Analysis

  • max time kernel
    3817568s
  • max time network
    165s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    20-05-2022 22:13

General

  • Target

    3542ec639a8ce511126592a7cf8788e5f66e4cabdeb25a4379ce3dd2350bbd00.apk

  • Size

    5.9MB

  • MD5

    4392c498c115aaf2171457658d4aabba

  • SHA1

    a8a2226b9a3cf8298d5feeb0cc5bbd241ab46202

  • SHA256

    3542ec639a8ce511126592a7cf8788e5f66e4cabdeb25a4379ce3dd2350bbd00

  • SHA512

    4547b8e49b7eef79bb779f300234a45ba368305cb92f79094ad7ccbd861dc63ce3d51566aae220c3a4eb8f74cfb836ce57130282219bdc539820a5efd739442a

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • it.xmenu.putapario
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:6084
  • it.xmenu.putapario:Metrica
    1⤵
      PID:6139

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/it.xmenu.putapario/files/ZPkFS.log

      Filesize

      90B

      MD5

      0079a6df71440ce827da61ffeeade57a

      SHA1

      bde5b7062435920832c83c87c1171546efe3cb9c

      SHA256

      3b2e9e51ed24c33c84ac094410451b06d8ead1b3b3f853d9d3aafc69763f5dd4

      SHA512

      5bbde27937d72ecaa44bacc7b0665fc813b9ac6fe396a88b5a40e5c46ef1101aa0c8e06da67ad10ec8f10e6f27a505562eb323bd29403d1079dbfd0fa0a9034a

    • /data/user/0/it.xmenu.putapario/files/credentials.dat

      Filesize

      234B

      MD5

      5ba0f7634e3b635c4688c8804ee8c2dc

      SHA1

      5963d13dda31f2b06f1ef349e93bb822b864e1e0

      SHA256

      64e7ad2ef205a8ad652ea5f9bff2d740f6a4885ed8f9b3fb3e888ede7ed863be

      SHA512

      9450c1f8604da82f331723a6ae5d1c85c69445344a888ee6a5c363a95a077c18e70dda78a448de637a8928f32d03dc8e79197039970cc14bf0f356862066dab8

    • /data/user/0/it.xmenu.putapario/files/metrica_client_data.db.lock

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/it.xmenu.putapario/no_backup/credentials.dat

      Filesize

      234B

      MD5

      5ba0f7634e3b635c4688c8804ee8c2dc

      SHA1

      5963d13dda31f2b06f1ef349e93bb822b864e1e0

      SHA256

      64e7ad2ef205a8ad652ea5f9bff2d740f6a4885ed8f9b3fb3e888ede7ed863be

      SHA512

      9450c1f8604da82f331723a6ae5d1c85c69445344a888ee6a5c363a95a077c18e70dda78a448de637a8928f32d03dc8e79197039970cc14bf0f356862066dab8

    • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario

      Filesize

      1.2MB

      MD5

      e40e102a7c1b4c57ca05d107a1377c70

      SHA1

      2311c774077eeee52b3234211ad76464e3a78a6b

      SHA256

      ef96fdc69a718d3b8c3d7645f547eca0cf2db24e14ce50b39bcab4c524898bc9

      SHA512

      e33274b0d8dbbe141b462a3ff4fbb433e38cc3b5fff2fa1416d7e768312a69b4caa0081585f8ef3eef0b4457d150ed8fcc792c551e1171dd1daae8e08ea3466f

    • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario-journal

      Filesize

      1KB

      MD5

      01ab957e6a2ce3b3f140810e02c84f7c

      SHA1

      04474f9954934b3d561dacc7cb32d5439f53e86f

      SHA256

      da8766539f285ba6cab47be319829b698f9703f20b9eb0f6d0ed0400391af2c8

      SHA512

      b35088360788ec5b1a4bf4845f7d1019419691e21a280ba5cae1455169c3b2785ec13b8568707227b1e05f513eeb0ad29c23ba2a8e4ed8b7b723598a7cccb867

    • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario_20799a27-fa80-4b36-b2db-0f8141f24180

      Filesize

      400KB

      MD5

      0e2d59ea5de9141d83e38412a1de3936

      SHA1

      5e63f649997a4829f1b83e364a970d7e0dfdae2b

      SHA256

      c76a5791322589b208a459a5c32c52249e47f3c97e8f87c2ed5e6d946428ea9c

      SHA512

      d2c9ac087347bb02a5cae124ce0fab8f25bc2ba2ff3118a7b06ecfb72122f1d673e8e41c01f9f6cdf3db45c3cd2537c601a2e134ac657a0bb0714b30232d2b84

    • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario_20799a27-fa80-4b36-b2db-0f8141f24180-journal

      Filesize

      1KB

      MD5

      869d45bbafb3f6ffe452faf0d16396bc

      SHA1

      28941eae6291e3a3ed41f560e5b60b79965c2a02

      SHA256

      bad120b96a431225cae3f105cada845e2bef503dcb349fe55fc7249016bd7bc9

      SHA512

      16d2c18d7d4576ef7a97f656bac98770b0eabbd9445e3912ca7d991cef8617a27a904a7f063e3b98d307312b0dc1d9a493c16a1320a1fb88cc3d999300cf9868

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db

      Filesize

      72KB

      MD5

      4adf3ead8dc343a313cbcf4b5760a572

      SHA1

      3047cdcc36e21cb521c1203cb4c4bbe44fd39f59

      SHA256

      07b3ed808e156d9ad0c8470db62c1ca4e8f279d493f4a6c7f8fb3f953a22f0a4

      SHA512

      8027fb748507c9ad725c572e1ad4fe04226c0f56f42c99603df07f9ca958e924423431a8e9aa4940abc69d7f97f763f8d67de3dcfb186b036534a3cfbc616fc6

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-journal

      Filesize

      1KB

      MD5

      dead1a3c055ea15447886eb2ecc2a9a1

      SHA1

      c435e1d4a027e6cbec8d8014bd18d4a5d1655c81

      SHA256

      b8bc4f1247f2f525ded306d4cb546f374b8c24a3b17c0eb627394f683c5602c8

      SHA512

      5d9ad2fe8bcca19e0f7b70edc5e54794d4621d720cf2cf688e69080b3f251e8e353e786160ee2a42f1604ca46a8fefa49097cb9477ecbdeae28a5e766763f94d

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_data.db

      Filesize

      1.2MB

      MD5

      a126901cb5bf2bae9c8689cdca5523ff

      SHA1

      5f2521fd549bcb3a541caaf6a72a72e0e1b63f98

      SHA256

      58a75b9c7446308a1aa4b99f4f7f5a4502e6a3b8cf129bf177f0319331370605

      SHA512

      1f75465dfa17ebf7bd5f7742558375c47d4dfc6db2991074f38f0ff82b50ba5fb8133828e05df9f21dd68370e94e254ea42bd2f8bdb7aa90bc2487b93ca3ef0f

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_data.db-journal

      Filesize

      1KB

      MD5

      f1f2e97b74009d5979ec7d983d6fa39f

      SHA1

      0cf1f92f3d8c5eb63e3b1409729c1ad955f01fa2

      SHA256

      0857592a0bcfa20a836e3624be768427c7df85742be3212be790a6ba200aae1f

      SHA512

      d7ef28fdb8db0f48449d07cf07df3b8d8b3076aefb8ca2a191abaa8b6c9ed1e4476471024db1bd989e4def1e6c439b9cda4f543adf33962b9e65d88d54cbc050

    • /data/user/0/it.xmenu.putapario/shared_prefs/it.xmenu.putapario_migrationpreferences.xml

      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /data/user/0/it.xmenu.putapario/shared_prefs/yteSlT7daYsGlbVGqXfR.xml

      Filesize

      2KB

      MD5

      52d32ab73bdba7357f1254573a6b3d27

      SHA1

      c52e4da69a91713416928aa73adaa2df696c5660

      SHA256

      12213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0

      SHA512

      17adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d

    • /data/user/0/it.xmenu.putapario/shared_prefs/yteSlT7daYsGlbVGqXfR.xml

      Filesize

      4KB

      MD5

      7ce76fa54817dbcd4a6b3b18de351c4a

      SHA1

      a7d20daccc0bb358e28660b1ef036479a728a852

      SHA256

      6e353b8766f28d9cb1e5a5484ac8438c162a82db410611132a5aec91bc118276

      SHA512

      b82735a38e3e06802e94ff6c12e84a0a93a592fb5ec264cebc3739e9786e7f188e40a962ef75f1c58f6c1a7fd668698b04320af4968a29641b5d6c70eb9946a3