Resubmissions

27-10-2022 16:01

221027-tgqemacff8 10

21-10-2022 10:53

221021-myzlasgda4 7

Analysis

  • max time kernel
    4197623s
  • max time network
    121s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    21-10-2022 10:53

General

  • Target

    039fc34ace1012eff687f864369540b9085b167f0d66023f3b94f280a7fdf8b7.apk

  • Size

    1.3MB

  • MD5

    34be434996b9bc19112f875f0a3711d2

  • SHA1

    ad451e4fc750c83a58fe8f7234f1766ad315a565

  • SHA256

    039fc34ace1012eff687f864369540b9085b167f0d66023f3b94f280a7fdf8b7

  • SHA512

    28d6385703c1591853de9bdf7724594ba0187aeb40accf150b877a2785e915c7dd7ef8720f9cc8f0e33793b6c2b6d88845f3f7fb818e8575cf9daf259723dfd2

  • SSDEEP

    24576:RknbtoZcY5eJDj+6DiASSjctlRSEuw/pzIx27hCzGLQLfFK1RnHrmVXyQZ:RknbtoZcY5eFJibtrSEucp97hCzGLQbX

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.apps.amaq
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4114

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.apps.amaq/app_webview/GPUCache/index

    Filesize

    20B

    MD5

    93027d42b314432c4216e6cfca48b384

    SHA1

    43448dd8102979c3926828182579691945eedd4e

    SHA256

    3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

    SHA512

    a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

  • /data/user/0/com.apps.amaq/app_webview/GPUCache/index-dir/temp-index

    Filesize

    48B

    MD5

    4ff0c1c66b54753c4ad59ad29002be37

    SHA1

    f364ae87fa816a3e0fa7c60fe066db696c46112c

    SHA256

    c76aeef2ebe386d630f954cbfa2f79fa469922045b2808a6b0a0e902b66bbf42

    SHA512

    138d844fb02acd8bbad8e8a0d83d1f44701b734f602c0a43fe66f0c05a663c810d3bc5b4977c514def51dad1e37fd67350afab8ecc043e6dddf50c5e05074767

  • /data/user/0/com.apps.amaq/app_webview/Web Data

    Filesize

    104KB

    MD5

    dc79f9ce5f3ab5270b33e61119dfc959

    SHA1

    1844bf222a5144b513dcf2fb50a18c011701c647

    SHA256

    47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

    SHA512

    18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

  • /data/user/0/com.apps.amaq/app_webview/Web Data-journal

    Filesize

    1KB

    MD5

    a5790eca6e94f5dd7ddff058150e9e86

    SHA1

    a3c673af6f23141811bb7ed77755c35dc923bc1f

    SHA256

    f6b73c5fa0b512b34a2f310ceb709b4e8587d45070d7d4542b4ac2f8edc8c7b1

    SHA512

    9fdc8eedf6d534e7ed138df60ad644a4834c1b4e3dba2dfce76c1f483fd7b1061c1f2110de6ff838aaa281b9ac93791891ec465b1bd01eec1d300190eae3be70

  • /data/user/0/com.apps.amaq/app_webview/metrics_guid

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.apps.amaq/app_webview/metrics_guid

    Filesize

    36B

    MD5

    56f8d20d3206f5f9da072efdbb150b76

    SHA1

    3863be31b8f6d1688707b2c41697efc734984374

    SHA256

    3a03ecc1c6f8b5b71e99cc1479607101aac23a8310a0bbb4a06fb7894cd39bb5

    SHA512

    99c4e44cd1cde8aaa1d118abaafbb307406d67e3bca5e220a0f4723899563d644d772b7439c172c95707e813e79922883727f3cc46c58065804747dfe6c77f25

  • /data/user/0/com.apps.amaq/app_webview/variations_seed_new

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.apps.amaq/app_webview/variations_stamp

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.apps.amaq/app_webview/webview_data.lock

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.apps.amaq/cache/.com.google.Chrome.lDA5Mu

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.apps.amaq/databases/DB

    Filesize

    20KB

    MD5

    017f4fdd4ebaf812d37423ba76397c7e

    SHA1

    f099381c8ba880f6f601697e48467d7f3ce9c5de

    SHA256

    bf57d74b5b1b91992ebd24582ba9ea8067f744a216a1467326add749d47d0517

    SHA512

    869ac1a7d015969afa6eddd3308e42841f20bdfcd60ca23878c0643e5a258cb554d149b1224534d9ab646a68c465b9aada8d56eee1413230efc253bf25740816

