Analysis

  • max time kernel
    143s
  • max time network
    155s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    23-12-2024 01:27

General

  • Target

    dd4bce9274cabcbcb2f3ea2b00867932399ad0de9b923896a70ac03076231efa.apk

  • Size

    21.4MB

  • MD5

    8c91dc43f9d4198afb494388737d9a62

  • SHA1

    068e991544580f1bc3e2e44e65ca24b6975d6593

  • SHA256

    dd4bce9274cabcbcb2f3ea2b00867932399ad0de9b923896a70ac03076231efa

  • SHA512

    cd59bc2ecbbac7f75511f612744a93a321912a6bfe1be31e619fc78d14c6d0f3a4f37035b811dc867d4c1dcd662ae9fb323c9bac73d519bb5da06e137644e800

  • SSDEEP

    196608:V1BsqKuxF/a0HoJs1sgAXFNgI7a7YSu33Zu9yzhLrZ4CmJB4iyyVbUr8dCL03+YR:VRlS0Hoss3FNgIuc9zhL9L0FQGVR

Malware Config

Signatures

Processes

  • com.b551a.off
    1⤵
    • Checks if the Android device is rooted.
    • Makes use of the framework's Accessibility service
    • Queries information about running processes on the device
    • Reads the contacts stored on the device.
    • Reads the content of the SMS messages.
    • Makes use of the framework's foreground persistence service
    • Performs UI accessibility actions on behalf of the user
    • Queries information about active data network
    • Queries the mobile country code (MCC)
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    • Schedules tasks to execute at a specified time
    • Checks CPU information
    • Checks memory information
    PID:4323
  • com.b551a.off:remote
    1⤵
    • Makes use of the framework's foreground persistence service
    PID:4517

Network

MITRE ATT&CK Enterprise v15

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.b551a.off/app_crashrecord/1004

    Filesize

    220B

    MD5

    604b034c0850d52cf3946782b1bb4762

    SHA1

    3aeec136c2d6ff2dc8cc61480b094244ca911c28

    SHA256

    ebf77500fd59dfbcf56bd57fd9b351a62def1ebfa4c6cc6fddf03873de2ca6b2

    SHA512

    90876745d08bbdc1b411e30735748a10fe7deaec298c1155b433c2f9719d376f352a5201f2bc161d75390f956d37252a179304047850cfc431117ca12e904efa

  • /data/data/com.b551a.off/app_crashrecord/1004

    Filesize

    58B

    MD5

    0d210bfb2a0e1f1b4c082a6a0f79de07

    SHA1

    bb8ed9e364db79d1d9f2fcde3f15091893222faa

    SHA256

    988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

    SHA512

    536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

  • /data/data/com.b551a.off/cache/wp.jpeg

    Filesize

    143KB

    MD5

    5dc1983554a88c2a224ee046bb7314ec

    SHA1

    5b09273776014bf32fd8aa7bca9ce151d2c7d98f

    SHA256

    6a4d32e8ef673e70a8a4963124417be10eb09089f3aa049e1e3c7de515c69f21

    SHA512

    5ce30ef36c25d33f3416006c103608057a9cc88f2d88fe37de3bd895d68a005644d74aca0abd5bef02f2ed17709a38ae249b0dabeaa16d1c46c8a8c9d85c7e88

  • /data/data/com.b551a.off/databases/bugly_db_

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.b551a.off/databases/bugly_db_-journal

    Filesize

    512B

    MD5

    c3846613459bc39f970a9ed7cac2f74c

    SHA1

    7846d865a549b725b1aa08406f0df19dbc507230

    SHA256

    94bf06f9056e87b855f7c5325be0bc852ffa28ccb11c4b23f23bd44e29cc3feb

    SHA512

    f8d685ac96fcfd8b728e3751298f4af016a70092761b7912eacbc2790a31b0f36826d60d77f58b326da891067dca0fd0b0f6f94148e5b1442a60c1b04d4887e8

  • /data/data/com.b551a.off/databases/bugly_db_-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.b551a.off/databases/bugly_db_-wal

    Filesize

    88KB

    MD5

    9b2c8df9e1841aa88daa8a639973e3b3

    SHA1

    c92843fb920389f023aa6c338b62b876e7fd6d4d

    SHA256

    e6a5d9d34de5fc0cf1db0927ff3af2a75522da1ed8aab3462c30aa47042f026e

    SHA512

    46c47bd5d5bd9032a465c7fd0acdb75434866ccddb4f48f1aa703b81770af1ed5ab4a259ea7044648ffd354463231464980895d208f2f29b9c643f0bc4ef0e86

