c139ed5af5cbed75070dc06ab738e9dfd4d8f1bfeb5c7b4f264961b50a6f1b77

Analysis

max time kernel
1310573s
max time network
1756s
platform
android_x64
resource
android-x64-20220823-en
resource tags

androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
submitted
06/11/2022, 17:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

MAPA-2.7.3.apk
Size

22.4MB
MD5

d39e2e20aee1cb6fc331272b95da7918
SHA1

0720caefbdc9d31b92328ddc5a9fdc439e94a7c3
SHA256

c139ed5af5cbed75070dc06ab738e9dfd4d8f1bfeb5c7b4f264961b50a6f1b77
SHA512

3072bc644e868c22fb9a0b6fc24e885feed6ee9611ffbd9c80b562b137c0548711b9a967e607c03f0cd00dd12f237b87abaf5c3f23702caf80408b46466666ef
SSDEEP

393216:aHnSSIek6hFynXCo6Z42idrdqUTh6xkb0sy/AKLxs5mqYQltCsBBLir:EnSNewXCoUidrdqNxkb0BYKLxs5VXRBw

Score

5^/10

ransomware

Malware Config

Signatures

Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

ransomware

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	ua.mil.armysos.android

ua.mil.armysos.android
1⤵
- Uses Crypto APIs (Might try to encrypt user data).
PID:4778

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/ua.mil.armysos.android/databases/com.google.android.datatransport.events

Filesize
72KB

MD5
bc142a9d8af0b07d8c04e264ee620be5

SHA1
28eb96a3444096882ebfd5e7639536cf0258f6cb

SHA256
e6d4ce7d3042fd5720ce36a44792b57818cf1d1f9b1f6d99bb320cddbfe6f4ed

SHA512
cdbcb3a4ee9a450a1ba69e6b2600f5a90bc97ee4d631dc22361e2fd80c40017c304192bcb094e4844bfdfb034e13c1e5d4e5bafa0d195645072cc954df9e9a59

Download Submit
/data/user/0/ua.mil.armysos.android/databases/com.google.android.datatransport.events-journal

Filesize
524B

MD5
d5fdab1f61657b69fe60116b1bb5d62c

SHA1
9ee55f4f4e6c3ef4183f1d43fbf4ecaa5fca5cfa

SHA256
62d015ebb2d9eaf426a46885f9fb39338703ad3c1f00123d5829e9437c8743ed

SHA512
5d46dc04c3d8adace907f91f1aa9fb734edd537b8288ec83c25fcfe8303651c3e5dcd288fcc6560e9455a0f46ff2498b8c39785c575800e74d1c8bb05e6cfc61

Download Submit
/data/user/0/ua.mil.armysos.android/files/.com.google.firebase.crashlytics.files.v2:ua.mil.armysos.android/com.crashlytics.settings.json

Filesize
603B

MD5
2824b40cf2968bf90301a88629b7ea25

SHA1
42224f1b406c648b7631237a604c5b5a3b442cc1

SHA256
1acfcc7695668a99e8957aa292e555493ffca31940742c4a3b7e27beffe279ff

SHA512
e5d79e54228977fa93157efaf5b948ea567e4b6709d8b149f495770138d6f0a6653cf9548ce0c73ddba6a218729d9263501f66d95605f68074f2e24f8fcc8eef

Download Submit
/data/user/0/ua.mil.armysos.android/files/.com.google.firebase.crashlytics.files.v2:ua.mil.armysos.android/open-sessions/6367F0320239000112AA1E9222DE62D3/keys

Filesize
17B

MD5
04ee2c6ba729e0339cb379785e54375f

SHA1
80080c0760fde4bdfaeefa319d83fccb9f2806ec

SHA256
4c931349d65fc5640fa8d982e8f896e3513be2e9df5bcf41933367249a402468

SHA512
b616f5295b8ff621b0e691a8a038c2479acc97ed2cb43c88af9698f3eb6db168f63d5ddf6d64135cdb45bfbb8fc9fba3766950764052b24ccc6cbd0c7553ea86

