Analysis

  • max time kernel
    3826413s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220310-en
  • submitted
    21-05-2022 00:29

General

  • Target

    5139bf4007d436978af65cc37bbc293146cfb223d0e0d18b2b9be5a1e2098944.apk

  • Size

    5.9MB

  • MD5

    b2f955d055177fd63a4b0414c5a44da9

  • SHA1

    0e796a0abc9b98b3b430e461c742b31868247127

  • SHA256

    5139bf4007d436978af65cc37bbc293146cfb223d0e0d18b2b9be5a1e2098944

  • SHA512

    0a422bec929af4b86db1c950e1b5b2f7c5bcbeac9e8b925d2c375a39df73c6c1ac06e7d446fdec7803aff8774d1ab7f801072f8fa68d0e608c24602e79cfb413

Score
7/10

Malware Config

Signatures

  • Queries the unique device ID (IMEI, MEID, IMSI).
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.appsmart.delivery.darbarmuenchen2087
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5845
  • com.appsmart.delivery.darbarmuenchen2087:Metrica
    1⤵
      PID:5909

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/ZPkFS.log
      Filesize

      90B

      MD5

      0cd035a8998aecc1e504bc215ec406a3

      SHA1

      b99a074d7363291e5773b6e4483fc694d6c67c00

      SHA256

      9cca302c1091f24beb583af361e378611410ff7074a0d3a2ec5aa7dc780c07e5

      SHA512

      7e85d1d75b3132352469eef893a7dad7878825b5e61fcd0a0f3c06104ec36ea0a36f820bc0967133ceb40bc86b6221cbb029174499ae236816ae23705f2ca0a2

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/credentials.dat
      Filesize

      233B

      MD5

      b7e806fd6e3b65da7bed88a00cb58816

      SHA1

      ef0f05ff38d71b08675240a7bc39288cd4c464f3

      SHA256

      e8acf88b5bc140f3142428e2494734b4c839be7e82fef22a8ac15d6c61679af2

      SHA512

      9001981939820b27a21c9f471de486144a54f662aaaad46589456692ce8c1b0082d5ed93e47aad8a9cb85c59ec9d362217a8e1ce134fc895362c8e1f466f2090

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/metrica_client_data.db.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/credentials.dat
      Filesize

      233B

      MD5

      b7e806fd6e3b65da7bed88a00cb58816

      SHA1

      ef0f05ff38d71b08675240a7bc39288cd4c464f3

      SHA256

      e8acf88b5bc140f3142428e2494734b4c839be7e82fef22a8ac15d6c61679af2

      SHA512

      9001981939820b27a21c9f471de486144a54f662aaaad46589456692ce8c1b0082d5ed93e47aad8a9cb85c59ec9d362217a8e1ce134fc895362c8e1f466f2090

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087
      Filesize

      1.2MB

      MD5

      d60b0bed574adb5a2b4ab0c97e0d2cbf

      SHA1

      c33145f6e117a17a2581f23798ec035a7e20ca17

      SHA256

      69e0cd7e7760701b9d06c5b2cb3277a970c49cb501c52ec2a532135015d1c2ec

      SHA512

      a6156a14239c31d4228c132c527396723d15f472331f1d4f49708e18f8a3e5f131d10b7711698d0bfd5236c2a63533107aae2c79c98ee339a5a660ef3cd8a9fc

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
      Filesize

      1KB

      MD5

      6c88ea8072a8cc366b663de7a641d1ba

      SHA1

      28bcd1ec38fd837aba6d370311faa17cab4ac1b7

      SHA256

      1f15f6065cc5f0f91dec2b5bc008b38f9b1036135491c219833d8fd7e6880c42

      SHA512

      1962ec8c7e40e2496e5a8cc1b7cac4ce8720c0da714cc1690e706c9115d472e3a3c1d1a1820aba10ef41c5165ed83f38650771bb13552b7e1652b33f3a469668

