Analysis

  • max time kernel
    3871761s
  • max time network
    168s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    21-05-2022 12:50

General

  • Target

    a280006bb01147124ba4472ecd9206cf102226504b2446fc2371067f6fcf848f.apk

  • Size

    5.9MB

  • MD5

    183d1e2b8a0a22373084c59b4dca8859

  • SHA1

    b7502902b080b6d436441cd1088aea88316768aa

  • SHA256

    a280006bb01147124ba4472ecd9206cf102226504b2446fc2371067f6fcf848f

  • SHA512

    04683667419d629e4d9f87d97ba213ece8c3ec55f589fa906cc60c2daed03748a2f60e1a29e4172fe39195cfa67e1d965843ece17b9a9d6ce25c85e9fb36813c

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.appsmart.delivery.darbarmuenchen2087
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:6026
  • com.appsmart.delivery.darbarmuenchen2087:Metrica
    1⤵
      PID:6071

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/ZPkFS.log
      Filesize

      90B

      MD5

      6085a72a3260a5180dc8e78f5d19fef4

      SHA1

      b8ef2aa7918bc4221ab71cc3d8a81400b9c42ab4

      SHA256

      0cbaa264d046b858c8112b41a88372b7d2f779c132f4d7cdf115b27352905520

      SHA512

      c994c4b506a71c34876ae824577309e8a61a83c26b7cd291ab73564d375ab509f390dd417e8e14139dc90db0011bff3fba8189caaf9920d4e38d0421a649239c

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/credentials.dat
      Filesize

      234B

      MD5

      8a01dd3f3ffb80e3ebc6e652362aa4d1

      SHA1

      3db95c031afc9b5b1501d4cc6b76f3ad6e2465d3

      SHA256

      21ce542e28573fa6ca4656ec09e37cdb74f4577214c701ca36ba3b0c3ac6a1ff

      SHA512

      e13835bede128f8e576ab010d858c146327d94c1ae6cdb7aead19f2e6aa86ed75e7d9a1e428d75f151f4807e58a9f981b02830e9a0dea0af932f4dee469f7f15

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/files/metrica_client_data.db.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/credentials.dat
      Filesize

      234B

      MD5

      8a01dd3f3ffb80e3ebc6e652362aa4d1

      SHA1

      3db95c031afc9b5b1501d4cc6b76f3ad6e2465d3

      SHA256

      21ce542e28573fa6ca4656ec09e37cdb74f4577214c701ca36ba3b0c3ac6a1ff

      SHA512

      e13835bede128f8e576ab010d858c146327d94c1ae6cdb7aead19f2e6aa86ed75e7d9a1e428d75f151f4807e58a9f981b02830e9a0dea0af932f4dee469f7f15

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087
      Filesize

      1.2MB

      MD5

      59b63739d2908dbf31bbcfb25676d109

      SHA1

      d0b24b0164fb5ec74724ba0b05fb6657e58b4e06

      SHA256

      34cfef8164cb8418e0cf7c94a3e396c6d54a4154646616223712a651fd7aeb97

      SHA512

      74e8dd27cb496689ea94a1e5269f0ac4528583f7b7cf90bea5fc50a8fde5526fd883e52170fd6ee15fa952e22845ec37ca46272612d25d5a75337c5dd34b5de4

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087-journal
      Filesize

      1KB

      MD5

      1ad089e7745272dee99abee1224fd930

      SHA1

      7896a25baf71c71dd22efaec6fbf68c92f0a99f4

      SHA256

      dc2760cbcce89ed15505199bf5cc95ff62c8b7da44e8347aa7f97ba83aaaacfb

      SHA512

      8d166833b190218d1588eb53be415c51aa6dba0852d15caa87dea7932e67e306378cd436cc8ab87a32723747b05dc92ee0780afa7acd94ff0e62139e641053ec

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180
      Filesize

      400KB

      MD5

      10c32b30fe45d88d965319d09a3f44f1

      SHA1

      066c977af1e38cbc2839706599c9505e233070cb

      SHA256

      91417163c17b6a5515ff3b32fddc9b8b4f44f40a7be27b64ca189b46babfc234

      SHA512

      a77b7a2cb301ee12e4ea3dade0030eeb7c3e726899f9737fcd43ffe73b0f7154b81bdc3fc7f9213f410267a9cea02056c1b5cb97645b911a1b232ce8da7844a8

