Analysis
-
max time kernel
3881778s -
max time network
130s -
platform
android_x64 -
resource
android-x64-20220823-en -
resource tags
androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system -
submitted
29-08-2022 02:11
Static task
static1
Behavioral task
behavioral1
Sample
4d43ecaadc57910cd8df8ee7c280e411dba3089efe760cd5d001098e3e052cf3.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
4d43ecaadc57910cd8df8ee7c280e411dba3089efe760cd5d001098e3e052cf3.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
4d43ecaadc57910cd8df8ee7c280e411dba3089efe760cd5d001098e3e052cf3.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
4d43ecaadc57910cd8df8ee7c280e411dba3089efe760cd5d001098e3e052cf3.apk
-
Size
14.2MB
-
MD5
97ca6ccf067574b152678e8e6a22c692
-
SHA1
b33bec35c63281f735850a296858c74f9f774d3d
-
SHA256
4d43ecaadc57910cd8df8ee7c280e411dba3089efe760cd5d001098e3e052cf3
-
SHA512
9e34518cb0fdf01a5deb73fbaecc76acb2c4af24be1551166bf03a29f87f6b5ccd69f7a6c2d9a774bc59eee8588e6653d69180e769ffcd3907dc0da1abd9cf8b
-
SSDEEP
393216:9eBfvRHkKeH8EraiIs+yDNm5xWAu1Jnu7PZjzPcWFbjk+zx9J:9eBfuHlrTkzWZ1A7PJxjkMbJ
Malware Config
Signatures
-
Reads information about phone network operator.
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.shadyspy.monitor/databases/com.google.android.datatransport.eventsFilesize
112KB
MD5c00e56432fec53a3af4cb74375486250
SHA10c0836763aa016d67ceaab90f46ae1f039ff5754
SHA256511fd696d23abfeee7a721f47ca97e7f429104b1c04b5a7cee39e56ba2dca2df
SHA512538dfc872ee37da8257cf7da239e47031069bd7292e2e8e5aaf77d4ea61e2fd25f45bd0d89a3bae191e0624b440e37168645376bf3c5886fdab91928d2c08fda
-
/data/user/0/com.shadyspy.monitor/databases/com.google.android.datatransport.events-journalFilesize
1KB
MD5f777d2b2b5b713af8fa1e88a9dc69710
SHA11cb7e7fc3f36191a8ebfc43e9ebfaba3fff5e3bc
SHA25657fae6de5e892e7024349deba13092940b49d6c3ada521cddaef7856dcb1e07c
SHA5129c83691994255d24bbe0249e0550c5d011dd4e908f7d244418e473c8a61660b627fdf2452be871bb14e5014c91e19a135f9399e6d8c1dd53fac8319d2d8e77e1
-
/data/user/0/com.shadyspy.monitor/databases/google_app_measurement_local.dbFilesize
88KB
MD57bd7e08b7c157fb7a04f9701b6965b65
SHA119ed78cffffd879509071b091ba60776c18e8d97
SHA256c3aa0e8a52b6dcae0f988502bb3887f94c13148a8f36c3fcf5036c7c99afbdbc
SHA512a668c141cd4d48396e9d67e79ec1036a8ad4498293e0f16d108e8c4d842f76714f561bbe440a3a5dbcfb6b7ade257ffed7fa07c56566c8ea938589c61943d4cb
-
/data/user/0/com.shadyspy.monitor/databases/google_app_measurement_local.db-journalFilesize
1KB
MD52881240f2da66cabd514e14bf271df7e
SHA1ee41847f927ab3e81d9b3b8436b9ec6e470adf50
SHA256a83322e92a59cb63f1588281d73e44f8d1a81455a8a69c3577ceaec9c25356bf
SHA51200188d3fce405f880d5e94e702f0d9608e024346264b81ab03eaad636c4863873b5e271703446f8697c5ff9f9a7283de979dd7a7593df37b1eacae836b175079
-
