Analysis

  • max time kernel
    298106s
  • max time network
    50s
  • platform
    android_x64
  • resource
    android-x64
  • submitted
    04-08-2021 15:23

General

  • Target

    FetLife_3.0.3.apk

  • Size

    8.6MB

  • MD5

    8a7bfc31a9b571234f1ad29f90b8e833

  • SHA1

    c6dbc29079aad49b8080d8ff744ddd78b29ff80b

  • SHA256

    25a0cf3874a3a92e7d40d4e1476cc9ce60d0982f9f5f8bc77755b215932138ff

  • SHA512

    b86c60a5c42c670f02aa3fe5d03426a00af3f1b9aa8a76952d3b2043b074e84ac80ad121534f5886b8926245e68d21eb545419c3c2cac71c63240f18c26a71c0

Score
6/10

Malware Config

Signatures

  • Reads name of network operator 1 IoCs

    Uses Android APIs to discover system information.

  • Uses reflection 3 IoCs

Processes

  • com.bitlove.fetlife
    1⤵
    • Reads name of network operator
    • Uses reflection
    PID:3578

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.bitlove.fetlife/databases/OneSignal.db
    MD5

    df084b70e833569f421ab08f9b36fed5

    SHA1

    9e104aea82bbe3d2cdae8c88258600a7bb693640

    SHA256

    4bb9f85535098840bce3aa6540541d7fa4b70fc143f62611eff6e43af146ece3

    SHA512

    72d5316c0e65ddd78c53e019996fbc0d9ca54577a88f90bf11fdde297531231935b86525f8c7dee7336b55cbfae4f6a136b6f98283cbdea0a85de49783ad4162

  • /data/user/0/com.bitlove.fetlife/databases/OneSignal.db-journal
    MD5

    5aba5c9086b6108d5648f37ce176f562

    SHA1

    6cff25a2fb155bfaa4252d3231b5083b69afa060

    SHA256

    fc1ffa15dbc89dfc7fd232c5ee3fe55b630c397e95bdc249f125a759ceb1aa10

    SHA512

    d3890af4ec2fd983f8c6707119f1e7951fa23a5475555624ed7aeed66a01702fdcc246f5ce4d533dfa611d5c9312a0e713f7d09d6881ddd54af9d8e995c5c759

  • /data/user/0/com.bitlove.fetlife/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/610AB10202A3-0001-0DFA-CB78BDED94E3BeginSession.cls_temp
    MD5

    7daf7b533c89585c76c252b699061021

    SHA1

    9ed28fda15bbbde34ddf224758c17a6fef530e01

    SHA256

    8e15f46e24574d36bc40866abc8cc685611b76ff36ed97f3024655d963e29037

    SHA512

    5051bef8cbe838adefa223bbce64eb4b1b987abeed9d42cbd537158f591df17db0f87ff9b9bac0bf0d5325fbe285fe0170ec1ad82761abe771fd4b5aaee60b79

  • /data/user/0/com.bitlove.fetlife/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/610AB10202A3-0001-0DFA-CB78BDED94E3BeginSession.json
    MD5

    dfb0c42b3cf2c81a15fac6abac1a47a6

    SHA1

    e7b012d383a9b105c68bc500c56ebba3fbef2beb

    SHA256

    8d686dd888d5fd3f06171b3a7478d4a2d45743e3f219f8e7ab608c2a869fcab6

    SHA512

    1c47969d5146d447dc22d909219c93232287192edc772a8c74ce0e706cf061b2c7a0a1973423aefe5b2314f7318476785b93c1c405dd5abfb3e1098f1b014243

  • /data/user/0/com.bitlove.fetlife/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/610AB10202A3-0001-0DFA-CB78BDED94E3SessionApp.cls_temp
    MD5

    aa1c003eaabe320391709a4ff12b95b0

    SHA1

    4aa267e761d91e7afb0dc6a50bdee3a31a572010

    SHA256

    2fc643b2e7784f93e479b04de74df23d7fc1a389620351c9ebc00d17b6df232b

    SHA512

    0c76492a7946e9b8e1f2059e44b5dd447c0c94b6a2a839cc684c9e7610cca8a2c4f02475c233164184ba970d6f9a2ea395542ed06720a548a93a3b158c77e8cd

  • /data/user/0/com.bitlove.fetlife/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/610AB10202A3-0001-0DFA-CB78BDED94E3SessionApp.json
    MD5

