General
Target

a280006bb01147124ba4472ecd9206cf102226504b2446fc2371067f6fcf848f.apk

Filesize

5MB

Completed

21-05-2022 13:20

Task

behavioral2

Score
6/10
MD5

183d1e2b8a0a22373084c59b4dca8859

SHA1

b7502902b080b6d436441cd1088aea88316768aa

SHA256

a280006bb01147124ba4472ecd9206cf102226504b2446fc2371067f6fcf848f

SHA256

04683667419d629e4d9f87d97ba213ece8c3ec55f589fa906cc60c2daed03748a2f60e1a29e4172fe39195cfa67e1d965843ece17b9a9d6ce25c85e9fb36813c

Malware Config
Signatures 2

Filter: none

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data).
    com.appsmart.delivery.darbarmuenchen2087

    Tags

    Reported IOCs

    descriptioniocprocess
    Framework API calljavax.crypto.Cipher.doFinalcom.appsmart.delivery.darbarmuenchen2087
Processes 2
  • com.appsmart.delivery.darbarmuenchen2087
    Uses Crypto APIs (Might try to encrypt user data).
    PID:6026
  • com.appsmart.delivery.darbarmuenchen2087:Metrica
    PID:6071
Network
MITRE ATT&CK Matrix
Collection
    Command and Control
      Credential Access
        Defense Evasion
          Discovery
            Execution
              Exfiltration
                Impact
                  Initial Access
                    Lateral Movement
                      Persistence
                        Privilege Escalation
                          Replay Monitor
                          00:00 00:00
                          Downloads
                          • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/ZPkFS.log

                            MD5

                            6085a72a3260a5180dc8e78f5d19fef4

                            SHA1

                            b8ef2aa7918bc4221ab71cc3d8a81400b9c42ab4

                            SHA256

                            0cbaa264d046b858c8112b41a88372b7d2f779c132f4d7cdf115b27352905520

                            SHA512

                            c994c4b506a71c34876ae824577309e8a61a83c26b7cd291ab73564d375ab509f390dd417e8e14139dc90db0011bff3fba8189caaf9920d4e38d0421a649239c

                          • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/credentials.dat

                            MD5

                            8a01dd3f3ffb80e3ebc6e652362aa4d1

                            SHA1

                            3db95c031afc9b5b1501d4cc6b76f3ad6e2465d3

                            SHA256

                            21ce542e28573fa6ca4656ec09e37cdb74f4577214c701ca36ba3b0c3ac6a1ff

                            SHA512

                            e13835bede128f8e576ab010d858c146327d94c1ae6cdb7aead19f2e6aa86ed75e7d9a1e428d75f151f4807e58a9f981b02830e9a0dea0af932f4dee469f7f15

                          • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/metrica_client_data.db.lock

                            MD5

                            d41d8cd98f00b204e9800998ecf8427e

                            SHA1

                            da39a3ee5e6b4b0d3255bfef95601890afd80709

                            SHA256

                            e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                            SHA512

                            cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

                          • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/credentials.dat

                            MD5

                            8a01dd3f3ffb80e3ebc6e652362aa4d1

                            SHA1

                            3db95c031afc9b5b1501d4cc6b76f3ad6e2465d3

                            SHA256

                            21ce542e28573fa6ca4656ec09e37cdb74f4577214c701ca36ba3b0c3ac6a1ff

                            SHA512

                            e13835bede128f8e576ab010d858c146327d94c1ae6cdb7aead19f2e6aa86ed75e7d9a1e428d75f151f4807e58a9f981b02830e9a0dea0af932f4dee469f7f15

                          • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087

                            MD5

                            59b63739d2908dbf31bbcfb25676d109

                            SHA1

                            d0b24b0164fb5ec74724ba0b05fb6657e58b4e06

                            SHA256

                            34cfef8164cb8418e0cf7c94a3e396c6d54a4154646616223712a651fd7aeb97

                            SHA512

                            74e8dd27cb496689ea94a1e5269f0ac4528583f7b7cf90bea5fc50a8fde5526fd883e52170fd6ee15fa952e22845ec37ca46272612d25d5a75337c5dd34b5de4

                          • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal

                            MD5

                            1ad089e7745272dee99abee1224fd930

                            SHA1

                            7896a25baf71c71dd22efaec6fbf68c92f0a99f4

                            SHA256

                            dc2760cbcce89ed15505199bf5cc95ff62c8b7da44e8347aa7f97ba83aaaacfb

                            SHA512

                            8d166833b190218d1588eb53be415c51aa6dba0852d15caa87dea7932e67e306378cd436cc8ab87a32723747b05dc92ee0780afa7acd94ff0e62139e641053ec

