Analysis

  • max time kernel
    3874058s
  • max time network
    144s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    21-05-2022 12:50

General

  • Target

    505a5ac24b74f4f5f232b6798746b679b8d3d67f22ec91b0ee026ecb271b24fa.apk

  • Size

    5.9MB

  • MD5

    765d92295018c43a1454a0407b083d76

  • SHA1

    6352bb4e2e055188e89317315d3a3101abd3fecd

  • SHA256

    505a5ac24b74f4f5f232b6798746b679b8d3d67f22ec91b0ee026ecb271b24fa

  • SHA512

    6aa3c3ca7baa3e1015e8636df1990e51c8a474a8e795a456ca824911ec7baa0656b0258433f787f7aa0fe3256350cdcd1d597432fe4f7cf0a7573cda518db4bf

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • evolver.parkash.bakery
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5027
  • evolver.parkash.bakery:Metrica
    1⤵
      PID:5081

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/evolver.parkash.bakery/files/credentials.dat
      Filesize

      233B

      MD5

      1639316959e30250286fd7001648d7d9

      SHA1

      307e0e3d0b6d26183cf434c0948ebdc7fc9071c5

      SHA256

      7b2cc18348b69634b976575a4cb3e5dac80699f82cc8b5bd89116deb71cdd0df

      SHA512

      add76fb5d56a0b053d768e136836445b21aa16159e3f6911a9a201b41d9b7eb46f88af3e86e0a966832ea249babde549de5d4fce273c2dcedf8cfec956e8f629

    • /data/user/0/evolver.parkash.bakery/files/metrica_client_data.db.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/evolver.parkash.bakery/no_backup/credentials.dat
      Filesize

      233B

      MD5

      1639316959e30250286fd7001648d7d9

      SHA1

      307e0e3d0b6d26183cf434c0948ebdc7fc9071c5

      SHA256

      7b2cc18348b69634b976575a4cb3e5dac80699f82cc8b5bd89116deb71cdd0df

      SHA512

      add76fb5d56a0b053d768e136836445b21aa16159e3f6911a9a201b41d9b7eb46f88af3e86e0a966832ea249babde549de5d4fce273c2dcedf8cfec956e8f629

    • /data/user/0/evolver.parkash.bakery/no_backup/db_metrica_evolver.parkash.bakery
      Filesize

      40KB

      MD5

      b49eb0f2594c6f77951d2498e64abd5c

      SHA1

      6cb99f45cb781aaa93229c1c3fb01ce47d115bd4

      SHA256

      3c8e1f2a0d90d2513fa6864bfbd0dc3200e5ea48172a5cc70220e171c0a41e57

      SHA512

      78964eb02e40995b1a90887242eb9405052b008efdbd82454d71b40771803325347bb98ea0b4ab92e6fe9076d535b3cb77c1ff10981bf14723c7c1cd098241a5

    • /data/user/0/evolver.parkash.bakery/no_backup/db_metrica_evolver.parkash.bakery-journal
      Filesize

      524B

      MD5

      d4cabb4ba8336b72596492f10b70990f

      SHA1

      5da0d265887aad91af5ad5def3ed6cd7d6c9d03c

      SHA256

      f5f5e5517c785315f3c0a502348e3fdc31e600b9ddc6e65c595448c09eb90622

      SHA512

      30391615253ed19c59184d2ff6a9d64c0c22bfcf13c20d0f877c541c6cd0676cdae55c9e1a60e65d5052e47a1131ebd6d75f217ab76207d2e208bab4ec22dcce

    • /data/user/0/evolver.parkash.bakery/no_backup/db_metrica_evolver.parkash.bakery-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/evolver.parkash.bakery/no_backup/db_metrica_evolver.parkash.bakery-wal
      Filesize

      430KB

      MD5

      b3d11866f9134143f148da5943171a2f

      SHA1

      b6dca026bddfc396f24a98cb9db14d950b269beb

      SHA256

      8a900644e1f780216913939b92d340ac9eb5cec61cbc1d3926bde81ce91d6df2

      SHA512

      a6b6bc19ed1b3f5f5cd08356f03fb7d29d32a5d9056658092b909a488cd4ebe6c9b8ce3bd5755f0f81b820f2db33ed53ee5d8691bb29324d2c2a2d053bf47ddf

    • /data/user/0/evolver.parkash.bakery/no_backup/db_metrica_evolver.parkash.bakery_20799a27-fa80-4b36-b2db-0f8141f24180
      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/evolver.parkash.bakery/no_backup/db_metrica_evolver.parkash.bakery_20799a27-fa80-4b36-b2db-0f8141f24180-journal
      Filesize

