Resubmissions

29-08-2022 12:11

220829-pczehshaal 10

29-08-2022 12:10

220829-pcgvgahaaj 10

29-08-2022 12:00

220829-n6gk5agggl 10

29-08-2022 11:45

220829-nw4ynsgfej 10

Analysis

  • max time kernel
    3917817s
  • max time network
    109s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    29-08-2022 12:11

General

  • Target

    My Live.apk

  • Size

    1.8MB

  • MD5

    95c5e37182fc9bb67078f8a221cf5a7d

  • SHA1

    8f4ff23da0c0c2bdfc7edad7348e782883335245

  • SHA256

    571fec4ee505818b1f24341ef090523b236cf0ee144527403fd4b49e3f85a892

  • SHA512

    110e876da9ffc66b723e3acdc040e3bd3156acc2625312fc4f8cd19e1e169ce39b9db6b554db6cd1832eaaaa04fae9836852a5f0ed5cf35aa30996488b6523fd

  • SSDEEP

    49152:6xhDjr2ivzr2nBf0iJOcmm/XcrpUhxdbaSux17jdk/I:6xJ2SinBhbV/XcrpCnp8jdh

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • edward.org
    1⤵
    • Acquires the wake lock.
    PID:4656
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4714

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/edward.org/cache/~test.test
      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/edward.org/databases/google_app_measurement_local.db
      Filesize

      88KB

      MD5

      8dfcfdcef5a9793fb83bda404ec3f42b

      SHA1

      dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

      SHA256

      a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

      SHA512

      e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

    • /data/user/0/edward.org/databases/google_app_measurement_local.db-journal
      Filesize

      1KB

      MD5

      fedcd2b683f23dabc1ffbdad973e1df7

      SHA1

      f02a7288df4a77a0db89c5c668929c8854cfa025

      SHA256

      75f82cb8ade15c52937b5922424d321f493f0d3b0f6d256eb28d52f4e45a3f1a

      SHA512

      44f579256ba62cbc1b8bada3a93ac8782a0b562876ef22ab61da1d2531619ecd4cc38338d83c386473818fa9d27b8712d748899a704bc7005576fbd0335fd910

    • /data/user/0/edward.org/files/PersistedInstallation4773333804674678450tmp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/edward.org/files/generatefid.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/edward.org/no_backup/com.google.android.gms.appid-no-backup
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/edward.org/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      239B

      MD5

      9e5f1dc4cda1705616c67767874eec0a

      SHA1

      34ad8a78b453dfdd833bac8bb8601e5be600ffa6

      SHA256

      22e6bec538619cbd400f2e668ce3faf36b287b94402182f39eecf27b4efeae71

      SHA512

      318ab7f0d93a6856b6fbe2071d20a4210d929d9aaa98e6157b17ab333b9b93fc7fa3ab4c593403387cc7fde0b9b66c5444609817d31d21892cf9ebf111245ec1

    • /data/user/0/edward.org/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      134B

      MD5

      5388edfcfeb000f0a530b6c6d1ee6daa

      SHA1

      ef3c2de62f693d7b2f27cab2232b1e166e5126f3

      SHA256

      60172c9e4f77ed04cef3a0244cc20c8683074e3d105304de76e7875054ce67bd

      SHA512

      8f0043f5bda99e6295dd877a75f264b32f514711c1bb32bed81da166a8bf0c2c0d19645c36ec359884954401c0111a6e21e9cc9df036e86c53976d2bf2fb30ab

    • /data/user/0/edward.org/shared_prefs/FirebaseAppHeartBeat.xml
      Filesize

      188B

      MD5

      e8bd252792cc744c19afe2de715858bc

      SHA1

      888e06ae394b194d0687d9a8a58c9dae3aa6eaf0

      SHA256

      922e031925ed4231e4e73c78078b79418b7fd4ff53e15d0f8281d70d08d6db01

      SHA512

      d939e66defff51bf2b85abeae560566edf6065e9657bfc9597d28bafa0cc4953c12f4612fc1a482a84d6faebdc171d328870d861816a097c38827f09969d86bd

    • /data/user/0/edward.org/shared_prefs/com.google.android.gms.appid.xml
      Filesize

      129B

      MD5

      162a633a142d241f49b723bac11d001b

      SHA1

      334825c29e45f1861bfe34909abfe80843594a25

      SHA256

      bb70c77918a23dc82b394bef6d8d7d094a4ddf52aeafba69bcd9ce5b031c0f01

      SHA512

      4ce9cb8b07d971f48bef84d0f79f6da541f81962470deec18cfa70b7b8cfe4f16e22eeb9c31aff3b1945995abe30c87565d1df0f0410d116f98d4394a6e51cf8

