Resubmissions

27-10-2022 16:01

221027-tgqemacff8 10

21-10-2022 10:53

221021-myzlasgda4 7

Analysis

  • max time kernel
    439365s
  • max time network
    158s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    27-10-2022 16:01

General

  • Target

    039fc34ace1012eff687f864369540b9085b167f0d66023f3b94f280a7fdf8b7.apk

  • Size

    1.3MB

  • MD5

    34be434996b9bc19112f875f0a3711d2

  • SHA1

    ad451e4fc750c83a58fe8f7234f1766ad315a565

  • SHA256

    039fc34ace1012eff687f864369540b9085b167f0d66023f3b94f280a7fdf8b7

  • SHA512

    28d6385703c1591853de9bdf7724594ba0187aeb40accf150b877a2785e915c7dd7ef8720f9cc8f0e33793b6c2b6d88845f3f7fb818e8575cf9daf259723dfd2

  • SSDEEP

    24576:RknbtoZcY5eJDj+6DiASSjctlRSEuw/pzIx27hCzGLQLfFK1RnHrmVXyQZ:RknbtoZcY5eFJibtrSEucp97hCzGLQbX

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.apps.amaq
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4903

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.apps.amaq/app_webview/.com.google.Chrome.HMQj1h
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.apps.amaq/app_webview/GPUCache/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.apps.amaq/app_webview/GPUCache/index-dir/temp-index
    Filesize

    96B

    MD5

    e7641163027c61bcce127cc1c5c38eb9

    SHA1

    806e1b3ad17535d9139dcc68399e7d0820e5d7b9

    SHA256

    aea54110c5dc925ab63ccec91d7d4265006f5fdd4f2ffd9480eeaa97ee08ffa5

    SHA512

    90b220287c5207bac6c86942c84aaeb3f6246696afd1660b07061476cea64d57c83e09ded8902a91ba2b40b2dff4166d4db3bb6bcd793c5317cb1ffef73488ef

  • /data/user/0/com.apps.amaq/app_webview/Web Data
    Filesize

    112KB

    MD5

    b663831f8cc130493476d94f2d7a5330

    SHA1

    043a1956ab8e40821d67043f8a9110a8eb36fb93

    SHA256

    c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

    SHA512

    e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

  • /data/user/0/com.apps.amaq/app_webview/Web Data-journal
    Filesize

    1KB

    MD5

    7866d32b378a3f552100f0b8002517c9

    SHA1

    898d2a41b42dbb421903c9e45c767f973a00281c

    SHA256

    ad427b6f1378721af2c9da2509e1068edfc9e998095fb4ed8e93eef0e4de0138

    SHA512

    26bf6bc0903d9c9a7760a0f204b661ed4a3cedc688e23816033c32a14b4539a5b2ff27bdcba1cee5a7f5c68a3cae638891e57cf4033da3fdcb3e3f07273be3eb

  • /data/user/0/com.apps.amaq/app_webview/metrics_guid
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.apps.amaq/app_webview/metrics_guid
    Filesize

    36B

    MD5

    d4fc2beccc17c0ad063d247a67270eca

    SHA1

    c65aa637a7bf1c1aa2f58891c45a776d57052c59

    SHA256

    f2b99089b37fd2726861e37490680940ff1203b9e3b63f25add0eff1db42c502

    SHA512

    8fb646e51a61b7adb194ab6d8f7f1cb6821226ba0b3a37537f6011a538b45ef54792f21eb8e5b870fc4010259b5fd70dafff890da1e6350e0e97b9e041182590

  • /data/user/0/com.apps.amaq/app_webview/variations_seed_new
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.apps.amaq/app_webview/variations_stamp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.apps.amaq/app_webview/webview_data.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.apps.amaq/cache/WebView/Crashpad/settings.dat
    Filesize

    40B

    MD5

    ee8be52c7760f57fa18dfda28b253a0c

    SHA1

    bb69a781f64a7465c635f1f06375f78906e83e16

    SHA256

    40f33d445b8f8099dd5c25b271da111ea76dba2421821afa60c894897b3a25f2

    SHA512

    30e6fc3ed05f35c7cf7aff947355753024be688f21ae9dff7984569ecf8386e0c7d4bbedcb2d48710f3ffff3c71a1f410c0b2f27628ba0cb613d19810f49c8d2

  • /data/user/0/com.apps.amaq/cache/org.chromium.android_webview/Code Cache/js/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.apps.amaq/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
    Filesize

