Analysis

  • max time kernel
    3822268s
  • max time network
    167s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220310-en
  • submitted
    20-05-2022 23:27

General

  • Target

    80d5f8d2409c4cfd49d1bd0079124202eb53839bce1fa5937724f681c6a5f445.apk

  • Size

    5.9MB

  • MD5

    6e553466c1bc908b51a7917f06b6814b

  • SHA1

    ba72a1231120d323f646ae905890f5e73ca96e4b

  • SHA256

    80d5f8d2409c4cfd49d1bd0079124202eb53839bce1fa5937724f681c6a5f445

  • SHA512

    9db4d8e2dee7f7b0444127fd8520477e5368498f65609a1e2b1c01d40dbaa83075bf50a8e3e306df809e1623f5ac61b38f92e9f907bdad7e61a418955910166c

Score
7/10

Malware Config

Signatures

  • Queries the unique device ID (IMEI, MEID, IMSI).
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • calarepa.kingburger
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:6224
  • calarepa.kingburger:Metrica
    1⤵
      PID:6276

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/calarepa.kingburger/files/ZPkFS.log
      Filesize

      90B

      MD5

      235bf4c2a848d6883fe75df07cc1a906

      SHA1

      6250be57f2593e257f2e3bd4d265db6fcb1a566f

      SHA256

      5e58bdf6f4b93fb34cf72f4ebeaa8e437c93f9d82ea7377bd17f368592d8bab3

      SHA512

      23d20a087645109f41d13be379192f5808fb7ab92f7615052890ae1e2e05d73631a3bfc1f1d59f91e1c761daf16c5033e727f188681f064c4b62426c3967bbc9

    • /data/user/0/calarepa.kingburger/files/credentials.dat
      Filesize

      233B

      MD5

      1c65e9104973ac3f9630945a08dfa970

      SHA1

      43747c32848427d83e0658522ab87befba6319d2

      SHA256

      853c2f122ded0fdc2cb105fd17c63743a9791161299a31a48d4fece927de874f

      SHA512

      5479fa7885baffa3183db07f772c3ddee0ea38c0d7d4b28d904b999538739d1ed34346b8125f460a7df4a95bcab6b047e51787d0b3c14352d2c70e0f7db1b4cc

    • /data/user/0/calarepa.kingburger/files/metrica_client_data.db.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/calarepa.kingburger/no_backup/credentials.dat
      Filesize

      233B

      MD5

      1c65e9104973ac3f9630945a08dfa970

      SHA1

      43747c32848427d83e0658522ab87befba6319d2

      SHA256

      853c2f122ded0fdc2cb105fd17c63743a9791161299a31a48d4fece927de874f

      SHA512

      5479fa7885baffa3183db07f772c3ddee0ea38c0d7d4b28d904b999538739d1ed34346b8125f460a7df4a95bcab6b047e51787d0b3c14352d2c70e0f7db1b4cc

    • /data/user/0/calarepa.kingburger/no_backup/db_metrica_calarepa.kingburger
      Filesize

      1.2MB

      MD5

      893cc2ec9dc48c264139e23ef73e9f20

      SHA1

      df76a0a257bf1f08e8a1924e6738c712828461f7

      SHA256

      8e02633e549d7f048d0550a50d9e765fdc433f871b6f1898605b23d303de0780

      SHA512

      b61e256a2d01e3df5ec83aa7444d11c4b2b69f25617a927a186f5558adeaa20f0548f5c89bcdf9b5ee2e6487ae93022ec952136eadf5420006ae26c7af80909c

    • /data/user/0/calarepa.kingburger/no_backup/db_metrica_calarepa.kingburger-journal
      Filesize

      1KB

      MD5

      dcbbdc3093f3a207db461253df28aec8

      SHA1

      7331b7d833624d06b8dca94ce9d7f93e66414328

      SHA256

      787f4baf07f74727d3123d8267acc605ec5ffa11ce73aacc4bfd53aad3afd6bf

      SHA512

      c12fd025dfee1d1c3d321efd488a0a2784b54ac57a4eaeef537c2628c973250b6b6f074e680f1d33b743ed3e3f41aa18d64aa83116805ab384f59ed37e580920

    • /data/user/0/calarepa.kingburger/no_backup/db_metrica_calarepa.kingburger_20799a27-fa80-4b36-b2db-0f8141f24180
      Filesize

