Resubmissions

27/10/2022, 16:01

221027-tgqemacff810

21/10/2022, 10:53

221021-myzlasgda47

Analysis

  • max time kernel
    439363s
  • max time network
    171s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    27/10/2022, 16:01

General

  • Target
    039fc34ace1012eff687f864369540b9085b167f0d66023f3b94f280a7fdf8b7.apk
  • Size 1.3MB
  • Sample221027-tgqemacff8
  • SHA256 039fc34ace1012eff687f864369540b9085b167f0d66023f3b94f280a7fdf8b7
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.apps.amaq
    1⤵
    • Acquires the wake lock.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4436

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        index

        • Path /data/user/0/com.apps.amaq/app_webview/Default/GPUCache/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.apps.amaq/app_webview/Default/GPUCache/index-dir/temp-index
        • Size 96B
        • SHA256 1549f38aa500c10ceb474494cf77819234f23e670c778414ceb9469bbd601e82
        • MD5 SHA1 SHA512

        Web Data

        • Path /data/user/0/com.apps.amaq/app_webview/Default/Web Data
        • Size 120KB
        • SHA256 8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
        • MD5 SHA1 SHA512 SSDEEP

        Web Data-journal

        • Path /data/user/0/com.apps.amaq/app_webview/Default/Web Data-journal
        • Size 2KB
        • SHA256 711d8220029cab70fff6f1f78b3e061553caa7bd50be7527176f9577c8b3bdea
        • MD5 SHA1 SHA512

        webview_data.lock

        • Path /data/user/0/com.apps.amaq/app_webview/webview_data.lock
        • Size 19B
        • SHA256 27486cfa653cac0c46810bfbfd48052d7d5d3ff03e66f4ebd9ff848b234dd4b9
        • MD5 SHA1 SHA512

        settings.dat

        • Path /data/user/0/com.apps.amaq/cache/WebView/Crashpad/settings.dat
        • Size 40B
        • SHA256 06b6ef972522a5e1ab23c533c6267d7380a925b635adf09399d60854b35f98f4
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.apps.amaq/cache/WebView/Default/HTTP Cache/Code Cache/js/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.apps.amaq/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
        • Size 96B
        • SHA256 a5e2cea1cafe054c1fd3068c9eeaae050e527fb384eb109438b456e3863e3be4
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.apps.amaq/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.apps.amaq/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
        • Size 96B
        • SHA256 a5e2cea1cafe054c1fd3068c9eeaae050e527fb384eb109438b456e3863e3be4
        • MD5 SHA1 SHA512

        font_unique_name_table.pb

        • Path /data/user/0/com.apps.amaq/cache/WebView/font_unique_name_table.pb
        • Size 57KB
        • SHA256 0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
        • MD5 SHA1 SHA512 SSDEEP

        DB

        • Path /data/user/0/com.apps.amaq/databases/DB
        • Size 64KB
        • SHA256 0e16c859f9eed28d9503255ce763544c74285ab38fbe245362a1f396a6c41e10
        • MD5 SHA1 SHA512 SSDEEP

        DB-journal

        • Path /data/user/0/com.apps.amaq/databases/DB-journal
        • Size 1KB
        • SHA256 8126020cdc19e80a8f962fd8769bdb76445b236c0f2350275c61fb9e75492530
        • MD5 SHA1 SHA512

        221027_180212440.get

        • Path /data/user/0/com.apps.amaq/files/221027_180212440.get
        • Size 183B
        • SHA256 43a487984e8d72a350aa36bf676e8626671e78cb4f1c04040019a8201db5193a
        • MD5 SHA1 SHA512

        221027_180212639.get

        • Path /data/user/0/com.apps.amaq/files/221027_180212639.get
        • Size 51B
        • SHA256 ccfb0347004502a7cc51851b2435a8e9f5133c1366151d2f78928883ff8015ea
        • MD5 SHA1 SHA512

        221027_180212734.get

        • Path /data/user/0/com.apps.amaq/files/221027_180212734.get
        • Size 51B
        • SHA256 1e5a3f825fba1560bffee6e8c6bb6b528bc3a21093a37a181529edc6417d873e
        • MD5 SHA1 SHA512

        221027_180212850.get

        • Path /data/user/0/com.apps.amaq/files/221027_180212850.get
        • Size 51B
        • SHA256 13584e3172d6d0abaf068d9e47d4c2e811b37cdd17a49684d8f499f380ae23af
        • MD5 SHA1 SHA512

        221027_180212917.get

        • Path /data/user/0/com.apps.amaq/files/221027_180212917.get
        • Size 51B
        • SHA256 cd8fd360977454fe1784bbb4b83eeac7eba66e287f2ee7c660ba63fd444e227e
        • MD5 SHA1 SHA512

