Resubmissions

05-06-2022 13:13

220605-qf72haehfn 10

Analysis

  • max time kernel
    876780s
  • max time network
    152s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    05-06-2022 13:13

General

  • Target

    2f5c25a43b1069c08edb535113bbdd9d8e79fc9d632d7290e6b9dd8fac8af59b.apk

  • Size

    391KB

  • MD5

    ffbe1a324c29bdf8849de8833c301b2b

  • SHA1

    db6f7a06ef08644faacc1497b2eb3e45da514d98

  • SHA256

    2f5c25a43b1069c08edb535113bbdd9d8e79fc9d632d7290e6b9dd8fac8af59b

  • SHA512

    0c5b68953ed14febf109ea3a26f9375b2448e125b2d3b2146650c6b0d5a249df39ec269dc4fd77ad2c9778ace362062dd75d8c43dd42785e517b6fa07ea2ba86

Score
10/10

Malware Config

Signatures

  • Agent smith

    Agent smith is a modular adware that installs malicious ADs into legitimate applications.

  • Reads information about phone network operator.

Processes

  • com.apalon.weatherradar.fre
    1⤵
      PID:5018
      • /system/bin/cat /proc/version
        2⤵
          PID:5134

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/data/com.apalon.weatherradar.fre/databases/ua.db
        Filesize

        40KB

        MD5

        0adf12ae98c58cd3372aab47cee555cb

        SHA1

        8fa3c1280c77933aa9752ebebf386e973d9732d8

        SHA256

        7f1954dbad6f73ceca29af126f914c04fb50d5098354c741fd712d4bcaea2a48

        SHA512

        10f52e64fe94bfe551c850f2cad734d7bd35cfb89d7419dfc5f60016d19a19e16ac03b342b0632b8b71197926fa3fe888c8207a76648c14a0a421f51c84f9504

      • /data/data/com.apalon.weatherradar.fre/databases/ua.db-journal
        Filesize

        524B

        MD5

        40e1feddce240e1d45d40b97667e89e9

        SHA1

        8c437f3cab46d8b9138ee15aa4ace65ea6f67ba7

        SHA256

        f6ca1c293b3c3643d276589e4b263048ab48ff115bdc2322b1b131193fb33f79

        SHA512

        5cab6a48c98d13ea576d33334d2de07770800a20d2111c323df346bb9fa80ba5d1c6953553b67d92c7b764a4b633b018fbcb27874d31f6c2db1e9a782979aec0

      • /data/data/com.apalon.weatherradar.fre/databases/ua.db-shm
        Filesize

        8B

        MD5

        7dea362b3fac8e00956a4952a3d4f474

        SHA1

        05fe405753166f125559e7c9ac558654f107c7e9

        SHA256

        af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

        SHA512

        1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

      • /data/data/com.apalon.weatherradar.fre/databases/ua.db-shm
        Filesize

        8B

        MD5

        7dea362b3fac8e00956a4952a3d4f474

        SHA1

        05fe405753166f125559e7c9ac558654f107c7e9

        SHA256

        af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

        SHA512

        1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

      • /data/data/com.apalon.weatherradar.fre/databases/ua.db-shm
        Filesize

        8B

        MD5

        7dea362b3fac8e00956a4952a3d4f474

        SHA1

        05fe405753166f125559e7c9ac558654f107c7e9

        SHA256

        af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

        SHA512

        1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

      • /data/data/com.apalon.weatherradar.fre/databases/ua.db-shm
        Filesize

        8B

        MD5

        7dea362b3fac8e00956a4952a3d4f474

        SHA1

        05fe405753166f125559e7c9ac558654f107c7e9

        SHA256

        af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

        SHA512

        1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

      • /data/data/com.apalon.weatherradar.fre/databases/ua.db-shm
        Filesize

        8B

        MD5

        7dea362b3fac8e00956a4952a3d4f474

        SHA1

        05fe405753166f125559e7c9ac558654f107c7e9

        SHA256

        af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

        SHA512

        1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

      • /data/data/com.apalon.weatherradar.fre/databases/ua.db-wal
        Filesize

        48KB

        MD5

        6eacae6f709d1bd5977cf6886ee42104

        SHA1

        c55784eb983d96259baba22fdb42bda25ed39ad4

        SHA256

        04f7bba6590ce72e37c77661aea1345aae0f3fc5f2fd22bfdc400e7d5462f802

        SHA512

        f77c2d1b0fe4ddbea77988446c675a3995349af4361184136684ce9f0b4d8b9f85982b0eb36f0381720b1699079abc1df4f93a02238bed4f598feaec39cedc27

