Resubmissions

06-11-2022 07:36

221106-jfld6scfbm 7

06-11-2022 07:25

221106-h9em2shgh3 7

06-11-2022 07:24

221106-h8t2cahgf7 7

06-11-2022 07:18

221106-h49agacacp 7

06-11-2022 07:18

221106-h48nyacacm 7

06-11-2022 07:16

221106-h37egsbhgm 7

06-11-2022 07:16

221106-h3vqpahef3 7

06-11-2022 07:07

221106-hx11hshce3 7

Analysis

  • max time kernel
    1272988s
  • max time network
    155s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    06-11-2022 07:36

General

  • Target

    Kropyva-1.1.7.apk

  • Size

    11.3MB

  • MD5

    6d177acbd0c9b70d51d07ec518d71454

  • SHA1

    6b1f40a3b69b6a514ef7c0023dfa20159bab06c3

  • SHA256

    7b0fb743a07c9a81c0afadda49f060ef42489c4a1174b87ed5ba4a45b5bcad08

  • SHA512

    8548b343d18337f6666da184e1ee66905c2d70c9c422a2b43069a543d577e855d377721d5b693452581ec2fd4ae3da2af4866b51432e0a191586577a4e81281f

  • SSDEEP

    196608:qtGIJ25ggCtSAi4gAwL5VNSxxKOa5VNaKrVVN5VNz:uGIc5ggb4XwL5VNIxKOa5VNtVN5VNz

Score
1/10

Malware Config

Signatures

Processes

  • org.fdroid.kropiva
    1⤵
      PID:4382
      • su -V
        2⤵
          PID:4609

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/org.fdroid.kropiva/app_keystore/kerplapp.bks

        Filesize

        2KB

        MD5

        58e8a35617c43e56c2ccc5cec7c541ff

        SHA1

        4363be8ee605ee0489e4d5fe57740b766000e021

        SHA256

        c168d729d3fa6d26c9076d8f0de9aafdb6ee3f22a8b577e2ffdbebd08ba29bae

        SHA512

        120b29c2246030ef8b059341b591ee864a31fe891cc776209dd6500d82cac14f46ac0fa89375bab62a51078d37197cb9d22458a328a9fc4a50fa834307162cf5

      • /data/user/0/org.fdroid.kropiva/databases/com.google.android.datatransport.events

        Filesize

        112KB

        MD5

        42234a0297173062f6ed764ca6c0208c

        SHA1

        d8105d91e5557e0392dc749fbac6974d2daed956

        SHA256

        7265e8650b06d78c24ca70a41564680abfe6e529ce6ff5f5aa7504caf9113dc6

        SHA512

        001960aca53baf55b045b0b1d1f8609d1d614bb145306da3d8eca698d33d3a6d5b66a81cedb8a581b7e0a9fa97349b0ce0b19113564ecfcc41ba95201b871f53

      • /data/user/0/org.fdroid.kropiva/databases/com.google.android.datatransport.events-journal

        Filesize

        1KB

        MD5

        a714775266b72ae8e19bd204febe3a5c

        SHA1

        8202a31cfd0a8b7042c7574c18f7c1edd7de27bd

        SHA256

        6137135d9bf9c1d5a7251ae779a4927d62b6e9796d69ada0b7b4ea3e3325358e

        SHA512

        1a0745e6b941296f67cc0af1941f0f0adcb2843797afb6013dc6ea2e19bdb9430238f51be7bffdea0cac55bacd685073c857911dcea8947194879406506354b3

      • /data/user/0/org.fdroid.kropiva/databases/fdroid

        Filesize

        136KB

        MD5

        8e68620d08d34eb13def7ff661aba7ae

        SHA1

        4eb9a447b9f596e52f235f32f166de53846da085

        SHA256

        4b073398f60507122a9e42bf7128604ff9999397740a8e06cfee0e05653afd95

        SHA512

        d4f965be6c9fd400b018e9cb157ab24baae76ee282d68765a6f47622d8b45836a8306e8c2e098471de8f974d6674ac1dbd8929e54e73e8f9c02680f48b5023e6

      • /data/user/0/org.fdroid.kropiva/databases/fdroid-journal

        Filesize

        1KB

        MD5

        6cd76290ae00ada55caa4de8992da28d

        SHA1

        768931bc4cde74eeacd25b08e1c438fc0f8f6357

        SHA256

        770bdbec73d1adf5be58abf2644928e7d9b28a72a28d2d3a844ace21249c1fc3

        SHA512

        152f1bcf98f4402000fb9e8a37fac5591b8fb34c698cc6bcc16e35cb01ba01f90938ac4ef59493ccc9d65d8a71af83531bb5be9feb569c27e131e6f69fec9ecb

      • /data/user/0/org.fdroid.kropiva/files/.com.google.firebase.crashlytics/6367643E03DF-0001-111E-6C130E02CAB9BeginSession.cls_temp

