Analysis

  • max time kernel
    3819372s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220310-en
  • submitted
    20-05-2022 22:41

General

  • Target

    a5070068ea5d54e7d568c273ce4193bf12cac45ef80ebfe15922f10d3d444995.apk

  • Size

    5.9MB

  • MD5

    c6d123053afa07c7c980c956788dd08b

  • SHA1

    2a4a9ca5e2c1d4d4564f5ed649b1431dce1a5fef

  • SHA256

    a5070068ea5d54e7d568c273ce4193bf12cac45ef80ebfe15922f10d3d444995

  • SHA512

    33e36711323878d9d5bf6d7960c6634f5c6af58c186c611d49f8aa46011271fcec44887c7a2cda3f0bac9b473ce7999d74819c785e33b607ccfe29f4969d24f4

Score
7/10

Malware Config

Signatures

  • Queries the unique device ID (IMEI, MEID, IMSI).
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.intecmedia.lateliercorinne
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5833
  • com.intecmedia.lateliercorinne:Metrica
    1⤵
      PID:5890

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.intecmedia.lateliercorinne/files/ZPkFS.log
      Filesize

      90B

      MD5

      fe7f8fcffd629eeb8792a79bd4a01538

      SHA1

      bc3c059d6708d90ea88f1401267b3aec8596a0ee

      SHA256

      e05c81b69346acc83dfa0c3c92c19304210c5932da508640da6923a69d19ab78

      SHA512

      f0fc89ab86b71faf55225f8b0a7d7bfdce351ef44728852e9c76928c713bdc9219317604193a3f4a4d95dc13c5182a0599beb53dc19cc7403652bb5a18b57de3

    • /data/user/0/com.intecmedia.lateliercorinne/files/credentials.dat
      Filesize

      233B

      MD5

      8ccea6435a6e2fcbe8df6eb7ef79e87c

      SHA1

      8e9f49974f1f4b9a344e4de4e36e93ef3b1b4dbb

      SHA256

      947904461f7f38f65980f36c9dc8218ca0fed614b805ca597ccd12c7b1d451b0

      SHA512

      bffff2457588e611455f5e76302ced1641577b86ce6b17c7a527fece2c297440c22058dc9a30de7e753186b48dde093f913f92679339282456d571aa246a8a01

    • /data/user/0/com.intecmedia.lateliercorinne/files/metrica_client_data.db.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.intecmedia.lateliercorinne/no_backup/credentials.dat
      Filesize

      233B

      MD5

      8ccea6435a6e2fcbe8df6eb7ef79e87c

      SHA1

      8e9f49974f1f4b9a344e4de4e36e93ef3b1b4dbb

      SHA256

      947904461f7f38f65980f36c9dc8218ca0fed614b805ca597ccd12c7b1d451b0

      SHA512

      bffff2457588e611455f5e76302ced1641577b86ce6b17c7a527fece2c297440c22058dc9a30de7e753186b48dde093f913f92679339282456d571aa246a8a01

    • /data/user/0/com.intecmedia.lateliercorinne/no_backup/db_metrica_com.intecmedia.lateliercorinne
      Filesize

      1.2MB

      MD5

      6f06892b2036708cd4b86f08ec143825

      SHA1

      f482ab88195e2cb13254f353ebe9bf29aeff9ce4

      SHA256

      9c5000691d26d7d056892d9c74927dbe5fbe8ec4880bf29f84a888f7e8d3dad9

      SHA512

      4486bda4c190e1d29c312b8f7d6dee298d8cdce082f1bfd1f50a40178feaa8aaadc81f47260e320ca4fe46ab2273c86edb25881fea3059434bb83d82322d884f

    • /data/user/0/com.intecmedia.lateliercorinne/no_backup/db_metrica_com.intecmedia.lateliercorinne-journal
      Filesize

      1KB

      MD5

      2897957849f772127f3f8ce81496c2a7

      SHA1

      7cb92fba8a456f579c94ea25c232de4ea1bfa6c8

      SHA256

      1e0d7d3e52255be99d755f78ed9eac1fcaef04404c96b25b630f93f61c30a49e

      SHA512

      b959492be69ec6a370d3d03b3c4213e8c43cd717103e113197cbe5f49e5e02690d002e6e9e072e3f4eedc20604300107a9467ae384c45b65a148d054af9d7482

    • /data/user/0/com.intecmedia.lateliercorinne/no_backup/db_metrica_com.intecmedia.lateliercorinne_20799a27-fa80-4b36-b2db-0f8141f24180
      Filesize