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/db_metrica_com.appsmart.delivery.darbarmuenchen2087_20799a27-fa80-4b36-b2db-0f8141f24180-journal
      Filesize

      1KB

      MD5

      8e25070382d36a476e69b03b466b7750

      SHA1

      358fba90a7172c46a62e4c85b4f8c5635c24f958

      SHA256

      1955884cb24770a12d51d1e77a03213bd6bc4a1e48b70c65c6e650f78a507051

      SHA512

      745fdc0ed0e9c93e7f305e9d85fb1bc0cb897b1d4e3351ca4782ce706a3d928182725eea9a02d76aa072a8c61473e45df84beaf78f2539f46be081d969b3af72

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db
      Filesize

      72KB

      MD5

      4adf3ead8dc343a313cbcf4b5760a572

      SHA1

      3047cdcc36e21cb521c1203cb4c4bbe44fd39f59

      SHA256

      07b3ed808e156d9ad0c8470db62c1ca4e8f279d493f4a6c7f8fb3f953a22f0a4

      SHA512

      8027fb748507c9ad725c572e1ad4fe04226c0f56f42c99603df07f9ca958e924423431a8e9aa4940abc69d7f97f763f8d67de3dcfb186b036534a3cfbc616fc6

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_client_data.db-journal
      Filesize

      1KB

      MD5

      4300d836e148a70f1d226c1369fcefef

      SHA1

      bef10ae922c1887f74f6c0603a965669a903284d

      SHA256

      cb0bcc07467f8ae1d364fcc5223a56e48e1e211eed8af41aecb0f758e1ce73e2

      SHA512

      13ac2fb8b527b25995f81e8987b01c4691ad140c952ad6b9b458bc56536da5b65d0449fe2c7496d34dece4b6ebb411a008d69ba83509ac9b956e00f8992bef8c

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db
      Filesize

      1.2MB

      MD5

      5efc2511d13ee57de03d9b58da6b210d

      SHA1

      c11b14c52901f1744f1199c0a7807b0234f09000

      SHA256

      3732647d8fcdba36a005dbde004fd70b3f8c5bbf82bf1c44c79ffb9606cd1cdc

      SHA512

      1e93697828d27a9eb4edadbb69e63aec17faaac51a8c3d406645f5ce295e4a2573b9ce326ea20de85283e08156baa90344fb4c12f695b3cf6f629260eb121376

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/no_backup/metrica_data.db-journal
      Filesize

      1KB

      MD5

      380229aee32da53ab3da428c803626c9

      SHA1

      bb68abd3756c0f2b0a8890a2a3b7b00c21212e01

      SHA256

      cca60aa372fd2febca031808fb2d5498e563d437fbb14f121f223c98c06f0f6d

      SHA512

      bda8b317104b22f8ed983a0fa6e42b3769543a619b8d280b91336cbc806610688f2f8c96549b54f7cc7f299204e72fdd83c0aaff3243d06d782c46e3bd9b5c44

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/shared_prefs/com.appsmart.delivery.darbarmuenchen2087_migrationpreferences.xml
      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      2KB

      MD5

      52d32ab73bdba7357f1254573a6b3d27

      SHA1

      c52e4da69a91713416928aa73adaa2df696c5660

      SHA256

      12213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0

      SHA512

      17adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d

    • /data/user/0/com.appsmart.delivery.darbarmuenchen2087/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      4KB

      MD5

      7ce76fa54817dbcd4a6b3b18de351c4a

      SHA1

      a7d20daccc0bb358e28660b1ef036479a728a852

      SHA256

      6e353b8766f28d9cb1e5a5484ac8438c162a82db410611132a5aec91bc118276

      SHA512

      b82735a38e3e06802e94ff6c12e84a0a93a592fb5ec264cebc3739e9786e7f188e40a962ef75f1c58f6c1a7fd668698b04320af4968a29641b5d6c70eb9946a3