Resubmissions

27-10-2022 16:01

221027-tgqemacff8 10

21-10-2022 10:53

221021-myzlasgda4 7

Analysis

  • max time kernel
    4197658s
  • max time network
    145s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    21-10-2022 10:53

General

  • Target

    039fc34ace1012eff687f864369540b9085b167f0d66023f3b94f280a7fdf8b7.apk

  • Size

    1.3MB

  • MD5

    34be434996b9bc19112f875f0a3711d2

  • SHA1

    ad451e4fc750c83a58fe8f7234f1766ad315a565

  • SHA256

    039fc34ace1012eff687f864369540b9085b167f0d66023f3b94f280a7fdf8b7

  • SHA512

    28d6385703c1591853de9bdf7724594ba0187aeb40accf150b877a2785e915c7dd7ef8720f9cc8f0e33793b6c2b6d88845f3f7fb818e8575cf9daf259723dfd2

  • SSDEEP

    24576:RknbtoZcY5eJDj+6DiASSjctlRSEuw/pzIx27hCzGLQLfFK1RnHrmVXyQZ:RknbtoZcY5eFJibtrSEucp97hCzGLQbX

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.apps.amaq
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4714

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.apps.amaq/app_webview/.com.google.Chrome.z1baOF
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.apps.amaq/app_webview/GPUCache/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.apps.amaq/app_webview/GPUCache/index-dir/temp-index
    Filesize

    96B

    MD5

    dec0468598606b7c36014d551d29fb2d

    SHA1

    06e4db01a192133c4cc7c75d00d097faab74bacd

    SHA256

    bc3bd225014532dc8f77e338ceb3912fb960b0aa15093435bf92117ee9abbb2b

    SHA512

    ef7529767f0cc707785d69a5da4fc288b20312e6523162f48c5c14fa7d800446539c03ccbfc6643b01ade64979110d1eee4547e885fc235f59b90cc1c7d3f0f8

  • /data/user/0/com.apps.amaq/app_webview/Web Data
    Filesize

    112KB

    MD5

    b663831f8cc130493476d94f2d7a5330

    SHA1

    043a1956ab8e40821d67043f8a9110a8eb36fb93

    SHA256

    c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

    SHA512

    e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

  • /data/user/0/com.apps.amaq/app_webview/Web Data-journal
    Filesize

    1KB

    MD5

    5d13b02884dde41ceda4732f2441afb3

    SHA1

    8b0694b537b21b9c719f688f05fecb02d75bc923

    SHA256

    f4cd3b1ed77df10bcc0af02e73fcc7f9bbf8980b643e64cff706d657d1fca1d7

    SHA512

    3f939f74af1d8ad325be1937d55d818de7f287af7ba649a8cb83e8661e30e73b7c883501f02f1750366f1b721c184a8b5458a7e4d1570f332956cd308ed59494

  • /data/user/0/com.apps.amaq/app_webview/metrics_guid
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.apps.amaq/app_webview/metrics_guid
    Filesize

    36B

    MD5

    d6b014b1d3cfac0f128881c673930671

    SHA1

    4824158a52bce0a318cb6e6bc3ce05a05787427a

    SHA256

    3c7ad7de5062adec8c3e185c5941053514b1f7e153b6bd6940eaa1f96ac93f46

    SHA512

    a9aa6392dc5cdee7a8aac0f084413d9ce80c2fe2a74338dbc8fd0354de22627e5450a9f7ce1fe50a035c29e81410d271512db96fdd6707e278a8fb28c678d1a4

  • /data/user/0/com.apps.amaq/app_webview/variations_seed_new
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.apps.amaq/app_webview/variations_stamp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.apps.amaq/app_webview/webview_data.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.apps.amaq/cache/WebView/Crashpad/settings.dat
    Filesize

    40B

    MD5

    d67e7573e5706f87c4c5d290837715d8

    SHA1

    e850b39ab9983c7b910d5153ded804fcbc444e06

    SHA256

    920cc4de4ff680701d2a75ea755fe706a1e7f7c0d719a8221da688c0f01ad58c

    SHA512

    f3d814d2c42ef04fb1061918b8d90c15cf57d6d570059eaad9afea9ce9a893d0e713db8c3a43006f7cc43479f686b179b24d0ec6e4503aad42cbb44e83434857

  • /data/user/0/com.apps.amaq/cache/org.chromium.android_webview/Code Cache/js/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.apps.amaq/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
    Filesize