  • /data/user/0/com.apps.amaq/databases/DB-journal

    Filesize

    524B

    MD5

    3b6126c91f838db321411ef26ca387ca

    SHA1

    4f2a2f9087cad18a53ae87bde901ae269180e155

    SHA256

    850153960ba91f308f4c0efc09ae8c479adaeb3dec3e420045d15e0089547f28

    SHA512

    fc81717325d203ad83af51207f3fde47e27e11bc1554e17de780d72fc0823d48fc63d42cc7dcc07356d18d5c43903cf74e0b94feb20999f6888a91678ec15b90

  • /data/user/0/com.apps.amaq/databases/DB-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.apps.amaq/databases/DB-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.apps.amaq/databases/DB-wal

    Filesize

    28KB

    MD5

    c0e13b2ddcab91125f3a3f5ea10ef576

    SHA1

    b65ea072deacdf8b78035ee13f6a55a0253b7bfd

    SHA256

    cd42221e3c1d0ffefe1b7886e8dd7c91a70402a7b29126db2f70f06117973e32

    SHA512

    055e269cc5b516abe6fb5afd690fdb41d8a86f7e3ffcbc3768324da0c1b6f7de4ab15c94441eaa42a41affbe2d0a4bf75ad01ce0493bf86e7b8b8017bb4f39e4

  • /data/user/0/com.apps.amaq/databases/DB-wal

    Filesize

    24KB

    MD5

    fe310273e93f357ea93f30b83c85c386

    SHA1

    9de82605cc0ae970c7f96497b0ea5b5dcadbde00

    SHA256

    3adcf070be933476e2a0d14a55ba3067ae0dad763d7c6d1850e0395b5f657c44

    SHA512

    f7674bd82a54e57c36c0522ad81661926d41790137430fba8c61ef885edecd3608c9506538126a6ae722d8223851c86ae8ba5589befe7a5a84b838b0d7490919

  • /data/user/0/com.apps.amaq/files/221021_125736615.get

    Filesize

    206B

    MD5

    12d5ad5a859c06521f5f3bb5159927d0

    SHA1

    dad13235cc92d28ee5121fec3be9307acea36fe6

    SHA256

    6abfe7b1becfb7854bfd60a2d37b76c4abdadddc96f00a2441896e0067851365

    SHA512

    33365d0c5079fe31061e9f18ffae269335ea63bdf8d30606f2ee49bcfae0d42bfca6f00af23321cfb59d9c6f84da6a0f283f33753c3503be7b7b064582da3744

  • /data/user/0/com.apps.amaq/files/221021_125736722.get

    Filesize

    51B

    MD5

    ae17f50206660e7448eccae7359dbd8c

    SHA1

    b94ae2c842f63b55b675c5a60dffa0bf3ad89b88

    SHA256

    de866f0e64d8bb6d0c16310bcef0f63a478d00d9e74e4c7f8ca768e306478e79

    SHA512

    a42aa79f36d856560596fb1fc683bb9dedde01bb2eec87696efc9c67915f969fcc9aeef7bd6cf75cc58ab41ea0c107bbbb1d6710f9ddfcf5f2f58f0c2f845217

  • /data/user/0/com.apps.amaq/files/221021_125736817.get

    Filesize

    51B

    MD5

    b52293e1783aaf378550c6fe59cbfa4a

    SHA1

    94a17745d6949eaccc6a7a323f29b063ecbbb493

    SHA256

    f8bcbc69a8109745dc49aa60d4be1bb2229a79c20a246950454a87be399fef2c

    SHA512

    78a85b4116ae2414d85f198087aa4993c105017b6cfc9e4317e001c5d21eb99c7de50f0ac80942cbfa268b8a9d315a7e19ee888eee6a69585428eb0d48e379ea

  • /data/user/0/com.apps.amaq/files/221021_125736869.get

    Filesize

    51B

    MD5

    9c9257a556d359a029e5169d37a621d6

    SHA1

    42106110dca60c1424ddf1b726abf6945857119a

    SHA256

    50c9a65c051c9253b36e512616c4835492210801cc2a3453f21614a962af8088

    SHA512

    bf70e95a1367f56e800de941e725b3cbee12d22297d0c54059a3d391b9e6cdfefc3c18dfe10c1c72c0e147c7f555d3c42bf5096f3713427af620f6352c8fcc20