Download Submit
/data/user/0/ua.mil.armysos.android/files/.com.google.firebase.crashlytics.files.v2:ua.mil.armysos.android/open-sessions/6367F0320239000112AA1E9222DE62D3/report

Filesize
750B

MD5
cf041b3ddd50fcea042c9cde0e39c239

SHA1
8a21ba723d2699f8f2df00e896b5bc59ed496e36

SHA256
5eceb5254243edeec8aa62a9480e21ac91d2e8116d4ce8721d1df3cf6394b4b4

SHA512
f77775450286d7fa0d310a25f9c0a44e621521584516f309ac0268d89d3d93f9e972f7c6614c6ec5b43410092e9aae2a66b8c9406a26dc71b2df52df3d225f46

Download Submit
/data/user/0/ua.mil.armysos.android/files/VectorObjects/Fonts/ARIAL.ttf

Filesize
266KB

MD5
8d223b3ad8d4819e9dcf22757e4cc2c4

SHA1
54409697aa6122190669cac73b49866f5210b184

SHA256
32015260078e6f19452e8f97f2295a5013e7569b84c53de028bd6789c17201c2

SHA512
33ef5dab8154dc96b2af30d6488ffb55486c9cbd5cd153aeefa2a1f9603e6dae8df790a6e40e2ba00e76b3ef17aa86b4a6c7e6faf4d2f16634f88829385bf44b

Download Submit
/data/user/0/ua.mil.armysos.android/files/VectorObjects/Fonts/ARIALBD.ttf

Filesize
277KB

MD5
579b22c15b24dde38e737ce69ba4e993

SHA1
5d9a444e58c8fdbf916d8802d93530d043ada635

SHA256
f8f19c2bc7205605e2cdf28725b98c818d7079a4a33a654facffc74a67b4294c

SHA512
2e4cef4147bab2ae148f4e318c0734515975aed7a631b138122d8fd4a4cf8ac25b489759a941bd2859fb41e2604a7f0213c927f9a3d6a8c8897229e267d37595

Download Submit
/data/user/0/ua.mil.armysos.android/files/VectorObjects/Fonts/ARIALBI.ttf

Filesize
216KB

MD5
9300626f67aca91609e5f8a8ed9928dc

SHA1
6bff13716a3302489c9c8022921e34c8013a811a

SHA256
6f6c9fd623ce11f20ad3324925b79608b682d7144bd01693fb3e0c027d1b16a1

SHA512
cd0c2d358703b36e71676213a883703e1f890469d0608fa291786cdbe967255b856a2d1b2b10b35cd3f8c4f1868fb9f7b4b6ef8517f1ddae4b62023903114f80

Download Submit
/data/user/0/ua.mil.armysos.android/files/VectorObjects/Fonts/ARIALI.ttf

Filesize
195KB

MD5
aff61981c45adf5bd823654376942e73

SHA1
9e82a52636653b72f7dd20109631662df195b75b

SHA256
1436d02fc073cf3c730befb1363fc0b22402892111ee6afdebcfed96aea91875

SHA512
883bec949f4ba9693925174bb23a0a9f881890657ccfe7519bc3b3dbf5f132284e12e09363a5c23aca2faaa4e89954d76ae1261141e2c0bb220e11c9a59af1da

Download Submit
/data/user/0/ua.mil.armysos.android/files/VectorObjects/Fonts/TIMES.ttf

Filesize
315KB

MD5
79032e1bc16b127ac3863dcdd3ca9168

SHA1
5af74eae397a38d825573c17e2426f41047df142

SHA256
757d9fb4ba19409e8e1063e780dfc839358bd979bcaa53dc7b0f44f48aa61472

SHA512
861873f599ca52d40e0e885e0d9c175b152472cefde6ff084f6384659469bb71d38aea976d464298893a302da536d862aa65dc383af07c43bd0781cc980837a6

