Analysis

  • max time kernel
    3827415s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220310-en
  • submitted
    21-05-2022 00:42

General

  • Target

    55ee02622337b91f2d9920906500b97d6d58f95cfb0b732bddfb2b3eb80fd7aa.apk

  • Size

    5.9MB

  • MD5

    d49d8fa7e2c061eaa164301e4a22af7d

  • SHA1

    d68c5a82227de497259251124c242ce20fb5bbaf

  • SHA256

    55ee02622337b91f2d9920906500b97d6d58f95cfb0b732bddfb2b3eb80fd7aa

  • SHA512

    b7c7b5624f7e3b512aad6e39d270106530e586f0c4892f85804501396d4e3038ab2bf0d291a4ca4a78befb62e606132342be6514d4b205908ea494a241f438da

Score
7/10

Malware Config

Signatures

  • Queries the unique device ID (IMEI, MEID, IMSI).
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.br.pizzamaker
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:6245
  • com.br.pizzamaker:Metrica
    1⤵
      PID:6328

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.br.pizzamaker/files/ZPkFS.log
      Filesize

      90B

      MD5

      a6b82a397484c8ab74281b2f25dc91e4

      SHA1

      08c0505e6e2e5f56ecd6b8b576d520bf339e7ee0

      SHA256

      b5ef138b05a8a6085a24fb26fe001abfd8ca60bb13ecb89ee87aa1fd6fd1ef78

      SHA512

      6b7443bf620cb07cc73196bafd32c80b7815007599ce25462e2fece19e13d4ab4ecdb4e7d15cf909d98e07af436ac09580de06d9951dc4d74ddf8941c7fda41e

    • /data/user/0/com.br.pizzamaker/files/credentials.dat
      Filesize

      233B

      MD5

      cf0804e3507aa061548e2759bf26e5b8

      SHA1

      4064ee764aa28b0d45241ed0b62020a0331ddd88

      SHA256

      14abd5443a01192256d091e224734724ef54e1fa5f3871e65ec34269ae5c1ff3

      SHA512

      6ddd891ae937ec96b91c8b0b3abb8a226c07f2f7b70e3206184790f07bc6e16e151918bf13f25e73af4ddcce79514a75044ad9d569ca1dee864352b3a5de2557

    • /data/user/0/com.br.pizzamaker/files/metrica_client_data.db.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.br.pizzamaker/no_backup/credentials.dat
      Filesize

      233B

      MD5

      cf0804e3507aa061548e2759bf26e5b8

      SHA1

      4064ee764aa28b0d45241ed0b62020a0331ddd88

      SHA256

      14abd5443a01192256d091e224734724ef54e1fa5f3871e65ec34269ae5c1ff3

      SHA512

      6ddd891ae937ec96b91c8b0b3abb8a226c07f2f7b70e3206184790f07bc6e16e151918bf13f25e73af4ddcce79514a75044ad9d569ca1dee864352b3a5de2557

    • /data/user/0/com.br.pizzamaker/no_backup/db_metrica_com.br.pizzamaker
      Filesize

      1.2MB

      MD5

      dc00f9e9f528810681ca2771a80e66e4

      SHA1

      921a3d1769dc8745cfba4bd36c27ccdcb205ee78

      SHA256

      5861c60502647424b6a33c46a459de9c217d61c16e797aa288fc93ddccf4c9a9

      SHA512

      d4d6dbfff86bc91f8d18ea5179b68d2c2fbbf3f6e830f4e91d9e80491bb83add7b768eccdf95d120f74c0039e330fef1853f36ed6477bfa483626840a6015709

    • /data/user/0/com.br.pizzamaker/no_backup/db_metrica_com.br.pizzamaker-journal
      Filesize

      1KB

      MD5

      73ab90b62cdcb55c53efcb9104296577

      SHA1

      4a81f9ced220f215d65e2ea173ab4a8981481e5e

      SHA256

      94552404daf0e78a6497709fdb843e108d02d5784693ad00468bdd42614b2a1f

      SHA512

      336e76d7558b4b9f341d02d71aed9bc257a961a85914a5a73841840beef5a1f0ab1cc3f9d6ee351f7789b135a070a6b8f2eee462dfe46556414ccf65ce7ac4c4

    • /data/user/0/com.br.pizzamaker/no_backup/db_metrica_com.br.pizzamaker_20799a27-fa80-4b36-b2db-0f8141f24180
      Filesize