    96B

    MD5

    7c611f9078ab5b6692f145c7b873f856

    SHA1

    e7e467853b954dc3937838a6ccda7adff43020a2

    SHA256

    0d7002a8cc54e74042c8334244cae180adfd7a33c29c10f8ad3daa9fb357df0d

    SHA512

    1f26843b64aaa1a418aef0e9f3e0e1f545f60a962a6d0cf36c187a88bc8c5fd8125a4c201678725dbadfc8bdcb66c6f7fb2faf8b19b07fda222214c377901828

  • /data/user/0/com.apps.amaq/databases/DB
    Filesize

    64KB

    MD5

    fb29dd37585a48ce8535f4ff3f881474

    SHA1

    e2f796e05e2117c01f134ef59af327426e8db15a

    SHA256

    c1019f98973c157e9a9014b0e92eb5d1aa3519c0b36cb53169a141a6f4b7100b

    SHA512

    55f6a289a19aa3b5125ad14e8a040a324706a41c1d4e9e202285ba41c60675c376f70498aa5975cb70dab30af6675c61ee7d24d63011ea4b642ae7c5dd52872a

  • /data/user/0/com.apps.amaq/databases/DB-journal
    Filesize

    1KB

    MD5

    b77aa5207b8b2d7e663806049b8c5134

    SHA1

    556a53ec66c1abc3bdaef2538332a5b7fc70eb57

    SHA256

    cae53c5315212d2107e3d0a62ce154cb065dfa265d79801dece299b43ad284e2

    SHA512

    81ff7b9c8b17ec403b12d8d63fe361eec1b51633161645b4d3fc659a8e86622f875ba623acc54988519628901ffa9b6d310036ef5eefdd301f9a088013c54881

  • /data/user/0/com.apps.amaq/files/221027_180213791.get
    Filesize

    183B

    MD5

    5b8e6029999573488b85b7d36b8d42b7

    SHA1

    f179729fcded5b5b02bcd542b52e9711f1efafe8

    SHA256

    deee17dcb4f8233186556a91e258e035a8075a0df560c4e58226bf2a8b8399f4

    SHA512

    f18549b6e9d4d2766e65885d3021624e60d472d65ea1f946de5eaf02da4e6bc89597fdf713d2cd73c05c8426925ad8f90078ed08236fef137eebbc9ba59b537d

  • /data/user/0/com.apps.amaq/files/221027_180213975.get
    Filesize

    51B

    MD5

    de304a1c29f85e4882d55ee990f172b6

    SHA1

    3b0cdf9cafd66de84f80302cd458b1080aa1832a

    SHA256

    210b0a0a2b46cd598f23fc6e829b8b0c45dcbaa9516f92467c70aa7978da634e

    SHA512

    883c83e75a029f45a86e4793b2c783ca72c45e3295f204fda81e1818fec70348bd9ab31268360d479d58b874243a17a4499decd36e00ba09f3a4df70211a46c0

  • /data/user/0/com.apps.amaq/files/221027_180214032.get
    Filesize

    51B

    MD5

    a8d79702a3765aa90942b4f362d7c969

    SHA1

    01806994f9b372854ccd0871ccb417dd38af9e96

    SHA256

    4303d357dc2ddf0bb0d8e89126b357c49a14354e039166037f80dff2751942d6

    SHA512

    693ea7e0444d137e5ded64082cc05d4fb6837b2e19a3cf0f00f755c5dc8cf77f5beb117d06a5a12655a951d9e342b9c246f05c5be14a78c2543df63d6dc0a2d8

  • /data/user/0/com.apps.amaq/files/221027_180214107.get
    Filesize

    51B

    MD5

    13ac93a67cc5346055ddb7184fea8c07

    SHA1

    5c10e70b10997332f03dc2c8f48caf443f4dd2c2

    SHA256

    5f046a6f2210651afb09d3c31117ff25712995f805ad8b4c243a7c7ec6a65c72

    SHA512

    7e4a518354708191dd46d03f70bc6677920b3d8f18d65a2e327a013ceb4e55ad0972a8413b532139577886dca0b941419e129539115ffb572ae7f0edcecfb5c0

  • /data/user/0/com.apps.amaq/files/221027_180214144.get
    Filesize

    51B

    MD5

    3e7e53da1d6de74364840b3712722f8f

    SHA1

    a2b641045885f9ef61c6eadde2a48dc6dafaeee7

    SHA256

    146858b40b8190932bf9134d5dba0f98ef8c5a78999e399f76cf210ff607c10b

    SHA512

    1a0d3a55e0b32a8cdb0761a54c62e04d2a49965cea7308216d4d30f144c272789e8fd6f068fde533b5f96494b61ca222efadc2f9284b796cbd130c0fb48b71be

