Resubmissions

05-06-2022 13:13

220605-qf72haehfn 10

Analysis

  • max time kernel
    872587s
  • max time network
    170s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    05-06-2022 13:13

General

  • Target

    2f5c25a43b1069c08edb535113bbdd9d8e79fc9d632d7290e6b9dd8fac8af59b.apk

  • Size

    391KB

  • MD5

    ffbe1a324c29bdf8849de8833c301b2b

  • SHA1

    db6f7a06ef08644faacc1497b2eb3e45da514d98

  • SHA256

    2f5c25a43b1069c08edb535113bbdd9d8e79fc9d632d7290e6b9dd8fac8af59b

  • SHA512

    0c5b68953ed14febf109ea3a26f9375b2448e125b2d3b2146650c6b0d5a249df39ec269dc4fd77ad2c9778ace362062dd75d8c43dd42785e517b6fa07ea2ba86

Score
10/10

Malware Config

Signatures

  • Agent smith

    Agent smith is a modular adware that installs malicious ADs into legitimate applications.

  • Reads information about phone network operator.

Processes

  • com.apalon.weatherradar.fre
    1⤵
      PID:6186

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.apalon.weatherradar.fre/databases/ua.db
      Filesize

      104KB

      MD5

      9fc80363998b006e0cd23b932a3767de

      SHA1

      a042774dc0a970af8bbaac5deb753aa9f5752c5c

      SHA256

      fe578355161482f7a262d6b0a963c8f2ff7b3c79e5ffff9d23785c87b19f2987

      SHA512

      0352940515006256c6729861e6e6adc1a639d0d88242daa1639de80d5a23ff1d54c140775b58adbe292b515914edc1e51d13661475c58cef2a92861c8161511b

    • /data/data/com.apalon.weatherradar.fre/databases/ua.db-journal
      Filesize

      1KB

      MD5

      bdc2e550c3fcc43494793cd023dc1069

      SHA1

      39502040cede5edbb60e941364e311fb7039ce52

      SHA256

      a5ba6897de2c0e57d2034af713215b3147ba350a7b51ccce4b75bf6053c3770f

      SHA512

      62750401f38192a259e26e989563932330dc7f45354c25c09ac45df3e996d38a7c6dc41d0d9847099a7d55e38fc6cecff8935e6ebb423294b5db317ae9b00f6d

    • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
      Filesize

      145B

      MD5

      02a9bcced31f9532238f6fae44a7505a

      SHA1

      53fa2802207d46a3e15f67fee8163f84bef1dccd

      SHA256

      9c35ac69cb1a7677c90a8666951f237f835ba0bdc22b4105c9677857a6e11cea

      SHA512

      7ef4e99dd4743d8e0dd36f826997e4455fdb21acca0cf767710db790e481798c50dc313c63d55461c51d834a85c288d314e67c2a81ab6cb4b9427ac79630993a

    • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
      Filesize

      219B

      MD5

      8ea284efe4475e8ebb0ed6cd4adb82ee

      SHA1

      71188d427e71d4af455c188db8a3f959a5deb2df

      SHA256

      89bf5db384b88070bd26122eb43a7a3ab52054646b95cc382518c5915b4bc83b

      SHA512

      55b16d86f019a409c4544a0a963a2a0cef2613aad3dafe17f1ec29c683c6d9af24171347d8f3210aacdfab9b3e3cefacdad91d61f73e011bf61b495460e873bf

    • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
      Filesize

      492B

      MD5

      5ce1eaa3d5a780fb3778f79caef2a91e

      SHA1

      a37b42c77d02d612111eae97d210dbc8a963f47a

      SHA256

      bdd03e312857e859ebe3ee818492a781920a3bca909e6d065baeb868a6102e7a

      SHA512

      d8c50a1ae21db1984225d1709bbf7b5a5524448a919a171db5aa8b62f1618081336d928934b3dfb27e8a3a5b187d984785ee32dd737c0213c23905cf65797dcb

    • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
      Filesize

      568B

      MD5

      4581a28e6bd4cce8b0b90544e0cd8004

      SHA1

      b02eb0fe241836da6a59379ac278550201e81174

      SHA256

      1a5c004aa31b93bf4acf145b0a9639837f9800b8d5315bd5f00e563bca3f6f9e

      SHA512

      b6922c657c3ba2cb3575ecf200d611e67a0b8d66238bb40ff45c572ce93fd3c811402f4a545e635714fd1b162f67ded8486fef7e2c91c0108ab5fcab61afa086

    • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
      Filesize

      631B

      MD5

      eec933474810602d89254db65fa55b7c

      SHA1

      395ad647b74a54133e077565fe97d7f2c18199e7

      SHA256

      c49c3eaab052e1832f47b0185a207baa5bd6148d4422d601520389cbac11638d

      SHA512

      81602ae237a6b15db417dcf996d2c1d6e85e5a306260a9a5737d95df08a2772d3dbf4c909886748c142489e4d86c3afb41bf9877a3dcd02ee7030e3d8f60f77b

    • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
      Filesize

      265B

      MD5

      5b3e1e9b6e56ad70073144ce5b0ced76

      SHA1

      c84bc296f7c7d61e67ae1ad66b3e119542e8e032

      SHA256

      787757bbcded80dfb0c9db58cde554bb2622bc729e4070e1f2966428ae61d0f4

      SHA512

      51bec47f840978fd1eb2ac367264facb0be0a655fa9ec2d5ed72a9809af0c50a472add8f5539a060b19aacafc22779c5691215a740098a6a1380271322b3cbe9

    • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
      Filesize

      329B

      MD5

      377d0f665b2e717cf7bec9c60968d16f

      SHA1

      96c7960617bbde081e59277f375470ad5439ba49

      SHA256

      4cb25a7fba5801589d2f6bd2a651c29f16ce0a24665a30bd88290e4abbfd5379

      SHA512

      8dde7bc41d9e4f4a885ddad3dd5235fbfb4be9ba065a2aa93b1185ec8464a59c6c2e93556ae098f6b0632a50db8a2740eb1f942dfa3346fb0f3a3c54ffc5dae3

    • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/spread_shared.xml
      Filesize

      413B

      MD5

      ec5d31e951371aaf0bfa627f667c5470

      SHA1

      b0661dad472b8471a191c4076c98d6d1b49b75d6

      SHA256

      b15f14b961821d4d7aa01c2e7dd7a496abec14bd9117020d17a7e89daf2919d8

      SHA512

      d5dc4aacd585369477ccc9515c54a6e6f2c466ab84f8a88058eeac4ec59c8bc0c6945655d722f31cf5464a931bf6a0424ec5eee65fe54ad8085aa41c92bc51c1

    • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/umeng_common_config.xml
      Filesize

      169B

      MD5

      445d08ef1896a8cdb8c8696706c1e354

      SHA1

      fe922553afefb2e89f843d587037eac79251fd04

      SHA256

      b44a17d59204f85eee974580d6d626d136bda3a256117f6aba0d658c304be51d

      SHA512

      5ac32eec8b05efe27be08659669e614952acda49dc37e4a4fb03236c066160864608aca3548631e2c133f0984fee3f72b8d09caf27fc63ba3cdd6f8aac80270e

    • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/umeng_common_config.xml
      Filesize

      229B

      MD5

      51ce9f3c388180dfb75c17acdde1136c

      SHA1

      4e5ab9448796449ef99894aa7eb9c535e1ff0e40

      SHA256

      c8a7d59c2e84a081924281dfc691e43969f13b5608c31d2867ef175de32af7ef

      SHA512

      9df05c2b6ec21543c8323d5731beea8f4b1a20b8d08eb79a91e2a06d0fb736c9e80fb9fd403122b1fad6fdf38515c137551f1a36710d9f407bba53873d2d0d6e

    • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/umeng_common_config.xml
      Filesize

      294B

      MD5

      6f9a88acfa283fa760e9521f1cbb35df

      SHA1

      f9038e976c0de0a9c167a20f583e4b0f2915d2c9

      SHA256

      82083111bf68dcf7d93791021cfe643c0f58093671b37ecad321c598e2593803

      SHA512

      aec41a64413e9ae52cfeb2b0cc1e0a2071f3232900a3a9476780b8fe98bf59a0211071030191c76563b41ca8cf15b34f43c1e9b54545a0e58df97b3dc9c56149

    • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/umeng_general_config.xml
      Filesize

      223B

      MD5

      891383fe514ddf274309e04db51db81a

      SHA1

      1c219f518a210b47fc3274fd511c10179e77e166

      SHA256

      fd62d80ce12203fcc38963aa8be0f6635b24cf24190aea1e1334db9f112af5b2

      SHA512

      dc1a0402ca884c415f52f1097c1b3944e5ea930ab45c8b286a2110f2103bf1b37a393832e40759bc6c058768724b00d014869c9a5b0169a4cd3229e791ee650f

    • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/umeng_general_config.xml
      Filesize

      102B

      MD5

      64e0aa25c24ddde3818479bfb53d4a90

      SHA1

      fc53938ebd1feb0a51e83699d75c3f771f703d09

      SHA256

      d5bba73256a5443c04a97e4bdf7aefc134a109c5bf2a0453c05e8a68213da999

      SHA512

      e52295f359e0286ce4beb19e2ffbe239ac3292cd0c8aaa2f23572a2680065be4998e5a1094bdec79df26a6a68e41434185255c59f1b0aa03ac242d1d89a4118e

    • /data/user/0/com.apalon.weatherradar.fre/shared_prefs/umeng_general_config.xml
      Filesize

      154B

      MD5

      182582010add0680f6cf721bf28a84cf

      SHA1

      c727f858a4e6e45a30815c7beb3dae6bc4b9dd76

      SHA256

      5ba1a5a02e612037daac6ef63ed2f56f49a91714f44e17baef5616a18d8f29f0

      SHA512

      ee1efb68588469ddef92d7d40fc22caedc03d3cd262d74efe38554bdb78e11553f6116a41d39f3574371cdcbcc1c353354b7b217eb2ee7c82349d47c0cb4c626