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180
      Filesize

      440KB

      MD5

      71b5447abcd4052884efd280c7d68aa8

      SHA1

      4157bc8319e9e9d42f31ce3ba239ce1588ca27b2

      SHA256

      a13d643216e7df5aa9ec45f784998e0b3d34e84da7553312f19b50fea4c51591

      SHA512

      215534d3d6c120c978f082471d60ce151743bf4e9a057b3d6137707047bbb23f5a3755eab16c25e3611c5e3714dd81505c3230cb3fdf511067590d327100ea40

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
      Filesize

      1KB

      MD5

      4a57c6785ed668e040ad15d934c31e6b

      SHA1

      86bc1e4d7e30e109bb637360ca525342f95d1870

      SHA256

      ef808c5be8cf5b36f5770e1e15a2ed837178d4eb38a685e78d1cc2ca9181df10

      SHA512

      79b18ddba19a3d29b3db6506a0bdce14e607c7d87583715649a10d6f30f7ad8ec2d35713fe90d0e58a16dd4ed876d7a7ceee77d916edc02b327a73f966dce585

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db
      Filesize

      72KB

      MD5

      9a3a3b75fccfd0f867aa701a3bcc1680

      SHA1

      a9502f26a77a0073cdc1e7db61c3163b2b99582b

      SHA256

      dad6e81e21c686e9f565f1566d67f150135334644af3b4db184e01331cf2a905

      SHA512

      8f3b3458a40628d469d7ea1cb8388b1a73bada8b6e30309cca48d1066d14f80d0d3f55953977a4b3e98a31c8ed421845691e4784a96419d72867d92faab66dec

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal
      Filesize

      1KB

      MD5

      09a80869f0b95d505c9bb2e627fbb9eb

      SHA1

      3e2d525b7e292698daf584066970013882cff49e

      SHA256

      44fde94432ca9d33c40978d9a8ddf695696397160d331a63bb75bff5cb79adcd

      SHA512

      754e191ec439de9806a432c578c0de8a2d80ec8cb5afa0a9b153fe9875d692d4a8e2961c09d9a8a1bce48a6e3cab936416739f3a25adfcb3f42c2b413ca17a32

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db
      Filesize

      1.2MB

      MD5

      a9731fd9812b2b3d2a6e5685af9fb8d5

      SHA1

      8d2defc758ff8b22fef11028dc84e02cb528e245

      SHA256

      42e570cdcbe08265d0b303ffdfe18d113b2a4f21f4d0e41a0b7fee63a9fa2e42

      SHA512

      3e4df928f31f614c8ea17ed32e16087287ed7a06122724b9c37c97a24c7093c96cb4281c27057f4cdf2fce475d560542021448b6b0abfb09cb0b1947b5801e6b

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db-journal
      Filesize

      1KB

      MD5

      99efb54dd4309c142c7ae5dfb42f83f0

      SHA1

      9010d834475592377666e395f5fbe07c0e996397

      SHA256

      96d8a1b030df3783dd1bb66d43e49db53ca2ee51bc4a87eb13da0b6b6d5afd90

      SHA512

      89f2685e390c6be4ba1a9ea924ce4d8ec6d4e529c41490767e6a12e728ebe5d239558984dc06018013183fac1663e3abe7dd6c916b186f1e5c0f7b1ea1ca5ad3

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/shared_prefs/com.appsmart.delivery.darbarmuenchen2087_migrationpreferences.xml
      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      2KB

      MD5

      52d32ab73bdba7357f1254573a6b3d27

      SHA1

      c52e4da69a91713416928aa73adaa2df696c5660

      SHA256

      12213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0

      SHA512

      17adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      4KB

      MD5

      7ce76fa54817dbcd4a6b3b18de351c4a

      SHA1

      a7d20daccc0bb358e28660b1ef036479a728a852

      SHA256

      6e353b8766f28d9cb1e5a5484ac8438c162a82db410611132a5aec91bc118276

      SHA512

      b82735a38e3e06802e94ff6c12e84a0a93a592fb5ec264cebc3739e9786e7f188e40a962ef75f1c58f6c1a7fd668698b04320af4968a29641b5d6c70eb9946a3