  • /data/user/0/com.apps.amaq/files/221027_180215930.get
    Filesize

    51B

    MD5

    189c57ed9f2f428713889920efe161e2

    SHA1

    4978710e04e01f57a78d88bb3e45f286c8773b4f

    SHA256

    0675e53da05c72e444ac90bec91879e18b26f51005b37a04a751f00c40548da7

    SHA512

    95ede90a414d2779e50c79f8c752899b1e5af5519fe7fb34ff22f1f6aa1f7e3d48d39d238a07ee6e871b3ca4cb5f35d57086f09b96f9d79e698a2913314067f2

  • /data/user/0/com.apps.amaq/files/dd9028baa4228323_221027_180213810.log
    Filesize

    336B

    MD5

    6346d0df928cfc904cd42d03239daead

    SHA1

    e46a692c4819d8ab68ea66d25bbdf605abae528c

    SHA256

    6cd851f069ff6365ef4163a1810f6b6840b26ee52a5ec25fdc76a38aa4b61f7f

    SHA512

    090c44f8529337b0052c5e72c4602fb4ababc0b51cf1b40dd96ab22904f08d8b924080e8970ad7d6daab0272900b0ca4b6cfba0bf0dab91b088afac02f05b163

  • /data/user/0/com.apps.amaq/files/dd9028baa4228323_221027_180213810.zip
    Filesize

    333B

    MD5

    f227975b712c04f0f03f0b4ebe42154e

    SHA1

    a72dd0538083828385882dcf9d60c0180c7ad190

    SHA256

    1101fa2a961a9866fafdc07ec030fd207c57b0da376e685e4f2b640319fe2a07

    SHA512

    231d5cba6cd6f765afbe65229cc1fdde6fe64cca8c7486f4ee8d6c71f820e06816c2bd47fe78c17b29b1b8d4f049bf44f78cf0ffe7ac32efffd3f7faeff7381e

  • /data/user/0/com.apps.amaq/files/dd9028baa4228323_221027_180213985.log
    Filesize

    256B

    MD5

    05a9fd1de689c0b0ca891ce0383da68a

    SHA1

    84eb3e0572dcc3f73911edfa6cad2dfb1a4d7f01

    SHA256

    a8783a606ed1cfbad13bb9d1724a586c8b01aea1846544d32876d58ead441d70

    SHA512

    878546b02cf6b7b6230b122ea6d3ed7f92ddef999eb8e6ec690ec34a703544f3904b8387d423c1067d1c438d8381079a4beb464c36dcf83d7a05d72750eab4aa

  • /data/user/0/com.apps.amaq/files/dd9028baa4228323_221027_180213985.zip
    Filesize

    241B

    MD5

    33ec146f6a5a79fd8e1c996aa688f62f

    SHA1

    abb650c9b52862e5b74274b323ae1e34810d7e95

    SHA256

    e28f650bd64a2d9d32c3880c8749c66e2574f2b83319b39dfc87c985cd93615c

    SHA512

    77eb18f3f4e53fdb43c459f00020dd67d7904a5889918871ec2fe60e134e7b149638c6b84862347c4d21915b5d09f158b1d30cf2b3485e30ae357e1c9d59d38e

  • /data/user/0/com.apps.amaq/files/dd9028baa4228323_221027_180214043.log
    Filesize

    256B

    MD5

    1bb9445c3c097c56885ae05bbd2c4a48

    SHA1

    4c0a3781ee10a8f48a0f4414b2148b24cdf60f15

    SHA256

    5d4e8081b2802484c6d8bd16b48d2eec29b33256c9bc4f3e9ad68c19fe138f12

    SHA512

    80656329c4cc85bcbd2deca69362463ca865759c6cb048738b96ba0aea6203a00431f4ee1e54e7592f41248c5b36a26080690e43da5d626841f12032b198dc63

  • /data/user/0/com.apps.amaq/files/dd9028baa4228323_221027_180214043.zip
    Filesize

    241B

    MD5

    5ffdb005180674fe210d84b4491151e4

    SHA1

    a4f1cb462e4ee747aac18840c96367747c01be47

    SHA256

    990d7459a33035aa1cac82c62a042bd3681b1dfe6ebdd005ef4e8f270a95fcf3

    SHA512

    597e675f07a29e34bb166c081cb87e934b1b7a7d1d5ec5a8b3ff705e61e3933973b6ee0951d1bfe60b058bb51de8930bcc7db307c3879a1e9b6e71be424cac71

