Analysis

  • max time kernel
    47s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    22-11-2024 23:44

General

  • Target

    com-mod-calisteniapp-mod-apk-unlocked-pro-24-4-1-203.apk

  • Size

    91.2MB

  • MD5

    73a31eac05c9c17f035dc2de7917d823

  • SHA1

    9426c793b32b7872a90108c662e97ab5e321696c

  • SHA256

    56dfd3efd8ec70ebabd4c3649163e928fa1201458c8a158dabe51d339c52dc61

  • SHA512

    4acfdab7cfc7716263fe15ee2b34b42766ab70c8d7cc9a2bb1ab00c22f3984201f1ca41680b596f4b4431e1ef101c6f9a8c737602b1d7b52a1dc0429a7618fbe

  • SSDEEP

    1572864:tA4/XB446A2LBAOL0+nyCv+9ndDwKn4WL5W+gEH/yERrhmU5FE://XBcA2Bivn4W7gGqpU5FE

Malware Config

Signatures

  • Checks if the Android device is rooted. 1 TTPs 2 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs
  • Checks the presence of a debugger
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 TTPs 1 IoCs
  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • me.inakitajes.calisteniapp
    1⤵
    • Checks if the Android device is rooted.
    • Queries information about active data network
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4264

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/me.inakitajes.calisteniapp/databases/com.google.android.datatransport.events

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/me.inakitajes.calisteniapp/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    c2270af127086d43c12b06bd2ad445f0

    SHA1

    426978bff7c11a25ae7688e7c9a6dd335c0e3abd

    SHA256

    728423e8d3171a6e24f79b96e409032f4d08b0314f7f3eab4c02342f7fe12f6a

    SHA512

    f2fa72d190a261807b71ed25c98bc49020a88eb922efcc4a5ec2a85334c33a065f5f4feabe671a60e7d1b93e2df7b888477bd47ef8851cdff79fe748e5b47183

  • /data/data/me.inakitajes.calisteniapp/databases/com.google.android.datatransport.events-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/me.inakitajes.calisteniapp/databases/com.google.android.datatransport.events-wal

    Filesize

    68KB

    MD5

    97c9c0812031cd5b6b23bdd46ac43f8e

    SHA1

    79677dc81051175a4ddc2c552e92b52546d0495c

    SHA256

    791dddb1302602fac3067d601687971637b524fd855a8da871af9b0cc38db9b9

    SHA512

    3e0a5d6682a94de7bbc2fecfc9fa18f5f19efb39639bdb71cabb69b03b50efc35016b915aeee69f94fef092f466936778c25256ffacc18dcc4724844f948cd47

  • /data/data/me.inakitajes.calisteniapp/files/.com.google.firebase.crashlytics.files.v2:me.inakitajes.calisteniapp/com.crashlytics.settings.json

    Filesize

    722B

    MD5

    cc488191ad2afff92737936c86f346ab

    SHA1

    2ebdb1d990dcfb150686cd92f882b6e5ef527a2e

    SHA256

    061bc686e44802bc2ed96fc698399e5027dfb95043ec1c759bdf2e07a15d274a

    SHA512

    9d791d07dc2ab487fa72baeef0243a27a2dc8550813230b6dcce46069253581dcf6f1e14cabc35aa05c910afe59544327da71425b9f44e2cad8583f20e0839be

  • /data/data/me.inakitajes.calisteniapp/files/.com.google.firebase.crashlytics.files.v2:me.inakitajes.calisteniapp/open-sessions/67411793029D000110A830296CCA5FCC/report

    Filesize

    829B

    MD5

    a3d7bad66523e41adf1978a65510f6aa

    SHA1

    89540b18c52e0205e23ac132c3e1802fc60d4f23

    SHA256

    54320af541cf559430547ffccf05cad39904b62d321bc4da36f80c6842bacdc9

    SHA512

    03f57d1f0b6cc759cb1516b809dd16bea109cd5886da285d2e82fb2e2a1415fd90de06dbbeb5f99e26086e7146267f6be6a22c1d275b1746f4985663acf6da99

  • /data/data/me.inakitajes.calisteniapp/files/.com.google.firebase.crashlytics.files.v2:me.inakitajes.calisteniapp/open-sessions/67411793029D000110A830296CCA5FCC/userlog

    Filesize

    836B

    MD5

    095e1b418a2e3d8dac31689422286850

    SHA1

    ce188077cff4421d2f95e9e77e878cdef53bc0a1

    SHA256

    f8b7035df1a270c595f1dd14072f54fb329ae86fa371169411f63df0e839e289

    SHA512

    f30821d4a99b558ed0eec4a8ad2fea0e3d4adc47be7ac6f1cecced98aafb982cdbeaca518e9ee663ddaf25c84a70ff688b5c418ff2be9bfbe44b505f3dc17d6d