      400KB

      MD5

      32e4baf3fba2d746031890049d890b87

      SHA1

      e002e47ac097ae01b2db07ce5ece668aa0d77e1e

      SHA256

      b53a8a36ca5ee92ad141fdbce91679ee60e6c149008de2751ff562c726c2ac41

      SHA512

      a7ba9c433e5be837b68a3cf7233f0570381337f09245d1d5f19b1d122e08c03e1c63b59fda887436af0d6ad0ebbaad6122c3dbe77cdba0052d3a35add7dc2be9

    • /data/user/0/calarepa.kingburger/no_backup/db_metrica_calarepa.kingburger_20799a27-fa80-4b36-b2db-0f8141f24180-journal
      Filesize

      1KB

      MD5

      4be4d14c0af5c30afa0180f3b1d6c60a

      SHA1

      a1ea56ee8ccdb756497b717590b5fd905df4c158

      SHA256

      1afba10804dbb7f6d22c7d1f8b001e0a356afab369f6b37edaf8e4315026d843

      SHA512

      f02a8dbb3b98633296c178d642dc3c2baaf78b1abcbf2fd3ffdd81f74c96c44571b4f9d5f8fc437811228513e213445cfc3e5f436d91e375507a439f9ef42b50

    • /data/user/0/calarepa.kingburger/no_backup/metrica_client_data.db
      Filesize

      72KB

      MD5

      9a3a3b75fccfd0f867aa701a3bcc1680

      SHA1

      a9502f26a77a0073cdc1e7db61c3163b2b99582b

      SHA256

      dad6e81e21c686e9f565f1566d67f150135334644af3b4db184e01331cf2a905

      SHA512

      8f3b3458a40628d469d7ea1cb8388b1a73bada8b6e30309cca48d1066d14f80d0d3f55953977a4b3e98a31c8ed421845691e4784a96419d72867d92faab66dec

    • /data/user/0/calarepa.kingburger/no_backup/metrica_client_data.db-journal
      Filesize

      1KB

      MD5

      64a51d43cd125b4ea3b6bc583388be75

      SHA1

      a084321eb6cc7cc839f31e608a350fca4086b86e

      SHA256

      aec05b168c7758966530bfa28dc397796a3a410f0d3c34291e69d2cc1de63760

      SHA512

      bbe43f508934208215172ef1c210abe119d1a29ec58c79c58ffad07fb66aaa783cb09d96fcac6977819eb65026b2d2c1919be62485e0dbd8e440189ea8623101

    • /data/user/0/calarepa.kingburger/no_backup/metrica_data.db
      Filesize

      1.2MB

      MD5

      d7af519d5b0599bad6ad45cf6fb1e939

      SHA1

      f32f42ae68b9ab362cdb16212454e28012dee609

      SHA256

      95754a3f77c6723c368851297b725093d62f57015e188d10dbd43e7b286966bb

      SHA512

      f010e4c2783413ffa11f8656677ed864703831a33d766fb6b1af631237ae98da791f5a7c0b3a12d84559dfeae90a0603ee21ba4ab9f42af6de73f836cf91602a

    • /data/user/0/calarepa.kingburger/no_backup/metrica_data.db-journal
      Filesize

      1KB

      MD5

      11ac2a8eba9cbbc27ae4f49ad1f5326b

      SHA1

      f9842aab3aba471efa5ec0cd60dc68eb80e03b4f

      SHA256

      97c95c65e93a99f472b1adf899d38bc7f23ef21ba58f45079c2ccff3784910db

      SHA512

      64ce82b6817e9cab294f1500ab542d7c5447152de734e7f2b020599bd1fd0d8e3b7c526bed5d5886683f343cc0b1d64bd11cc40809841e5675b5fde8dddc4869

    • /data/user/0/calarepa.kingburger/shared_prefs/calarepa.kingburger_migrationpreferences.xml
      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /data/user/0/calarepa.kingburger/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      2KB

      MD5

      52d32ab73bdba7357f1254573a6b3d27

      SHA1

      c52e4da69a91713416928aa73adaa2df696c5660

      SHA256

      12213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0

      SHA512

      17adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d

    • /data/user/0/calarepa.kingburger/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      4KB

      MD5

      c4f014ea16d04d377605a11508a83763

      SHA1

      1e4ab2975fc39e8666d72a0d172dec8874bad858

      SHA256

      89182bccf074d316111480d15141220ef3c52840b7e16e694f3baa43d842ec53

      SHA512

      7ee4f254239e42f1d6b260d60290c01614d777627e3fd04f0c17ef7005a2f4bfe25ee3ec2417fe0ded7ad1a2e3366f271158a853be164e05214bd9b8b9644708