Analysis
-
max time kernel
3874058s -
max time network
144s -
platform
android_x86 -
resource
android-x86-arm-20220310-en -
submitted
21-05-2022 12:50
Static task
static1
Behavioral task
behavioral1
Sample
505a5ac24b74f4f5f232b6798746b679b8d3d67f22ec91b0ee026ecb271b24fa.apk
Resource
android-x86-arm-20220310-en
Behavioral task
behavioral2
Sample
505a5ac24b74f4f5f232b6798746b679b8d3d67f22ec91b0ee026ecb271b24fa.apk
Resource
android-x64-20220310-en
Behavioral task
behavioral3
Sample
505a5ac24b74f4f5f232b6798746b679b8d3d67f22ec91b0ee026ecb271b24fa.apk
Resource
android-x64-arm64-20220310-en
General
-
Target
505a5ac24b74f4f5f232b6798746b679b8d3d67f22ec91b0ee026ecb271b24fa.apk
-
Size
5.9MB
-
MD5
765d92295018c43a1454a0407b083d76
-
SHA1
6352bb4e2e055188e89317315d3a3101abd3fecd
-
SHA256
505a5ac24b74f4f5f232b6798746b679b8d3d67f22ec91b0ee026ecb271b24fa
-
SHA512
6aa3c3ca7baa3e1015e8636df1990e51c8a474a8e795a456ca824911ec7baa0656b0258433f787f7aa0fe3256350cdcd1d597432fe4f7cf0a7573cda518db4bf
Malware Config
Signatures
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
evolver.parkash.bakerydescription ioc process Framework API call javax.crypto.Cipher.doFinal evolver.parkash.bakery
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/evolver.parkash.bakery/files/credentials.datFilesize
233B
MD51639316959e30250286fd7001648d7d9
SHA1307e0e3d0b6d26183cf434c0948ebdc7fc9071c5
SHA2567b2cc18348b69634b976575a4cb3e5dac80699f82cc8b5bd89116deb71cdd0df
SHA512add76fb5d56a0b053d768e136836445b21aa16159e3f6911a9a201b41d9b7eb46f88af3e86e0a966832ea249babde549de5d4fce273c2dcedf8cfec956e8f629
-
/data/user/0/evolver.parkash.bakery/files/metrica_client_data.db.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/evolver.parkash.bakery/no_backup/credentials.datFilesize
233B
MD51639316959e30250286fd7001648d7d9
SHA1307e0e3d0b6d26183cf434c0948ebdc7fc9071c5
SHA2567b2cc18348b69634b976575a4cb3e5dac80699f82cc8b5bd89116deb71cdd0df
SHA512add76fb5d56a0b053d768e136836445b21aa16159e3f6911a9a201b41d9b7eb46f88af3e86e0a966832ea249babde549de5d4fce273c2dcedf8cfec956e8f629
-
/data/user/0/evolver.parkash.bakery/no_backup/db_metrica_evolver.parkash.bakeryFilesize
40KB
MD5b49eb0f2594c6f77951d2498e64abd5c
SHA16cb99f45cb781aaa93229c1c3fb01ce47d115bd4
SHA2563c8e1f2a0d90d2513fa6864bfbd0dc3200e5ea48172a5cc70220e171c0a41e57
SHA51278964eb02e40995b1a90887242eb9405052b008efdbd82454d71b40771803325347bb98ea0b4ab92e6fe9076d535b3cb77c1ff10981bf14723c7c1cd098241a5
-
/data/user/0/evolver.parkash.bakery/no_backup/db_metrica_evolver.parkash.bakery-journalFilesize
524B
MD5d4cabb4ba8336b72596492f10b70990f
SHA15da0d265887aad91af5ad5def3ed6cd7d6c9d03c
SHA256f5f5e5517c785315f3c0a502348e3fdc31e600b9ddc6e65c595448c09eb90622
SHA51230391615253ed19c59184d2ff6a9d64c0c22bfcf13c20d0f877c541c6cd0676cdae55c9e1a60e65d5052e47a1131ebd6d75f217ab76207d2e208bab4ec22dcce
-
/data/user/0/evolver.parkash.bakery/no_backup/db_metrica_evolver.parkash.bakery-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/evolver.parkash.bakery/no_backup/db_metrica_evolver.parkash.bakery-walFilesize
430KB
MD5b3d11866f9134143f148da5943171a2f
SHA1b6dca026bddfc396f24a98cb9db14d950b269beb
SHA2568a900644e1f780216913939b92d340ac9eb5cec61cbc1d3926bde81ce91d6df2
