Resubmissions
29-08-2022 12:11
220829-pczehshaal 1029-08-2022 12:10
220829-pcgvgahaaj 1029-08-2022 12:00
220829-n6gk5agggl 1029-08-2022 11:45
220829-nw4ynsgfej 10Analysis
-
max time kernel
3917711s -
max time network
27s -
platform
android_x64 -
resource
android-x64-arm64-20220823-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system -
submitted
29-08-2022 12:10
Behavioral task
behavioral1
Sample
My Live.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
My Live.apk
-
Size
1.8MB
-
MD5
95c5e37182fc9bb67078f8a221cf5a7d
-
SHA1
8f4ff23da0c0c2bdfc7edad7348e782883335245
-
SHA256
571fec4ee505818b1f24341ef090523b236cf0ee144527403fd4b49e3f85a892
-
SHA512
110e876da9ffc66b723e3acdc040e3bd3156acc2625312fc4f8cd19e1e169ce39b9db6b554db6cd1832eaaaa04fae9836852a5f0ed5cf35aa30996488b6523fd
-
SSDEEP
49152:6xhDjr2ivzr2nBf0iJOcmm/XcrpUhxdbaSux17jdk/I:6xJ2SinBhbV/XcrpCnp8jdh
Malware Config
Signatures
-
Acquires the wake lock. 1 IoCs
Processes:
edward.orgdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock edward.org -
Reads information about phone network operator.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/edward.org/cache/1Filesize
17B
MD57ed86fb6d81fe388e7b339c941ab2834
SHA11f9eda00cd367501653f4696e069a9213b88773c
SHA25656716f79167a0b3d1db8ab6efdcef1e7016d73f36d2c50aca2bc65e1cfa14875
SHA5124a22290dd2d23914fbe0d3ccc985f338ea7a04c4604569b2d56f542bb757052fe1ec560296758708100e3ed6c73c9e068ff6bd46ddc7d4f21d1efa65719cfc40
-
/data/user/0/edward.org/cache/~test.testFilesize
4B
MD5098f6bcd4621d373cade4e832627b4f6
SHA1a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA2569f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
SHA512ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
-
/data/user/0/edward.org/databases/google_app_measurement_local.dbFilesize
88KB
MD58dfcfdcef5a9793fb83bda404ec3f42b
SHA1dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b
SHA256a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2
SHA512e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807
-
/data/user/0/edward.org/databases/google_app_measurement_local.db-journalFilesize
1KB
MD51706b3cdcde61d73bf15c445acdfb95b
SHA156f84f7bc52cc024462bcb2232d7fa4fe2cbdb77
SHA256a99c24228067d4aeaf8f0534d4ca781be988c9d5a125ce50dbd372d621748776
SHA512f23aa40c6b413029f8d7232818cec462e97342a6d7e63ffb9d3d47071408fdc0fed8967e86e50ec9d2d41e98e6adbc9fee31688c4c4fa8e279b67946692371b3
-
/data/user/0/edward.org/files/PersistedInstallation260463583377661714tmpMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/edward.org/files/PersistedInstallation8333254459732945273tmpMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/edward.org/files/generatefid.lockMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/edward.org/no_backup/com.google.android.gms.appid-no-backupMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/edward.org/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
239B
MD5190b161c62c8789f359849a02a0e7c3c
SHA14a9dbacd7ddf5d9f4320b307fdca55ae7ae5da8d
SHA2562f3ed8f64f042da732ce43c53fb7a584674eb934fdbc6bd00dda560acfc409d5
SHA512c1b47a55fe81f556e86bb4f4b3537dd9c81a6f556e50717bc82a8ab0611a736244618f311d721a632f6b0a8c6c47b0313ff331bdf189f639f4f8e02184bd54aa
-
/data/user/0/edward.org/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
134B
MD5c9a6c27e5ba4c9ed391b4e972e9c104f
SHA1fc837510debf75253a8a5341efffeb684b4f84c4
SHA256a49c9e02458aeddd759499af1bdebe25292d90aba8532ae715bdda4fab2d6595
SHA512e604e10a96abaee0348f02d42e33ad8037e8e9829edd8c0f7dea7f4106f1dd48bd118d89dde8c7e86f9aea44f090abe95a74e4f0431708afa1dbb08876b5baa2
-
/data/user/0/edward.org/shared_prefs/FirebaseAppHeartBeat.xmlFilesize
188B
MD561c4df1263f3bff60af17b6f28d03d52
