General
Target

66096ffbeab196c7221adda9696f02c41a194792a7773d9f3b7043f20c84faa4.apk

Filesize

5MB

Completed

21-05-2022 13:20

Task

behavioral1

Score
6/10
MD5

04964c79de48c05ca011f2caa9ef7799

SHA1

b2daa1e20e90b1d811679ed0373113c9c7357467

SHA256

66096ffbeab196c7221adda9696f02c41a194792a7773d9f3b7043f20c84faa4

SHA256

1888feef880470ba168ec84e157a68d7f2b2d4ae3b2fd80ca914558ff41c47e48da03caf69cd00a9369a1ed0f3565fb55bd9e6b197f4659763ed2407bfa20ae5

Malware Config
Signatures 2

Filter: none

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data).
    it.xmenu.putapario

    Tags

    Reported IOCs

    descriptioniocprocess
    Framework API calljavax.crypto.Cipher.doFinalit.xmenu.putapario
Processes 2
  • it.xmenu.putapario
    Uses Crypto APIs (Might try to encrypt user data).
    PID:5103
  • it.xmenu.putapario:Metrica
    PID:5172
Network
MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Replay Monitor
                          00:00 00:00
                          Downloads
                          • /data/user/0/it.xmenu.putapario/files/credentials.dat

                            MD5

                            7e4ba8e7eff7d490bc0eab113ef3db64

                            SHA1

                            d7ee17d340df3a8e5fdea6e640a4b23ab5cbb502

                            SHA256

                            a2bf2525315fd77c2efb6def252471ea5a2e944a4a05091cf48a4bb642efc53b

                            SHA512

                            31c26967360c41d495785dfcccccdbac459dc67bb9922f80837f8684462beb494226fe2602e3afe72c0cb25565b6fe2ba4ea405ddc5877334599bfc2f62b138c

                          • /data/user/0/it.xmenu.putapario/files/metrica_client_data.db.lock

                            MD5

                            d41d8cd98f00b204e9800998ecf8427e

                            SHA1

                            da39a3ee5e6b4b0d3255bfef95601890afd80709

                            SHA256

                            e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                            SHA512

                            cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

                          • /data/user/0/it.xmenu.putapario/no_backup/credentials.dat

                            MD5

                            7e4ba8e7eff7d490bc0eab113ef3db64

                            SHA1

                            d7ee17d340df3a8e5fdea6e640a4b23ab5cbb502

                            SHA256

                            a2bf2525315fd77c2efb6def252471ea5a2e944a4a05091cf48a4bb642efc53b

                            SHA512

                            31c26967360c41d495785dfcccccdbac459dc67bb9922f80837f8684462beb494226fe2602e3afe72c0cb25565b6fe2ba4ea405ddc5877334599bfc2f62b138c

                          • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario

                            MD5

                            ec343567411b9fc7f55c4461e61e8d6a

                            SHA1

                            c01c1138efee90f0f9694c8698050ee1edc21625

                            SHA256

                            3837a969519abdbc2e02f0ae9d7253731c8d87b0e42ffe22b8220369b1204779

                            SHA512

                            26ec9f75d0655c062e828b5cbab5d94b0297b5c8bee5be55aea48dbeadfa2c4c62c816328480ee8d64e55c0fb557e43579985eccf7f14a30104f04471a5482eb

                          • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario-journal

                            MD5

                            6c6c200e062178d9e6aa26c3060d0c0f

                            SHA1

                            667373ae9cca287d4df0f1261320eab9d47f5f19

                            SHA256

                            e1877b2358c8f6d4514b464790afa2479b881b0303dde70c617784efdb0f5ce4

                            SHA512

                            a390263cd1a612935b4576eb5e7518e21ddea632293f843a4823f0178f932805e6d690d54aed18853d890a5dfc223954b240b28666718bbcf2ce01a8b4fcaf3b

                          • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario-shm

                            MD5

                            7dea362b3fac8e00956a4952a3d4f474

                            SHA1

                            05fe405753166f125559e7c9ac558654f107c7e9

                            SHA256

                            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                            SHA512

