Analysis
-
max time kernel
3871781s -
max time network
164s -
platform
android_x86 -
resource
android-x86-arm-20220310-en -
submitted
21-05-2022 12:50
Static task
static1
Behavioral task
behavioral1
Sample
66096ffbeab196c7221adda9696f02c41a194792a7773d9f3b7043f20c84faa4.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
66096ffbeab196c7221adda9696f02c41a194792a7773d9f3b7043f20c84faa4.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
66096ffbeab196c7221adda9696f02c41a194792a7773d9f3b7043f20c84faa4.apk
Resource
android-x64-arm64-20220310-en
General
-
Target
66096ffbeab196c7221adda9696f02c41a194792a7773d9f3b7043f20c84faa4.apk
-
Size
5.9MB
-
MD5
04964c79de48c05ca011f2caa9ef7799
-
SHA1
b2daa1e20e90b1d811679ed0373113c9c7357467
-
SHA256
66096ffbeab196c7221adda9696f02c41a194792a7773d9f3b7043f20c84faa4
-
SHA512
1888feef880470ba168ec84e157a68d7f2b2d4ae3b2fd80ca914558ff41c47e48da03caf69cd00a9369a1ed0f3565fb55bd9e6b197f4659763ed2407bfa20ae5
Malware Config
Signatures
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
it.xmenu.putapariodescription ioc process Framework API call javax.crypto.Cipher.doFinal it.xmenu.putapario
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/it.xmenu.putapario/files/credentials.datFilesize
233B
MD57e4ba8e7eff7d490bc0eab113ef3db64
SHA1d7ee17d340df3a8e5fdea6e640a4b23ab5cbb502
SHA256a2bf2525315fd77c2efb6def252471ea5a2e944a4a05091cf48a4bb642efc53b
SHA51231c26967360c41d495785dfcccccdbac459dc67bb9922f80837f8684462beb494226fe2602e3afe72c0cb25565b6fe2ba4ea405ddc5877334599bfc2f62b138c
-
/data/user/0/it.xmenu.putapario/files/metrica_client_data.db.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/it.xmenu.putapario/no_backup/credentials.datFilesize
233B
MD57e4ba8e7eff7d490bc0eab113ef3db64
SHA1d7ee17d340df3a8e5fdea6e640a4b23ab5cbb502
SHA256a2bf2525315fd77c2efb6def252471ea5a2e944a4a05091cf48a4bb642efc53b
SHA51231c26967360c41d495785dfcccccdbac459dc67bb9922f80837f8684462beb494226fe2602e3afe72c0cb25565b6fe2ba4ea405ddc5877334599bfc2f62b138c
-
/data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putaparioFilesize
40KB
MD5ec343567411b9fc7f55c4461e61e8d6a
SHA1c01c1138efee90f0f9694c8698050ee1edc21625
SHA2563837a969519abdbc2e02f0ae9d7253731c8d87b0e42ffe22b8220369b1204779
SHA51226ec9f75d0655c062e828b5cbab5d94b0297b5c8bee5be55aea48dbeadfa2c4c62c816328480ee8d64e55c0fb557e43579985eccf7f14a30104f04471a5482eb
-
/data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario-journalFilesize
524B
MD56c6c200e062178d9e6aa26c3060d0c0f
SHA1667373ae9cca287d4df0f1261320eab9d47f5f19
SHA256e1877b2358c8f6d4514b464790afa2479b881b0303dde70c617784efdb0f5ce4
SHA512a390263cd1a612935b4576eb5e7518e21ddea632293f843a4823f0178f932805e6d690d54aed18853d890a5dfc223954b240b28666718bbcf2ce01a8b4fcaf3b
-
/data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario-walFilesize
426KB
MD5c0a509adce68cc0b5d2228ad9ee637ac
SHA13829391212d260a0054f42f23941d6a2c3292682
SHA256f7f54175cc7f3475019c3aa195e34348e3625e8a7b2219f52f019330d798acd4
SHA512c344a30af8be10a66a192122bfc106d8c925569770086384f853b413e34c2f5a7b3e074bfc5518aab26b9e83ed0b544a4035fd1179ef3ea0f37c07c25baef38f
