Analysis

  • max time kernel
    3870441s
  • max time network
    163s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    21-05-2022 12:49

General

  • Target

    bb146f18e5fa1999339a77dcf4ddc76286839545287224b85faeb5ceb177ef19.apk

  • Size

    5.9MB

  • MD5

    8788129ce1a2bc4fbc4d191fbb49a898

  • SHA1

    2b734237dd4d1a853553197a7564d9acc61cf31b

  • SHA256

    bb146f18e5fa1999339a77dcf4ddc76286839545287224b85faeb5ceb177ef19

  • SHA512

    99759e9ba7334653eed3a06a0d88338b6a9c9c696dec09efb63e0bbe069e6b3d2db736eede341a9cb80f197fcf0a995abd64ded2572a68763ecbc121465d1871

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.gentongsehat.fudzapp
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5206
  • com.gentongsehat.fudzapp:Metrica
    1⤵
      PID:5253

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.gentongsehat.fudzapp/files/credentials.dat
      Filesize

      233B

      MD5

      566d2565094ecc4e77361b8acf4544e3

      SHA1

      df7ca7db060f0ba3c92da18fad7adb4298c6a2cf

      SHA256

      46fdd1091080ba45e208dfd86bd825c5c13a3f413eaeb78e2d6db93d8739b017

      SHA512

      a0ab1a15ff3db2c0dfbd4f439fccc9992b0cd72de95a2a4ea5e6c808fca6727fff43e59fd5fc88e128ccb29d435a96b36b09c48798dd56232afaf7fa850f966c

    • /data/user/0/com.gentongsehat.fudzapp/files/metrica_client_data.db.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/credentials.dat
      Filesize

      233B

      MD5

      566d2565094ecc4e77361b8acf4544e3

      SHA1

      df7ca7db060f0ba3c92da18fad7adb4298c6a2cf

      SHA256

      46fdd1091080ba45e208dfd86bd825c5c13a3f413eaeb78e2d6db93d8739b017

      SHA512

      a0ab1a15ff3db2c0dfbd4f439fccc9992b0cd72de95a2a4ea5e6c808fca6727fff43e59fd5fc88e128ccb29d435a96b36b09c48798dd56232afaf7fa850f966c

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp
      Filesize

      40KB

      MD5

      0225ab34dcc4d0da7b914bf8d59e0a3a

      SHA1

      f1d315097413cddfcd4e9848c91b9d1c3f7bec4d

      SHA256

      6505f9543dbac21ab5c10733ebffd266b623d205317806a998becb11a8edfe65

      SHA512

      3f44d0b71135ed8d19c0b383027c1839cd8796a4ccadfd6c4b02b51106abe06b3861a424a4b834802a6ea2c5960da95bf392faf1a4921c908f919961d5c12ca3

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp-journal
      Filesize

      524B

      MD5

      8230c20f940d204366d927d289162af5

      SHA1

      2ece5306e4687470ef12bacb33e8c5fdb35c81e9

      SHA256

      429268536ab22a31433d158886653e0516a6d25b84948a96bf3662b4b586e6a1

      SHA512

      e0b5d29d0ec11dfb0a6a84711ccd2c5d7db9a29f20162f53bc6bd737b5de9d532d75329944afbc61212ce2f79c252b3491decb7aa2019981ff0922f47d472200

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp-wal
      Filesize

      422KB

      MD5

      d0e97381ecdfdcc961c064c3fa6578db

      SHA1

      811abca062eba1d41e7ecb1e21c01655bfa5d903

      SHA256

      79279aa56292786e20c12366cf6dfc2f19c842f6536bf094ed97be06553cb5e1

      SHA512

      c72371ecb97cf90b0a1ae0a248d4a248d9b411f2a8abfcd41b7a627ebc144be7c9c82079e5dd3c35bbeea5b8e492445725c40efed3a07b846f96c30de5964aaf

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp_20799a27-fa80-4b36-b2db-0f8141f24180
      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp_20799a27-fa80-4b36-b2db-0f8141f24180-journal
      Filesize

