Resubmissions

10-11-2022 09:48

221110-lsyw5sggb3 10

26-10-2022 03:48

221026-ec5lesefc5 7

Analysis

  • max time kernel
    309055s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    26-10-2022 03:48

General

  • Target

    numrent-v1.0.6.apk

  • Size

    6.0MB

  • MD5

    341a8467de34ed980f463df9e464668c

  • SHA1

    bfb966575c285122e4c7deb35b8f0d4befe84fad

  • SHA256

    73d04d7906706f90fb81676d4f023fbac75b0047897b289f2eb34f7640ed1e7f

  • SHA512

    4d7982daaba408b9c0f46011e53ad6441297d68c32259eed20bc1ee6ee64ec421434b782231ba1661bc0d87f7317702c634f7de38e5db8d0a1173e107775ee84

  • SSDEEP

    98304:9sYgxq7b6+w77NRDS5J/wZkGB8wXV5mJQ9cZfOlN5wEQ9gPUcrcU1DrDvHfrmy:r7Bwtc5RCkGiwXn4Q9cZfOr5wEQeJ139

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI).
  • Reads information about phone network operator.

Processes

  • com.example.confirmcode
    1⤵
    • Acquires the wake lock.
    PID:4423

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.example.confirmcode/logs.dat

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.example.confirmcode/app_webview/.com.google.Chrome.KN2jld

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.example.confirmcode/app_webview/Default/Cookies

    Filesize

    64KB

    MD5

    dfb2098ca7b3bf16d6f5f1e7d3839af5

    SHA1

    ebb7a8bc886062d77a4092bd306b77a0ce7a3e9d

    SHA256

    e4119d32577d7fc63b267cc23eb7a9bbfb12d238f23e08918c38838fe0181224

    SHA512

    fccec45399258eb98220b7f01b492a72b8b3d1254dec6e196e344d89a0376c6ee24534a31a6675c866d4a17256d3ac6823657eaf04e1d386757d0cbfc6597e50

  • /data/user/0/com.example.confirmcode/app_webview/Default/Cookies-journal

    Filesize

    1KB

    MD5

    72476247f4c80cf2a012da1b737d1d73

    SHA1

    1d264a95cd983472ff3d910a267875869bc13b51

    SHA256

    2507fce9362b9a36fe870c15e2a7d3d0f5b63b289120c8599909fcad4a391d58

    SHA512

    6d1989696cb36aef97e5c46fee1b58b97d8112ce44e9dc8b66fb7110c9184308b50ce0aea467f23604693fc163c5e3e3e35c9b3eb3806bf8ff2d59fcd07f1732

  • /data/user/0/com.example.confirmcode/app_webview/Default/GPUCache/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.example.confirmcode/app_webview/Default/GPUCache/index-dir/temp-index

    Filesize

    96B

    MD5

    8a03e165cf92c61b054e53eabe7eb2b6

    SHA1

    ee943e02c40f9932d8ff676687402509bd615d1a

    SHA256

    bc55da576e98d21f4ffdae54d8fe66ceca46cb7dac91d0a563c309d4cc194770

    SHA512

    a450626700731eec7afc3e37be860e9bc432bda1b5f0081ffae6d30a7c9bf73a908f169d0f9d172fcf017ff5abd994d02c580818e51115c990c09bb314f732da

  • /data/user/0/com.example.confirmcode/app_webview/Default/Web Data

    Filesize

    120KB

    MD5

    a48cd9324b1f8754b07f00d863b840f3

    SHA1

    11c6614775b35a58f440971dfc87c8aaac6d6173

    SHA256

    8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

    SHA512

    35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

  • /data/user/0/com.example.confirmcode/app_webview/Default/Web Data-journal

    Filesize

    2KB

    MD5

    11fac974b44bb0110df5ccb27b247875

    SHA1

    45597ae1be5589c6161ddaeeb888b763afbe7ffa

    SHA256

    98df41952eb7d62240e9fa3499093295e1eeb658d52e7c63ed670b05d9cf8730

    SHA512

    0f65e1894a69942d9e4fc6aabd9d57f6c8d8f75e08e38ea0db99f23d402faae7acfde7c45bf96f009f0dbcc01c032ad1eaa44db7b4570c720c1541d1cc317c36

  • /data/user/0/com.example.confirmcode/app_webview/variations_seed_new

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.example.confirmcode/app_webview/variations_stamp

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.example.confirmcode/app_webview/webview_data.lock

