Resubmissions

29-08-2022 12:11

220829-pczehshaal 10

29-08-2022 12:10

220829-pcgvgahaaj 10

29-08-2022 12:00

220829-n6gk5agggl 10

29-08-2022 11:45

220829-nw4ynsgfej 10

Analysis

  • max time kernel
    3917711s
  • max time network
    27s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    29-08-2022 12:10

General

  • Target

    My Live.apk

  • Size

    1.8MB

  • MD5

    95c5e37182fc9bb67078f8a221cf5a7d

  • SHA1

    8f4ff23da0c0c2bdfc7edad7348e782883335245

  • SHA256

    571fec4ee505818b1f24341ef090523b236cf0ee144527403fd4b49e3f85a892

  • SHA512

    110e876da9ffc66b723e3acdc040e3bd3156acc2625312fc4f8cd19e1e169ce39b9db6b554db6cd1832eaaaa04fae9836852a5f0ed5cf35aa30996488b6523fd

  • SSDEEP

    49152:6xhDjr2ivzr2nBf0iJOcmm/XcrpUhxdbaSux17jdk/I:6xJ2SinBhbV/XcrpCnp8jdh

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • edward.org
    1⤵
    • Acquires the wake lock.
    PID:4672
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4740

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/edward.org/cache/1
      Filesize

      17B

      MD5

      7ed86fb6d81fe388e7b339c941ab2834

      SHA1

      1f9eda00cd367501653f4696e069a9213b88773c

      SHA256

      56716f79167a0b3d1db8ab6efdcef1e7016d73f36d2c50aca2bc65e1cfa14875

      SHA512

      4a22290dd2d23914fbe0d3ccc985f338ea7a04c4604569b2d56f542bb757052fe1ec560296758708100e3ed6c73c9e068ff6bd46ddc7d4f21d1efa65719cfc40

    • /data/user/0/edward.org/cache/~test.test
      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/edward.org/databases/google_app_measurement_local.db
      Filesize

      88KB

      MD5

      8dfcfdcef5a9793fb83bda404ec3f42b

      SHA1

      dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

      SHA256

      a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

      SHA512

      e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

    • /data/user/0/edward.org/databases/google_app_measurement_local.db-journal
      Filesize

      1KB

      MD5

      1706b3cdcde61d73bf15c445acdfb95b

      SHA1

      56f84f7bc52cc024462bcb2232d7fa4fe2cbdb77

      SHA256

      a99c24228067d4aeaf8f0534d4ca781be988c9d5a125ce50dbd372d621748776

      SHA512

      f23aa40c6b413029f8d7232818cec462e97342a6d7e63ffb9d3d47071408fdc0fed8967e86e50ec9d2d41e98e6adbc9fee31688c4c4fa8e279b67946692371b3

    • /data/user/0/edward.org/files/PersistedInstallation260463583377661714tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/edward.org/files/PersistedInstallation8333254459732945273tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/edward.org/files/generatefid.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/edward.org/no_backup/com.google.android.gms.appid-no-backup
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/edward.org/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      239B

      MD5

      190b161c62c8789f359849a02a0e7c3c

      SHA1

      4a9dbacd7ddf5d9f4320b307fdca55ae7ae5da8d

      SHA256

      2f3ed8f64f042da732ce43c53fb7a584674eb934fdbc6bd00dda560acfc409d5

      SHA512

      c1b47a55fe81f556e86bb4f4b3537dd9c81a6f556e50717bc82a8ab0611a736244618f311d721a632f6b0a8c6c47b0313ff331bdf189f639f4f8e02184bd54aa

    • /data/user/0/edward.org/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      134B

      MD5

      c9a6c27e5ba4c9ed391b4e972e9c104f

      SHA1

      fc837510debf75253a8a5341efffeb684b4f84c4

      SHA256

      a49c9e02458aeddd759499af1bdebe25292d90aba8532ae715bdda4fab2d6595

      SHA512

      e604e10a96abaee0348f02d42e33ad8037e8e9829edd8c0f7dea7f4106f1dd48bd118d89dde8c7e86f9aea44f090abe95a74e4f0431708afa1dbb08876b5baa2

    • /data/user/0/edward.org/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      188B

      MD5

      61c4df1263f3bff60af17b6f28d03d52

      SHA1

      a5541d8d7ef62f6700a0070be148b87f83e3cbd4

      SHA256

      7b3071b6d9f274b4c3b14caf46f377fe3d0f3924928a26824dbe37971e1c9ad6

      SHA512

      c15e5ed0e277d20d6b807c6efc20dfa1dfc90d47a4c21b69668e2b8bcc89a8fc3c4f198296306771a6deb6e5b0eff2d100f1871e18983420dbe36f7b04affde3

    • /data/user/0/edward.org/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      386B

