Analysis

  • max time kernel
    1646428s
  • max time network
    163s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    10/11/2022, 15:21

General

  • Target
    Amazement Messenger_14.123.2.apk
  • Size 11.1MB
  • Sample221110-srpqeaagh9
  • SHA256 60622a1413fa581b0b89103c3103a3ff7ef4a83f6b6e561aab2cf7e1f88842f0
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Extracted

Family
  • joker

C2
  • http://imperceptibly.oss-eu-central-1.aliyuncs.com

Signatures

  • joker

    Joker is an Android malware that targets billing and SMS fraud.

  • Reads information about phone network operator.

Processes

  • com.amenzement.screenmessenger
    1⤵
      PID:4596
      • /system/bin/getprop sys.boot_completed
        2⤵
          PID:4696
      • com.amenzement.screenmessenger:color_extraction
        1⤵
          PID:4678

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              Web Data

              • Path /data/user/0/com.amenzement.screenmessenger/app_webview/Default/Web Data
              • Size 120KB
              • SHA256 8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
              • MD5 SHA1 SHA512 SSDEEP

              Web Data-journal

              • Path /data/user/0/com.amenzement.screenmessenger/app_webview/Default/Web Data-journal
              • Size 2KB
              • SHA256 fddcff6b960680e99036e2d7b9351b1d17b44940aa6be488205b2b46c60cdd97
              • MD5 SHA1 SHA512

              webview_data.lock

              • Path /data/user/0/com.amenzement.screenmessenger/app_webview/webview_data.lock
              • Size 36B
              • SHA256 1ad4309339837147bc095e797affd7efea5f14366f400cdfc36e072ba93aeecc
              • MD5 SHA1 SHA512

              index

              • Path /data/user/0/com.amenzement.screenmessenger/cache/WebView/Default/HTTP Cache/Code Cache/js/index
              • Size 48B
              • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
              • MD5 SHA1 SHA512

              temp-index

              • Path /data/user/0/com.amenzement.screenmessenger/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
              • Size 96B
              • SHA256 3935bf4b626b9f953e41d76693bc07edb1415d86bd409973c4fc97152f0844f2
              • MD5 SHA1 SHA512

              index

              • Path /data/user/0/com.amenzement.screenmessenger/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
              • Size 48B
              • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
              • MD5 SHA1 SHA512

              temp-index

              • Path /data/user/0/com.amenzement.screenmessenger/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
              • Size 96B
              • SHA256 3935bf4b626b9f953e41d76693bc07edb1415d86bd409973c4fc97152f0844f2
              • MD5 SHA1 SHA512

              font_unique_name_table.pb

              • Path /data/user/0/com.amenzement.screenmessenger/cache/WebView/font_unique_name_table.pb
              • Size 57KB
              • SHA256 0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
              • MD5 SHA1 SHA512 SSDEEP

              1668093737747.json

              • Path /data/user/0/com.amenzement.screenmessenger/cache/bugsnag-errors/1668093737747.json
              • Size 44KB
              • SHA256 2a7de1aaecd2218c0987180475ac78512d3de33609644c1a84ee690aa607b9d0
              • MD5 SHA1 SHA512 SSDEEP

              androidx.work.workdb

              • Path /data/user/0/com.amenzement.screenmessenger/databases/androidx.work.workdb
              • Size 8KB
              • SHA256 4b34cf505050facf47aa7936e4e7667e1969105665c632b3eefe7ecddf9a6935
              • MD5 SHA1 SHA512 SSDEEP

              androidx.work.workdb-journal

              • Path /data/user/0/com.amenzement.screenmessenger/databases/androidx.work.workdb-journal
              • Size 1KB
              • SHA256 4aa9f447c680f509471fd1f685a83db1b40d6ae397a86e1e7c48a8612859252c
              • MD5 SHA1 SHA512

              androidx.work.workdb-shm

              • Path /data/user/0/com.amenzement.screenmessenger/databases/androidx.work.workdb-shm
              • Size 16B
              • SHA256 374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
              • MD5 SHA1 SHA512