  • /data/data/me.inakitajes.calisteniapp/files/.com.google.firebase.crashlytics.files.v2:me.inakitajes.calisteniapp/open-sessions/67411793029D000110A830296CCA5FCC/userlog.tmp

    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/data/me.inakitajes.calisteniapp/files/PersistedInstallation2815981819569432919tmp

    Filesize

    562B

    MD5

    919ca690dd80da94dc0a7add279c5fe0

    SHA1

    32086f8d5022d7b18d7d8be9638fc138c4c42ba8

    SHA256

    923c7b677c5605e0fd7463ce8ffc7f886c8235ab2517ef4f4dfca60fa0977973

    SHA512

    3083de20c8b097cf151036b3efa0ef2734e4de4eba946b29f5255f6e8aef9e9eef1cb8a4bf5b14fcfe6cf14148d96ac7340707c95d1fcec07ff3257d9b749a1e

  • /data/data/me.inakitajes.calisteniapp/files/PersistedInstallation5053559535149555146tmp

    Filesize

    90B

    MD5

    ff23332ce3b02781f6bb4924b84a4369

    SHA1

    8ef5b206a4255f8ee555ac50891dc8724e6ce573

    SHA256

    fef33fe9b84e2ef7a06c72113f659acb45cf78da959e98d6fa2e8d0967812e3d

    SHA512

    da8703ad2e4bd6d1dafb59d6f17a1dacb58d2f2650d5282479ee35c95813d76601304c908f06a76fa9f4df9d9562ea76425d47a988b744485880d4238906e809

  • /data/data/me.inakitajes.calisteniapp/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    33B

    MD5

    35b51faac8b5af3886e70bb5a885dab1

    SHA1

    e6cb282da46cd4bf113e25c8573268578dcd11b6

    SHA256

    af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b

    SHA512

    6ad5e9766cc03a4436e1440b9e47c44da6c6440a3c94b1cc988f8c5680043cde6f7b7e02b2b4c71b25df4209c39ed099fb65fdde02a9f09464609a1abe6af8fa

  • /data/data/me.inakitajes.calisteniapp/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    75B

    MD5

    944e6a5a08cb971370c65c06061f0ab4

    SHA1

    84d47725cc29bf167b782c702575bce4bf2ecc5b

    SHA256

    ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab

    SHA512

    bdc404233927a6a99160492d0b3e2cf00776d51b33612b8c9ecba395747b3572cf1790269fb199915aafe84c546d30e3259833c9d00af8c412823396882ca783

  • /data/data/me.inakitajes.calisteniapp/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    121B

    MD5

    ffcbf87665a36fc21782400bd0537e79

    SHA1

    3dbfbdbfdcde953317b089f9a9fa0bbe50c698ee

    SHA256

    a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d

    SHA512

    7f98ac150c422eb4f1126d86501d0435817ceaa7eb5549e4d21a295d57be3d3fed4388cda782c084130c4ac8d57a4f225139a2e42e8a12b34cc1679140d16b57

  • /data/data/me.inakitajes.calisteniapp/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    163B

    MD5

    dcf7d6c1cfd5e7b56074e3001577c78b

    SHA1

    b8eba89aee9f6688ecda6675ef8ff4998da0b141

    SHA256

    ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91

    SHA512

    42d75be824d69de23d2e8605d60c3608db20ed5c059f5b67c63ca2845484c67150aea88a3aae36aae12a4ea266fb6b469d09f765bbcd444350d836ab83f7695d

  • /data/data/me.inakitajes.calisteniapp/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    212B

    MD5

    044bfae8b2c142721fd60336e821b2cc

    SHA1

    534ac14fb3c552f8ed8f2f5724cd0cae38d79fd0

    SHA256

    0910fcce7dd8787a61ca44ecebf660282d49ad83ae7befdcb449f4f15f37b680

    SHA512

    e7651326ac94b101ade546d488de6ec627f51490831ea932db6afa4e3710655c9a964615cd7cc99c74d4a280e78985b5949eb7671c23e5e502dc50e06745b43f

  • /data/data/me.inakitajes.calisteniapp/files/default.realm

    Filesize

    16KB

    MD5

    247827cf189576a04acea86832a7c0b3

    SHA1

    3906919f9e9952f8e357aa556f0ddd6a4029e06c

    SHA256

    b48dff0aff2702a5c69d5d05efebac6efa553b89616fa94de4518aa481cf4a8b

    SHA512

    5faf4145065c681bfc3f18681e9e8f3de29119486583561a3646a50bce703614bb0032df66c4948c90251b8fb3896a63373db7fa9148eafcc087e85a7fb586de

