Resubmissions

27-10-2022 16:01

221027-tgqemacff8 10

21-10-2022 10:53

221021-myzlasgda4 7

Analysis

  • max time kernel
    439257s
  • max time network
    46s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    27-10-2022 16:01

General

  • Target

    039fc34ace1012eff687f864369540b9085b167f0d66023f3b94f280a7fdf8b7.apk

  • Size

    1.3MB

  • MD5

    34be434996b9bc19112f875f0a3711d2

  • SHA1

    ad451e4fc750c83a58fe8f7234f1766ad315a565

  • SHA256

    039fc34ace1012eff687f864369540b9085b167f0d66023f3b94f280a7fdf8b7

  • SHA512

    28d6385703c1591853de9bdf7724594ba0187aeb40accf150b877a2785e915c7dd7ef8720f9cc8f0e33793b6c2b6d88845f3f7fb818e8575cf9daf259723dfd2

  • SSDEEP

    24576:RknbtoZcY5eJDj+6DiASSjctlRSEuw/pzIx27hCzGLQLfFK1RnHrmVXyQZ:RknbtoZcY5eFJibtrSEucp97hCzGLQbX

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.apps.amaq
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4158

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.apps.amaq/app_webview/GPUCache/index

    Filesize

    20B

    MD5

    93027d42b314432c4216e6cfca48b384

    SHA1

    43448dd8102979c3926828182579691945eedd4e

    SHA256

    3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

    SHA512

    a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

  • /data/user/0/com.apps.amaq/app_webview/GPUCache/index-dir/temp-index

    Filesize

    48B

    MD5

    252ac9bfd7d4f508700b5d72f854b946

    SHA1

    fd6f5add89bc2cac96e1a58582dffa91808ba60f

    SHA256

    58ff7a1a5083416a6d87d30cc2f782f073ec4ef8f882345868f9e57bed05e409

    SHA512

    8ac11ae421d1f0381381c14f0a6f5ccfb3a265bd2f39441c30d3ae5bbfcf812589798bd1dc1f9c972fba2571a2eb4914e945fc4af50987b7a43a070dbe5a6059

  • /data/user/0/com.apps.amaq/app_webview/Web Data

    Filesize

    104KB

    MD5

    dc79f9ce5f3ab5270b33e61119dfc959

    SHA1

    1844bf222a5144b513dcf2fb50a18c011701c647

    SHA256

    47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

    SHA512

    18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

  • /data/user/0/com.apps.amaq/app_webview/Web Data-journal

    Filesize

    1KB

    MD5

    393e1e865b383ef9c387eb4ae79d249e

    SHA1

    bd91b77e6ce1fd0652226317f6aa7559a9eeab3b

    SHA256

    a5829490f94068a2b7b8454b454f3dd1bdf68c123fd2e1f4ff1cdda6ba415282

    SHA512

    cb271061919e5fa4ffaf82796e5a4be97362fabbd07dcd1ce3fad802d5432fb1436549d1fe9e7e0792e1cadfefa49286f8568c6c4b1fe712975fc2c5fefdffc6

  • /data/user/0/com.apps.amaq/app_webview/metrics_guid

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.apps.amaq/app_webview/metrics_guid

    Filesize

    36B

    MD5

    2752466d4d403893e62ad1ad13a5b00d

    SHA1

    4120270c6ad6d66d86e7805eff202d2a967d4386

    SHA256

    4789461385968889b5c475e86642381ddafff778bc84682b50fd050b261884da

    SHA512

    3aaeb67d0ddf3363de4eb4dd94c48353602eae8c6e66f09f16bf9a802fab93a2b948a7e1bc02ec374a0ebf9a48993e595b6dcc44bc080b4882926d0ec5251e3c

  • /data/user/0/com.apps.amaq/app_webview/variations_seed_new

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.apps.amaq/app_webview/variations_stamp

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.apps.amaq/app_webview/webview_data.lock

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.apps.amaq/databases/DB

    Filesize

    20KB

    MD5

    017f4fdd4ebaf812d37423ba76397c7e

    SHA1

    f099381c8ba880f6f601697e48467d7f3ce9c5de

    SHA256

    bf57d74b5b1b91992ebd24582ba9ea8067f744a216a1467326add749d47d0517

    SHA512

    869ac1a7d015969afa6eddd3308e42841f20bdfcd60ca23878c0643e5a258cb554d149b1224534d9ab646a68c465b9aada8d56eee1413230efc253bf25740816

