Analysis

  • max time kernel
    2237918s
  • max time network
    136s
  • platform
    android_x64
  • resource
    android-x64
  • submitted
    08-07-2021 09:10

General

  • Target

    es.aeat.dgc.mobile_184_87587565.apk

  • Size

    83.5MB

  • MD5

    340e671ed118d64b45a737f75588f7e2

  • SHA1

    148cf48863bc0bde46e76ca8700bcd029ac47d87

  • SHA256

    4eaa4770b56e5707a5b8fa6f6982bbed387a82e8e5461b419e5efa62f73cbdee

  • SHA512

    699aeeba6b34d6cd6cb770633a84c1e21439fdbe0edc01af1e30d0bf703880b8cc4ee5c15dc140364b57fc2933be6733b272a5119705df8b6b46c473db10072a

Score
3/10

Malware Config

Signatures

  • Uses reflection 6 IoCs

Processes

  • es.aeat.dgc.mobile
    1⤵
    • Uses reflection
    PID:3587

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/es.aeat.dgc.mobile/databases/com.google.android.datatransport.events
    MD5

    15d5b92dcbda7ef7f9ca327a903e46e4

    SHA1

    ca153b66028a58d90346ff8abadbdf01b95c37b1

    SHA256

    e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370

    SHA512

    2352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca

  • /data/user/0/es.aeat.dgc.mobile/databases/com.google.android.datatransport.events-journal
    MD5

    8648dcdbcee3ce4eadb5d70a50fc18fc

    SHA1

    4fa586b9bbb9387a7f1b1596705605953d8fb680

    SHA256

    ac0dbd210f54ed6b0c5902084d4bd7bf59b48ad039a2786cd6d7f4bd8e839139

    SHA512

    3c2ec3ea641d09fd264cfc0d323b68c0ca89f37d5e24a71fcb171b97827d261bd93766506f4093451df9440faa9033d81d72e5a774636fb08e4c192d86463312

  • /data/user/0/es.aeat.dgc.mobile/databases/google_app_measurement.db
    MD5

    6a36c148a48aca1b6284d998610613d7

    SHA1

    3acc6156ca9eec5c7da152d3cc8b2c97e8fd0546

    SHA256

    dd98ce23182b90414a0397d9d53ce081999d4e376901c29a7a2e0f35df76f93a

    SHA512

    75d8ceecfe7e8e479f571119f8c09eacd13cbc5804881208ad058775b7a3ba6d0ebe5ed476c0210610538a5db2f32addf9e8e0fbcce30a12ef78e608c7c24e33

  • /data/user/0/es.aeat.dgc.mobile/databases/google_app_measurement.db-journal
    MD5

    8299375764c347d6811ce639153d4b8a

    SHA1

    1774b4dad8b3acef44590810b822c79b755a31d0

    SHA256

    03ebe8b459a157d844042fbf13d71a39b36e12167868742c82c0567646f2564e

    SHA512

    0a9a88af6d6661be980b5215fa052db74686ccc432dc8567a402059b10a72a3f3f45610c143225db512e5d7173b017be330a7b9e5b9a1eaec57339e074096122

  • /data/user/0/es.aeat.dgc.mobile/databases/google_app_measurement_local.db
    MD5

    ef7330a2daff8ed39a38153a10c35276

    SHA1

    289a23348b67b4dfacc380cf49345bf1412e24eb

    SHA256

    3f0bd353c8f7bb1c0b29261d54326f5bc86fb76f3da3654888a88dbf0cee8cc1

    SHA512

    993628cd6eedd713b4881bede06d8a16db209cdb239b69ff85555b0de1f0be6801215767c9d1a68ba585d4c4e2c8d1c31367e3c447cf80e78745d53275b0664f

