Analysis

  • max time kernel
    447848s
  • max time network
    185s
  • platform
    android_x64
  • resource
    android-x64
  • submitted
    17-06-2021 15:57

General

  • Target

    02060f7eb66b1f592187c17730eecdf3.apk

  • Size

    15.7MB

  • MD5

    02060f7eb66b1f592187c17730eecdf3

  • SHA1

    aef1b81ef639642f8a340b209f3169ef776ddcd1

  • SHA256

    958bdeced9a8de48ff9867454f0da14359d878bb7aef65d15e9fec94843c84d4

  • SHA512

    c986837fefd255a99a66b0a00f1436963a32161133e668d438dab9e062a3b59f088cba0083e751a7ecee4b84d13d3f9098023b0a023830b7f22697160acf916c

Score
6/10

Malware Config

Signatures

  • Reads name of network operator 1 IoCs

    Uses Android APIs to discover system information.

  • Uses reflection 4 IoCs

Processes

  • it.pagopa.io.app
    1⤵
    • Reads name of network operator
    • Uses reflection
    PID:3576
    • it.pagopa.io.app
      2⤵
        PID:3719

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/it.pagopa.io.app/cache/chats.cache
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/it.pagopa.io.app/cache/chats.cache
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/it.pagopa.io.app/cache/chats.cache
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/it.pagopa.io.app/cache/read_queue.cache
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/it.pagopa.io.app/cache/read_queue.cache
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/it.pagopa.io.app/cache/read_queue.cache
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/it.pagopa.io.app/cache/surveys.cache
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/it.pagopa.io.app/cache/surveys.cache
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/it.pagopa.io.app/cache/user_attributes.cache
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/it.pagopa.io.app/cache/user_attributes.cache
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/it.pagopa.io.app/cache/user_attributes.cache
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/it.pagopa.io.app/databases/com.google.android.datatransport.events
      MD5

      15d5b92dcbda7ef7f9ca327a903e46e4

      SHA1

      ca153b66028a58d90346ff8abadbdf01b95c37b1

      SHA256

      e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370

      SHA512

      2352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca

    • /data/user/0/it.pagopa.io.app/databases/com.google.android.datatransport.events-journal
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/it.pagopa.io.app/databases/instabug.db
      MD5

      39f1b8aac5c59697595d76b950bc6fc8

      SHA1

      94aa8e3914b74c163f14ced200af6037d549ef51

      SHA256

      91dd5775914f541f55b9309f8684d1dd72f05570c744e3a1e36b09d387bb9de5

      SHA512

      210e0f02c3bf6fca1a84d17c0e9f4ffd322a1d7d81f40d244b6cb237876c362dd966c917cdf7d64ee176ef9a067855e13478b556ab83002d8f7dea8dcf2c17da

    • /data/user/0/it.pagopa.io.app/databases/instabug.db-journal
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/it.pagopa.io.app/lib-main/dso_deps
      MD5

      a133922fc827914a8134b0e07a2d0635

      SHA1

      a7c186fa99e23c6fd8f6aec19384a1d475c3a985

      SHA256

      6f053377c684d6c440c77f87260463c7821ede4689a0295d402f223873e61bd3

      SHA512

      d27802d68335c6b823c41835f0476782b70e79e3e2a8c0e904159c8d2f289740190469c71e9073296b93625c3bc3dccd1399cb8ef30b93d43a50955d57c46006

    • /data/user/0/it.pagopa.io.app/lib-main/dso_lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/it.pagopa.io.app/lib-main/dso_manifest
      MD5

      c06857e9ea338f3f3a24bb78f8fbdf6f

      SHA1

      c5a0a2529d2deb60fec041b4fbd722a2ebe31702

      SHA256

      957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

      SHA512

      29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

    • /data/user/0/it.pagopa.io.app/lib-main/dso_state
      MD5

      93b885adfe0da089cdf634904fd59f71

      SHA1

      5ba93c9db0cff93f52b521d7420e43f6eda2784f

      SHA256

      6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

      SHA512

      b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

    • /data/user/0/it.pagopa.io.app/no_backup/com.google.android.gms.appid-no-backup
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/it.pagopa.io.app/shared_prefs/instabug.xml
      MD5

      bbfa4b159e834c061e1c1f26cbfd1390

      SHA1

      0b6f1154ef3d76957fd1076e63d40f58e9cab6ae

      SHA256

      991115bd9ff874cef5fb70d47c34a9f1bd60bb7b767c794a52567cd121842197

      SHA512

      c9beaf627c8d18d7870b09f695f682de0ade2ce68b3c8c21ad40de9cd25b49d9c1c995dc7cb154fad1994f5eefeff4308b528d8312802383eeea5ad4c97a46e5

    • /data/user/0/it.pagopa.io.app/shared_prefs/instabug.xml
      MD5

      78f1c503dc2505e96688c479ab87d8c8

      SHA1

      4ea91da278a6fcc8906829608f7e81792fdf45de

      SHA256

      f6d2f39a74281b44aad2c1acf6bdece68fcb608f07292c6187728e3d54effa95

      SHA512

      5e7b4408abd9f1dd4edceebe11839d360b271d18ff542a9ee223a59003928d8de75d238919d6d0c55201d46e02bedb95c71ba4483e20b9b78142462f355a9a07

    • /data/user/0/it.pagopa.io.app/shared_prefs/instabug.xml
      MD5

      c9ba5c329ea507a39a9d4fcb3588e34c

      SHA1

      0f1a86152d127d22845bc047dfe3c64ee540a185

      SHA256

      ed46ae92c169940439bfea76d6e89cc3e40c3f9f53d1791fac2aaae155032785

      SHA512

      8445f5c094fccba871198f2f974ced9cb697dfbbdf67b4ce7fde19152a1a667fc8aedc46748b528aa7a0e259c42044079cb52f86930184748ea383a531f6c77e

