f2aebe1c3f79fda6111b605716b3fb5164fbf37ab55fd5eca9f7e4312051ff3b

General

Target
Quizlet_AI-powered_Flashcards_v10_30_B2601749_(Premium)_(Arm64-v8a).apk
Size 30.3MB
Sample260810-t5fkbsdk5y
SHA256 f2aebe1c3f79fda6111b605716b3fb5164fbf37ab55fd5eca9f7e4312051ff3b
MD5 348eb1b235461dc75c1889ff879f135d
SHA1 b3174a5ed945b20b0c01a80ba03836cfb344ba61
SHA512 0da0c1f0def283da8ff189572e748e35496c34160c5e61b4d6a059c81c638f772ba9f4ec3bccd7b4c1f266f87d4b5b710bccdf14e070a1a5c9ac840c9e0c5aeb
SSDEEP 393216:6Hom6OmYnEdZyIiAIbUYbCJxa9uoVvoOpgVWRSDm:som6O0dZyIiAIbrCJkgCvoObRSDm
TLSH
T12B679D17EB52DC32C5BE833658B743027732AE55A7434B972004F5B8BCB36D1BA862D9
MD5 SHA1 SHA512 SSDEEP TLSH

Score

8^/10

defense_evasion discovery

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 8 IoCs

defense_evasion

System Information Discovery

T1426

ioc	Process
/system/sd/xbin/su	auction.slibuyapp.slibuy
/system/xbin/su	auction.slibuyapp.slibuy
/data/local/su	auction.slibuyapp.slibuy
/data/local/bin/su	auction.slibuyapp.slibuy
/data/local/xbin/su	auction.slibuyapp.slibuy
/sbin/su	auction.slibuyapp.slibuy
/system/bin/su	auction.slibuyapp.slibuy
/system/bin/failsafe/su	auction.slibuyapp.slibuy

Checks Android system properties for emulator presence. 1 TTPs 1 IoCs

defense_evasion

System Checks

T1633.001

description	ioc	Process
Accessed system property	key: ro.product.model	auction.slibuyapp.slibuy

Queries information about active data network 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	auction.slibuyapp.slibuy

Checks memory information 2 TTPs 1 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	auction.slibuyapp.slibuy

auction.slibuyapp.slibuy
1⤵
- Checks if the Android device is rooted.
- Checks Android system properties for emulator presence.
- Queries information about active data network
- Checks memory information
PID:3210

auction.slibuyapp.slibuy:remote
1⤵
PID:3237

Network

MITRE ATT&CK Mobile v16

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

2

T1633

System Checks

2

T1633.001

Credential Access

Discovery

System Information Discovery

2

T1426

System Network Connections Discovery

1

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

base.3210.tmp

Path /data/data/auction.slibuyapp.slibuy/cache/oat_primary/x86_64/base.3210.tmp
Size 16KB
SHA256 aee516d879308e8817534b4e07b0ac8d7141e2ed58dbaa40718fc394837fe2c0
MD5 614e717872ad05adf7eae0f6c1c1bdd3
SHA1 1405b64972b658358a7baa9f26e08fc7714a8826
SHA512 9bab077f843836e1c9f6febba5aa44de20a1d0c5ff4d5f8e70062f7300b4d5c4927c6b578811989fd66eb00cc0621288cd9b3b12e2df27754cb30b09162bcf86
SSDEEP 192:UMFXc36pGMaAIqsRe3O3vrNVjhFBfC6oCyJRZi8dk1I7vAtYVqJ:NFK6pGMaZqYe+3vrpFWbYn1aot3
TLSH
T199725B3FE3601827D1A67FF25D970D75D27BA18673A75615B8A4033CB803B18EB20B28
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libtCNnw.so

Path /data/data/auction.slibuyapp.slibuy/databases/libtCNnw.so
Size 1.3MB
SHA256 8defc5b023dcd47278af6bea1608e2af319353ce9db9f06948a1afcaaf2bd163
MD5 3aff3567ce742fdeb239a35fd80a004b
SHA1 09d3ed4dddad4d1fb92c4216ca29adc67233a413
SHA512 294c6bcdafbef73fa22e8ab6e0a41c8307d10f7b45904ecfd00087c34e28bb5cec73c150e0140b9c88f529b9662122d6ec82d88fcf748ec96f77f7ebd8768760
SSDEEP 24576:PzUl8ZmBkC6cwGD788YY2TioLsOPKDlg4rz4Zrcblz9:PzUnOC6mYYeiopPK5gYsZrcbt9
TLSH
T1E5553379CF551EF2D2B900702ADCE08C4A6E4F127DBBC5E873928BF6041154AB5A73DA
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libtCNnw.so

Path /data/data/auction.slibuyapp.slibuy/databases/libtCNnw.so
Size 1.3MB
SHA256 42bd02a7982ab09d4f5091693b245e03408e7496cae008047bc77b249febfabf
MD5 ab4ba427680a9551bdd3cc22d362f20d
SHA1 b2ec704c6ca47db307ee0b8b4e9f974c2b621d20
SHA512 c9b78539580939b7770c468b327b5592f547d46ce5e61f7808a518c21cd6f7ce8ddcee4eafbf80303ea0fccac1285f662d181e0cc88d7f62a637ed19b96e7a1c
SSDEEP 6:l9bNFl4KtAk966RX4PBX4/ugMBX4suuK+JovgR4WLukfYMpqiOw2:TLWuAk966RmBvPbPJIy0wYiOw2
TLSH
T1495597A6CB006313C52027B2B0C2C3B81FB06B1F5621CB5BB89019802D027CCA8A0EAC
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libtCNnw.so-journal

