Analysis
-
max time kernel
3828214s -
max time network
140s -
platform
android_x86 -
resource
android-x86-arm-20220310-en -
submitted
21-05-2022 00:05
Static task
static1
Behavioral task
behavioral1
Sample
b21fb074fad3fc47b740a386d0981588c4cc3be97de773df756ded75cac0286b.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
b21fb074fad3fc47b740a386d0981588c4cc3be97de773df756ded75cac0286b.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
b21fb074fad3fc47b740a386d0981588c4cc3be97de773df756ded75cac0286b.apk
Resource
android-x64-arm64-20220310-en
General
-
Target
b21fb074fad3fc47b740a386d0981588c4cc3be97de773df756ded75cac0286b.apk
-
Size
5.9MB
-
MD5
6fa80f465bd59df696b2e45076e24589
-
SHA1
0c6836d52be826886ad0534e7b37a1d482034285
-
SHA256
b21fb074fad3fc47b740a386d0981588c4cc3be97de773df756ded75cac0286b
-
SHA512
b65bcc18b2786ff99e1f59a312fe599d4da5a72fdb8be867df86e8e94c92fc013f10d558062170473e49905cdd8df7a1d0a87833e3b4753efd966b29a4154a38
Malware Config
Signatures
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.gentongsehat.fudzappdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.gentongsehat.fudzapp
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.gentongsehat.fudzapp/files/credentials.datFilesize
233B
MD5fae1ec2080eae284d53994752c69a6ff
SHA1f9cf872c1498adea6d5c7d14180743871f2116ef
SHA25695fdec78835c7b3390c155757e8c07360caa1bc5f4be0d7e4f95ca9dc2dd9439
SHA512489e17113109dde9fd8672dee004cab8eb124dc3509732be86c06b5d886847e85886dc94cc0f44686fb050d8b8011c37bba8169af6e154a09dac71931c085a94
-
/data/user/0/com.gentongsehat.fudzapp/files/metrica_client_data.db.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/credentials.datFilesize
233B
MD5fae1ec2080eae284d53994752c69a6ff
SHA1f9cf872c1498adea6d5c7d14180743871f2116ef
SHA25695fdec78835c7b3390c155757e8c07360caa1bc5f4be0d7e4f95ca9dc2dd9439
SHA512489e17113109dde9fd8672dee004cab8eb124dc3509732be86c06b5d886847e85886dc94cc0f44686fb050d8b8011c37bba8169af6e154a09dac71931c085a94
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzappFilesize
40KB
MD52c6762525d844e2118513f91f11bf5de
SHA1d88d00fddbc9f399c7cdfea0d41c5135aca05993
SHA256f0cc6542369689c4294087f1fadba5a0d946f7a25e269201cad5fe3f7a087c74
SHA512aa090279109e3e69abde67987684eab0446579b57645be1453347bd2903bc113de5b91e64fa714647dc3a0f326870382bb97a6dfb3bdc5c4ea4e0112c361b2b8
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp-journalFilesize
524B
MD540f527999997b2be2c974e465db9752f
SHA13452b0a82e35e9019ca0a52e68ae230a315c30c4
SHA2563ffed32ef2a654af67125b01c36877a0eea98866c9fad3fe383ea6b12754583c
SHA512ed8a01f86da4c954dd59c695afd7ad581ce21571df891d886606294e028e3e02b130c016bb1efad3f1f28a3a14121843fc3b3cb72b4181136416a7bae1e0156c
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp-walFilesize
422KB
MD559ef763b85c8ba74a43be8ff221c2efd
SHA15864b18d6b06c6d0afd2c89f337b97bd0f6d823f
SHA2567e4a6c4d01c5d94579e776c354c5f7a06a27e4d188d4ed6948d95c1092fbe57b
SHA51234b99a14f77a9d3f6a33082887f875ab5e6b84c761d2273a42d605c163ca4a40ae27e9de5bf4d80baa02352be6892490041eaf1309ac108482747875ad3dfae6