        Filesize

        75B

        MD5

        f5d769ea34cd710fa5bb456cf8a68b35

        SHA1

        2f0bc33d4ae56dc3a7c0ae375f79801cb8633519

        SHA256

        5a4b315caa33deb894496d19ebdba6e258c4d2016073f681fb9cc13dbf6d9c62

        SHA512

        9d702f792171961922717c5dfe6d79722c4d53a091466f67fb9ca5032d6b327a73e0cf89004a563d369ea438a4b0bacec0055c0ab2f3cc92da4526c79495be0a

      • /data/user/0/org.fdroid.kropiva/files/.com.google.firebase.crashlytics/6367643E03DF-0001-111E-6C130E02CAB9SessionApp.cls_temp

        Filesize

        73B

        MD5

        5662ad8b7172b3c6d0929f9b2fe56c94

        SHA1

        3ef3aefd265f8205f47e4a30eb5da39f09096ca1

        SHA256

        56d94d3c476962002bd59921717f81ba76804e83d252a74a7e466a1a2df6d3eb

        SHA512

        7114425b52d1dc088634bb637b6b54e15dd937c3c879a4c5d930cbb6fac0a4c4ef3f4afcd160552357e5907882346417940c4d8b27f8b8aae3c30c3b39c83b1d

      • /data/user/0/org.fdroid.kropiva/files/.com.google.firebase.crashlytics/6367643E03DF-0001-111E-6C130E02CAB9SessionDevice.cls_temp

        Filesize

        48B

        MD5

        9e5d5c3f7bb8ddddf5338b41a76c603a

        SHA1

        412c5a6b2c8a3543c596b6661fa9dc6bd656b5b7

        SHA256

        6da493eb399d920ea4d87aec9adc11f6c54db9b707654ada91f4fa97b4b990d1

        SHA512

        0658c762ce8eff7bf9eafb20c1cee3f5342cbf5b3903141a026d6aa532b24fcae8f4a4ae4826169d5633edc35314c412a31ea81bb977597d54947ecebcf0cd0f

      • /data/user/0/org.fdroid.kropiva/files/.com.google.firebase.crashlytics/6367643E03DF-0001-111E-6C130E02CAB9SessionOS.cls_temp

        Filesize

        15B

        MD5

        b3d9541cc92a9153d14e5160f8d8c008

        SHA1

        2e1ac80eb381dd82a03795b682f92020348c0113

        SHA256

        1ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d

        SHA512

        78074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f

      • /data/user/0/org.fdroid.kropiva/files/.com.google.firebase.crashlytics/6367643E03DF-0001-111E-6C130E02CAB9keys.meta

        Filesize

        32B

        MD5

        a229a3ee08b0fe48cc52acf19327b41b

        SHA1

        3e78e9ad21aaaca3a396cb10604b6e2bf5ac09fc

        SHA256

        00ee0abaeb411edc480a999908b7c51105a774797d39aa7b9fd64b2e01091011

        SHA512

        53b9eab212c22feb6790134248a9e654fe7901d2d56432c1be3b6d19de438d013c4ce50fc6869413b25d15b3109a328f569b7d05d398552d491b7a9048d115e2

      • /data/user/0/org.fdroid.kropiva/files/.com.google.firebase.crashlytics/report-persistence/sessions/6367643E03DF0001111E6C130E02CAB9/report

        Filesize

        749B

        MD5

        fa56c7401381941148c96def8f14211e

        SHA1

        5e0c81597c9a97d8b4c76aaa239801585e772997

        SHA256

        cea449e4c82f4d3e429185fd4f242703e0b209165dd5826d450be4591faba02e

        SHA512

        a7580f2ff90e8a3b095f4603b9511bed09cdea4517eb956f49a493270ae49f8b4423b35da2f71d5a8e1b78ac9f2b614c77cbc985eb2b88629cf4d178590fe77d

      • /data/user/0/org.fdroid.kropiva/files/index.html

        Filesize

        2KB

        MD5

        90804e9be55fc944f6491921da63460e

        SHA1

        2ac95d49975fa2a55fe9e3fda2a6e145bb23832d

        SHA256

        a19e0eff08e93c95c5ea1cc4ce66a0047f5c3c5415c010b35d18fe057ec2830d

        SHA512

        772a543ead07875fbde16fd778431ab8490feed9d5e0f066a3db48b3eec53a52f9658ad4e93438aa58e5f9825ae6afca9e55f8b4d3d7887895651d0788078bd3