      524B

      MD5

      a40db06b012e75f5bab586a1d13c91f0

      SHA1

      c1a44d48db8f8a5ffc468f2eb9a439f2be1c5219

      SHA256

      9fcb25a1160b306dc77cc9af6092d6941bd12fc7b5c1d3e9677945981e227e28

      SHA512

      7c65b2831f98abd22a61ab24f1856304c9059e5f7c5dbc949739e00d903ccbd1dd115ab8e63fb020ac193cf7aec818120801996a7e99202473f1b97f9c67e059

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp_20799a27-fa80-4b36-b2db-0f8141f24180-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp_20799a27-fa80-4b36-b2db-0f8141f24180-wal
      Filesize

      140KB

      MD5

      af11457441d977a99047f98ad9c64ca7

      SHA1

      7d9a3d77137c61fb692fabf7744ece64718db4dd

      SHA256

      1d3f201618e9000038b5f502774fccb3f14ee78f520d2bc8c34c23de10a972e4

      SHA512

      42654f2a0f8dff288589566f05e31c0d9337b5881f56c7ab9f4991cb35fe9e5448648b802cc8eeaabd794194e89111f79cc60830850b307049f4284ac09455bf

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db
      Filesize

      24KB

      MD5

      68eb592ff94b07e483f6e8a4b6ec8a71

      SHA1

      e7e7aff857255a76b29934abd0ee0d93846b835b

      SHA256

      53f9f0ce9da296cc00a2c87813a5db11e29f08370603f65a52c474153f8941e7

      SHA512

      dbc98de0593700286005d7bb23a642df1112df7786adf9f730b3740aeae22df4e64d6987d310a8297d12657c30b18cbb277108345320c6047638b360461d43ad

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-journal
      Filesize

      524B

      MD5

      9539297e86192fe02bd40f8a6d21c986

      SHA1

      3535cfd5abd06dc75d391d20bdf9929729f6e26c

      SHA256

      1cd3bb82f903e5c124b6564206e77aec89729281ee8c8d8bb5273aed296d88a0

      SHA512

      144f31236bc45feb3dbf790ebfdd24c27adbf8d33a0801c844a8650da3511b38296434d8b8c48af074e15fe14ab7d0c1a2b8e58669840f4cc80ba36530fd0a51

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-wal
      Filesize

      8KB

      MD5

      feba0ff55746d9ff155588bd8efff6f7

      SHA1

      345d83b982c491bd34dd81cce847c8c3a908c8e9

      SHA256

      8e217363b6ce0c0ad2680b0d516a6266a0b5c71baaa505724abfba010caf7e88

      SHA512

      15f33245642e507561eb2b98191ded2abd3b4b815ffac42b14cf1b367babc9805d8743f7abb676180cd1888f0697428ec19ccad26991a6eb1917e4f82fd71c7f

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-wal
      Filesize

      8KB

      MD5

      0fdb02c6ed10beb6d3b2ac824a00f63a

      SHA1

      583a13061f8a06dc6fc7e4ab6eb3330b9c694bc1

      SHA256

      85d51b38035baee9576064669aff24facd56fa05fa7a92a178e2983b65a362e6

      SHA512

      26145461bdcdf150c9a75eef0eff14f13082c648c87900f769cdcd21b798dd1d83d77bd06820b825ac5961641d74f4a11d8de4c3ede030e30a9d339efbf5b512

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-wal
      Filesize

      8KB

      MD5

      675253ed4e60be1970c631b04a4d76e5

      SHA1

      40cc4c091ceea2590c7c6a6ec5f3e97e50bec0a4

      SHA256

      012ad4b576fabb168c5046a2f07cdea2622f73328b921f7a28e85ffc44e099d3

      SHA512

      03266e11531ed6cb4fb3101b3d4808c87eac195a69e9dc2de9fbecea8ef22569faa2d1c6779ed554287576adfbfe6f3d62a75b039882a05b0b0078545cf3ad51