Download Submit
/data/user/0/ua.mil.armysos.android/files/VectorObjects/Fonts/TIMESBD.ttf

Filesize
318KB

MD5
0a8f63c829b3b7e220c109f00bd5f5c8

SHA1
4a9e609e0028ee5253bbfa5047191f82cf40432c

SHA256
6239ead125700e55b5f35d6f9830b9d011fe7dbb0808435352de09e0579f2e02

SHA512
1b8ef2d1d675bddef69c40622e751310b7ceaabf85c794c2117ac94b0115aaa0f04805bd889310bb1e2d65aa68472a17766524b85c77465636e3eed98c4a76a9

Download Submit
/data/user/0/ua.mil.armysos.android/files/VectorObjects/Fonts/TIMESBI.ttf

Filesize
228KB

MD5
8ddd24821aa5c1037cac733d6346a986

SHA1
4a028ea2125e485ac66cda14ae852f19bcbdc3eb

SHA256
928f1608083713d30c457e9ebc9579603bba239f85e6b8890cbfe20c8991d508

SHA512
583293d469a4ec41ce91bba9b5e5e6124ca608e74973a3846b579fb700cd6bcc595f91905b5bbc862a0957cacaf6c351980b1ca74646d37dc7745741508c6867

Download Submit
/data/user/0/ua.mil.armysos.android/files/VectorObjects/Fonts/TIMESI.ttf

Filesize
236KB

MD5
ab9d526527425c40e860de84a5291a0f

SHA1
e14daf026a162119197df59cd29df87b6db876a2

SHA256
80c92a6321dcf6f75d3ac33f1a94cf1645c27b0d0c8333f3ba0a3cda06457344

SHA512
301f8fde0887be660b0a6585ae9aafd3781bf31bf2220f7b9d303df744991d3658fefb9e9972e85ac87158aea4203cce4f3b10ff9ac0ac8b438ade2a105d1a2a

Download Submit
/data/user/0/ua.mil.armysos.android/files/VectorObjects/library.zip

Filesize
178KB

MD5
70711c5ae5079b3b64680393dd5d98cb

SHA1
43fcd002d4dd764f1f5db4eb4f9fad136b8f74f0

SHA256
9de833554498ab741c5305fc3da3a960e72e06ef55304b7f49b5fca731f75d16

SHA512
d3054705a97bacbc9bb58daa4f1ace947fa808d1e321b575d1839c6698d102237d890cd1782ede62770b19e9af7cc0b44f14850b673244ad7b1eb9db33780260

Download Submit
/data/user/0/ua.mil.armysos.android/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo2ODEzOTc5OTg1NTk6YW5kcm9pZDoxMWQ2ZjJiNzA2ODMzZGE2OWFhYTZh.xml

Filesize
124B

MD5
241543f6f84588df5fbee8a097433070

SHA1
610f101630cda92c66add7220df1d30d8f3bf588

SHA256
fd1718eba46ee2e134f84c3ff9708c18b6d5b41da04c0dd8797e7b1ae8f580a0

SHA512
177da8e36fb0b19fcca0ad34a033fd975882c6f88b25315e987d54a9ae0a53d35357c9ee586805d0f946411debf3f4b92a95c6bf95c2a90ff6aaf6b3af58ebe8

Download Submit
/data/user/0/ua.mil.armysos.android/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo2ODEzOTc5OTg1NTk6YW5kcm9pZDoxMWQ2ZjJiNzA2ODMzZGE2OWFhYTZh.xml

Filesize
512B

MD5
10fa41c96d5286b553df3fd3e91eede8

SHA1
1c12a1861a32879dd711e0ac6dd548ca1c4d8fb3

SHA256
2fe0e903cf8a7a3dd131dc2a9e98631aa27382211d953cc7e5c04f5cff119cfa

SHA512
d496ac880d16483e7a0195d2cccd3374237acf54fc699a0735a3fd02b45322a3d2ff851413be21fd2122bf4b50d37a0c5c6846aee7a03ce9944aae7865a7dca4