      • /data/user/0/org.fdroid.kropiva/files/swap-icon.png

        Filesize

        4KB

        MD5

        f757d2d9a3c5b0173f13b6efa384437f

        SHA1

        87edbe835dc0a43a13e7770d63eb68daaae75f2c

        SHA256

        6a7475983c61995aeff73a3b040ca9dbcf3fbd7ff5db1208111e4043c13d349c

        SHA512

        4d745e71399aea2744827b1ecb1fe5fc266293b0bae048a27407687bb9bf8f12c8f7759532b467a297e719ccf61d3f0e6a1ae77efa06ef6495bb1c6eee55f941

      • /data/user/0/org.fdroid.kropiva/files/swap-tick-done.png

        Filesize

        1KB

        MD5

        fe2a6685876286fbb026f2ab6939bf32

        SHA1

        2d34d054793c69e4a2aa76fe9a6b5619b11ef62e

        SHA256

        8f97ed944950a56ad3c07007601bf88fedbca3dfd747b72fbcffa80f542dd0cd

        SHA512

        26a7840e82845ecbc8b28b6c680f52927c287daa17daac0664c704a888389544b76288fea6232f30699f33c73b0cc7aab58baa0f6b4d2a5403347e8b2539249b

      • /data/user/0/org.fdroid.kropiva/files/swap-tick-not-done.png

        Filesize

        1KB

        MD5

        3417cb67a49f368211e5103d325554be

        SHA1

        94979067da9ec07f8fd0136a28cf2357ae7a007c

        SHA256

        e03d238719871b613e3f385828fedd79083c82b6ab3fe5257ea9c5542d9ec82c

        SHA512

        c6cd4262978eb80a9a7ef12947512c9596c904c08876df0a9d35b1b17ebc6a8d3dde3d437cd4f09d87ea1941c8284bdbadd67d741a2e47e0c5537f1f4969fa48

      • /data/user/0/org.fdroid.kropiva/shared_prefs/FDroid.xml

        Filesize

        123B

        MD5

        37ca1f84abaa4d84470a0b19ef46ed29

        SHA1

        d1487fab62763a77c971db991f094e5c59c3f1cb

        SHA256

        835cccac6311ba0038092a7d05e760710b313704a8de31c389dd7ec52f94d4f7

        SHA512

        a2b8c8c1a8d138a1502ee4149356a1833f2580242ed4fb3c8df55d9803afac2d796a4d0a3ddb68f1d58fa8c6e7c4ed658ac3becd4d7017e37f9f28e7c084725b

      • /data/user/0/org.fdroid.kropiva/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        188B

        MD5

        2918bc98ba8d7b58fe7e923dbe560222

        SHA1

        744994d485f7806903ed917e5b70fe7ce6b96bcf

        SHA256

        a4d58cab4246e546f8607090dd968421236c67dbe3f63b2cf7ef2a8276026fba

        SHA512

        8d21a2b7b65852aef90ac7abc9c9eca018b9e4d2ed5c721cd1268d52e0ba172ff41ca77509711cfe79b18dde3fe27e03661d529a7e699cc4c5729272bb956c1c

      • /data/user/0/org.fdroid.kropiva/shared_prefs/FirebaseAppHeartBeat.xml

        Filesize

        134B

        MD5

        5332b4ef9368db718ce27ef0c4bb518e

        SHA1

        16c27523c9449927421e03b429c70eaa959f3aac

        SHA256

        605a08899e1db1059b5e853ea4e9a3441091743f8c29e698bd10a4afee078048

        SHA512

        d3c898fe56b3f674bf24817efb8733073b840834475af4082f189492e69c7a89fadb2c46ed8e7fa7ef40a288437a6bad38ceb8b8d36df0b160dbe30943518526

      • /data/user/0/org.fdroid.kropiva/shared_prefs/com.google.firebase.crashlytics.xml

        Filesize

        235B

        MD5

        43274d7e4cc101faa8d21c0eccc56f5c

        SHA1

        7d3e8e8750fe35038c94fb385bed605dbcd686c1

        SHA256

        fa06abeb9524b65be65139ad962aeb8bde301c3c026ba33a819bdfb3ac83fdbf

        SHA512

        4ebee47aed74a88700afbda978a44ad9dbbc06fff555a55b903ebd7d8691850b600a649b7be1c25f708d47d0c24f03d1ee27b54fc77527cbd71a35327657a3aa

      • /data/user/0/org.fdroid.kropiva/shared_prefs/org.fdroid.kropiva_preferences.xml

        Filesize

        130B

        MD5

        d0f4a0b556a3668735938feae0f4ff39

        SHA1

        cd987b94fa947da5ed68ad1f8dd3eaf078b43780

        SHA256

        1c73102647aee4dd5be9c77f64a58ea12cc01fa397f4809e7e3fbe0ddcebcaa8

        SHA512

        8f5a89a049ed59dc376febc22a12d478fca00c6ece23bce33381d02ccec5da5e74ccb812b89bf60a5cbf7381e30bb7b6060415bcc5433ec435389df897552805