Analysis

  • max time kernel
    3828214s
  • max time network
    140s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    21-05-2022 00:05

General

  • Target

    b21fb074fad3fc47b740a386d0981588c4cc3be97de773df756ded75cac0286b.apk

  • Size

    5.9MB

  • MD5

    6fa80f465bd59df696b2e45076e24589

  • SHA1

    0c6836d52be826886ad0534e7b37a1d482034285

  • SHA256

    b21fb074fad3fc47b740a386d0981588c4cc3be97de773df756ded75cac0286b

  • SHA512

    b65bcc18b2786ff99e1f59a312fe599d4da5a72fdb8be867df86e8e94c92fc013f10d558062170473e49905cdd8df7a1d0a87833e3b4753efd966b29a4154a38

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.gentongsehat.fudzapp
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5159
  • com.gentongsehat.fudzapp:Metrica
    1⤵
      PID:5254

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.gentongsehat.fudzapp/files/credentials.dat
      Filesize

      233B

      MD5

      fae1ec2080eae284d53994752c69a6ff

      SHA1

      f9cf872c1498adea6d5c7d14180743871f2116ef

      SHA256

      95fdec78835c7b3390c155757e8c07360caa1bc5f4be0d7e4f95ca9dc2dd9439

      SHA512

      489e17113109dde9fd8672dee004cab8eb124dc3509732be86c06b5d886847e85886dc94cc0f44686fb050d8b8011c37bba8169af6e154a09dac71931c085a94

    • /data/user/0/com.gentongsehat.fudzapp/files/metrica_client_data.db.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/credentials.dat
      Filesize

      233B

      MD5

      fae1ec2080eae284d53994752c69a6ff

      SHA1

      f9cf872c1498adea6d5c7d14180743871f2116ef

      SHA256

      95fdec78835c7b3390c155757e8c07360caa1bc5f4be0d7e4f95ca9dc2dd9439

      SHA512

      489e17113109dde9fd8672dee004cab8eb124dc3509732be86c06b5d886847e85886dc94cc0f44686fb050d8b8011c37bba8169af6e154a09dac71931c085a94

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp
      Filesize

      40KB

      MD5

      2c6762525d844e2118513f91f11bf5de

      SHA1

      d88d00fddbc9f399c7cdfea0d41c5135aca05993

      SHA256

      f0cc6542369689c4294087f1fadba5a0d946f7a25e269201cad5fe3f7a087c74

      SHA512

      aa090279109e3e69abde67987684eab0446579b57645be1453347bd2903bc113de5b91e64fa714647dc3a0f326870382bb97a6dfb3bdc5c4ea4e0112c361b2b8

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp-journal
      Filesize

      524B

      MD5

      40f527999997b2be2c974e465db9752f

      SHA1

      3452b0a82e35e9019ca0a52e68ae230a315c30c4

      SHA256

      3ffed32ef2a654af67125b01c36877a0eea98866c9fad3fe383ea6b12754583c

      SHA512

      ed8a01f86da4c954dd59c695afd7ad581ce21571df891d886606294e028e3e02b130c016bb1efad3f1f28a3a14121843fc3b3cb72b4181136416a7bae1e0156c

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp-wal
      Filesize

      422KB

      MD5

      59ef763b85c8ba74a43be8ff221c2efd

      SHA1

      5864b18d6b06c6d0afd2c89f337b97bd0f6d823f

      SHA256

      7e4a6c4d01c5d94579e776c354c5f7a06a27e4d188d4ed6948d95c1092fbe57b

      SHA512

      34b99a14f77a9d3f6a33082887f875ab5e6b84c761d2273a42d605c163ca4a40ae27e9de5bf4d80baa02352be6892490041eaf1309ac108482747875ad3dfae6

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp_20799a27-fa80-4b36-b2db-0f8141f24180
      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp_20799a27-fa80-4b36-b2db-0f8141f24180-journal
      Filesize

