Analysis

  • max time kernel
    3828084s
  • max time network
    171s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220310-en
  • submitted
    21-05-2022 00:47

General

  • Target

    66c0409213fe3a8bab4470a3a7b12a2b23b84f8992b7ed10a1119bffa898709a.apk

  • Size

    5.9MB

  • MD5

    e52042b829fe9a43beb4c605071d1045

  • SHA1

    a7e39ad9d09eb86c49b42d4b1cb4525f213aeed8

  • SHA256

    66c0409213fe3a8bab4470a3a7b12a2b23b84f8992b7ed10a1119bffa898709a

  • SHA512

    0f617ce9d45cf326998fc682760e560139709fe18c66672a79e46935d7327d6cd68ad2cb42eec91bae41a53800a4087eb575fe8a6314fed739565edffefccf1e

Score
7/10

Malware Config

Signatures

  • Queries the unique device ID (IMEI, MEID, IMSI).
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.appsmart.delivery.darbarmuenchen2087
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:6939
  • com.appsmart.delivery.darbarmuenchen2087:Metrica
    1⤵
      PID:6999

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/ZPkFS.log
      Filesize

      90B

      MD5

      146322d899fc7c236e63b495706d229b

      SHA1

      534dba0a6a2cc0808a2cb49fdd8f2e50b556d7a2

      SHA256

      9777b9d6803b0ff0fa1ae7ab580db40facdc36e26db19edd99646b36a4d38931

      SHA512

      213dbdec4130cc7987d8d2bdb67522e5807ad8c79fc448d14ab2a408697c13045ca7455e942e542b0221b33959c089f4367aa13e3a52ea3b1f9331828c84393c

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/credentials.dat
      Filesize

      233B

      MD5

      9fb66e9c5f688b359994b13690aa73d5

      SHA1

      7fceb8a4e5f7f65478a10240e6d328545fc43d2b

      SHA256

      f840a0ea1d8df4d5ac682cc2bdaf0fbc677ccdc5006c57a347624f10baef5b1a

      SHA512

      cdbf58c7b21d13171ab3f831e4db06d8eeddfd6c57f14d3322dcd737ac2c8d0df2a0c619d8ba1dc8fa55e5cd69f23630f1c59c1fd34d37622e25d1f0bf260c5e

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/metrica_client_data.db.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/credentials.dat
      Filesize

      233B

      MD5

      9fb66e9c5f688b359994b13690aa73d5

      SHA1

      7fceb8a4e5f7f65478a10240e6d328545fc43d2b

      SHA256

      f840a0ea1d8df4d5ac682cc2bdaf0fbc677ccdc5006c57a347624f10baef5b1a

      SHA512

      cdbf58c7b21d13171ab3f831e4db06d8eeddfd6c57f14d3322dcd737ac2c8d0df2a0c619d8ba1dc8fa55e5cd69f23630f1c59c1fd34d37622e25d1f0bf260c5e

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087
      Filesize

      1.2MB

      MD5

      18dd381be30dcdfdc7c3ea8fa210ddd2

      SHA1

      f6646c5ea88f75dcceff663aa28d9962801e8611

      SHA256

      7564f9fa37184c584bcd710d1bf0fa260c0e8e0fcbad93988a972294ab38c791

      SHA512

      c66d7678d35973335e3984f0ebc84b3554956c62a337921e912435ed9046e82c6f30daffab37e885e6e052d96e1e0a20ad3a2f230b97b755054957fd149febf1

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
      Filesize

      1KB

      MD5

      9d513563e8a39e2cd73eae3425caf3c3

      SHA1

      fa9f2927e19ce4ef63eb60fb4309cd88bab12ea1

      SHA256

      52b597c0aebc441e766460f120499f4e9532942d6793d9ece560118f998a9695

      SHA512

      ed9a5f1c4e9e6c83b9037de8a4164e6e3970e9e164d15b324eb684f93966beb5486d60db3e7458d588cb98a09267ee59077047a78a65698abcc2ce18de0ca9e4

