Analysis

  • max time kernel
    3816543s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    20-05-2022 21:57

General

  • Target

    692dd27eb3278a89392742badc7688cade1c3a5e7d66f17e15cd3ef4daaa33b3.apk

  • Size

    5.9MB

  • MD5

    74f3be89bda9b2b32cb9adbb149bc067

  • SHA1

    85f9d8b3b013740713ef741106e6bdbbc75a13a9

  • SHA256

    692dd27eb3278a89392742badc7688cade1c3a5e7d66f17e15cd3ef4daaa33b3

  • SHA512

    ebd62e4239a38c79290932d8d27a5d0404a8fd3bd5e4944c4cebd77cba278c406991ed185cfc242bf98d020ae145464f36560d5c3703d782b27f4e107e599e16

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • br.com.oneside.deli.acai
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:6176
  • br.com.oneside.deli.acai:Metrica
    1⤵
      PID:6225

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/br.com.oneside.deli.acai/files/ZPkFS.log

      Filesize

      90B

      MD5

      5065ee247e9ee7ae3b23cffd4e751af7

      SHA1

      7c3475a25995090addb3cced72819678682259f0

      SHA256

      0858f413774f6fb4e81c4056241a2f58eb8e85ab033198627ef4a7346689fb00

      SHA512

      bc3a7ea4087e14b45506dd6504f3d95b279f7cf81c0b211ddc0389152dd7a10cd128882c289597089f213bbeca555a17dcdcaf8173336d4223e23cb505149ffa

    • /data/user/0/br.com.oneside.deli.acai/files/credentials.dat

      Filesize

      234B

      MD5

      75cda8da51501c52d462310e405689ce

      SHA1

      a73b2db16a527234605a735022e4e8f15d3c76de

      SHA256

      64b98f8da366763529a25751c2a9319476346710714df39197aed5b3d01d988c

      SHA512

      3ca54f15d47d7aca63a75d9ffeee14da9290aadeaf25f3504effec06163ef1e78126ef5a206f8859234bb2c3415bb61abde6667c6d3134fefc43116299d20cbe

    • /data/user/0/br.com.oneside.deli.acai/files/metrica_client_data.db.lock

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/br.com.oneside.deli.acai/no_backup/credentials.dat

      Filesize

      234B

      MD5

      75cda8da51501c52d462310e405689ce

      SHA1

      a73b2db16a527234605a735022e4e8f15d3c76de

      SHA256

      64b98f8da366763529a25751c2a9319476346710714df39197aed5b3d01d988c

      SHA512

      3ca54f15d47d7aca63a75d9ffeee14da9290aadeaf25f3504effec06163ef1e78126ef5a206f8859234bb2c3415bb61abde6667c6d3134fefc43116299d20cbe

    • /data/user/0/br.com.oneside.deli.acai/no_backup/db_metrica_br.com.oneside.deli.acai

      Filesize

      1.2MB

      MD5

      f66741c0027972bbbd0b02000adb5236

      SHA1

      3294519bfd5741933cc21810f7ba98488556de6a

      SHA256

      0ad193aacacfbceef1cdfafdca020b32adf68b7f2841bd9b97887389c718a01b

      SHA512

      6d23d34079e9ce6ad9265f88653c80b78a4f456bff2a78b2c9221948c7097679d5f1a7a9cd84056a5f3f787567ed96bc72dcd42d45694dcad908ca62477619e5

    • /data/user/0/br.com.oneside.deli.acai/no_backup/db_metrica_br.com.oneside.deli.acai-journal

      Filesize

      1KB

      MD5

      b490a40202cf730300d7dd74eef230e8

      SHA1

      f4995c0bc192d7c2e37ec61c75f27c16513890eb

      SHA256

      7626f23f03636d078a7effd9763418708c65cb1fae19b2854ea3d0a503fcbee5

      SHA512

      bb9d1278ceb2fed8d5325d17e1d266ddb93d80b86e3c01e529c768f554d1587ad110466f7d4f3dd5a339262b136c88d0269c403ba1c682885d7869308f87a57a

    • /data/user/0/br.com.oneside.deli.acai/no_backup/db_metrica_br.com.oneside.deli.acai_20799a27-fa80-4b36-b2db-0f8141f24180

      Filesize

      400KB

      MD5

      e34251e836deb219af2cc3fbacabf7ea

      SHA1

      7bc79d84c6889daa9c27f9522180346a81845ccf

      SHA256

      50513d8701c113a98865a2717235a2a359b66af50fe53764d7adc7e4b0a029e3

      SHA512

      1f5dd946ddc3372d8a7ff5155640a4c4b2052e3e1ce128e5f4cd68f4282db5b1aeeacd624ec9b6c524a95fb461246f5bdf46eef3ecc0eff4ae14c894d4927d3f