      524B

      MD5

      c5e8ffcab129e6292f32c7b69d3e1e50

      SHA1

      1c6c0f9a1cac42f90ef9921ae1e7864daa7488d0

      SHA256

      caf5595b6d6b41f4af6a956cc19f633519cf64626fcca104dbedcb2f7482dca1

      SHA512

      92d3bd9173b0c98a2e1afc0f2e54701d5bcb5334e8a6a185a5e2c6b6f1575d79840f14d5963c0308133a32daba45cf98bdfcb21ac160e90ada2bd40361fbc397

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp_20799a27-fa80-4b36-b2db-0f8141f24180-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp_20799a27-fa80-4b36-b2db-0f8141f24180-wal
      Filesize

      148KB

      MD5

      1dc749271b988a27e7fdb2407a3d17b6

      SHA1

      44e2069666a40c409cff3fe345fdfdf4562b239e

      SHA256

      d9056fddd6b331245b213ec2b84a00f09f5eb6a044479daa52dea236885e6efb

      SHA512

      94358c61c7665b16399b02474de111aefcbc757a83aa612478b5917dddb9981b3d0215b6f3b42e1dec64edd3255910726e0acccd0c30394f30d267332647d4a4

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db
      Filesize

      24KB

      MD5

      68eb592ff94b07e483f6e8a4b6ec8a71

      SHA1

      e7e7aff857255a76b29934abd0ee0d93846b835b

      SHA256

      53f9f0ce9da296cc00a2c87813a5db11e29f08370603f65a52c474153f8941e7

      SHA512

      dbc98de0593700286005d7bb23a642df1112df7786adf9f730b3740aeae22df4e64d6987d310a8297d12657c30b18cbb277108345320c6047638b360461d43ad

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-journal
      Filesize

      524B

      MD5

      31fcf4fdc310c730da2e9533996dd5b8

      SHA1

      c106db3f58ad0bad15339690edcbb80aedd6fc1c

      SHA256

      54184fdfea21d081eb2a88369e95ece012cfd2d48cd5a7104c948d71b4966c5f

      SHA512

      16e36fb4adc9657524ef4c7b66ec35567bdf2a662551e0e9955649a7f437b63ec952633baa986e244c0693484ffe686f48c4756e9fd3373a5fe2db43c65d87e7

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-wal
      Filesize

      8KB

      MD5

      010f22753820a067cd6d66d295f715bc

      SHA1

      4652fb28a01b2cc956e95b3ef03c06ecedc2f0d9

      SHA256

      467644941d25ae77ca21393a24f4d4f6b98615eac83aa1b28f87f326aed43138

      SHA512

      26f5dca29343550449ecb5bf75c25cb30909cd5d226eda061eb43b67155dd6386e37fbc202600b556d0108830e66ac51489ed6e2960bb6d79a87c3961747cbe5

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-wal
      Filesize

      8KB

      MD5

      c6b64c346f2331d5f61a4950159f7956

      SHA1

      c7d3fca3537351813b964f5f559b859cd5cb152e

      SHA256

      c6c9c8e11d2150032196cd50ac62e1ece70515e2acf5b5e6f11742648f9a4d1c

      SHA512

      d5a63490f04464e26de52a335c9d3830281497aa5bc3c4705740b6169d0325db6faa64780820a47a1ac2576ac58723b231b1ad9f85042f5dcef9897f4f48ee58

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-wal
      Filesize

      8KB

      MD5

      58828e2d5e11430551d369689bf1700f

      SHA1

      46ee76a86a2d989b7baa3ce5d5e03468566b973c

      SHA256

      92367a2d8b2e593f7534c4b551085063eb89e2b9c5d37496a2d9ca1770c42a5c

      SHA512

      72dd6d276cc91a11d1346b6c0ceb67f21a3fbbfee2ed4fa180cc897b707815f96137a6f4f81ce2a65352e665b310c2666f98b841f98ee471de960f1b077ed497

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-wal
      Filesize

      32KB

      MD5

      7d0fe877f91c5a4ada52f4291ac7d4bb

      SHA1

      77703e52e924c558ad2c09f29761e147a172742b

      SHA256

      dc96a049213c2954a9c0dfdb31a85b2795c6c211cc489fe172403ad976f2b8f3

      SHA512

      97e404a8e5567d6b3560ba753f92c13be2f3b967326817568b3fdf2c5bc308bf57b1475158cceacaf9476eb1d58a890a6d735c593165dcd540b2ee6ec8e6f1a5

