Analysis

  • max time kernel
    3821623s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220310-en
  • submitted
    20-05-2022 23:19

General

  • Target

    fd5804b29e99884caab26c7f3f98581f2f0113d7585f7f415d918d32ec07f80f.apk

  • Size

    5.9MB

  • MD5

    9e123e73f7345611b694acea90230e58

  • SHA1

    01075e8549090e2767663f9107d42ae0179ee59d

  • SHA256

    fd5804b29e99884caab26c7f3f98581f2f0113d7585f7f415d918d32ec07f80f

  • SHA512

    2483ba22a9b79772bf607ece4ab87d043eb97345e2b3e0a418196a4e809b7fa4d30cdfb460a3706864360352132ec9851e6a3150c6c5c800bbfa7ceaa1d28ba7

Score
7/10

Malware Config

Signatures

  • Queries the unique device ID (IMEI, MEID, IMSI).
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.appsmart.delivery.darbarmuenchen2087
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5839
  • com.appsmart.delivery.darbarmuenchen2087:Metrica
    1⤵
      PID:5901

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/ZPkFS.log
      Filesize

      90B

      MD5

      79c2d8e3dbcf7e5856328c7a2ff93355

      SHA1

      6958fd238e43b192d1cbb9a066aa98cc69d9eeaf

      SHA256

      bbf179e8177da5befd8f4f5a5c4bd7de4a20a22b22fb58bee42ec24fa2057443

      SHA512

      ba0369b1919dea0c75f3e4ee7efe5d2ec32bb504c682d098cb8d2915282fbfd913d28f942395c1667f950cf22d1d83b4fa3650aa7452e4f7768d297cd44eb23c

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/credentials.dat
      Filesize

      233B

      MD5

      1c38d6d7d37eb16237be84a7a3675350

      SHA1

      1062d1f2b9e9ca38c66fed03731272046d798049

      SHA256

      0c0070cefa2d54293834848fcc937d53b2976276fc227a2c6aee0948e60744b3

      SHA512

      3a9a4c7a41ebb6619c9cdeac50ecb02ddf68fee87e185c449fb66c5d3ced375444132cb1ef379441714b8c392427bb3c3a316240eb548bf0d0cd25848a32e219

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/metrica_client_data.db.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/credentials.dat
      Filesize

      233B

      MD5

      1c38d6d7d37eb16237be84a7a3675350

      SHA1

      1062d1f2b9e9ca38c66fed03731272046d798049

      SHA256

      0c0070cefa2d54293834848fcc937d53b2976276fc227a2c6aee0948e60744b3

      SHA512

      3a9a4c7a41ebb6619c9cdeac50ecb02ddf68fee87e185c449fb66c5d3ced375444132cb1ef379441714b8c392427bb3c3a316240eb548bf0d0cd25848a32e219

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087
      Filesize

      1.2MB

      MD5

      4d17f12dae08e63def9898edb4296d69

      SHA1

      39c47e9a58f2620380d4a98b23c7808779d4dd36

      SHA256

      43c1f787eb17cc241369ec0cdd067294cfc72ea52a9ad115c41251f5ec2a3244

      SHA512

      67cdbd8dc92aeeb7ddebb00f567170103d8c4ff74011c74280b072332c4176d148092b69b7ee01ece0d8af825fb0211cd0bccf5d859d54265ad200008e028017

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
      Filesize

      1KB

      MD5

      c6f4d99c3f466beb15aaa0603f3979c6

      SHA1

      19b4026994979722e7ba77faff83a55391093de7

      SHA256

      0a368e60f34b90efb3fc1df4f4fb096b5b13cc8bc9aa471cd893b710cbd3df5d

      SHA512

      37393adb3db1c23be2d01e099ea50be7d801dacc3df85cfcea8439ed33872e9530d191efa01ae38729197566db1fc396ed1126c1feec3fba22a8126b9e1d954a