  • /data/user/0/es.aeat.dgc.mobile/databases/google_app_measurement_local.db-journal
    MD5

    ca4a351e567b887b95d9f0f6744a2dee

    SHA1

    a2f82fa38646920c72e53872d85bc7bf3a30f149

    SHA256

    e222264a36015260a34d1e040ba793d4cbe85b3e5386f90439bbd42867f5cd43

    SHA512

    d4f28d17b41a02573bd9f348be0f84d93abb7a1a59556f44050e10a4a7f2dbd8d55f3f14eb3a2dcff35f7e206a3b33aad4b7f8c2b7c1fb2c6ce3b4054b9af779

  • /data/user/0/es.aeat.dgc.mobile/files/.com.google.firebase.crashlytics/60E6C12C0069-0001-0E03-962916E3AFD3BeginSession.cls_temp
    MD5

    a2da49771c370b1444d9a52bb7644998

    SHA1

    428119b69147f52c45c698957ac0e0e43050fc78

    SHA256

    dfcb5470047fc1c3e2334fdddab47e6d867c8b28e858187471aedac4c99822bb

    SHA512

    d991392281ccaef21f42c7b2951554901ec19a8015458ab0b51e0373bf55753ebb07fc101106b6f31d2f9b5b55c021c92c470b7c989ee227734d58f3290ffd1c

  • /data/user/0/es.aeat.dgc.mobile/files/.com.google.firebase.crashlytics/60E6C12C0069-0001-0E03-962916E3AFD3SessionApp.cls_temp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/es.aeat.dgc.mobile/files/.com.google.firebase.crashlytics/60E6C12C0069-0001-0E03-962916E3AFD3SessionDevice.cls_temp
    MD5

    9be9b171bf620a1c638e3511b90ca20c

    SHA1

    b1fd9cf4600b45feaa4e49d441a643b8519d0517

    SHA256

    fb9d65d85c5132e723222ae5dc3b930f0277c271834cfd70883e8504d6db1039

    SHA512

    f43224c8a3e5a3404c6d714d2e6ee7b57127d91668f2b3e92b30a79ccb1cd10fbc9b5909e3abef11a9335849afda279049034987fb6219622ebaa228a9c072e2

  • /data/user/0/es.aeat.dgc.mobile/files/.com.google.firebase.crashlytics/60E6C12C0069-0001-0E03-962916E3AFD3SessionOS.cls_temp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/es.aeat.dgc.mobile/files/.com.google.firebase.crashlytics/com.crashlytics.settings.json
    MD5

    122ba99f7be65a74c445a737833d244d

    SHA1

    480726ea2da262ce9c811eea5558cb60370fba30

    SHA256

    901865b776187459c8006d1bfcf4ac32027072aab1fdbbe910de73b5011be4d4

    SHA512

    06096adeefcb8016e654000721f7114cc2651e18d308edbb26659b5a494ed97f3aff4fac7e80ec601adad2ece61034b5008ba349bf7441f5c1dfb5977b661e46

  • /data/user/0/es.aeat.dgc.mobile/files/.com.google.firebase.crashlytics/initialization_marker
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/es.aeat.dgc.mobile/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-60E6C12C0069-0001-0E03-962916E3AFD3.temp.tmp
    MD5

    8e598fae6b7e1f72ff2e103e8ec01b59

    SHA1

    20d22ba3950b06716f0fa4bd318e3b14e578c90d

    SHA256

    a0a50e66f99f5a44026b5aac5110356fd8001f3d7ef7ab79cd38206c0fca6a21

    SHA512

    1efa0d7f2cb83ae6cd22e141dfef34ca106abad63c7bb52665d9c141e64c18e6b93361b29f9a642103bf6ce2d972c9dff1c42968b7d38324f21b34cf43bbc298

  • /data/user/0/es.aeat.dgc.mobile/files/.com.google.firebase.crashlytics/report-persistence/sessions/60E6C12C006900010E03962916E3AFD3/report
    MD5

    00c704e5115e64b507670d88ded118d2

    SHA1

    3a9d995c05af5319baf480465512c8d085795c3c

    SHA256

    4af89434b032ac2c232c10bd3fd20abc8b4a37d7a6099352b121c4f28414da76

    SHA512

    9c47b73035d534eeb1563b39024a7dc08b69297f6d49715b1c14ebbdbbacdc1405dabb827ca3526f10d6e51a00aa7c0379b137e9c7fe388b55a8502d0c0812de

