Analysis

  • max time kernel
    3821153s
  • max time network
    167s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220310-en
  • submitted
    20-05-2022 22:58

General

  • Target

    edcbac15709bd1c526642ca3a057e138168d9b138d9819dffb4e84fad4fa3891.apk

  • Size

    5.9MB

  • MD5

    3cc084522c26ff529208df381144037c

  • SHA1

    b086fde3d55e8ab44e005d4d0f8e94805a084b16

  • SHA256

    edcbac15709bd1c526642ca3a057e138168d9b138d9819dffb4e84fad4fa3891

  • SHA512

    a8611cb9567a37a328c4320526e5fb8473ce865cbd0ede3e03aa978638080cc7b40238e2eaad52fcad7de56c1cd007913e5ef4738eb8fc8364ad3ebd8f3e71c8

Score
7/10

Malware Config

Signatures

  • Queries the unique device ID (IMEI, MEID, IMSI).
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.appsmart.delivery.darbarmuenchen2087
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5712
  • com.appsmart.delivery.darbarmuenchen2087:Metrica
    1⤵
      PID:5899

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/ZPkFS.log
      Filesize

      90B

      MD5

      7ef3ff33aa51511b4d9d3bd40f1d666b

      SHA1

      e944ec6686be50c64ed6d444363e1e81d6f37d56

      SHA256

      b4e125ea898c93ba2019c9c72bdf67a83f640add015fcfb396cf5d7a6a44e73c

      SHA512

      6265799ef1bd5c21448b730e7a60219ec9259c2e0aace955240165ce2626db8a53d154583a2b6eccfe94124c2ffdf4edddbb231e0fd6e21bfbe3ccdea4e2e450

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/credentials.dat
      Filesize

      233B

      MD5

      6e7f6225e218d0d45a3537ce42656bfd

      SHA1

      d867bcc0de157e0ab95a60e3ced2761a70e18065

      SHA256

      fcf03ab8b40578801011570a4d9a298749c44729660bb069085af5350ac33841

      SHA512

      709d16be589b825690e14d4129060cf02deb5320cf3db60c815636d39109aacbc7902f92d40d018288e25b0d5ec4548d49d89df2a622f866ee64b38f5f03508d

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/metrica_client_data.db.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/credentials.dat
      Filesize

      233B

      MD5

      6e7f6225e218d0d45a3537ce42656bfd

      SHA1

      d867bcc0de157e0ab95a60e3ced2761a70e18065

      SHA256

      fcf03ab8b40578801011570a4d9a298749c44729660bb069085af5350ac33841

      SHA512

      709d16be589b825690e14d4129060cf02deb5320cf3db60c815636d39109aacbc7902f92d40d018288e25b0d5ec4548d49d89df2a622f866ee64b38f5f03508d

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087
      Filesize

      1.2MB

      MD5

      b925ad66a1bbcde9f13ba331e4b7f167

      SHA1

      24857368690e99e5dec27bdb2fd3e29a1fa4ed06

      SHA256

      b15658f3992f72901794295b2d18dda2a9b3894148695de15c91de771e7fca59

      SHA512

      87292687aa869dbc5c35d9179f786bb04bd94c2ba6b484f68df696af4ef73d9aa090762cdae0bf80acc7b894ea0b702f3d596ea3e7a6394ca90323d55cccc9a4

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
      Filesize

      1KB

      MD5

      0ac493f9d12c4a20520ef70f80e333b5

      SHA1

      a5623c986aee0908c4412b0d4d338b447d0693da

      SHA256

      34e7a89cb18dc4c16184d247fd2320fb21d870298e394379ac48e7ab50edf1ef

      SHA512

      135c96c0594e85261f09186b141d1992281f91bc6da7e031ac9ea00d5d2f241fafff8144e6ba3ac9397cf318d748e9b0b9e76fb306cb0d4dabd4bd22f73b38f8

