Analysis
- max time kernel
6s - max time network
141s - platform
android_x64 - resource
android-x64-arm64-20240624-en - resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240624-enlocale:en-usos:android-11-x64system - submitted
07/11/2024, 12:24
Static task
static1
3 signatures
Behavioral task
behavioral1
Sample
5816aec65efd679db9f4bee0ab69bf79.apk
Resource
android-x64-20240624-en
0 signatures
150 seconds
Behavioral task
behavioral2
Sample
5816aec65efd679db9f4bee0ab69bf79.apk
Resource
android-x64-arm64-20240624-en
3 signatures
150 seconds
Behavioral task
behavioral3
Sample
5816aec65efd679db9f4bee0ab69bf79.apk
Resource
android-33-x64-arm64-20240910-en
2 signatures
150 seconds
Behavioral task
behavioral4
Sample
5816aec65efd679db9f4bee0ab69bf79.apk
Resource
android-x86-arm-20240624-en
8 signatures
150 seconds
General
- Target 5816aec65efd679db9f4bee0ab69bf79.apk
- Size 95.7MB
- Sample241107-pk4dfavkfp
- SHA256 1cb3b612d48f644f2fee71e61a70b8d1f4c058ed7375e65a8e9a090fec82fd80
- MD5 5816aec65efd679db9f4bee0ab69bf79
- SHA1 fb574992d608392c364aff8ff471cddc281b9846
- SHA512 db46045fc88748896399217ff527ab15acfb9182ed760fd567a3bcac5b5affe3df39118b6e6932076fa7140ce36de7f57732681a844d37bcd6c72c7bb944a6d1
- SSDEEP 1572864:TjqV3vHzjcPh5yJMVgiCVCSdpUf4mrAfpZBZ3MRQF2VqjyJSuGQDF:T4fH8fyEDwKJYj3MRQ8VYyVDF
- MD5 SHA1 SHA512 SSDEEP
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock im.hhtmqewknh.messenger - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo im.hhtmqewknh.messenger - Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal im.hhtmqewknh.messenger
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/user/0/im.hhtmqewknh.messenger/databases/com.google.android.datatransport.events
- Size 32KB
- SHA256 f02ded6053bd0f124da16cdf40849fb201797ddfac5536ab36e1feceb21564a3
- MD5 7daa8bf70cba1177c0aaa35143f5ff54
- SHA1 4ddb8e3e373296808fd5a3832a454ea9c0c60b0a
- SHA512 7178eae8e99b2f8b571bd333a3c6916bd088c96dc2c6d5b074ac388e58a345de6a82daceb39994019cbdc5c2d4065912eb0c52787ec50d9e1f746ba92bcee22f
- SSDEEP 48:TkSZ59MEoBdUdndVd/7d5IvdldHlq8/JqFS:ASNMEo0LIyNM
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/im.hhtmqewknh.messenger/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 73b9ed5ba29ccf492d062e117fcf413425a36e3394f29f95ed1ced527478ff2b
- MD5 f29b262678f0f05cc569f484728f384c
- SHA1 93008a65707dbee012ec838c7c0c96e952478c77
- SHA512 595b28130ec7c088d4e7692603995088d4ceff73e5df1a4781355af7135cece7cfb6bacc34f26b94c902bcc647bfba5b885f9c586c7c7d43a0ec713413c65a4a
- MD5 SHA1 SHA512
- Path /data/user/0/im.hhtmqewknh.messenger/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 3f6fb164fce44e191ae5044f8da29dce0e3a37e5bfaa15ca17d9d635ffc9284a
- MD5 d138096af569409d741f1794b61e57f8
- SHA1 f30b01e58be129f945ff2e084ee5f4df488d8ee4
- SHA512 f194bd98c5db030996af1fce320b7c81a258e61804d839c82c040d44b57a874df55aa774363de3b7a361e604004fb00c7d2641b8d059c50ff7c02d97b1730308
- SSDEEP 6:7+/l9in1+mg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKm:7+tUqLiuWdYRmBEyPbx
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/im.hhtmqewknh.messenger/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 feb1e3ddf93e1fa31aecd51b569d9a201937107c34e8749b37e9abe016b65ecb
- MD5 a6a0651a667d4e1180950e7f8bb0b49c
- SHA1 7845fe3cdda6655266dff852d660132082b9bbeb
- SHA512 0d372500898c9107ef17a64d00fd1f9058715ba277bb9e11f019e2da9f303163be5865f34858ffe942bb6f8b38e010b7597657a72ed852a96bfd2c4db79a273d
- SSDEEP 6:7+/l95lllSFPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuKgdP/lnkt/wOn:7+tVl6qLJdeWRmBEyPbH9k1wO