  • /data/user/0/es.aeat.dgc.mobile/files/PersistedInstallation4225119141354624407tmp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/es.aeat.dgc.mobile/files/PersistedInstallation5431888604160943281tmp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/es.aeat.dgc.mobile/files/generatefid.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/es.aeat.dgc.mobile/files/google_app_measurement.db
    MD5

    cd8feaab1abfb428b8dcad90079db0ea

    SHA1

    372d98948dffb5728d69efbbfcfbbab3ed48126d

    SHA256

    630749db1f3e83f5fe841473af431a11c6c3a720cfa190cd1862c57277fd407a

    SHA512

    ff8ff34c3252b556fe953affffb82d67bc359f1b0c7a913a51a0cb5085e6c2790e2ccf30c75a8a7f95818f0f68766899f1421fdf9e3fc2d158a532d9c0047749

  • /data/user/0/es.aeat.dgc.mobile/no_backup/com.google.android.gms.appid-no-backup
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/es.aeat.dgc.mobile/shared_prefs/AEAT_SharedPreferences.xml
    MD5

    38459bbb054bf400c05ab8d3cb53d59d

    SHA1

    9520794e16e0d49957249a8937b8c7e44fe0584a

    SHA256

    6f57b6641fb737e846146ebaea5e9e5e2234fe63c92fc410fdd30c33a4ee0416

    SHA512

    3bb4cb901ceb15713f1e3f1ba2387c327aa67e4e4d5bce0e76ace86231f5f859e4fea37fc1010a075a63e27144b365f1be05def4b940c5c3ded871214340dba2

  • /data/user/0/es.aeat.dgc.mobile/shared_prefs/AEAT_SharedPreferences.xml
    MD5

    fe48f2a328145a86e9c8d47c23b04ff2

    SHA1

    d290251e02f664a331844e6dd6b76ff891534677

    SHA256

    447dbcdba79bae44df628e0c603d85385efc99f03f4de31cc9d00a6449878bc2

    SHA512

    e68cfb575dd8c05a3f40aa310ccdeb3e5a015c358619759f656633fc6a614ff636b6f15b39e8df4dd369c15f1e274b469f67700d9849b8af5426103b36276c38

  • /data/user/0/es.aeat.dgc.mobile/shared_prefs/AEAT_SharedPreferences.xml
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/es.aeat.dgc.mobile/shared_prefs/CDMComponents_SP.xml
    MD5

    2e80993aa4af2b8782a27fe09afe9c14

    SHA1

    91d18eb1203715cbcf704d11cf765fa91d7c9db6

    SHA256

    ac315c49ae64620a0497c450b9325da5a1a5af537c884a93d82a70c3b2779752

    SHA512

    ce07e976019350405e0c876347581cdc81ac5fc0bf86959ebe3ba47d453cb1f3a3d62dabd7448f461ec28dd37785ed725026933af756f252979d432afd5785c8

  • /data/user/0/es.aeat.dgc.mobile/shared_prefs/FirebaseAppHeartBeat.xml
    MD5

    86e61800160b5d3b522e0fea28ef0565

    SHA1

    c3cdd67434bbc449c2e5671e224d79da67da9012

    SHA256

    edc6b7c4ae6db697c0a9153ff67c5506067e4b8e28760b0f23e50b625e08900b

    SHA512

    d68b2b94843216931d2d8682877be0e5546506f1be4516949818d08a11660cc1e84b5277bed1d81542f2b1cb1857d91e109398ccf8d928ca54f678901b2ae8f4

  • /data/user/0/es.aeat.dgc.mobile/shared_prefs/FirebaseAppHeartBeat.xml
    MD5

    3a4341ae1413b3f99d80bdd4a7d62cf2

    SHA1

    3fb67b44f340e78b258daf67d2de5b1b42d988f1

    SHA256

    0c7a0e552220c1ec60a3d40325d3c734ab0ff23ecfa535181138f5fc7f3fe4f9

    SHA512

    f49b607f0388993ca08c7952a35303e51a8410c6908d38b7e4370378b5674303cfc4b97a9ae8543c7ca857d3b97088dfd2d87b9084b31ad7c9ea5e25d3ffda33

