Analysis

  • max time kernel
    3871781s
  • max time network
    164s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    21-05-2022 12:50

General

  • Target

    66096ffbeab196c7221adda9696f02c41a194792a7773d9f3b7043f20c84faa4.apk

  • Size

    5.9MB

  • MD5

    04964c79de48c05ca011f2caa9ef7799

  • SHA1

    b2daa1e20e90b1d811679ed0373113c9c7357467

  • SHA256

    66096ffbeab196c7221adda9696f02c41a194792a7773d9f3b7043f20c84faa4

  • SHA512

    1888feef880470ba168ec84e157a68d7f2b2d4ae3b2fd80ca914558ff41c47e48da03caf69cd00a9369a1ed0f3565fb55bd9e6b197f4659763ed2407bfa20ae5

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • it.xmenu.putapario
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5103
  • it.xmenu.putapario:Metrica
    1⤵
      PID:5172

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/it.xmenu.putapario/files/credentials.dat
      Filesize

      233B

      MD5

      7e4ba8e7eff7d490bc0eab113ef3db64

      SHA1

      d7ee17d340df3a8e5fdea6e640a4b23ab5cbb502

      SHA256

      a2bf2525315fd77c2efb6def252471ea5a2e944a4a05091cf48a4bb642efc53b

      SHA512

      31c26967360c41d495785dfcccccdbac459dc67bb9922f80837f8684462beb494226fe2602e3afe72c0cb25565b6fe2ba4ea405ddc5877334599bfc2f62b138c

    • /data/user/0/it.xmenu.putapario/files/metrica_client_data.db.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/it.xmenu.putapario/no_backup/credentials.dat
      Filesize

      233B

      MD5

      7e4ba8e7eff7d490bc0eab113ef3db64

      SHA1

      d7ee17d340df3a8e5fdea6e640a4b23ab5cbb502

      SHA256

      a2bf2525315fd77c2efb6def252471ea5a2e944a4a05091cf48a4bb642efc53b

      SHA512

      31c26967360c41d495785dfcccccdbac459dc67bb9922f80837f8684462beb494226fe2602e3afe72c0cb25565b6fe2ba4ea405ddc5877334599bfc2f62b138c

    • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario
      Filesize

      40KB

      MD5

      ec343567411b9fc7f55c4461e61e8d6a

      SHA1

      c01c1138efee90f0f9694c8698050ee1edc21625

      SHA256

      3837a969519abdbc2e02f0ae9d7253731c8d87b0e42ffe22b8220369b1204779

      SHA512

      26ec9f75d0655c062e828b5cbab5d94b0297b5c8bee5be55aea48dbeadfa2c4c62c816328480ee8d64e55c0fb557e43579985eccf7f14a30104f04471a5482eb

    • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario-journal
      Filesize

      524B

      MD5

      6c6c200e062178d9e6aa26c3060d0c0f

      SHA1

      667373ae9cca287d4df0f1261320eab9d47f5f19

      SHA256

      e1877b2358c8f6d4514b464790afa2479b881b0303dde70c617784efdb0f5ce4

      SHA512

      a390263cd1a612935b4576eb5e7518e21ddea632293f843a4823f0178f932805e6d690d54aed18853d890a5dfc223954b240b28666718bbcf2ce01a8b4fcaf3b

    • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario-wal
      Filesize

      426KB

      MD5

      c0a509adce68cc0b5d2228ad9ee637ac

      SHA1

      3829391212d260a0054f42f23941d6a2c3292682

      SHA256

      f7f54175cc7f3475019c3aa195e34348e3625e8a7b2219f52f019330d798acd4

      SHA512

      c344a30af8be10a66a192122bfc106d8c925569770086384f853b413e34c2f5a7b3e074bfc5518aab26b9e83ed0b544a4035fd1179ef3ea0f37c07c25baef38f

    • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario_20799a27-fa80-4b36-b2db-0f8141f24180
      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario_20799a27-fa80-4b36-b2db-0f8141f24180-journal
      Filesize

