Analysis

  • max time kernel
    3862677s
  • max time network
    103s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    21-05-2022 10:45

General

  • Target

    bb9afded6004dbeb000a470c0e8324e755901c452d046352e3898079dea01f20.apk

  • Size

    2.1MB

  • MD5

    9adf60df4c5fc64a00e325dc4888566e

  • SHA1

    11cd5c4c5f37d80a9dd3bbf6b1cb532f6c58370d

  • SHA256

    bb9afded6004dbeb000a470c0e8324e755901c452d046352e3898079dea01f20

  • SHA512

    d844a49e5145ea2970edc94957307a97e02bb53cc75726dc9dfd10ab98ca9a76d340944bd54e8bd34f8c8c6ab416d3b4933fd17ea28048def8dd66c1046e7aab

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.benstokes.pathakschook
    1⤵
    • Removes a system notification.
    PID:5067

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.benstokes.pathakschook/app_webview/GPUCache/index
    Filesize

    20B

    MD5

    93027d42b314432c4216e6cfca48b384

    SHA1

    43448dd8102979c3926828182579691945eedd4e

    SHA256

    3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

    SHA512

    a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

  • /data/user/0/com.benstokes.pathakschook/app_webview/GPUCache/index-dir/temp-index
    Filesize

    48B

    MD5

    abfb8385b3fcf5f2a8882e3f6b3e544d

    SHA1

    03abcd734578b52eea71e4ebcd40abbaad83c1a3

    SHA256

    dbe10e34f730e7ba212707b654cdd013bc972d00ea4df2906e83b06a335543cb

    SHA512

    e0594ccefc13bdaae50a3133656f7ce95be8d94e8e9d6b874c15e2857ef45c678de8a28b28ce9543d4e9ebfa4991f4848b9abbdcbd4a6891e5ea2cd83181ec25

  • /data/user/0/com.benstokes.pathakschook/app_webview/Web Data
    Filesize

    104KB

    MD5

    dc79f9ce5f3ab5270b33e61119dfc959

    SHA1

    1844bf222a5144b513dcf2fb50a18c011701c647

    SHA256

    47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

    SHA512

    18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

  • /data/user/0/com.benstokes.pathakschook/app_webview/Web Data-journal
    Filesize

    1KB

    MD5

    023b00520cc9ae78bb4f0d3e33cf0350

    SHA1

    7e8bfef226855bcc4565558f4b73f3024e2f4106

    SHA256

    11f47a9cde0810b93a7301dbe9b31636860e71c8b4d18c14a40804e84381eed4

    SHA512

    c7097b10a4fd975a53cea062a9be54707088e6253f4c6c4b85d9e34d0a6918209e6dbfbfb82a05b538b0497de1a4995a6d1c3aa6111fd339a8313ac1940aa498

  • /data/user/0/com.benstokes.pathakschook/app_webview/metrics_guid
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.benstokes.pathakschook/app_webview/metrics_guid
    Filesize

    36B

    MD5

    2eb96292caef2f585484d5bc40951cae

    SHA1

    28b7d7dc8e23a8bb46e30fe84777cbd45cfbabff

    SHA256

    0a8e7b48c52366b4de7f7cc5804c3235977c7e37d7cf0c5f93c9f53fa1be8675

    SHA512

    0717f2588b6207f93a85cdc9af17c49f1b867e5c3f3a1ddd2c8e7921379f653c0014ea7f76433fa856b636a383e0a18bd841ba4edac0502f605d7e913841b651

  • /data/user/0/com.benstokes.pathakschook/app_webview/variations_seed_new
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.benstokes.pathakschook/app_webview/variations_stamp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.benstokes.pathakschook/app_webview/webview_data.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.benstokes.pathakschook/files/al/.nomedia
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.benstokes.pathakschook/shared_prefs/WebViewChromiumPrefs.xml
    Filesize

    127B

    MD5

    21223e9184445fe043476484cd8cb1f9

    SHA1

    2b4813f849121d60ba35eb0889080668bb62c778

    SHA256

    bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

    SHA512

    be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

  • /data/user/0/com.benstokes.pathakschook/shared_prefs/com.applovin.sdk.impl.postbackQueue.domain.xml
    Filesize

    2KB

    MD5

    10386de689ddb4d543c25d3a84c8d11c

    SHA1

    d9e0e854a6ec34011274e1c68f2a1d755d3333db

    SHA256

    46cbb38d5a31110343318d818edbf7e31328a91b04145c849a3f8affd1172076

    SHA512

    75c4ffaabbe0cc430b75e4d64acd16db90c02cbc6afdd87808c2950e2a3c93b6aeb7d4f6de6e485352ac1b6779f34a9a71aae7949e50d4de6f7e44c89115474c

  • /data/user/0/com.benstokes.pathakschook/shared_prefs/com.applovin.sdk.impl.postbackQueue.domain.xml
    Filesize

    2KB

    MD5

    17017d20ff7b216b61947a0d2f80e926

    SHA1

    87d791a165cda2158b03c4c4f8b4d952bf383216

    SHA256

    f0079d1bd7208238182977fd6fcf9aaee45718ea391d3bbbe18c2e7b23e5fff4

    SHA512

    da3a339c50c955e7486fd56b525492a2b8bf0cbbd04bd714de98d0eed913b8b3e649624afb47b72bbf88beffcde37b04408c919cc102e991361707471aacf1da

  • /data/user/0/com.benstokes.pathakschook/shared_prefs/com.applovin.sdk.impl.postbackQueue.domain.xml
    Filesize

    129B

    MD5

    35cfafbcf334aea9fc5d0dd6bc00e2c4

    SHA1

    2564c427480d9dfe250d9e37654faf252c621924

    SHA256

    02f67f3269d7a249ed5b4148191ffd92da92e21d17f5316acad139c1c2373200

    SHA512

    75f6bc0ac5567de4534055ed21fcfa06089e2eaae3e7c45128ff81bd8602232fdb9c5b32156731536b797bf6148c01baaeeefd2f45474e99cba0da61b8e1e26d