  • /data/user/0/com.apps.amaq/files/221021_125736898.get

    Filesize

    51B

    MD5

    4a9670a8c17f70eeb2f866d09b35344a

    SHA1

    94b776531b54824bc77cc468615ec3e5532c3bef

    SHA256

    cb0d679fd6879c50fdfbb52cb2802a3504bc18a6cb015a2b8c5871fbc4132800

    SHA512

    4dfbe6e6439c95f6036e3aa14cf26af1c71dfcb8d8b05b3a07282b74b25da94f1183af3275e3046c8d861f32102f844909bb25aaa05d04f4e00a4fb8e2485835

  • /data/user/0/com.apps.amaq/files/221021_125737779.get

    Filesize

    51B

    MD5

    591653760f8d527115d5df18f39b5929

    SHA1

    126a1c6cc10da8b8928d9750abba40f38c988603

    SHA256

    3041c247d9dfe1d99dbadfad3284860c4436c1c79dc65733903cc228f314262d

    SHA512

    3988d9ee7604bfdfb21844c4b424fd235e8779a83f1b691452a6de1cf445570adc945cb68734cf999e0a70c38bc68a4da68009231cabc9c88a2297f51072d7af

  • /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221021_125736640.log

    Filesize

    352B

    MD5

    76e8dd0ab407c882b00ec329e338f76f

    SHA1

    6d7a634ab335e701dda3d4bd34e8a5e7ab7437b8

    SHA256

    3f01222f8ae21303014789edbca241d5123e034bdfc211d4360dba850d523307

    SHA512

    d75233b5e92ee54783bc20a193fe7fa47ccae011efabe5f47135b49378e66df0bdd63a73893987807a591a3354c02e65d1799b1a75960aba552d1145c840a730

  • /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221021_125736640.zip

    Filesize

    344B

    MD5

    e2a99b77d192d4e435d5643bd0abc186

    SHA1

    212f61bab278de983b430486a3eef7fc45b718fe

    SHA256

    db8630c161fec42a242a20f2a5d82a0be9dce787d15845a95dc42001770abcf3

    SHA512

    a6e46e06cc23e6cef310123d61cf8bbee46092be0d6e4d00b5c5295c32334101097368ae6782ba440474534ec55fd30fcbfec3fbe35dade840194ae66150cdd2

  • /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221021_125736749.log

    Filesize

    256B

    MD5

    d73491e644c89b7fdaa27a4d51f0abc9

    SHA1

    af0cbdfc5253ba5af78be35401fcfda0a11f2662

    SHA256

    eac8908e5528bcb6ffbf8f391323b93b5f857aaf253a1c821d556c6cd9119c5e

    SHA512

    ec38a6fe18167b2ccf8fb9e832d5599b02d61ce15742c09f52c8cc93cc3cf010e05f76c9febb97bc3f0245fafe830eb11717e7d24602199ca2245824b4bbcb9c

  • /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221021_125736749.zip

    Filesize

    241B

    MD5

    59c17295d7d6599923b909ee14af63d9

    SHA1

    104f766c64d4868c015b0c78f61dfd6a651261da

    SHA256

    bff12151ff3bd291ac1de457e1a1a50c9770f94df643dac8262f337076ce9850

    SHA512

    40bac3bc4d1dab733372b1a5648ebaed18de01088c02a31c0fa51953ca757c535d25bc6338a277d8eefae487953b84501fdb55414e5ddbcf6a68b346d555f9ed

  • /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221021_125736824.log

    Filesize

    256B

    MD5

    b13a01c1c3c3a67ea91f9fa438ee38d8

    SHA1

    c2b626f47b1f4054cff4286727b0b447b7541585

    SHA256

    348f0159151a44c2c054540f0faddad237e5c1a04b23eb55ee7b2df47f6375c3

    SHA512

    7a2df0cb86ce5d1b0e415bd4a9e211a348e75eab902cd274e442ac49fe725c92c6d21fe6732604f743f66403e4457fe751a856b0ab9197a5616f7b3d21e8cdd7