        221027_180214267.get

        • Path /data/user/0/com.apps.amaq/files/221027_180214267.get
        • Size 51B
        • SHA256 69c671281d0afeca966a2812a1c18b9890b6f9b28544d7055c1a3ca9fe5182fb
        • MD5 SHA1 SHA512

        363f2be05278049d_221027_180212452.log

        • Path /data/user/0/com.apps.amaq/files/363f2be05278049d_221027_180212452.log
        • Size 336B
        • SHA256 239283d4aa35f775c2ca3f2a59f58d29eb949f7726ffb38055ff39b276d35c7c
        • MD5 SHA1 SHA512

        363f2be05278049d_221027_180212452.zip

        • Path /data/user/0/com.apps.amaq/files/363f2be05278049d_221027_180212452.zip
        • Size 333B
        • SHA256 5e5ddbf39d411fa3b103cd2f045f0794563be17424f8d844a5de657979cec7a6
        • MD5 SHA1 SHA512

        363f2be05278049d_221027_180212646.log

        • Path /data/user/0/com.apps.amaq/files/363f2be05278049d_221027_180212646.log
        • Size 256B
        • SHA256 ceb55e066301975f5d5545b5526f6cee3d929173f9f0295d6d7a2b28c55f6cb2
        • MD5 SHA1 SHA512

        363f2be05278049d_221027_180212646.zip

        • Path /data/user/0/com.apps.amaq/files/363f2be05278049d_221027_180212646.zip
        • Size 241B
        • SHA256 15c9a62ae124d59c3c9e91e3c16345415cad1477c04ca8a19fddb542ee26220e
        • MD5 SHA1 SHA512

        363f2be05278049d_221027_180212744.log

        • Path /data/user/0/com.apps.amaq/files/363f2be05278049d_221027_180212744.log
        • Size 256B
        • SHA256 5d7d3f06ba40b7fd7987338812ba5a59e146bf09aa287b0b707fdc16b62f52fd
        • MD5 SHA1 SHA512

        363f2be05278049d_221027_180212744.zip

        • Path /data/user/0/com.apps.amaq/files/363f2be05278049d_221027_180212744.zip
        • Size 241B
        • SHA256 7fac51013dd272f3d13e0e04d570e55c3d66cd89c1d5677c4a0a326661a28ce5
        • MD5 SHA1 SHA512

        363f2be05278049d_221027_180212883.log

        • Path /data/user/0/com.apps.amaq/files/363f2be05278049d_221027_180212883.log
        • Size 256B
        • SHA256 0f102ea47de2812b86132d60511044ad765913bf9c7e8e28f6cfe990cb44dadb
        • MD5 SHA1 SHA512

        363f2be05278049d_221027_180212883.zip

        • Path /data/user/0/com.apps.amaq/files/363f2be05278049d_221027_180212883.zip
        • Size 241B
        • SHA256 26d5aa7ade20382b1431fae548cbc5c9641fcbdc54160faa4156cd11f13b583d
        • MD5 SHA1 SHA512

        363f2be05278049d_221027_180212924.log

        • Path /data/user/0/com.apps.amaq/files/363f2be05278049d_221027_180212924.log
        • Size 256B
        • SHA256 aaf63ecb0ef322d699d823a212b925785722711b401acf562fd588c28e63a2dd
        • MD5 SHA1 SHA512

        363f2be05278049d_221027_180212924.zip

        • Path /data/user/0/com.apps.amaq/files/363f2be05278049d_221027_180212924.zip
        • Size 241B
        • SHA256 4e1b5f543010a634918ba1fefbf8f3f3a4f99b3ac02d3954a637d89e5ec0c57e
        • MD5 SHA1 SHA512

        363f2be05278049d_221027_180214291.log

        • Path /data/user/0/com.apps.amaq/files/363f2be05278049d_221027_180214291.log
        • Size 256B
        • SHA256 a99df186361c939b314f9bb47cba1d0bba592c46d8ed5894953e3c741fa3da40
        • MD5 SHA1 SHA512

        363f2be05278049d_221027_180214291.zip

        • Path /data/user/0/com.apps.amaq/files/363f2be05278049d_221027_180214291.zip
        • Size 241B
        • SHA256 38804c6801aa4d8a491d4ebc473f196733bf5b4b63046f1fe74a088cd1367c99
        • MD5 SHA1 SHA512

        WebViewChromiumPrefs.xml

        • Path /data/user/0/com.apps.amaq/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
        • MD5 SHA1 SHA512