Analysis
- max time kernel
3s - max time network
164s - platform
android_x64 - resource
android-x64-20240624-en - resource tags
androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system - submitted
13/11/2024, 05:56
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
com.adobe.reader_1921819312_apps.evozi.com.apk
Resource
android-x64-20240624-en
4 signatures
150 seconds
Behavioral task
behavioral2
Sample
com.adobe.reader_1921819312_apps.evozi.com.apk
Resource
android-33-x64-arm64-20240910-en
9 signatures
150 seconds
General
- Target com.adobe.reader_1921819312_apps.evozi.com.apk
- Size 227.9MB
- Sample241113-gnf4baxcmp
- SHA256 6aeda4239d3ab2c205fe8e3efaa6e3f06459bddf713d361313bc5cfbbec1cfb2
- MD5 8734e174d35587cc1d0c4d8232f8f5e2
- SHA1 3b0324b90d3829433f638e59fd4b4eca7791b544
- SHA512 b8818579e3b456d3ab5a5077c83dfd5ebc2e76d3164c03bdfd7f989437acbf65b84729297103f35a540f86aec71725f3e864fe1c2f634637988455cd8b8adec4
- SSDEEP 6291456:YvPbFw3LH9tvtxO5PRTAqWmNAnc2fJfttR:AKbH9tv4NAq9vIB
- MD5 SHA1 SHA512 SSDEEP
Score
7/10
Malware Config
Signatures
- Queries information about running processes on the device 1 TTPs 1 IoCs
Application may abuse the framework's APIs to collect information about running processes on the device.
description ioc Process Framework service call android.app.IActivityManager.getRunningAppProcesses com.adobe.reader - Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.adobe.reader - Queries information about active data network 1 TTPs 1 IoCs
description ioc Process Framework service call android.net.IConnectivityManager.getActiveNetworkInfo com.adobe.reader - Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs
description ioc Process Framework service call android.app.IActivityManager.registerReceiver com.adobe.reader
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.adobe.reader/databases/com.google.android.datatransport.events
- Size 40KB
- SHA256 e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370
- MD5 15d5b92dcbda7ef7f9ca327a903e46e4
- SHA1 ca153b66028a58d90346ff8abadbdf01b95c37b1
- SHA512 2352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca
- SSDEEP 48:Tf+3u59MENZBdUdndVd/7T9IvdldHlq8/JqYpqPS:z+3KMEX0xIyNYMa
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.adobe.reader/databases/com.google.android.datatransport.events-journal
- Size 512B
- SHA256 7c1ca4ad7dcae8ab1f02b269ededfe06f5b9260b029ea68fd9a6607fe42ae090
- MD5 16f90149732445e745b6177c7d3465e6
- SHA1 a3a9df5f87763299054af183a080cd12b0e99abb
- SHA512 e2f1e9ea39a2d44ddcdd49f8a763fd600a7abdf69fabd71f6ba258e6c7965c5c40eff902d6c712cd5e993d3074ee77d3c83a84d0075c7c66a367752a25ae6315
- MD5 SHA1 SHA512
- Path /data/data/com.adobe.reader/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 263c0edd3430bbe4579bb15834adde5a2d4fbe47f676cb2fbee032a0b932b6da
- MD5 45ce47f7822f30fdea392bc4861258d2
- SHA1 9784f56acda567ff18baebac5a74a57bbb44678d
- SHA512 19d1ba2c0a7bd07b9b6d276eea8ee5f2f7e6ddf2a7dcee423d4bb6bc0e7adb7d0528dd19efef0ea46b6e7559f8461960b3823d995ccc80252f25ceb50729bd92
- SSDEEP 6:7+/l9xOn1JRg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK0:7+tz8RqLiuWdwRmBEyPbr
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.adobe.reader/databases/com.google.android.datatransport.events-journal
- Size 8KB
- SHA256 15a012b26e282900ed5b26b532b7394f1b2c8a4f7babac11d286412382ed810d
- MD5 dc5b448e5b0c16cdc2814e5179059898
- SHA1 dca1f75326ab666c92f2c2fd4897f57313c0d45b
- SHA512 2c96e6b98c79901800fca40c211b5ed91f2fe8ca5619fd4504d53755e7021b5c3e665b4f7d7fa002806b69bfc7bdc1dc8304eee28d5666cf1c39b8ec0ae65459
- SSDEEP 6:7+/l90Pg9bNFlLdrlOERX4PBX4ogLugMBX4suuKN//5:7+teqLJdTRmBEyPbmX5
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.adobe.reader/files/PersistedInstallation1089672351045839177tmp
- Size 90B
- SHA256 d61946b790679eae7e3f6b99bb35158163a9c592b0a063e12b488846351972df
- MD5 29369aa6ac94ee26a44cd8c12ecc38b9
- SHA1 3bf8b6d77b911543efd9b4350d19afcbaeab1499
- SHA512 ec99738a4af5fc71168f97e1588c51f01d7aecc8a02a99bc439b660f23853b7ea5d4017149f8d0c856fcd6ad20bbb5898bdb55c00ac0eb644761491277e1969e
- MD5 SHA1 SHA512
- Path /data/data/com.adobe.reader/no_backup/androidx.work.workdb
- Size 4KB
- SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
- MD5 f2b4b0190b9f384ca885f0c8c9b14700
- SHA1 934ff2646757b5b6e7f20f6a0aa76c7f995d9361
- SHA512 ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
- MD5 SHA1 SHA512
- Path /data/data/com.adobe.reader/no_backup/androidx.work.workdb-journal
- Size 512B
- SHA256 19c0f1b7d9e86818f098b385d2c04c21a8bd38b213cb12c293396b033f203cd7
- MD5 de658bee173e15157cc748c0a2f86c65
- SHA1 9d6a5092a5eccadfd20aa16eed442657d8e1508e
- SHA512 ebd0e3a012b8a950f78d64dbe7947d6237f5fa5d4ef51d2e08400716c3e96e99aa007c20612032b2c713707b81885d434a93675be5b7518f0db5173d59bdcb50
- MD5 SHA1 SHA512
- Path /data/data/com.adobe.reader/no_backup/androidx.work.workdb-wal
- Size 16KB
- SHA256 b6a75ca64a766cae084d7f93cfa27058a3bac4378cabd1cb660ae15097d9a76d
- MD5 361c3bfcfb1108b34c955b1695efb4f7
- SHA1 e19cc1e5dc0bbd73dc4d2bbaa6a33f09fd4f37e9
- SHA512 8bd0b6e4bffbc716af49dde903f4425e9013e94f58af9ea6e08657487445d5a359250fa35e57b81b338332bc5824f1fa16e0f208f06a5dd8a3f3d06f361a9c26
- SSDEEP 6:KMy8Gh8AuJ9FZdrlOERX4PBX4ogLugMBX4suuK+/v8TCrwlllUYXOw2:KMy8c81zdTRmBEyPbP/v8TwwlllUOOw2
- MD5 SHA1 SHA512 SSDEEP