  • /data/user/0/com.apps.amaq/databases/DB-journal

    Filesize

    524B

    MD5

    25c9ab5a65f8af10c672233537362df3

    SHA1

    35799fa160dd88d2255bb5df973ed18188ad195f

    SHA256

    e261a2fb7fad5e0a39849f7eb2254941211673085e23124bbec141d0039826d0

    SHA512

    ee0e0c9c0f41f90a39a0bc18da85c1b1491a23375921e51dce08a644eba10a51d37681cac2332961cef82358acad505d349a924d67711a1140716d496ae53f1f

  • /data/user/0/com.apps.amaq/databases/DB-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.apps.amaq/databases/DB-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.apps.amaq/databases/DB-wal

    Filesize

    28KB

    MD5

    82e5d2ff7d25f1462c3a58a882a3875b

    SHA1

    7b856983e06b7807418e481737c65e9d379e03ac

    SHA256

    e32b203313e61d6fc98371dd5925bb1025f814d489515fff2b6c3ef7f1bf0102

    SHA512

    70588aa582002e129cdccc867b336bf86051bb7ef71b8c83c7a543d56ad4faca8a7722675b7acfa8b9c8bd64dbec6834424b06d9186b0b8eb3a0c18a5480ac33

  • /data/user/0/com.apps.amaq/databases/DB-wal

    Filesize

    24KB

    MD5

    83c72a9e39a6c7d3df4af1315d8f2940

    SHA1

    da65c1f9413a15298642288b92ca4089152ce64b

    SHA256

    2b8cb8091a93c6fb8310b250b3c9f3819bf6eec104a1e0e7d40e619e74ba8b8f

    SHA512

    114251dc5bd2032bd9b90dc9312b00d3d42c1eb7fec1dd236f99d7c538e2755dbe02f4a6df8c18a20a909b7f8359e7f2a77cfddc3fdf4569d6307947ff1fce7e

  • /data/user/0/com.apps.amaq/files/221027_180215828.get

    Filesize

    206B

    MD5

    23648c60ff27e006b4866b020d63c28b

    SHA1

    4a86461572d12b0d3c77da4dab6ddac71185f868

    SHA256

    d511c109923ef900f4681606f17d6a5a50da3d0a0615267e8d83e5bc4d097b6a

    SHA512

    c91fba0f98eb37c7ec7c492e45706a85b6b7c06f765f2b292a8a364695601f51cc16548b244c141a898aa57df828912a8fcf45b8db35480283bff7ab179ed197

  • /data/user/0/com.apps.amaq/files/221027_180216032.get

    Filesize

    51B

    MD5

    664945512f4d76b894c72a5c5d1684c5

    SHA1

    8976391feba532b2439b64d4d9070e2b88e4a36f

    SHA256

    c1d449246745b9334accbf838008a0309e705360f9058379a2f1820338093e7c

    SHA512

    86ee277f5a0ee1d36f3cc7d14c5b770ebfeb64b40a0e881567bf80d817d09ace4e20372bd594b56d0e5bbe6eeb67fcf84330153e5d30fb54333de6951d75a294

  • /data/user/0/com.apps.amaq/files/221027_180216164.get

    Filesize

    51B

    MD5

    0060937784e3e04ae5587bf09888d390

    SHA1

    e4340d4509eae03649201343a1d6ee0d61172f8f

    SHA256

    d5be1a31f970afc7a57472623d6b48ba8878083991027f0ef3e820e78dcf2c7e

    SHA512

    48e0d77bcce56b98372303211bbb22ab5c0075e1369736b374a703316f701230b8e8148d5aeecf6db6f0b9c33cb1453dd9863fa67f473844a3f45cee1af451d7

  • /data/user/0/com.apps.amaq/files/221027_180216269.get

    Filesize

    51B

    MD5

    49170d88ceb769f1ee54f69ba7b82e33

    SHA1

    e15bc3287380ebf9e82949a2c7fa948d5237a570

    SHA256

    dfd8d4f17a85bfa9f03782babc417d02fc8315a96372e90f5f16eb88861b44b7

    SHA512

    d8cc092baeee6b0ce8e94ee0b44a1f7c6c8b22884f99669cf82b8f6984ea7ed34ed5a48fc2e5a08a8948286ea9726d691fe4047132a3db541734cbb8eb0a47a3