      524B

      MD5

      b42a444ea1efdec22ddd5ceda69087e0

      SHA1

      e81afc8a54d63a1b0adb16c9763374fd0e226c30

      SHA256

      274756f5f212feb14aadea65adab51dbdca3b1764faf0104a1e4d41a4b86d028

      SHA512

      53f915f87ff6be06f7380396958a2b42482ac0428b61ba8fb5a8bdf65bb15aedc7473ea768e79b5487852c93f1f2a2ceb59cffee9b94a5a72af6f7e19881115a

    • /data/user/0/evolver.parkash.bakery/no_backup/db_metrica_evolver.parkash.bakery_20799a27-fa80-4b36-b2db-0f8141f24180-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/evolver.parkash.bakery/no_backup/db_metrica_evolver.parkash.bakery_20799a27-fa80-4b36-b2db-0f8141f24180-wal
      Filesize

      140KB

      MD5

      d87eddc38e7387b8df689db7b01f979f

      SHA1

      4582a72376e4eebe8a7f8a85e77e28cacc41a9cb

      SHA256

      c064fc896b089269f7348764a2c4f761211cb45dbe14aa40c4dd884262823fae

      SHA512

      db0bf9da99602765362d9358fc287da1b0857429500c37f35b363442464353c1e87972bdcffec0a29d79974183969bfaba89fca845acd2625f3f87f932f774c5

    • /data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db
      Filesize

      24KB

      MD5

      68eb592ff94b07e483f6e8a4b6ec8a71

      SHA1

      e7e7aff857255a76b29934abd0ee0d93846b835b

      SHA256

      53f9f0ce9da296cc00a2c87813a5db11e29f08370603f65a52c474153f8941e7

      SHA512

      dbc98de0593700286005d7bb23a642df1112df7786adf9f730b3740aeae22df4e64d6987d310a8297d12657c30b18cbb277108345320c6047638b360461d43ad

    • /data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-journal
      Filesize

      524B

      MD5

      4b6f0b2aa2b74902dda62fc154b70de0

      SHA1

      19e42e0b96713f01f430fb86cde0389462a10a79

      SHA256

      a16e89f3f2559a0f60dc5616567f49a1677a48c32d7dac3f56e1d7829bcfb687

      SHA512

      dd7cc14dec5ec4629b8b0455b4dbc9660c41ec3bebb8b047dc9636e7236883aa77c5b6da3f7ead1f1695a2b3d6f6dede8607031706f8fa9b8f243cdd2f4374ec

    • /data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-wal
      Filesize

      8KB

      MD5

      62a2462e02437accf4e13a1be52820c4

      SHA1

      2cdf9df63d4486a20e551d9f685cf9941761e255

      SHA256

      bc61e0970183798bed528d63afddc9a7b3efda2a39f57b708e50df8f12d3cbe0

      SHA512

      98ddf89557feb4455f3578442a0c17fadcb304b2c5d004abac557a7ccb913657bc78acdb4009e1b9982d8f5406a4d5897c1a0c973f136b048b9b77737e353868

    • /data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-wal
      Filesize

      8KB

      MD5

      5ebe79a91eed98c58767471b06b5f839

      SHA1

      d8045a790a771a5c022f3a2c34c9e6ebce972419

      SHA256

      246df93c461f6f77278f66651b639b28bad9ae71f9362a69ac2baab84a0969fc

      SHA512

      ae9fccd08dad87e01e3985c64d088ab03e1bd32b1fd3cb55b765c0164abf68f3cc017593384e6e3e54b4d240220b0dc35cc6c001dfb23a9eb4c5163acf4e6909

    • /data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-wal
      Filesize

      8KB

      MD5

      bb3171b87385be2182231b27e5fae37c

      SHA1

      f18c07f3ab2cba74378dcc5055bede9666d886f2

      SHA256

      b9fc1ef2e41ab088e6271cd66acff6234ba21a81a239dee9cf99cbcfffb3df91

      SHA512

      00457930a91fcba52f25fd6f490848390e6cb352123b9acd2e858d3093fe8784db152531c9073957b90215912f06bfd21a68402aa47552cc246d66973ec45046

