Analysis

  • max time kernel
    688093s
  • max time network
    156s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    03-06-2022 07:55

General

  • Target

    2f5c25a43b1069c08edb535113bbdd9d8e79fc9d632d7290e6b9dd8fac8af59b.apk

  • Size

    391KB

  • MD5

    ffbe1a324c29bdf8849de8833c301b2b

  • SHA1

    db6f7a06ef08644faacc1497b2eb3e45da514d98

  • SHA256

    2f5c25a43b1069c08edb535113bbdd9d8e79fc9d632d7290e6b9dd8fac8af59b

  • SHA512

    0c5b68953ed14febf109ea3a26f9375b2448e125b2d3b2146650c6b0d5a249df39ec269dc4fd77ad2c9778ace362062dd75d8c43dd42785e517b6fa07ea2ba86

Score
10/10

Malware Config

Signatures

  • Agent smith

    Agent smith is a modular adware that installs malicious ADs into legitimate applications.

  • Reads information about phone network operator.

Processes

  • com.apalon.weatherradar.fre
    1⤵
      PID:5285
      • /system/bin/cat /proc/version
        2⤵
          PID:5381

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/data/com.apalon.weatherradar.fre/databases/ua.db
        Filesize

        40KB

        MD5

        0adf12ae98c58cd3372aab47cee555cb

        SHA1

        8fa3c1280c77933aa9752ebebf386e973d9732d8

        SHA256

        7f1954dbad6f73ceca29af126f914c04fb50d5098354c741fd712d4bcaea2a48

        SHA512

        10f52e64fe94bfe551c850f2cad734d7bd35cfb89d7419dfc5f60016d19a19e16ac03b342b0632b8b71197926fa3fe888c8207a76648c14a0a421f51c84f9504

      • /data/data/com.apalon.weatherradar.fre/databases/ua.db-journal
        Filesize

        524B

        MD5

        577d0e8a65464145e2035d773d015983

        SHA1

        12345313dcb303b4edd5efbeb536a618d5a5a518

        SHA256

        9dabbc4bcc2c4d1b2e72c1a81f2b56c1aa44115f65973e9b8aa3d68caf1145ce

        SHA512

        acc7dfa41d65b36977144afd5056ee019182b40de5e4a5c043e14c69269c44e0da183dad0916bb66330f31c2c1a9154c434808109517642b8fc339cb5b40a733

      • /data/data/com.apalon.weatherradar.fre/databases/ua.db-shm
        Filesize

        8B

        MD5

        7dea362b3fac8e00956a4952a3d4f474

        SHA1

        05fe405753166f125559e7c9ac558654f107c7e9

        SHA256

        af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

        SHA512

        1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

      • /data/data/com.apalon.weatherradar.fre/databases/ua.db-shm
        Filesize

        8B

        MD5

        7dea362b3fac8e00956a4952a3d4f474

        SHA1

        05fe405753166f125559e7c9ac558654f107c7e9

        SHA256

        af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

        SHA512

        1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

      • /data/data/com.apalon.weatherradar.fre/databases/ua.db-shm
        Filesize

        8B

        MD5

        7dea362b3fac8e00956a4952a3d4f474

        SHA1

        05fe405753166f125559e7c9ac558654f107c7e9

        SHA256

        af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

        SHA512

        1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

      • /data/data/com.apalon.weatherradar.fre/databases/ua.db-shm
        Filesize

        8B

        MD5

        7dea362b3fac8e00956a4952a3d4f474

        SHA1

        05fe405753166f125559e7c9ac558654f107c7e9

        SHA256

        af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

        SHA512

        1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

      • /data/data/com.apalon.weatherradar.fre/databases/ua.db-wal
        Filesize

        48KB

        MD5

        03b2f2d17ce3936920b898f9a964247b

        SHA1

        79a614b436ebab86e8003ff77c9f6a0c336c9896

        SHA256

        a7b0679982954a34bcaf4967d0849901afc91d42579f6dc894a83328f6d617c8

        SHA512

        1ed4e508abc5c17233000c4c3f6e1945a1c8425ae625098ba48211c7e8c0cf0f356003d11ecf3e6ef29af81828c1189ee2680ce16043d28bfc762cb03799298c