Download Submit
/data/user/0/ua.mil.armysos.android/shared_prefs/com.google.firebase.crashlytics.xml

Filesize
333B

MD5
9b2c670575fbd8c7389bd9d63ab6bd59

SHA1
14ae436fadf89220a5d7504fd1c30605ef806daa

SHA256
c07a0215ffa5f838376906551f59b5628157851641d48f0400a05beecfb734f9

SHA512
469503f73bd7c8d9253933006ae5eabac2f5576c613ee548fc999b5ded8d45d5f2a4c34ec8f24fbfdbd4def97a68317e1cf017f8536c3018320a17944ea16e5b

Download Submit
/data/user/0/ua.mil.armysos.android/shared_prefs/com.google.firebase.crashlytics.xml

Filesize
235B

MD5
b4b6b7c87aad359ff38a23b8ad70e542

SHA1
45e248b8bda646665d2570cc0572b6dec404d851

SHA256
b2413633647db3e864b55ef4dea209695fb44489bc4ba9de77fdb6ee7c3151ea

SHA512
7b1ac6edf250eec5755664fc1338d7990b1b1b5947b377813bbe748dcf1d3268ffe17accc4afc3848335b6ffdef8119a123e9301b2d8c52989e6fc7204c39d66

Download Submit
/data/user/0/ua.mil.armysos.android/shared_prefs/ua.mil.armysos.android_preferences.xml

Filesize
115B

MD5
3abd93bfdb21cf8d800c2301261d2d38

SHA1
fdf6030e81b24769e719ad0bc4afabdc59d0981c

SHA256
91e9c472b48e4d63fa98ed0fcfda6ee9720c901e2b0bc604055e6c76ec33f155

SHA512
255deb2032644a453c958ab47e86a41d0313b3e47ac1229f288b5c1dd1fe57d9fd8d678631328df6f6aaed50c61f67f4e107fcb93002c4f20e63e2752a1d6eca

Download Submit
/mnt/sdcard/osm.tmp

Filesize
2B

MD5
49f68a5c8493ec2c0bf489821c21fc3b

SHA1
c22b5f9178342609428d6f51b2c5af4c0bde6a42

SHA256
8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4

SHA512
150a14ed5bea6cc731cf86c41566ac427a8db48ef1b9fd626664b3bfbb99071fa4c922f33dde38719b8c8354e2b7ab9d77e0e67fc12843920a712e73d558e197

Download Submit
/mnt/sdcard/osm.tmp

Filesize
2B

MD5
49f68a5c8493ec2c0bf489821c21fc3b

SHA1
c22b5f9178342609428d6f51b2c5af4c0bde6a42

SHA256
8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4

SHA512
150a14ed5bea6cc731cf86c41566ac427a8db48ef1b9fd626664b3bfbb99071fa4c922f33dde38719b8c8354e2b7ab9d77e0e67fc12843920a712e73d558e197

Download Submit
/sdcard/osm.tmp

Filesize
2B

MD5
49f68a5c8493ec2c0bf489821c21fc3b

SHA1
c22b5f9178342609428d6f51b2c5af4c0bde6a42

SHA256
8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4

SHA512
150a14ed5bea6cc731cf86c41566ac427a8db48ef1b9fd626664b3bfbb99071fa4c922f33dde38719b8c8354e2b7ab9d77e0e67fc12843920a712e73d558e197

Download Submit
/sdcard/osm.tmp

Filesize
2B

MD5
49f68a5c8493ec2c0bf489821c21fc3b

SHA1
c22b5f9178342609428d6f51b2c5af4c0bde6a42

SHA256
8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4

SHA512
150a14ed5bea6cc731cf86c41566ac427a8db48ef1b9fd626664b3bfbb99071fa4c922f33dde38719b8c8354e2b7ab9d77e0e67fc12843920a712e73d558e197

