Analysis
-
max time kernel
298106s -
max time network
50s -
platform
android_x64 -
resource
android-x64 -
submitted
04-08-2021 15:23
Static task
static1
Behavioral task
behavioral1
Sample
FetLife_3.0.3.apk
Resource
android-x64
General
-
Target
FetLife_3.0.3.apk
-
Size
8.6MB
-
MD5
8a7bfc31a9b571234f1ad29f90b8e833
-
SHA1
c6dbc29079aad49b8080d8ff744ddd78b29ff80b
-
SHA256
25a0cf3874a3a92e7d40d4e1476cc9ce60d0982f9f5f8bc77755b215932138ff
-
SHA512
b86c60a5c42c670f02aa3fe5d03426a00af3f1b9aa8a76952d3b2043b074e84ac80ad121534f5886b8926245e68d21eb545419c3c2cac71c63240f18c26a71c0
Malware Config
Signatures
-
Reads name of network operator 1 IoCs
Uses Android APIs to discover system information.
Processes:
com.bitlove.fetlifedescription ioc process Framework API call android.telephony.TelephonyManager.getNetworkOperatorName com.bitlove.fetlife -
Uses reflection 3 IoCs
Processes:
com.bitlove.fetlifedescription pid process Acesses field javax.security.auth.x500.X500Principal.thisX500Name 3578 com.bitlove.fetlife Acesses field javax.security.auth.x500.X500Principal.thisX500Name 3578 com.bitlove.fetlife Invokes method com.onesignal.OSSubscriptionChangedInternalObserver.changed 3578 com.bitlove.fetlife
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
MD5
df084b70e833569f421ab08f9b36fed5
SHA19e104aea82bbe3d2cdae8c88258600a7bb693640
SHA2564bb9f85535098840bce3aa6540541d7fa4b70fc143f62611eff6e43af146ece3
SHA51272d5316c0e65ddd78c53e019996fbc0d9ca54577a88f90bf11fdde297531231935b86525f8c7dee7336b55cbfae4f6a136b6f98283cbdea0a85de49783ad4162
-
MD5
5aba5c9086b6108d5648f37ce176f562
SHA16cff25a2fb155bfaa4252d3231b5083b69afa060
SHA256fc1ffa15dbc89dfc7fd232c5ee3fe55b630c397e95bdc249f125a759ceb1aa10
SHA512d3890af4ec2fd983f8c6707119f1e7951fa23a5475555624ed7aeed66a01702fdcc246f5ce4d533dfa611d5c9312a0e713f7d09d6881ddd54af9d8e995c5c759
-
/data/user/0/com.bitlove.fetlife/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/610AB10202A3-0001-0DFA-CB78BDED94E3BeginSession.cls_temp
MD57daf7b533c89585c76c252b699061021
SHA19ed28fda15bbbde34ddf224758c17a6fef530e01
SHA2568e15f46e24574d36bc40866abc8cc685611b76ff36ed97f3024655d963e29037
SHA5125051bef8cbe838adefa223bbce64eb4b1b987abeed9d42cbd537158f591df17db0f87ff9b9bac0bf0d5325fbe285fe0170ec1ad82761abe771fd4b5aaee60b79
-
/data/user/0/com.bitlove.fetlife/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/610AB10202A3-0001-0DFA-CB78BDED94E3BeginSession.json
MD5dfb0c42b3cf2c81a15fac6abac1a47a6
SHA1e7b012d383a9b105c68bc500c56ebba3fbef2beb
SHA2568d686dd888d5fd3f06171b3a7478d4a2d45743e3f219f8e7ab608c2a869fcab6
SHA5121c47969d5146d447dc22d909219c93232287192edc772a8c74ce0e706cf061b2c7a0a1973423aefe5b2314f7318476785b93c1c405dd5abfb3e1098f1b014243
