Analysis

  • max time kernel
    299s
  • max time network
    312s
  • platform
    android_x64
  • resource
    android-x64-20240624-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
  • submitted
    21/02/2025, 06:45

General

  • Target

    origin.apk

  • Size

    11.3MB

  • MD5

    596d77b3f736d77e31b622180d4c701f

  • SHA1

    4c61f2273734cb7a080fe4f089440068da49d080

  • SHA256

    8ae7b0080fbdc2caf4bedabdc09579441ba25dd0b28750a31864581ca9c2a418

  • SHA512

    35bf77693479a8c9e2a32af1282b8fa3d05d6843ec5032f9751396f5db6e25c54f68214dfa2f5fee29910f869a0c80a0e05016d49a5534abf69816a7149d2cbe

  • SSDEEP

    196608:z0DintMBhkRaD35nD//fi9uLKpicmIOhgYWWmDzFk5kr+lMrLAY8zYccBoB1Vqmt:jtMBK8D35T/UppicaJiFgPMr0zP1V3t

Malware Config

Signatures

  • Makes use of the framework's foreground persistence service 1 TTPs 1 IoCs

    Application may abuse the framework's foreground service to continue running in the foreground.

  • Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

Processes

  • com.disprzs.hdfclife
    1⤵
    • Makes use of the framework's foreground persistence service
    • Registers a broadcast receiver at runtime (usually for listening for system events)
    PID:4953
  • com.disprzs.hdfclife:my_process
    1⤵
      PID:5114

    Network

    MITRE ATT&CK Mobile v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.disprzs.hdfclife/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      3975ea1990b3a1db81aff3a5499cef7c

      SHA1

      bc9c88650fb332eb5e4cd895cd06ae176ee4fad4

      SHA256

      71536d04ba29c0d382788e113afa326bb1e48c3113cb76a5ee3a04d577e5eb72

      SHA512

      d15bf5abc4ed1bef74e8de96810ec6157605e75b952cbfcaa4eb975b137dde6dc7693a465f10d8dd4cccd2aabfba33cff17268b629cc5e1e317d611a1390f603

    • /data/data/com.disprzs.hdfclife/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      92bb85641c6272727f2e00d6a069b40a

      SHA1

      18940c0a7572b55f15008d5df6f6e90013775290

      SHA256

      d8edbff2422b7ecdfc8d9719728ff2c1475a766577ae7f0f5d9b7430ab73007a

      SHA512

      36596c437a2f36e61be25016780d34d0e15760004e2236c1cac92065a24e075f6195d9a470b26cac25174a28d727abdfe8fd355a031d654384df8f0b92d77aba

    • /data/data/com.disprzs.hdfclife/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      4c5338347969ec50d9215f37ed31388a

      SHA1

      fa9f6343c873fc35d3c1092b2c9241954d43a868

      SHA256

      9448eac88ccba35d5d361df6b465036c76c9a474fc07b3a628b5d6c2e260cd55

      SHA512

      719e7f110c97cea53935c95d3e48f57dca3fef4c45222a0c63691afb5bfeb70a16be948e38baadb2f0a8be93ffc1d62dc4df3280fa0d85482e9aeb5c2dde2654

    • /data/data/com.disprzs.hdfclife/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      2ad239b1f180a247ddabf2247046c441

      SHA1

      a3cbfb503698bc1925a3bf65315313dc39e1350a

      SHA256

      7d26e3c24db6e5f3af75cfc7e3a849885fb9968fa85a75e1a270a2efef01070a

      SHA512

      6172069dfac45643ef72e55126864ab5170b1dbe9eb467a1f38e758b1ed0327d10257e441495629b4ee17719759c2c71089d93e733805addca1cf01858163da3

    • /data/data/com.disprzs.hdfclife/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      96397d456cdabd74d321eed8930a07c5

      SHA1

      335278c2a66bee0f6ca3c0f44158884f76868b06

      SHA256

      2209dfc9946a00cbf0728da08772b5f8d707cb54dfb65360b8b2644d169f8067

      SHA512

      2fda1f6e650bfaabb754b9bc1c822b195bf38874a5e6408b2430fd35bb7023e5b7bf19bbcd07fdeb05bf399bca6c8bed58c3854466f2d76278e1bd48dc1c5cb6

    • /data/data/com.disprzs.hdfclife/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      2830a02bb944fc679236ff94b5993a9d

      SHA1

      5e6ad04fe9193b1d8be292434df84c1bb3867414

      SHA256

      d67d829ebb829c973ad24f8de1db2423e46e0b05fcd9fbf8fb1a8edf960ac0e8

      SHA512

      4f6d4c5f5b68d8991208c65fa74b460007c2036b060b1ba276a00296945238bef88947e424c612bcfa1873cb63c1384623d9295520fc2459a299b9e052daf94f

