Analysis

  • max time kernel
    3881778s
  • max time network
    130s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    29-08-2022 02:11

General

  • Target

    4d43ecaadc57910cd8df8ee7c280e411dba3089efe760cd5d001098e3e052cf3.apk

  • Size

    14.2MB

  • MD5

    97ca6ccf067574b152678e8e6a22c692

  • SHA1

    b33bec35c63281f735850a296858c74f9f774d3d

  • SHA256

    4d43ecaadc57910cd8df8ee7c280e411dba3089efe760cd5d001098e3e052cf3

  • SHA512

    9e34518cb0fdf01a5deb73fbaecc76acb2c4af24be1551166bf03a29f87f6b5ccd69f7a6c2d9a774bc59eee8588e6653d69180e769ffcd3907dc0da1abd9cf8b

  • SSDEEP

    393216:9eBfvRHkKeH8EraiIs+yDNm5xWAu1Jnu7PZjzPcWFbjk+zx9J:9eBfuHlrTkzWZ1A7PJxjkMbJ

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.shadyspy.monitor
    1⤵
      PID:4938

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.shadyspy.monitor/databases/com.google.android.datatransport.events
      Filesize

      112KB

      MD5

      c00e56432fec53a3af4cb74375486250

      SHA1

      0c0836763aa016d67ceaab90f46ae1f039ff5754

      SHA256

      511fd696d23abfeee7a721f47ca97e7f429104b1c04b5a7cee39e56ba2dca2df

      SHA512

      538dfc872ee37da8257cf7da239e47031069bd7292e2e8e5aaf77d4ea61e2fd25f45bd0d89a3bae191e0624b440e37168645376bf3c5886fdab91928d2c08fda

    • /data/user/0/com.shadyspy.monitor/databases/com.google.android.datatransport.events-journal
      Filesize

      1KB

      MD5

      f777d2b2b5b713af8fa1e88a9dc69710

      SHA1

      1cb7e7fc3f36191a8ebfc43e9ebfaba3fff5e3bc

      SHA256

      57fae6de5e892e7024349deba13092940b49d6c3ada521cddaef7856dcb1e07c

      SHA512

      9c83691994255d24bbe0249e0550c5d011dd4e908f7d244418e473c8a61660b627fdf2452be871bb14e5014c91e19a135f9399e6d8c1dd53fac8319d2d8e77e1

    • /data/user/0/com.shadyspy.monitor/databases/google_app_measurement_local.db
      Filesize

      88KB

      MD5

      7bd7e08b7c157fb7a04f9701b6965b65

      SHA1

      19ed78cffffd879509071b091ba60776c18e8d97

      SHA256

      c3aa0e8a52b6dcae0f988502bb3887f94c13148a8f36c3fcf5036c7c99afbdbc

      SHA512

      a668c141cd4d48396e9d67e79ec1036a8ad4498293e0f16d108e8c4d842f76714f561bbe440a3a5dbcfb6b7ade257ffed7fa07c56566c8ea938589c61943d4cb

    • /data/user/0/com.shadyspy.monitor/databases/google_app_measurement_local.db-journal
      Filesize

      1KB

      MD5

      2881240f2da66cabd514e14bf271df7e

      SHA1

      ee41847f927ab3e81d9b3b8436b9ec6e470adf50

      SHA256

      a83322e92a59cb63f1588281d73e44f8d1a81455a8a69c3577ceaec9c25356bf

      SHA512

      00188d3fce405f880d5e94e702f0d9608e024346264b81ab03eaad636c4863873b5e271703446f8697c5ff9f9a7283de979dd7a7593df37b1eacae836b175079

    • /data/user/0/com.shadyspy.monitor/files/.com.google.firebase.crashlytics/initialization_marker
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.shadyspy.monitor/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-630C208201070001134A28F99C30BE63.temp.tmp
      Filesize

