Resubmissions

Analysis

  • max time kernel
    149s
  • max time network
    155s
  • platform
    android-11_x64
  • resource
    android-x64-arm64-20240910-en
  • resource tags

    arch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240910-enlocale:en-usos:android-11-x64system
  • submitted
    21/02/2025, 05:59

General

  • Target

    origin.apk

  • Size

    11.3MB

  • MD5

    596d77b3f736d77e31b622180d4c701f

  • SHA1

    4c61f2273734cb7a080fe4f089440068da49d080

  • SHA256

    8ae7b0080fbdc2caf4bedabdc09579441ba25dd0b28750a31864581ca9c2a418

  • SHA512

    35bf77693479a8c9e2a32af1282b8fa3d05d6843ec5032f9751396f5db6e25c54f68214dfa2f5fee29910f869a0c80a0e05016d49a5534abf69816a7149d2cbe

  • SSDEEP

    196608:z0DintMBhkRaD35nD//fi9uLKpicmIOhgYWWmDzFk5kr+lMrLAY8zYccBoB1Vqmt:jtMBK8D35T/UppicaJiFgPMr0zP1V3t

Malware Config

Signatures

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 TTPs 1 IoCs

Processes

  • com.disprzs.hdfclife
    1⤵
    • Makes use of the framework's foreground persistence service
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    PID:4618
  • com.disprzs.hdfclife:my_process
    1⤵
      PID:4737

    Network

    MITRE ATT&CK Mobile v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.disprzs.hdfclife/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      f7b4ee0937bff5cae8bf84af6640d8b0

      SHA1

      e62ba52e2c776e472c2a9036d35eaf08801b5c75

      SHA256

      687ffba8132e218f2c19037ce93fe003039ceb1d740f793abe0d40c681b2d186

      SHA512

      bc8a0ed92e9f72204e9c681303c54e4633a10449a0e96d3602a411ac83379a59bd144a1374c92d04a818e9a77d31768ea7387b8798a0d96645113f33397eb115

    • /data/data/com.disprzs.hdfclife/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      7a453c0c79d1087cf9e0d610fce47324

      SHA1

      8267e664cc06f3a095c4e4378213117fb5a0d87a

      SHA256

      172c8e12bd11efa83d6ad46590b2936e44bf693bb3318c0b2fca65cc169270d0

      SHA512

      3d25cb997ca665ccbe9142146f89f4ebce2d08cc4c4dd1dc91b6f6653930749e1c64fbf440f3682fe25c42ccf226d9d5952f3d37c2cf90305533d4da8fcfcbac

    • /data/data/com.disprzs.hdfclife/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      a5b3afb885d8d859cbdae8bf323019c7

      SHA1

      befa332c317b049ed040aacd2b514e2fa2df29ed

      SHA256

      8afc9d81ec44c14b43d35116824c195b510209b193f60c226dd368136c25f200

      SHA512

      a6ed4ca04867b5eb6720175a45747b7160679b5535da0584c0ea4adfadaabadccd98881aaec2f7e138360b3fbd379af86439a37b7e9f9e9caec4606c9c97c3fc

    • /data/data/com.disprzs.hdfclife/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      cabe8a6859ff69b2ec08dcd252a584f7

      SHA1

      26ece5b04d74c82405f8a03bd39bdaa344101d78

      SHA256

      393375acf5c0956695d6a8a9762b8e22f4b3802f85837788496b36430428fb26

      SHA512

      1929a9b4bda9b604d2cf976e9c99c6a4b846454921f9c4226957c61e73d0badf19bd5ef4ccb07dbf527fa781beee4d00c78124dcc57c08ee0ec30dac14b987fc

    • /data/data/com.disprzs.hdfclife/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      69c941a47739350865e6e413019a953f

      SHA1

      993e27987031de9f50c2967516706a879825806f

      SHA256

      1990e82d4e9b9a8b843872e45c3e255520e0767c7918ae1501102e866221cfa3

      SHA512

      4ff0a7473c762f08dacdc829dfa76c97e6df6a3f5dc55069e9775c17162722bfa2aa36bc5678f29cc6d40a9928fc77dee5230e98e53d4bcd3832c471347656e8

    • /data/data/com.disprzs.hdfclife/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      562fd05103505e4580f7b4c44837a92a

      SHA1

      e94efc0b798d1c85394f9adc318f213133e12938

      SHA256

      1b8ed7563bfa0816821ed366af4a22a361201ad9a5d8f27315f2f186eced6dc7

      SHA512

      9f6657f4c9bf717cdd30dfa7980f90f27ba3b6b796d2ff8eea264a159c54efff7f138c5a615e7312d05568b5365276dab85fe9bfa72efc4611ce8ef12c56fab1

