Analysis

  • max time kernel
    3881832s
  • max time network
    146s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    29-08-2022 02:11

General

  • Target

    4d43ecaadc57910cd8df8ee7c280e411dba3089efe760cd5d001098e3e052cf3.apk

  • Size

    14.2MB

  • MD5

    97ca6ccf067574b152678e8e6a22c692

  • SHA1

    b33bec35c63281f735850a296858c74f9f774d3d

  • SHA256

    4d43ecaadc57910cd8df8ee7c280e411dba3089efe760cd5d001098e3e052cf3

  • SHA512

    9e34518cb0fdf01a5deb73fbaecc76acb2c4af24be1551166bf03a29f87f6b5ccd69f7a6c2d9a774bc59eee8588e6653d69180e769ffcd3907dc0da1abd9cf8b

  • SSDEEP

    393216:9eBfvRHkKeH8EraiIs+yDNm5xWAu1Jnu7PZjzPcWFbjk+zx9J:9eBfuHlrTkzWZ1A7PJxjkMbJ

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.shadyspy.monitor
    1⤵
      PID:4698

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.shadyspy.monitor/databases/com.google.android.datatransport.events
      Filesize

      112KB

      MD5

      42234a0297173062f6ed764ca6c0208c

      SHA1

      d8105d91e5557e0392dc749fbac6974d2daed956

      SHA256

      7265e8650b06d78c24ca70a41564680abfe6e529ce6ff5f5aa7504caf9113dc6

      SHA512

      001960aca53baf55b045b0b1d1f8609d1d614bb145306da3d8eca698d33d3a6d5b66a81cedb8a581b7e0a9fa97349b0ce0b19113564ecfcc41ba95201b871f53

    • /data/user/0/com.shadyspy.monitor/databases/com.google.android.datatransport.events-journal
      Filesize

      1KB

      MD5

      d0e0f0746ec28e16de1074f27ee51339

      SHA1

      3a0d1a59900dbb8b1f3aa899c9c7c1c74d381a94

      SHA256

      e1405a248892fe0b2c7848358fb4387de33560edeab298048477f49b17ca1194

      SHA512

      f8c3f6206eb1a9c49f7effa6ce09493d03897392edfc4d8dc44616d85cba43bded9f9841355ed1a2e43496cbbdef5581893bee03bdc33ad7d75069ea53997707

    • /data/user/0/com.shadyspy.monitor/databases/google_app_measurement_local.db
      Filesize

      88KB

      MD5

      8dfcfdcef5a9793fb83bda404ec3f42b

      SHA1

      dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

      SHA256

      a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

      SHA512

      e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

    • /data/user/0/com.shadyspy.monitor/databases/google_app_measurement_local.db-journal
      Filesize

      1KB

      MD5

      ce005063a93b9c7f766eb653432aeb37

      SHA1

      bfce52cd761b81d7162dc50d047ab2da623f43fa

      SHA256

      a7246a03cadd2aa2afec29371eb49289c330a7c52d9dace6bbf48a39891ff67f

      SHA512

      3767e7d30afbeed0ad82fec0e020280cc682f432738ba72a8c9a9525d4d7aa4ea16222da721cf3aa9c6491c043be32115514c06869d29d1de270c58cbf66bea0

    • /data/user/0/com.shadyspy.monitor/files/.com.google.firebase.crashlytics/com.crashlytics.settings.json
      Filesize

      601B

      MD5

      389e89f485e0bedf1c77a0f1adb0c6da

      SHA1

      8df31d4c4dafe9aa8cae4016390c11ecfa9453d2

      SHA256

      584a5b8fb44284962597d1eaa353f0e86e1e095a54f630d72f08fa68bdadc625

      SHA512

      3ae88d88b17870b8142d3df2732877bd40fc0303c2ca30f382cd028a4f00fe133a294028fc12fcaa5fa91f48b85441f1bc11ab92549b3e9ec1e8c8e580aabd0b