    • /data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-wal
      Filesize

      32KB

      MD5

      840d2207b2c39c83457c0ffe90baf6e5

      SHA1

      505defdf3152f27a1091df3a3f59bfa7c62adada

      SHA256

      5b5180f713ba2dc89ac7e760fc450e891a5b58b9be57700f517af4f8c4dead21

      SHA512

      2f9aa2b3d975a592777c14844576055d13db65b51394844dcd50f6e1164b01b98f8e7adf02c2563f8cb90f8fc7ca502a67a7aa36f6ffc7e3a8089101baa7379b

    • /data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-wal
      Filesize

      8KB

      MD5

      a7040a8adb0cccce68a285bc569943f0

      SHA1

      423fcf115368b7a39da54002eed5de93f5ad3839

      SHA256

      b66df04a4991785f42e847011d307c2e91df31dc9cbd2d2029d8d6fdec0d8ec2

      SHA512

      76efc31b7e39a85a386eb542586d2385dcf437cd4ee166df5e607de4a172b72171ea23fa24850feda6e64d1e4d880b9b790a012cdf29ee29a2098cb2ccc612d1

    • /data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-wal
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-wal
      Filesize

      8KB

      MD5

      e688c7518a2d38feb57db7364d1472ee

      SHA1

      8e1b8d231e44d55f37982163c086f39d65b5914c

      SHA256

      23abe701aa41c49a62564e0a9532bf012773852cad8df56b768d4aeda9a7bf20

      SHA512

      bb5b31e377809cece6ee58d23d8f39a617a10e1fdcec201af3762df5125c3b50b3b773a6035dbe5f07d70422ac8bb55ea2d2826db6efbb4c7a1dafabd4c4c062

    • /data/user/0/evolver.parkash.bakery/no_backup/metrica_data.db
      Filesize

      48KB

      MD5

      9ffc708d606c7a05169a1597626777b7

      SHA1

      fad06bbc8ec863f2ed4c59810bc1d92721537865

      SHA256

      861e83402cbf70a067935afecab434a4dd266c8198e1df9a9b695539832b7151

      SHA512

      23ef5e68d50d7700c31934cb410850420cc4512e91bb606f5ce1e7a376b0994e74cc9b02f3016d387595b7d009ade61009ebd0b4bdc4cf99eb8fcf0554708a84

    • /data/user/0/evolver.parkash.bakery/no_backup/metrica_data.db-journal
      Filesize

      524B

      MD5

      504ada9347ee3c1ee5ac7a89b395c373

      SHA1

      608ddc532ca20626d4fa31cf78b8cb9a18e34ebf

      SHA256

      06b034e1ae18ca31ce4ca0731ffe0b4687122b42e28e54e05ff303a5769ff764

      SHA512

      d197125f34eac095401b1b3e82c9d01e1d5eacc6123467db43d3ad60980e1a639dfad780e47672d08487c8b2cbb75c888cc8dfa527f0433380bca1967d1d45bd

    • /data/user/0/evolver.parkash.bakery/no_backup/metrica_data.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/evolver.parkash.bakery/no_backup/metrica_data.db-wal
      Filesize

      430KB

      MD5

      05dda0d61df043d108bb5286de13b837

      SHA1

      5f01240f5e86c4a6f1eb4839821295babbd67f05

      SHA256

      39f3e6b4dbcbef9aad06782a42bed03591f0fbe71bb7fb8727c52f3e23069073

      SHA512

      be0d4c37eaa13809501fc38807e8d18d23899c10a574461e56c040070f21b10ed3b9011abd4edb2ae9f14790ce54d44ae2e28e6aa4bb03e5a2ba7cc988428615

    • /data/user/0/evolver.parkash.bakery/shared_prefs/evolver.parkash.bakery_migrationpreferences.xml
      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /data/user/0/evolver.parkash.bakery/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      2KB

      MD5

      52d32ab73bdba7357f1254573a6b3d27

      SHA1

      c52e4da69a91713416928aa73adaa2df696c5660

      SHA256

      12213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0

      SHA512

      17adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d

    • /data/user/0/evolver.parkash.bakery/shared_prefs/yteSlT7daYsGlbVGqXfR.xml
      Filesize

      4KB

      MD5

      c4f014ea16d04d377605a11508a83763

      SHA1

      1e4ab2975fc39e8666d72a0d172dec8874bad858

      SHA256

      89182bccf074d316111480d15141220ef3c52840b7e16e694f3baa43d842ec53

      SHA512

      7ee4f254239e42f1d6b260d60290c01614d777627e3fd04f0c17ef7005a2f4bfe25ee3ec2417fe0ded7ad1a2e3366f271158a853be164e05214bd9b8b9644708