    • /data/data/com.disprzs.hdfclife/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      3bc8aa78c6cc04a8d87b7e8f1a7f1157

      SHA1

      82be070eb846102f67e9e7bd8ad957ac7534189c

      SHA256

      0fc3aa6bf6e09b94ad7005eabd7f2da89151bdd70ed3bf147d872b9183466182

      SHA512

      29b156c9d6fca3d40ed2f96d074bad36b22c91e7ca56cdc62816599152a12dce0edaa61c7fc490e8aeecbb1d36123174a1cda9173eb46bad6e8cc5b9c21e31a1

    • /data/data/com.disprzs.hdfclife/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      16aa4c333c3c080501ab60198bb416e0

      SHA1

      e8c398eca60199a3b05735767ad73b6ce21b5b1c

      SHA256

      c29294dbdda0434b71f5152cf2d016fda9e3a29149bcdae91bda7b5ae06d6ccc

      SHA512

      2e0fe2dadbf795280f826696e7a92cd9a448f096e52fed2a36ca9b3017fdf37d59d22a39dcac4d33ade333f99e91ccba6bd39f2ac059b5747c7b54f2fff68126

    • /data/data/com.disprzs.hdfclife/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      42ca95575ea40bf7dca3c154a6d006c4

      SHA1

      2f277d835d0a8d386d99a0ead295ef33f9517ed6

      SHA256

      58e2712bc22aa2496a052edbc6e126a11d0a64c1bd528c6979834972c447fe23

      SHA512

      e63900ae9f1d5809e1f5b779db9811d30e44ff32633f636c3c7c6b8eed139779cbff7579962eb6f143aae094de9df49f1945a6a8dde3142a86935537063b3151

    • /data/data/com.disprzs.hdfclife/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      5fc99bd491ee7130df76a452eea1324e

      SHA1

      d6112ba9e7be7a0bdd89c1b49c3540e12039137d

      SHA256

      b645c73de19f6aca9e85dcda40727ce81b7caa751948887e2c83e562bbe07037

      SHA512

      02113db907b0d76e1ed10edebb15426fda650c38c8cebef2f2ffa4998a3543a13fbc8bb7be94920442a35d0bb7c9b2f3b93a72e0ee19c5216fc97b1a37382476

    • /data/data/com.disprzs.hdfclife/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      6a71158ea86041c69134c685c96fb362

      SHA1

      9f25b38222bb5d527b9df93e17fdd054dd8e0455

      SHA256

      ff39e9180bd46c1b49aa414a63036a99f19c9ebce8c3c93469b68d1f9713d17e

      SHA512

      c40ab5c9e95cd81c8f796bf2a7428d44f0d69415fa21c4e5aff33e403ccfee1aadda01e49963b6903fe9d7da7cdfb2b1976eb3ae2be1bd5cedd6c1ec5d630c52

    • /data/data/com.disprzs.hdfclife/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      d7ea7e94d9518809bae4b4a9e101940a

      SHA1

      31d5e08f7171b4668b3db82309fc926b4c35f1fc

      SHA256

      032cd998987abff3da0f5cb9c5ff503ca495fe115b0249e7691d19edb6bb91a1

      SHA512

      e4cb2e59a2478cc28383845db4a8cb82e86b727d292213d4a63c1e217f278e3e5219b975bca6a98cdeed23a552e7d81be540eab4db9f42c667a988519d2f19a3

    • /data/data/com.disprzs.hdfclife/files/PersistedInstallation2901325496243798757tmp

      Filesize

      569B

      MD5

      dfc32415c92b3f735a9b2a1d526856c4

      SHA1

      62b7cc2b64c2e62614c7dffeb7a798979e74f3fb

      SHA256

      2cb921658dec9a5a7240e7bf3905e254597910e29cfcd619583ebeaf895fd1d2

      SHA512

      862e0d8b1a66cdc347eb61f4046e8cf5f53782a88ed41e39b7158739fb12bada65269ce185401864668bef4350af083c951fba202a210a484c999a814b38b46c

    • /data/data/com.disprzs.hdfclife/files/PersistedInstallation5296152188565963343tmp