                            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

                          • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario-wal

                            MD5

                            c0a509adce68cc0b5d2228ad9ee637ac

                            SHA1

                            3829391212d260a0054f42f23941d6a2c3292682

                            SHA256

                            f7f54175cc7f3475019c3aa195e34348e3625e8a7b2219f52f019330d798acd4

                            SHA512

                            c344a30af8be10a66a192122bfc106d8c925569770086384f853b413e34c2f5a7b3e074bfc5518aab26b9e83ed0b544a4035fd1179ef3ea0f37c07c25baef38f

                          • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario_20799a27-fa80-4b36-b2db-0f8141f24180

                            MD5

                            f2b4b0190b9f384ca885f0c8c9b14700

                            SHA1

                            934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                            SHA256

                            0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                            SHA512

                            ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

                          • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario_20799a27-fa80-4b36-b2db-0f8141f24180-journal

                            MD5

                            c611faad36f16c6226b81c3f302b256b

                            SHA1

                            7655a755ed01dd074151cfadd3c06bb1f848846e

                            SHA256

                            8609fb6a29fb0923c96901db0a67a848434a723958b9c1e7516d7be5700ad305

                            SHA512

                            9bafbb348289f97e0ef62567ef28d3c4f254a7432b43d446687ea682ab751facfd5e4b2da2cdf6a033ffd348c37eca8376ff1c49d6d2da7e46ae64b28f9a3d12

                          • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario_20799a27-fa80-4b36-b2db-0f8141f24180-shm

                            MD5

                            7dea362b3fac8e00956a4952a3d4f474

                            SHA1

                            05fe405753166f125559e7c9ac558654f107c7e9

                            SHA256

                            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                            SHA512

                            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

                          • /data/user/0/it.xmenu.putapario/no_backup/db_metrica_it.xmenu.putapario_20799a27-fa80-4b36-b2db-0f8141f24180-wal

                            MD5

                            a538cbaf360951005de3f22c3b1fb400

                            SHA1

                            1e681e80db28f028ad496d71f7f127167606d4bc

                            SHA256

                            0fbee9b84fac7858a209b23337403ffa3e117a33dcb8bca08152b267e2791b09

                            SHA512

                            b203fdd1137518dbf88affba26535f2409e4dab0dd16ebb5a263154ab0f1d9096a20b0dd2de62adf9c786c625c11d6214abf24cbfd57380dfa637a712e5cc4f0

                          • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db

                            MD5

                            68eb592ff94b07e483f6e8a4b6ec8a71

                            SHA1

                            e7e7aff857255a76b29934abd0ee0d93846b835b

                            SHA256

                            53f9f0ce9da296cc00a2c87813a5db11e29f08370603f65a52c474153f8941e7

                            SHA512

                            dbc98de0593700286005d7bb23a642df1112df7786adf9f730b3740aeae22df4e64d6987d310a8297d12657c30b18cbb277108345320c6047638b360461d43ad

                          • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-journal

                            MD5

                            31255250d93b3f3b074e111ec750de53

                            SHA1

                            596f3370083367b71b57805d815ccf15fb797865

                            SHA256

                            a966a74d8167aba7accd9a4f37b5f3efee671ef80eecb0a77d9fdbee2f2b9144

                            SHA512

                            ab4c7b76616511ecdf6193fb3706bab63a29d0f28dfad51839f9ee7e11b1a52faea0f995531eb09d11cb2db285a673234f1928c434aae4d289b963c2486f295e

                          • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shm

                            MD5

                            7dea362b3fac8e00956a4952a3d4f474

                            SHA1

                            05fe405753166f125559e7c9ac558654f107c7e9

                            SHA256

                            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                            SHA512

                            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

                          • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shm

                            MD5

                            7dea362b3fac8e00956a4952a3d4f474

                            SHA1

                            05fe405753166f125559e7c9ac558654f107c7e9

                            SHA256

                            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                            SHA512

                            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

                          • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shm

                            MD5

                            7dea362b3fac8e00956a4952a3d4f474

                            SHA1

                            05fe405753166f125559e7c9ac558654f107c7e9

                            SHA256

                            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                            SHA512

                            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

                          • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shm

                            MD5

                            7dea362b3fac8e00956a4952a3d4f474

                            SHA1

                            05fe405753166f125559e7c9ac558654f107c7e9

                            SHA256

                            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                            SHA512

