Analysis
-
max time kernel
3870441s -
max time network
163s -
platform
android_x86 -
resource
android-x86-arm-20220310-en -
submitted
21-05-2022 12:49
Static task
static1
Behavioral task
behavioral1
Sample
bb146f18e5fa1999339a77dcf4ddc76286839545287224b85faeb5ceb177ef19.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
bb146f18e5fa1999339a77dcf4ddc76286839545287224b85faeb5ceb177ef19.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
bb146f18e5fa1999339a77dcf4ddc76286839545287224b85faeb5ceb177ef19.apk
Resource
android-x64-arm64-20220310-en
General
-
Target
bb146f18e5fa1999339a77dcf4ddc76286839545287224b85faeb5ceb177ef19.apk
-
Size
5.9MB
-
MD5
8788129ce1a2bc4fbc4d191fbb49a898
-
SHA1
2b734237dd4d1a853553197a7564d9acc61cf31b
-
SHA256
bb146f18e5fa1999339a77dcf4ddc76286839545287224b85faeb5ceb177ef19
-
SHA512
99759e9ba7334653eed3a06a0d88338b6a9c9c696dec09efb63e0bbe069e6b3d2db736eede341a9cb80f197fcf0a995abd64ded2572a68763ecbc121465d1871
Malware Config
Signatures
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.gentongsehat.fudzappdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.gentongsehat.fudzapp
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.gentongsehat.fudzapp/files/credentials.datFilesize
233B
MD5566d2565094ecc4e77361b8acf4544e3
SHA1df7ca7db060f0ba3c92da18fad7adb4298c6a2cf
SHA25646fdd1091080ba45e208dfd86bd825c5c13a3f413eaeb78e2d6db93d8739b017
SHA512a0ab1a15ff3db2c0dfbd4f439fccc9992b0cd72de95a2a4ea5e6c808fca6727fff43e59fd5fc88e128ccb29d435a96b36b09c48798dd56232afaf7fa850f966c
-
/data/user/0/com.gentongsehat.fudzapp/files/metrica_client_data.db.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/credentials.datFilesize
233B
MD5566d2565094ecc4e77361b8acf4544e3
SHA1df7ca7db060f0ba3c92da18fad7adb4298c6a2cf
SHA25646fdd1091080ba45e208dfd86bd825c5c13a3f413eaeb78e2d6db93d8739b017
SHA512a0ab1a15ff3db2c0dfbd4f439fccc9992b0cd72de95a2a4ea5e6c808fca6727fff43e59fd5fc88e128ccb29d435a96b36b09c48798dd56232afaf7fa850f966c
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzappFilesize
40KB
MD50225ab34dcc4d0da7b914bf8d59e0a3a
SHA1f1d315097413cddfcd4e9848c91b9d1c3f7bec4d
SHA2566505f9543dbac21ab5c10733ebffd266b623d205317806a998becb11a8edfe65
SHA5123f44d0b71135ed8d19c0b383027c1839cd8796a4ccadfd6c4b02b51106abe06b3861a424a4b834802a6ea2c5960da95bf392faf1a4921c908f919961d5c12ca3
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp-journalFilesize
524B
MD58230c20f940d204366d927d289162af5
SHA12ece5306e4687470ef12bacb33e8c5fdb35c81e9
SHA256429268536ab22a31433d158886653e0516a6d25b84948a96bf3662b4b586e6a1
SHA512e0b5d29d0ec11dfb0a6a84711ccd2c5d7db9a29f20162f53bc6bd737b5de9d532d75329944afbc61212ce2f79c252b3491decb7aa2019981ff0922f47d472200
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp-walFilesize
422KB
MD5d0e97381ecdfdcc961c064c3fa6578db
SHA1811abca062eba1d41e7ecb1e21c01655bfa5d903
SHA25679279aa56292786e20c12366cf6dfc2f19c842f6536bf094ed97be06553cb5e1
SHA512c72371ecb97cf90b0a1ae0a248d4a248d9b411f2a8abfcd41b7a627ebc144be7c9c82079e5dd3c35bbeea5b8e492445725c40efed3a07b846f96c30de5964aaf