  • /data/data/me.inakitajes.calisteniapp/files/default.realm

    Filesize

    3.0MB

    MD5

    2470ddb234be7c169b98334aaa1f8421

    SHA1

    69dfa2ae1d82fe0a3fe48d248cf5890a9bbb635a

    SHA256

    2f3b86475756499b4e134be7e6240dd96bc42e28b49e5f630c3d08415518a74c

    SHA512

    7363bde17382a9a0026065834b955aa3bc511e7878b1f9afd7a763455905bbf2d70f522427be614eab2c9f29a615dda1bf5d9188dbc17766c8249ccb5663ee68

  • /data/data/me.inakitajes.calisteniapp/files/default.realm.lock

    Filesize

    1KB

    MD5

    c3e4eefedd55eae4334456daa4aa0ad7

    SHA1

    ba9abe2d4d40bbd94530564b6eb178ec02a47204

    SHA256

    7081ba3d8887be22551f56b5f50da675bda7dd02f40e9fcb150ac84fccbe387f

    SHA512

    a302516427a81e59fe955f4316fd56b8e5207542b1abdd7eb3fc2e9dbc669849dce90d12d9160b59d45af233e63e2156f3a3f1e7807b7ae1b1225a94d472cea3

  • /data/data/me.inakitajes.calisteniapp/files/frc_1:361700109196:android:cf84160a8754ce68_firebase_defaults.json

    Filesize

    850B

    MD5

    6d221e00b3aac49eb68a088f26d7ad31

    SHA1

    282c4bd5c7f59b40fdf4ec9a60f039a1e6617cb8

    SHA256

    17f276d6f989fca7b3a56852aa58682316b07ff7b3b449ff64c707806f828770

    SHA512

    95a2b9c26e1385bf716df4ea17415392396700999217bab6cdfedd1a3ec6a7eae7727ceb98bf99f8567b01b8029e9c8f3ac3f22f6aa05ed5160b0be4c0054d94

  • /data/data/me.inakitajes.calisteniapp/files/frc_1:361700109196:android:cf84160a8754ce68_firebase_fetch.json

    Filesize

    1KB

    MD5

    8922483a9db3d5d9fbec8391b398b0cb

    SHA1

    e19ffaaa39e5cf8ff507658e7471bf16c92a32c3

    SHA256

    fde697c73417e055ba5503dbd05860edaa297f76eb3b33b431e1b6240371c3d6

    SHA512

    667774696183972be3e8ea85dba00acc3d379874af408a3fb82bdf6bbd7f85d17657ea75dad7344dcdaad394f121e417208f607ed7549229bb1f674f808edb15

  • /data/data/me.inakitajes.calisteniapp/files/profileInstalled

    Filesize

    24B

    MD5

    e241918c006752be5811b71e4864a815

    SHA1

    61cb318324edac174ff68280139ae13471e252b0

    SHA256

    58655a5b2ea40e4631f56744a25e6c6273f6540f842ad364100eee9476e481d4

    SHA512

    d1a76b94ccf9d2d1fa975bb2f159268e53312d66d971cb1478cbf4052507455452f337cf2d5badd065121c65fb737629f125caf4e58b623c6fb456c85dcc8a4d

  • /data/data/me.inakitajes.calisteniapp/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

    Filesize

    8B

    MD5

    1fa20075216ff6733501f486be0abddb

    SHA1

    cfba87f867b8638b6891b8899cc5d875ae6d7b1a

    SHA256

    5ea990edac564373a69aeae5181698569236583a41fbf31d1de2bb5d52a92a89

    SHA512

    b72eb7ff4e47b102bb1b9000f3a51f6789c185096c49488428bafce80c645115806947bcbd7b07334528c0b7fa058b8ed876725e12c0b3c7375d94302a3d36dd

  • /data/misc/profiles/cur/0/me.inakitajes.calisteniapp/primary.prof

    Filesize

    2KB

    MD5

    dbdf457192a3eb3042bd68108140b135

    SHA1

    9a18650ba0d484bec0633631e95457f55df2a384

    SHA256

    2e99c0bdd381d2025617e655506b65fb2a304746608706a04909f336f2b567ba

    SHA512

    f2de782db7d58a63760aca50bda8bed2e034e17186f150cbeea05cc354856c33e16b197fbb4c9514f75b75f21a511b2a9dc562e28a49c8f859238da8b9abb79b

  • /data/misc/profiles/cur/0/me.inakitajes.calisteniapp/primary.prof

    Filesize

    21KB

    MD5

    604eaf1253fb4b4e88155f4114443fcc

    SHA1

    038d07b63cff4c9dc57b13f4338f2ffe79246e9c

    SHA256

    071c045e16b0cdc912874066a1b8060f17a4e473c5fbdd274fa2dd096d5e5a51

    SHA512

    ee1768fcb65d01e23874f03a354f72e1003dc476c03b79d15ec511ce63a48b2bcc6b3a41cc76c6a7ae853805e7f774e7edd18a332f9d0479f724a5663337cdc0