/data/user/0/com.shadyspy.monitor/files/.com.google.firebase.crashlytics/initialization_markerMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.shadyspy.monitor/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-630C208201070001134A28F99C30BE63.temp.tmpFilesize
16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/user/0/com.shadyspy.monitor/files/.com.google.firebase.crashlytics/report-persistence/sessions/630C208201070001134A28F99C30BE63/reportFilesize
744B
MD52ebcb7426b885e4566246ace67ec5ddb
SHA1b99ae828ee406a4787fb0f6802e003b8fc327af9
SHA256c16a944c16d79783845e658c352b3891cd5a0f1fa484c4a146d0169bf213aff3
SHA512bf1ad5b4962282d07131cbe044a4c038d6a462aefdbc43a979b04e01f3a4dc1fd42e3885243e3f5f342ee5a739c0f864dbbf8c68f79d99ba18c1fcc389c5ef54
-
/data/user/0/com.shadyspy.monitor/files/AppEventsLogger.persistedeventsFilesize
403B
MD5eafdd602054fd8d6e75e3d05dc4b4516
SHA107f4cdad0c239cf2f54e5a024b35f0e7a358a4ec
SHA256683a47da1dd0399b777885a994ae33ffb1d5d6bc4d8d9107b47062558685023c
SHA512fc39ab0563ac09dd4c2fe2c88ca1b810f15577091d2d138a52999d390809da1e64cbc0f6cc56880f5667a71bee2eba06b29f8cf74d1aabd7d3df6784de6b9c99
-
/data/user/0/com.shadyspy.monitor/files/PersistedInstallation7047193316414153354tmpMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.shadyspy.monitor/files/PersistedInstallation7856156429578385519tmpMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.shadyspy.monitor/files/generatefid.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.shadyspy.monitor/no_backup/com.google.android.gms.appid-no-backupMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.shadyspy.monitor/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
239B
MD5558dfc3a8f0ee50ac411abebc66a0f0e
SHA1962cc6794668c857b3fc001d2ce40ba03ed36ad5
SHA256ec4bd69b26cd74b131a6fe0bbb874f7e830e2249f27f4cc9181513aa3505fe29
SHA51266845763d78eb70b90c1aba1dc9c308383bd9d11e21a479d916e68e4c38df57c15c5870b844df65d916afdacedb8bc51c3bfe2b4544b0b2ee0abf6b3af624992
-
/data/user/0/com.shadyspy.monitor/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
134B
MD578c94a5a496464117dcc39e5f250b615
SHA131733d9baa2428c6172c4342c0c8f54449709749
SHA256eaa1318df61fbffc690ce3d48e3d24e3992e55b4ab49fb8b909202a53075947f
SHA5125a83a02e446f2a2279c08f28b42d3ab29071fd2df54309bfcd598bf25db595d7d3df76b7a1472bb22e4714656b25c4c36b6b14d315a6f7772dbbc76bcd456014
-
/data/user/0/com.shadyspy.monitor/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
188B
MD575ddd19325d53eb6aa0e79f7bd7552a1
SHA10c8925d4a0155394df433b6e71512a3ab43765a4
SHA25652e8313b4336dd54757d2faa3d86a5919508dab9ecb09781ee3446265182e690
SHA5122bdeb1fa118fb92096494a0e18b682132cbd6dd371c5cee2299fa387f3fd5c244f2aadf356fc326e254fc77f45616378467de8d251b5fec74eb8320b5a82aa7c
-
/data/user/0/com.shadyspy.monitor/shared_prefs/com.facebook.internal.preferences.APP_GATEKEEPERS.xmlFilesize
3KB
MD50f8e81698382837fd606758d683d120b
SHA15cd3d73b15cb7c802c3f7ae8817d4bcdcc70add9
SHA25690c88a815036ed6563b8ee379273b4351476766b2c0fd36fd04a6c8a26f4a93f