      376KB

      MD5

      b47c32d7a62b5f277f507e684946df6f

      SHA1

      f673b210640269013b7aa48a84dde5e78e414a3b

      SHA256

      616d4b59a510d5fd3d9e62d5895577bc73b5db65846d13708a2f9f664af8fa34

      SHA512

      1310e254d6a9f980a4a9ed23a077119024f02dde29aa7eb029fdf3c0cf3d7b772061a75428f58d6323aa16b74fa1120dce22e61c25942f0d945b11cb0be10f44

    • /data/user/0/com.intecmedia.lateliercorinne/no_backup/db_metrica_com.intecmedia.lateliercorinne_20799a27-fa80-4b36-b2db-0f8141f24180-journal
      Filesize

      1KB

      MD5

      8386777a9fa8ad47cd548107490a7599

      SHA1

      d4cf18a425af3b84d15d06de49e8a3d1f3f14437

      SHA256

      f90763526e07ed3cec93466a29c9c3b2a9746bdc9189efca858ac853c619602c

      SHA512

      962e08330adac6b84e774769f13d580df263a8047c3c1b72672dd5888077ac4cda46c0cf96652aa47f148841761435c346a2fc845ea5ace1dde49d4b9ba98f2f

    • /data/user/0/com.intecmedia.lateliercorinne/no_backup/metrica_client_data.db
      Filesize

      72KB

      MD5

      9a3a3b75fccfd0f867aa701a3bcc1680

      SHA1

      a9502f26a77a0073cdc1e7db61c3163b2b99582b

      SHA256

      dad6e81e21c686e9f565f1566d67f150135334644af3b4db184e01331cf2a905

      SHA512

      8f3b3458a40628d469d7ea1cb8388b1a73bada8b6e30309cca48d1066d14f80d0d3f55953977a4b3e98a31c8ed421845691e4784a96419d72867d92faab66dec

    • /data/user/0/com.intecmedia.lateliercorinne/no_backup/metrica_client_data.db-journal
      Filesize

      1KB

      MD5

      959016ed58833b43d67227c6dc9fab90

      SHA1

      1cf60d35a2ace691403ecc75da8b9bf6be95cf13

      SHA256

      154f35e16a8939ad49be5f78e58fcabf717d6d6a45c389b98d7ab7a051395a65

      SHA512

      c429ac647014f039a5aef45fd701d9f56de1858d7e65c8296a2bde32ff6b1fa331121071c81b86ebf0be826e79881bea77f2ed9c7ae7f791082c268266cc8f2f

    • /data/user/0/com.intecmedia.lateliercorinne/no_backup/metrica_data.db
      Filesize

      1.2MB

      MD5

      b6fc884a0d95cda9f875fcdb3d149a7e

      SHA1

      85cf8908f53b305a0ed7bbbdaa0ee6599b3cf7b6

      SHA256

      5cd3e63e4349734a7c173277c2722bc22f0fe6be43d770db2f53e3eff889ed4d

      SHA512

      728028cab869a1c94e92f3afcf6a7f6a3c0c3c624c180053ece9fad8063a041c94bc1c4853e92eb0a7d70505ba3aebee6f9bec500e4edd4930463ec63b370ae7

    • /data/user/0/com.intecmedia.lateliercorinne/no_backup/metrica_data.db-journal
      Filesize

      1KB

      MD5

      5409e41a9916fcad4eedbd4a4e1f0aa7

      SHA1

      0704f4078238e530075201bcc505fb3e2c28ccdd

      SHA256

      aece7e13f68d1d57585ea313b1ac9e38ea088b79acdf911803b423a084eb73c1

      SHA512

      8d7a1f16632c013fa029e28788e8aa61d194a3753d8084c3e8120683099d360ca9321e54c53b4f5f852e7a849fbe269583dfc87caf9d58f07210c223d4a50ee3

    • /data/user/0/com.intecmedia.lateliercorinne/shared_prefs/com.intecmedia.lateliercorinne_migrationpreferences.xml
      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /data/user/0/com.intecmedia.lateliercorinne/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      2KB

      MD5

      52d32ab73bdba7357f1254573a6b3d27

      SHA1

      c52e4da69a91713416928aa73adaa2df696c5660

      SHA256

      12213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0

      SHA512

      17adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d

    • /data/user/0/com.intecmedia.lateliercorinne/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      4KB

      MD5

      b49170337b8ebed6ba2a99395c06e9fe

      SHA1

      6405454a196e5cd0456b80f221bda72fa78d14a2

      SHA256

      2fdff7dde3e58827ae5aa6e715717baea46022422a76c566d0faef25d7ea26f9

      SHA512

      6c85c4d5d339d804ea87cdaabf3c6909135dad5221ce1109c3a7bc34e302f8375e007e1e016182a748d227172f59854d77b646aeb7e708009ef3b38ab38833e7