    • /data/user/0/com.shadyspy.monitor/files/.com.google.firebase.crashlytics/initialization_marker
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.shadyspy.monitor/files/.com.google.firebase.crashlytics/log-files/crashlytics-userlog-630C20B4006C0001125A8F8FD851D912.temp.tmp
      Filesize

      16B

      MD5

      c33583fae4e0b61cde1c5b9227963237

      SHA1

      fe2ebe4d27469af1460f7e852031a04208ef629b

      SHA256

      35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

      SHA512

      fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

    • /data/user/0/com.shadyspy.monitor/files/.com.google.firebase.crashlytics/report-persistence/sessions/630C20B4006C0001125A8F8FD851D912/report
      Filesize

      745B

      MD5

      1c788e2205816588948fe6e637457857

      SHA1

      1efad6adfaaed44d28c75e8e9fe656415c5805b5

      SHA256

      6eeb73e4b7e3baaba3357adb497b14bcb41b511dbe0b111bb7a8c4dac7e7c7c4

      SHA512

      51a62098cf8264e6be4af19370553b6c48711391e85d5090345753767b5adf577ef5aedd1e8339fd6357200bf4e6c948dc7578e22e625c077c1bdf393a68c2f6

    • /data/user/0/com.shadyspy.monitor/files/AppEventsLogger.persistedevents
      Filesize

      403B

      MD5

      eafdd602054fd8d6e75e3d05dc4b4516

      SHA1

      07f4cdad0c239cf2f54e5a024b35f0e7a358a4ec

      SHA256

      683a47da1dd0399b777885a994ae33ffb1d5d6bc4d8d9107b47062558685023c

      SHA512

      fc39ab0563ac09dd4c2fe2c88ca1b810f15577091d2d138a52999d390809da1e64cbc0f6cc56880f5667a71bee2eba06b29f8cf74d1aabd7d3df6784de6b9c99

    • /data/user/0/com.shadyspy.monitor/files/PersistedInstallation2153234401069540078tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.shadyspy.monitor/files/PersistedInstallation5568395640286262845tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.shadyspy.monitor/files/generatefid.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.shadyspy.monitor/no_backup/com.google.android.gms.appid-no-backup
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.shadyspy.monitor/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      188B

      MD5

      964db6eeb99c3e0a9004318baba1091e

      SHA1

      0321968a9d99797e76dcd81b19bd85883f1a40c2

      SHA256

      988ceab1cd5ccd7f322943f4f0a9169aab649f1704ac635f627a76c4960a420e

      SHA512

      f3ad42284246d881a4c5ecee1ae10e3c5f7b507ac4a0e7fff3b7c5dd1094ff3e18b8626e9e9dfff45da45375302e00238df8d2ea90489a01d3c7cd5b159edc12

    • /data/user/0/com.shadyspy.monitor/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      239B

      MD5

      89389e93079004bcc052a581b7abe7ba

      SHA1

      54f179beb17ee4887f27c421353023036cbc5617

      SHA256

      bb3de38c84cf11700f541532f5a172b91abe42f03612e635ed851aa2a946f199

      SHA512

      72cbb6fdeed80bd58ff01053055998bdade31d83f695722ea9e5365b6548ada8d7d6fb859d1ae2edb0475e2d1b1f53b98ad9229a284a875e95521fd71f528981

    • /data/user/0/com.shadyspy.monitor/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      134B

      MD5

      f7fdda70a99b642dc1c2750661759968

      SHA1

      89cfeac3079f54c1bfc9ba8d62ba1edc91d1078a

      SHA256

      ca8ad6b3578f616b5b54dde97c0506fa01b97378eb46c1437f2aa7ddfb875b07

      SHA512

      0a8da8c8aaadf35effac295617a4221d1ec03c3c0104bfb2db83659794397f160e4c2449c04c8ec89f8d6ea96fce5c1faf40bfae12d8b9c72692b71218a89137

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.facebook.internal.preferences.APP_GATEKEEPERS.xml
      Filesize