    Filesize

    29B

    MD5

    7808ce7fc2ced3165e5616662593dada

    SHA1

    74d8ee5c0fecdc3f99bb0f0296b8a601251b6449

    SHA256

    6adc00d41048d75fe16c6be6680cc1e8834e7d554f7f42297658d416329635a3

    SHA512

    bc400baab42819c07d29b657347df10a787f85106dae8594b288b875d14049025b6756b5fa5a1cf87fac961fd50c1cb8a35c67984a0016e9a45640928dcb6cd8

  • /data/user/0/com.example.confirmcode/cache/WebView/Crashpad/settings.dat

    Filesize

    40B

    MD5

    77f9fe3ba7f7f636f73bb46e97c6d7b2

    SHA1

    d94c9eabc67a3c899be2b852e62412823b4f3647

    SHA256

    3ec2c615c2691b59d8afa7dd330b3a9214ba15c62c386ba415175a665a5bd491

    SHA512

    0d8756eb4be38f5aff7ee1b45922afcc7e0462717b312e411f079f7447e4c2731a9cd58b370781ea872fb4812d5861c288a1fefc7d65cc50c643f9dc1e0321ce

  • /data/user/0/com.example.confirmcode/cache/WebView/Default/HTTP Cache/Code Cache/js/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.example.confirmcode/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index

    Filesize

    96B

    MD5

    6345dfb4d29bcb6f6edbb9c432c0f453

    SHA1

    f505faaab187c517dded99d7b1a05fe235e96867

    SHA256

    e92d94c8259b69bb86c6a73b766f1a01597574e362dcfc983689d17e2acfe5fa

    SHA512

    c8d00e4af5664cf8a2cb4fc0a76ae476c63db63b9eec2d189f483e0b35884cd9b5cab0c06affa45330405888fbc7061601841cf9f38f9ada89fc3e2fc7e67705

  • /data/user/0/com.example.confirmcode/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.example.confirmcode/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index

    Filesize

    96B

    MD5

    4c4a8d1a6fc5c119d62658bcd1c2d3e5

    SHA1

    7ba61b23f0cb86f9b789878e12bf2369dbefc533

    SHA256

    d129fe5dcbfd16dd69ccd965325cbfcaad7e44074dfcec6febb19534508783ae

    SHA512

    7f0cd6b639c5207e302ed1411f4035b2baacddeb3438e3bcb9b510e6de46f7bf05a616f8a0e7e29f452ecc0258f8a6de0e36322516c646442898ea167e97513a

  • /data/user/0/com.example.confirmcode/cache/WebView/Default/HTTP Cache/a27b4b55c6c53f54_0

    Filesize

    2KB

    MD5

    d69ff31ceaf027a8a0772571c5e7584a

    SHA1

    20ad1298aca11336fc1bb799bb2faa8f33318565

    SHA256

    d8d30c3563b2f0fa856169a5c375ab40ffca8e304fb207528ef4dde5405da423

    SHA512

    fa59a0bf850fa24c7f06f50292ebbaf13068dc834ba0474b58de4d61adea818468680aa060ef2bbefcf5aa0900dfd1c565506036136693c2612495e6bd64f062

  • /data/user/0/com.example.confirmcode/cache/WebView/Default/HTTP Cache/e39b57534fb632e8_0

    Filesize

    1KB

    MD5

    0174bc701e5a4e145aa0016f75c30f1f

    SHA1

    e9387e994c70e1cb4109b529fcd31d4bf1e23802

    SHA256

    2ba29985d7293770fe396cf1cf31d79d45eae9fe35c1bd4c02b68dd2be67dfb4

    SHA512

    a9123513ccc8d3583f3ba55e8137fea89aa7b58e0c6e70bf8f55ff5e8bf427ae8786faff4d7d6acc591bd085b2a9bb84554a2e03b6cff04b17784d38963d7ac9

  • /data/user/0/com.example.confirmcode/cache/WebView/Default/HTTP Cache/f8c66dd55e9c28f8_0

    Filesize

    98KB

    MD5

    5bda8a4910fe97180591a60657e5b4ef

    SHA1

    1454d253d488b0b915cd421419b699154ddf6196

    SHA256

    c823c8be8b3099461dea1d6cd41cec346e2db3704f93b37e73729305cbbb86bd

    SHA512

    a01fd62f20a6b2db5ee7408cde99149514a44bd4570cf891f2f349937c6cf8027add17aa31c6a947719bfefc3037c813be365beafbf39cbc869db619eeb74e36

  • /data/user/0/com.example.confirmcode/cache/WebView/Default/HTTP Cache/index

    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.example.confirmcode/cache/WebView/Default/HTTP Cache/index-dir/temp-index