    • /data/user/0/edward.org/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      720B

      MD5

      70ced1d42a99f7e8016fb9b9d88f65d5

      SHA1

      899ae7160c12e2005f7b7e12258b8965b75679ee

      SHA256

      b483a32b195ff24e8af5d8eeafce60e14acdf9c9e003a352b08c0415f4220474

      SHA512

      22c06ff5ea75987f36106383ca95590753adfd78f5b8debc0d4d020d202d2d9cea1a0c8ce88438e892a24939babefccb4d595686e251d848787a6a2b89bb393e

    • /data/user/0/edward.org/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      774B

      MD5

      9823cf7f00c7ec60739034df7fd6111d

      SHA1

      4d1fdb42144fb42eb49e0fba3c0bf15737776e3f

      SHA256

      700566681b6ff650c57e412c573f6c08699575c881eaf3b5d80881b5bb776e86

      SHA512

      9599455101c3cb24f2ee59b02c98ae67d97bff3784e4e282a9b097601f00d8f962d01acf90856e5f20dc42afefffdfe02dd30ad6d64736ca1b9d063c33836df2

    • /data/user/0/edward.org/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      851B

      MD5

      f00fa0fe76fcfd773200273540f13585

      SHA1

      a62b56f82720893034c4fc884c7e8b2983278907

      SHA256

      0f916ea1a9d1b968cc66fa50ed022668d377126c39799a0a47fb25b2b92358f1

      SHA512

      ef164d160a11433a81f58767447d575febafe723d17a160a9bbaeab070917400308cf7656ad44ab8652be1685800a7288899394a4bc9e19519faff7ed8d32a6b

    • /data/user/0/edward.org/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      851B

      MD5

      112cb887bbf5e8afdac9899a956fbc63

      SHA1

      70673f65970c7ca0362c18d9fe8eadc1af701031

      SHA256

      75532c8105999c94906301c159b909c4980fd5be096b11c93782e46063fef543

      SHA512

      59c7dcc69ab9f2ce1f3fd6406ae93a12853e965a488ce9ff45cf386f47645f03392cb986570f78d82fa41c0c86698a29488d36336f7faa865f07984301501399

    • /data/user/0/edward.org/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      850B

      MD5

      069ef6f77570c91bf2466f843ac7008c

      SHA1

      2d8c44977c78aa54b4e182a0f291518d24536cf4

      SHA256

      5606cb5a5b43cafebcc2190c713466de14ea6768d7a49a39f24ab339da61469f

      SHA512

      0c086740815fc53036a9e965955b3dce8c41a91bd1c60663680a8fdd45b40a9173f071ed8fadf794a5e0e363e969876851d4a2f050c79aacd556a68374feb858

    • /data/user/0/edward.org/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      851B

      MD5

      71be57d76467d920591433620eee277c

      SHA1

      76d478f007646955ac04983a169f04fa18dd1c6c

      SHA256

      89d15a52c9d05cb10c5e5400dd71faf7587e35934c88a77cbb294997898ef24f

      SHA512

      aff749858fd3a0772e9e847a332ff27fa9308bd3ddecfecd167bd41f9fca042915cc987ceb96d72cfa346c385fe63c470928e994d77f61889879f30167556db3

    • /data/user/0/edward.org/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /data/user/0/edward.org/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      450B

      MD5

      b8b3373e6e7af93ee2c59f614116e8fc

      SHA1

      fe786a23a9d5ff1f3a5756f68464a62f7404ee99

      SHA256

      949f3ab1f41a3dc34a081cecc385f272d63a1e5cf41dbe06364d5dd896585587

      SHA512

      c698d2fafea93082da434e550e542cca563d40d68463372fe7049efaad272015ff78bea6f14628f505b08e2299cd0fb55d65b9c426bcd3ef283bec5c6f269a40

    • /data/user/0/edward.org/shared_prefs/com.google.android.gms.measurement.prefs.xml
      Filesize

      662B

      MD5

      a5d9f4e538ea6485dc5d08b86e80f2bb

      SHA1

      dbf898183701c59588cdf8d709d64e1ec2fb1bf6

      SHA256

      fd502304c6223cb0e991031f2c8164daba1b95c8335e63d23d9059f52cd1ffe7

      SHA512

      8238b6299d06e9e1a16f45c95d8a1c9960536d2ffde9c97b71b54ef103dda3eef25340f20c60eccf72872178ae4981db96258fa074da334dec1e520758d12bb7