded6053bd0f124da16cdf40849fb201797ddfac5536ab36e1feceb21564a3
        • MD5 SHA1 SHA512 SSDEEP

        com.google.android.datatransport.events-journal

        • Path /data/user/0/im.hhtmqewknh.messenger/databases/com.google.android.datatransport.events-journal
        • Size 512B
        • SHA256 73b9ed5ba29ccf492d062e117fcf413425a36e3394f29f95ed1ced527478ff2b
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events-journal

        • Path /data/user/0/im.hhtmqewknh.messenger/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 3f6fb164fce44e191ae5044f8da29dce0e3a37e5bfaa15ca17d9d635ffc9284a
        • MD5 SHA1 SHA512 SSDEEP

        com.google.android.datatransport.events-journal

        • Path /data/user/0/im.hhtmqewknh.messenger/databases/com.google.android.datatransport.events-journal
        • Size 8KB
        • SHA256 feb1e3ddf93e1fa31aecd51b569d9a201937107c34e8749b37e9abe016b65ecb
        • MD5 SHA1 SHA512 SSDEEP

        user1.db

        • Path /data/user/0/im.hhtmqewknh.messenger/databases/user1.db
        • Size 12KB
        • SHA256 67b1e827a498e60301f0b57d15e0e342027c49266e8be14c7441dc7f774c299d
        • MD5 SHA1 SHA512 SSDEEP

        user1.db-journal

        • Path /data/user/0/im.hhtmqewknh.messenger/databases/user1.db-journal
        • Size 512B
        • SHA256 e9a881be32998575ab19ac23a03b665267b8348b0bacb036645f7f013ba9cebd
        • MD5 SHA1 SHA512

        user1.db-journal

        • Path /data/user/0/im.hhtmqewknh.messenger/databases/user1.db-journal
        • Size 8KB
        • SHA256 27ca436b74a075810a59465a77d55925b37e4cffc07f011f6c3d2591045972dc
        • MD5 SHA1 SHA512 SSDEEP

        user1.db-journal

        • Path /data/user/0/im.hhtmqewknh.messenger/databases/user1.db-journal
        • Size 4KB
        • SHA256 82ec648f6d3d0254176f44edad4437df03331c0cccd1c0d055263d0a085f7d7f
        • MD5 SHA1 SHA512 SSDEEP

        libcuid_v3.so

        • Path /data/user/0/im.hhtmqewknh.messenger/files/libcuid_v3.so
        • Size 129B
        • SHA256 5e2e199e3ff9913b5126f2d1ff13201ec563e26c9b9a8c856f6bd77d4c29ebda
        • MD5 SHA1 SHA512

        com.google.InstanceId.properties

        • Path /data/user/0/im.hhtmqewknh.messenger/no_backup/com.google.InstanceId.properties
        • Size 63B
        • SHA256 c56072119f0108a03770a576c44959b2e873f0bbac5ea90de8fbe5257ea849fa
        • MD5 SHA1 SHA512

        000000000_999999_temp.jpg

        • Path /storage/emulated/0/Android/data/im.hhtmqewknh.messenger/cache/000000000_999999_temp.jpg
        • Size 1024B
        • SHA256 5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef
        • MD5 SHA1 SHA512

        07_11_2024_12_25_01.txt

        • Path /storage/emulated/0/Android/data/im.hhtmqewknh.messenger/files/logs/07_11_2024_12_25_01.txt
        • Size 1KB
        • SHA256 9645097000bd49ee991d02615502847e3760beb94a97ad64d2a7561662ac5ddd
        • MD5 SHA1 SHA512