Analysis

  • max time kernel
    3614845s
  • max time network
    141s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • submitted
    26-08-2022 00:01

General

  • Target

    base.apk

  • Size

    2.1MB

  • MD5

    8154f54eb4cce05baa62f1ef0de40896

  • SHA1

    daf0ba270ba309a5ff10f5269fdff4c04ee6e991

  • SHA256

    ce65b19dcb699a37406379a9cd5f66b833028d4aad8aca39013e6b973b8e2c2a

  • SHA512

    b9fa035326cdf5debc1a3e7f77ddd2b26e6c249c628a7421540f1ac0090863867202172d80e283424173035ce892f448ecdda6286eee866e21bd5847412273ca

  • SSDEEP

    49152:4eA2wsUBStlNiA3UKTo/ruxnXOI4pI3/5HQo1c4Su/6:iFBSxNECo/ruxXOI4pcRbnF/6

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • www.iiooii.ww
    1⤵
    • Acquires the wake lock.
    PID:4636
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4695

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/www.iiooii.ww/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/www.iiooii.ww/databases/google_app_measurement_local.db

      Filesize

      88KB

      MD5

      8dfcfdcef5a9793fb83bda404ec3f42b

      SHA1

      dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

      SHA256

      a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

      SHA512

      e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

    • /data/user/0/www.iiooii.ww/databases/google_app_measurement_local.db-journal

      Filesize

      1KB

      MD5

      e6d8f1b6f1e279212f6d85ff91f454a5

      SHA1

      d0cd4bfb85db5a5596734c77850d63f95d1e5970

      SHA256

      9fbfcf7a230658be88ebbd5b4796a3989744205ea2df4c6715c05a36a0c1f341

      SHA512

      4ecf771fbd95f581c1f81729c946572b2b26786100e9689ada1386ccaf0e9fbb3eb36c98bd4be0ba5dee5eddd128e1c1d3539a5d0bd33b46b0cda89cc4edba47

    • /data/user/0/www.iiooii.ww/files/PersistedInstallation268804004671097574tmp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/www.iiooii.ww/files/PersistedInstallation4694111780242131281tmp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/www.iiooii.ww/files/generatefid.lock

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/www.iiooii.ww/no_backup/com.google.android.gms.appid-no-backup

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/www.iiooii.ww/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      239B

      MD5

      dc00b68753011f57d4b59a0b2f1513d3

      SHA1

      1ba54344860a313dfa44d6311b776acf39d475c0

      SHA256

      f1cf837cf27ded14f58867c51af7bfb9e0fc0cfe31c22b8354d81a82c7aca8c7

      SHA512

      db84a90011a3049907d5c47d18b9f1b8de83f0f487de37e0dc4b8b148c0832f24ce2000cd9edce9e7008b459091691710853c386119bd375fadab08aca139f24

    • /data/user/0/www.iiooii.ww/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      134B

      MD5

      99cd9ce170ed46614338673864fdadb0

      SHA1

      26be5b804118ebe9a7247b0afc812958d5ff584c

      SHA256

      5753b260cf8f318dae35b4c3e8bf253579346c83f20e11202acd38707a008f16

      SHA512

      4830c9606e0941bc784f455265d6653951101664d204928f81951d1fd2912c6374f3de5363bd89f68a731295547a89ae3f8e670a62f21f1ded4ee341b08ed60e

    • /data/user/0/www.iiooii.ww/shared_prefs/FirebaseAppHeartBeat.xml

      Filesize

      188B

      MD5

      33e3be6b893cecbdc16f82519c85296e

      SHA1

      0e3eaff8a31e2c7d4be2a8bb1d9076472f10642c

      SHA256

      f22b32d51e40333d21895508e7797f39ec4dfa53a9d7649e0506d9b2a4166909

      SHA512

      eb2db1214b0421dad07f2294db59222cc9672b026beb36af0152b08db45ed4c8e6a5385d9208f456301d76956c03b264e728c3e1422c524b69a91b726568ecba

    • /data/user/0/www.iiooii.ww/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      192B

      MD5

      696572c9c509e68149f1c917378aefa6

      SHA1

      b7cc91153f40c03112d032af28a62c205a97d7c4

      SHA256

      f3ba8ac630a039ead0e95fcc1cd9a613bc70e198e1f5517d5033d51803928525

      SHA512

      60c197479ad46ea7a1e2af277f5b23e773fa9726976d6602d17d6b97941b7bc1075463b918a7e5f9c8cb20908bbb1fba226fb7f21ecb3491a4f4ddd1a20e2bfc

    • /data/user/0/www.iiooii.ww/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      507B

      MD5

      19698f9769561178b1e7b04501ad5d86

      SHA1

      ee9a2c7af49442cc6040973065ad9efec36d91d9

      SHA256

      4b99a3a7bf7263fe4921185f4f01e3dfe7911913d736ab6ee771e0ef98de3c4c

      SHA512

      f0713fdecb2910c9f7c9c492f2a6e8df4f7f725fe5265184d2570e16d71a7689ca352d12cc0beb47c8c0937686acb7db49efd59b7ae92e3a3a4326160d361999