    416a283ce12eb31dd00dae50d8a59681

    SHA1

    056f46650a4cbb6ee80b18b75857a23a38fc906c

    SHA256

    fd4407760e4be677bd56413022719b68e509dfbb61336801dfed10bd680c71a4

    SHA512

    ff07a6a2dbb7f6a7b8253a301b1c9e36c557cad1be33f687ae50ac2cc445929e22c9b08d171365aa116ab75294d9cb1290932678c91b9f1bc0acb7ac6dc02225

  • /data/user/0/com.bitlove.fetlife/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/610AB10202A3-0001-0DFA-CB78BDED94E3SessionDevice.cls_temp
    MD5

    9be9b171bf620a1c638e3511b90ca20c

    SHA1

    b1fd9cf4600b45feaa4e49d441a643b8519d0517

    SHA256

    fb9d65d85c5132e723222ae5dc3b930f0277c271834cfd70883e8504d6db1039

    SHA512

    f43224c8a3e5a3404c6d714d2e6ee7b57127d91668f2b3e92b30a79ccb1cd10fbc9b5909e3abef11a9335849afda279049034987fb6219622ebaa228a9c072e2

  • /data/user/0/com.bitlove.fetlife/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/610AB10202A3-0001-0DFA-CB78BDED94E3SessionDevice.json
    MD5

    b2a0046f7d73b154ac3ce50844f1ef62

    SHA1

    2991ad2dc70e61476568497b6052bc58eb321482

    SHA256

    b5bc3fde5af7dbde12c75380d537c8546a012fbe264a2af1d1f742c0c2b0acce

    SHA512

    3033ea7f802df5e7b14d7913ad9bcc15e182e19ed0e1d7cf79ea80a6c8e7c0fd0d5314a8111ce74eb286be6b7eea27c7e528f5ecf170ad95b0a87e111da73a90

  • /data/user/0/com.bitlove.fetlife/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/610AB10202A3-0001-0DFA-CB78BDED94E3SessionOS.cls_temp
    MD5

    2566d27ce8c28d8961f082c375d7535e

    SHA1

    92fe585b1a2c9c523d2fa1f65ab5c1b6a1a6edaf

    SHA256

    5acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a

    SHA512

    1c70679bbd25a57f9ac02083d5af0fe72b1417cf3070a195497f03d6f492e87b1ed3f570de7ea7c814c995a1530e32610d9570f31a480648f4062e8d3287be8f

  • /data/user/0/com.bitlove.fetlife/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/610AB10202A3-0001-0DFA-CB78BDED94E3SessionOS.json
    MD5

    5caea4b68c57072f7f52a5a41720566c

    SHA1

    4d9712f1702c7238949da43f7d8ae6efb233a666

    SHA256

    3223857b618b924c2b0fbc7bfb373a1aacf300a7b5ab585e18fffcf19039f363

    SHA512

    fe1455d21c521aeae3292bdcc386f6d2005dc253930c03e44dbcb972f96b849670d2aba039ea59e1a5ebc0350e6315151d17bcda55c161a62987d4bb01e91f9f

  • /data/user/0/com.bitlove.fetlife/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/initialization_marker
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.bitlove.fetlife/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
    MD5

    620f0b67a91f7f74151bc5be745b7110

    SHA1

    1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d

    SHA256

    ad7facb2586fc6e966c004d7d1d16b024f5805ff7cb47c7a85dabd8b48892ca7

    SHA512

    2d23913d3759ef01704a86b4bee3ac8a29002313ecc98a7424425a78170f219577822fd77e4ae96313547696ad7d5949b58e12d5063ef2ee063b595740a3a12d

  • /data/user/0/com.bitlove.fetlife/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
    MD5

    620f0b67a91f7f74151bc5be745b7110

    SHA1

    1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d

    SHA256

    ad7facb2586fc6e966c004d7d1d16b024f5805ff7cb47c7a85dabd8b48892ca7

    SHA512

    2d23913d3759ef01704a86b4bee3ac8a29002313ecc98a7424425a78170f219577822fd77e4ae96313547696ad7d5949b58e12d5063ef2ee063b595740a3a12d

  • /data/user/0/com.bitlove.fetlife/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_825ee63b-f2e9-4c89-a604-2f1a8b1df852_1628090626702.tap
    MD5

    d0e74ab8dccca91c0ccd7125e588d5cd

    SHA1

    04bdadb7bd09681ea2d3f84210feff6549b6ab45

    SHA256

    59a13aa892e3bdd2587c59e6337b5179ac1296970d10728c33fba365826a1864

    SHA512

    5188dc8983291e44ee1fe0c187ac88a04164e31e4cbc065b2b384cef3235571308bc8395c9d35d6aa58a42145c958f640526a939e48bbf61552ca110e12c536e

  • /data/user/0/com.bitlove.fetlife/lib-main/dso_deps
    MD5

    bc06809e9f54747ccd70a93b750b55af

    SHA1

    fa377e93a9e93128d0b81f3d54b1cbf4d1d43e2b

    SHA256

    42b91bfc873802b87e83f1141392b79e30692b5c693c06fb2772c1a68a22d449

    SHA512

    291296d42dd4e4561219636db5dd8027da5731656a6ec8e0eba5a0a2aae86049dd2ea6a75544c3d6ba2149b6c092e76a3674f9246e4ad6deccf8dd76e54de583

  • /data/user/0/com.bitlove.fetlife/lib-main/dso_lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.bitlove.fetlife/lib-main/dso_manifest
    MD5

    c06857e9ea338f3f3a24bb78f8fbdf6f

    SHA1

    c5a0a2529d2deb60fec041b4fbd722a2ebe31702

    SHA256

    957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

    SHA512

    29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

  • /data/user/0/com.bitlove.fetlife/lib-main/dso_state
    MD5

    55a54008ad1ba589aa210d2629c1df41

    SHA1

    bf8b4530d8d246dd74ac53a13471bba17941dff7

    SHA256

    4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

    SHA512

    7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

  • /data/user/0/com.bitlove.fetlife/no_backup/com.google.android.gms.appid-no-backup
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.bitlove.fetlife/shared_prefs/GTPlayerPurchases.xml
    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /data/user/0/com.bitlove.fetlife/shared_prefs/OneSignal.xml
    MD5

    ac34e44bf7da4fb61dbf02b78c423ad7

    SHA1

    0054dfbd03e9c45bdee723af1f94e5469a7f0970

    SHA256

    83c37c5f3307d3f3496ac0553010c3c1d033df607e7783631b4f188d215becc1

    SHA512

    4c65b7435dc3cf39fc9ae1aaee637553172114ff012540917e3366f7cf9e28ea2f7ea99e63ff5bbe8de4d169e0e66f7718c82664c2c99b8b9f53d956bcb3da53

  • /data/user/0/com.bitlove.fetlife/shared_prefs/OneSignal.xml
    MD5

    8fc13ec7f6cd6f710992f1363c5e133c

    SHA1

    fe2275e3204541a0b8b177a24f3cd767bddf345a

    SHA256

    7ec0d39933b8d0e446bb2464b9d6f66dd52e18de2daf9cf71258755d6372cb6e

    SHA512

    1a6b6899eedb99d2382ac4e81283f46ef40b9fdf57428d9edf3f154493907ecc7557cc1d396c7ef8a786d40537684d67ba09dc5e2e34c86397e80c2f46d80822

  • /data/user/0/com.bitlove.fetlife/shared_prefs/OneSignal.xml
    MD5

    e912b8386a09d96d8da7645bf1a83877

    SHA1

    e067eb32aaf220dafd4708b3c434e2baff6642eb

    SHA256

    a3d668c99e74bedbd51924638ca5a883df45c54db6bbcc3b791e26f2bb020aa2

    SHA512

    c4159535217ffece464836e95713f8fa01bbe9ccdc9477993eb2be41ffe9dae4a5fe2de0f19ef543671b7463f3e3957e223dabb094d4cdb3975e047f4eac6283

  • /data/user/0/com.bitlove.fetlife/shared_prefs/OneSignal.xml
    MD5

    aeb14be9b9b2ee2595391e0b2ad63978

    SHA1

    cba5aa06a0065264300873490f055aae79316c78

    SHA256

    3bb236c4d7e310bab24ac1c7a8cb7053029d083216cb2ef693260db39621fcef

    SHA512

    91ba19c978746ee718569f852679f8a201c748b47873d9a4018eb1a02149c58e8af41fa9405bd2d081b0b5318d18750e6f46d52832f7ecde641d8e8d068c61de