    96B

    MD5

    6af4eaca0dc2991d2530e6fd145272ab

    SHA1

    8f0690d0699c1755f25c7de1a6dcde746cf3c119

    SHA256

    b7b2c673344f84d0869492120506136be48a7ceb730cca920e667009a92aedcc

    SHA512

    9e2de36fcb0dd8a2214435cd3600112efadce9142e9737503b27f5e353d4e4afe10f53f0702df09073b4574def86d2867ef25a4f34413f9dba1a053b3ba247bb

  • /data/user/0/com.apps.amaq/databases/DB
    Filesize

    64KB

    MD5

    fb29dd37585a48ce8535f4ff3f881474

    SHA1

    e2f796e05e2117c01f134ef59af327426e8db15a

    SHA256

    c1019f98973c157e9a9014b0e92eb5d1aa3519c0b36cb53169a141a6f4b7100b

    SHA512

    55f6a289a19aa3b5125ad14e8a040a324706a41c1d4e9e202285ba41c60675c376f70498aa5975cb70dab30af6675c61ee7d24d63011ea4b642ae7c5dd52872a

  • /data/user/0/com.apps.amaq/databases/DB-journal
    Filesize

    1KB

    MD5

    93b569b571aede37e2b1a67865d2f843

    SHA1

    072255c5504d45ecb04c61168a1093fe3ea30432

    SHA256

    2dc3f548f5829fa4d5875a85223bc0f886ea3865441f8f4b4491a377935da840

    SHA512

    d75c591287f65f5b83c923cae3b2b187e24a048fc447b68e2a3689139641cb5a1cd64c2f02bee603ea35649ddbeb5fe7b91f2416a14442c0458afd8fe8482e2e

  • /data/user/0/com.apps.amaq/files/221021_125740799.get
    Filesize

    183B

    MD5

    89119c7da2967a5b3ea3bc28da94afd1

    SHA1

    b12bc9591f9594aeff6ad5559cae7201dd8798a4

    SHA256

    3458cf554ad62f41aab0361fd12d6208eaa80f755ba703bb309d03a5d6506a6c

    SHA512

    17cff75de5d960ab2c7479b8d121c31afded253e9aee449412afa3a507100eedebdfb6778ca8af32450133279a85be43b1cbc5cbab0603ed84da08977ffa4b7a

  • /data/user/0/com.apps.amaq/files/221021_125740921.get
    Filesize

    51B

    MD5

    cf91adfe35d597ba4e72e704b9f06bd8

    SHA1

    b58c8cd5503735b4fddae41a2f8ba47c11d7b36e

    SHA256

    84a94d896985bc26b1dc87b368ac06d58e9924f3dd4a91b278cf6f381173a642

    SHA512

    39840ddc8da86506b8cc52a97c0f347398c812a25e23263b88e192c247986819d1c616819607954445c72f4b1ea14b8102d3a894f6c62907bde11a1e58a5df93

  • /data/user/0/com.apps.amaq/files/221021_125740976.get
    Filesize

    51B

    MD5

    6764ee0c2288f8a6c7567f081378df07

    SHA1

    8f5639aac9f30172778ec4a9a5753d2894896da7

    SHA256

    b50b6a5ea46805e60b1ea5cebf72c21da4026f9bb62151937a2a8d8fcbaa6df1

    SHA512

    45a3ead297f1be27077d0a38cd067afecef9e306ac1410f4c0427798d45bdd78e2d237024baea6b0a5146f97e44c477342aa3d377e9078d50f682b3967b700a3

  • /data/user/0/com.apps.amaq/files/221021_125741009.get
    Filesize

    51B

    MD5

    32c92dd34981d6b83f8ccd5632d14073

    SHA1

    73a83075ff265d6d20cf33117a278845466884e5

    SHA256

    7499ec8620e7a069c76a918a6e8ef7c52c8dd0b5ea0e6f087c243509220708a9

    SHA512

    ad5f91cf38218d572c9960b90ddf84dee342de56510f497232349fd3e3d0607913dba7b0ee7a7109d2085a2902787d88ddebcc1f0654301f9ac722f40c5ff9e6

