Analysis

  • max time kernel
    3824926s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220310-en
  • submitted
    21-05-2022 00:08

General

  • Target

    178d3e0365941adb8a65e8fc68ccf98487a8d39e33124de24ba0c8d551f33d41.apk

  • Size

    5.9MB

  • MD5

    3d7ba07aaf001199432885826ae6d92e

  • SHA1

    1aa2d13f4c33103ba3278c2caf94ee24a148f262

  • SHA256

    178d3e0365941adb8a65e8fc68ccf98487a8d39e33124de24ba0c8d551f33d41

  • SHA512

    9e000350237ac6589d90c7bf9bba0b9e04b7b826a0f3e584e7ba58f9a6db0abcb9290f4185e56c9d1950ca20ecb3e524d4b466d4db85ed7b59ba76f0a75c89dc

Score
7/10

Malware Config

Signatures

  • Queries the unique device ID (IMEI, MEID, IMSI).
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.appsmart.delivery.darbarmuenchen2087
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5582
  • com.appsmart.delivery.darbarmuenchen2087:Metrica
    1⤵
      PID:5701

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/ZPkFS.log
      Filesize

      90B

      MD5

      6823a30893810e536ff3b3bf02af7e1f

      SHA1

      9cc2efcd7706b3d1b8a55a69caf2ab3872571faf

      SHA256

      afe3f423a86fbed51b64a8099091152e3f1e5668a77644e99cd18d234c15810a

      SHA512

      078e58d9b051246068e2a8eb8927dfbc09673367de01ef151a8e76a608bef8dfcec71891050b683ad5a80f99e502fcbaac886bc1d9a950782e86828bc9ca3828

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/credentials.dat
      Filesize

      233B

      MD5

      2a88e5e443198e6b73d3a19c86551207

      SHA1

      fba755cc968fcb8613bb1b724f91177c61eab554

      SHA256

      350cf3a9d3a7f2689269c04f83709d75ff6e7b934e1d4d278d819c804b0bed46

      SHA512

      dfdfb1cf6eba9092280323fb45e17ef4e25bdf92ef957b9c6c7a76b6125c31e87d52abc57afda7922005179411fb7b59301ce51c40cebecd7b19d3ce475fe83c

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/metrica_client_data.db.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/credentials.dat
      Filesize

      233B

      MD5

      2a88e5e443198e6b73d3a19c86551207

      SHA1

      fba755cc968fcb8613bb1b724f91177c61eab554

      SHA256

      350cf3a9d3a7f2689269c04f83709d75ff6e7b934e1d4d278d819c804b0bed46

      SHA512

      dfdfb1cf6eba9092280323fb45e17ef4e25bdf92ef957b9c6c7a76b6125c31e87d52abc57afda7922005179411fb7b59301ce51c40cebecd7b19d3ce475fe83c

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087
      Filesize

      1.3MB

      MD5

      be685c0a5df1455715d336650cd06639

      SHA1

      51be127115b46ef3da664420471e8077d9215051

      SHA256

      30fa4cf26175740d06ed4d1bcf80ed92b4177044d2e1c76e1d0f35a34c85b6e1

      SHA512

      04ba905622a6f890fb61125f4dd836ca33ab2affac06e62c59dfd748b3e5a7674232886d6e2735b20a9b2828fafbbb5f6a8ad57ea71339fee6be83f72e82a2bd

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
      Filesize

      1KB

      MD5

      8a1466916cbd0c84b1d3d0c2ac8d1c4c

      SHA1

      64d66c3c18e29113da27c1195e982b9d08ec2cfd

      SHA256

      53b594f87ad69c69cde6f634ab9e270e60a82c0310b16b6b5a9ce059a67d586e

      SHA512

      8f40e0a894529b6c1a0104fa913978f043a3aca7e7f95a1a36f371de516811a37f41c5581ebf3217e14479a0cd13813d0277398649128b1edc60d632269cbe5a