    • /data/data/com.disprzs.hdfclife/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      5a6e5540ada968a33aa32e40bf68d695

      SHA1

      afc7a60a8a66ccbffc4a798d405d37aa6b658b0a

      SHA256

      fe61e5c7807f9893c2f905438928ece4daa558774da21e5a332276221eae2aec

      SHA512

      e33aabe57a9f7269fece258042ec847aabe4e5ebbfde00fc8395468e8a64403735c436762f9f9fe714de30de55b60cc61a68f8b9051e19f772357e9e731f6f3d

    • /data/data/com.disprzs.hdfclife/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      17c569b8a01c9da7b3603b0901783821

      SHA1

      7866c0e6ceb773c27263c54ab17727214fc52018

      SHA256

      ee993ee291b3c94de03e72aebcc0ceb5ea729dab79a10ef21ac0a30a625d0400

      SHA512

      48cb19a5a8a1ca0a7c264628e9fd2d015f72e09410adb533ba626fae5def5038d1dca464348e7ed6686560db294e2177c4de22b1c489a7c292f6682f2d2ffc61

    • /data/data/com.disprzs.hdfclife/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      d82d75bec58d423ef2687e6f87e6eb8c

      SHA1

      004826141d1390f3a2ec2565e6a7e94b6a07c1c4

      SHA256

      e2b1960e10871b8fbdfc758f8cee2536dfe48d2ed6485cf8244cb2e5b35bd967

      SHA512

      9564d064ca059094f0d88320af596c21ab1264d654aab09fd3057915be1af36f018dfe41cde684eb6b025e3e310115c2ee8d82b2b3373d7ad52e5ad1967ed2a5

    • /data/data/com.disprzs.hdfclife/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      20ed2d14396e4c624fade64a3165de6a

      SHA1

      3296a2e97b2913203cb35b660bb8cf9cea240c63

      SHA256

      7918ed051f44f2fd75c813af0f1ed70368b2c35c1cf16372597a6dd0b6a08af8

      SHA512

      d27f5fc70aef5f62dc16e4810ca4e608140d7608c693cfbfd9234875aed2cdd37673efd06cacb4b05f06ea64c10acc232a99a46d1b213e6e386a623ed5691926

    • /data/data/com.disprzs.hdfclife/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      8d4468959aa861638e5f9203bef7f24b

      SHA1

      0a0f2906aafb973be9ba7eca4e660d957b08c76a

      SHA256

      e0bda753f640fd9fcb359e42f2baea5d81944490b009fe6b6ae96f2139135460

      SHA512

      492a6aaf7a8dc66b2191f67788e2c84c0bcf345dacd004aac13cd5b2fd2e5ca092aee4a1e056188107375fa149866f9b22d8c28da1c01c09c927e22ad1f043cc

    • /data/data/com.disprzs.hdfclife/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      d350e356b59494873d06c8ed9627f021

      SHA1

      4be33e7be0ef562748a01d1ff7a31400b9c2d119

      SHA256

      022b72fc7ba2e4a9dd0bec4b907a86bff8aed0eb0ec96adc4ced7a99ca9de5f8

      SHA512

      c7572c1587c4a1008baf76195b7e9c243cbea9b6f3697c80ddd1a256980845ad7278ca588ca1d949bb50b5f19e276f1297158c83f34301d52e553209061f8721

    • /data/data/com.disprzs.hdfclife/files/PersistedInstallation1369927903387902907tmp

      Filesize

      90B

      MD5

      820a7416921b2baea9e55151aab49c11

      SHA1

      fad81d9b49ef2eac39c46ad550ed0f934447d5c0

      SHA256

      128546619925da39afe089b7d467b714b595dfd6f8ed0dca4896ed302c20704f

      SHA512

      f293e84cdd0d99bdb86ec821aa8c5dba0cab94a2085d25c91aa2d462b836b3b4db524d8d07efd25b0c5af844049664bceb376a0b8a4e65afff898e01a7026bd0

    • /data/data/com.disprzs.hdfclife/files/PersistedInstallation7716550122519678729tmp

      Filesize

      568B

      MD5

      d6b8809010e10309b6125d3de12a8e91

      SHA1

      86d3b5ec1dd40c6c6ba7b4dad72267414e24895f

      SHA256

      7406e4925b80a01a6f106874b1234488e2e713cb22a448b07ab7b736e20e5a3d

      SHA512

      3bf9b5d25f29e7d0e6118fa97f03ca54d95edc465da78aaa395683d88373cf767090667eeaa53d06df9c1a768cf523bef3cde1b2a3d7b2e8d29d1aa3ece75071

