Analysis

  • max time kernel
    142s
  • max time network
    155s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    21-12-2024 11:08

General

  • Target

    Pemerintah.apk

  • Size

    21.4MB

  • MD5

    8c91dc43f9d4198afb494388737d9a62

  • SHA1

    068e991544580f1bc3e2e44e65ca24b6975d6593

  • SHA256

    dd4bce9274cabcbcb2f3ea2b00867932399ad0de9b923896a70ac03076231efa

  • SHA512

    cd59bc2ecbbac7f75511f612744a93a321912a6bfe1be31e619fc78d14c6d0f3a4f37035b811dc867d4c1dcd662ae9fb323c9bac73d519bb5da06e137644e800

  • SSDEEP

    196608:V1BsqKuxF/a0HoJs1sgAXFNgI7a7YSu33Zu9yzhLrZ4CmJB4iyyVbUr8dCL03+YR:VRlS0Hoss3FNgIuc9zhL9L0FQGVR

Malware Config

Signatures

Processes

  • com.b551a.off
    1⤵
    • Checks if the Android device is rooted.
    • Makes use of the framework's Accessibility service
    • Queries information about running processes on the device
    • Reads the contacts stored on the device.
    • Reads the content of the SMS messages.
    • Makes use of the framework's foreground persistence service
    • Performs UI accessibility actions on behalf of the user
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Checks CPU information
    • Checks memory information
    PID:4320
  • com.b551a.off:remote
    1⤵
    • Makes use of the framework's foreground persistence service
    PID:4517

Network

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.b551a.off/app_crashrecord/1004

    Filesize

    220B

    MD5

    d37112b76d14a43840a64c1a00978925

    SHA1

    401b4ffd34ffdbd7f2d6925fca7656365b4a2bc0

    SHA256

    c70465f1f213acdad049eab9f939a4b0beaf5b69cd4fd0706f282a680086c56e

    SHA512

    88f1dadd42e56a507f80e812df3ace3cbc88eb655884a809092f6a07b2167be4b8df8d4affc0d0988f051ad147bf287201a21541b7ffebe08905880a57572e6b

  • /data/data/com.b551a.off/app_crashrecord/1004

    Filesize

    58B

    MD5

    0d210bfb2a0e1f1b4c082a6a0f79de07

    SHA1

    bb8ed9e364db79d1d9f2fcde3f15091893222faa

    SHA256

    988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

    SHA512

    536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

  • /data/data/com.b551a.off/cache/wp.jpeg

    Filesize

    143KB

    MD5

    5dc1983554a88c2a224ee046bb7314ec

    SHA1

    5b09273776014bf32fd8aa7bca9ce151d2c7d98f

    SHA256

    6a4d32e8ef673e70a8a4963124417be10eb09089f3aa049e1e3c7de515c69f21

    SHA512

    5ce30ef36c25d33f3416006c103608057a9cc88f2d88fe37de3bd895d68a005644d74aca0abd5bef02f2ed17709a38ae249b0dabeaa16d1c46c8a8c9d85c7e88

  • /data/data/com.b551a.off/databases/bugly_db_

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.b551a.off/databases/bugly_db_-journal

    Filesize

    512B

    MD5

    3626dff9c4497b564798bb6dadc26419

    SHA1

    5bfdf330a825f4a60812353d1ead9a0c9bce66a6

    SHA256

    5f30461385118fefed45a8942a980f9a648c8248ece22964ea1cd75e964eb550

    SHA512

    50d3ecf247ab7031558c74c95691da47ee09abb1a9682c5aab9d63944b18d19e5c773ffbcaebc00dfdc45e3339a0d85587a9ff2280405dc7e23a161178624221

  • /data/data/com.b551a.off/databases/bugly_db_-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.b551a.off/databases/bugly_db_-wal

    Filesize

    88KB

    MD5

    48ea189f4412797df86002a012fe7fd0

    SHA1

    4eff0e51fb0248a5017ff7791a9beb7a29fbf366

    SHA256

    0dc2057ea1bbe646bea9488ed89cc6d3cb99dbc7c3e683bb3e5ec3c15cdcab68

    SHA512

    bb96a42970e7f3468e1808b842af1a1caaa3ee086ec147bced66d5a887bbdeefb6f017b2e0fdbba9344348675c18ecc861526afb5590442ea92b5f08a9485bf9

