Analysis

  • max time kernel
    3821121s
  • max time network
    162s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    20-05-2022 22:13

General

  • Target

    3542ec639a8ce511126592a7cf8788e5f66e4cabdeb25a4379ce3dd2350bbd00.apk

  • Size

    5.9MB

  • MD5

    4392c498c115aaf2171457658d4aabba

  • SHA1

    a8a2226b9a3cf8298d5feeb0cc5bbd241ab46202

  • SHA256

    3542ec639a8ce511126592a7cf8788e5f66e4cabdeb25a4379ce3dd2350bbd00

  • SHA512

    4547b8e49b7eef79bb779f300234a45ba368305cb92f79094ad7ccbd861dc63ce3d51566aae220c3a4eb8f74cfb836ce57130282219bdc539820a5efd739442a

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • it.xmenu.putapario
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5057
  • it.xmenu.putapario:Metrica
    1⤵
      PID:5109

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/it.xmenu.putapario/files/credentials.dat

      Filesize

      233B

      MD5

      e9e5586750e8e1ad89a2dec29776bdf4

      SHA1

      8d619f6d816b57a9b8c04e27cd79fd58ae598f5a

      SHA256

      16ee16d12d75b99a8691bf20e7f12cc8e3c95783631d4c69259ceee935f249b3

      SHA512

      bd9b5bb14db2e934a388e241d501f61f9de95f686142ab1efeacb7982495552dd276c53737c93fe21e439aafdf0e1f5dd64c785b65d15c322808eacadb70b2e8

    • /data/user/0/it.xmenu.putapario/files/metrica_client_data.db.lock

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/it.xmenu.putapario/no_backup/credentials.dat

      Filesize

      233B

      MD5

      e9e5586750e8e1ad89a2dec29776bdf4

      SHA1

      8d619f6d816b57a9b8c04e27cd79fd58ae598f5a

      SHA256

      16ee16d12d75b99a8691bf20e7f12cc8e3c95783631d4c69259ceee935f249b3

      SHA512

      bd9b5bb14db2e934a388e241d501f61f9de95f686142ab1efeacb7982495552dd276c53737c93fe21e439aafdf0e1f5dd64c785b65d15c322808eacadb70b2e8

    • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario

      Filesize

      40KB

      MD5

      8850e0915b7d4339f09cd488c7935415

      SHA1

      55468a8e6a2635af017e3e65d0e9673d5df61c6a

      SHA256

      2bc15d97f347331a78299cea3fec4c70a59b1de738a223eaf1051c5e31ab8974

      SHA512

      42d8390d600e3d9feb4ab8073cdb0f21f335be0a83bb148f9978715840ffd89bc4a47bacd1e75e3ba47bb13c0ae1d9a10629733badc99f5958110647aa1df521

    • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario-journal

      Filesize

      524B

      MD5

      ee5b6baf2965c723b32faac2b8dc7239

      SHA1

      400d2f978abbd8db1dba12971a33d30e095c7cff

      SHA256

      d3f3a5c860706c05cf502bd459422c2bea8c78cf546d10914c510d482f771c41

      SHA512

      68910777f5c61df0359eae3bf6341b5c97f26d23c40e2d8c8a7e75d69ed9fd91ee68b850bd830b4de49ffa58ea6398e91aeaa89e1284b0272abd876959e1fd3a

    • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario-wal

      Filesize

      430KB

      MD5

      624e9722f91ae4a84d5b3e7a5000710d

      SHA1

      c07206cf37423ef71193582a14cbcb843f26612e

      SHA256

      4f00c8fe6f226e56336b17cc08d1b63703b40e9cf99acc8522229798e3a0424e

      SHA512

      94f5129b1bb3e58f9af1b655705cb58eb73c8921836ab6827dce336a50e404afc1a85f79c4109993f12c2d7868e251d4c3b9d3752c774f89ac492e1e4dcf76f0

    • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario_20799a27-fa80-4b36-b2db-0f8141f24180

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario_20799a27-fa80-4b36-b2db-0f8141f24180-journal