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180
      Filesize

      464KB

      MD5

      46690cce60e3e13c5e7b324b620d4391

      SHA1

      8404245c731d0053b4133bd63f05f6c6eadf6cff

      SHA256

      b95843c0716ea1df3d3b505497057f118b363572cabdd76634799e9c1f191cda

      SHA512

      1fec9afb45e227a9dec5fd8943537920161957d2751371d00aef0009795c6552250c771abd729f9b30dae355140f08d12ee7c6bc075de878c2d223e257cf4130

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
      Filesize

      1KB

      MD5

      751cc28aec6b536ad0f8f6deab165024

      SHA1

      4579e1bef25190ee19fbc0f4985b8be37e3bceb2

      SHA256

      a09e7389ef4fc9e109133fb50c90c2125c1304146656951c2b55d5b71bcd7611

      SHA512

      33310c0a9219f6c5e0c9d1e4347d8ece5456ebce2871b6fbd8c0a4872b6c424096e0d37b9cb5944ce92a21b4d635c955563db4ce8d29e4acf99b7d67e0cb8ce1

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db
      Filesize

      72KB

      MD5

      9a3a3b75fccfd0f867aa701a3bcc1680

      SHA1

      a9502f26a77a0073cdc1e7db61c3163b2b99582b

      SHA256

      dad6e81e21c686e9f565f1566d67f150135334644af3b4db184e01331cf2a905

      SHA512

      8f3b3458a40628d469d7ea1cb8388b1a73bada8b6e30309cca48d1066d14f80d0d3f55953977a4b3e98a31c8ed421845691e4784a96419d72867d92faab66dec

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal
      Filesize

      1KB

      MD5

      160373d17baef7e3597428e22076f08d

      SHA1

      5151aba1c32a65c08bcb92edb3663116ac4eb78b

      SHA256

      a0195b14c97f9b212a070a3dc10ed263c34e088f9978a9d0266f605439ec75e3

      SHA512

      c6058fbda876851dbc9ae0d205d98955eaed8a91282600575a9991c1067b33cf646318a3eb21ea3f60a1ccc5a480d0b08756a3a00d4505b4501df2b6bab7690a

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db
      Filesize

      1.2MB

      MD5

      b6dd0881c2cc64d3d870e00dd0ad3e71

      SHA1

      394dff844b1c38debbc64c8be9d316f9d7eef87b

      SHA256

      10063d313059cd83a923e8fb7478037d4659604869557fac3a966727e26bf106

      SHA512

      45905bd9abb2e5d0b3701d50bf33fc7f6cc756535d807d190ff67b7076831fe3ca3d9cebd9abb4ead82ad2fe4b836e55377e26e270eada6545955127bcd226df

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db-journal
      Filesize

      1KB

      MD5

      9948bad62161504543eadef2cd628395

      SHA1

      2c88b4b204af12da2fcc26b800924eb73ccb7d39

      SHA256

      d04a1d6dc44d1154d4997d9ac3dba2984225635b305430c3c8da0ae96fcdf309

      SHA512

      05fde10028caca6c9c2b2e08340e74f26e87c95d3d2335e838e495ac5e270b6ce667c0a083efdf6c1aad622e8e6b69511fc1737f8c875ab1b53832e5f63b2406

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/shared_prefs/com.appsmart.delivery.darbarmuenchen2087_migrationpreferences.xml
      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      2KB

      MD5

      52d32ab73bdba7357f1254573a6b3d27

      SHA1

      c52e4da69a91713416928aa73adaa2df696c5660

      SHA256

      12213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0

      SHA512

      17adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      4KB

      MD5

      7ce76fa54817dbcd4a6b3b18de351c4a

      SHA1

      a7d20daccc0bb358e28660b1ef036479a728a852

      SHA256

      6e353b8766f28d9cb1e5a5484ac8438c162a82db410611132a5aec91bc118276

      SHA512

      b82735a38e3e06802e94ff6c12e84a0a93a592fb5ec264cebc3739e9786e7f188e40a962ef75f1c58f6c1a7fd668698b04320af4968a29641b5d6c70eb9946a3