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180
      Filesize

      424KB

      MD5

      e528832e4e2e8dd5c3f17224c0b3bf59

      SHA1

      37fea09ae9d2fb751cd8fdf2057e4dd5f08d2d77

      SHA256

      91859914286286f2f24fa1c5e5aa3805caf81f3e8e2322b375dd800de116be54

      SHA512

      345da0024292a23aef049d8b053b9f66ccca3e8e2259146411171f1eef266ff21bcf69445f0f6d1f23c2b1122157676ff65bffd5e75fe80a3f6cc9e8e1d2bdd7

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
      Filesize

      1KB

      MD5

      bdbf8c60bb098e7ab565fc3b4c479c95

      SHA1

      ae6b2138ea573f732f2e7647608ce46adecf0cc8

      SHA256

      9767ac538dd1e7cf61682f6b5cb26c2d2400843bfcfa450b734e81fc86c2f5b3

      SHA512

      bb3c9b4b61b6f3af8ffe731966d976e126df653ecb55f43d0244b5552226c0943d9b3f993812e2133a9f387357aa4e24dbb6c5a93a416ff9e1010b92220da158

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db
      Filesize

      72KB

      MD5

      9a3a3b75fccfd0f867aa701a3bcc1680

      SHA1

      a9502f26a77a0073cdc1e7db61c3163b2b99582b

      SHA256

      dad6e81e21c686e9f565f1566d67f150135334644af3b4db184e01331cf2a905

      SHA512

      8f3b3458a40628d469d7ea1cb8388b1a73bada8b6e30309cca48d1066d14f80d0d3f55953977a4b3e98a31c8ed421845691e4784a96419d72867d92faab66dec

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal
      Filesize

      1KB

      MD5

      5e5549c81d2d4c86a11f322f1cb7a58b

      SHA1

      54c7cebf376f35052344444ca7f5d9600ce60b97

      SHA256

      c5ca39d00c7a0fcc79d00d9cc6975e2cc20d98ee742520ec12b7e102c24e5425

      SHA512

      783225dd9d91680e4d9ca23c3110d2a404de600febfc79b214707a9d8caed91491a489c56455e572b1525904f98f5eea5b732247c70be397478544b1a1ab3dbf

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db
      Filesize

      1.2MB

      MD5

      f3a888c6b242fa6f683e481a73b89bd7

      SHA1

      75f751580cf093ee0877f60ddb91a9233f3d8154

      SHA256

      87978e5705484ad9dc65cb9b6fefc0c73630883bf0e15aeb5c6286e2f166f1ab

      SHA512

      adb101f73beda0e3246df95684259f726c02fd5cce7c7c8105734c1a6b241c6c93709236b1ce36bb7e9bd02c29965160606fe405afc96814ceb4fceb07347154

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db-journal
      Filesize

      1KB

      MD5

      564ee53b95bf82c42ab5853874d55413

      SHA1

      c253dd4bfacb72e551f99cec379afcb78c557fe0

      SHA256

      e41ae51b4c9e8b9a390f2f11ddcdde7afede48df8baaa898378eebb5a3a633d5

      SHA512

      3af4676ec8cbedd118755ad1e1ad39f81d9f7a615070df401f67b67fc6c809511213ab827e7e0099030040d48540cc9c458645b3fb8199c22349b1fafa6baf67

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/shared_prefs/com.appsmart.delivery.darbarmuenchen2087_migrationpreferences.xml
      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      2KB

      MD5

      52d32ab73bdba7357f1254573a6b3d27

      SHA1

      c52e4da69a91713416928aa73adaa2df696c5660

      SHA256

      12213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0

      SHA512

      17adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      4KB

      MD5

      7ce76fa54817dbcd4a6b3b18de351c4a

      SHA1

      a7d20daccc0bb358e28660b1ef036479a728a852

      SHA256

      6e353b8766f28d9cb1e5a5484ac8438c162a82db410611132a5aec91bc118276

      SHA512

      b82735a38e3e06802e94ff6c12e84a0a93a592fb5ec264cebc3739e9786e7f188e40a962ef75f1c58f6c1a7fd668698b04320af4968a29641b5d6c70eb9946a3