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180
      Filesize

      376KB

      MD5

      c01337ba4182478aa01c39627eb44cdd

      SHA1

      0a8d843692ddd63786e750f1490b1381ab8988dd

      SHA256

      773dd690057aa5721e474beee9d893d52a5f500fea0d496bb880d3e9aacf2e90

      SHA512

      ad8e7610e2883ab474a140dfe7cfd23c908c9b6e530c54d2f32a93a923d50ce8ce62cb2d8137da3f3fa99424c2a66c75e8c85f58d18fd8c34d050c6f186edefc

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
      Filesize

      1KB

      MD5

      b1e8efd3bce5b5e8c964c5ff1aea3ec0

      SHA1

      13c8e112d908e5be5ce10a47b91c3cb4965b3cfd

      SHA256

      8169dacc8fb4eb657dc62c895b8c7dcc7253ec3a3b7536e7a5d5ef47fe491839

      SHA512

      45021d5d34e413eaf121a5a42afea11fe78dc68378cd185d25369ced9cc4a0099c84b8a52c4668a09c81a94d1cc043fb37ba1975303ef244cb18fcbe42a6fe0c

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db
      Filesize

      72KB

      MD5

      9a3a3b75fccfd0f867aa701a3bcc1680

      SHA1

      a9502f26a77a0073cdc1e7db61c3163b2b99582b

      SHA256

      dad6e81e21c686e9f565f1566d67f150135334644af3b4db184e01331cf2a905

      SHA512

      8f3b3458a40628d469d7ea1cb8388b1a73bada8b6e30309cca48d1066d14f80d0d3f55953977a4b3e98a31c8ed421845691e4784a96419d72867d92faab66dec

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal
      Filesize

      1KB

      MD5

      4f638b6d2e33b4578ebdd27ac51c3b69

      SHA1

      e1db8170d6e572cc28f3df16e49ccf9178132f9d

      SHA256

      11024b0a50d5295e4381bd26eb0f86a5e9bf9b45932e364926e50d8d87385a6b

      SHA512

      78f2e63caf467763ee6502bd1c69142fca7e6d73a153108ce17014adba2352c5a0dbd1a224d6bfc8ee0be97a43c00aed311ee9fac15a7d1bb083988faf5709c4

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db
      Filesize

      1.1MB

      MD5

      21bad482815b4635ae603b88fac27e7e

      SHA1

      a6e8c1fe52df0b5088b4b0ec38c74cae9f0a752c

      SHA256

      ab2657334289242d892b0b0303d79d92fe7e6b64ec616b9498119266881317f8

      SHA512

      30616dca6c966f59ede0980e8272a55f33a00b14121c1fcf291eed803d2f8c33e12d6e442ebecd389ba1ba22238eaabadd5374ce5eb6db80295ad1bd5458349d

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db-journal
      Filesize

      1KB

      MD5

      09c687b391b72f83fd0314788d30404d

      SHA1

      89df77de74d0e4034c6c28ad86bddc6a52220906

      SHA256

      f0cae76c4e153ed3e3f1e82b8d783d9b6094235e95e67c19d87e4412500e66cf

      SHA512

      3d32632297f8c8f619332b510d62bb2bc1084ed7248ddf6a915aeca5dec4ceae92b71c085ee4fb3e5cb82aac2b42f468b26f8897a3cc8cd6fb035647873bdfa2

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/shared_prefs/com.appsmart.delivery.darbarmuenchen2087_migrationpreferences.xml
      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      2KB

      MD5

      52d32ab73bdba7357f1254573a6b3d27

      SHA1

      c52e4da69a91713416928aa73adaa2df696c5660

      SHA256

      12213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0

      SHA512

      17adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      4KB

      MD5

      7ce76fa54817dbcd4a6b3b18de351c4a

      SHA1

      a7d20daccc0bb358e28660b1ef036479a728a852

      SHA256

      6e353b8766f28d9cb1e5a5484ac8438c162a82db410611132a5aec91bc118276

      SHA512

      b82735a38e3e06802e94ff6c12e84a0a93a592fb5ec264cebc3739e9786e7f188e40a962ef75f1c58f6c1a7fd668698b04320af4968a29641b5d6c70eb9946a3