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180
      Filesize

      424KB

      MD5

      33394cf1cff4a4af09458678e7a9e598

      SHA1

      a39723a1a501c9d15ae14318329e2898d491bca0

      SHA256

      63822d8213b448661e19b4b68116a2cd7236b3faf8afa835d1a2b22aa21aeb53

      SHA512

      ba9b0d998baf610d33e16062d9056c887964cb1b99040dbe694f70b9d9430b7f656b0715391220f47ce50360c63609cb3ecbdf6a4c659e68163978df089e9a66

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
      Filesize

      1KB

      MD5

      e1c9d1be45b1a9029848ef5d0697374d

      SHA1

      c02327cfc31b8f97b2e6840e34878708ae5d1d6d

      SHA256

      c54a0230f0ffbc687717b6b87af98562c4e6a1b69df080f4fe58d247d7e7f1b8

      SHA512

      653c650c5eadf92fbd1d2b23bbab79e0b77a91147d1aeec91741d7ca424aa7655a6a820de9fdf7048090bc91b48c16aec0627f2076326cf9aea87f91c7ce0175

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db
      Filesize

      72KB

      MD5

      9a3a3b75fccfd0f867aa701a3bcc1680

      SHA1

      a9502f26a77a0073cdc1e7db61c3163b2b99582b

      SHA256

      dad6e81e21c686e9f565f1566d67f150135334644af3b4db184e01331cf2a905

      SHA512

      8f3b3458a40628d469d7ea1cb8388b1a73bada8b6e30309cca48d1066d14f80d0d3f55953977a4b3e98a31c8ed421845691e4784a96419d72867d92faab66dec

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal
      Filesize

      1KB

      MD5

      c3f36c5824e0b8a19fbcf9618b6e757e

      SHA1

      3cbf00586cf6693a7c38e85ad42d9525cb7fb4d3

      SHA256

      7a6b76b10428ad3ef0e11b25fa2b2b821140273e68ad1121793d00bb21872521

      SHA512

      3da233654f06eceb15ae22ede5d1f8213c6572aac1a5a8b489dd9d97df979d804fb6954b3efb8824c15d3a7650e6a9c753e44a1993eab2e620990047bf710f5c

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db
      Filesize

      1.2MB

      MD5

      e15a78f6f6a8da4e1704fdfa66f687c5

      SHA1

      9ce71d7fa1cbd07fc6f426696722867118696e88

      SHA256

      14de4299816be9d92fe47f21819c50ee969329c1233056bf6d35e0f6cf641985

      SHA512

      f32ef850ba00cd3a68dda9d5d7d3b19de0f9ae8a4f6feeed64daca5574aa23ec8fbc23a4f7c906e9eb43cb97df3c7b6d1cd057d32bcb1a84af2a6cb17164237d

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db-journal
      Filesize

      1KB

      MD5

      4de3f3fc874f2c7e83e1405a85fcd4c2

      SHA1

      505affbbe45d230d6c893a97d41f0dec4c7d636a

      SHA256

      68a53df05edfd9301f3fefc06860296be559eaa4341a2d81828e342a36ce0afe

      SHA512

      613158341affed1162ecbbfe760e28e48810bf06f21cd7abae1b702258349690285330934fc1179984209c9805fb66e028c843b77e3b6a2658bb27ce21a70103

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/shared_prefs/com.appsmart.delivery.darbarmuenchen2087_migrationpreferences.xml
      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      2KB

      MD5

      52d32ab73bdba7357f1254573a6b3d27

      SHA1

      c52e4da69a91713416928aa73adaa2df696c5660

      SHA256

      12213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0

      SHA512

      17adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      4KB

      MD5

      7ce76fa54817dbcd4a6b3b18de351c4a

      SHA1

      a7d20daccc0bb358e28660b1ef036479a728a852

      SHA256

      6e353b8766f28d9cb1e5a5484ac8438c162a82db410611132a5aec91bc118276

      SHA512

      b82735a38e3e06802e94ff6c12e84a0a93a592fb5ec264cebc3739e9786e7f188e40a962ef75f1c58f6c1a7fd668698b04320af4968a29641b5d6c70eb9946a3