Analysis

  • max time kernel
    2s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    17/11/2024, 22:11 UTC

General

  • Target

    f920383549215720980696303dfe2753f38bc6ae82a88717e69f3e0d6fd41bb3.apk

  • Size

    1.2MB

  • MD5

    c8fd7ab4349d1c275a85c891e4cf9be2

  • SHA1

    acd0b7bd1da15ea27739f8230d0787fdd40ab78e

  • SHA256

    f920383549215720980696303dfe2753f38bc6ae82a88717e69f3e0d6fd41bb3

  • SHA512

    6d02b046135de88e2d36159192817ab3bf44312411c48bb1e8ddc5f08240d2e51146db979f842ff612c95d61ce916768af11f36ede4b15de4e72710ea2fb62e4

  • SSDEEP

    24576:kRNIMIlRNdPLri5qLap0zYyskLFYGiHt4DgSy1fA8ZN4vj:kXIMy7dTriVysUiHt4DgS6C

Score
1/10

Malware Config

Signatures

Processes

  • com.dehodigipuhixoyi.mafuko
    1⤵
      PID:4317

    Network

    • flag-us
      DNS
      semanticlocation-pa.googleapis.com
      Remote address:
      1.1.1.1:53
      Request
      semanticlocation-pa.googleapis.com
      IN A
      Response
      semanticlocation-pa.googleapis.com
      IN A
      216.58.213.10
      semanticlocation-pa.googleapis.com
      IN A
      142.250.179.234
      semanticlocation-pa.googleapis.com
      IN A
      142.250.178.10
      semanticlocation-pa.googleapis.com
      IN A
      142.250.187.202
      semanticlocation-pa.googleapis.com
      IN A
      172.217.16.234
      semanticlocation-pa.googleapis.com
      IN A
      172.217.169.42
      semanticlocation-pa.googleapis.com
      IN A
      142.250.200.42
      semanticlocation-pa.googleapis.com
      IN A
      172.217.169.74
      semanticlocation-pa.googleapis.com
      IN A
      216.58.212.202
      semanticlocation-pa.googleapis.com
      IN A
      216.58.204.74
      semanticlocation-pa.googleapis.com
      IN A
      216.58.201.106
      semanticlocation-pa.googleapis.com
      IN A
      172.217.169.10
      semanticlocation-pa.googleapis.com
      IN A
      216.58.212.234
      semanticlocation-pa.googleapis.com
      IN A
      142.250.200.10
      semanticlocation-pa.googleapis.com
      IN A
      142.250.187.234
      semanticlocation-pa.googleapis.com
      IN A
      142.250.180.10
    • flag-us
      DNS
      android.apis.google.com
      Remote address:
      1.1.1.1:53
      Request
      android.apis.google.com
      IN A
      Response
      android.apis.google.com
      IN CNAME
      clients.l.google.com
      clients.l.google.com
      IN A
      216.58.213.14
    • 142.250.187.206:443
      tls, https
      858 B
      40 B
      1
      1
    • 216.58.213.14:443
      android.apis.google.com
      tls
      3.7kB
      7.5kB
      12
      18
    • 216.58.204.74:443
      semanticlocation-pa.googleapis.com
      tls, https
      1.2kB
      40 B
      1
      1
    • 224.0.0.251:5353
      3.7kB
      11
    • 1.1.1.1:53
      semanticlocation-pa.googleapis.com
      dns
      80 B
      336 B
      1
      1

      DNS Request

      semanticlocation-pa.googleapis.com

      DNS Response

      216.58.213.10
      142.250.179.234
      142.250.178.10
      142.250.187.202
      172.217.16.234
      172.217.169.42
      142.250.200.42
      172.217.169.74
      216.58.212.202
      216.58.204.74
      216.58.201.106
      172.217.169.10
      216.58.212.234
      142.250.200.10
      142.250.187.234
      142.250.180.10

    • 1.1.1.1:53
      android.apis.google.com
      dns
      69 B
      109 B
      1
      1

      DNS Request

      android.apis.google.com

      DNS Response

      216.58.213.14

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.dehodigipuhixoyi.mafuko/no_backup/androidx.work.workdb

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.dehodigipuhixoyi.mafuko/no_backup/androidx.work.workdb-journal

      Filesize

      512B

      MD5

      e22cabea6340b6ff4eefb49ca6a435f2

      SHA1

      85854115eff6f900d3a67cb9516f65fbca282a82

      SHA256

      2b6114832e16a227427accbff5d83c9b0bb2503e6ecfa077202e45bc3235f4d8

      SHA512

      4357dd78c796d2ae8b9222cd8f9707a87047866f7e10524a38dfd86ea1f6d97dbad94ca834d38d0993271fc459d0339e92cd94e829a18031368a31ed240a5a4c

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.