    • /data/user/0/it.pagopa.io.app/shared_prefs/instabug.xml
      MD5

      04b7d3a9a5734543b2d3d7a9777e9527

      SHA1

      411aa27e5f5fe8f5b368cd07d9427974e3c04302

      SHA256

      b42416f85d8fab3ef5f2061cb02479b02cfb395ec7f3bc4e8aabc3f824fdf4e4

      SHA512

      1ef69bad3083a74faeca28cba7effc9394bd09b11d5a67c79051c4465ecb7fe65d421c5cd344274007c1381ea34037b5bbbbc2ddee750d55a7aa2f4955ea2204

    • /data/user/0/it.pagopa.io.app/shared_prefs/instabug.xml
      MD5

      a321f69c9f42b750b43dd362a7ce7f52

      SHA1

      981974ee4d7cbb69760b49c297db8ac646b155d9

      SHA256

      ff4540647f8f0a0326c0a9a13219f71d19ffe8a8319c0439fe6949317856c787

      SHA512

      aae143f576ed2a2e4299ee69aa4520a48cd75db125556ac075cf1198e3ff455f06ad31c5021b5a414b29bc7ce46eaee9ee935888d8eff2ebe7827b5df6608382

    • /data/user/0/it.pagopa.io.app/shared_prefs/instabug.xml
      MD5

      b674fc3326043501b44062f52ccc490c

      SHA1

      f74915bf6188a43aca21c00320628f22da43276d

      SHA256

      19fe3c60f3bbf44cd4716af64c0850076517c10c595e42ef0e6e2b8700084c97

      SHA512

      d56c3ab6c2595450671f6acb6ee338171228fe229d260af186cd19dbd6ca007f6dbecc54621ee8a16d0e6198f7c6e335a59d665ce83314619ebe83b17f1540da

    • /data/user/0/it.pagopa.io.app/shared_prefs/instabug.xml
      MD5

      0e1ec6dd62da03e190b404ff90867239

      SHA1

      21e6ddb9fc98fc43fddc5bb298bd5c6573f2e830

      SHA256

      14cb5d39f04cb129269d7bb69d24b4992901dd0ded425db07b29fab44ecdd1b8

      SHA512

      a89cf749f2c3e46ce1c7554f72eda7378d75cc86ea4fa79bb96125fcf69367fce426b65c9681cc3313575ae0c352d0b2336b97bef90879e2559dcf1f8d0f4848

    • /data/user/0/it.pagopa.io.app/shared_prefs/instabug.xml
      MD5

      43104bafc1ccad92a880758e2358bf76

      SHA1

      82de8d0b5cb651ff4ca34d81f85972c798601b21

      SHA256

      2faf45b284d40bcb4a467f72d3cfc49edb8144a5df67f32ae5daced2954ad4ba

      SHA512

      fb28ba7d2e68e93599c0c303979bb32d452a41469e11af7472ac1f7c636315e813641cb915797046f6eb259bb3fcc9184e1cf14bbe251e163b9e1d41bd218c1d

    • /data/user/0/it.pagopa.io.app/shared_prefs/instabug_announcements.xml
      MD5

      8d32eb2a3dc828bdc0921a38bf9f8331

      SHA1

      0d6b110e5819a7eb1bef98161502c9b9c5083626

      SHA256

      ad011a4d1b125056bc48371c460737714fc4d43f09415bf2e8fa7b9f3775bd4f

      SHA512

      8ddeb29f881aedc253091ac11081cba729974ae6c60134de08039d230be451189673d17915a6c15195a8a0d0ba70aef190b04007ca0aeede5adcca071f4a0290

    • /data/user/0/it.pagopa.io.app/shared_prefs/instabug_bug_reporting.xml
      MD5

      8806921a0ad66d407c7f16b586f01f93

      SHA1

      0847658792f59f5c606fc88917ffc3caa1b7f5b8

      SHA256

      c9766b8a0f7d6f8082e79e65f69285d0d45c25336be1f6d11de50a3f2a1b3147

      SHA512

      865ac6ada07a30d96535d9f4da305372b197369be140171e5cc212491f11fc86d879ae527b81cf326e428bfedd8a305fe7bae4c76960a18783deab366c3eff1a

    • /data/user/0/it.pagopa.io.app/shared_prefs/instabug_crash.xml
      MD5

      8806921a0ad66d407c7f16b586f01f93

      SHA1

      0847658792f59f5c606fc88917ffc3caa1b7f5b8

      SHA256

      c9766b8a0f7d6f8082e79e65f69285d0d45c25336be1f6d11de50a3f2a1b3147

      SHA512

      865ac6ada07a30d96535d9f4da305372b197369be140171e5cc212491f11fc86d879ae527b81cf326e428bfedd8a305fe7bae4c76960a18783deab366c3eff1a

    • /data/user/0/it.pagopa.io.app/shared_prefs/instabug_survey.xml
      MD5

      8d32eb2a3dc828bdc0921a38bf9f8331

      SHA1

      0d6b110e5819a7eb1bef98161502c9b9c5083626

      SHA256

      ad011a4d1b125056bc48371c460737714fc4d43f09415bf2e8fa7b9f3775bd4f

      SHA512

      8ddeb29f881aedc253091ac11081cba729974ae6c60134de08039d230be451189673d17915a6c15195a8a0d0ba70aef190b04007ca0aeede5adcca071f4a0290

    • /storage/emulated/0/Android/data/it.pagopa.io.app/files/instabug/.nomedia
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /storage/emulated/0/Android/data/it.pagopa.io.app/files/instabug/vusf/.nomedia
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e