  • /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221021_125736824.zip

    Filesize

    241B

    MD5

    1c7398a7a5185757f72933880880b66d

    SHA1

    8f37e56cfa0b0941335b6dc2244357117ae534bc

    SHA256

    ecbf350e439c817281bb64f3c74f9beafbb4479912631ead8ae58b55912b41b2

    SHA512

    eae6eb789b32b26ff64db24560e1cf227ad5fc67f24567c2c417e728c566da56bc24b353b538a9eb402245c4c06bac7647d40a9e5e02e87205373ae62ac3dd08

  • /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221021_125736877.log

    Filesize

    256B

    MD5

    1058aac3c6cdc0ac751cf8d62fe74758

    SHA1

    f7212298d39ad1ec6d248ac2392dd04b31c9117d

    SHA256

    03a406d7e6b6ebb71f139b8449144112a73ad4affb728ec23e324fef49709ad3

    SHA512

    4f95cd2be62466cd08b6633a08309cc95412b150d63505ca6bc3ea0b743130f96fd98106195424bc14732165d73a2fd9afdb87f8626c6aa758fe2c4ac03aff26

  • /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221021_125736877.zip

    Filesize

    241B

    MD5

    16d779219233e419b8e4f320f8dd3be5

    SHA1

    81e162429b7717322960003e2e979afb8d336494

    SHA256

    bccb37ec6d697fc7e57a4d48fd8c1c7cc88d0e688708508fb6797c0b76b2549d

    SHA512

    617e7fee6d091a6b392dee5c6ce00935757263a05096ecf8d2f5ddd5b96066da5e7f8aec25899f686aeaa234f3c1b88d824ae6b045b719fe4c46e753a640cf2b

  • /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221021_125736905.log

    Filesize

    256B

    MD5

    888de92b56a019971e296f6878334b4c

    SHA1

    fee0d9126b7d43e4e35a0464b60dd40873ed9fd9

    SHA256

    2853e1ab3c8b9cf6b83383871910b05f0e7e89f2e36fed9ac56f6ea42e934413

    SHA512

    711e4165b2411ee43582d7d8c746cf84e76f8abeb9d251201fb8dc391211d34260692a4540d902ccadc3b8aab02ac49e6fe51c3152cb06d864273f9d09fd6804

  • /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221021_125736905.zip

    Filesize

    241B

    MD5

    1180e360aef1f9fe3832c11a0710ea6e

    SHA1

    ea6c42bdcb527ca68c78e50a6ed58375cb9088bb

    SHA256

    057276c7705e10acfa31717583e6d73db1531050ebb2d2d6ec4288ba2dc6db95

    SHA512

    6b3b864fc382714501d0a0bf80688969e8ed4439c968af435c75008927286c336535767ea552509812cb5eb1ac4db55fe842994b73b58234482faff0b50b837e

  • /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221021_125737791.log

    Filesize

    256B

    MD5

    175e6d57bef7d74d9bb73ef6763727df

    SHA1

    5088eb312d292b168f60b0cbcd65a0fbebfe711a

    SHA256

    0e4f3e1b54c5c9da0e853782a5f5c3b2510ddd308ff9cccca33ab71dd478ad09

    SHA512

    b5dabb3c180fb4c143dfdcb7483e62adc58ecab48b0f71ac99b9ce406d7da1c2c91afb0a5c736fc507e66173d7adc7b47dd5711ff66ceaabfe28e1861be01596

  • /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221021_125737791.zip

    Filesize

    241B

    MD5

    8827d481892d744506d9a305ee7dd69d

    SHA1

    47a5b7f61707219570ebb9a3e5a601292233b74c

    SHA256

    ef1f3a83c2fba922a7b6568ea81a29e8359d04f5630ad5b7312e0fa2d7e27e7c

    SHA512

    c060743d278f0a3d0ffec1ee4bb2a0c52b6e7e15907ea1f6de9a1c15968d97ebed5adbe00d3ad7f77a0a157fb0169aad33cc0a747688289de95c6b3ff468362d

  • /data/user/0/com.apps.amaq/shared_prefs/WebViewChromiumPrefs.xml

    Filesize

    127B

    MD5

    21223e9184445fe043476484cd8cb1f9

    SHA1

    2b4813f849121d60ba35eb0889080668bb62c778

    SHA256

    bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

    SHA512

    be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48