      3KB

      MD5

      0f8e81698382837fd606758d683d120b

      SHA1

      5cd3d73b15cb7c802c3f7ae8817d4bcdcc70add9

      SHA256

      90c88a815036ed6563b8ee379273b4351476766b2c0fd36fd04a6c8a26f4a93f

      SHA512

      1f95dd1e7c3dcd649c539126be83ac94d1bde687f43fd761e08988cbfee0eb8e3e61a914ee3d031c310915f131cd367b36b65510d72a1da60d15cc2d5f232bf4

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.facebook.sdk.USER_SETTINGS.xml
      Filesize

      138B

      MD5

      2be7f5409087c1bab1039f11474a8ecd

      SHA1

      807bae1044c5394c8f00986521d82a4c85a129ac

      SHA256

      46f1159adc403ac823b3cac5931a362ae5dd48fbaf448b577f33919c7b023a50

      SHA512

      e3f26a430807e67f5298dc9655b2673c66e172cf1cec7c011781b2a0ad1dbe49a9cfdc0009a284c99b03846eb5394bcc3dcce705500f11e8953761226b1a9278

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.facebook.sdk.appEventPreferences.xml
      Filesize

      113B

      MD5

      f6b7535c2db1de75b7f0f884a06ce76f

      SHA1

      e322ee96b4b23519ca0f580dd78b74189a8ba553

      SHA256

      b32c4081de95cd51198d2272953b28f99fa2db29beb94861959fbffc3eb9b787

      SHA512

      88ef6f9bfad3534e9bfbc23789d60463e30386e33337742119817fdb162a962d500085b4ff0c4a6641f8237a31b233efb7e808da696bc155920c84484433a60d

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.facebook.sdk.attributionTracking.xml
      Filesize

      133B

      MD5

      2e4deeaa6ec2e90f5eb446ca94d70c02

      SHA1

      f81a63b5ea56f8345e8945ec769e1cc157426b13

      SHA256

      4d19aa550256c1df73592c1b4f5ba0d953f695974c93f147ab39f660fb75612c

      SHA512

      45261f5f79a9819a3a19a7f97b85c9e14db178e7f0b89086fb46da3874f967136fbee00dd2a85361610d3f445cdfae795949e8df1a90ac0ca3825c2befd44c79

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      387B

      MD5

      431f005860fa2fdf3d6b082dc6ad59bb

      SHA1

      9b4085fc1e90f9fd44639b30ca8c3fa7f4490110

      SHA256

      b865464421a9a2581b4b8a79b9a937989bd21a59e847c7ff589d6f60280cea7b

      SHA512

      71e67beb40c5f5df1a48a0545a24ab9d45c42f6829aa16a34e99674b58d4554be7dcb705d26ba64ec41315e2134f0a179cb629ea66bacc5561d91aa76a732d5a

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      122B

      MD5

      250b4caeba60ddf53228405750ba66ca

      SHA1

      422ab714feb34e9f3b4f1cbe669887bcd581ddb1

      SHA256

      2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

      SHA512

      373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      395B

      MD5

      67854eda16b5929b860967c2eb724a1e

      SHA1

      025d13036e031c2faed7cfd9cabb95d76a6f2a05

      SHA256

      45b8d6472fa5ce65603b29bb467ec0776a6ddc8d8f3f9ad9e1fe3d09f40f2aa8

      SHA512

      3d076d712ad7a17085720ce9a3d37dea9ae57a7f5678c1170fd153ac8effb19a694ef64e054b9926675f9ed02d55aaa269c8a052fa9b33ac04efc8e491d9ab77

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      607B

      MD5

      f43c62d47a6375ffa077deb174efb36d

      SHA1

      be93bf4d863f29145df39cf83596beceef15ce67

      SHA256

      0dbdeb9e1532ffae2e5a910cde26295ca7cb28c6839551e388f1fc8bb6f7d407

      SHA512

      7e96ee1fbd2689e9e1e85d2394cc1bca8e178712d5f5f8de041411ff186a04d862127d9b51665fc99fb6b5fd9c17bf0d2988acb0c704141f61a3f311a9caf024