  • /data/user/0/com.apps.amaq/files/221027_180216347.get

    Filesize

    51B

    MD5

    1c06dfc2975a01c41716ef785be94db4

    SHA1

    c2ec6d3eb70b39d4a78ef25bcb172363cd9a761f

    SHA256

    275e14d8b8cbfcbaaa52c3c6c7a3894c51400ad4ce94e0e0dadbec53aa54c5f4

    SHA512

    3301af7b0342f303f34217ca16f4290314ad2a686ac5d94c837f281bb166134f14949aa6256bd8c4ebaa75c1b4fce7c8ea8f973d68e73ada6b8dcae289e852c0

  • /data/user/0/com.apps.amaq/files/221027_180218117.get

    Filesize

    51B

    MD5

    4984124b4731fe98d7973f6e28460e0d

    SHA1

    930cd809c20a9498a3b1050ed084614b1dc42eb8

    SHA256

    423d03e6a967d336a664cae0b19c3fd2543b8f16afc4e16e0b3871ae7b1ac0df

    SHA512

    82bd824f5d8eb0667b68faf099e1851e1b580c51bcb0be90305b6fd45436f514bd31cf51fc736b266f0ddb10f5d659aa1723ae07a423702ace03b3065f969101

  • /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221027_180215839.log

    Filesize

    352B

    MD5

    75a8b8a5874b958e570b01479b95c096

    SHA1

    9255c4fea78bfa3150c94473408b302369f74605

    SHA256

    61870956dd884ea54e143c1d5b2ac793a6113099a921c0952b740013dfed7d1c

    SHA512

    2e407232f8d6e20087475c227afe30874423f13e7a89cb3fb65490a9b963c38b55c461c607d2914986be70fb02694de22884731d4d2900cb61a1830b50480596

  • /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221027_180215839.zip

    Filesize

    346B

    MD5

    b2c9bd967909a2898c8b38a3913ded90

    SHA1

    e9f33c46ae2da7a3bbb01d12c06749ee801d1327

    SHA256

    8947300dd6a0129ac1c50afe017d2c28adc35c878493f9b3c347c6f7af565be5

    SHA512

    c15e8f8b342282bfefe9473c41b86a8e9a3903f2a534f3153b34323e4ca7b936b408ada6cffb270570a8569c0d45d33cc5b954d9d716620cbae886512c43fcc8

  • /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221027_180216080.log

    Filesize

    256B

    MD5

    6de69d42bdce84d944b3cb196152549a

    SHA1

    a943e27f6150a388b95003f9a7c2e0a1fe3c185d

    SHA256

    a6c83397bb713defae95c1e812083ca3c8edb44c7ff8cac531ac42dc27785cf1

    SHA512

    c989ce98001a2d4af6d48415e3dc4c370ebb13227b0e33c78f39e5dd78873379933ae13df07b8fcdffb5f9cbf70323b9b181367c55b403a798ab561df4982399

  • /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221027_180216080.zip

    Filesize

    241B

    MD5

    76bab515220a6bb5920f63341b10efcc

    SHA1

    1c3b7e8b051bd6a111c91ab90f0a89182c2ff7a2

    SHA256

    a4c94ccd54f191ffe59ebe0e35cf5058add12b3c89c71f69f1ea7c017b66d339

    SHA512

    f3e133f95b4e78501e1f21be988de117d33db7a62b8471dc6e137447558f107df25f33c54a72ac450a8e9153587af1fb274f6bbded70c453d28c6672853c9c43

  • /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221027_180216187.log

    Filesize

    256B

    MD5

    b0bc474688f095df985742263fee35f8

    SHA1

    5c9afb50a51e5cb58458745c9d0f5505adbbb4dd

    SHA256

    bac75d394af1d41b1fcdbe5aee6bcc8a123fd231738bd5d058311e1c3229410a

    SHA512

    dc94ef4b672d05e3fe9af2a0cc32b3a71b035e7cd34a38c2b4014832176b9e6d79007af9537e1d9350f4ce6003ba9db6f2984b182a83dbee3271c817d4270da8