-
/data/user/0/com.bitlove.fetlife/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/610AB10202A3-0001-0DFA-CB78BDED94E3SessionApp.cls_temp
MD5aa1c003eaabe320391709a4ff12b95b0
SHA14aa267e761d91e7afb0dc6a50bdee3a31a572010
SHA2562fc643b2e7784f93e479b04de74df23d7fc1a389620351c9ebc00d17b6df232b
SHA5120c76492a7946e9b8e1f2059e44b5dd447c0c94b6a2a839cc684c9e7610cca8a2c4f02475c233164184ba970d6f9a2ea395542ed06720a548a93a3b158c77e8cd
-
/data/user/0/com.bitlove.fetlife/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/610AB10202A3-0001-0DFA-CB78BDED94E3SessionApp.json
MD5416a283ce12eb31dd00dae50d8a59681
SHA1056f46650a4cbb6ee80b18b75857a23a38fc906c
SHA256fd4407760e4be677bd56413022719b68e509dfbb61336801dfed10bd680c71a4
SHA512ff07a6a2dbb7f6a7b8253a301b1c9e36c557cad1be33f687ae50ac2cc445929e22c9b08d171365aa116ab75294d9cb1290932678c91b9f1bc0acb7ac6dc02225
-
/data/user/0/com.bitlove.fetlife/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/610AB10202A3-0001-0DFA-CB78BDED94E3SessionDevice.cls_temp
MD59be9b171bf620a1c638e3511b90ca20c
SHA1b1fd9cf4600b45feaa4e49d441a643b8519d0517
SHA256fb9d65d85c5132e723222ae5dc3b930f0277c271834cfd70883e8504d6db1039
SHA512f43224c8a3e5a3404c6d714d2e6ee7b57127d91668f2b3e92b30a79ccb1cd10fbc9b5909e3abef11a9335849afda279049034987fb6219622ebaa228a9c072e2
-
/data/user/0/com.bitlove.fetlife/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/610AB10202A3-0001-0DFA-CB78BDED94E3SessionDevice.json
MD5b2a0046f7d73b154ac3ce50844f1ef62
SHA12991ad2dc70e61476568497b6052bc58eb321482
SHA256b5bc3fde5af7dbde12c75380d537c8546a012fbe264a2af1d1f742c0c2b0acce
SHA5123033ea7f802df5e7b14d7913ad9bcc15e182e19ed0e1d7cf79ea80a6c8e7c0fd0d5314a8111ce74eb286be6b7eea27c7e528f5ecf170ad95b0a87e111da73a90
-
/data/user/0/com.bitlove.fetlife/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/610AB10202A3-0001-0DFA-CB78BDED94E3SessionOS.cls_temp
MD52566d27ce8c28d8961f082c375d7535e
SHA192fe585b1a2c9c523d2fa1f65ab5c1b6a1a6edaf
SHA2565acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a
SHA5121c70679bbd25a57f9ac02083d5af0fe72b1417cf3070a195497f03d6f492e87b1ed3f570de7ea7c814c995a1530e32610d9570f31a480648f4062e8d3287be8f
-
/data/user/0/com.bitlove.fetlife/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/610AB10202A3-0001-0DFA-CB78BDED94E3SessionOS.json
MD55caea4b68c57072f7f52a5a41720566c
SHA14d9712f1702c7238949da43f7d8ae6efb233a666
SHA2563223857b618b924c2b0fbc7bfb373a1aacf300a7b5ab585e18fffcf19039f363
SHA512fe1455d21c521aeae3292bdcc386f6d2005dc253930c03e44dbcb972f96b849670d2aba039ea59e1a5ebc0350e6315151d17bcda55c161a62987d4bb01e91f9f
-
/data/user/0/com.bitlove.fetlife/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/initialization_marker