      MD5

      f908b30144be0e51c920462e97c0853b

      SHA1

      26c98f1934ecbee27658cc2ccefdad30e5cb43eb

      SHA256

      5f7b590d420e15284cbfd4bf2d521bf2d5877da7b724df673557486dfc8a48d1

      SHA512

      0e4fa4a6bcdccddaab66261252f7333e7f4f4bee042b5de3919dc87b1428f871ff5720ef9a68907a2bcea430c9768b52aebef8dbe7b5d9d37b5bc8577f95e58f

    • /data/user/0/edward.org/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      445B

      MD5

      11577fb09cf1d32b3937bd9df160c289

      SHA1

      3acac2174191776f57433e256f8268638318704c

      SHA256

      9de9876fd5b292df7c31088294c8e4fb26ea738c4effb8d87381536062786e1d

      SHA512

      93a4df408eedc89ab0f7a43bec8253ce68deb4a6ffb01301192dc7da4ea6de934d881a07467134bd7d773e78ae22084d3552f34359cbe7fb0e674364fb157ba7

    • /data/user/0/edward.org/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      437B

      MD5

      e41a4eafa1bfd954c52b9ad5801461e0

      SHA1

      0dffc53597b3f58127287bb89c3453db722857bd

      SHA256

      e74ea0b8095d09e093f6c911587430a70565cac6cb28a01fbb341f186b7d44cf

      SHA512

      3558b7ad27113802425acfd7f063f8d4fb6594a74ceb02c37e6e029896aebe3503e6aa8a4ea287ef455234e2199bb03a768f81532bb48b82f65f2838afec27c6

    • /data/user/0/edward.org/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      661B

      MD5

      fbeb98bebfb13533ca2282e3d4d7b4f0

      SHA1

      85987792fa813c900958e0d4a4f5fbfc906bcd26

      SHA256

      aeb618b5fb282c71dee2701a769e622d971dfc7d353a1657ca05ae555c28ce6b

      SHA512

      9776bd069b9c5130fd58b39dcd8025bb07efc8df107bb14332f2af29fca53fe85bee926732c713d540428ab1ef782a5a5cb45f4a6c2888e48fc24b22fc39197a

    • /data/user/0/edward.org/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      662B

      MD5

      ca3c3f2a9054307c735b5208821d03db

      SHA1

      24da8f2736ae28b3d569fcd093b0305c1d766558

      SHA256

      37bc5289f5584421b3afcecfddf6798e7fbb0ec6b849a4d7e057f2618859d12a

      SHA512

      076fb694a51fc839e94ec3ab6601d6cba4c1282dcb675e577b8ac3f1aca6d5b6291d392413daf140caa7c9b7d3d72ca69df6b8c00600a4021feff1fedc79cc01

    • /data/user/0/edward.org/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      720B

      MD5

      6fc75d519b166dbb13a06714ccde7553

      SHA1

      06141a62e3ff9082eb41ada761249b68c5479947

      SHA256

      488f9e1552ae61bb1bca2421743933c36f80da59ee9bb75b8ab01c1b9aeeba73

      SHA512

      bff47439b186e341167d5267b839e374a3d6f361ee266eecd43404580dd2166a943718542ce7750dd3e6179ce7ea6103d9f5de83a1438fa98f86463039af3660

    • /data/user/0/edward.org/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      774B

      MD5

      1171b14caf8adbf0061a5a729578fdc4

      SHA1

      cf53069e1bba98083436d9c4f7f5f6851eb95ab9

      SHA256

      bf21c16c2bd6b4212ceff5d3d9f6a8e1e760c45e8ba3df94d09e5803ab4c63a2

      SHA512

      f958dbc34d25176cbf29f974ebaf956a89fd4e0fad18ae810800da8996f172fa3cd9d2329cf86d2cdfea46f6439afdd96417cc6b8be232e4e06531ec048a340f

    • /data/user/0/edward.org/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      851B

      MD5

      c317f35ce8659946799e68ab03b9be2f

      SHA1

      9f80e447eda6cdeae1a194d8528150c65f24eb84

      SHA256

      70f1da3e0dca11f28a5f7611c2dc51420af1fb281259fe99583aa89a2b2a4613

      SHA512

      8c824626a2403e44964579262db8908568e00f523922894609eec583f760b2c4919f30c522d3c27f43b86c24f2fd941a4f60358365383beb592b5c08b36c0f46

    • /data/user/0/edward.org/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /data/user/0/edward.org/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      450B

      MD5

      9bc4ecee23d57e1e6839c5335081942d

      SHA1

      b713ca86025c2f811f45009b55561a96efa1a81d

      SHA256

      d483229d785fea33ad53f71f99675ae80d5d6ef25b97670c7a97525fbf30dbee

      SHA512

      811be8e0e2e4b64e8c3b99a3efed9b43f057cbdc047141e505234b92a0bedd9cfdfdb6cff8b70b982c21653c1bac48720a4fa6859af189216be418af2d5d87a9