      524B

      MD5

      c611faad36f16c6226b81c3f302b256b

      SHA1

      7655a755ed01dd074151cfadd3c06bb1f848846e

      SHA256

      8609fb6a29fb0923c96901db0a67a848434a723958b9c1e7516d7be5700ad305

      SHA512

      9bafbb348289f97e0ef62567ef28d3c4f254a7432b43d446687ea682ab751facfd5e4b2da2cdf6a033ffd348c37eca8376ff1c49d6d2da7e46ae64b28f9a3d12

    • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario_20799a27-fa80-4b36-b2db-0f8141f24180-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario_20799a27-fa80-4b36-b2db-0f8141f24180-wal
      Filesize

      148KB

      MD5

      a538cbaf360951005de3f22c3b1fb400

      SHA1

      1e681e80db28f028ad496d71f7f127167606d4bc

      SHA256

      0fbee9b84fac7858a209b23337403ffa3e117a33dcb8bca08152b267e2791b09

      SHA512

      b203fdd1137518dbf88affba26535f2409e4dab0dd16ebb5a263154ab0f1d9096a20b0dd2de62adf9c786c625c11d6214abf24cbfd57380dfa637a712e5cc4f0

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db
      Filesize

      24KB

      MD5

      68eb592ff94b07e483f6e8a4b6ec8a71

      SHA1

      e7e7aff857255a76b29934abd0ee0d93846b835b

      SHA256

      53f9f0ce9da296cc00a2c87813a5db11e29f08370603f65a52c474153f8941e7

      SHA512

      dbc98de0593700286005d7bb23a642df1112df7786adf9f730b3740aeae22df4e64d6987d310a8297d12657c30b18cbb277108345320c6047638b360461d43ad

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-journal
      Filesize

      524B

      MD5

      31255250d93b3f3b074e111ec750de53

      SHA1

      596f3370083367b71b57805d815ccf15fb797865

      SHA256

      a966a74d8167aba7accd9a4f37b5f3efee671ef80eecb0a77d9fdbee2f2b9144

      SHA512

      ab4c7b76616511ecdf6193fb3706bab63a29d0f28dfad51839f9ee7e11b1a52faea0f995531eb09d11cb2db285a673234f1928c434aae4d289b963c2486f295e

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-wal
      Filesize

      8KB

      MD5

      66577a70d8a770d5b2ca8a8cc481038d

      SHA1

      27072abc649c70722f378fc0441424a956ffae05

      SHA256

      6401ba9db46864e16a5451385346c2eef2be25772e50f73f246a990bbd12a2ca

      SHA512

      aafa7785713f8a2ce9df7ff30f54bf1e54917bfaa0e3e9928ac2612d1675bf7d05a1d1bdb4473b1a160e63b59b9065cb8fa4c4c9e4765e95969a9106ba0abf09

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-wal
      Filesize

      8KB

      MD5

      e4d9a3f6d64aec603549c459da0771e3

      SHA1

      c80ef28a5e222db1e635e16bf9319806303a63a7

      SHA256

      132ce914eddc81c7a00600ffde0ffd19070c8590825a5dff6c85c5ef35a465ed

      SHA512

      4c370927ee07023c77de1f600baed423b638e25d478693a907ee6a92f7b7959fb8c360a05062a90c27bf6b10f9e58100669e818e7e63308ff01d6caa2d88746b

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-wal
      Filesize

      8KB

      MD5

      728eaaae51ca6092be45ca67996e2a71

      SHA1

      4e499377928cbe5fa89397ee6ae70bc7e35be7cf

      SHA256

      1536b51ecf3d0d0f915613c826e29978f6498aa4b5d7e1b3d76c10ead294a4df

      SHA512

      eca631c978e2509e4862db47e78a4e33e2fefea70c858e693b30e967a14e24305183240d910ed141a9004ce230cfd2ded1b70e49a64fabc02d53992d8ae8f60b