  • /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221027_180216187.zip

    Filesize

    241B

    MD5

    2a37d05b7bb3534311b1f0bece4c697d

    SHA1

    634a5325b3c23b956dd4f06ffca7cd6bfb4b49cb

    SHA256

    0dc6f3aa961d9b2209c60c94f0f83463a6f78c9b703197cd17c1a75af03b67a2

    SHA512

    95b3869f4fffcf70d31645f1ec8dc1ccdf0478217c6122240db49c78da1004d4476231b4ca266234aae3e9ff391c737d076cfbcd6b3a23ca35e05de7f1b24ca8

  • /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221027_180216288.log

    Filesize

    256B

    MD5

    4f963a5a2219af7db425cbe091bf9e80

    SHA1

    ef5c3f7fa00e86bb7c201d043e34829ac2bcffb7

    SHA256

    550da46aa44eeeb2f9201b1041f0373bc8ac89de2df446eae2f50efc5af90424

    SHA512

    08c49e88da9a887b6832e35e3c098adc82e355b2e16a99a8c5f8d39e3667aa05d667bbee838ad42dd46238b0a2438f4f978f1c3275bbdd507035248c666e9d67

  • /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221027_180216288.zip

    Filesize

    241B

    MD5

    79d26ba83d0b39d7c9bcc2b56463f615

    SHA1

    97417de8dca96ebb7a72b0f174d9f49efe1720a5

    SHA256

    9f8ead58baa2f17c0d9ab17d3ba5341f27bd384b31305c1e0bb46a41067bc404

    SHA512

    86ade684e848d8b17dd37d4fb255e339abaa478796915f488cb8d738eeb3cef818bd64704071f5f29f66b157db570f056ebea5e8a76a3dd7ac7ad44315826a9f

  • /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221027_180216372.log

    Filesize

    256B

    MD5

    c928a8750d4bb5db7be729175233d317

    SHA1

    aa9b51a0a8cb6f24360197a4166737c976a79560

    SHA256

    0542a78df0da089f3fd8911677c558510e4c11dca21f26838d0402b07eb640f5

    SHA512

    3340360d1c46588ea25ef270d6e75dd78a1430d7d542bb554a1d577a0b53c0bccf7fd69a19c0e95660171ea6a83e6fc624913c036d2299e777ce27d36be14ce4

  • /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221027_180216372.zip

    Filesize

    241B

    MD5

    c63f387d29f5b0153e34ebede51532fe

    SHA1

    3ba92266739a9e431f294d037d1ed76a8194d2bd

    SHA256

    e5474d0f98439d2c3e3d4ca14aeb5e94ad8af4543a85109a288f0aee8d6a7184

    SHA512

    b9beff16bdcbec020f5955556e264281a0dbb76f85006a92df64eaad5c17bf2d34e0e6b1df6bffc6337a1d9cee7953e30167125a875d56a750cabd9b61bce73f

  • /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221027_180218147.log

    Filesize

    256B

    MD5

    4d3973fc5ee785968b6ba785cbedebe6

    SHA1

    ff39f559695a60ddd2c0ca69a984989426029c89

    SHA256

    cfea4347768c1708b53ad2b855414c0f8ce8e5972a067058bfa5e7ece2d1db39

    SHA512

    aad0c163c4b522ca7462e3c27f971d8bdd9374ae1e8ebdd7916afe67d1ed37dabfbb2f17fe3c1c764b6da312b65df238d69f6945ab8673ff6170a63c4932f904

  • /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221027_180218147.zip

    Filesize

    241B

    MD5

    749d680701ab7e06300e8de06912ab8a

    SHA1

    a220d51a2ecb5e936ec546f72fed9a0233c5196f

    SHA256

    458fe6382fb2de1c739b3bf9704dba8ab92ca9b5db56901916f019b578906c75

    SHA512

    155f4ee35bb32a9eaa8495805956440854a724edaf9d47ee6168b79235e47a25d5041a9472785cb52d5ec5c165b8d0e97432f7be0b7a2505eb5acd736ece3baa

  • /data/user/0/com.apps.amaq/shared_prefs/WebViewChromiumPrefs.xml

    Filesize

    127B

    MD5

    21223e9184445fe043476484cd8cb1f9

    SHA1

    2b4813f849121d60ba35eb0889080668bb62c778

    SHA256

    bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

    SHA512

    be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48