      • /data/data/com.apalon.weatherradar.fre/databases/ua.db-wal
        Filesize

        12KB

        MD5

        3b5a77fe44e848e4dd535e28dc95febd

        SHA1

        cc660b2fe38914b9d5391f1a4c239e923fc29202

        SHA256

        162ef472a43d0961f7b397abc052f4dbf3c1d59dc872ca5520cfa4d9591b2918

        SHA512

        2d724f8a705c6b8d134d5ffca5cf2f50ff79761dc274bedf6f688819271a582793ae06394d26e63a6030a7892b96123fa172e4a99e10a2e81b5b38b4b5e8a4de

      • /data/data/com.apalon.weatherradar.fre/databases/ua.db-wal
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/data/com.apalon.weatherradar.fre/databases/ua.db-wal
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/data/com.apalon.weatherradar.fre/databases/ua.db-wal
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
        Filesize

        145B

        MD5

        2b7819c0fca871aff1d2e9d91130812f

        SHA1

        f618fb8c51d2057108569a8fc4dcf1142ee9fcf6

        SHA256

        20f658b654683361cc111cdf9db487005be7279eeafef142ddb31ec36da96f72

        SHA512

        2b3aa299cab7d655d0fc2742a05f3c3fb60c3867c12081a07f9143b729dced719653713ed8ce66ab2155d8ae039a1e5364bbb13f80503b89799eaf3c4ab1ef1d

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
        Filesize

        219B

        MD5

        7510dd60d2b83a84d20e925f072e7e29

        SHA1

        abffcb632232de696c1bd39ed6804baa00ba9e31

        SHA256

        e8e10bda607d8c8c7f96bf6d8cb493f364dc9017d1b886408dc7cd59181da42a

        SHA512

        75132e18dcce45dda46a5753c90b01ec83c531b5f78b9206e3079fa4bf8e1133942b1959830a98efddf0a35ff04624af042b8b4464a064cf8d15fa5c1603e736

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
        Filesize

        492B

        MD5

        377a32b6e8dd39672101633fbf6d39fb

        SHA1

        41eb73e12dedbd68e96a4b9a536eb1f5e9e1a266

        SHA256

        ca1cdac9f7abc2728a7e1c4e7c23523ee28a9007de677844f214ad39189f3004

        SHA512

        8c2768c2d6f6746bea47dc4bd03e2fc9d38747f19c688f8c476be7b353e54064e95528efefae6b9347aaff4c4b840f3333fd810ed4946791a643081572ecf3fc

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
        Filesize

        265B

        MD5

        b6e08394f7e20409dbc2da11e93c5c48

        SHA1

        0d3fedd3ac3fbfbf01675ba066898aa83cec04d0

        SHA256

        2a28e37b932ff5b188d733565e0392d4517e11503f91447068b7b6f08af5f11e

        SHA512

        216414afe7cf81e22572f2987b4043d2ef5156d3c6535d81c1413d66e946fb4cd97efb34c1ad9d4d88d6d625a0228b30fbce65e77e69923131b6ddfd5874945b

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
        Filesize

        568B

        MD5

        21b350e1b596c56372e46950e5ce9e43

        SHA1

        bed063721f1e10d77eb9863a7d867cb502d3cbbf

        SHA256

        f81459c424b2055279426d9fa741d0197b35965a64de5e30f1fbb83625894d91

        SHA512

        e0ece103af1d9dc4cd6817f4b699a063e1cbf1bb28c3f7955478f46935d7e07606255c58a1020fd4801f8175822238cf4512ad6b492358c97161bcb9e08441ef

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
        Filesize

        631B

        MD5

        5814e320b0e181b109be759b2fc2c376

        SHA1

        be4e12a5a5dfc2c0da535cd9da14a893a1c328c0

        SHA256

        5a583db8c134cbe21ce88fda2c6b4efb9c1cb9f4e0255e2b437a42afd6ec85d7

        SHA512

        139d72c209f04f1829d695e6a5e07587c7a7091a9728b058b385f8da83208a49bc0b97cf7ff7ca38954685d83729847c8e5205e77d32b949208fc9c38c6edbf0

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
        Filesize

        701B

        MD5

        2b8fa01b944ef6fe52cd7f5b21e761c4

        SHA1

        3e539b89a46b5458456cb3afe6a632ab5e4bffd6

        SHA256

        1c632c83529f1e7cef5d648ceda84c864b4a53eb2cec482c829ec0dbe0bfd0df

        SHA512

        1e9144b13b492c39c1fc848f0cfa12f8a3e577396ae02095eef315160ee33b2eb1043fbf128d1b82c6a977026b97c29ff3db94fe4fbc9676d3dd12f415d60d74