    • /data/data/com.disprzs.hdfclife/files/profileInstalled

      Filesize

      24B

      MD5

      eb9df3145bf0e4883f14067ee541bb2b

      SHA1

      23d9c65e57ec76e839b9a2dc21ee8e972e54f44b

      SHA256

      d91dad08cacabbf6da581adfe5f9f8984fc19e2c5bdf81781c7460695d12818a

      SHA512

      43b3ded436b45a90f5bc5dd65379bee473ad7321b358fed9eb70554ea21e8e12a327d009aa53073a77903a88d074cc67475dbc4df02d8999514a3643557a9262

    • /data/data/com.disprzs.hdfclife/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

      Filesize

      8B

      MD5

      a83404ccc69c680a65707d86e726eff9

      SHA1

      54e68f98b6b14b61e2ea82b057d55cb558d603f2

      SHA256

      08f53d4b858ec254b81d85827a9a5a4fb255e3dd5b4f98fdcbe32e5fdb3d3142

      SHA512

      a96b1005749afbcca9eeb8973d2c1bb84c9d23ed9667354ae0c2cec119c70d9395688ed1549a7f82488aec81731682d733ac5fd9e84411761e020c8a61f5ae09

    • /data/data/com.disprzs.hdfclife/no_backup/androidx.work.workdb

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.disprzs.hdfclife/no_backup/androidx.work.workdb-journal

      Filesize

      512B

      MD5

      c86e6dce779fe29a79d606338fc77c62

      SHA1

      a82701f34311f46de8a869b10e7c155f808098cb

      SHA256

      fcfac2025226c0cd682a794710c19a473643b2f527c155644917c83fcb5e80b7

      SHA512

      696abf06c67ed6f4d3ea83ffa278d99ca26e1a6f62af42da9019311931f8db48d34e905dae068d8387c55cad68b3b47e581f8d4fd2146427b1629acdde0de0cd

    • /data/data/com.disprzs.hdfclife/no_backup/androidx.work.workdb-shm

      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    • /data/data/com.disprzs.hdfclife/no_backup/androidx.work.workdb-wal

      Filesize

      16KB

      MD5

      72392550326d8a3cf29894244ec8190f

      SHA1

      b76c8403d4a275535ae082b2d911e3db96d39e01

      SHA256

      3b23ec7e9ee24ab89e219327157b1bcc6e47667d9b00279689c0a8f8c3a9e7a1

      SHA512

      4db4242c8d1ab9d1983bf79d9c5863d41c3c8a391f805110c53b006bdfe413373ceda47f1c8c21c906c02782cc94e2cd46944cdd44f0c29bdc76838c3bdf5041

    • /data/data/com.disprzs.hdfclife/no_backup/androidx.work.workdb-wal

      Filesize

      108KB

      MD5

      007c67bc4e301868c86840629c007d26

      SHA1

      5d92d588a569dcac7587e946a6fcbbdfec79b1e3

      SHA256

      41100ab41516b8020654ee041c5e93ccda9ecd8b90c5d4d9bac152e491178752

      SHA512

      dd302979d95058cf29ff253ced4dd60fe8d014a4f574e90aecf2f52cfac900477279c30d3534e10ca692d305c6a51d47f2ff76925e2af1fe6bfe9b02baa415c9

    • /data/misc/profiles/cur/0/com.disprzs.hdfclife/primary.prof

      Filesize

      2KB

      MD5

      25d28d40a79e59e9c62d34f20fe6846c

      SHA1

      a0cbf4dd440a0e0b43c70be3dbea02f38ee3bcaf

      SHA256

      d0d2f4966488f6452931e7c209eded824879e20e118450120ff3d66b28f33d19

      SHA512

      ab19c08213489e817fe3ed0dede8cc9436403a30a45381bcad0525018dfaef39cf96354bb0436f44d2e53eb0e4dbc2bac567562c099e751bf069c78ebba74299

    • /data/misc/profiles/cur/0/com.disprzs.hdfclife/primary.prof

      Filesize

      9KB

      MD5

      02d9fc2dc961d511a5d278c0366ae827

      SHA1

      c1e93460cec8ad2ff3aa070de3613685a780e45a

      SHA256

      5376b41d4b7cde25a1f1f832ee5831483cf711bad9342c655ec59cf3092063d1

      SHA512

      019aaa7f6849261e283b441b4a0926481015fdeaa8d6d6cb81018243cf9ec928f934eb93d57072aeb31c4e835441f9e47b036a8bb23e8be6767cf528a710d322