Download Submit
/storage/emulated/0/artmap/config/resources.json

Filesize
67B

MD5
8aaa5f2ad8e7092129dee0ce52c60a22

SHA1
3a519b2dafed2cfa2a8580b0e80a6f7adeaddbfb

SHA256
5a8d0aff76bf9e390665cc70c55d70b32aa7f12c5697923f053886513de6edb1

SHA512
0b435d3aaf5c3c97ecbc712073891cc0f44aa6067ccec3d5ae3b6550719a45ff21eafcb914febcaf4c5c8598c26b54e96da4c76855ed3bb96d6609cd52e0a8b9

Download Submit
/storage/emulated/0/artmap/easterncity_en.sqlite

Filesize
3.7MB

MD5
dd5aaa85d0f900198ef1a1f0b0c01a12

SHA1
bb84630c34fc89d994e61798ee48288f8d1b89c9

SHA256
d1579989d603a2f1745d4c7d8eed372a330f8e85f19a8d6bb633458268cbb65e

SHA512
6a3b728aac6312006e3c89988c716164fa8cb2c0cbc9393e76b2338fd6f523d4ea8c26a07668e791870dcb75eede74ce6fa4fdb29c8b45b9714abb3da11ea75d

Download Submit
/storage/emulated/0/artmap/easterncity_v2.sqlite

Filesize
5.7MB

MD5
78ef5926d08245b4da4ce323ad1622dc

SHA1
382bd5e46e2d8fa3025a76b86b7465d7be34e58e

SHA256
a50da47ae0900e90ed138a1398a66f5ed6d7d4c1cb6a7d30dd78b4aaf223cff3

SHA512
a1c1f3a77fba22eda95f702502e51969128f54f2d0dd151d0846d3f020c19df98c8e1b53231ddfe78b9bc295c9e799057a3775218a603c9c1b95f4b471217d40

Download Submit
/storage/emulated/0/osm.tmp

Filesize
2B

MD5
49f68a5c8493ec2c0bf489821c21fc3b

SHA1
c22b5f9178342609428d6f51b2c5af4c0bde6a42

SHA256
8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4

SHA512
150a14ed5bea6cc731cf86c41566ac427a8db48ef1b9fd626664b3bfbb99071fa4c922f33dde38719b8c8354e2b7ab9d77e0e67fc12843920a712e73d558e197

Download Submit
/storage/emulated/0/osm.tmp

Filesize
2B

MD5
49f68a5c8493ec2c0bf489821c21fc3b

SHA1
c22b5f9178342609428d6f51b2c5af4c0bde6a42

SHA256
8f434346648f6b96df89dda901c5176b10a6d83961dd3c1ac88b59b2dc327aa4

SHA512
150a14ed5bea6cc731cf86c41566ac427a8db48ef1b9fd626664b3bfbb99071fa4c922f33dde38719b8c8354e2b7ab9d77e0e67fc12843920a712e73d558e197

Download Submit
/storage/emulated/0/osmdroid/tiles/cache.db

Filesize
36KB

MD5
a532815faa784cefe3962f4fa929e5e0

SHA1
d605f2ebb347f07c97e15ac2500846ce5204b7d0

SHA256
a7113c82a5668e39bc188755e16afcd50d65eaa9f967d653e811ae10bfe72613

SHA512
5a070971e1bb6ba51b94270ad9ce85c798b8f252682f2c34717375d88bc0fe558ad6b5cc8f337595b7c8c4fda33954efe5ceacab1de495315d941af117733d5c

Download Submit
/storage/emulated/0/osmdroid/tiles/cache.db-journal

Filesize
524B

MD5
188c085c3b97c64c9cb722f7b0c7378d

SHA1
cc5d3624d002847aa9fd7cea5a6d012cf9ca5639

SHA256
7985e025475a4f436c329f95ae3c3cd2e0908bc3e2402a3b2d217b7da654eab1

SHA512
ef3284105f7cd739394cea3b83c049e74476041f09555545084d307ab6f40db620694561626ad163e975a5185da151addad7db98435734865f3d04a822c06253

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads