Analysis

  • max time kernel
    3305676s
  • max time network
    133s
  • platform
    android_x64
  • resource
    android-x64-20220621-en
  • submitted
    03-07-2022 16:51

General

  • Target

    3b53816a4dc796328c7992a68f6f31ef0a04343a074fbdac12a8f5567fa67c78.apk

  • Size

    4.1MB

  • MD5

    b498bb5730dc90fd1095644ab59c8ecd

  • SHA1

    6a153af8bbd4b6c591a37c7699b0a4e7cefb9f82

  • SHA256

    3b53816a4dc796328c7992a68f6f31ef0a04343a074fbdac12a8f5567fa67c78

  • SHA512

    f90e729f24df3d70e9091a9bb8435b2f4bb1efae45972194b9529b1f31f3449a7508b13caa49712a2d5ef1e7a49d243225141aa0068756a7bded4258cae2f780

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • thirteen.anakin.skywalk
    1⤵
      PID:5793

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/thirteen.anakin.skywalk/databases/com.google.android.datatransport.events
      Filesize

      112KB

      MD5

      c00e56432fec53a3af4cb74375486250

      SHA1

      0c0836763aa016d67ceaab90f46ae1f039ff5754

      SHA256

      511fd696d23abfeee7a721f47ca97e7f429104b1c04b5a7cee39e56ba2dca2df

      SHA512

      538dfc872ee37da8257cf7da239e47031069bd7292e2e8e5aaf77d4ea61e2fd25f45bd0d89a3bae191e0624b440e37168645376bf3c5886fdab91928d2c08fda

    • /data/user/0/thirteen.anakin.skywalk/databases/com.google.android.datatransport.events-journal
      Filesize

      1KB

      MD5

      1b9ef9605ea46c7d9a96cc54d1f8d33a

      SHA1

      98fd13e69858f8c8465235cb6cfabc1f14159eb5

      SHA256

      ffb4dc9e5660ae21ef6be3d107d64267d4d32f6b4d7bedc9f6935f18261104a6

      SHA512

      3340e46be0ed72b94d9ec46e529630d093b9e5f0da45660c6af6178b06c7e996db5c37ffed1e8d2482f291e59d6014b26bbbe7ca1e8044f2eea879303063cd98

    • /data/user/0/thirteen.anakin.skywalk/databases/google_app_measurement_local.db
      Filesize

      88KB

      MD5

      7bd7e08b7c157fb7a04f9701b6965b65

      SHA1

      19ed78cffffd879509071b091ba60776c18e8d97

      SHA256

      c3aa0e8a52b6dcae0f988502bb3887f94c13148a8f36c3fcf5036c7c99afbdbc

      SHA512

      a668c141cd4d48396e9d67e79ec1036a8ad4498293e0f16d108e8c4d842f76714f561bbe440a3a5dbcfb6b7ade257ffed7fa07c56566c8ea938589c61943d4cb

    • /data/user/0/thirteen.anakin.skywalk/databases/google_app_measurement_local.db-journal
      Filesize

      1KB

      MD5

      11e6d87141decf9b9d59a034e375a829

      SHA1

      4efb8d01d2b44b27e9b2e093edf6aa31b17ef1be

      SHA256

      4100cec22d54a04659b61676414baf069b67060f47c50d9879fc2d05fff839dc

      SHA512

      c4588153d10b1defa191e563badbbd3e732f645701d3a3a60a3cfe0e660836dd0db9c001a92dca1fe3ba09a7ccdbe74ba4a00b64d024d802e12795128ee77fe7

    • /data/user/0/thirteen.anakin.skywalk/files/PersistedInstallation1300332570097183903tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/thirteen.anakin.skywalk/files/PersistedInstallation4237983738403382455tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/thirteen.anakin.skywalk/files/generatefid.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/thirteen.anakin.skywalk/no_backup/com.google.android.gms.appid-no-backup
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/thirteen.anakin.skywalk/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03