    • /data/user/0/br.com.oneside.deli.acai/no_backup/db_metrica_br.com.oneside.deli.acai_20799a27-fa80-4b36-b2db-0f8141f24180-journal

      Filesize

      1KB

      MD5

      873ae0c1332daf582a11354363383ed0

      SHA1

      fdce505ef06c5839cb6c8d912fc5d02882cdc8cc

      SHA256

      c75542ea8e3d777150cf1d088f3aef02d520b0daf90d4fe11be03ec8fd339af0

      SHA512

      04d71116c90c166e6119d7d600e135bf1dd5cf7a64f3d1dca589bfe9a5a137ef5f385b497fff2a00c5e82ee7f6083de21d8d20e6749ce707de6e00356f13d040

    • /data/user/0/br.com.oneside.deli.acai/no_backup/metrica_client_data.db

      Filesize

      72KB

      MD5

      4adf3ead8dc343a313cbcf4b5760a572

      SHA1

      3047cdcc36e21cb521c1203cb4c4bbe44fd39f59

      SHA256

      07b3ed808e156d9ad0c8470db62c1ca4e8f279d493f4a6c7f8fb3f953a22f0a4

      SHA512

      8027fb748507c9ad725c572e1ad4fe04226c0f56f42c99603df07f9ca958e924423431a8e9aa4940abc69d7f97f763f8d67de3dcfb186b036534a3cfbc616fc6

    • /data/user/0/br.com.oneside.deli.acai/no_backup/metrica_client_data.db-journal

      Filesize

      1KB

      MD5

      a7f9236dd548a291aa60bfd17dd6fdcf

      SHA1

      d50b6aa4fb190282dba241588b03edae85b17166

      SHA256

      7e452ba576681de615a28a88cb94434cc543a3b2e317a0546e23b1d1bbf416db

      SHA512

      567134d2cb75b5d0e0b3a5ccebebc896d4b0387daa9d61ec54bf5e2765c3cc1beddf28f039c4d78cbb51ce9b6361e5c2669a3f9b8c0e40e4b6752ee79933421c

    • /data/user/0/br.com.oneside.deli.acai/no_backup/metrica_data.db

      Filesize

      1.2MB

      MD5

      78183a793cf17c2d92eb28e1dc2d57ef

      SHA1

      012e10ad73dc95e69ed488db2dea275769033b12

      SHA256

      f9053e656e5baf3924168d5195be3c1edfbe2efa9aa3b55ae16852766f4b1910

      SHA512

      1dbc4765ccf43dc16144916dd41c2a969cb5a12522000b2f0feab23cbccf4af59c069162f8e53648ed386584091e37bfc4f2d32a3b6c135279ad9a999b9c7d4a

    • /data/user/0/br.com.oneside.deli.acai/no_backup/metrica_data.db-journal

      Filesize

      1KB

      MD5

      3ea28755accf3829bbc82efde52a9a98

      SHA1

      a8210d0aba221b9bc740c0da2c39e4aba7dc292a

      SHA256

      88d0f1a288a588a58f07d052db7d380773265df11af72a88ff38bcdc916498fe

      SHA512

      4c04793e03b6e71bd4450731d110f044f4d29cf84e590a4d146998123d39f01ae728a761737bc3e9dc4464917daa2f331e5b8a784a147de3a8117b24df8d2ecf

    • /data/user/0/br.com.oneside.deli.acai/shared_prefs/br.com.oneside.deli.acai_migrationpreferences.xml

      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /data/user/0/br.com.oneside.deli.acai/shared_prefs/yteSlT7daYsGlbVGqXfR.xml

      Filesize

      2KB

      MD5

      52d32ab73bdba7357f1254573a6b3d27

      SHA1

      c52e4da69a91713416928aa73adaa2df696c5660

      SHA256

      12213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0

      SHA512

      17adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d

    • /data/user/0/br.com.oneside.deli.acai/shared_prefs/yteSlT7daYsGlbVGqXfR.xml

      Filesize

      4KB

      MD5

      7ce76fa54817dbcd4a6b3b18de351c4a

      SHA1

      a7d20daccc0bb358e28660b1ef036479a728a852

      SHA256

      6e353b8766f28d9cb1e5a5484ac8438c162a82db410611132a5aec91bc118276

      SHA512

      b82735a38e3e06802e94ff6c12e84a0a93a592fb5ec264cebc3739e9786e7f188e40a962ef75f1c58f6c1a7fd668698b04320af4968a29641b5d6c70eb9946a3