                            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

                          • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shm

                            MD5

                            7dea362b3fac8e00956a4952a3d4f474

                            SHA1

                            05fe405753166f125559e7c9ac558654f107c7e9

                            SHA256

                            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                            SHA512

                            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

                          • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shm

                            MD5

                            7dea362b3fac8e00956a4952a3d4f474

                            SHA1

                            05fe405753166f125559e7c9ac558654f107c7e9

                            SHA256

                            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                            SHA512

                            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

                          • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shm

                            MD5

                            7dea362b3fac8e00956a4952a3d4f474

                            SHA1

                            05fe405753166f125559e7c9ac558654f107c7e9

                            SHA256

                            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                            SHA512

                            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

                          • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-shm

                            MD5

                            7dea362b3fac8e00956a4952a3d4f474

                            SHA1

                            05fe405753166f125559e7c9ac558654f107c7e9

                            SHA256

                            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                            SHA512

                            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

                          • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-wal

                            MD5

                            66577a70d8a770d5b2ca8a8cc481038d

                            SHA1

                            27072abc649c70722f378fc0441424a956ffae05

                            SHA256

                            6401ba9db46864e16a5451385346c2eef2be25772e50f73f246a990bbd12a2ca

                            SHA512

                            aafa7785713f8a2ce9df7ff30f54bf1e54917bfaa0e3e9928ac2612d1675bf7d05a1d1bdb4473b1a160e63b59b9065cb8fa4c4c9e4765e95969a9106ba0abf09

                          • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-wal

                            MD5

                            e4d9a3f6d64aec603549c459da0771e3

                            SHA1

                            c80ef28a5e222db1e635e16bf9319806303a63a7

                            SHA256

                            132ce914eddc81c7a00600ffde0ffd19070c8590825a5dff6c85c5ef35a465ed

                            SHA512

                            4c370927ee07023c77de1f600baed423b638e25d478693a907ee6a92f7b7959fb8c360a05062a90c27bf6b10f9e58100669e818e7e63308ff01d6caa2d88746b

                          • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-wal

                            MD5

                            728eaaae51ca6092be45ca67996e2a71

                            SHA1

                            4e499377928cbe5fa89397ee6ae70bc7e35be7cf

                            SHA256

                            1536b51ecf3d0d0f915613c826e29978f6498aa4b5d7e1b3d76c10ead294a4df

                            SHA512

                            eca631c978e2509e4862db47e78a4e33e2fefea70c858e693b30e967a14e24305183240d910ed141a9004ce230cfd2ded1b70e49a64fabc02d53992d8ae8f60b

                          • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-wal

                            MD5

                            63452801b90d5cc8ea8a58b370585ea4

                            SHA1

                            de8f5a646cc9d0225409c6771fd8e6a9968b0d66

                            SHA256

                            faa5a88284ce95d8a6cd5309bdff0ae7746629cc917cf94570088123fd00e52b

                            SHA512

                            4c6b723b610ac86866b7109d0f6e14504377a6dccf004e5694acae9f83865c9725eae7ac983cb45236d235c091db66f1cc459ff142ecc48c96954b08ae22450a

                          • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-wal

                            MD5

                            449707b5cd40bba7158e69546fae3a14

                            SHA1

                            e4ceb3f7108b04c04645548f285b70910c1f68d5

                            SHA256

                            f2f657b97bf26d78bf7076565c9c54f67e8552d090fa4852b53f052401f29704

                            SHA512

                            bf9f55eaa1f1bbbaecf2c3647dd820453105ed8fb5cd8b5ca34c8c1438d7ece1c3e66323e6dacc4109f23d2d71c9075a06f77b78b8bc14abaca151321f460a50

                          • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-wal

                            MD5

                            85f09dff4bca288a20bf3d3d83619d17

                            SHA1

                            8cfce922a4581357a29af04d81111ff1657c9bc9

                            SHA256

                            cff47ede925da306b4e0b8ff95dd0a7c568fdedcc67f23dbfd01b1ada4d321d6

                            SHA512

                            e7647e7acbdaec3b5cb506c053177f2308cb2f40b4fb45b1d996c20c33f073d2204d4653fea7e82be332bf1ceb223d25f4b255dabd514689a5136fe445ae70ea