      Filesize

      524B

      MD5

      217b9157f677cdb49413308d25c56a3d

      SHA1

      b0b7f3b781c7f52a103adb2b7b651e3d18f8350a

      SHA256

      3aa41afd5dfa1333381cf3d27c0f23541793e065c038e355aa87bc4f4d51434b

      SHA512

      58f84c3dd8172e2c9dbf130e61ef10ab66260b30004f0e90bc8133cc331e0a25a784c902a99c96f33007dc0a9b61387e73fc16e81796fee24c7b8e987e106a1c

    • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario_20799a27-fa80-4b36-b2db-0f8141f24180-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario_20799a27-fa80-4b36-b2db-0f8141f24180-wal

      Filesize

      148KB

      MD5

      2b4cbf9a7b1d717bc8618415c75949ae

      SHA1

      f0704e48ee66abf0916368db04d58e35e9adc66f

      SHA256

      61b511c4ef884d96ab5db50dd49dc0f663c9ed51c1f0044c6fc02b6c4a9e2da8

      SHA512

      08e7e801c73699efb55ab72d789da395069b539031db3d950d715215a20c88e81ac129ea4fc25a49bf8c4c298f0511c88192a5e935e870855dfab90b1694d1ed

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db

      Filesize

      24KB

      MD5

      68eb592ff94b07e483f6e8a4b6ec8a71

      SHA1

      e7e7aff857255a76b29934abd0ee0d93846b835b

      SHA256

      53f9f0ce9da296cc00a2c87813a5db11e29f08370603f65a52c474153f8941e7

      SHA512

      dbc98de0593700286005d7bb23a642df1112df7786adf9f730b3740aeae22df4e64d6987d310a8297d12657c30b18cbb277108345320c6047638b360461d43ad

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-journal

      Filesize

      524B

      MD5

      0fb87aa9c21abd1a7925574e93c5ec94

      SHA1

      558c98e177851cc0af21019bac80839e485ace0b

      SHA256

      b38ee7b6204a8c59d248269e6ed5fb66ad9d6b72c205fb79cd0dc1caf7214186

      SHA512

      d0e829889406cc3768dd715340abbfd11797a70cbc81566fa5efef778f9e60553c568a2c9db9f1f48bf023e32f772a447bdfd233f47059a5cdf0194f8a91e345

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-wal

      Filesize

      8KB

      MD5

      e714dd3074cd90de2b38d9d9eb911a6a

      SHA1

      5426abff4b65e17ae0dd3af5b156f02e3325cc65

      SHA256

      6d66a162f2bff626225bbdb41650effdc12288dacd92ed2116a1054aa8dda45d

      SHA512

      9473610b912734dc2d89d45d49a96c170256c18373ad9e17e9888e7d3f77b6881ed29cbe2cd333917cf8f3ba8abccc1801f80f841a8b72055e5f2fb3aa13a9e6

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-wal

      Filesize

      8KB

      MD5

      e91eea05c9684f747b46dfa030835779

      SHA1

      6ce3e2cb3d6e8d41b2db7982dad0c492a5b9559e

      SHA256

      997f36deb4a4049358db201db99b9c62ac5708641c555cb6a1272804b3d4342f

      SHA512

      d0589b1e0eff3a67081bef577b9cd5f4eb7e29742a59ebb365903ad1dc92f6143d79cf88501f59017363d1b075a2fb6dcf51882c4860e0dc554f81d6a8b3cd66

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-wal

      Filesize

      8KB

      MD5

      96816873b13d133bb8454bb87a3e5d3e

      SHA1

      0e13afa30c0d745aa661e589019a185907a36064

      SHA256

      def8c1a20584cff47603e100387db2f31bde45de3555d774d31cc6d790bd23aa

      SHA512

      3d957e390fce2e6ba41100071b2afada5b3b71931bc9dbe21df90308e74b7af28feb9dacf424fd4a5806a0bcaadfe19632ec81749127ef07fee5c56a8c94bc63

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-wal

      Filesize

      32KB

      MD5

      bee081b1df6f21ec6580d79c98450833

      SHA1

      ac56886c06fc60734d399698c21934b7ac0b019b

      SHA256

      1168e4525b06ac1b2ce0b9542a81e178c9cf475ece1d83a3a2cd466a539c3c7a

      SHA512

      2c15c0ddc48626f71c48bd3cdcbbec63287009dad843665ba807b92586fb7919a3f91c760228aecf0ada2f3e905eba381e0cd8f468972f3cd508ca6b33325346