SHA512a6b6bc19ed1b3f5f5cd08356f03fb7d29d32a5d9056658092b909a488cd4ebe6c9b8ce3bd5755f0f81b820f2db33ed53ee5d8691bb29324d2c2a2d053bf47ddf
-
/data/user/0/evolver.parkash.bakery/no_backup/db_metrica_evolver.parkash.bakery_20799a27-fa80-4b36-b2db-0f8141f24180Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/user/0/evolver.parkash.bakery/no_backup/db_metrica_evolver.parkash.bakery_20799a27-fa80-4b36-b2db-0f8141f24180-journalFilesize
524B
MD5b42a444ea1efdec22ddd5ceda69087e0
SHA1e81afc8a54d63a1b0adb16c9763374fd0e226c30
SHA256274756f5f212feb14aadea65adab51dbdca3b1764faf0104a1e4d41a4b86d028
SHA51253f915f87ff6be06f7380396958a2b42482ac0428b61ba8fb5a8bdf65bb15aedc7473ea768e79b5487852c93f1f2a2ceb59cffee9b94a5a72af6f7e19881115a
-
/data/user/0/evolver.parkash.bakery/no_backup/db_metrica_evolver.parkash.bakery_20799a27-fa80-4b36-b2db-0f8141f24180-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/evolver.parkash.bakery/no_backup/db_metrica_evolver.parkash.bakery_20799a27-fa80-4b36-b2db-0f8141f24180-walFilesize
140KB
MD5d87eddc38e7387b8df689db7b01f979f
SHA14582a72376e4eebe8a7f8a85e77e28cacc41a9cb
SHA256c064fc896b089269f7348764a2c4f761211cb45dbe14aa40c4dd884262823fae
SHA512db0bf9da99602765362d9358fc287da1b0857429500c37f35b363442464353c1e87972bdcffec0a29d79974183969bfaba89fca845acd2625f3f87f932f774c5
-
/data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.dbFilesize
24KB
MD568eb592ff94b07e483f6e8a4b6ec8a71
SHA1e7e7aff857255a76b29934abd0ee0d93846b835b
SHA25653f9f0ce9da296cc00a2c87813a5db11e29f08370603f65a52c474153f8941e7
SHA512dbc98de0593700286005d7bb23a642df1112df7786adf9f730b3740aeae22df4e64d6987d310a8297d12657c30b18cbb277108345320c6047638b360461d43ad
-
/data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-journalFilesize
524B
MD54b6f0b2aa2b74902dda62fc154b70de0
SHA119e42e0b96713f01f430fb86cde0389462a10a79
SHA256a16e89f3f2559a0f60dc5616567f49a1677a48c32d7dac3f56e1d7829bcfb687
SHA512dd7cc14dec5ec4629b8b0455b4dbc9660c41ec3bebb8b047dc9636e7236883aa77c5b6da3f7ead1f1695a2b3d6f6dede8607031706f8fa9b8f243cdd2f4374ec
-
/data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-walFilesize
8KB
MD562a2462e02437accf4e13a1be52820c4
SHA12cdf9df63d4486a20e551d9f685cf9941761e255
SHA256bc61e0970183798bed528d63afddc9a7b3efda2a39f57b708e50df8f12d3cbe0
SHA51298ddf89557feb4455f3578442a0c17fadcb304b2c5d004abac557a7ccb913657bc78acdb4009e1b9982d8f5406a4d5897c1a0c973f136b048b9b77737e353868
-
/data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-walFilesize
8KB
MD55ebe79a91eed98c58767471b06b5f839
SHA1d8045a790a771a5c022f3a2c34c9e6ebce972419
SHA256246df93c461f6f77278f66651b639b28bad9ae71f9362a69ac2baab84a0969fc
SHA512ae9fccd08dad87e01e3985c64d088ab03e1bd32b1fd3cb55b765c0164abf68f3cc017593384e6e3e54b4d240220b0dc35cc6c001dfb23a9eb4c5163acf4e6909
-
/data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-walFilesize
8KB
MD5bb3171b87385be2182231b27e5fae37c
SHA1f18c07f3ab2cba74378dcc5055bede9666d886f2
SHA256b9fc1ef2e41ab088e6271cd66acff6234ba21a81a239dee9cf99cbcfffb3df91
SHA51200457930a91fcba52f25fd6f490848390e6cb352123b9acd2e858d3093fe8784db152531c9073957b90215912f06bfd21a68402aa47552cc246d66973ec45046
-
/data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-walFilesize
32KB
MD5840d2207b2c39c83457c0ffe90baf6e5