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp_20799a27-fa80-4b36-b2db-0f8141f24180Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp_20799a27-fa80-4b36-b2db-0f8141f24180-journalFilesize
524B
MD5a40db06b012e75f5bab586a1d13c91f0
SHA1c1a44d48db8f8a5ffc468f2eb9a439f2be1c5219
SHA2569fcb25a1160b306dc77cc9af6092d6941bd12fc7b5c1d3e9677945981e227e28
SHA5127c65b2831f98abd22a61ab24f1856304c9059e5f7c5dbc949739e00d903ccbd1dd115ab8e63fb020ac193cf7aec818120801996a7e99202473f1b97f9c67e059
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp_20799a27-fa80-4b36-b2db-0f8141f24180-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/db_metrica_com.gentongsehat.fudzapp_20799a27-fa80-4b36-b2db-0f8141f24180-walFilesize
140KB
MD5af11457441d977a99047f98ad9c64ca7
SHA17d9a3d77137c61fb692fabf7744ece64718db4dd
SHA2561d3f201618e9000038b5f502774fccb3f14ee78f520d2bc8c34c23de10a972e4
SHA51242654f2a0f8dff288589566f05e31c0d9337b5881f56c7ab9f4991cb35fe9e5448648b802cc8eeaabd794194e89111f79cc60830850b307049f4284ac09455bf
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.dbFilesize
24KB
MD568eb592ff94b07e483f6e8a4b6ec8a71
SHA1e7e7aff857255a76b29934abd0ee0d93846b835b
SHA25653f9f0ce9da296cc00a2c87813a5db11e29f08370603f65a52c474153f8941e7
SHA512dbc98de0593700286005d7bb23a642df1112df7786adf9f730b3740aeae22df4e64d6987d310a8297d12657c30b18cbb277108345320c6047638b360461d43ad
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-journalFilesize
524B
MD59539297e86192fe02bd40f8a6d21c986
SHA13535cfd5abd06dc75d391d20bdf9929729f6e26c
SHA2561cd3bb82f903e5c124b6564206e77aec89729281ee8c8d8bb5273aed296d88a0
SHA512144f31236bc45feb3dbf790ebfdd24c27adbf8d33a0801c844a8650da3511b38296434d8b8c48af074e15fe14ab7d0c1a2b8e58669840f4cc80ba36530fd0a51
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-walFilesize
8KB
MD5feba0ff55746d9ff155588bd8efff6f7
SHA1345d83b982c491bd34dd81cce847c8c3a908c8e9
SHA2568e217363b6ce0c0ad2680b0d516a6266a0b5c71baaa505724abfba010caf7e88
SHA51215f33245642e507561eb2b98191ded2abd3b4b815ffac42b14cf1b367babc9805d8743f7abb676180cd1888f0697428ec19ccad26991a6eb1917e4f82fd71c7f
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-walFilesize
8KB
MD50fdb02c6ed10beb6d3b2ac824a00f63a
SHA1583a13061f8a06dc6fc7e4ab6eb3330b9c694bc1
SHA25685d51b38035baee9576064669aff24facd56fa05fa7a92a178e2983b65a362e6
SHA51226145461bdcdf150c9a75eef0eff14f13082c648c87900f769cdcd21b798dd1d83d77bd06820b825ac5961641d74f4a11d8de4c3ede030e30a9d339efbf5b512
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-walFilesize
8KB
MD5675253ed4e60be1970c631b04a4d76e5
SHA140cc4c091ceea2590c7c6a6ec5f3e97e50bec0a4
SHA256012ad4b576fabb168c5046a2f07cdea2622f73328b921f7a28e85ffc44e099d3
SHA51203266e11531ed6cb4fb3101b3d4808c87eac195a69e9dc2de9fbecea8ef22569faa2d1c6779ed554287576adfbfe6f3d62a75b039882a05b0b0078545cf3ad51
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-walFilesize
32KB
MD5250f8f34e669e699bfbf4f6364d63f37
SHA1d1ee31b00d72819af170c46f24b2f4235d7e72e2