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-wal

      Filesize

      8KB

      MD5

      09b8ed3823318351b630d77de926324b

      SHA1

      9112a0024c12fbaa7911e33628026850ce07c347

      SHA256

      8d8e8e9ac13605c79cb9f88a2ca49fbf384e3a0b39e8d52aed82645bd5a32bb5

      SHA512

      c72c545b5bc490e90cb9b67e12dd1d12cff438231c14bd9cdbd101c1bbbfb8639d3a4cd208567608a2e11ed9621c532d4e1632b6f25e53d9334f880509f214b5

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-wal

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-wal

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-wal

      Filesize

      8KB

      MD5

      4f9f86a1c99086f54df0af231e720581

      SHA1

      f07a6bf47e40ace508929d2c0c2882520eecd438

      SHA256

      1bbbc1a802979c7673bef18755314b7f0f57f68c40b0df4d319e056cf7a761a5

      SHA512

      21478217afc1dce6ec5e5348a93481d3f162a752d6d7bebb4c959ac09135815d565db670fb85865830a436dca2ec701ee12061533f53f9d36b5d7637bba5681c

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_data.db

      Filesize

      48KB

      MD5

      981a6661b481500be401804e72586935

      SHA1

      c1313f67f6f47260ce078ac5e23efea244963a50

      SHA256

      837c4d6a4f89e321c9789faebad1cd5af6b8a01ce14e9c5d8ee6420c8a30da13

      SHA512

      88d7e2cb7f5bbebd21cb838a5f004e65ad576b3198227af2f8f5cbcfaff39beffeecd04e7ae5c985f314961c7d11c816280226667db28e3619ec11fc065d64f4

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_data.db-journal

      Filesize

      524B

      MD5

      55bf484900e995bfee3ef75d0000837c

      SHA1

      c2bfc8786f610d70fc5c96fada11643a7a64d8cb

      SHA256

      bf18f67fc7824a96e888f6153575f59a8c23df67855d634e44001b63238c84a6

      SHA512

      3e524e6f98e046a73864a54fc545b48fa23e0c74c9e27344d1626292a7f89a2dd87e35909d5e22de3043644bb9022d9c489685e57e4817f96babff428f954390

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_data.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_data.db-wal

      Filesize

      438KB

      MD5

      43548b1922d6da19434ea73d845dab21

      SHA1

      b66620785f2e858c0a515de05d39f21c691d6073

      SHA256

      5edf61b884dcb35b852f1a265ff7e9bb211d17b60774cffa73e67460b037d2fe

      SHA512

      e05469708e6f8df8de41a900cc81839c963e76e70dea87c71e3d23e8e8769d22e5cdf9774769e67d404b6c664c343572d3a36a3ff12e916919c5e6a7bda7eaa8

    • /data/user/0/it.xmenu.putapario/shared_prefs/it.xmenu.putapario_migrationpreferences.xml

      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /data/user/0/it.xmenu.putapario/shared_prefs/yteSlT7daYsGlbVGqXfR.xml

      Filesize

      2KB

      MD5

      52d32ab73bdba7357f1254573a6b3d27

      SHA1

      c52e4da69a91713416928aa73adaa2df696c5660

      SHA256

      12213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0

      SHA512

      17adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d

    • /data/user/0/it.xmenu.putapario/shared_prefs/yteSlT7daYsGlbVGqXfR.xml

      Filesize

      4KB

      MD5

      7ce76fa54817dbcd4a6b3b18de351c4a

      SHA1

      a7d20daccc0bb358e28660b1ef036479a728a852

      SHA256

      6e353b8766f28d9cb1e5a5484ac8438c162a82db410611132a5aec91bc118276

      SHA512

      b82735a38e3e06802e94ff6c12e84a0a93a592fb5ec264cebc3739e9786e7f188e40a962ef75f1c58f6c1a7fd668698b04320af4968a29641b5d6c70eb9946a3