Analysis

  • max time kernel
    3825429s
  • max time network
    167s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220310-en
  • submitted
    21-05-2022 00:12

General

  • Target

    33401ecad901aba45fa1cfc1a8e6a95557d0bdc86669c03af0b339d518124994.apk

  • Size

    5.9MB

  • MD5

    620b040f2b9dc535a4eaa084260a2de8

  • SHA1

    32c6e529db788e678558abc78d8cb1e8da804394

  • SHA256

    33401ecad901aba45fa1cfc1a8e6a95557d0bdc86669c03af0b339d518124994

  • SHA512

    9222704f2d82181560b2227438179fbc5fdbc1e944d6f3237850056d72183ff82b46ac3bd84767602e21695beb84d7c165ad879a01986d0515c67bfd0e324cee

Score
7/10

Malware Config

Signatures

  • Queries the unique device ID (IMEI, MEID, IMSI).
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.br.pizzamaker
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:6981
  • com.br.pizzamaker:Metrica
    1⤵
      PID:7041

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.br.pizzamaker/files/ZPkFS.log
      Filesize

      90B

      MD5

      693cec701d9fdeab254d014956e6d8f4

      SHA1

      0d6f5ea54033b51905d4011e0b57f86d84de9c80

      SHA256

      2ed2653c4effe5e559a98d2589f13e3975990154a61a4148c877f7e442dad279

      SHA512

      7b2c139d7d297b6b07d3728c35d6945c43bea2bc2ca3cfdc2650c1f4aa2085810613cbf1f46c5f34e4d5fae2fc5e0e178e99f3bd2b9f1b3acb7a236c122210f0

    • /data/user/0/com.br.pizzamaker/files/credentials.dat
      Filesize

      233B

      MD5

      6482fdc508beae8a1bf916602513780c

      SHA1

      e7c6ed0d507742fae08263a2caf3ddf03fe7d80d

      SHA256

      82354f2971cbc7d014251bbd3a9b782eabf74f5de536e618eb99af0a010f3f2e

      SHA512

      b319b19c94f3ef479013e6376e091878dee21790c29a7f549e78ccd32db5511c76782125cb24c495827eec60a7d35402c4c9f9718b251d3b084ff0f4346c111e

    • /data/user/0/com.br.pizzamaker/files/metrica_client_data.db.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.br.pizzamaker/no_backup/credentials.dat
      Filesize

      233B

      MD5

      6482fdc508beae8a1bf916602513780c

      SHA1

      e7c6ed0d507742fae08263a2caf3ddf03fe7d80d

      SHA256

      82354f2971cbc7d014251bbd3a9b782eabf74f5de536e618eb99af0a010f3f2e

      SHA512

      b319b19c94f3ef479013e6376e091878dee21790c29a7f549e78ccd32db5511c76782125cb24c495827eec60a7d35402c4c9f9718b251d3b084ff0f4346c111e

    • /data/user/0/com.br.pizzamaker/no_backup/db_metrica_com.br.pizzamaker
      Filesize

      1.2MB

      MD5

      dd25e433c8da726281ecca771de751ff

      SHA1

      163603164f42d3fdeb5bc1f790e29c221c213785

      SHA256

      e5a9d24e64eb78f5d0d8e576dfd28782ceeeeee932ce15668dc6ef9e56107691

      SHA512

      dffcc312b5a05a6d780d7d0d6e434ce7459c1a661017a90a0d2d67948767830e70c277e884c7421d1dbf2a2c143c5b4c3d8367151e29b2fb94aca8fb67b105d7

    • /data/user/0/com.br.pizzamaker/no_backup/db_metrica_com.br.pizzamaker-journal
      Filesize

      1KB

      MD5

      0ff9c7d1a35d057f30404f81edf9ea26

      SHA1

      6dab4a5945c48218fee3d7c4d1b5635a9fc6a871

      SHA256

      e1b317669ddd816485f9471702c61bb9b631ff89fd1b0fe627ee2e1ee666cce2

      SHA512

      01ad5f4c06df0bfc23227895a4dd7867a7f7d2bd85c173d9787f47554603221d837fb59960ad19cc7697bcdc734d79a75c7e0d5398b7beee218f8fbee77839cf

    • /data/user/0/com.br.pizzamaker/no_backup/db_metrica_com.br.pizzamaker_20799a27-fa80-4b36-b2db-0f8141f24180
      Filesize