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp_20799a27-fa80-4b36-b2db-0f8141f24180Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp_20799a27-fa80-4b36-b2db-0f8141f24180-journalFilesize
524B
MD5c5e8ffcab129e6292f32c7b69d3e1e50
SHA11c6c0f9a1cac42f90ef9921ae1e7864daa7488d0
SHA256caf5595b6d6b41f4af6a956cc19f633519cf64626fcca104dbedcb2f7482dca1
SHA51292d3bd9173b0c98a2e1afc0f2e54701d5bcb5334e8a6a185a5e2c6b6f1575d79840f14d5963c0308133a32daba45cf98bdfcb21ac160e90ada2bd40361fbc397
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp_20799a27-fa80-4b36-b2db-0f8141f24180-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp_20799a27-fa80-4b36-b2db-0f8141f24180-walFilesize
148KB
MD51dc749271b988a27e7fdb2407a3d17b6
SHA144e2069666a40c409cff3fe345fdfdf4562b239e
SHA256d9056fddd6b331245b213ec2b84a00f09f5eb6a044479daa52dea236885e6efb
SHA51294358c61c7665b16399b02474de111aefcbc757a83aa612478b5917dddb9981b3d0215b6f3b42e1dec64edd3255910726e0acccd0c30394f30d267332647d4a4
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.dbFilesize
24KB
MD568eb592ff94b07e483f6e8a4b6ec8a71
SHA1e7e7aff857255a76b29934abd0ee0d93846b835b
SHA25653f9f0ce9da296cc00a2c87813a5db11e29f08370603f65a52c474153f8941e7
SHA512dbc98de0593700286005d7bb23a642df1112df7786adf9f730b3740aeae22df4e64d6987d310a8297d12657c30b18cbb277108345320c6047638b360461d43ad
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-journalFilesize
524B
MD531fcf4fdc310c730da2e9533996dd5b8
SHA1c106db3f58ad0bad15339690edcbb80aedd6fc1c
SHA25654184fdfea21d081eb2a88369e95ece012cfd2d48cd5a7104c948d71b4966c5f
SHA51216e36fb4adc9657524ef4c7b66ec35567bdf2a662551e0e9955649a7f437b63ec952633baa986e244c0693484ffe686f48c4756e9fd3373a5fe2db43c65d87e7
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-walFilesize
8KB
MD5010f22753820a067cd6d66d295f715bc
SHA14652fb28a01b2cc956e95b3ef03c06ecedc2f0d9
SHA256467644941d25ae77ca21393a24f4d4f6b98615eac83aa1b28f87f326aed43138
SHA51226f5dca29343550449ecb5bf75c25cb30909cd5d226eda061eb43b67155dd6386e37fbc202600b556d0108830e66ac51489ed6e2960bb6d79a87c3961747cbe5
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-walFilesize
8KB
MD5c6b64c346f2331d5f61a4950159f7956
SHA1c7d3fca3537351813b964f5f559b859cd5cb152e
SHA256c6c9c8e11d2150032196cd50ac62e1ece70515e2acf5b5e6f11742648f9a4d1c
SHA512d5a63490f04464e26de52a335c9d3830281497aa5bc3c4705740b6169d0325db6faa64780820a47a1ac2576ac58723b231b1ad9f85042f5dcef9897f4f48ee58
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-walFilesize
8KB
MD558828e2d5e11430551d369689bf1700f
SHA146ee76a86a2d989b7baa3ce5d5e03468566b973c
SHA25692367a2d8b2e593f7534c4b551085063eb89e2b9c5d37496a2d9ca1770c42a5c
SHA51272dd6d276cc91a11d1346b6c0ceb67f21a3fbbfee2ed4fa180cc897b707815f96137a6f4f81ce2a65352e665b310c2666f98b841f98ee471de960f1b077ed497
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-walFilesize
32KB
MD57d0fe877f91c5a4ada52f4291ac7d4bb
SHA177703e52e924c558ad2c09f29761e147a172742b