MD5d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.bitlove.fetlife/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
MD5620f0b67a91f7f74151bc5be745b7110
SHA11ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d
SHA256ad7facb2586fc6e966c004d7d1d16b024f5805ff7cb47c7a85dabd8b48892ca7
SHA5122d23913d3759ef01704a86b4bee3ac8a29002313ecc98a7424425a78170f219577822fd77e4ae96313547696ad7d5949b58e12d5063ef2ee063b595740a3a12d
-
/data/user/0/com.bitlove.fetlife/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
MD5620f0b67a91f7f74151bc5be745b7110
SHA11ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d
SHA256ad7facb2586fc6e966c004d7d1d16b024f5805ff7cb47c7a85dabd8b48892ca7
SHA5122d23913d3759ef01704a86b4bee3ac8a29002313ecc98a7424425a78170f219577822fd77e4ae96313547696ad7d5949b58e12d5063ef2ee063b595740a3a12d
-
/data/user/0/com.bitlove.fetlife/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_825ee63b-f2e9-4c89-a604-2f1a8b1df852_1628090626702.tap
MD5d0e74ab8dccca91c0ccd7125e588d5cd
SHA104bdadb7bd09681ea2d3f84210feff6549b6ab45
SHA25659a13aa892e3bdd2587c59e6337b5179ac1296970d10728c33fba365826a1864
SHA5125188dc8983291e44ee1fe0c187ac88a04164e31e4cbc065b2b384cef3235571308bc8395c9d35d6aa58a42145c958f640526a939e48bbf61552ca110e12c536e
-
MD5
bc06809e9f54747ccd70a93b750b55af
SHA1fa377e93a9e93128d0b81f3d54b1cbf4d1d43e2b
SHA25642b91bfc873802b87e83f1141392b79e30692b5c693c06fb2772c1a68a22d449
SHA512291296d42dd4e4561219636db5dd8027da5731656a6ec8e0eba5a0a2aae86049dd2ea6a75544c3d6ba2149b6c092e76a3674f9246e4ad6deccf8dd76e54de583
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
c06857e9ea338f3f3a24bb78f8fbdf6f
SHA1c5a0a2529d2deb60fec041b4fbd722a2ebe31702
SHA256957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027
SHA51229f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1
-
MD5
55a54008ad1ba589aa210d2629c1df41
SHA1bf8b4530d8d246dd74ac53a13471bba17941dff7
SHA2564bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a
SHA5127b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339
-
MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
MD5
9781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
MD5
ac34e44bf7da4fb61dbf02b78c423ad7
SHA10054dfbd03e9c45bdee723af1f94e5469a7f0970
SHA25683c37c5f3307d3f3496ac0553010c3c1d033df607e7783631b4f188d215becc1
SHA5124c65b7435dc3cf39fc9ae1aaee637553172114ff012540917e3366f7cf9e28ea2f7ea99e63ff5bbe8de4d169e0e66f7718c82664c2c99b8b9f53d956bcb3da53
-
MD5
8fc13ec7f6cd6f710992f1363c5e133c
SHA1fe2275e3204541a0b8b177a24f3cd767bddf345a
SHA2567ec0d39933b8d0e446bb2464b9d6f66dd52e18de2daf9cf71258755d6372cb6e
SHA5121a6b6899eedb99d2382ac4e81283f46ef40b9fdf57428d9edf3f154493907ecc7557cc1d396c7ef8a786d40537684d67ba09dc5e2e34c86397e80c2f46d80822