  • /data/user/0/es.aeat.dgc.mobile/shared_prefs/com.google.android.gms.measurement.prefs.xml
    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /data/user/0/es.aeat.dgc.mobile/shared_prefs/com.google.android.gms.measurement.prefs.xml
    MD5

    14c64005e31e66b355a36e1ee81ed4ed

    SHA1

    bba51fa661b886670e23435f1a36b4f88fa0b392

    SHA256

    2dd35a324cdda2f712c833b258624148c2f7739915f96662a8b510c0bf55866d

    SHA512

    3539cc45f333d6024c1fac035116456dc2ebd5c94bac25c64801bfc27e433184a88d828b6c4a6b8474874a9a3b45ba2e7c228f4e688b0250761a6e1922e610eb

  • /data/user/0/es.aeat.dgc.mobile/shared_prefs/com.google.android.gms.measurement.prefs.xml
    MD5

    8a7966e9739e17293812d5042c7a9fb5

    SHA1

    b256bc212ba6697bf4a1b07d7270130f4626280f

    SHA256

    96bb4f7af7778b0b4790c51b97344ffdbb5ab27de079a9ba7a9d573b67b9fbf0

    SHA512

    f7d5f6c6fac6ce0de3c1b3de4207389e3b1e2ac119108a652151f4c68f2409c375892743d2381873e6e1cdae57fd90bd0cd168eb07f78136dc0937d62128afec

  • /data/user/0/es.aeat.dgc.mobile/shared_prefs/com.google.android.gms.measurement.prefs.xml
    MD5

    903a47e929b7df3f6e56ff35aac47d1a

    SHA1

    cea0abb5382fb82f371e6c5d83e475607d30f937

    SHA256

    51140674caaa089ca4e4422744c4ccadd743178401647eadb49d9c954daacbdb

    SHA512

    abb0762650e1c17056c3d1cf8cea3cd1f8762b3ddd0f115ec8fd38cd1107a094eec3b0ae285eaecc78da9de2dc76b23659e047b157f5238e395cecbb0cdb0b70

  • /data/user/0/es.aeat.dgc.mobile/shared_prefs/com.google.android.gms.measurement.prefs.xml
    MD5

    8f1cb5c2f65c0cee7a406b17e6847239

    SHA1

    7cd373c48979f3fecfd626ae109bfab96d808937

    SHA256

    322659a8208c6d83951e6207577ffe4f96771d72b89658e46d53b4b91cb60327

    SHA512

    33044579239628b79e584c467ef193c058dcb8dd5f27f8598c30a0eb4f4c33b58352306315765a511b712e78ad6665adf76dbca1a7eae70cd5106f0deadd15b3

  • /data/user/0/es.aeat.dgc.mobile/shared_prefs/com.google.android.gms.measurement.prefs.xml
    MD5

    fa4ce822d7197d6cd2e0501339f115c1

    SHA1

    876c0c2576ea2f623831b4f3dca592983b9a84db

    SHA256

    3e70f1b9c9b950e09c1e52184816b743990a90d950a827210e51d6546ea5f737

    SHA512

    7243dc6083650dd7bc0bbb8bc63a27ba2d7f345129710ed6fce13628d138061a18ca3414294528c69555c496ef67d69353ce0d614ce1d3c81a9e461954778930

  • /data/user/0/es.aeat.dgc.mobile/shared_prefs/com.google.android.gms.measurement.prefs.xml
    MD5

    0b32447373b69e91a02158ffc9162aca

    SHA1

    1ab85bc3c3f8624c4bca12aaf4fd8fb964c2b1a8

    SHA256

    c71086435023e6e09eaad46d8d7a1471b3848897bcccaa79b04099c13f4ab29c

    SHA512

    99670ad8c4ac49b419791599795cb00dcd58a602b073f8e739418a8a0acc13b3b8893afd1388f8e06ab400608cd1ba6d5b4eff8208b32cf681e0704e0e4c4aba