      16B

      MD5

      c33583fae4e0b61cde1c5b9227963237

      SHA1

      fe2ebe4d27469af1460f7e852031a04208ef629b

      SHA256

      35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

      SHA512

      fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

    • /data/user/0/com.shadyspy.monitor/files/.com.google.firebase.crashlytics/report-persistence/sessions/630C208201070001134A28F99C30BE63/report
      Filesize

      744B

      MD5

      2ebcb7426b885e4566246ace67ec5ddb

      SHA1

      b99ae828ee406a4787fb0f6802e003b8fc327af9

      SHA256

      c16a944c16d79783845e658c352b3891cd5a0f1fa484c4a146d0169bf213aff3

      SHA512

      bf1ad5b4962282d07131cbe044a4c038d6a462aefdbc43a979b04e01f3a4dc1fd42e3885243e3f5f342ee5a739c0f864dbbf8c68f79d99ba18c1fcc389c5ef54

    • /data/user/0/com.shadyspy.monitor/files/AppEventsLogger.persistedevents
      Filesize

      403B

      MD5

      eafdd602054fd8d6e75e3d05dc4b4516

      SHA1

      07f4cdad0c239cf2f54e5a024b35f0e7a358a4ec

      SHA256

      683a47da1dd0399b777885a994ae33ffb1d5d6bc4d8d9107b47062558685023c

      SHA512

      fc39ab0563ac09dd4c2fe2c88ca1b810f15577091d2d138a52999d390809da1e64cbc0f6cc56880f5667a71bee2eba06b29f8cf74d1aabd7d3df6784de6b9c99

    • /data/user/0/com.shadyspy.monitor/files/PersistedInstallation7047193316414153354tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.shadyspy.monitor/files/PersistedInstallation7856156429578385519tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.shadyspy.monitor/files/generatefid.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.shadyspy.monitor/no_backup/com.google.android.gms.appid-no-backup
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.shadyspy.monitor/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      239B

      MD5

      558dfc3a8f0ee50ac411abebc66a0f0e

      SHA1

      962cc6794668c857b3fc001d2ce40ba03ed36ad5

      SHA256

      ec4bd69b26cd74b131a6fe0bbb874f7e830e2249f27f4cc9181513aa3505fe29

      SHA512

      66845763d78eb70b90c1aba1dc9c308383bd9d11e21a479d916e68e4c38df57c15c5870b844df65d916afdacedb8bc51c3bfe2b4544b0b2ee0abf6b3af624992

    • /data/user/0/com.shadyspy.monitor/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      134B

      MD5

      78c94a5a496464117dcc39e5f250b615

      SHA1

      31733d9baa2428c6172c4342c0c8f54449709749

      SHA256

      eaa1318df61fbffc690ce3d48e3d24e3992e55b4ab49fb8b909202a53075947f

      SHA512

      5a83a02e446f2a2279c08f28b42d3ab29071fd2df54309bfcd598bf25db595d7d3df76b7a1472bb22e4714656b25c4c36b6b14d315a6f7772dbbc76bcd456014

    • /data/user/0/com.shadyspy.monitor/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      188B

      MD5

      75ddd19325d53eb6aa0e79f7bd7552a1

      SHA1

      0c8925d4a0155394df433b6e71512a3ab43765a4

      SHA256

      52e8313b4336dd54757d2faa3d86a5919508dab9ecb09781ee3446265182e690

      SHA512

      2bdeb1fa118fb92096494a0e18b682132cbd6dd371c5cee2299fa387f3fd5c244f2aadf356fc326e254fc77f45616378467de8d251b5fec74eb8320b5a82aa7c

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.facebook.internal.preferences.APP_GATEKEEPERS.xml
      Filesize

      3KB

      MD5

      0f8e81698382837fd606758d683d120b

      SHA1

      5cd3d73b15cb7c802c3f7ae8817d4bcdcc70add9

      SHA256

      90c88a815036ed6563b8ee379273b4351476766b2c0fd36fd04a6c8a26f4a93f

      SHA512

      1f95dd1e7c3dcd649c539126be83ac94d1bde687f43fd761e08988cbfee0eb8e3e61a914ee3d031c310915f131cd367b36b65510d72a1da60d15cc2d5f232bf4