      • /data/data/com.apalon.weatherradar.fre/databases/ua.db-wal
        Filesize

        12KB

        MD5

        d5bd58b32ebb5cc640fa693ffbd40516

        SHA1

        c1a04ea5af0c4d5f27cc1dfd5ee55598cf356bfb

        SHA256

        3877e9b1a714426e90b9cda5b34b99caf0f1ba579839cfa5b7c7bb19d351c6cb

        SHA512

        6c0c54b55900ba40be9b838ffdb4c4a7f8b6fc29aef751d14d3b196327bab62a6f71dba5769ca068bf6b2bf39297c3f80db0a4786e56727313015bb9ed9b377b

      • /data/data/com.apalon.weatherradar.fre/databases/ua.db-wal
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/data/com.apalon.weatherradar.fre/databases/ua.db-wal
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.apalon.weatherradar.fre/cache/leech_cache/8107215
        Filesize

        13B

        MD5

        92f07669852a46f09af82fb1bcba10fc

        SHA1

        ffdbf0f1d5829f70176582ed50be5c9bdedaefb0

        SHA256

        666c940d88c097fad39e7c2866a0eeb214829ab76bf0f9a7374c37fd0311b465

        SHA512

        dd01c400d8808eddeb394f23ac529754dbae2f380f875dd95061038925127629af93e185f627152ffc1e331359f08c9f0c0698bf8a12f4c90b1e42c5abbca081

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
        Filesize

        145B

        MD5

        2b7819c0fca871aff1d2e9d91130812f

        SHA1

        f618fb8c51d2057108569a8fc4dcf1142ee9fcf6

        SHA256

        20f658b654683361cc111cdf9db487005be7279eeafef142ddb31ec36da96f72

        SHA512

        2b3aa299cab7d655d0fc2742a05f3c3fb60c3867c12081a07f9143b729dced719653713ed8ce66ab2155d8ae039a1e5364bbb13f80503b89799eaf3c4ab1ef1d

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
        Filesize

        219B

        MD5

        7510dd60d2b83a84d20e925f072e7e29

        SHA1

        abffcb632232de696c1bd39ed6804baa00ba9e31

        SHA256

        e8e10bda607d8c8c7f96bf6d8cb493f364dc9017d1b886408dc7cd59181da42a

        SHA512

        75132e18dcce45dda46a5753c90b01ec83c531b5f78b9206e3079fa4bf8e1133942b1959830a98efddf0a35ff04624af042b8b4464a064cf8d15fa5c1603e736

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
        Filesize

        492B

        MD5

        b4958e4a278025db721a751cc7b00c41

        SHA1

        32b50a8e81f02db8ec1cc815565de491b0be0132

        SHA256

        f18be5bf874b83291004719e3489c733a28b648ff2ab19565446e88a2e004af1

        SHA512

        5681c4d252b73ff500a750f2ed83f7b907cc9bb67c24067650c0dc8de51dceaf8e390973a8357f97a931c24ed04d27ecfee4c3bf7bdc6d828f709eff368d754f

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
        Filesize

        568B

        MD5

        34d119ae123eff7178d164d00645b719

        SHA1

        9548a6b280904285fc155c02e53105b1f516b842

        SHA256

        4ba4e32bc1eeecc2bb1ca52655b9e6bbf1e65f86cae910dc108b82e298f23a57

        SHA512

        1a8195a3041e204262957e96c8fa99a91297d3915cf7f1b6647a1378b9435de4ee9b0f5ba772343f81236618590ac359e8519f928e340ab18d0e873c3034faed

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
        Filesize

        265B

        MD5

        b6e08394f7e20409dbc2da11e93c5c48

        SHA1

        0d3fedd3ac3fbfbf01675ba066898aa83cec04d0

        SHA256

        2a28e37b932ff5b188d733565e0392d4517e11503f91447068b7b6f08af5f11e

        SHA512

        216414afe7cf81e22572f2987b4043d2ef5156d3c6535d81c1413d66e946fb4cd97efb34c1ad9d4d88d6d625a0228b30fbce65e77e69923131b6ddfd5874945b

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
        Filesize

        631B

        MD5

        8a1958d4d6b13c3d14c8b31683766300

        SHA1

        1b2fc1d19fab094ac08b9b9e73df3cdc9341c6b7

        SHA256

        2568d11bbbe93ef2903976ecb23ae4b678814eb40e9b5fd278bc4e6434399fe6

        SHA512

        7775a9fce757b28d9f7ae13346cfd10b456ff6e15f7c906b3cb59e4cee56c8c48870a9ab1a7c90d8694579e171b41a5516ad7f615140469d9cfee54b3290a6a9