  • /data/user/0/com.apps.amaq/files/221021_125741035.get
    Filesize

    51B

    MD5

    66f48211ed4a366773bfbff3fbd2a43b

    SHA1

    6758acfdc8faf95a7b7755fcde95f67f5ff6541f

    SHA256

    e56b0cc8e4d34adc864bd622b2c3b0c2aed5d4f82943c3a0de7ec5b932a11833

    SHA512

    ad18a1ffe86f878222db51f894a796e812f3c301d3e8e7b1577600091a1f8d864bd34c56e7a90dec39f3d4c5548077340ed3c85a4e9580876b7e599c6171bcb2

  • /data/user/0/com.apps.amaq/files/221021_125741604.get
    Filesize

    51B

    MD5

    ba2c542d364b2529141a8549ef000b6a

    SHA1

    2ec4957ced59c242777ad5234922601b8010de9e

    SHA256

    2fe63766c0ae8932db233658f846aabe86a114833139d3cc8efb1e460b73e8eb

    SHA512

    6577af8ba412b7fe0ddf87b67b95ac2b5eab3dce839286435c2612883489c26ffe4c08b933b47fd687cf42045a7141d0db566c24e0d142afd08297043e52a508

  • /data/user/0/com.apps.amaq/files/dd9028baa4228323_221021_125740840.log
    Filesize

    336B

    MD5

    58e5f46dcc98aab6e33ab6c9117cebfe

    SHA1

    7ec553cfb9d725ba497d38c8c721805a85f94ad7

    SHA256

    6402ff3119174434e6b1ef3d0032005e2dc084575d1b696b3e87d2ffa0d134f3

    SHA512

    f7bf84f80e11c6237b59a99cd2c7de761ea1a0e1c5b4bf26477ed30686cf4543f7b814242649f9c847dda5346d71e8f56b4b7805c2277d6e91b078b3d53f3670

  • /data/user/0/com.apps.amaq/files/dd9028baa4228323_221021_125740840.zip
    Filesize

    331B

    MD5

    9e9895c5fe6d0ceb204997a2ba4657c3

    SHA1

    d455b13dddd74216d249eedfe00990d4ea4e21a5

    SHA256

    e7f84974473fb2f89dac5e4200f6ed2e2332d80047f1fe2231cfa8b77ad4b346

    SHA512

    c42122dcd488d6e74c43d66af1d6e6cc880d6088b07c80d28825366e9836a003c6023e239943e3b510bbe13b76b8562c6691611e7cd4862478729edd911c320c

  • /data/user/0/com.apps.amaq/files/dd9028baa4228323_221021_125740929.log
    Filesize

    256B

    MD5

    ca7d96729fffda72feba30f8e4ee60ed

    SHA1

    01374abc277da9b4a0ec1aec30830cd0b95bcf70

    SHA256

    a0e3b8a6fa9e537e999bcb2d53695504494773e1ed19d94179807d8a2cff2452

    SHA512

    3ce51b1fc75dda6aac9a4f2f6353ac04900511eafdf08a1c60dcf0c9046e7c2d3b3a2ea171e1911420f4a23f9a384325a7729eb6db2618ac26fc5977f518e7af

  • /data/user/0/com.apps.amaq/files/dd9028baa4228323_221021_125740929.zip
    Filesize

    241B

    MD5

    c3cde583eb73025bda20ed477c1c982f

    SHA1

    0d2fae0046f9eef56887027b3f609a2969364baf

    SHA256

    86fcbb2a25aa272ebe4c13d9bd24c736422119e57f15c959902aee56bc9a469e

    SHA512

    2f6cf9c2f3952aecf7749362c5a04dac155ec6430fa5c24fccd14f012cbbc5b51212cc886141c64dde6d81f550a87b514fc7bde0f40548b0b6282d279f2c5724

  • /data/user/0/com.apps.amaq/files/dd9028baa4228323_221021_125740984.log
    Filesize

    256B

    MD5

    3bf0c8f775d2fb204fa629d10107a77c

    SHA1

    48017253604adf3b6cf8aa90f4cf15b346a876be

    SHA256

    7cb210b942cf420633a74a1c93136c5f20890c1ff3a4eba773fdcb56ab0f12f8

    SHA512

    c4afb16268abebb926725ed482c53aaa26e82c5495c08a367480ea6b6ff4deb80288c4a6e79cf8b4c76d35efb2975a2c5fd5a93ecefc15f99d3648d7d3b63a7f

  • /data/user/0/com.apps.amaq/files/dd9028baa4228323_221021_125740984.zip
    Filesize