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-wal
      Filesize

      8KB

      MD5

      7fa02613dcdc4bbdce1b5910e091a8d3

      SHA1

      fc07773e61a00f253fd9118151bd5a0125c460b9

      SHA256

      d7be7ef64d53e9554dfb86e89d528e476a61b55df722db00e8be9537c9071624

      SHA512

      a84c6954b39e32c2a1894c2d4f8f8a3d2ef19c0dbf032ac1aafbd7f7d2d270a1bb1cf6af8b8e029294cbec0fd96e55ff8cb1130167c957dd8f3684cd181a3f61

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-wal
      Filesize

      8KB

      MD5

      43101ed8305ecc3778ce209bd9bf2b5c

      SHA1

      fe4a32ab50fd08c94328b9880c5606c467fc6e3f

      SHA256

      9e8b4a7d21e2973b3c489807a1dc92f8a4be055fdf6382467aba479f00892f61

      SHA512

      26c3b58b1cb95ceb53e01b959c97dd80529e9491b32ebc440e426c0b51f28ff8eb3088865c53bcbf8f534cd914b3a24cb0a77176f6a7475cb6dfd51455d65b70

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-wal
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-wal
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_data.db
      Filesize

      48KB

      MD5

      026c7cce876d76c0347ef4b30cc55eac

      SHA1

      f01fba34ba9841ffd01650c11eb463eee6a562ba

      SHA256

      bfb113d92d13e89ebf87b2615f8dd18023645e9ef8340678186dea821e73ca95

      SHA512

      4dd7ad1119d288cb6d0000f3f2f97d6e56988efdef4fe1b09b0216e5286268c2f20d8098de82bebc85f977fa72afe7b826448b223a1f752d29d50c8252221815

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_data.db-journal
      Filesize

      524B

      MD5

      9d862c74b48f6572520a6ad4ebcab556

      SHA1

      6c13cdc1799c2ebfab7089bb37d3e39209b66080

      SHA256

      3a6fe23b0df2ee2320d165c2646421cd7e66a5dc797479ad60c7327c2fb7bce7

      SHA512

      7ca7f6b3cad7e037e64c7cabd03a9e72bdba6f3a450f50c81b25887e69645cfc9eadd6da5f7a98300a17b64340050eb34c2766b523f4bc99106f81bcadb70a76

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_data.db-wal
      Filesize

      414KB

      MD5

      f3db6e590bad0185df75b79aee4fe255

      SHA1

      44eb5e39a2aa62d3bedb46aea3c4ffc2204eb397

      SHA256

      d52b6d09d9c23c5bfb0d43d6607aaad7350256c5250299962f2aa6b63074fcaa

      SHA512

      30f266d256277248150fda062ec45f2f3dbef2a9320590d79be803f002aafe9578c3e45e686cd85fa57206de7fe166867e33704a304adbe6f8ee361c34291fcb

    • /data/user/0/com.gentongsehat.fudzapp/shared_prefs/com.gentongsehat.fudzapp_migrationpreferences.xml
      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /data/user/0/com.gentongsehat.fudzapp/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      2KB

      MD5

      52d32ab73bdba7357f1254573a6b3d27

      SHA1

      c52e4da69a91713416928aa73adaa2df696c5660

      SHA256

      12213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0

      SHA512

      17adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d

    • /data/user/0/com.gentongsehat.fudzapp/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      4KB

      MD5

      c4f014ea16d04d377605a11508a83763

      SHA1

      1e4ab2975fc39e8666d72a0d172dec8874bad858

      SHA256

      89182bccf074d316111480d15141220ef3c52840b7e16e694f3baa43d842ec53

      SHA512

      7ee4f254239e42f1d6b260d60290c01614d777627e3fd04f0c17ef7005a2f4bfe25ee3ec2417fe0ded7ad1a2e3366f271158a853be164e05214bd9b8b9644708