      408KB

      MD5

      72b79d169678ebd15b7df8612bbfd441

      SHA1

      be1ab88d5b2a17224f570cbb48fb706658c06ac8

      SHA256

      6476e456af95e4e20ba806d841fadffad116b5bd38c48ad9c09b9b1dacd13309

      SHA512

      a815f8370f67167e95b864318d122fc4f77276b2057f362d0e265f607298bb8d0c5fc934fa9c2f807504a52a28f38909753abf7f058e5b1953201b7b457a128b

    • /data/user/0/com.br.pizzamaker/no_backup/db_metrica_com.br.pizzamaker_20799a27-fa80-4b36-b2db-0f8141f24180-journal
      Filesize

      1KB

      MD5

      c1497c2954164eb07a541c60185f05e6

      SHA1

      325b15b89549ff96e8abd3bebb090dc59667a98d

      SHA256

      0e0103a97bfbbf00e308dfdd0892d36a189d81ff3bfa3bff6ee9b6ca9d87771d

      SHA512

      ef8921a15830921be00ca4adbf36e3241193d251f31acc980a46faf8cc88a5f238e8fcead6c51f5da034e52ae5882b581d402a72fa51ffef922c5e23045718b7

    • /data/user/0/com.br.pizzamaker/no_backup/metrica_client_data.db
      Filesize

      72KB

      MD5

      9a3a3b75fccfd0f867aa701a3bcc1680

      SHA1

      a9502f26a77a0073cdc1e7db61c3163b2b99582b

      SHA256

      dad6e81e21c686e9f565f1566d67f150135334644af3b4db184e01331cf2a905

      SHA512

      8f3b3458a40628d469d7ea1cb8388b1a73bada8b6e30309cca48d1066d14f80d0d3f55953977a4b3e98a31c8ed421845691e4784a96419d72867d92faab66dec

    • /data/user/0/com.br.pizzamaker/no_backup/metrica_client_data.db-journal
      Filesize

      1KB

      MD5

      9bc4f6a73221e549741e294151c15b8c

      SHA1

      b06279fd6448d86eac2e6f10d5eb141837b6370e

      SHA256

      03b00b204c7c39a050033dc6756d48303c1df2e1c7f317ee8df11ffeea061871

      SHA512

      da5a6d8d63af4e75faab856f92071f5c7f610a7106fa9e14b94ec80aba9d0e2f4ece7469a61840ddbdaa562f7ee39a51ade5d72c4c4ba262319d0dd0d7ef6842

    • /data/user/0/com.br.pizzamaker/no_backup/metrica_data.db
      Filesize

      1.2MB

      MD5

      b030b90fe7ee387965bd1d54e3aeac77

      SHA1

      d8a0fbda20fce8f191df802ae25657333a6a491e

      SHA256

      a317b5fe7fc38c40399131f16c8ebe0a266b9f0b51de11dd6e038c6f9970b8a2

      SHA512

      2909f307321335059f72ddc8d0b4b1937784821cf4e255bb45725a6b61000e321cd29460ef5a8cb06bec825b7439abe67550c49b9962df556f368b313aacb910

    • /data/user/0/com.br.pizzamaker/no_backup/metrica_data.db-journal
      Filesize

      1KB

      MD5

      22be9860fd650ac64d46f4d08be7b070

      SHA1

      914c24952dcff6b9893e414b26dabbddec38795f

      SHA256

      2be386b4abb31345fcd94179c58b87ec9403f1d13a4bbd53a007c0c7ae78f0b7

      SHA512

      05dc37099a383183ac3c6b15ca401e53865524f9ed900a9726da37ec46bce46ce3f02379219473df20f335c814b726784d8cbe7a674928434703f9514c3c90b4

    • /data/user/0/com.br.pizzamaker/shared_prefs/com.br.pizzamaker_migrationpreferences.xml
      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /data/user/0/com.br.pizzamaker/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      2KB

      MD5

      52d32ab73bdba7357f1254573a6b3d27

      SHA1

      c52e4da69a91713416928aa73adaa2df696c5660

      SHA256

      12213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0

      SHA512

      17adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d

    • /data/user/0/com.br.pizzamaker/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      4KB

      MD5

      b49170337b8ebed6ba2a99395c06e9fe

      SHA1

      6405454a196e5cd0456b80f221bda72fa78d14a2

      SHA256

      2fdff7dde3e58827ae5aa6e715717baea46022422a76c566d0faef25d7ea26f9

      SHA512

      6c85c4d5d339d804ea87cdaabf3c6909135dad5221ce1109c3a7bc34e302f8375e007e1e016182a748d227172f59854d77b646aeb7e708009ef3b38ab38833e7