-
/data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario_20799a27-fa80-4b36-b2db-0f8141f24180Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario_20799a27-fa80-4b36-b2db-0f8141f24180-journalFilesize
524B
MD5c611faad36f16c6226b81c3f302b256b
SHA17655a755ed01dd074151cfadd3c06bb1f848846e
SHA2568609fb6a29fb0923c96901db0a67a848434a723958b9c1e7516d7be5700ad305
SHA5129bafbb348289f97e0ef62567ef28d3c4f254a7432b43d446687ea682ab751facfd5e4b2da2cdf6a033ffd348c37eca8376ff1c49d6d2da7e46ae64b28f9a3d12
-
/data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario_20799a27-fa80-4b36-b2db-0f8141f24180-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario_20799a27-fa80-4b36-b2db-0f8141f24180-walFilesize
148KB
MD5a538cbaf360951005de3f22c3b1fb400
SHA11e681e80db28f028ad496d71f7f127167606d4bc
SHA2560fbee9b84fac7858a209b23337403ffa3e117a33dcb8bca08152b267e2791b09
SHA512b203fdd1137518dbf88affba26535f2409e4dab0dd16ebb5a263154ab0f1d9096a20b0dd2de62adf9c786c625c11d6214abf24cbfd57380dfa637a712e5cc4f0
-
/data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.dbFilesize
24KB
MD568eb592ff94b07e483f6e8a4b6ec8a71
SHA1e7e7aff857255a76b29934abd0ee0d93846b835b
SHA25653f9f0ce9da296cc00a2c87813a5db11e29f08370603f65a52c474153f8941e7
SHA512dbc98de0593700286005d7bb23a642df1112df7786adf9f730b3740aeae22df4e64d6987d310a8297d12657c30b18cbb277108345320c6047638b360461d43ad
-
/data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-journalFilesize
524B
MD531255250d93b3f3b074e111ec750de53
SHA1596f3370083367b71b57805d815ccf15fb797865
SHA256a966a74d8167aba7accd9a4f37b5f3efee671ef80eecb0a77d9fdbee2f2b9144
SHA512ab4c7b76616511ecdf6193fb3706bab63a29d0f28dfad51839f9ee7e11b1a52faea0f995531eb09d11cb2db285a673234f1928c434aae4d289b963c2486f295e
-
/data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-walFilesize
8KB
MD566577a70d8a770d5b2ca8a8cc481038d
SHA127072abc649c70722f378fc0441424a956ffae05
SHA2566401ba9db46864e16a5451385346c2eef2be25772e50f73f246a990bbd12a2ca
SHA512aafa7785713f8a2ce9df7ff30f54bf1e54917bfaa0e3e9928ac2612d1675bf7d05a1d1bdb4473b1a160e63b59b9065cb8fa4c4c9e4765e95969a9106ba0abf09
-
/data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-walFilesize
8KB
MD5e4d9a3f6d64aec603549c459da0771e3
SHA1c80ef28a5e222db1e635e16bf9319806303a63a7
SHA256132ce914eddc81c7a00600ffde0ffd19070c8590825a5dff6c85c5ef35a465ed
SHA5124c370927ee07023c77de1f600baed423b638e25d478693a907ee6a92f7b7959fb8c360a05062a90c27bf6b10f9e58100669e818e7e63308ff01d6caa2d88746b
-
/data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-walFilesize
8KB
MD5728eaaae51ca6092be45ca67996e2a71
SHA14e499377928cbe5fa89397ee6ae70bc7e35be7cf
SHA2561536b51ecf3d0d0f915613c826e29978f6498aa4b5d7e1b3d76c10ead294a4df
SHA512eca631c978e2509e4862db47e78a4e33e2fefea70c858e693b30e967a14e24305183240d910ed141a9004ce230cfd2ded1b70e49a64fabc02d53992d8ae8f60b
-
/data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-walFilesize
32KB
MD563452801b90d5cc8ea8a58b370585ea4
SHA1de8f5a646cc9d0225409c6771fd8e6a9968b0d66