  • /data/user/0/es.aeat.dgc.mobile/shared_prefs/com.google.android.gms.measurement.prefs.xml
    MD5

    cc25120f3777cff6c6df7fea3ce92fb4

    SHA1

    17aab00824eeb4b6f59639d3838f518cad20ed18

    SHA256

    1c24c62f4563061c7ed297f5812fd9a21864c895a5dd491ee27c0793e45b07b6

    SHA512

    cafa0371546e5aa7763d40d25473c038b7dd58705a0cff64c56501fe1b37190e60b2a3a8a366ba11c2babe4bd458990670284a9af8d22dbcec8dd74882db08f6

  • /data/user/0/es.aeat.dgc.mobile/shared_prefs/com.google.android.gms.measurement.prefs.xml
    MD5

    3cafb6a7a2ee3e16744aaf27020aa4a4

    SHA1

    1f364d0b96fd0ea9757362a0c431ffdd830e1b55

    SHA256

    14d039ac56934456f73c7faee5e1d6ac649f1da5e1c7283c891070ea56a6e1cc

    SHA512

    087b59bfce49a51d92a0dec81205eb32d55d43681cc49be1d98ece3c9ca9e55dc6eaf2509c946a369c0a6666feb31fecc235282edc43e22c3ae81443c4bbdc25

  • /data/user/0/es.aeat.dgc.mobile/shared_prefs/com.google.android.gms.measurement.prefs.xml
    MD5

    6c0720f3d1e3f0830a77efe5ea9ac221

    SHA1

    9e3e14316e353dd1ddd6ca665467510925e86b58

    SHA256

    9b8ad6e1c295b5126b6a5947d8c12508f9fff95f6ce9537a1485ba9025793ae6

    SHA512

    08443a9c954d5374c2c9b3b51ad19a061ff65de5e4febb5de2af9eef18030c3cef8f12e432be84d1fbdd71c235fb3d86194ad37839bc1d909c3b75db026b707a

  • /data/user/0/es.aeat.dgc.mobile/shared_prefs/com.google.android.gms.measurement.prefs.xml
    MD5

    4bfdf7d0160fd84d63ac67480f0c2e3e

    SHA1

    5a340cb6a903a096ab83988c898e15d72d4257c3

    SHA256

    da737279a5df8cc810062f7acc7f9c0365b11844e82d8f546814875484a3b3f9

    SHA512

    9a14c0e7dcfb51de0a7aea300631d2d13586068f25e4951122ba8d089bab0b8fcae3ba5f4bb1fbe174290802c706aed6024034425c227c976adc339ebfb3d488

  • /data/user/0/es.aeat.dgc.mobile/shared_prefs/com.google.firebase.crashlytics.xml
    MD5

    e6ef1d3c228347b2bdb055463c2ff5c1

    SHA1

    1f5d8fb1c6ec1d698c859b7bfb83e8fe21e4b5a7

    SHA256

    6b04eca70f77d12298dca989aef5701a9017e72561121874d19d888f835ff207

    SHA512

    2e415e2eabaac4a04a857c5eca96dc508255b7b7d3db4e12aa640fea98531b30fb383ce3a7a3a38309dd059c9fa01c4bb9df10f5764aa5261f25df042034ecbc

  • /data/user/0/es.aeat.dgc.mobile/shared_prefs/com.google.firebase.crashlytics.xml
    MD5

    d6fc65cd941bd3c141f1a5b0eeb96d7b

    SHA1

    6eeeecb4d6b111d5b7d8fe6f2629c60e93da53ec

    SHA256

    bf265da65ff5d478cc28f859fc5045459abe3cb363d4dab2e43b4faf9a217fe8

    SHA512

    fb963c80fcf9aaf1dabff07c36388d25e64c812130b0b9d22c54ed7620b8d534093daeddbc30b27b1185a7ee3af186c3e22d9b70e226072a5316308b06a2e200