    Filesize

    144B

    MD5

    27146f21dfa9ad7df6ba07a7ce67c38a

    SHA1

    19309729489122891b5553075b0acfe1a680ab87

    SHA256

    70b273f1317f2d74d4aa017dffecb2882813eff2256f4d229294be83ba80867a

    SHA512

    bed962b0eab0fe741c7b52a19d83bf00fc8ed4f26f5dbfc8525be1e270e9332e76a04e525b2b81984086298519152ceb13278ca69e38053623af653a116a228f

  • /data/user/0/com.example.confirmcode/cache/WebView/font_unique_name_table.pb

    Filesize

    57KB

    MD5

    f080fa2a56ab5479d58063e5ea871447

    SHA1

    4b3fd57a98916fa5784305b76ba30af26b5253d9

    SHA256

    0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

    SHA512

    8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

  • /data/user/0/com.example.confirmcode/cache/picasso-cache/7e1268ef7306f2b5e35bd602ed3b8cf9.0.tmp

    Filesize

    6KB

    MD5

    cacd27982b7bfbf920d1bf26a8f96bd5

    SHA1

    2588dfa1126b6c83417d0db753ece2206885597d

    SHA256

    c343497f9bd6e20e202b40d767925d4edd41ace238311ed4bb687240d2396fdc

    SHA512

    eeb18aa6b630d1698b9bef0d950a37fa8dbbcdd5dc360925d8ab3ce84f4d0e387b39d36795d13c01d8cb7aca907bd90b4274d21c4864246e1c8d4b74b98ce1da

  • /data/user/0/com.example.confirmcode/cache/picasso-cache/7e1268ef7306f2b5e35bd602ed3b8cf9.1.tmp

    Filesize

    3KB

    MD5

    e243f394fae25400aa8eee899363c367

    SHA1

    7bf95f128c73aa8853ba5ec7622cea29d4b48dcc

    SHA256

    cd146facd9de2ad73bad6cb272b7e1a04c07cfc284c24971e9f574f2fb84af78

    SHA512

    d5d519b93404a1d5975d35359cc28154df72ab7aca244bdc187fc313e2d5453499e359921391d59bc254e3230854ed7a3bc979f947c639bd2c7e1537ac765927

  • /data/user/0/com.example.confirmcode/cache/picasso-cache/b95295b581435c237b6abcc7cdc46412.0.tmp

    Filesize

    6KB

    MD5

    143a9c37f4e0f1c4c34f2ae6e2ade1ef

    SHA1

    56f39067e6c20575f31dba8dd771b1f9e82e5c80

    SHA256

    d3930345e1ad146b09751e019622fde6844b3e9cc2cc1b9771988cdb6a5af942

    SHA512

    10c0710af55500c99aef20c93ca90a33ec463fa5eceae1d09e49b084088738324f17ec28b4d2398309a97e4f3b582e3b04f760e32b6dcf604569c394b363a63f

  • /data/user/0/com.example.confirmcode/cache/picasso-cache/b95295b581435c237b6abcc7cdc46412.1.tmp

    Filesize

    2KB

    MD5

    e7b51f8e0f934a16727c282681635774

    SHA1

    124483f5f861a438df3591f2591bc2fba0213338

    SHA256

    b0524faab7d5bb063b481c632199252acaabafd44574fd5f795f560dd0897265

    SHA512

    b33c1a38db767c5256adde94c6bb14ac422ebbb0b63176ebc405295d9a0579773a7666e073f8bea611a4a5c2206db43233974ae25fb33363d90f4bd455185901

  • /data/user/0/com.example.confirmcode/cache/picasso-cache/journal.bkp

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.example.confirmcode/cache/picasso-cache/journal.tmp

    Filesize

    36B

    MD5

    37e8e716e0e2f4a0b05cd9571d95b84d

    SHA1

    f8d068f6931707bddb8cd69f706f2224ad1fea3c

    SHA256

    7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

    SHA512

    e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

  • /data/user/0/com.example.confirmcode/shared_prefs/WebViewChromiumPrefs.xml

    Filesize

    127B

    MD5

    97ccd9a2b2063143df56b6937f961ca4

    SHA1

    5e78a91ae5df289ce83443cb7d5589dd3504fb5d

    SHA256

    248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

    SHA512

    86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

  • /data/user/0/com.example.confirmcode/shared_prefs/com.example.confirmcode.xml

    Filesize

    141B

    MD5

    1fd36d795cd8a7305adea8f915d54ada

    SHA1

    efc1ebc7ae0d7d1b4a5d676eda7f099eba388528

    SHA256

    63c990bbf27563d93c0e9b0d1c8cf7e431b55c64bbfce50df0f959525b4168ab

    SHA512

    9876b616afa36f6feaea2efc9834c63b46bad7d9ce317591956ff6fac4b73b0432b9a2d69d36fc9c6ec6b4267de373466c1b48616274417473a667821ca413d0