      400KB

      MD5

      226f119ec6b45557c949d8af2594063d

      SHA1

      f1ab45165cf509c1749fe2e417196b070b531083

      SHA256

      973861dfc4a1c647fdda8d925f1026a4cc4686b08d956baddc09d30e7b426ce7

      SHA512

      54aede1d0083b0c777bd87c4ba8fea5b51d9ee381c3c0c47d690deb3af5a760a474ac5fe3ecbc0167a44653ada4a41fbd873c54d5fadbb9441c68138f7b923eb

    • /data/user/0/com.br.pizzamaker/no_backup/db_metrica_com.br.pizzamaker_20799a27-fa80-4b36-b2db-0f8141f24180-journal
      Filesize

      1KB

      MD5

      1fb784784e0c81ca1ed3d56718092420

      SHA1

      389729878a5435b86ad288c99b5540527ed54e14

      SHA256

      ef860ed5e483efc5da6d3cf09786f6230737ffc8a2ae64a37fa61320550bb05e

      SHA512

      f150be927673b8944db40c9e21999063d364ab5ee1472dc53840265a784c01489a67559b519fb431c2028bccb1aeb61a8c5a55510b0816c1346521434dc15f6c

    • /data/user/0/com.br.pizzamaker/no_backup/metrica_client_data.db
      Filesize

      72KB

      MD5

      9a3a3b75fccfd0f867aa701a3bcc1680

      SHA1

      a9502f26a77a0073cdc1e7db61c3163b2b99582b

      SHA256

      dad6e81e21c686e9f565f1566d67f150135334644af3b4db184e01331cf2a905

      SHA512

      8f3b3458a40628d469d7ea1cb8388b1a73bada8b6e30309cca48d1066d14f80d0d3f55953977a4b3e98a31c8ed421845691e4784a96419d72867d92faab66dec

    • /data/user/0/com.br.pizzamaker/no_backup/metrica_client_data.db-journal
      Filesize

      1KB

      MD5

      c319d06808f6aaafd1e3a60fd6056787

      SHA1

      8e6ccda858857f469f789aeb3f1d68a354889559

      SHA256

      f6095f9cd0b2c117381110aa71cf38292e5a104e3032fd101b6754e4ff56e672

      SHA512

      bc2ccf158b265e14379a559dcb1c2a18fbfce2b0b8cffabab0dd43075d28ff21d011063cc85c33fcaff8fc085bbef0e76e4e0809b25949b3b0168c94c08db449

    • /data/user/0/com.br.pizzamaker/no_backup/metrica_data.db
      Filesize

      1.2MB

      MD5

      68ab203f65ff6002844a7828c9bf6ed4

      SHA1

      e96d7f65e6942b5dcd90a108f5150180c16b8c8c

      SHA256

      55c8230c1c3b4d0ea0fb8d2f55d4479f5c48dc3cc7b4322453457d2fa3900dda

      SHA512

      06c590cf4fb29bb790fe15b15d4a061627a8932962fb76f37b4d2fecc763fb29ae31b5e6709c5fb5fb40eaf77d0a7329bfd2b3d4d1ab72901e4c61e54ef685a5

    • /data/user/0/com.br.pizzamaker/no_backup/metrica_data.db-journal
      Filesize

      1KB

      MD5

      56e014f440c13457b371e5d2c22e23d1

      SHA1

      4d42cba5a214dd6432a7bf4e2851baf98ad38757

      SHA256

      941f7910d89150327f1a93261886118ed4f32d2dc9e868ced68356405d1a6608

      SHA512

      553ead409656885ad978768337fcb367b5e79eb798883e7012bd67038e653160387696fcd9ead2b9754b42f126b17a9fcfd14f603793b23775dbf86a48c712b0

    • /data/user/0/com.br.pizzamaker/shared_prefs/com.br.pizzamaker_migrationpreferences.xml
      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /data/user/0/com.br.pizzamaker/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      2KB

      MD5

      52d32ab73bdba7357f1254573a6b3d27

      SHA1

      c52e4da69a91713416928aa73adaa2df696c5660

      SHA256

      12213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0

      SHA512

      17adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d

    • /data/user/0/com.br.pizzamaker/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      4KB

      MD5

      b49170337b8ebed6ba2a99395c06e9fe

      SHA1

      6405454a196e5cd0456b80f221bda72fa78d14a2

      SHA256

      2fdff7dde3e58827ae5aa6e715717baea46022422a76c566d0faef25d7ea26f9

      SHA512

      6c85c4d5d339d804ea87cdaabf3c6909135dad5221ce1109c3a7bc34e302f8375e007e1e016182a748d227172f59854d77b646aeb7e708009ef3b38ab38833e7