Resubmissions

27/10/2022, 16:01

221027-tgqemacff810

21/10/2022, 10:53

221021-myzlasgda47

Analysis

  • max time kernel
    439257s
  • max time network
    46s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    27/10/2022, 16:01

General

  • Target
    039fc34ace1012eff687f864369540b9085b167f0d66023f3b94f280a7fdf8b7.apk
  • Size 1.3MB
  • Sample221027-tgqemacff8
  • SHA256 039fc34ace1012eff687f864369540b9085b167f0d66023f3b94f280a7fdf8b7
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.apps.amaq
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4158

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        index

        • Path /data/user/0/com.apps.amaq/app_webview/GPUCache/index
        • Size 20B
        • SHA256 3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.apps.amaq/app_webview/GPUCache/index-dir/temp-index
        • Size 48B
        • SHA256 58ff7a1a5083416a6d87d30cc2f782f073ec4ef8f882345868f9e57bed05e409
        • MD5 SHA1 SHA512

        Web Data

        • Path /data/user/0/com.apps.amaq/app_webview/Web Data
        • Size 104KB
        • SHA256 47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65
        • MD5 SHA1 SHA512 SSDEEP

        Web Data-journal

        • Path /data/user/0/com.apps.amaq/app_webview/Web Data-journal
        • Size 1KB
        • SHA256 a5829490f94068a2b7b8454b454f3dd1bdf68c123fd2e1f4ff1cdda6ba415282
        • MD5 SHA1 SHA512

        metrics_guid

        • Path /data/user/0/com.apps.amaq/app_webview/metrics_guid
        • Size 36B
        • SHA256 4789461385968889b5c475e86642381ddafff778bc84682b50fd050b261884da
        • MD5 SHA1 SHA512

        DB

        • Path /data/user/0/com.apps.amaq/databases/DB
        • Size 20KB
        • SHA256 bf57d74b5b1b91992ebd24582ba9ea8067f744a216a1467326add749d47d0517
        • MD5 SHA1 SHA512 SSDEEP

        DB-journal

        • Path /data/user/0/com.apps.amaq/databases/DB-journal
        • Size 524B
        • SHA256 e261a2fb7fad5e0a39849f7eb2254941211673085e23124bbec141d0039826d0
        • MD5 SHA1 SHA512

        DB-shm

        • Path /data/user/0/com.apps.amaq/databases/DB-shm
        • Size 8B
        • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
        • MD5 SHA1 SHA512

        DB-shm

        • Path /data/user/0/com.apps.amaq/databases/DB-shm
        • Size 8B
        • SHA256 af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
        • MD5 SHA1 SHA512

        DB-wal

        • Path /data/user/0/com.apps.amaq/databases/DB-wal
        • Size 28KB
        • SHA256 e32b203313e61d6fc98371dd5925bb1025f814d489515fff2b6c3ef7f1bf0102
        • MD5 SHA1 SHA512 SSDEEP

        DB-wal

        • Path /data/user/0/com.apps.amaq/databases/DB-wal
        • Size 24KB
        • SHA256 2b8cb8091a93c6fb8310b250b3c9f3819bf6eec104a1e0e7d40e619e74ba8b8f
        • MD5 SHA1 SHA512 SSDEEP

        221027_180215828.get

        • Path /data/user/0/com.apps.amaq/files/221027_180215828.get
        • Size 206B
        • SHA256 d511c109923ef900f4681606f17d6a5a50da3d0a0615267e8d83e5bc4d097b6a
        • MD5 SHA1 SHA512

        221027_180216032.get

        • Path /data/user/0/com.apps.amaq/files/221027_180216032.get
        • Size 51B
        • SHA256 c1d449246745b9334accbf838008a0309e705360f9058379a2f1820338093e7c
        • MD5 SHA1 SHA512

        221027_180216164.get

        • Path /data/user/0/com.apps.amaq/files/221027_180216164.get
        • Size 51B
        • SHA256 d5be1a31f970afc7a57472623d6b48ba8878083991027f0ef3e820e78dcf2c7e
        • MD5 SHA1 SHA512

        221027_180216269.get

        • Path /data/user/0/com.apps.amaq/files/221027_180216269.get
        • Size 51B
        • SHA256 dfd8d4f17a85bfa9f03782babc417d02fc8315a96372e90f5f16eb88861b44b7
        • MD5 SHA1 SHA512