-
MD5
e912b8386a09d96d8da7645bf1a83877
SHA1e067eb32aaf220dafd4708b3c434e2baff6642eb
SHA256a3d668c99e74bedbd51924638ca5a883df45c54db6bbcc3b791e26f2bb020aa2
SHA512c4159535217ffece464836e95713f8fa01bbe9ccdc9477993eb2be41ffe9dae4a5fe2de0f19ef543671b7463f3e3957e223dabb094d4cdb3975e047f4eac6283
-
MD5
aeb14be9b9b2ee2595391e0b2ad63978
SHA1cba5aa06a0065264300873490f055aae79316c78
SHA2563bb236c4d7e310bab24ac1c7a8cb7053029d083216cb2ef693260db39621fcef
SHA51291ba19c978746ee718569f852679f8a201c748b47873d9a4018eb1a02149c58e8af41fa9405bd2d081b0b5318d18750e6f46d52832f7ecde641d8e8d068c61de
-
MD5
bddea57f1abdc1b44462662e7c917129
SHA15ee808feb36494b6f919f74ccaca6904d8127f2b
SHA256c11b8c95a8b3fe37e732ea85d1e7d24307291c8e0246dde2ed17a96211dbe296
SHA5125c76aa20582eaf8472d02018700d35b61e641c2228bf8a395678868491bb73234c16d8b8661a23380225de83d61bef0f50d65612fb874681020726f3c91ac51b
-
MD5
19d63db94b656f0c7b3f5b429005f4c2
SHA1fde8479dbc7303d7d7e958f5ae2d0d82d1224eda
SHA256411cf83d57659abdc5103dd9cf45694de0a4fbea30ea4747ff8c9c0041d5bec2
SHA5123ee953148548c1e09ab01a33d7cf178a90669ab9b07b43ce7ea1ea249f39578239ecabe3ac1b84dee367f820ee1b6f8185209a383cb2fcfa3ebf1aaa8b09b934
-
MD5
ceb7cc4b5db3c308c33e0d8c2ca149e6
SHA1d85dc418184dbce61ef96852d5c612307e252d6f
SHA256dca757f4450bcb321695490c61d49e10cf2e44d87ca9404d1988c62d2c21b70a
SHA51279173f2ea0be7ee503844703b849e11059ec8ca016ddf8c8e3f9f8ac730de78c38c414ca9cfd640bc1bb1d8453bbdc11970628ec57a578d423e2f31ec773e5b6
-
MD5
9781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
MD5
26bf920942179614381888856f0645b6
SHA1415caf11e2555accf3d5b74cb552159a12e301b8
SHA2563e10b7f12050d70a033fde903e77c3beba60339716e28b7ce049e7ab8f59cc76
SHA5128e37aff74adbbd4e71f75ae226093655f86b0009d6f3ce20c7b6022e6003d87af83c3db8d46aa41cb96c3142296731fa176cc66d8b1216252198128abcc7dd7e
-
MD5
10658c4d884f9f9a7d47c85ca8db834d
SHA15e562faee6d66f55a47d007b7ef6d2e417b82db3
SHA256bdf23fe486eb12e3ab20d87a831bd31066b16ff0fe72769ac6523160cddd82df
SHA512144ff388b9f1bb828a2e5a04750292be734b93e4c2f745e3391402ac9fcd32a69d1d25c9cca0f351407a175c7a5a0b057ae439a6fb0c0eb24e884f7ee5059c36
-
MD5
d19448cab44b75748935924d532ed5e8
SHA14ed68ddda12ea32ba36f64a40a167ad950843223
SHA2565110c82434a9946e2ea44f603df6432bde6ced30b4e73e483f2314a1ba96d440
SHA5120dff0b338c479f4bc4346ec4ca2752a579cfddd739fc6e712b3f5277b715b1f4471b9d66e9d53f9f13ba6f0a73ece00c03dc9b98b1fd72df4a3634afadbb529a
-
MD5
7f72a0e25eafdeb4c7d2dc814d70fc89
SHA1bd49e6008f67e11b8ce4d98a13d2e94a66cf33ae
SHA256f5dfd176edc05ef7d7b5ab505ab4c3434cf0cda3053df8720fed53c2c4a28424
SHA512696adfdd1d654fbd9ce3ef4004e11d4d9cddd256bcb6e4dadee1bee5bc308a66272ac6db39cf27494b98879a57858c7225496e6f78b54956e5eadafb89263ca2