    • /data/user/0/www.iiooii.ww/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      567B

      MD5

      88fecec90db3979ca8f649645128d19d

      SHA1

      dafb4bb6d2bf6829d3efb4ef2c3dcc17cbe65ba9

      SHA256

      596ff224faa8f5a172d575b8d5a2282be44c96377e359af8755193b62ad8ebe5

      SHA512

      075de15d306ef6bfbb7a5fc3c5d93ff5bebcfc6abf5141fefd7f2361747ff94a92f344622a7babf5f78da212a58f6ee5c62f3e49556453b2d9f74640ced0a6d0

    • /data/user/0/www.iiooii.ww/shared_prefs/com.google.android.gms.appid.xml

      Filesize

      558B

      MD5

      72774b95db409f9ed147a3159936348f

      SHA1

      2bed5ee678d68b8aa2e42af32dc738eca14cc341

      SHA256

      214c2cf7b8c94c4eb0de404ea4bd0cc4f2661169c9d8e24e6e05cc925555fc06

      SHA512

      a6d92cdbb85c38dee17885bd9d60d17a1f2292967040b79feefead6d5f4914a976ae341180b32d29cd11be205938e6a0901988552877321b47c548521f5fbfb3

    • /data/user/0/www.iiooii.ww/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      395B

      MD5

      255d73cc7704f11f27df0d6a08b61c3d

      SHA1

      e0a09acdadbe485c672efb1e62d07dea1015ff60

      SHA256

      9e1b66b71b694f4f53443d6ae04ada708ea692619f0052eead1e4dff95accedb

      SHA512

      1a8e8467d3b02df584da58f7a7d0b8e235abe74b4d97bc3734bcc956e911fe5bdaf617b18ab08ec0cac06fdc026e13366e5d4d4f532bd5c14a50934aed4cf177

    • /data/user/0/www.iiooii.ww/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      606B

      MD5

      9371df3eddba74baf2f29937d7765744

      SHA1

      95c244bb7943e022033afbf6ae3be9dd20cf2b4a

      SHA256

      84a75bb9f7ef979e87db274dd5591807dc9037f19487add7ecc7546864e37cb8

      SHA512

      c4b7f4f37629d064f0b3dd6f83501e7ff72dc38f917327b6fef5f69720ebeb8e116d6bc65780b92ec843010f381991f11081cfd67b781201d1d9b5419f04218b

    • /data/user/0/www.iiooii.ww/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      607B

      MD5

      c61b54b09701e550952bc461926138e0

      SHA1

      edc4886da8e5489f3129215a82b8ffd7e22574b1

      SHA256

      643fe95981f5022f483c7251b389dffa644ab017ce4b53a36eec61c98d682223

      SHA512

      aae041e4de87b704a47f314187f3b595ab6f9a43a40e6c96270c198f0e751060157bc31482d69204dcf0d6d11415bae054b2b4b9f517dffa1f9f5a053781d62a

    • /data/user/0/www.iiooii.ww/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      719B

      MD5

      b37d314e2e09be15ba234bdc7a714c9d

      SHA1

      663b9d2fa4238e32ce40ffe669840ed7e3bc359d

      SHA256

      ab7877cb00d43c6968722fd0f6b9e8932c8cd0a8b3ed110651083eedba993df6

      SHA512

      5bd98540cb4ebdd17f6f642927aab31871b06e8d8374a2cb2d627557f7ffd6cab455066bd457dd3bf8f5d9a36d547e294fe3bc2d3b8ef5679fcb41ff70ebb0d2

    • /data/user/0/www.iiooii.ww/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      796B

      MD5

      1147f4e039c3080ed35dbc405fdbff18

      SHA1

      e0f31a1db0b73d581c337421c51be6d497864859

      SHA256

      377daef500d4407af502a55cb6eb20bbf7eef2860d0073d441d65ff653aa6b28

      SHA512

      20edc7791ff8c1a1915bc36f57e5370b6f4d7a8dfde0c9a69a1d2c23d1f0be73798e118670dda344ddb0a9dcdb3ceb5966c55e164ff1edff4de2b3b280e235ed

    • /data/user/0/www.iiooii.ww/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/www.iiooii.ww/shared_prefs/com.google.android.gms.measurement.prefs.xml

      Filesize

      332B

      MD5

      d92ceefac704da9d4a359c8a62100219

      SHA1

      a4d6d3356814d686cbbe8e7d0dcf6aeb43cb246a

      SHA256

      846393a418793f0c5f7a2bb8769bfacfbe6156e77f8b85ac372612e5c956a4e3

      SHA512

      4c413ae71a46259c6036295e0380c33ed610c7ade827ac9a86aa274883bdcd02d734c82f76225cce2313c4a5108ae1ccaf95611a33f8fd339bb8f99a509d56d4