        221027_180216347.get

        • Path /data/user/0/com.apps.amaq/files/221027_180216347.get
        • Size 51B
        • SHA256 275e14d8b8cbfcbaaa52c3c6c7a3894c51400ad4ce94e0e0dadbec53aa54c5f4
        • MD5 SHA1 SHA512

        221027_180218117.get

        • Path /data/user/0/com.apps.amaq/files/221027_180218117.get
        • Size 51B
        • SHA256 423d03e6a967d336a664cae0b19c3fd2543b8f16afc4e16e0b3871ae7b1ac0df
        • MD5 SHA1 SHA512

        25bcdf6401de672f_221027_180215839.log

        • Path /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221027_180215839.log
        • Size 352B
        • SHA256 61870956dd884ea54e143c1d5b2ac793a6113099a921c0952b740013dfed7d1c
        • MD5 SHA1 SHA512

        25bcdf6401de672f_221027_180215839.zip

        • Path /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221027_180215839.zip
        • Size 346B
        • SHA256 8947300dd6a0129ac1c50afe017d2c28adc35c878493f9b3c347c6f7af565be5
        • MD5 SHA1 SHA512

        25bcdf6401de672f_221027_180216080.log

        • Path /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221027_180216080.log
        • Size 256B
        • SHA256 a6c83397bb713defae95c1e812083ca3c8edb44c7ff8cac531ac42dc27785cf1
        • MD5 SHA1 SHA512

        25bcdf6401de672f_221027_180216080.zip

        • Path /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221027_180216080.zip
        • Size 241B
        • SHA256 a4c94ccd54f191ffe59ebe0e35cf5058add12b3c89c71f69f1ea7c017b66d339
        • MD5 SHA1 SHA512

        25bcdf6401de672f_221027_180216187.log

        • Path /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221027_180216187.log
        • Size 256B
        • SHA256 bac75d394af1d41b1fcdbe5aee6bcc8a123fd231738bd5d058311e1c3229410a
        • MD5 SHA1 SHA512

        25bcdf6401de672f_221027_180216187.zip

        • Path /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221027_180216187.zip
        • Size 241B
        • SHA256 0dc6f3aa961d9b2209c60c94f0f83463a6f78c9b703197cd17c1a75af03b67a2
        • MD5 SHA1 SHA512

        25bcdf6401de672f_221027_180216288.log

        • Path /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221027_180216288.log
        • Size 256B
        • SHA256 550da46aa44eeeb2f9201b1041f0373bc8ac89de2df446eae2f50efc5af90424
        • MD5 SHA1 SHA512

        25bcdf6401de672f_221027_180216288.zip

        • Path /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221027_180216288.zip
        • Size 241B
        • SHA256 9f8ead58baa2f17c0d9ab17d3ba5341f27bd384b31305c1e0bb46a41067bc404
        • MD5 SHA1 SHA512

        25bcdf6401de672f_221027_180216372.log

        • Path /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221027_180216372.log
        • Size 256B
        • SHA256 0542a78df0da089f3fd8911677c558510e4c11dca21f26838d0402b07eb640f5
        • MD5 SHA1 SHA512

        25bcdf6401de672f_221027_180216372.zip

        • Path /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221027_180216372.zip
        • Size 241B
        • SHA256 e5474d0f98439d2c3e3d4ca14aeb5e94ad8af4543a85109a288f0aee8d6a7184
        • MD5 SHA1 SHA512

        25bcdf6401de672f_221027_180218147.log

        • Path /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221027_180218147.log
        • Size 256B
        • SHA256 cfea4347768c1708b53ad2b855414c0f8ce8e5972a067058bfa5e7ece2d1db39
        • MD5 SHA1 SHA512

        25bcdf6401de672f_221027_180218147.zip

        • Path /data/user/0/com.apps.amaq/files/25bcdf6401de672f_221027_180218147.zip
        • Size 241B
        • SHA256 458fe6382fb2de1c739b3bf9704dba8ab92ca9b5db56901916f019b578906c75
        • MD5 SHA1 SHA512

        WebViewChromiumPrefs.xml

        • Path /data/user/0/com.apps.amaq/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af
        • MD5 SHA1 SHA512