                          • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-wal

                            MD5

                            d41d8cd98f00b204e9800998ecf8427e

                            SHA1

                            da39a3ee5e6b4b0d3255bfef95601890afd80709

                            SHA256

                            e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                            SHA512

                            cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

                          • /data/user/0/it.xmenu.putapario/no_backup/metrica_client_data.db-wal

                            MD5

                            d41d8cd98f00b204e9800998ecf8427e

                            SHA1

                            da39a3ee5e6b4b0d3255bfef95601890afd80709

                            SHA256

                            e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                            SHA512

                            cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

                          • /data/user/0/it.xmenu.putapario/no_backup/metrica_data.db

                            MD5

                            72bac4f50cd7ba519047f501d96e02c3

                            SHA1

                            590201ec616bfa07f3344491c736acd6f5488858

                            SHA256

                            e23ca7833c5cd4d4df489684ff861402aa8c8c263f878e6c240605edef4f4540

                            SHA512

                            2020916198f55b501fe8abe4b9555fb91e0204c0e7ec7ee080a8a5daabc7801a1a1ce35c49f0b5498280623404c5adcb6384efede2a7a9a8ee18e7de00e3719a

                          • /data/user/0/it.xmenu.putapario/no_backup/metrica_data.db-journal

                            MD5

                            95e6d833094252752e5990a4b640ea45

                            SHA1

                            45aca987f43681e046b08eb4ef2d9ad8f1a8fe17

                            SHA256

                            61f2d53b6044f41c652364d4ced58ad279113d65a28371c35889829217b9744d

                            SHA512

                            c2a2fcc94bd9aa2b7b031e28c983d9560673f132e98edfd0aba8df25753102061dbdd684b9edcfa7e413fdd19a952224371980ad1af9be4aa9e37a784e73c8fd

                          • /data/user/0/it.xmenu.putapario/no_backup/metrica_data.db-shm

                            MD5

                            7dea362b3fac8e00956a4952a3d4f474

                            SHA1

                            05fe405753166f125559e7c9ac558654f107c7e9

                            SHA256

                            af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                            SHA512

                            1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

                          • /data/user/0/it.xmenu.putapario/no_backup/metrica_data.db-wal

                            MD5

                            758bbf8a1c0d99bf072f7bc99861a19a

                            SHA1

                            dedcc7667a6fe89aa61f490cd52c556c235a83eb

                            SHA256

                            c84e5580c17806a23532c2d4abe0b646cdb3dc4d73318f2377cc51324b818582

                            SHA512

                            2b3dd4424d9dca85d531beaca84f1761dfd591ae04ca783a03af436c3a01397448a589da29360c550d82726e1c77c97f31af212a49abfd2e060b089402f101ae

                          • /data/user/0/it.xmenu.putapario/shared_prefs/it.xmenu.putapario_migrationpreferences.xml

                            MD5

                            9781ca003f10f8d0c9c1945b63fdca7f

                            SHA1

                            4156cf5dc8d71dbab734d25e5e1598b37a5456f4

                            SHA256

                            3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

                            SHA512

                            25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

                          • /data/user/0/it.xmenu.putapario/shared_prefs/yteSlT7daYsGlbVGqXfR.xml

                            MD5

                            52d32ab73bdba7357f1254573a6b3d27

                            SHA1

                            c52e4da69a91713416928aa73adaa2df696c5660

                            SHA256

                            12213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0

                            SHA512

                            17adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d

                          • /data/user/0/it.xmenu.putapario/shared_prefs/yteSlT7daYsGlbVGqXfR.xml

                            MD5

                            7ce76fa54817dbcd4a6b3b18de351c4a

                            SHA1

                            a7d20daccc0bb358e28660b1ef036479a728a852

                            SHA256

                            6e353b8766f28d9cb1e5a5484ac8438c162a82db410611132a5aec91bc118276

                            SHA512

                            b82735a38e3e06802e94ff6c12e84a0a93a592fb5ec264cebc3739e9786e7f188e40a962ef75f1c58f6c1a7fd668698b04320af4968a29641b5d6c70eb9946a3