Analysis

  • max time kernel
    3816546s
  • max time network
    168s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220310-en
  • submitted
    20-05-2022 21:57

General

  • Target

    692dd27eb3278a89392742badc7688cade1c3a5e7d66f17e15cd3ef4daaa33b3.apk

  • Size

    5.9MB

  • MD5

    74f3be89bda9b2b32cb9adbb149bc067

  • SHA1

    85f9d8b3b013740713ef741106e6bdbbc75a13a9

  • SHA256

    692dd27eb3278a89392742badc7688cade1c3a5e7d66f17e15cd3ef4daaa33b3

  • SHA512

    ebd62e4239a38c79290932d8d27a5d0404a8fd3bd5e4944c4cebd77cba278c406991ed185cfc242bf98d020ae145464f36560d5c3703d782b27f4e107e599e16

Score
7/10

Malware Config

Signatures

  • Queries the unique device ID (IMEI, MEID, IMSI).
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • br.com.oneside.deli.acai
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5582
  • br.com.oneside.deli.acai:Metrica
    1⤵
      PID:5678

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/br.com.oneside.deli.acai/files/ZPkFS.log
      Filesize

      90B

      MD5

      44eb82978db3d6ae8759a17cc54e20b8

      SHA1

      24085dfbc3ccbfaeae7a66dd3063b062526e4dae

      SHA256

      b277c8e1930e4205c946a8cb2152ebea17d9b3120e135cec9cb5a9054f63faf9

      SHA512

      c6e34b3aca1080fcb3c787aa403602fc90c1e3e645f77d6dfc5b112a9184dfd3ddff3d889c566da78dc943d58d54cbcc815cfc713c1b3e1f1014d60edfb28b21

    • /data/user/0/br.com.oneside.deli.acai/files/credentials.dat
      Filesize

      233B

      MD5

      5175bc6aec1bacda5876b15f964aaba3

      SHA1

      f683689ef91051b2cc067e5fdfd90645dfa68a95

      SHA256

      97f5777b2286c94e47630dc4abb91e29ce0fc09b2f340c3a53b7330df82a72d3

      SHA512

      b24c144a7194e2e481053be8f742e12af71bcbe07a3b10c6267cbea56cfb8ad5682110e4797eefb25c23d756f8633fd4b9effc517760ad130c6f13a4bd9c3848

    • /data/user/0/br.com.oneside.deli.acai/files/metrica_client_data.db.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/br.com.oneside.deli.acai/no_backup/credentials.dat
      Filesize

      233B

      MD5

      5175bc6aec1bacda5876b15f964aaba3

      SHA1

      f683689ef91051b2cc067e5fdfd90645dfa68a95

      SHA256

      97f5777b2286c94e47630dc4abb91e29ce0fc09b2f340c3a53b7330df82a72d3

      SHA512

      b24c144a7194e2e481053be8f742e12af71bcbe07a3b10c6267cbea56cfb8ad5682110e4797eefb25c23d756f8633fd4b9effc517760ad130c6f13a4bd9c3848

    • /data/user/0/br.com.oneside.deli.acai/no_backup/db_metrica_br.com.oneside.deli.acai
      Filesize

      1.2MB

      MD5

      8b5b8949a9a33d927bfd30c6c003477f

      SHA1

      fa735b5fcd0fc7577b1bab668f9730bf3b05e24b

      SHA256

      ffe08b7970d6a415ee09988478ee0cb1404764d3ea4345983e01c3b25890d5b1

      SHA512

      2ebeb1244a33647d6c914d37f5a7e2689765b7fe6e8a0cd72d1aa1007b009d5a744d2920bb679c4068d9f5040f0297746cc9b43fe09650236861ec869af32eba

    • /data/user/0/br.com.oneside.deli.acai/no_backup/db_metrica_br.com.oneside.deli.acai-journal
      Filesize

      1KB

      MD5

      4e21284d4a94db74b9a06c454f21160a

      SHA1

      b0192e9b71e8153f1ed69164306f078953269220

      SHA256

      ad79060b702b15a7943e9869c121e8b1630acf9c872be39ccb940a9b7d88e82e

      SHA512

      25b57259c6f82736ef3ba97676030421b0bea9fc989391a06338ecbbdf2847b1e06d2b428ca330293ff186665b748b13ac989d1ec593428a7ebad0a2c97cb335

    • /data/user/0/br.com.oneside.deli.acai/no_backup/db_metrica_br.com.oneside.deli.acai_20799a27-fa80-4b36-b2db-0f8141f24180
      Filesize

