Analysis

  • max time kernel
    47s
  • max time network
    142s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    11/12/2024, 09:15 UTC

General

  • Target

    d8661409d7cbc3c89bb6bab53f818fc5.apk

  • Size

    5.4MB

  • MD5

    d8661409d7cbc3c89bb6bab53f818fc5

  • SHA1

    44bdf3b416b07219df42f87759c10e3154bc6aad

  • SHA256

    4345c978e38502461e187a45ed9b27e202adcdc58b4321bd6e878b8a70d136f5

  • SHA512

    09850e76b962dc4a80328c070f9a7096c2887eb4932e0e68265a75f8d76b45755673684d11cf67a7a94b041d25d40f48b6fe6e878b48631e535cdba935d79ec3

  • SSDEEP

    98304:W/CdIM97uW4yje5CU6aim/q8HJSZywIcIu/uCcYZN9rBopHkQe2exIxtQM4fH3OJ:G29qW4rN6aimywQywIjuoYZN9rBiHkQr

Score
1/10

Malware Config

Signatures

Processes

  • com.example.shineinterview
    1⤵
      PID:4245

    Network

    • flag-us
      DNS
      semanticlocation-pa.googleapis.com
      Remote address:
      1.1.1.1:53
      Request
      semanticlocation-pa.googleapis.com
      IN A
      Response
      semanticlocation-pa.googleapis.com
      IN A
      142.250.180.10
      semanticlocation-pa.googleapis.com
      IN A
      216.58.212.202
      semanticlocation-pa.googleapis.com
      IN A
      142.250.178.10
      semanticlocation-pa.googleapis.com
      IN A
      172.217.169.10
      semanticlocation-pa.googleapis.com
      IN A
      142.250.200.42
      semanticlocation-pa.googleapis.com
      IN A
      172.217.169.42
      semanticlocation-pa.googleapis.com
      IN A
      216.58.212.234
      semanticlocation-pa.googleapis.com
      IN A
      172.217.16.234
      semanticlocation-pa.googleapis.com
      IN A
      142.250.179.234
      semanticlocation-pa.googleapis.com
      IN A
      216.58.204.74
      semanticlocation-pa.googleapis.com
      IN A
      216.58.213.10
      semanticlocation-pa.googleapis.com
      IN A
      142.250.200.10
      semanticlocation-pa.googleapis.com
      IN A
      216.58.201.106
      semanticlocation-pa.googleapis.com
      IN A
      142.250.187.234
      semanticlocation-pa.googleapis.com
      IN A
      142.250.187.202
      semanticlocation-pa.googleapis.com
      IN A
      172.217.169.74
    • flag-us
      DNS
      android.apis.google.com
      Remote address:
      1.1.1.1:53
      Request
      android.apis.google.com
      IN A
      Response
      android.apis.google.com
      IN CNAME
      clients.l.google.com
      clients.l.google.com
      IN A
      142.250.180.14
    • 216.58.204.74:443
      tls, https
      202 B
      40 B
      1
      1
    • 142.250.187.206:443
      tls, https
      858 B
      40 B
      1
      1
    • 142.250.180.14:443
      android.apis.google.com
      tls
      4.7kB
      8.4kB
      14
      23
    • 224.0.0.251:5353
      3.7kB
      11
    • 1.1.1.1:53
      semanticlocation-pa.googleapis.com
      dns
      80 B
      336 B
      1
      1

      DNS Request

      semanticlocation-pa.googleapis.com

      DNS Response

      142.250.180.10
      216.58.212.202
      142.250.178.10
      172.217.169.10
      142.250.200.42
      172.217.169.42
      216.58.212.234
      172.217.16.234
      142.250.179.234
      216.58.204.74
      216.58.213.10
      142.250.200.10
      216.58.201.106
      142.250.187.234
      142.250.187.202
      172.217.169.74

    • 1.1.1.1:53
      android.apis.google.com
      dns
      69 B
      109 B
      1
      1

      DNS Request

      android.apis.google.com

      DNS Response

      142.250.180.14

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.example.shineinterview/files/profileInstalled

      Filesize

      24B

      MD5

      5990398ab583b980180df7f4ed078945

      SHA1

      ad27d715f7b247e74c507ee89d16cd905945f4f1

      SHA256

      60c74a1510a37643a35a1c6b72493b4784cbda1b75bce1dcb33ce8d450d8628b

      SHA512

      2123f4a3b0c7a8ee2a023125214814fdbc941ddfb3bbd80f7326c91043add117032277949d1367bfd49c3c57303ab0a3490523a94f63ec592c923ef7a615dd0d

    • /data/data/com.example.shineinterview/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

      Filesize

      8B

      MD5

      8b7c777fcbea40166d10afa3d005e14a

      SHA1

      731e24c56dfbea02a9729dd0bf0edaa2b89087c1

      SHA256

      f0765ef7bd716b9f03c7f5cfeeea071c018ffe031a8236a68bb7cde8e171b270

      SHA512

      5ef0399cd7e8141fa7a29c6f92a73d98ab69271adfb15e709ac94f4367aff966dee0383ce94dcff78af0a5fa5c98ea871745aca0f83978885987bb45d3dbbb97

    • /data/misc/profiles/cur/0/com.example.shineinterview/primary.prof

      Filesize

      1KB

      MD5

      7c1eb4af3f79e9ffeb273fcb0ed8206f

      SHA1

      c7227d3c1602954cf9a0b322c67dae9e2c3d86bd

      SHA256

      37820ff872b0ac9a9a6d44cf6f8bb6ccef7345791ed5ad1e02ec45db1f8b4e9d

      SHA512

      943a5e08723e2c95723f4fde17c67cb1be21ea03e401cadb8576f451646071407e549b19ac607c8c809ab171db1c139a5f77f7c3494fb2917c26120eeb93543c

    • /data/misc/profiles/cur/0/com.example.shineinterview/primary.prof

      Filesize

      3KB

      MD5

      898cb82e137925449b87f15dcc13fb4b

      SHA1

      ad85478b0e4e0351268c5be76d10403239d0b171

      SHA256

      9c18294655ffa07214483be6d0308241ddd7b0140ec0a9545a2a846fcbc0600b

      SHA512

      83addea06008c8101d23ede3b03e6a5213e28ea517f006e09c4d138f6790053d461d75b2315e6c0a142fa4d8b59e404561031f0a9e484c99df96dd0bb56d8bc0

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.