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
        Filesize

        701B

        MD5

        98b8931b3982013db1a3c0af3bb9c83d

        SHA1

        0b6a5733a6a67bd22fa5257445f5ba9caf011381

        SHA256

        d711549e58d49c441520c618d69f962fe6a3802d8e893514f56b19a19e80e057

        SHA512

        5bc9fb438ce22b9288a43d5356284f915f4ad44733e602d9d7f102ac47360c49bc2e5c36943f32464e8e437fa9f95a01b666b766c4e0669a97ef702cab173103

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
        Filesize

        329B

        MD5

        ae336a539af3dc7e3782a7c9751ad87c

        SHA1

        f028e5b845d56466084b18bc80c96877e499c527

        SHA256

        57d8d4f51bc19d9a18f460add780906fcece544709b31830ca5406df18d3efdb

        SHA512

        8ec2eaa5e92244eb88ac96227ce079763382deb39f6eefa2ee6554c5612e4a9b938be63670f2a5081b1381378b5e156cb19fa4a9bf62007e00624fa768fff39d

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
        Filesize

        413B

        MD5

        5eb807f7ba07e90ca310ba50863427d8

        SHA1

        40757f73bee5faaf2b4fc1388ea26f4150b98b71

        SHA256

        430d772814e27bf9b524196c287731f5e82376dbddd5e792d4eb39cea7ec903a

        SHA512

        5a43392f401d370cd1b76fd5c1d9a3415e888cd4ea0886e1fbed1e5303a141bb5c7d2d0d8ca79f525c127d09a569333cf00e8de29cef5dbf08b34bc7cf0e784f

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/umeng_common_config.xml
        Filesize

        169B

        MD5

        445d08ef1896a8cdb8c8696706c1e354

        SHA1

        fe922553afefb2e89f843d587037eac79251fd04

        SHA256

        b44a17d59204f85eee974580d6d626d136bda3a256117f6aba0d658c304be51d

        SHA512

        5ac32eec8b05efe27be08659669e614952acda49dc37e4a4fb03236c066160864608aca3548631e2c133f0984fee3f72b8d09caf27fc63ba3cdd6f8aac80270e

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/umeng_common_config.xml
        Filesize

        229B

        MD5

        51ce9f3c388180dfb75c17acdde1136c

        SHA1

        4e5ab9448796449ef99894aa7eb9c535e1ff0e40

        SHA256

        c8a7d59c2e84a081924281dfc691e43969f13b5608c31d2867ef175de32af7ef

        SHA512

        9df05c2b6ec21543c8323d5731beea8f4b1a20b8d08eb79a91e2a06d0fb736c9e80fb9fd403122b1fad6fdf38515c137551f1a36710d9f407bba53873d2d0d6e

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/umeng_common_config.xml
        Filesize

        294B

        MD5

        6f9a88acfa283fa760e9521f1cbb35df

        SHA1

        f9038e976c0de0a9c167a20f583e4b0f2915d2c9

        SHA256

        82083111bf68dcf7d93791021cfe643c0f58093671b37ecad321c598e2593803

        SHA512

        aec41a64413e9ae52cfeb2b0cc1e0a2071f3232900a3a9476780b8fe98bf59a0211071030191c76563b41ca8cf15b34f43c1e9b54545a0e58df97b3dc9c56149

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/umeng_general_config.xml
        Filesize

        102B

        MD5

        64e0aa25c24ddde3818479bfb53d4a90

        SHA1

        fc53938ebd1feb0a51e83699d75c3f771f703d09

        SHA256

        d5bba73256a5443c04a97e4bdf7aefc134a109c5bf2a0453c05e8a68213da999

        SHA512

        e52295f359e0286ce4beb19e2ffbe239ac3292cd0c8aaa2f23572a2680065be4998e5a1094bdec79df26a6a68e41434185255c59f1b0aa03ac242d1d89a4118e

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/umeng_general_config.xml
        Filesize

        153B

        MD5

        23ff00d4b2f0bfffd64cf80cd3dba79a

        SHA1

        165c6d3a0b9a5c477e91bdfea463ff9b4ad29dbd

        SHA256

        e0ca6f23cb11d666d6f16659490495b6e426b940e7f4981ca76a726ec3b25783

        SHA512

        0e89f42f2531f7077d05564a6aa1bdf486412499c14d4a8cddde63180c98a0b36613c4e3b06d6f5fc4a0d9e9484474af94d7589ae5a2d9ff3f8440fdcbdde4d1