              androidx.work.workdb-wal

              • Path /data/user/0/com.amenzement.screenmessenger/databases/androidx.work.workdb-wal
              • Size 177KB
              • SHA256 ee687d631e872089085f6b4d7174137562bfbe5cfda911b1d9b16676a7e18b1a
              • MD5 SHA1 SHA512 SSDEEP

              app_icons.db

              • Path /data/user/0/com.amenzement.screenmessenger/databases/app_icons.db
              • Size 72KB
              • SHA256 46d8ae9dfff26e1c02960c5a60df3e940abf5d332bdcd591dc9e03922e556d85
              • MD5 SHA1 SHA512 SSDEEP

              app_icons.db-journal

              • Path /data/user/0/com.amenzement.screenmessenger/databases/app_icons.db-journal
              • Size 1KB
              • SHA256 6fb490c329a6373bce30c3029c41931d0089af069e6393ba3843ad4381061de6
              • MD5 SHA1 SHA512

              google_app_measurement_local.db

              • Path /data/user/0/com.amenzement.screenmessenger/databases/google_app_measurement_local.db
              • Size 88KB
              • SHA256 a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2
              • MD5 SHA1 SHA512 SSDEEP

              google_app_measurement_local.db-journal

              • Path /data/user/0/com.amenzement.screenmessenger/databases/google_app_measurement_local.db-journal
              • Size 1KB
              • SHA256 e1bcd71c7e2269b86ba7dfa390dd7616273113d2869508eb2f9820d6de44e2da
              • MD5 SHA1 SHA512

              launcher.db

              • Path /data/user/0/com.amenzement.screenmessenger/databases/launcher.db
              • Size 176KB
              • SHA256 840406b2713cb81e6793be65441273c0aff7dfbf3e0f4f9ca20e08411877a224
              • MD5 SHA1 SHA512 SSDEEP

              launcher.db-journal

              • Path /data/user/0/com.amenzement.screenmessenger/databases/launcher.db-journal
              • Size 1KB
              • SHA256 f513fb6b717e83aa332d8fa70cf2a70d5326e5ee264a8e71030c6e580236bdd5
              • MD5 SHA1 SHA512

              supersonic_sdk.db

              • Path /data/user/0/com.amenzement.screenmessenger/databases/supersonic_sdk.db
              • Size 80KB
              • SHA256 aab132adee19ea368fcecdc5c3920e4f2d44e5a611a848a99afc02632807f6d0
              • MD5 SHA1 SHA512 SSDEEP

              supersonic_sdk.db-journal

              • Path /data/user/0/com.amenzement.screenmessenger/databases/supersonic_sdk.db-journal
              • Size 1KB
              • SHA256 3492524a90c0d6d3779e0e260c87ff6a5f95ea1a8dbf53f3d5b8d8a8a9989a1d
              • MD5 SHA1 SHA512

              FirebaseAppHeartBeat.xml

              • Path /data/user/0/com.amenzement.screenmessenger/shared_prefs/FirebaseAppHeartBeat.xml
              • Size 134B
              • SHA256 92c7f07c9eb76613c9d8a0882e5c88acc33803ac701e46671a6e376887bbb997
              • MD5 SHA1 SHA512

              FirebaseAppHeartBeat.xml

              • Path /data/user/0/com.amenzement.screenmessenger/shared_prefs/FirebaseAppHeartBeat.xml
              • Size 188B
              • SHA256 6b6628caaf647617c5bfdeddd5eddc82095b1dbe908969eb9a77bf535da9591f
              • MD5 SHA1 SHA512

              WebViewChromiumPrefs.xml

              • Path /data/user/0/com.amenzement.screenmessenger/shared_prefs/WebViewChromiumPrefs.xml
              • Size 127B
              • SHA256 248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
              • MD5 SHA1 SHA512

              com.amenzement.screenmessenger_preferences.xml

              • Path /data/user/0/com.amenzement.screenmessenger/shared_prefs/com.amenzement.screenmessenger_preferences.xml
              • Size 116B
              • SHA256 e808f37c485fef43dd7481d2f71cb05b005dacbeceade948b49f8f9468f41896
              • MD5 SHA1 SHA512