  • /data/user/0/com.apps.amaq/files/dd9028baa4228323_221027_180214125.log
    Filesize

    256B

    MD5

    87c39250484e0e1dc53c2d4aaa9a9a2c

    SHA1

    3698924be1a18af0d27b73da6204dd8e320660b8

    SHA256

    22b1956167aecc445d89b63ada53e9ef7fa7028aac2f86bccef73464538db10a

    SHA512

    14e5586ffe47687a7a6bb9cfcfe96d1637c4db1d658214ee2a227233b4ce818b8166f9012f378c6e7ce0aaa31eb74b13d1892c85bb21e4c75d7b9ce4ce6e40e0

  • /data/user/0/com.apps.amaq/files/dd9028baa4228323_221027_180214125.zip
    Filesize

    241B

    MD5

    227bf2d78d5c6f067b42bfa4b2923597

    SHA1

    24871bbe8b3cee4695a9eab19b707e5d374fed1b

    SHA256

    b191ddf5cb375b9fe970ab2458cd3305c24116d4f023c84a89678f135913a4f7

    SHA512

    adb55ce11198acb93e44496b92723d8a43d758b829b6d870f0d88220cc0f6064770f931b87fe53e19b0bfe296671a7d1bbf18e8f9005521ada532aa48ab8db88

  • /data/user/0/com.apps.amaq/files/dd9028baa4228323_221027_180214148.log
    Filesize

    256B

    MD5

    c15762b9a5a596695457bd0b18764113

    SHA1

    e4828ceb1cdaaf266da8c65050d31387479e96a1

    SHA256

    1db1d9660b54fada4e01146bfe185e9deb100c4cbb46bde0d6101c88600762be

    SHA512

    1b779947e0a44fc0f33ebdc5424e3b5f7d3f22abf181fc46555ed3a6f5fd0d5fc155c4fd40774928a76a78a85903fe95ba5bae0beb207c605e1d186caa349a4a

  • /data/user/0/com.apps.amaq/files/dd9028baa4228323_221027_180214148.zip
    Filesize

    241B

    MD5

    299e94ae9e18b0b9577ac8e298f89777

    SHA1

    0db411233ebe8fb8fecf3bd6cdb9f74ece4656bb

    SHA256

    95902c80fa079c589fdc2a03d535f04a71b0eadf32e1cb9598d8de41d05dc63d

    SHA512

    88ce312a7325e48630eb91bd5e8d096d6b97e95c266de4ff7cf05b96ce32dd7d4d2e356c7a35c1aeaf1f56895d2783ea50b15484f94ea8063e47ff1dcf8ed029

  • /data/user/0/com.apps.amaq/files/dd9028baa4228323_221027_180215940.log
    Filesize

    256B

    MD5

    6d3a4ab681288679735f622b5c912d60

    SHA1

    8ccf771bd1fffffb16e382782265fc888205c608

    SHA256

    89f6373a0325615cb4f532bf738ec22e801622ca1b0d0ff566849ef8c066b96b

    SHA512

    dc1854435793e8ff2aebc8bcb09074c6402c5cbcbcd7e19aa7d9654361c11128dfd975761645ade6ccbcff8de84a505e5b18c465bff7139ebb5c356716ad120b

  • /data/user/0/com.apps.amaq/files/dd9028baa4228323_221027_180215940.zip
    Filesize

    241B

    MD5

    866676c246f1e1f6f22b7bebca01e8da

    SHA1

    272888aa310341d6bb78b38d5f81f15a8e7fc5ab

    SHA256

    cef5bb9d1df36f9ff413fe7416ffe3bc38a0e48271e9a7cc3ef75204cc7dd0ac

    SHA512

    214ff13c12f14ab65faebe3581e37c4712dd9bbfbfba8dd77b9c496353347389d285324eaf4fb409b048efa4e718802ea4aa4fbd3bebe3dd5d5fdc32db3c54a9

  • /data/user/0/com.apps.amaq/shared_prefs/WebViewChromiumPrefs.xml
    Filesize

    127B

    MD5

    6ef709b8536878951e87c29a1518fc2b

    SHA1

    24376c70b00152501b3d98df61fa7db435339172

    SHA256

    10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

    SHA512

    96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9