SHA256dc96a049213c2954a9c0dfdb31a85b2795c6c211cc489fe172403ad976f2b8f3
SHA51297e404a8e5567d6b3560ba753f92c13be2f3b967326817568b3fdf2c5bc308bf57b1475158cceacaf9476eb1d58a890a6d735c593165dcd540b2ee6ec8e6f1a5
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-walFilesize
8KB
MD57fa02613dcdc4bbdce1b5910e091a8d3
SHA1fc07773e61a00f253fd9118151bd5a0125c460b9
SHA256d7be7ef64d53e9554dfb86e89d528e476a61b55df722db00e8be9537c9071624
SHA512a84c6954b39e32c2a1894c2d4f8f8a3d2ef19c0dbf032ac1aafbd7f7d2d270a1bb1cf6af8b8e029294cbec0fd96e55ff8cb1130167c957dd8f3684cd181a3f61
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-walFilesize
8KB
MD543101ed8305ecc3778ce209bd9bf2b5c
SHA1fe4a32ab50fd08c94328b9880c5606c467fc6e3f
SHA2569e8b4a7d21e2973b3c489807a1dc92f8a4be055fdf6382467aba479f00892f61
SHA51226c3b58b1cb95ceb53e01b959c97dd80529e9491b32ebc440e426c0b51f28ff8eb3088865c53bcbf8f534cd914b3a24cb0a77176f6a7475cb6dfd51455d65b70
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-walMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-walMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_data.dbFilesize
48KB
MD5026c7cce876d76c0347ef4b30cc55eac
SHA1f01fba34ba9841ffd01650c11eb463eee6a562ba
SHA256bfb113d92d13e89ebf87b2615f8dd18023645e9ef8340678186dea821e73ca95
SHA5124dd7ad1119d288cb6d0000f3f2f97d6e56988efdef4fe1b09b0216e5286268c2f20d8098de82bebc85f977fa72afe7b826448b223a1f752d29d50c8252221815
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_data.db-journalFilesize
524B
MD59d862c74b48f6572520a6ad4ebcab556
SHA16c13cdc1799c2ebfab7089bb37d3e39209b66080
SHA2563a6fe23b0df2ee2320d165c2646421cd7e66a5dc797479ad60c7327c2fb7bce7
SHA5127ca7f6b3cad7e037e64c7cabd03a9e72bdba6f3a450f50c81b25887e69645cfc9eadd6da5f7a98300a17b64340050eb34c2766b523f4bc99106f81bcadb70a76
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_data.db-walFilesize
414KB
MD5f3db6e590bad0185df75b79aee4fe255
SHA144eb5e39a2aa62d3bedb46aea3c4ffc2204eb397
SHA256d52b6d09d9c23c5bfb0d43d6607aaad7350256c5250299962f2aa6b63074fcaa
SHA51230f266d256277248150fda062ec45f2f3dbef2a9320590d79be803f002aafe9578c3e45e686cd85fa57206de7fe166867e33704a304adbe6f8ee361c34291fcb
-
/data/user/0/com.gentongsehat.fudzapp/shared_prefs/com.gentongsehat.fudzapp_migrationpreferences.xmlFilesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
/data/user/0/com.gentongsehat.fudzapp/shared_prefs/yteSlT7daYsGlbVGqXfR.xmlFilesize
2KB
MD552d32ab73bdba7357f1254573a6b3d27
SHA1c52e4da69a91713416928aa73adaa2df696c5660
SHA25612213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0
SHA51217adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d
-
/data/user/0/com.gentongsehat.fudzapp/shared_prefs/yteSlT7daYsGlbVGqXfR.xmlFilesize
4KB
MD5c4f014ea16d04d377605a11508a83763
SHA11e4ab2975fc39e8666d72a0d172dec8874bad858
SHA25689182bccf074d316111480d15141220ef3c52840b7e16e694f3baa43d842ec53
SHA5127ee4f254239e42f1d6b260d60290c01614d777627e3fd04f0c17ef7005a2f4bfe25ee3ec2417fe0ded7ad1a2e3366f271158a853be164e05214bd9b8b9644708