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/im.hhtmqewknh.messenger/databases/user1.db
- Size 12KB
- SHA256 67b1e827a498e60301f0b57d15e0e342027c49266e8be14c7441dc7f774c299d
- MD5 2e8d2b7e3b1a8758ee427d301314b7ef
- SHA1 32bcf7c03fd4934e1224feaf2114df2ae56d0551
- SHA512 2a7acd5dff858b159ad5ddd05f8392dda9a0d2185dd5b2b4b20ab660d8946bd3686cdaaaeff7317d717a23a2da1d86e5e42e0221e20e55cc020a2d9a16b0869f
- SSDEEP 6:l9bNFlqhO1r/kPlOERX4PBX4ogLugMBX4suuKTqiOw2:TLmqKRmBEyPbsOw2
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/im.hhtmqewknh.messenger/databases/user1.db-journal
- Size 512B
- SHA256 e9a881be32998575ab19ac23a03b665267b8348b0bacb036645f7f013ba9cebd
- MD5 df0ac95ee6535857404002ba696d5052
- SHA1 c3430e37fff617f5e166b8633004c2be6f3cc258
- SHA512 99bbf774605acfcf66519c976d279409516ef0c466446a8695b4b834370369f2f4ae02bc1fee0cd97adf11e4e0c50d007a8efb71ae26c3ea93776113d092b8df
- MD5 SHA1 SHA512
- Path /data/user/0/im.hhtmqewknh.messenger/databases/user1.db-journal
- Size 8KB
- SHA256 27ca436b74a075810a59465a77d55925b37e4cffc07f011f6c3d2591045972dc
- MD5 00a239cf7340751c49501a4e419d8652
- SHA1 b1777d61eaaa0528619b01e3121f40f9354f0b68
- SHA512 d6d9c29ce290d8f3db6ab02a2fbf8443834de41406ad6dad7045bf4f9cac9fe4cb362e98a13ddb0e4fb1bd6f0fdc2785f36944a484670fa2b267e9553db226d8
- SSDEEP 6:7+/l9r4n146pg9bNFlEuWdN/kPlOERX4PBX4ogLugMBX4suuKJi:7+tNb6pqLiuWdYRmBEyPbgi
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/im.hhtmqewknh.messenger/databases/user1.db-journal
- Size 4KB
- SHA256 82ec648f6d3d0254176f44edad4437df03331c0cccd1c0d055263d0a085f7d7f
- MD5 b65dd11b91bddf0ac1ac11ff6d759839
- SHA1 9279fa18a61ab64db45f444eec4cfddc509b3fd9
- SHA512 9da0193cf4e40c4ac06ae7eb405c827c5aec57a31e9549f9474a4a18a1cb5532e8d761b89b56615b9e11dec7402111f51105d3ad615b82175729bf87ea378086
- SSDEEP 6:7+/lJZPg9bNFlLde/kPlOERX4PBX4ogLugMBX4suuK9a:7+tfqLJdeWRmBEyPbn
- MD5 SHA1 SHA512 SSDEEP
- Path /data/user/0/im.hhtmqewknh.messenger/files/libcuid_v3.so
- Size 129B
- SHA256 5e2e199e3ff9913b5126f2d1ff13201ec563e26c9b9a8c856f6bd77d4c29ebda
- MD5 df2129a4c8f86f638abcf7e298c7c912
- SHA1 9ef7e57b67e37865b5609242914a8c1b58011dd0
- SHA512 110ac0597c407ff3cc33b13fdce6cf618cb7a52dd9f1d2d794c4bc7188bb629fc44b41a130a6460a271e4671c86f460506067fb8d3cf10fbed8ae6ab290da626
- MD5 SHA1 SHA512
- Path /data/user/0/im.hhtmqewknh.messenger/no_backup/com.google.InstanceId.properties
- Size 63B
- SHA256 c56072119f0108a03770a576c44959b2e873f0bbac5ea90de8fbe5257ea849fa
- MD5 40a314ffcb3f9bc43e66d8b481856d5b
- SHA1 52e37566e6dbb7942d053f667708fced9248644b
- SHA512 b5484420bdb7b5d5c91c6af7595b4e2169d430affb5b5ff290c8a44dd1a6f605dae22e0c413a15370e5212c104360358274ecc2d395ef74c403b36cbb7d7032d
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Android/data/im.hhtmqewknh.messenger/cache/000000000_999999_temp.jpg
- Size 1024B
- SHA256 5f70bf18a086007016e948b04aed3b82103a36bea41755b6cddfaf10ace3c6ef
- MD5 0f343b0931126a20f133d67c2b018a3b
- SHA1 60cacbf3d72e1e7834203da608037b1bf83b40e8
- SHA512 8efb4f73c5655351c444eb109230c556d39e2c7624e9c11abc9e3fb4b9b9254218cc5085b454a9698d085cfa92198491f07a723be4574adc70617b73eb0b6461
- MD5 SHA1 SHA512
- Path /storage/emulated/0/Android/data/im.hhtmqewknh.messenger/files/logs/07_11_2024_12_25_01.txt
- Size 1KB
- SHA256 9645097000bd49ee991d02615502847e3760beb94a97ad64d2a7561662ac5ddd
- MD5 0dfb491cc43b35552c73a901c27d9f65
- SHA1 c29936f2033e4a556a1a022fda812e41a13a8882
- SHA512 059c8a94441f657fce5c330497889520e082195fae159c85a186887c77cbbce6fdc072b5f8d926d7609f2f23c02c8c36271c7145a242aaff5b85f92f1cfe61ef
- MD5 SHA1 SHA512