                          • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180

                            MD5

                            10c32b30fe45d88d965319d09a3f44f1

                            SHA1

                            066c977af1e38cbc2839706599c9505e233070cb

                            SHA256

                            91417163c17b6a5515ff3b32fddc9b8b4f44f40a7be27b64ca189b46babfc234

                            SHA512

                            a77b7a2cb301ee12e4ea3dade0030eeb7c3e726899f9737fcd43ffe73b0f7154b81bdc3fc7f9213f410267a9cea02056c1b5cb97645b911a1b232ce8da7844a8

                          • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal

                            MD5

                            8e25070382d36a476e69b03b466b7750

                            SHA1

                            358fba90a7172c46a62e4c85b4f8c5635c24f958

                            SHA256

                            1955884cb24770a12d51d1e77a03213bd6bc4a1e48b70c65c6e650f78a507051

                            SHA512

                            745fdc0ed0e9c93e7f305e9d85fb1bc0cb897b1d4e3351ca4782ce706a3d928182725eea9a02d76aa072a8c61473e45df84beaf78f2539f46be081d969b3af72

                          • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db

                            MD5

                            4adf3ead8dc343a313cbcf4b5760a572

                            SHA1

                            3047cdcc36e21cb521c1203cb4c4bbe44fd39f59

                            SHA256

                            07b3ed808e156d9ad0c8470db62c1ca4e8f279d493f4a6c7f8fb3f953a22f0a4

                            SHA512

                            8027fb748507c9ad725c572e1ad4fe04226c0f56f42c99603df07f9ca958e924423431a8e9aa4940abc69d7f97f763f8d67de3dcfb186b036534a3cfbc616fc6

                          • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal

                            MD5

                            4300d836e148a70f1d226c1369fcefef

                            SHA1

                            bef10ae922c1887f74f6c0603a965669a903284d

                            SHA256

                            cb0bcc07467f8ae1d364fcc5223a56e48e1e211eed8af41aecb0f758e1ce73e2

                            SHA512

                            13ac2fb8b527b25995f81e8987b01c4691ad140c952ad6b9b458bc56536da5b65d0449fe2c7496d34dece4b6ebb411a008d69ba83509ac9b956e00f8992bef8c

                          • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db

                            MD5

                            5efc2511d13ee57de03d9b58da6b210d

                            SHA1

                            c11b14c52901f1744f1199c0a7807b0234f09000

                            SHA256

                            3732647d8fcdba36a005dbde004fd70b3f8c5bbf82bf1c44c79ffb9606cd1cdc

                            SHA512

                            1e93697828d27a9eb4edadbb69e63aec17faaac51a8c3d406645f5ce295e4a2573b9ce326ea20de85283e08156baa90344fb4c12f695b3cf6f629260eb121376

                          • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db-journal

                            MD5

                            380229aee32da53ab3da428c803626c9

                            SHA1

                            bb68abd3756c0f2b0a8890a2a3b7b00c21212e01

                            SHA256

                            cca60aa372fd2febca031808fb2d5498e563d437fbb14f121f223c98c06f0f6d

                            SHA512

                            bda8b317104b22f8ed983a0fa6e42b3769543a619b8d280b91336cbc806610688f2f8c96549b54f7cc7f299204e72fdd83c0aaff3243d06d782c46e3bd9b5c44

                          • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/shared_prefs/com.appsmart.delivery.darbarmuenchen2087_migrationpreferences.xml

                            MD5

                            9781ca003f10f8d0c9c1945b63fdca7f

                            SHA1

                            4156cf5dc8d71dbab734d25e5e1598b37a5456f4

                            SHA256

                            3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

                            SHA512

                            25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

                          • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/shared_prefs/yteSlT7daYsGlbVGqXfR.xml

                            MD5

                            52d32ab73bdba7357f1254573a6b3d27

                            SHA1

                            c52e4da69a91713416928aa73adaa2df696c5660

                            SHA256

                            12213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0

                            SHA512

                            17adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d

                          • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/shared_prefs/yteSlT7daYsGlbVGqXfR.xml

                            MD5

                            7ce76fa54817dbcd4a6b3b18de351c4a

                            SHA1

                            a7d20daccc0bb358e28660b1ef036479a728a852

                            SHA256

                            6e353b8766f28d9cb1e5a5484ac8438c162a82db410611132a5aec91bc118276

                            SHA512

                            b82735a38e3e06802e94ff6c12e84a0a93a592fb5ec264cebc3739e9786e7f188e40a962ef75f1c58f6c1a7fd668698b04320af4968a29641b5d6c70eb9946a3