Analysis
-
max time kernel
1s -
max time network
152s -
platform
android-10_x64 -
resource
android-x64-20240910-en -
resource tags
arch:x64arch:x86image:android-x64-20240910-enlocale:en-usos:android-10-x64system -
submitted
28/03/2025, 19:20 UTC
Behavioral task
behavioral1
Sample
ready.apk
Resource
android-x64-20240910-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
ready.apk
Resource
android-x64-arm64-20240910-en
6 signatures
150 seconds
Behavioral task
behavioral3
Sample
ready.apk
Resource
android-33-x64-arm64-20240910-en
6 signatures
150 seconds
Behavioral task
behavioral4
Sample
ready.apk
Resource
android-x86-arm-20240910-en
7 signatures
150 seconds
General
-
Target
ready.apk
-
Size
4.4MB
-
MD5
b2dfed5dcb6dd9d35dae33e2abd8dd3e
-
SHA1
6d6cf1497a24f565cda402b6ff1aa68f3ecefbf9
-
SHA256
fa1039e2f95d9f7931a092a3d0d56ddda607565ee0b95fb98cf039f8f2a622b4
-
SHA512
5be45e39bc3f36362b7f591932968e2be4620b82c100d16eb7f8da3dd69342989110a67c4dc3afa780361ebbf0c2013671bc382bcd3d68e1f7ee023c4b83c523
-
SSDEEP
98304:8yDoHMkXGqH6rGF3VQ98t2mzDzBBTm0tgMYj:8eoskgeQKBzvt2
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 TTPs
Network
-
Remote address:1.1.1.1:53Requestandroid.apis.google.comIN AResponseandroid.apis.google.comIN CNAMEclients.l.google.comclients.l.google.comIN A142.250.200.46
-
Remote address:1.1.1.1:53Requestsemanticlocation-pa.googleapis.comIN AResponsesemanticlocation-pa.googleapis.comIN A172.217.169.42semanticlocation-pa.googleapis.comIN A142.250.178.10semanticlocation-pa.googleapis.comIN A142.250.179.234semanticlocation-pa.googleapis.comIN A142.250.187.202semanticlocation-pa.googleapis.comIN A172.217.16.234semanticlocation-pa.googleapis.comIN A216.58.212.202semanticlocation-pa.googleapis.comIN A142.250.187.234semanticlocation-pa.googleapis.comIN A216.58.201.106semanticlocation-pa.googleapis.comIN A142.250.200.42semanticlocation-pa.googleapis.comIN A216.58.213.10semanticlocation-pa.googleapis.comIN A142.250.180.10semanticlocation-pa.googleapis.comIN A172.217.169.74semanticlocation-pa.googleapis.comIN A142.250.200.10semanticlocation-pa.googleapis.comIN A216.58.204.74
-
Remote address:1.1.1.1:53Requestwww.google.comIN AResponsewww.google.comIN A216.58.204.68
-
Remote address:1.1.1.1:53Requestg.tenor.comIN AResponseg.tenor.comIN CNAMEtenor.googleapis.comtenor.googleapis.comIN A142.250.178.10tenor.googleapis.comIN A216.58.201.106tenor.googleapis.comIN A216.58.204.74tenor.googleapis.comIN A216.58.212.202tenor.googleapis.comIN A172.217.169.42tenor.googleapis.comIN A142.250.179.234tenor.googleapis.comIN A142.250.180.10tenor.googleapis.comIN A142.250.187.202tenor.googleapis.comIN A142.250.187.234tenor.googleapis.comIN A142.250.200.10tenor.googleapis.comIN A142.250.200.42tenor.googleapis.comIN A172.217.16.234
-
Remote address:1.1.1.1:53Requestquality-storm.gl.at.ply.ggIN AResponsequality-storm.gl.at.ply.ggIN A147.185.221.27
-
914 B 40 B 1 1
-
914 B 40 B 1 1
-
914 B 40 B 1 1
-
914 B 40 B 1 1
-
2.1kB 6.0kB 12 12
-
520 B 10
-
468 B 9
-
364 B 7
-
520 B 10
-
1.8kB 5.9kB 12 11
-
10.7kB 12.3kB 40 35
-
7.6kB 6.8kB 22 23
-
1.8kB 8.0kB 13 14
-
3.3kB 59.5kB 63 53
-
3.9kB 13
-
69 B 109 B 1 1
DNS Request
android.apis.google.com
DNS Response
142.250.200.46
-
80 B 304 B 1 1
DNS Request
semanticlocation-pa.googleapis.com
DNS Response
172.217.169.42142.250.178.10142.250.179.234142.250.187.202172.217.16.234216.58.212.202142.250.187.234216.58.201.106142.250.200.42216.58.213.10142.250.180.10172.217.169.74142.250.200.10216.58.204.74
-
60 B 76 B 1 1
DNS Request
www.google.com
DNS Response
216.58.204.68
-
1.5kB 49 B 2 1
-
57 B 280 B 1 1
DNS Request
g.tenor.com
DNS Response
142.250.178.10216.58.201.106216.58.204.74216.58.212.202172.217.169.42142.250.179.234142.250.180.10142.250.187.202142.250.187.234142.250.200.10142.250.200.42172.217.16.234
-
72 B 88 B 1 1
DNS Request
quality-storm.gl.at.ply.gg
DNS Response
147.185.221.27