  • /data/user/0/com.bitlove.fetlife/shared_prefs/OneSignal.xml
    MD5

    bddea57f1abdc1b44462662e7c917129

    SHA1

    5ee808feb36494b6f919f74ccaca6904d8127f2b

    SHA256

    c11b8c95a8b3fe37e732ea85d1e7d24307291c8e0246dde2ed17a96211dbe296

    SHA512

    5c76aa20582eaf8472d02018700d35b61e641c2228bf8a395678868491bb73234c16d8b8661a23380225de83d61bef0f50d65612fb874681020726f3c91ac51b

  • /data/user/0/com.bitlove.fetlife/shared_prefs/OneSignal.xml
    MD5

    19d63db94b656f0c7b3f5b429005f4c2

    SHA1

    fde8479dbc7303d7d7e958f5ae2d0d82d1224eda

    SHA256

    411cf83d57659abdc5103dd9cf45694de0a4fbea30ea4747ff8c9c0041d5bec2

    SHA512

    3ee953148548c1e09ab01a33d7cf178a90669ab9b07b43ce7ea1ea249f39578239ecabe3ac1b84dee367f820ee1b6f8185209a383cb2fcfa3ebf1aaa8b09b934

  • /data/user/0/com.bitlove.fetlife/shared_prefs/OneSignal.xml
    MD5

    ceb7cc4b5db3c308c33e0d8c2ca149e6

    SHA1

    d85dc418184dbce61ef96852d5c612307e252d6f

    SHA256

    dca757f4450bcb321695490c61d49e10cf2e44d87ca9404d1988c62d2c21b70a

    SHA512

    79173f2ea0be7ee503844703b849e11059ec8ca016ddf8c8e3f9f8ac730de78c38c414ca9cfd640bc1bb1d8453bbdc11970628ec57a578d423e2f31ec773e5b6

  • /data/user/0/com.bitlove.fetlife/shared_prefs/TwitterAdvertisingInfoPreferences.xml
    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /data/user/0/com.bitlove.fetlife/shared_prefs/com.bitlove.fetlife_preferences.xml
    MD5

    26bf920942179614381888856f0645b6

    SHA1

    415caf11e2555accf3d5b74cb552159a12e301b8

    SHA256

    3e10b7f12050d70a033fde903e77c3beba60339716e28b7ce049e7ab8f59cc76

    SHA512

    8e37aff74adbbd4e71f75ae226093655f86b0009d6f3ce20c7b6022e6003d87af83c3db8d46aa41cb96c3142296731fa176cc66d8b1216252198128abcc7dd7e

  • /data/user/0/com.bitlove.fetlife/shared_prefs/com.bitlove.fetlife_preferences.xml
    MD5

    10658c4d884f9f9a7d47c85ca8db834d

    SHA1

    5e562faee6d66f55a47d007b7ef6d2e417b82db3

    SHA256

    bdf23fe486eb12e3ab20d87a831bd31066b16ff0fe72769ac6523160cddd82df

    SHA512

    144ff388b9f1bb828a2e5a04750292be734b93e4c2f745e3391402ac9fcd32a69d1d25c9cca0f351407a175c7a5a0b057ae439a6fb0c0eb24e884f7ee5059c36

  • /data/user/0/com.bitlove.fetlife/shared_prefs/com.crashlytics.prefs.xml
    MD5

    d19448cab44b75748935924d532ed5e8

    SHA1

    4ed68ddda12ea32ba36f64a40a167ad950843223

    SHA256

    5110c82434a9946e2ea44f603df6432bde6ced30b4e73e483f2314a1ba96d440

    SHA512

    0dff0b338c479f4bc4346ec4ca2752a579cfddd739fc6e712b3f5277b715b1f4471b9d66e9d53f9f13ba6f0a73ece00c03dc9b98b1fd72df4a3634afadbb529a

  • /data/user/0/com.bitlove.fetlife/shared_prefs/com.crashlytics.sdk.android:answers:settings.xml
    MD5

    7f72a0e25eafdeb4c7d2dc814d70fc89

    SHA1

    bd49e6008f67e11b8ce4d98a13d2e94a66cf33ae

    SHA256

    f5dfd176edc05ef7d7b5ab505ab4c3434cf0cda3053df8720fed53c2c4a28424

    SHA512

    696adfdd1d654fbd9ce3ef4004e11d4d9cddd256bcb6e4dadee1bee5bc308a66272ac6db39cf27494b98879a57858c7225496e6f78b54956e5eadafb89263ca2