SHA1505defdf3152f27a1091df3a3f59bfa7c62adada
SHA2565b5180f713ba2dc89ac7e760fc450e891a5b58b9be57700f517af4f8c4dead21
SHA5122f9aa2b3d975a592777c14844576055d13db65b51394844dcd50f6e1164b01b98f8e7adf02c2563f8cb90f8fc7ca502a67a7aa36f6ffc7e3a8089101baa7379b
-
/data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-walFilesize
8KB
MD5a7040a8adb0cccce68a285bc569943f0
SHA1423fcf115368b7a39da54002eed5de93f5ad3839
SHA256b66df04a4991785f42e847011d307c2e91df31dc9cbd2d2029d8d6fdec0d8ec2
SHA51276efc31b7e39a85a386eb542586d2385dcf437cd4ee166df5e607de4a172b72171ea23fa24850feda6e64d1e4d880b9b790a012cdf29ee29a2098cb2ccc612d1
-
/data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-walMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/evolver.parkash.bakery/no_backup/metrica_client_data.db-walFilesize
8KB
MD5e688c7518a2d38feb57db7364d1472ee
SHA18e1b8d231e44d55f37982163c086f39d65b5914c
SHA25623abe701aa41c49a62564e0a9532bf012773852cad8df56b768d4aeda9a7bf20
SHA512bb5b31e377809cece6ee58d23d8f39a617a10e1fdcec201af3762df5125c3b50b3b773a6035dbe5f07d70422ac8bb55ea2d2826db6efbb4c7a1dafabd4c4c062
-
/data/user/0/evolver.parkash.bakery/no_backup/metrica_data.dbFilesize
48KB
MD59ffc708d606c7a05169a1597626777b7
SHA1fad06bbc8ec863f2ed4c59810bc1d92721537865
SHA256861e83402cbf70a067935afecab434a4dd266c8198e1df9a9b695539832b7151
SHA51223ef5e68d50d7700c31934cb410850420cc4512e91bb606f5ce1e7a376b0994e74cc9b02f3016d387595b7d009ade61009ebd0b4bdc4cf99eb8fcf0554708a84
-
/data/user/0/evolver.parkash.bakery/no_backup/metrica_data.db-journalFilesize
524B
MD5504ada9347ee3c1ee5ac7a89b395c373
SHA1608ddc532ca20626d4fa31cf78b8cb9a18e34ebf
SHA25606b034e1ae18ca31ce4ca0731ffe0b4687122b42e28e54e05ff303a5769ff764
SHA512d197125f34eac095401b1b3e82c9d01e1d5eacc6123467db43d3ad60980e1a639dfad780e47672d08487c8b2cbb75c888cc8dfa527f0433380bca1967d1d45bd
-
/data/user/0/evolver.parkash.bakery/no_backup/metrica_data.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/evolver.parkash.bakery/no_backup/metrica_data.db-walFilesize
430KB
MD505dda0d61df043d108bb5286de13b837
SHA15f01240f5e86c4a6f1eb4839821295babbd67f05
SHA25639f3e6b4dbcbef9aad06782a42bed03591f0fbe71bb7fb8727c52f3e23069073
SHA512be0d4c37eaa13809501fc38807e8d18d23899c10a574461e56c040070f21b10ed3b9011abd4edb2ae9f14790ce54d44ae2e28e6aa4bb03e5a2ba7cc988428615
-
/data/user/0/evolver.parkash.bakery/shared_prefs/evolver.parkash.bakery_migrationpreferences.xmlFilesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
/data/user/0/evolver.parkash.bakery/shared_prefs/yteSlT7daYsGlbVGqXfR.xmlFilesize
2KB
MD552d32ab73bdba7357f1254573a6b3d27
SHA1c52e4da69a91713416928aa73adaa2df696c5660
SHA25612213fd0383bac08979c1a5e0da7c3da9c91031d52b00ab8f3309341ca04d5c0
SHA51217adbc01df5af8b676fa17e4acb5d2b269883453d5b8cada6f24cf629b0eace0a959836aaa0f382f8171ca25db0affc8f48f59bc140a38b93492fae3f59aa95d
-
/data/user/0/evolver.parkash.bakery/shared_prefs/yteSlT7daYsGlbVGqXfR.xmlFilesize
4KB
MD5c4f014ea16d04d377605a11508a83763
SHA11e4ab2975fc39e8666d72a0d172dec8874bad858
SHA25689182bccf074d316111480d15141220ef3c52840b7e16e694f3baa43d842ec53
SHA5127ee4f254239e42f1d6b260d60290c01614d777627e3fd04f0c17ef7005a2f4bfe25ee3ec2417fe0ded7ad1a2e3366f271158a853be164e05214bd9b8b9644708