  • /data/data/com.b551a.off/files/bugly_last_us_up_tm

    Filesize

    13B

    MD5

    5e8a83f8b954cf0c66890e525a266221

    SHA1

    ae4cbbd5db4ec4e63c3a69395aab9bcffcd6ff27

    SHA256

    bfae79b83a39b57e3d89f51ad7d3fb5cdd78b03a64a54d42d53b29dfe03ef418

    SHA512

    5377db20afc3eed0112a51942fad26fc9f3e0f422dfaa34daa86c2237bc992dd147dcfcff278ca4b7ce136a0b26eefeae92195227454b80c5d9786f459e14495

  • /data/data/com.b551a.off/files/mmkv/mmkv.default

    Filesize

    4KB

    MD5

    620f0b67a91f7f74151bc5be745b7110

    SHA1

    1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d

    SHA256

    ad7facb2586fc6e966c004d7d1d16b024f5805ff7cb47c7a85dabd8b48892ca7

    SHA512

    2d23913d3759ef01704a86b4bee3ac8a29002313ecc98a7424425a78170f219577822fd77e4ae96313547696ad7d5949b58e12d5063ef2ee063b595740a3a12d

  • /data/data/com.b551a.off/files/profileInstalled

    Filesize

    24B

    MD5

    5712ae0fe9d5c01d217b031bf53b6dc6

    SHA1

    46afc2dbe9437196cee5350a90515befbb7a0d4e

    SHA256

    6e1292a59285a20a4b64daf9a78340279f205ffe4e5203e4fbfb3096528fdec4

    SHA512

    2e757acfda7d9220f1268e8685af7925e3a0b6d3d007b5328fd8beaf289c55f153dcebb7e260c3f8dca5503a767729ec27e757c9ce1e061b047793f9abce08e4

  • /data/data/com.b551a.off/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

    Filesize

    8B

    MD5

    ee2bbaf9aa3f5603cc4c8b654d7ede68

    SHA1

    2728bae13a6baa6c6c6e5d4894fef5297cf85688

    SHA256

    c72a1ca2541f19066896aef000c943c8fbfcb99d860d6ffde821a907711706bb

    SHA512

    0af266088ab54c39f1bc7b6f1cc82ce69b6b6157247e5b4ebdece6cdac491378860bb625b66d23e1ca4c324951a9f0ab0f32b148f9aed0121522e901a37f017f

  • /data/misc/profiles/cur/0/com.b551a.off/primary.prof

    Filesize

    1KB

    MD5

    a81bfd722e19875319e1048f2ffb532c

    SHA1

    b523ab69b9dd213ceb34cd2a490bb47da36ba034

    SHA256

    a859168e87efd619794c6c469dfca4bb6719e042696793a4b94673354db8af4e

    SHA512

    48ff5829510df2760b42acb3bf756dcd43629fbdd448a0001d963a9f9390492235ef581eb7480ae20df92d8770aad0c17b7a94a0c8bb6b1edaffb9e064883644

  • /data/misc/profiles/cur/0/com.b551a.off/primary.prof

    Filesize

    13KB

    MD5

    5e360c894704ba42d4edecb01fceae13

    SHA1

    3a5096ce23ee10db0a5bd5c08b44f999e5d53db5

    SHA256

    637d9135885b9760f9986c6ef4376372126b22e938c9deb773eb0a9463027734

    SHA512

    13bb08973cc74d5a6a61783a02426a1629fc386cf7e4c090db466e0723e212674ed302166dbdfd6055f3ca11a6247929cc95c65cd3392e47ac9f3b8a36551c82

  • /storage/emulated/0/Android/data/com.b551a.off/files/log_data.idx

    Filesize

    1KB

    MD5

    713d7b681f40f7a902156738c44c954f

    SHA1

    a222b967fb7cb04ef05a731a85f8b0f983e18a54

    SHA256

    4e0bae597ef38405dde815941a09a3b5cb121f9566cad0cd1e06cde18dcd0262

    SHA512

    d379f42130113c62553a7c7a28a4f2d8939a8b2995e66cb59a2ea4d3b942e9f4a966036f5c4515dd60882e2e8c4ab48ff87313bc6428d7fabc712234fa50f862

  • /storage/emulated/0/Android/data/com.b551a.off/files/log_data_000

    Filesize

    30KB

    MD5

    a03278761f0a7a9427dfbf56028394c5

    SHA1

    3aa13cd17fae43bd674f423d4e0306e1c1451dab

    SHA256

    e87124abebc60390cb127dc5dfac541b12a0b1f6afac14acf83b458d64cab98d

    SHA512

    87e4efc21922426b9f7be074eb9a1bef852429b685a41acd739054e1383f30bb3fcce2696bc2e1b604ba223b91c5687a82fbe9c8b3698cc6fd06d9c3ddf7182d