SHA5121f95dd1e7c3dcd649c539126be83ac94d1bde687f43fd761e08988cbfee0eb8e3e61a914ee3d031c310915f131cd367b36b65510d72a1da60d15cc2d5f232bf4
-
/data/user/0/com.shadyspy.monitor/shared_prefs/com.facebook.internal.preferences.APP_SETTINGS.xmlFilesize
951B
MD5cab4b6e5c6f0aa695227d2f5a74fd771
SHA1e3cf34d5da83e59c1b8732a0793f134d7ebece19
SHA2567c3d090ece1110d64768573a632cfbdfbb7f3ffb8f6eaaffdc47ce271584e812
SHA512d7be012f6e88ac474d8e2b4b07ba2c272bb7238b3874c90e065d44dfbc7030bcb755169ff3e79ddafe5c5ff48996b40450c78b6660ec6220b88a46421da6a393
-
/data/user/0/com.shadyspy.monitor/shared_prefs/com.facebook.sdk.USER_SETTINGS.xmlFilesize
138B
MD52be7f5409087c1bab1039f11474a8ecd
SHA1807bae1044c5394c8f00986521d82a4c85a129ac
SHA25646f1159adc403ac823b3cac5931a362ae5dd48fbaf448b577f33919c7b023a50
SHA512e3f26a430807e67f5298dc9655b2673c66e172cf1cec7c011781b2a0ad1dbe49a9cfdc0009a284c99b03846eb5394bcc3dcce705500f11e8953761226b1a9278
-
/data/user/0/com.shadyspy.monitor/shared_prefs/com.facebook.sdk.attributionTracking.xmlFilesize
133B
MD5728bb367c6087713f20b1a11d346dc43
SHA1138b8e047207787365bf94509bbfcd2391d1d07e
SHA256f1bcdcc14857f2b662b5b7de54253de4e1d956e758fa3d23efbb2c52a74b732f
SHA512138ba94a938c0aa9d3c8bfcd42a99af1fd462da87b81dbc1d0e51d8371946e5e158d3ece7d5ad00ea7c20cf58eef9d1bb64150882eb501d78177b69caf1821d5
-
/data/user/0/com.shadyspy.monitor/shared_prefs/com.facebook.sdk.attributionTracking.xmlFilesize
133B
MD58f90d1f02aad41808c037d9c106f9c68
SHA165339481635fc57bd06b0780140e18ba3f82e02e
SHA2564c1d4c57015d5f399afbe4e27689bf47bc289c974d87010a2fbf1dc2d785b8d0
SHA51266972770c9aaa9f77a700c121f1dbf5c8c21a402a41702d359be6fc78f0e9ce3b0a8ca9539da7b0d750df394ee1bce7155aa999e91e0062ec2fbf708aeab931e
-
/data/user/0/com.shadyspy.monitor/shared_prefs/com.google.android.gms.appid.xmlFilesize
387B
MD593baa7647038eef1533141f9c9fbe0e6
SHA160bf42d6b4beb0b0b79a715592f7c8a6b4c21fb4
SHA256df48b2c61df2e2eb77eafc1ff67226ff4fc34f774c15726783680b4d8d4ae148
SHA512cfb032f16f3101e6bd6382c47776418a828c65f56187a7e5b8c74c83efca811fa06e7314b6d664d0a37f83668b98b6864d4a6463b96e3e14c6fac7522392564d
-
/data/user/0/com.shadyspy.monitor/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
122B
MD5250b4caeba60ddf53228405750ba66ca
SHA1422ab714feb34e9f3b4f1cbe669887bcd581ddb1
SHA2562478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
SHA512373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb
-
/data/user/0/com.shadyspy.monitor/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
395B
MD5e4845f877c581d1d9f47b29c980006a0
SHA1fe0412900f1790e9aeaccca3840fba692bc0daed
SHA25637ed0e8f82c2fd7fd91d60fb1979d9125a0ed8f1caf186dcf83ca0857aed765b
SHA5121d3dda518ad7af2a32585f029d732ec31935d66301af1e8cdada41bbbcb00f52985f62962dcca96b14ea1f1fbdcc4dc5669488d3c7b88060ff3eb53ea992a0b3
-
/data/user/0/com.shadyspy.monitor/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
606B
MD5293cb4b3e7dc064012576cc4413a2011
SHA14773f0b2c442529b29aa6e0e3125136aba801f1f
