Analysis

  • max time kernel
    603691s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    29-10-2022 09:29

General

  • Target

    a7d04c4325fa9b17e038d56ab0cfab110c112a87386e9b26b22439a2c1786fc2.apk

  • Size

    1.6MB

  • MD5

    c28def81f94c66c5aea039fd7d1c609b

  • SHA1

    ec4ce79ed15cfdc1b20925c19e003a92338452be

  • SHA256

    a7d04c4325fa9b17e038d56ab0cfab110c112a87386e9b26b22439a2c1786fc2

  • SHA512

    c075626120c016bf9fcb59b56533e0c67f62eb34bbf6d60c3c3617e71b3199a7832ec4a39c73f8845d10632ccc53ea23ef80f5a1764d06d3a681f9ba4b034bd0

  • SSDEEP

    49152:xxlFCpB4NwR0ZdKS/M0BQqZLeSON8Khj0ZT5OGPPsRFV3Q47YQWSAS:blgjn0dM0eSOLj0ZT5OGPPQ3Q47YQWSb

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.google.beauty
    1⤵
    • Requests cell location
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4091

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.google.beauty/databases/access.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.google.beauty/databases/access.db-journal

    Filesize

    524B

    MD5

    0a3312bc28469fc974e9c3cd50ae7faf

    SHA1

    99f420c80b249a9b18c76e254f2a7380cd4d4326

    SHA256

    010f00ff0f50e2f3e533c38793f67468a0330d7211c4cba5150c1fd136827daf

    SHA512

    4b70497b45d7484f32284f449a9e0318b884c68ce77651b9278fbb061af00f6bee77b3ff787f763c964e22d8f8a637d2e32e0db8ecd7e8ddb91385202ec4d2f7

  • /data/user/0/com.google.beauty/databases/access.db-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.google.beauty/databases/access.db-wal

    Filesize

    56KB

    MD5

    f5dc80595b0d56d58498e3d7de772ed9

    SHA1

    655b5fb05c1182c93495a92b82b3f2a160700540

    SHA256

    55d019701b25be2fe8fad2017ac32ff9b8792de2f445a27dd85ca93e0ace44ab

    SHA512

    197a4b625c61c004ebc088b689299aebf097e96625f87561d549bbaccb230b3a8ac818e760155beb056b69ca0072b99c589c17b8a6ba007fa20182d11460cb59

  • /data/user/0/com.google.beauty/files/__local_stat_cache.json

    Filesize

    25B

    MD5

    2d805b13f2f28dc3ca9bbcc000f49bb5

    SHA1

    9eac165b4d81258fd3967cde5cc53b53b1dabcb1

    SHA256

    c8a6624f390568f0ddcb9841336aec6a564460fdaf6624e562b32935b8956f19

    SHA512

    5db8c57bab36bcf9db698c1dce70318cbffc156dd1d1c1e09e5b7ba60aff07b598ebbf26c4bd8a2b03bd6e59ef2dde2d944a22a8d8a19ecc8378e83afb7c83b0

  • /data/user/0/com.google.beauty/shared_prefs/Access_Preferences.xml

    Filesize

    205B

    MD5

    33a0de20ce0f5c056e1478689bcacc8c

    SHA1

    89e86dc08f1431c04dda62bf6cfd61f36f029419

    SHA256

    156b77de74f1bcebc31f8a5b3a546441ec1fb3cf7548e81a43c81c8b616a7f7e

    SHA512

    31e53fc2f0d653a5006ca1050ef11de55ce400468eaa3778a99cdf4f739118a54941fb3deba837317117220e6bf85aacaa1bddfbff8fb78b49fae27356894b12

  • /data/user/0/com.google.beauty/shared_prefs/Access_Preferences.xml

    Filesize

    246B

    MD5

    3fd03019c547921fb00374c645d2ea81

    SHA1

    964feef8761c2eaeada744fbc6b67410f69af581

    SHA256

    48be991536153991003f8a30b1a11a98074b9a709cf3ca7585bdceb03c641449

    SHA512

    79d1783319a1fdd33dddcf53964b4975c992541abcecae053c2b73b65700b5c15c082d240707b86861ab7426c6dfce2345d3be5f94dfb954611d7c238c1f0658

  • /data/user/0/com.google.beauty/shared_prefs/Access_Preferences.xml

    Filesize

    288B

    MD5

    90f205467ca48f8a5f61c06e120f82a6

    SHA1

    ae98d335e7db5c13868b8bde89a759048a93e4b6

    SHA256

    a8cb76f68fee0927cd9cd3735f4d086386b227145e37318e4c1aea9d75bfa659

    SHA512

    2acc7b13462b588f7fff07b5b14a856d4af994516430d8d1594fd55c65bfe29f81a38d3cf78605bffffbfd43163d0aecab7d710b7893ec0459a758f2e5cf862f

  • /data/user/0/com.google.beauty/shared_prefs/Access_Preferences.xml

    Filesize

    381B

    MD5

    33248052801f79147185e603e0aae286

    SHA1

    9a2067e21128abc3c28faaaa980ad3aa45fb00bc

    SHA256

    54c7941eab9d392112fd60056a3814e0f873c67f2e817fe0bd9511c1af4c4fc9

    SHA512

    9217b3acadf4526a6c762e45dc23cd69812f02896e7de5d7ac5e19579e5b347214b29bc2ecf53acfafb044512588882018e2eaa2c6e3b391e94a48bd71ed30c4