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.facebook.internal.preferences.APP_SETTINGS.xml
      Filesize

      951B

      MD5

      cab4b6e5c6f0aa695227d2f5a74fd771

      SHA1

      e3cf34d5da83e59c1b8732a0793f134d7ebece19

      SHA256

      7c3d090ece1110d64768573a632cfbdfbb7f3ffb8f6eaaffdc47ce271584e812

      SHA512

      d7be012f6e88ac474d8e2b4b07ba2c272bb7238b3874c90e065d44dfbc7030bcb755169ff3e79ddafe5c5ff48996b40450c78b6660ec6220b88a46421da6a393

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.facebook.sdk.USER_SETTINGS.xml
      Filesize

      138B

      MD5

      2be7f5409087c1bab1039f11474a8ecd

      SHA1

      807bae1044c5394c8f00986521d82a4c85a129ac

      SHA256

      46f1159adc403ac823b3cac5931a362ae5dd48fbaf448b577f33919c7b023a50

      SHA512

      e3f26a430807e67f5298dc9655b2673c66e172cf1cec7c011781b2a0ad1dbe49a9cfdc0009a284c99b03846eb5394bcc3dcce705500f11e8953761226b1a9278

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.facebook.sdk.attributionTracking.xml
      Filesize

      133B

      MD5

      728bb367c6087713f20b1a11d346dc43

      SHA1

      138b8e047207787365bf94509bbfcd2391d1d07e

      SHA256

      f1bcdcc14857f2b662b5b7de54253de4e1d956e758fa3d23efbb2c52a74b732f

      SHA512

      138ba94a938c0aa9d3c8bfcd42a99af1fd462da87b81dbc1d0e51d8371946e5e158d3ece7d5ad00ea7c20cf58eef9d1bb64150882eb501d78177b69caf1821d5

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.facebook.sdk.attributionTracking.xml
      Filesize

      133B

      MD5

      8f90d1f02aad41808c037d9c106f9c68

      SHA1

      65339481635fc57bd06b0780140e18ba3f82e02e

      SHA256

      4c1d4c57015d5f399afbe4e27689bf47bc289c974d87010a2fbf1dc2d785b8d0

      SHA512

      66972770c9aaa9f77a700c121f1dbf5c8c21a402a41702d359be6fc78f0e9ce3b0a8ca9539da7b0d750df394ee1bce7155aa999e91e0062ec2fbf708aeab931e

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      387B

      MD5

      93baa7647038eef1533141f9c9fbe0e6

      SHA1

      60bf42d6b4beb0b0b79a715592f7c8a6b4c21fb4

      SHA256

      df48b2c61df2e2eb77eafc1ff67226ff4fc34f774c15726783680b4d8d4ae148

      SHA512

      cfb032f16f3101e6bd6382c47776418a828c65f56187a7e5b8c74c83efca811fa06e7314b6d664d0a37f83668b98b6864d4a6463b96e3e14c6fac7522392564d

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      395B

      MD5

      e4845f877c581d1d9f47b29c980006a0

      SHA1

      fe0412900f1790e9aeaccca3840fba692bc0daed

      SHA256

      37ed0e8f82c2fd7fd91d60fb1979d9125a0ed8f1caf186dcf83ca0857aed765b

      SHA512

      1d3dda518ad7af2a32585f029d732ec31935d66301af1e8cdada41bbbcb00f52985f62962dcca96b14ea1f1fbdcc4dc5669488d3c7b88060ff3eb53ea992a0b3

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      606B

      MD5

      293cb4b3e7dc064012576cc4413a2011

      SHA1

      4773f0b2c442529b29aa6e0e3125136aba801f1f

      SHA256

      63878001a68b7431de4eb9da9adb51880828c80c8ad595e0534c843511a8fc50

      SHA512

      f09ea46ec118f95ac553913c2e9352fa700e7759a6b991dd3b5c473be75b2e0af8634a737737415003ecb1cf13cda07ea49aa8ff5313080a6ae26f154e55e005