              com.bugsnag.android.xml

              • Path /data/user/0/com.amenzement.screenmessenger/shared_prefs/com.bugsnag.android.xml
              • Size 147B
              • SHA256 e7cd9db94586b445202476ee8c48437b66cf3c3530ca826e7c65cc003bbbe8ff
              • MD5 SHA1 SHA512

              com.google.android.gms.measurement.prefs.xml

              • Path /data/user/0/com.amenzement.screenmessenger/shared_prefs/com.google.android.gms.measurement.prefs.xml
              • Size 660B
              • SHA256 676220e00e0becbd0f287969ffe332c027673492b4f081de07f526e3decc6c92
              • MD5 SHA1 SHA512

              com.google.android.gms.measurement.prefs.xml

              • Path /data/user/0/com.amenzement.screenmessenger/shared_prefs/com.google.android.gms.measurement.prefs.xml
              • Size 661B
              • SHA256 b895b415ec916cfad6937526267ed2ae9a997eb953d4daa131cf7e504f6854ef
              • MD5 SHA1 SHA512

              com.google.android.gms.measurement.prefs.xml

              • Path /data/user/0/com.amenzement.screenmessenger/shared_prefs/com.google.android.gms.measurement.prefs.xml
              • Size 719B
              • SHA256 40601a265145119aa333aa68dc5241f932f8cb3a176e0c6f53d39df3aefb11e4
              • MD5 SHA1 SHA512

              com.google.android.gms.measurement.prefs.xml

              • Path /data/user/0/com.amenzement.screenmessenger/shared_prefs/com.google.android.gms.measurement.prefs.xml
              • Size 773B
              • SHA256 5f57c7c957e25dc27e38f249f21eee8f68fd42e521a138c9c962f02fb231b066
              • MD5 SHA1 SHA512

              com.google.android.gms.measurement.prefs.xml

              • Path /data/user/0/com.amenzement.screenmessenger/shared_prefs/com.google.android.gms.measurement.prefs.xml
              • Size 773B
              • SHA256 ca88746892b9be2e63967237d0e1a9cdb1061beead625fed6aa7eb6d62952404
              • MD5 SHA1 SHA512

              com.google.android.gms.measurement.prefs.xml

              • Path /data/user/0/com.amenzement.screenmessenger/shared_prefs/com.google.android.gms.measurement.prefs.xml
              • Size 773B
              • SHA256 6e42879b07cd3fb01843be8d4c9312675d07bdbe8579c1fe2812e504d4a50b48
              • MD5 SHA1 SHA512

              com.google.android.gms.measurement.prefs.xml

              • Path /data/user/0/com.amenzement.screenmessenger/shared_prefs/com.google.android.gms.measurement.prefs.xml
              • Size 850B
              • SHA256 53e2629f47ecb3f37e5a7fb43cc5ad94b9f845b44a10f7d0d919ed61ca09e703
              • MD5 SHA1 SHA512

              com.google.android.gms.measurement.prefs.xml

              • Path /data/user/0/com.amenzement.screenmessenger/shared_prefs/com.google.android.gms.measurement.prefs.xml
              • Size 65B
              • SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
              • MD5 SHA1 SHA512

              com.google.android.gms.measurement.prefs.xml

              • Path /data/user/0/com.amenzement.screenmessenger/shared_prefs/com.google.android.gms.measurement.prefs.xml
              • Size 449B
              • SHA256 65abd6d14fd95968d0490067a5d38f74fc7a0f00557c89af47a9b6e10f6b186b
              • MD5 SHA1 SHA512

              myhomescreen.sms.messengerhome.smswidget.homescreen.lawnchair.managedusers.prefs.xml

              • Path /data/user/0/com.amenzement.screenmessenger/shared_prefs/myhomescreen.sms.messengerhome.smswidget.homescreen.lawnchair.managedusers.prefs.xml
              • Size 65B
              • SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
              • MD5 SHA1 SHA512

              pro.xml

              • Path /data/user/0/com.amenzement.screenmessenger/shared_prefs/pro.xml
              • Size 65B
              • SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
              • MD5 SHA1 SHA512