  • /data/user/0/com.google.beauty/shared_prefs/Access_Preferences.xml

    Filesize

    441B

    MD5

    849ee206cdae7a2f6c676f2b25514561

    SHA1

    d4e9fe15fb170a29b0e2c5b69111323fc1d76951

    SHA256

    627a6df4cd52625ff8355f129571802622f83a55d5b07bf1f1ca9c6d4cc511ae

    SHA512

    5b192f431e65f0cab6d2ec7400f6806a2a8c124f901bc29e833d86bfe7f5d78b29df25824b48f022abb4bb7efb402d5fd14874330137b323e9aa34bed612e2be

  • /data/user/0/com.google.beauty/shared_prefs/Access_Preferences.xml

    Filesize

    500B

    MD5

    852ed137aee0bdb80b6f0da9cc46d160

    SHA1

    12be8cd08c6bab2a1c5a9da043350245a0692cc4

    SHA256

    2ed68f58b646105485cd5566ecc5fa91babb0fb12b3ed56958b0608b35acd7ff

    SHA512

    7f52dcb953ca17f86c202519c1e47a2477290848738a7dd3b7ffbe2ba70c4e9bc8bf32a5df931dc4b2adc3242281694dea6872330f919791a87b1ddb3a021947

  • /data/user/0/com.google.beauty/shared_prefs/Access_Preferences.xml

    Filesize

    559B

    MD5

    9981e6b5e0824e5208bfc21abb54ddea

    SHA1

    4c1c35918e2c40777ffb749dcd442308b46a559b

    SHA256

    47bee36d32acbd8d691c9a485a35b444f4ef47d16423081bea2d21428a921d30

    SHA512

    5363094f6ec02628b8bb27df6374dfd958aa4aeb0a05a0557a41750a696c9121d571dcefb7c6f6ddf3c32302a42a671d074ee84ad9719197527078441317a15f

  • /data/user/0/com.google.beauty/shared_prefs/Access_Preferences.xml

    Filesize

    612B

    MD5

    a2305b7dfff4665dfc4b577d054c5423

    SHA1

    85717d04c3fe2880b6e875f4ca1bb3e3b232a5a6

    SHA256

    89bb855f64e5ef0ba5c65383a02ca3e958dc7daa89f38cd563f5a3ed48f159f2

    SHA512

    b8e0a01f8bb888bb58b599fb278f39f3d11628249e05bdbc2abf22df7c525a16b8cbc7cf469b6398c6de6ac1b73bfb25ea14a67f9fb3ddaf8b0d79293be31e2b

  • /data/user/0/com.google.beauty/shared_prefs/Access_Preferences.xml

    Filesize

    118B

    MD5

    b1424e5a864eb7061a9029dda1a8a4c0

    SHA1

    403f0af5973fed962446793cabc81bcfefcc742a

    SHA256

    3f84b8e2ed053d4333f249ff4f4423d7c06b6cddb0137f2099222c4dbc782e2e

    SHA512

    ebce0c1f8180d645b53ff91579c29e0b8b44783195c02814d7cd9e66efef9610a890facecd2a69f50f43486fe0b8fd8cb530ec6fc14836290ecff85fd3866c3d

  • /data/user/0/com.google.beauty/shared_prefs/Access_Preferences.xml

    Filesize

    163B

    MD5

    187ffe4affc4a9ae628e9ff48dcc0261

    SHA1

    52dab9bff4668f94b355cdf8d55b00e2f4583c96

    SHA256

    e50de219cf880d641b54887fd6ea35e1c0f75c4a4b125bc5ac6349bc1f8b38d2

    SHA512

    310b82c1458848773a2e681f8fd3e40cdfb8d91f92c4e84f2dc9630a63d4cf4bbaf4d2dc29476a336ea1cb7f8df602272f3c62543ea28e752186d0f884a8b5d1

  • /data/user/0/com.google.beauty/shared_prefs/zwkj.xml

    Filesize

    118B

    MD5

    a2d3d6990cd27a8d6558954407407a50

    SHA1

    6b72426b7b04cc533e61c6dbb2c12f71a0d01a51

    SHA256

    f99b018c9368b12a64e90203426ca3d7143a9d36aee90387d2913a964de736c6

    SHA512

    41b3fc98b0b06fd72933ac7652066b63e4d4aad8060fce9def1dfcde3df4a0e559482b96e29bc43c6cc6915114cacdf99172cdd170fbb545a1de59611a121145

  • /data/user/0/com.google.beauty/shared_prefs/zwkj.xml

    Filesize

    156B

    MD5

    80d9d0e041ff2d6381bdb4dcc2f0ff7f

    SHA1

    c72ae4e69cf3950c33ef629c5ed46769fbb869a1

    SHA256

    a6b26272ad37e891a2c45f84ea9a7a2c14a6a78367fc7d1195b0bfb582693caa

    SHA512

    55d0b91baa7441280703a2cef969905eaa5af88459a960e90be1026b5469ba63bbbb4a60a4bc48a5228919407b584cc8c831dd46dc2dc776e8df60666f572295

  • /storage/emulated/0/backups/.SystemConfig/.cuid

    Filesize

    89B

    MD5

    c9e59152233adab12407b00dc4061a08

    SHA1

    6b7f0008c4fa47fc8f46fb4678b6e63e4e4445ea

    SHA256

    18c96e08d42eeeeee0a266d86f866f06975db8d3276105d90726e2511b1ee469

    SHA512

    21c4fa2596b17fb5c28402f661ff4a05bd54f896c6ec05ca1683f11b63387f6d81bc67d2df1f2f1f24b0d109b3d59e9135817d20207812095145b3ee8903947a