SHA256faa5a88284ce95d8a6cd5309bdff0ae7746629cc917cf94570088123fd00e52b
SHA5124c6b723b610ac86866b7109d0f6e14504377a6dccf004e5694acae9f83865c9725eae7ac983cb45236d235c091db66f1cc459ff142ecc48c96954b08ae22450a
-
/data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-walFilesize
8KB
MD5449707b5cd40bba7158e69546fae3a14
SHA1e4ceb3f7108b04c04645548f285b70910c1f68d5
SHA256f2f657b97bf26d78bf7076565c9c54f67e8552d090fa4852b53f052401f29704
SHA512bf9f55eaa1f1bbbaecf2c3647dd820453105ed8fb5cd8b5ca34c8c1438d7ece1c3e66323e6dacc4109f23d2d71c9075a06f77b78b8bc14abaca151321f460a50
-
/data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-walFilesize
8KB
MD585f09dff4bca288a20bf3d3d83619d17
SHA18cfce922a4581357a29af04d81111ff1657c9bc9
SHA256cff47ede925da306b4e0b8ff95dd0a7c568fdedcc67f23dbfd01b1ada4d321d6
SHA512e7647e7acbdaec3b5cb506c053177f2308cb2f40b4fb45b1d996c20c33f073d2204d4653fea7e82be332bf1ceb223d25f4b255dabd514689a5136fe445ae70ea
-
/data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-walMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-walMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/it.xmenu.putapario/no_backup/metrica_data.dbFilesize
48KB
MD572bac4f50cd7ba519047f501d96e02c3
SHA1590201ec616bfa07f3344491c736acd6f5488858
SHA256e23ca7833c5cd4d4df489684ff861402aa8c8c263f878e6c240605edef4f4540
SHA5122020916198f55b501fe8abe4b9555fb91e0204c0e7ec7ee080a8a5daabc7801a1a1ce35c49f0b5498280623404c5adcb6384efede2a7a9a8ee18e7de00e3719a
-
/data/user/0/it.xmenu.putapario/no_backup/metrica_data.db-journalFilesize
524B
MD595e6d833094252752e5990a4b640ea45
SHA145aca987f43681e046b08eb4ef2d9ad8f1a8fe17
SHA25661f2d53b6044f41c652364d4ced58ad279113d65a28371c35889829217b9744d
SHA512c2a2fcc94bd9aa2b7b031e28c983d9560673f132e98edfd0aba8df25753102061dbdd684b9edcfa7e413fdd19a952224371980ad1af9be4aa9e37a784e73c8fd
-
/data/user/0/it.xmenu.putapario/no_backup/metrica_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/it.xmenu.putapario/no_backup/metrica_data.db-walFilesize
430KB
MD5758bbf8a1c0d99bf072f7bc99861a19a
SHA1dedcc7667a6fe89aa61f490cd52c556c235a83eb
SHA256c84e5580c17806a23532c2d4abe0b646cdb3dc4d73318f2377cc51324b818582
SHA5122b3dd4424d9dca85d531beaca84f1761dfd591ae04ca783a03af436c3a01397448a589da29360c550d82726e1c77c97f31af212a49abfd2e060b089402f101ae
-
/data/user/0/it.xmenu.putapario/shared_prefs/it.xmenu.putapario_migrationpreferences.xmlFilesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
/data/user/0/it.xmenu.putapario/shared_prefs/yteSlT7daYsGlbVGqXfR.xmlFilesize
2KB
MD552d32ab73bdba7357f1254573a6b3d27
SHA1c52e4da69a91713416928aa73adaa2df696c5660
SHA25612213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0
SHA51217adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d
-
/data/user/0/it.xmenu.putapario/shared_prefs/yteSlT7daYsGlbVGqXfR.xmlFilesize
4KB
MD57ce76fa54817dbcd4a6b3b18de351c4a
SHA1a7d20daccc0bb358e28660b1ef036479a728a852
SHA2566e353b8766f28d9cb1e5a5484ac8438c162a82db410611132a5aec91bc118276
SHA512b82735a38e3e06802e94ff6c12e84a0a93a592fb5ec264cebc3739e9786e7f188e40a962ef75f1c58f6c1a7fd668698b04320af4968a29641b5d6c70eb9946a3