  • /data/data/com.b551a.off/files/bugly_last_us_up_tm

    Filesize

    13B

    MD5

    2e8cecc464b413c1e1b59c981ffc62ba

    SHA1

    9e62c8c40e472c2e0515ab4164734d4ccdda8843

    SHA256

    9995747f194d8d4d036edb43d07b95d517f9d46fed8b59048149beb81dd92d14

    SHA512

    2c066158b5e25017aa3762232928925f54470defa6490c72e0f18c27fe760b468224f65ee5e7cbf8050833996c802ea8e881621814f28fc74e5308ccf69b8b28

  • /data/data/com.b551a.off/files/mmkv/mmkv.default

    Filesize

    4KB

    MD5

    620f0b67a91f7f74151bc5be745b7110

    SHA1

    1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d

    SHA256

    ad7facb2586fc6e966c004d7d1d16b024f5805ff7cb47c7a85dabd8b48892ca7

    SHA512

    2d23913d3759ef01704a86b4bee3ac8a29002313ecc98a7424425a78170f219577822fd77e4ae96313547696ad7d5949b58e12d5063ef2ee063b595740a3a12d

  • /data/data/com.b551a.off/files/profileInstalled

    Filesize

    24B

    MD5

    6092297fccce9ca5d18529f5b72f8700

    SHA1

    d01c19fbd4af0e914f93a58b398bbae15f16ce1d

    SHA256

    3d69b6a7d28036e5cf1de58c447b88d962f20b31cc923d6b44a451d7bd0b0c9f

    SHA512

    93821b78a25d7c03b4dcb33d245a781c00ed1553a93d64a82a708cdb0c2dbfb0c4d95c326cea2385b0adc639ece5e8ebc5a1a78034893e66efbf741c19802cd8

  • /data/data/com.b551a.off/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

    Filesize

    8B

    MD5

    02639254a3d851bd3cb308f052c55238

    SHA1

    a6cb55104e526728cfe4e35b6db521a1ac95a8ed

    SHA256

    57d23ef182349278392983eaa46c32498712bc3e707194af19fd1462b237bb0c

    SHA512

    ca8d9c857372fec63a1c1a9374f46aa802a065b92dec090fcfe4d6bcb5744d5ccdcb752e5aa81206c5ad9350056a7ded5d85bafd9cddc034283b938779d73196

  • /data/misc/profiles/cur/0/com.b551a.off/primary.prof

    Filesize

    1KB

    MD5

    a81bfd722e19875319e1048f2ffb532c

    SHA1

    b523ab69b9dd213ceb34cd2a490bb47da36ba034

    SHA256

    a859168e87efd619794c6c469dfca4bb6719e042696793a4b94673354db8af4e

    SHA512

    48ff5829510df2760b42acb3bf756dcd43629fbdd448a0001d963a9f9390492235ef581eb7480ae20df92d8770aad0c17b7a94a0c8bb6b1edaffb9e064883644

  • /data/misc/profiles/cur/0/com.b551a.off/primary.prof

    Filesize

    13KB

    MD5

    0017943974bc4b404a5184ff9929d9ba

    SHA1

    d2efdb818993e08f0baa239df711385431e21509

    SHA256

    7f4aad5bf41c6840b00e23a16d0bab9053194db3563c9cd7762c4d8bf7714dcd

    SHA512

    6567a01a411aa8086980d3198e7ef21328a85f7484d2d825de722ad3198334e350d6ba7b2be36c62ff7a6432b3f4f426a512584d99d8428ef31120f12d6d4150

  • /storage/emulated/0/Android/data/com.b551a.off/files/log_data.idx

    Filesize

    1KB

    MD5

    5eb5dbef65f3fa93c276daede170e191

    SHA1

    893341322807b408ad104cb385571bd415be21db

    SHA256

    b0c30653ad18f97e203179d6167645832497f9802e5d4f675b1cdfebe5e9c250

    SHA512

    a5e1959c1e23f7a2d3d61bb05434b329105c2eb5f9d74a0aac8905090aff92e4ed97b803ed49507f6ede5e19bf24237675ab95a4fc14b1bee89e0a947b811d2d

  • /storage/emulated/0/Android/data/com.b551a.off/files/log_data_000

    Filesize

    27KB

    MD5

    a4b5f25c2d01085c8ebd740be0b2a01e

    SHA1

    46414470e68decfc6d3469ce1238d0d7574cc14d

    SHA256

    09fbd4d068f5e8e2b1a755b69124c0fd7f52515deab5c0c71421170ce40d6913

    SHA512

    c3b03249f062975023f0de2338e0738a69958c2fc706c4192b0a4fdc4ee812e4e262f1953fa7e48a60154d61508b26ec996d11adff60fda3b6f463646f5c9f75