    241B

    MD5

    d8ba7c495481e4ce1dc08f368544885a

    SHA1

    dfc72970260a0fd6954c823d1161c32f34f7c79a

    SHA256

    f130c26b33fed0dc702c31b5234c011f56af98d561ce6abd0bc1332e3138607e

    SHA512

    8eed44db90139f9ab13240b78765a75de987888fc9c7d192b3e4d2940c26e99d5aacd09a9da4680b388a2dc211af87ccf0f1e792752e837c004d08f9f9801248

  • /data/user/0/com.apps.amaq/files/dd9028baa4228323_221021_125741012.log
    Filesize

    256B

    MD5

    79c4d0efc3a122bc757812a3f7f093d2

    SHA1

    38cac23ee52d63b14399d4747499f6bd9d6d3637

    SHA256

    c1c3a889b0033e1abc19e1f2c45c2428b25bbe00f0ac3a3fde857c16c0d25226

    SHA512

    3f71654bcb414eb011c5f4e38505150942a2bf5748675b8bd2a05e3060c458eeaae050b95a29cc3e68bd61ccecff0e92d7abd50f89a609b7c1c144dc6460d2ce

  • /data/user/0/com.apps.amaq/files/dd9028baa4228323_221021_125741012.zip
    Filesize

    241B

    MD5

    27e797322d0a1204abd6fb1deb857730

    SHA1

    17af9d24953aa768ee5be8fc10815fcdd829621f

    SHA256

    0b70a50ba73989a2177094e7b3bdc440bf8f8c20eb77e80596afcacf582a525b

    SHA512

    0cc907a65d1c76e96512fd29d1db84ebbb20eb99c7ec9416d7284ed615a2e2c0512effae2e088e51276d8c320ce9aff105d54729be47bd37c4d09fa09dca80e9

  • /data/user/0/com.apps.amaq/files/dd9028baa4228323_221021_125741041.log
    Filesize

    256B

    MD5

    e43eab9e0fcabf0042f9c194b6d006db

    SHA1

    1412404a22f2d59a2d0c36924ac056b709c54418

    SHA256

    5acf941d35060c29764a36fb58fc97353d562728d98a741867479093004bd6da

    SHA512

    a36e96c948ac7e9299b6643a504a977f223e46e0bfd0d33202676abb7234dcd00feb1668987394850494cef0001c7b68050e4bd61f715deff293320dfd161823

  • /data/user/0/com.apps.amaq/files/dd9028baa4228323_221021_125741041.zip
    Filesize

    241B

    MD5

    063b941de7c37459774a5e4791cf97e9

    SHA1

    761b63c21890f222b96da34999c12968421563da

    SHA256

    7c9f1013fc184b3c00647b406ff30863877af5dc6f45a3a1dd1c3620a3fcbc6a

    SHA512

    1445f651312ba800a19b57623581948583fb5b2e45d6f3d5a4611e2f4c54516e81e1a321a709143e62aff6858d5cecb8c366958f42448cf137ba32ad608f10bc

  • /data/user/0/com.apps.amaq/files/dd9028baa4228323_221021_125741607.log
    Filesize

    256B

    MD5

    5842b1aed8d2973957ed466b20fb2347

    SHA1

    061cebce5a2637151977f858aa52eb76b61f34dd

    SHA256

    1d2c28627c43fa92b9d6a42411c97210eaba8bf675233266b669828cfaa30543

    SHA512

    2a9fe588248bb7b41a5e58305d4d00e28466f339892ebaf24d622bbe37b5e28edb5f516fb24d331f255d733159210757bdc30399a7955acb4e7fe50110d15f71

  • /data/user/0/com.apps.amaq/files/dd9028baa4228323_221021_125741607.zip
    Filesize

    241B

    MD5

    1a0b3fe95f136b629ef0352e9478b070

    SHA1

    549f859edfa74262992c2cc73e406fdaec655651

    SHA256

    edba8d4d32b5a7e8c891ecadba0263c7a2baed0970bb7bc072b6adb6769d217b

    SHA512

    a6e168494bf6d9cfc76279afe2579f03869bfd4cd25b9b819d598de2b11a5b8ef486955a87c9d979748999ab67337e3497c923d74e266b74ded78dd712b38031

  • /data/user/0/com.apps.amaq/shared_prefs/WebViewChromiumPrefs.xml
    Filesize

    127B

    MD5

    6ef709b8536878951e87c29a1518fc2b

    SHA1

    24376c70b00152501b3d98df61fa7db435339172

    SHA256

    10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

    SHA512

    96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9