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
        Filesize

        329B

        MD5

        ae336a539af3dc7e3782a7c9751ad87c

        SHA1

        f028e5b845d56466084b18bc80c96877e499c527

        SHA256

        57d8d4f51bc19d9a18f460add780906fcece544709b31830ca5406df18d3efdb

        SHA512

        8ec2eaa5e92244eb88ac96227ce079763382deb39f6eefa2ee6554c5612e4a9b938be63670f2a5081b1381378b5e156cb19fa4a9bf62007e00624fa768fff39d

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
        Filesize

        413B

        MD5

        5eb807f7ba07e90ca310ba50863427d8

        SHA1

        40757f73bee5faaf2b4fc1388ea26f4150b98b71

        SHA256

        430d772814e27bf9b524196c287731f5e82376dbddd5e792d4eb39cea7ec903a

        SHA512

        5a43392f401d370cd1b76fd5c1d9a3415e888cd4ea0886e1fbed1e5303a141bb5c7d2d0d8ca79f525c127d09a569333cf00e8de29cef5dbf08b34bc7cf0e784f

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/umeng_common_config.xml
        Filesize

        169B

        MD5

        445d08ef1896a8cdb8c8696706c1e354

        SHA1

        fe922553afefb2e89f843d587037eac79251fd04

        SHA256

        b44a17d59204f85eee974580d6d626d136bda3a256117f6aba0d658c304be51d

        SHA512

        5ac32eec8b05efe27be08659669e614952acda49dc37e4a4fb03236c066160864608aca3548631e2c133f0984fee3f72b8d09caf27fc63ba3cdd6f8aac80270e

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/umeng_common_config.xml
        Filesize

        229B

        MD5

        51ce9f3c388180dfb75c17acdde1136c

        SHA1

        4e5ab9448796449ef99894aa7eb9c535e1ff0e40

        SHA256

        c8a7d59c2e84a081924281dfc691e43969f13b5608c31d2867ef175de32af7ef

        SHA512

        9df05c2b6ec21543c8323d5731beea8f4b1a20b8d08eb79a91e2a06d0fb736c9e80fb9fd403122b1fad6fdf38515c137551f1a36710d9f407bba53873d2d0d6e

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/umeng_common_config.xml
        Filesize

        294B

        MD5

        6f9a88acfa283fa760e9521f1cbb35df

        SHA1

        f9038e976c0de0a9c167a20f583e4b0f2915d2c9

        SHA256

        82083111bf68dcf7d93791021cfe643c0f58093671b37ecad321c598e2593803

        SHA512

        aec41a64413e9ae52cfeb2b0cc1e0a2071f3232900a3a9476780b8fe98bf59a0211071030191c76563b41ca8cf15b34f43c1e9b54545a0e58df97b3dc9c56149

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/umeng_general_config.xml
        Filesize

        222B

        MD5

        58487ff1ae93b10cf8d6a4537b3ed759

        SHA1

        aaa2f9ba79183eb9919e5455044d7d2bcacf4279

        SHA256

        c518c931b00fe242c84c0393043f11bc41a486196d51fda90ad6d0f6e5696f16

        SHA512

        27cdddbb6e0efb8a50ded07a6c4a2524a4809a8d150c1fb84ef978b24c37540d7102414c744f5b62a26952995348487e019e0f242156b8d31befdc6f1459df76

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/umeng_general_config.xml
        Filesize

        102B

        MD5

        64e0aa25c24ddde3818479bfb53d4a90

        SHA1

        fc53938ebd1feb0a51e83699d75c3f771f703d09

        SHA256

        d5bba73256a5443c04a97e4bdf7aefc134a109c5bf2a0453c05e8a68213da999

        SHA512

        e52295f359e0286ce4beb19e2ffbe239ac3292cd0c8aaa2f23572a2680065be4998e5a1094bdec79df26a6a68e41434185255c59f1b0aa03ac242d1d89a4118e

      • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/umeng_general_config.xml
        Filesize

        153B

        MD5

        23ff00d4b2f0bfffd64cf80cd3dba79a

        SHA1

        165c6d3a0b9a5c477e91bdfea463ff9b4ad29dbd

        SHA256

        e0ca6f23cb11d666d6f16659490495b6e426b940e7f4981ca76a726ec3b25783

        SHA512

        0e89f42f2531f7077d05564a6aa1bdf486412499c14d4a8cddde63180c98a0b36613c4e3b06d6f5fc4a0d9e9484474af94d7589ae5a2d9ff3f8440fdcbdde4d1