      400KB

      MD5

      7be8fa3cffb2a206e9108a0573acbb6b

      SHA1

      2e9fcb2d7064e17cec27236b29440aefe8ab3fbc

      SHA256

      76dc1f55ce95f5363bd84cb1a6022b013ef269cae274670a7bf4e61ea35f12ca

      SHA512

      2202b144ed3c5beb32c7482e8dc26df010f93a0c1f3724a7499881e6778f5a377a1bb62adfe3a2cf9a4c3583756ab15e170de76ca3e9ac5b40ef5a73c6830f08

    • /data/user/0/br.com.oneside.deli.acai/no_backup/db_metrica_br.com.oneside.deli.acai_20799a27-fa80-4b36-b2db-0f8141f24180-journal
      Filesize

      1KB

      MD5

      abe8ba79c553a3339c96573b749cb529

      SHA1

      ac3912671b44081f213c9d63a35a5bd283247546

      SHA256

      1add6ec7f226e0d49e5f18018791e872169967067be7d51c1b46e42db2e68f19

      SHA512

      e79e620e2c4dbc2851225b712650969a2458ef86187a595e23c61e93ebc97f5439a0f0f2e6c5e7f78d191b26a933ee4102050fb4d535bd26b6b46617a084227e

    • /data/user/0/br.com.oneside.deli.acai/no_backup/metrica_client_data.db
      Filesize

      72KB

      MD5

      9a3a3b75fccfd0f867aa701a3bcc1680

      SHA1

      a9502f26a77a0073cdc1e7db61c3163b2b99582b

      SHA256

      dad6e81e21c686e9f565f1566d67f150135334644af3b4db184e01331cf2a905

      SHA512

      8f3b3458a40628d469d7ea1cb8388b1a73bada8b6e30309cca48d1066d14f80d0d3f55953977a4b3e98a31c8ed421845691e4784a96419d72867d92faab66dec

    • /data/user/0/br.com.oneside.deli.acai/no_backup/metrica_client_data.db-journal
      Filesize

      1KB

      MD5

      54ae770ffe784794459794c522caf571

      SHA1

      2bfaf567c776a3bf20a843988a9e124a62e89916

      SHA256

      1ca9a7e9afe3e0b4d4def541257bae5f08deccfe958daacfcef675b29196b4a4

      SHA512

      92d415c2a62f037d61982e034d4902b77a7324c84e900b37579d6a138c964a666eb06dd6a84ccff8d2e477b8ff9c087dd9556caa953338c1b67f8a24f361f356

    • /data/user/0/br.com.oneside.deli.acai/no_backup/metrica_data.db
      Filesize

      1.2MB

      MD5

      34775d9dca8de276ff0ec300160532e1

      SHA1

      9074ff630759ddef9a90eab8e7b7640e0542de74

      SHA256

      ef75b896bd0082a3e869b8f8033285cec83b21986aee5237ca4370a04efd0440

      SHA512

      a345901e942c79c252c7b48f5ac21372abae8aacf0005bcdf91678c1cdd83b390c8a8c04cee01d63614a1684d2ada235a28b3cdd1e4600b7016a6a4acc21e41e

    • /data/user/0/br.com.oneside.deli.acai/no_backup/metrica_data.db-journal
      Filesize

      1KB

      MD5

      a400e78526e3a1f80b6679b4e88a52be

      SHA1

      3be001c82577ec832038b7c87645e6b633828712

      SHA256

      396a7ca3e4dfd56770c06db210c40eb92d26dc7f54535845081fc8822483f133

      SHA512

      f4e9f5c421a92459eba80db109b7cefdb919205a33c99712440cc92def793f9ee98a341d7a4e535488c178680ae3def7cc17d1072426204dcc073ac057fb3629

    • /data/user/0/br.com.oneside.deli.acai/shared_prefs/br.com.oneside.deli.acai_migrationpreferences.xml
      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /data/user/0/br.com.oneside.deli.acai/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      2KB

      MD5

      52d32ab73bdba7357f1254573a6b3d27

      SHA1

      c52e4da69a91713416928aa73adaa2df696c5660

      SHA256

      12213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0

      SHA512

      17adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d

    • /data/user/0/br.com.oneside.deli.acai/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      4KB

      MD5

      7ce76fa54817dbcd4a6b3b18de351c4a

      SHA1

      a7d20daccc0bb358e28660b1ef036479a728a852

      SHA256

      6e353b8766f28d9cb1e5a5484ac8438c162a82db410611132a5aec91bc118276

      SHA512

      b82735a38e3e06802e94ff6c12e84a0a93a592fb5ec264cebc3739e9786e7f188e40a962ef75f1c58f6c1a7fd668698b04320af4968a29641b5d6c70eb9946a3