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-wal
      Filesize

      32KB

      MD5

      250f8f34e669e699bfbf4f6364d63f37

      SHA1

      d1ee31b00d72819af170c46f24b2f4235d7e72e2

      SHA256

      328d2c5b48b4c73fa08733853b2d0939cbc3881aa0162b798870d86bc82ef54a

      SHA512

      70264ae58c8a35d70d0a4183690f256061d0f8bc6491f5d0c0fa20a07dc35c0dbbc70c2b94b7482d5f0fb465092c65f76aae76fbbba45df716677eb1975311cc

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-wal
      Filesize

      8KB

      MD5

      53330589e67ad117197d04970c8460fa

      SHA1

      7cc19c3bad451482ac8251ade684e65c91500a65

      SHA256

      d82fcb09c555f3fbbb95bd3baf00f9ec049e140475ea2f5f23f669f46a684b56

      SHA512

      3ca57a7821058982236ba3958a916dfc9b18aae5ad807ef09ce317fb8b3468142dabeb32d979200a74fee4edb930a4bda982397af946544ca4eeb0d177f6a38b

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-wal
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-wal
      Filesize

      8KB

      MD5

      b3347a94fcda1b26987ef9adc1f56639

      SHA1

      4bb6c288afe7fa6ccd1ae7035d1df9dfa231ca27

      SHA256

      96dbf915054ece85c34ba09e59dd61cdba140321817110f74c12dbc5b5e3c63e

      SHA512

      5478a1a432d07e38cc065787ab42afd85d52b2bf73d630394421a95ff0f558a35154569a6ac96fe7a0761c4a45d4eb67ca816dec000fcae942f7abf74bf9c884

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_data.db
      Filesize

      48KB

      MD5

      cc080f84b097e42afa7fa2683ba9a398

      SHA1

      c820a1019cd516cc7eee64b253d472f28a35e3d8

      SHA256

      4e046ec062bef729e9a949128d18c30c56e66d051a95ddd7bf2d9d448347db0a

      SHA512

      53bc1dcc81c4043ac693b2c229b6bf11d5a88b490b5aa7ddd733b77f95f044894318b1eebb7fa5f7795cde760da4b9ccc252a15d2e53ba3d4aba7d46d9b23ea1

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_data.db-journal
      Filesize

      524B

      MD5

      722d442eae004ab13535147ae0ae320a

      SHA1

      b18739728c397f12924af67ce1061e8f036afa6d

      SHA256

      28caecfbf4e1fb469fe54680833910bd19d00dca0dbb416f6b9e94b25ea0c6d5

      SHA512

      a84b42c9163e6a2ddb62a894e6dd9c647ec9495f5d722031b1ac628c329a95f048f10dc0015694c57a09c2e171d1849cec66e481dcf15c53629df6667d3a45de

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_data.db-wal
      Filesize

      414KB

      MD5

      5955d0d48455489ce0bb0dab210f7827

      SHA1

      8f2d44ce9183d4949b4b53f45f3c4b28a0b40e45

      SHA256

      c053e80926837f82de3936038e40ebb8c78d8fc28ca2c0ee8c897f51d520b8de

      SHA512

      8fb929002630ccc9317af20dae8dd0cbb219f5f9a2c50c44596b006ce67667b16772f76dfd794d9bbe534f7d8fe33fc311b3e41ae2e373357c08bc6bd975b252

    • /data/user/0/com.gentongsehat.fudzapp/shared_prefs/com.gentongsehat.fudzapp_migrationpreferences.xml
      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /data/user/0/com.gentongsehat.fudzapp/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      2KB

      MD5

      52d32ab73bdba7357f1254573a6b3d27

      SHA1

      c52e4da69a91713416928aa73adaa2df696c5660

      SHA256

      12213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0

      SHA512

      17adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d

    • /data/user/0/com.gentongsehat.fudzapp/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      4KB

      MD5

      c4f014ea16d04d377605a11508a83763

      SHA1

      1e4ab2975fc39e8666d72a0d172dec8874bad858

      SHA256

      89182bccf074d316111480d15141220ef3c52840b7e16e694f3baa43d842ec53

      SHA512

      7ee4f254239e42f1d6b260d60290c01614d777627e3fd04f0c17ef7005a2f4bfe25ee3ec2417fe0ded7ad1a2e3366f271158a853be164e05214bd9b8b9644708