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      665B

      MD5

      3458c5a0c6109cde0126664d39987982

      SHA1

      4d089e84b4a8374f8c9910065eab800408d77581

      SHA256

      0958576219c44a4688577645f6d58b3a863506c2b1b7abd0f9a8c438d326dbe1

      SHA512

      8930048d3425465ea0bc10b58dfb98d2d6908e200c217d2684d4cc68d204b9fb3b998ec51f7a5a098e6c6c017d123fe1ae7d7adf84d0c6d3b2e62b67729adc99

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      719B

      MD5

      0c0d8124bf78ad7f55aebf7d7b08d520

      SHA1

      881f2a238734da817faad57fc7e3c76cc966dfb7

      SHA256

      40dd8d1078fb582b2fb466dccce03514036f0b4ed233f4d9ddd83e2dbc384ba0

      SHA512

      73efaf88fe3eec52a4b2a38210ae511bb8b12598f89b7ad348013b326f4ef86166ab61d0c72266343cba4d87a6c7f92ec26b74d91ce5b1b272b3a2c0c14f5d61

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      796B

      MD5

      524626e42579bc1f131462c54220c0a4

      SHA1

      953d3eb6a1d8a1224c0f8e817f9170236a18fb2a

      SHA256

      124c79c79085717efdae798e8cc72097791887565c42c312e3fe9f1ccceb60dc

      SHA512

      75d4046de77131c0b92a83a6588c19beff012ba37636c5aaac5fb4669a4514c156cd5c3bba0a7420ae21456aecb5fde99d8fb50cc55bb192ecf61216206a5ef0

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.google.firebase.crashlytics.xml
      Filesize

      333B

      MD5

      26c1478f91b3c401e78cd80c19b77b0d

      SHA1

      ca7b87568bd10f7fd7ef06641dfe204177102857

      SHA256

      3e10c4274629e84bd4cf25d260637ba89b6fd3f4b8b778e9ab2e8e716bccdd3a

      SHA512

      da20e42d1c4ebcc39b84a884585d64dd73b6b9083dbd667c56befa2671c662219bfc255dae8c4a15ce2ece4e3cbadbe82ff54304355ec233ff6d1ffa787c2e2f

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.google.firebase.crashlytics.xml
      Filesize

      235B

      MD5

      642f4721a3276cc631cd503dc1f377d5

      SHA1

      690ac167c5672a7891fd44b0f4ad8456aee4a0b2

      SHA256

      ccf9bdbc8109361488530e92d06762f94cdce8cc0dd52422e3e91ee0bcd2b9f3

      SHA512

      921a798d250f67364e4b18ba256ddae4857b22f056c4c348ab71d5fb9596c1f4023213895374a92d8f5586edfc4a42228d8fd92e4b305aed7641622f8ebd58da

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.shadyspy.monitor_preferences.xml
      Filesize

      448B

      MD5

      9299039f14a4bc3438249a408932c69c

      SHA1

      f17813d475d5c69aff6fe90a3203cbc2d5e10430

      SHA256

      a34cdeb450cbe6bb5b9213a6ae4241a8d7917f681267ab6c5788b32f6466f6e9

      SHA512

      bc2a8a452650a24c23a26840abf93c35c22303ba11fb36d69c2a050b64df138e6c4b05ee94e3dce5b4c4244a031abcef30f887534f7e7906351c7a06e5865d5c

    • /data/user/0/com.shadyspy.monitor/shared_prefs/com.shadyspy.monitor_preferences.xml
      Filesize

      657B

      MD5

      66836bf3a6af3d703db904c45bac6940

      SHA1

      6ac97971e0b81e3741eefb0c56b5eddfd3c75332

      SHA256

      5423966faa033d45c3655ced946dbc461910ae4e3fc014fe2737d1115c4f026f

      SHA512

      17c637474b106184f135cf4ba9aa26eb0b0e453d166f8956de36d8d96423a03dbe30d008305ea80086fdeac5befb2637719af0540d97993833beb291c38cea81