      Filesize

      90B

      MD5

      a1e0c3ad7ac203bc2cc35637a856bef6

      SHA1

      d2db22e84d443782f553165aa7ab319135a6049b

      SHA256

      af3fa9a99d4b86a543220eda97970a4d435c7080b6dde5c7ce1c2ebcbbf181cc

      SHA512

      7b87f82be62f4588c10255b41e2626a7cf9d70b14921c50fb0e0d4a6c5b98aad570b08bbf68448c6ce2811c6650eb980568cffe33ff829c97ed87eaaaabbfa84

    • /data/data/com.disprzs.hdfclife/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

      Filesize

      8B

      MD5

      8145d4f9d06655a896f09fde24838f96

      SHA1

      a93e869bc24b85644d121f44e791ffcc148d5a5c

      SHA256

      49d7392422d5dd9875861667553bc2d714735ef8aa371e73e194d3ed183b765b

      SHA512

      f2ca76f3064805d78ef0a4596892547defff844ad3ab8b37b7e8af4c576728b9de416c85f1134deb385ffe9cc7a468984945d8be405a4b9d62cbe018641a7287

    • /data/data/com.disprzs.hdfclife/no_backup/androidx.work.workdb

      Filesize

      4KB

      MD5

      7e858c4054eb00fcddc653a04e5cd1c6

      SHA1

      2e056bf31a8d78df136f02a62afeeca77f4faccf

      SHA256

      9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

      SHA512

      d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

    • /data/data/com.disprzs.hdfclife/no_backup/androidx.work.workdb-journal

      Filesize

      512B

      MD5

      e1a7bb4fc6bb6533866e4c638027570a

      SHA1

      1bb50cbae6be47bea6cdd9eec5c0f367eca68700

      SHA256

      a97a59f7a819aba52a855dff07342ac3b81eb948a51497df19691b23b1d3e15b

      SHA512

      a1d49bad084c00f7c42d55ab5557ed1e662f6fb4bd7355b77709ba0888b5e4a494e7ce15e81d9d4b57764f1e44cc59b76ec8c7a55428db86f35f520345e86d4f

    • /data/data/com.disprzs.hdfclife/no_backup/androidx.work.workdb-shm

      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    • /data/data/com.disprzs.hdfclife/no_backup/androidx.work.workdb-wal

      Filesize

      16KB

      MD5

      ff6e1cf76b192605627212c32f349c52

      SHA1

      be05b71adef15bc471ea185adcf4c165360da6ad

      SHA256

      a24e6f80add883f59019cca5e2c9f568128f1c4cac9ceef79f18009f32ce6f23

      SHA512

      d9ae355f7483bb5410d01b74b85e085b675512c13e20ddf6e6771e23dafd545c0871891fcd6e7aa72bea37633d3d0a6f5cdcb35bdbca803e6e6ab7e30411e7f6

    • /data/data/com.disprzs.hdfclife/no_backup/androidx.work.workdb-wal

      Filesize

      108KB

      MD5

      e2c2bc612eaf69e33e555c2b013bd357

      SHA1

      cf4e9eb30e4ba6a13ab2d91f445ae81100bb7285

      SHA256

      360a0f27dd78e8a81ddaf783e1bd3230c2e4a59f9c25be4ff50975a04f9c7d32

      SHA512

      755b252eeea48de5a9109bcc70c2ec5788909b27dd350ef2e343bce199f60db1cd2fe10fea7ed7d67e70ef037b0db3f69f8dec1bd6520dbba5437df192910328

    • /data/misc/profiles/cur/0/com.disprzs.hdfclife/primary.prof

      Filesize

      2KB

      MD5

      25d28d40a79e59e9c62d34f20fe6846c

      SHA1

      a0cbf4dd440a0e0b43c70be3dbea02f38ee3bcaf

      SHA256

      d0d2f4966488f6452931e7c209eded824879e20e118450120ff3d66b28f33d19

      SHA512

      ab19c08213489e817fe3ed0dede8cc9436403a30a45381bcad0525018dfaef39cf96354bb0436f44d2e53eb0e4dbc2bac567562c099e751bf069c78ebba74299

    • /data/misc/profiles/cur/0/com.disprzs.hdfclife/primary.prof

      Filesize

      9KB

      MD5

      357397f2cd0d7d1648ed2193cd80c7ce

      SHA1

      18d74b60f0b45a2712e5c96e09d5b6de087e279e

      SHA256

      d3248f97a4e1b1a04ca0cf277ba3d78f15bf2a4e5053af1a4bb7c4d2183c8656

      SHA512

      2bac9de293cc5ae6b019ef622e84d7f77ee89970f60d1d71648bd9a768809de72b7ea15ec0b5a3a930b29a001f9afc8def1e8fc093321774ce6290c85426632a