Path /data/data/auction.slibuyapp.slibuy/databases/libtCNnw.so-journal
Size 4KB
SHA256 ec1bcf4afd2de5aba0bc41974b3ac6344024b64e5d7d4106e3e3b7391d281e67
MD5 621d4110b7941594da4c1546b0bf2cc7
SHA1 64671ceaf993fe9200321764ba39095999296b4a
SHA512 ec7cd97a580765c80d853415187081211f8fb49565818ef07da23be86d7bcf0b13eeb5ac110d6e2a8ffa7cb6f2452344b4a29b0117918e43bdda7bd2548bc1c1
SSDEEP 6:7+/lIvg9bNFlq0kBqbqJovgR4WLukfYMt:7+teqLTkqqJIy0wYW
TLSH
T1CC918C968B842A30C63018B6B06303B44B76EA5B98828A2370F2105459412DC08249F9
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

libtCNnw.so-journal

Path /data/data/auction.slibuyapp.slibuy/databases/libtCNnw.so-journal
Size 8KB
SHA256 6c062e6b665dceb2da16bc3de18f19f3f5f5fdec58b5e17dcb4da447a911ed02
MD5 65225f9c021957b829754b131165db05
SHA1 c7fa1d4216eba5b372bddf2d9d7db3a81f743c19
SHA512 32ab7f8946ac40ca2561d7aeb3ba95b2c865cdb598d128749f723cf1cb9913d86e62dd8d55ae0ee768114a65d94e019ac9d6a2bedaa43b84505df1283b7eedea
SSDEEP 6:7+/l9s3rg9bNFlyXA+o966RX4PBX4/ugMBX4suuK+JovgR4WLukfYMp:7+tSrqLkXAv966RmBvPbPJIy0wY6
TLSH
T13C022B595B002623C01927BA70D343691F61661F5153CA5B395008451D426CCD890DA8
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

xXBASext

Path /data/data/auction.slibuyapp.slibuy/databases/xXBASext
Size 1.3MB
SHA256 7efe8f8c192ffa81cd49b51734d67c1106091c5ac78fc25de85705da50d13586
MD5 3e3768049217016956182f6a5f15f513
SHA1 28a0775c0db823457160521fb615539c79f97f9f
SHA512 23b9e1821c7e60006b8ceaa19750894011ccaf55eb7fd85090f7a0c6ee8a130f531597606568d8cd89e9be1d9bba389ac203e19928fabebb4a9fd60fb32452be
SSDEEP 24576:QJUvlp7dl34DhGkX4Q0lPfm0LhH7untc13KdafXaQZL:QJUTH34z0lHm0t7utcVIafXa+L
TLSH
T1F6553379CF251EF252F900706ADCD48C4A6E4F027DBBC5E873D18BEA041154AA9A73DB
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

xtmCjedat

Path /data/data/auction.slibuyapp.slibuy/databases/xtmCjedat
Size 12KB
SHA256 658fda38111fd05df11cc894216efd417d8559eed8de469d6fd9c88da6cd6add
MD5 b19cfb5b5dd2d62b5e19c0504c14e724
SHA1 37782430f075da9030f89a70094da8ee91069420
SHA512 e520d7598f048c3e1a246899ddbc49d2dba8111a7984bc8b05e9a50ac8e89bbc4b165e71cc58fad38973f9daf04709b1c0a7a5738f9eef6475d106b6291f5301
SSDEEP 384:AtnqtVHmb2q4jr2yl2HLyqEqaOz/aGzxrehIPSm:AtnqHmahjd8ryBq/zSQUIPSm
TLSH
T15142CF2C6E8BB3D8C26CDC427901277D68F79C5B5ED984B9902B753319E888D38A1AD4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

[email protected]

Path /data/data/auction.slibuyapp.slibuy/oat/x86_64/[email protected]
Size 32KB
SHA256 1b6436e088ad976aa224f8fa5e8662b30c001ac6b414a1a5ce5ec23881b77484
MD5 feab745280f02e08db78ddef22718c2c
SHA1 5d06d9df21a0a48661c927bc51c56de611ba6c76
SHA512 60f08155b7df2e52975d615a24268e87a44a8d825473e69b5c4c5d4ba8dcf5b7e64466e4f0b6f961e6d9175f6afa71af5747dff276247fc01d199643ea9f8d38
SSDEEP 384:2FcsCCNOm79fu5JurAsu3WVoS4YHOanrvvsO5llD42GiJlP:UCnJuVmYoS4danrvvsO5lpGi
TLSH
T12EE2B49E7272608EC9577DF88D410AFCBA72C96513473CE6D4A2933FA92A611C7207F4
MD5 SHA1 SHA512 SSDEEP TLSH

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v16

Replay Monitor

Loading Replay Monitor...

Downloads