SHA1a5541d8d7ef62f6700a0070be148b87f83e3cbd4
SHA2567b3071b6d9f274b4c3b14caf46f377fe3d0f3924928a26824dbe37971e1c9ad6
SHA512c15e5ed0e277d20d6b807c6efc20dfa1dfc90d47a4c21b69668e2b8bcc89a8fc3c4f198296306771a6deb6e5b0eff2d100f1871e18983420dbe36f7b04affde3
-
/data/user/0/edward.org/shared_prefs/com.google.android.gms.appid.xmlFilesize
386B
MD5f908b30144be0e51c920462e97c0853b
SHA126c98f1934ecbee27658cc2ccefdad30e5cb43eb
SHA2565f7b590d420e15284cbfd4bf2d521bf2d5877da7b724df673557486dfc8a48d1
SHA5120e4fa4a6bcdccddaab66261252f7333e7f4f4bee042b5de3919dc87b1428f871ff5720ef9a68907a2bcea430c9768b52aebef8dbe7b5d9d37b5bc8577f95e58f
-
/data/user/0/edward.org/shared_prefs/com.google.android.gms.appid.xmlFilesize
445B
MD511577fb09cf1d32b3937bd9df160c289
SHA13acac2174191776f57433e256f8268638318704c
SHA2569de9876fd5b292df7c31088294c8e4fb26ea738c4effb8d87381536062786e1d
SHA51293a4df408eedc89ab0f7a43bec8253ce68deb4a6ffb01301192dc7da4ea6de934d881a07467134bd7d773e78ae22084d3552f34359cbe7fb0e674364fb157ba7
-
/data/user/0/edward.org/shared_prefs/com.google.android.gms.appid.xmlFilesize
437B
MD5e41a4eafa1bfd954c52b9ad5801461e0
SHA10dffc53597b3f58127287bb89c3453db722857bd
SHA256e74ea0b8095d09e093f6c911587430a70565cac6cb28a01fbb341f186b7d44cf
SHA5123558b7ad27113802425acfd7f063f8d4fb6594a74ceb02c37e6e029896aebe3503e6aa8a4ea287ef455234e2199bb03a768f81532bb48b82f65f2838afec27c6
-
/data/user/0/edward.org/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
661B
MD5fbeb98bebfb13533ca2282e3d4d7b4f0
SHA185987792fa813c900958e0d4a4f5fbfc906bcd26
SHA256aeb618b5fb282c71dee2701a769e622d971dfc7d353a1657ca05ae555c28ce6b
SHA5129776bd069b9c5130fd58b39dcd8025bb07efc8df107bb14332f2af29fca53fe85bee926732c713d540428ab1ef782a5a5cb45f4a6c2888e48fc24b22fc39197a
-
/data/user/0/edward.org/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
662B
MD5ca3c3f2a9054307c735b5208821d03db
SHA124da8f2736ae28b3d569fcd093b0305c1d766558
SHA25637bc5289f5584421b3afcecfddf6798e7fbb0ec6b849a4d7e057f2618859d12a
SHA512076fb694a51fc839e94ec3ab6601d6cba4c1282dcb675e577b8ac3f1aca6d5b6291d392413daf140caa7c9b7d3d72ca69df6b8c00600a4021feff1fedc79cc01
-
/data/user/0/edward.org/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
720B
MD56fc75d519b166dbb13a06714ccde7553
SHA106141a62e3ff9082eb41ada761249b68c5479947
SHA256488f9e1552ae61bb1bca2421743933c36f80da59ee9bb75b8ab01c1b9aeeba73
SHA512bff47439b186e341167d5267b839e374a3d6f361ee266eecd43404580dd2166a943718542ce7750dd3e6179ce7ea6103d9f5de83a1438fa98f86463039af3660
-
/data/user/0/edward.org/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
774B
MD51171b14caf8adbf0061a5a729578fdc4
SHA1cf53069e1bba98083436d9c4f7f5f6851eb95ab9
SHA256bf21c16c2bd6b4212ceff5d3d9f6a8e1e760c45e8ba3df94d09e5803ab4c63a2
SHA512f958dbc34d25176cbf29f974ebaf956a89fd4e0fad18ae810800da8996f172fa3cd9d2329cf86d2cdfea46f6439afdd96417cc6b8be232e4e06531ec048a340f
-
/data/user/0/edward.org/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
851B
MD5c317f35ce8659946799e68ab03b9be2f
SHA19f80e447eda6cdeae1a194d8528150c65f24eb84
SHA25670f1da3e0dca11f28a5f7611c2dc51420af1fb281259fe99583aa89a2b2a4613
SHA5128c824626a2403e44964579262db8908568e00f523922894609eec583f760b2c4919f30c522d3c27f43b86c24f2fd941a4f60358365383beb592b5c08b36c0f46
-
/data/user/0/edward.org/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
/data/user/0/edward.org/shared_prefs/com.google.android.gms.measurement.prefs.xmlFilesize
450B
MD59bc4ecee23d57e1e6839c5335081942d
SHA1b713ca86025c2f811f45009b55561a96efa1a81d
SHA256d483229d785fea33ad53f71f99675ae80d5d6ef25b97670c7a97525fbf30dbee
SHA512811be8e0e2e4b64e8c3b99a3efed9b43f057cbdc047141e505234b92a0bedd9cfdfdb6cff8b70b982c21653c1bac48720a4fa6859af189216be418af2d5d87a9