SHA256328d2c5b48b4c73fa08733853b2d0939cbc3881aa0162b798870d86bc82ef54a
SHA51270264ae58c8a35d70d0a4183690f256061d0f8bc6491f5d0c0fa20a07dc35c0dbbc70c2b94b7482d5f0fb465092c65f76aae76fbbba45df716677eb1975311cc
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-walFilesize
8KB
MD553330589e67ad117197d04970c8460fa
SHA17cc19c3bad451482ac8251ade684e65c91500a65
SHA256d82fcb09c555f3fbbb95bd3baf00f9ec049e140475ea2f5f23f669f46a684b56
SHA5123ca57a7821058982236ba3958a916dfc9b18aae5ad807ef09ce317fb8b3468142dabeb32d979200a74fee4edb930a4bda982397af946544ca4eeb0d177f6a38b
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-walMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_client_data.db-walFilesize
8KB
MD5b3347a94fcda1b26987ef9adc1f56639
SHA14bb6c288afe7fa6ccd1ae7035d1df9dfa231ca27
SHA25696dbf915054ece85c34ba09e59dd61cdba140321817110f74c12dbc5b5e3c63e
SHA5125478a1a432d07e38cc065787ab42afd85d52b2bf73d630394421a95ff0f558a35154569a6ac96fe7a0761c4a45d4eb67ca816dec000fcae942f7abf74bf9c884
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_data.dbFilesize
48KB
MD5cc080f84b097e42afa7fa2683ba9a398
SHA1c820a1019cd516cc7eee64b253d472f28a35e3d8
SHA2564e046ec062bef729e9a949128d18c30c56e66d051a95ddd7bf2d9d448347db0a
SHA51253bc1dcc81c4043ac693b2c229b6bf11d5a88b490b5aa7ddd733b77f95f044894318b1eebb7fa5f7795cde760da4b9ccc252a15d2e53ba3d4aba7d46d9b23ea1
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_data.db-journalFilesize
524B
MD5722d442eae004ab13535147ae0ae320a
SHA1b18739728c397f12924af67ce1061e8f036afa6d
SHA25628caecfbf4e1fb469fe54680833910bd19d00dca0dbb416f6b9e94b25ea0c6d5
SHA512a84b42c9163e6a2ddb62a894e6dd9c647ec9495f5d722031b1ac628c329a95f048f10dc0015694c57a09c2e171d1849cec66e481dcf15c53629df6667d3a45de
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.gentongsehat.fudzapp/no_backup/metrica_data.db-walFilesize
414KB
MD55955d0d48455489ce0bb0dab210f7827
SHA18f2d44ce9183d4949b4b53f45f3c4b28a0b40e45
SHA256c053e80926837f82de3936038e40ebb8c78d8fc28ca2c0ee8c897f51d520b8de
SHA5128fb929002630ccc9317af20dae8dd0cbb219f5f9a2c50c44596b006ce67667b16772f76dfd794d9bbe534f7d8fe33fc311b3e41ae2e373357c08bc6bd975b252
-
/data/user/0/com.gentongsehat.fudzapp/shared_prefs/com.gentongsehat.fudzapp_migrationpreferences.xmlFilesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
/data/user/0/com.gentongsehat.fudzapp/shared_prefs/yteSlT7daYsGlbVGqXfR.xmlFilesize
2KB
MD552d32ab73bdba7357f1254573a6b3d27
SHA1c52e4da69a91713416928aa73adaa2df696c5660
SHA25612213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0
SHA51217adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d
-
/data/user/0/com.gentongsehat.fudzapp/shared_prefs/yteSlT7daYsGlbVGqXfR.xmlFilesize
4KB
MD5c4f014ea16d04d377605a11508a83763
SHA11e4ab2975fc39e8666d72a0d172dec8874bad858
SHA25689182bccf074d316111480d15141220ef3c52840b7e16e694f3baa43d842ec53
SHA5127ee4f254239e42f1d6b260d60290c01614d777627e3fd04f0c17ef7005a2f4bfe25ee3ec2417fe0ded7ad1a2e3366f271158a853be164e05214bd9b8b9644708