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      607B

      MD5

      db6201b70ace2e4f3abce64286556d88

      SHA1

      b39a701bb83b3a79cf9d80f492d04cdda5edda37

      SHA256

      0c35065f90016ba944465029c682611e6f70a5ee67ada2941cb02f7460518ed6

      SHA512

      118bf234642fc79afa27167921cc8637ad50a807fa2365f5c67d957cca74bca8345aace84b84a45d4312735ec735768c315fd995c5e5d4e1becda9ade55f1973

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      665B

      MD5

      70b9078754f4ad0068d49b1f3edd1e89

      SHA1

      5d917b81fd95aa253931cbbe938aac2684abb18b

      SHA256

      3671351887b6f6499981df3a58af4a8910203de02f16af82c1ab4f14c023fcf0

      SHA512

      872cde8141e097dfe25c014e501e05cd353f95072acd0d505893ad06012f0e2834385f67433f1d686ed629a26efe603347b9d8e5a267badf4f1e75d76598b681

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      719B

      MD5

      bf98bdbbfb23316f329272b9468e30f9

      SHA1

      7c23a3d3845e96b3f9e7189c851562a62c0b174a

      SHA256

      34d66ff098cd3c97faa430b586f939ba7b8318c437c0f2e0e664a1a977723f38

      SHA512

      f0424cb04fffec0b277acb7871472d369aa9e556b431218a6e0d2a333af795d16ba2e7535fcdd375c9de20297c0c83301b374036b9b3b482168a056321328311

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      796B

      MD5

      d0eac8618995fa91312036c5208bc1fa

      SHA1

      d53802ef7d2a53af2096ac51c097cd16a5bc3f7a

      SHA256

      d0d61fc7ece38ebca36a2d07b17807649cc92d67331b1af045c7fa29b43d6f39

      SHA512

      c6f40b5c5791ab56f4f9b1fa2d36bd4c0ebcf833adbca4ae328ec81c88ca7c1a3674f7adbd8712e117a7053be71b2ea47737602e3ee4c13431bd3673bd0783be

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.google.firebase.crashlytics.xml
      Filesize

      235B

      MD5

      86dec30d3b5a9846cd805cc88dcd911c

      SHA1

      e5d39ef2ec803e41963759a25a5d03354546d73a

      SHA256

      c7b15ae79026d5b8f37f9a31597f80295f163380ae65fb57dfb514f6162a3d6c

      SHA512

      3b4c10180defc616ff3027066817a0914eadc33a874038a6ba8b3ddfeb23ef20e57a363d79ce75343c48af1a21d834749edf904612241cbec2de82a28b5eb5eb

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.shadyspy.monitor_preferences.xml
      Filesize

      448B

      MD5

      f8714d57419683219072eaf95fc76f74

      SHA1

      a9a157671310e251e8bf590934b8be94480282fe

      SHA256

      05db3ee75e6e6b836ea0e3020f1243d8b4817050258cac5aba99a527f44b9517

      SHA512

      3a2390981d626433fe5578b07ab17c63c3592e5cf3479eb751323dfedc35295a9d76aa388bb2e5d752b6730367521be85eae5eff8cb13f7bbed49e16adf1a22e

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.shadyspy.monitor_preferences.xml
      Filesize

      657B

      MD5

      65c2cd89df583509f49953204051bc3e

      SHA1

      93aef5ffa935c19711304a66a46ccc9dbb5ab3ac

      SHA256

      d6268bd4699b940455f1469a7afb32befa757a7537ba7f748019d84b332f0390

      SHA512

      4d4dedbfd43313e2198fd02a17aa530a83daa76d579f9ce63887272272ca450bf71d4273dd0c517e8404f63a5c49e02ecc89b2a21522003d82e4ca1533752747