SHA25663878001a68b7431de4eb9da9adb51880828c80c8ad595e0534c843511a8fc50
SHA512f09ea46ec118f95ac553913c2e9352fa700e7759a6b991dd3b5c473be75b2e0af8634a737737415003ecb1cf13cda07ea49aa8ff5313080a6ae26f154e55e005
-
/data/user/0/com.shadyspy.monitor/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
607B
MD5db6201b70ace2e4f3abce64286556d88
SHA1b39a701bb83b3a79cf9d80f492d04cdda5edda37
SHA2560c35065f90016ba944465029c682611e6f70a5ee67ada2941cb02f7460518ed6
SHA512118bf234642fc79afa27167921cc8637ad50a807fa2365f5c67d957cca74bca8345aace84b84a45d4312735ec735768c315fd995c5e5d4e1becda9ade55f1973
-
/data/user/0/com.shadyspy.monitor/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
665B
MD570b9078754f4ad0068d49b1f3edd1e89
SHA15d917b81fd95aa253931cbbe938aac2684abb18b
SHA2563671351887b6f6499981df3a58af4a8910203de02f16af82c1ab4f14c023fcf0
SHA512872cde8141e097dfe25c014e501e05cd353f95072acd0d505893ad06012f0e2834385f67433f1d686ed629a26efe603347b9d8e5a267badf4f1e75d76598b681
-
/data/user/0/com.shadyspy.monitor/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
719B
MD5bf98bdbbfb23316f329272b9468e30f9
SHA17c23a3d3845e96b3f9e7189c851562a62c0b174a
SHA25634d66ff098cd3c97faa430b586f939ba7b8318c437c0f2e0e664a1a977723f38
SHA512f0424cb04fffec0b277acb7871472d369aa9e556b431218a6e0d2a333af795d16ba2e7535fcdd375c9de20297c0c83301b374036b9b3b482168a056321328311
-
/data/user/0/com.shadyspy.monitor/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
796B
MD5d0eac8618995fa91312036c5208bc1fa
SHA1d53802ef7d2a53af2096ac51c097cd16a5bc3f7a
SHA256d0d61fc7ece38ebca36a2d07b17807649cc92d67331b1af045c7fa29b43d6f39
SHA512c6f40b5c5791ab56f4f9b1fa2d36bd4c0ebcf833adbca4ae328ec81c88ca7c1a3674f7adbd8712e117a7053be71b2ea47737602e3ee4c13431bd3673bd0783be
-
/data/user/0/com.shadyspy.monitor/shared_prefs/com.google.firebase.crashlytics.xmlFilesize
235B
MD586dec30d3b5a9846cd805cc88dcd911c
SHA1e5d39ef2ec803e41963759a25a5d03354546d73a
SHA256c7b15ae79026d5b8f37f9a31597f80295f163380ae65fb57dfb514f6162a3d6c
SHA5123b4c10180defc616ff3027066817a0914eadc33a874038a6ba8b3ddfeb23ef20e57a363d79ce75343c48af1a21d834749edf904612241cbec2de82a28b5eb5eb
-
/data/user/0/com.shadyspy.monitor/shared_prefs/com.shadyspy.monitor_preferences.xmlFilesize
448B
MD5f8714d57419683219072eaf95fc76f74
SHA1a9a157671310e251e8bf590934b8be94480282fe
SHA25605db3ee75e6e6b836ea0e3020f1243d8b4817050258cac5aba99a527f44b9517
SHA5123a2390981d626433fe5578b07ab17c63c3592e5cf3479eb751323dfedc35295a9d76aa388bb2e5d752b6730367521be85eae5eff8cb13f7bbed49e16adf1a22e
-
/data/user/0/com.shadyspy.monitor/shared_prefs/com.shadyspy.monitor_preferences.xmlFilesize
657B
MD565c2cd89df583509f49953204051bc3e
SHA193aef5ffa935c19711304a66a46ccc9dbb5ab3ac
SHA256d6268bd4699b940455f1469a7afb32befa757a7537ba7f748019d84b332f0390
SHA5124d4dedbfd43313e2198fd02a17aa530a83daa76d579f9ce63887272272ca450bf71d4273dd0c517e8404f63a5c49e02ecc89b2a21522003d82e4ca1533752747