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-wal
      Filesize

      32KB

      MD5

      63452801b90d5cc8ea8a58b370585ea4

      SHA1

      de8f5a646cc9d0225409c6771fd8e6a9968b0d66

      SHA256

      faa5a88284ce95d8a6cd5309bdff0ae7746629cc917cf94570088123fd00e52b

      SHA512

      4c6b723b610ac86866b7109d0f6e14504377a6dccf004e5694acae9f83865c9725eae7ac983cb45236d235c091db66f1cc459ff142ecc48c96954b08ae22450a

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-wal
      Filesize

      8KB

      MD5

      449707b5cd40bba7158e69546fae3a14

      SHA1

      e4ceb3f7108b04c04645548f285b70910c1f68d5

      SHA256

      f2f657b97bf26d78bf7076565c9c54f67e8552d090fa4852b53f052401f29704

      SHA512

      bf9f55eaa1f1bbbaecf2c3647dd820453105ed8fb5cd8b5ca34c8c1438d7ece1c3e66323e6dacc4109f23d2d71c9075a06f77b78b8bc14abaca151321f460a50

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-wal
      Filesize

      8KB

      MD5

      85f09dff4bca288a20bf3d3d83619d17

      SHA1

      8cfce922a4581357a29af04d81111ff1657c9bc9

      SHA256

      cff47ede925da306b4e0b8ff95dd0a7c568fdedcc67f23dbfd01b1ada4d321d6

      SHA512

      e7647e7acbdaec3b5cb506c053177f2308cb2f40b4fb45b1d996c20c33f073d2204d4653fea7e82be332bf1ceb223d25f4b255dabd514689a5136fe445ae70ea

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-wal
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-wal
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_data.db
      Filesize

      48KB

      MD5

      72bac4f50cd7ba519047f501d96e02c3

      SHA1

      590201ec616bfa07f3344491c736acd6f5488858

      SHA256

      e23ca7833c5cd4d4df489684ff861402aa8c8c263f878e6c240605edef4f4540

      SHA512

      2020916198f55b501fe8abe4b9555fb91e0204c0e7ec7ee080a8a5daabc7801a1a1ce35c49f0b5498280623404c5adcb6384efede2a7a9a8ee18e7de00e3719a

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_data.db-journal
      Filesize

      524B

      MD5

      95e6d833094252752e5990a4b640ea45

      SHA1

      45aca987f43681e046b08eb4ef2d9ad8f1a8fe17

      SHA256

      61f2d53b6044f41c652364d4ced58ad279113d65a28371c35889829217b9744d

      SHA512

      c2a2fcc94bd9aa2b7b031e28c983d9560673f132e98edfd0aba8df25753102061dbdd684b9edcfa7e413fdd19a952224371980ad1af9be4aa9e37a784e73c8fd

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/it.xmenu.putapario/no_backup/metrica_data.db-wal
      Filesize

      430KB

      MD5

      758bbf8a1c0d99bf072f7bc99861a19a

      SHA1

      dedcc7667a6fe89aa61f490cd52c556c235a83eb

      SHA256

      c84e5580c17806a23532c2d4abe0b646cdb3dc4d73318f2377cc51324b818582

      SHA512

      2b3dd4424d9dca85d531beaca84f1761dfd591ae04ca783a03af436c3a01397448a589da29360c550d82726e1c77c97f31af212a49abfd2e060b089402f101ae

    • /data/user/0/it.xmenu.putapario/shared_prefs/it.xmenu.putapario_migrationpreferences.xml
      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /data/user/0/it.xmenu.putapario/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      2KB

      MD5

      52d32ab73bdba7357f1254573a6b3d27

      SHA1

      c52e4da69a91713416928aa73adaa2df696c5660

      SHA256

      12213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0

      SHA512

      17adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d

    • /data/user/0/it.xmenu.putapario/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      4KB

      MD5

      7ce76fa54817dbcd4a6b3b18de351c4a

      SHA1

      a7d20daccc0bb358e28660b1ef036479a728a852

      SHA256

      6e353b8766f28d9cb1e5a5484ac8438c162a82db410611132a5aec91bc118276

      SHA512

      b82735a38e3e06802e94ff6c12e84a0a93a592fb5ec264cebc3739e9786e7f188e40a962ef75f1c58f6c1a7fd668698b04320af4968a29641b5d6c70eb9946a3