Resubmissions

14-11-2022 10:34

221114-ml4dqabh6x 10

12-11-2022 19:45

221112-ygpwbacc91 10

Analysis

  • max time kernel
    1971194s
  • max time network
    58s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    14-11-2022 10:34

General

  • Target

    73d04d7906706f90fb81676d4f023fbac75b0047897b289f2eb34f7640ed1e7f.apk

  • Size

    6.0MB

  • MD5

    341a8467de34ed980f463df9e464668c

  • SHA1

    bfb966575c285122e4c7deb35b8f0d4befe84fad

  • SHA256

    73d04d7906706f90fb81676d4f023fbac75b0047897b289f2eb34f7640ed1e7f

  • SHA512

    4d7982daaba408b9c0f46011e53ad6441297d68c32259eed20bc1ee6ee64ec421434b782231ba1661bc0d87f7317702c634f7de38e5db8d0a1173e107775ee84

  • SSDEEP

    98304:9sYgxq7b6+w77NRDS5J/wZkGB8wXV5mJQ9cZfOlN5wEQ9gPUcrcU1DrDvHfrmy:r7Bwtc5RCkGiwXn4Q9cZfOr5wEQeJ139

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Queries the unique device ID (IMEI, MEID, IMSI).
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.example.confirmcode
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4148

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.example.confirmcode/dt.bin

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/data/com.example.confirmcode/logs.dat

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.example.confirmcode/app_webview/Cookies

    Filesize

    64KB

    MD5

    cb7543c4df600f2af58097cce0e334ba

    SHA1

    83cc92f38c27fdb4fa519b1ce2f37912f24af1f0

    SHA256

    64c022ae708f94ffde986e105d88f708884de325720bfb9925c4160a6d417233

    SHA512

    ad51cad0472327bd68aa2d791341cfafed58971752352537bb603ed18b15a3f9185e9150983a28ecd09606e8dcaef6d1c9d93213dd246ef7720f39842eb3d980

  • /data/user/0/com.example.confirmcode/app_webview/Cookies-journal

    Filesize

    1KB

    MD5

    54adc0cca1ea411bfd88e8f98477c100

    SHA1

    f112a1025acaee2ed702b45713f1f29d94a02812

    SHA256

    92b201dc48e00840632b5a5c18ecd8767a17c773d0377feca230b01e599026e1

    SHA512

    68842d8dbe6364e7cf0cc337c51a6cfd8adeae3d06c2ed43661cf7422609edbde02ba31295171bc0bb40885714e952af2000c541340e3ede2816a7afe37c7f57

  • /data/user/0/com.example.confirmcode/app_webview/GPUCache/index

    Filesize

    20B

    MD5

    93027d42b314432c4216e6cfca48b384

    SHA1

    43448dd8102979c3926828182579691945eedd4e

    SHA256

    3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

    SHA512

    a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

  • /data/user/0/com.example.confirmcode/app_webview/GPUCache/index-dir/temp-index

    Filesize

    48B

    MD5

    d8e7acd5054cf28933a05d29e0eb53c5

    SHA1

    14cbe408db4ae1e019b574e07ca24dd031bf568f

    SHA256

    d99b98df54519f60590d7cfa1ad60c7789614a109596828f34c6c325f331232c

    SHA512

    d1d25518fa1ca2daa25c674e3419184159dee1ae3f94ba1d1b5619cb04b1a288b4594f4f6e78ed456e0e5af55d5a00052c55bc8f767b26d42b6b529688ed4a61

  • /data/user/0/com.example.confirmcode/app_webview/Web Data

    Filesize

    104KB

    MD5

    dc79f9ce5f3ab5270b33e61119dfc959

    SHA1

    1844bf222a5144b513dcf2fb50a18c011701c647

    SHA256

    47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

    SHA512

    18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

  • /data/user/0/com.example.confirmcode/app_webview/Web Data-journal

    Filesize

    1KB

    MD5

    07e40ecd986c77331f8ca69d13582a97

    SHA1

    7fc934ed0987effa73861a8fba61c7cad0532045

    SHA256

    f14855a8027111fbf490839ea07aec3f5e117eb7339d4b07f3b09c8708c71d5d

    SHA512

    fec8389c674b2d98e2155c65bb3c8033e000f73bab45572814546a84501d47bbc7aacb73a4f1244ff9075eb03ebf238bd9bbb029e32e6d7cd7c967d51a4d83d3

  • /data/user/0/com.example.confirmcode/app_webview/metrics_guid

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.example.confirmcode/app_webview/metrics_guid

    Filesize

    36B

    MD5

    1fcabe7da5bdff9b35c3db7575ef1fc0

    SHA1

    adf39c1a703f44c266ca72ee864b34ac10637324

    SHA256

    891b8119fecfc2ae05c297e820883f6d15c97770e169d32c7ebe22338b04423c

    SHA512

    8c8b5eb2158244223ebe0797c28387d6ca83df24286239c3fccf969dd644a80ae640515af7d2a81aeba9d6dc25dc15f29f5e2013ec7f13b227de84954122b6e1

  • /data/user/0/com.example.confirmcode/app_webview/variations_seed_new

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.example.confirmcode/app_webview/variations_stamp

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.example.confirmcode/app_webview/webview_data.lock

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.example.confirmcode/cache/image_manager_disk_cache/10aaea6447cb74a9cdccfe62f1fe38761694012c1e2627443e503afce2c8d5a8.0.tmp

    Filesize

    3KB

    MD5

    2b6354a52b9464f9a29d8e678bb64c77

    SHA1

    a0ca9da3587bdb224b3b0ffb853a97fbbb8fc486

    SHA256

    53a66a91b7a856f51f45c94a806743ecc511effad58a6af58426fe055c49b920

    SHA512

    fad7e98ec038263ce4df9d4dacdc8443c625db42de21ffb8cea30def2675ca0fb3f42670fc5fa1d5920567d5b877e50b896a3d0be761b9338945460780a8b4b0

  • /data/user/0/com.example.confirmcode/cache/image_manager_disk_cache/1118c00ff89db28ecef36965f0d5ea0ad93ef6c3dac151106280538486bcd7ab.0.tmp

    Filesize

    2KB

    MD5

    eb36990fc9a79f90d7e3abe369dd69e1

    SHA1

    9a055e21a490f3b7cf539f12b29803a19b8ae389

    SHA256

    053fa2c770ee19683dbadeec5ca8f91fb4e9ef0775e38a87cba2464cb177264e

    SHA512

    ca48d0e7aeca8561fd3f744c2cd0ad230e9037f3ac54fd93092268acc4f95619a1ee2aba66f501e07ac1a7472dffd78e9ddac349606c762036345906f5c39887

  • /data/user/0/com.example.confirmcode/cache/image_manager_disk_cache/23043505410e42f9f5c36f148c333b2aceb0d6802b0fa18f448ebffff8eb26f0.0.tmp

    Filesize

    2KB

    MD5

    e7b51f8e0f934a16727c282681635774

    SHA1

    124483f5f861a438df3591f2591bc2fba0213338

    SHA256

    b0524faab7d5bb063b481c632199252acaabafd44574fd5f795f560dd0897265

    SHA512

    b33c1a38db767c5256adde94c6bb14ac422ebbb0b63176ebc405295d9a0579773a7666e073f8bea611a4a5c2206db43233974ae25fb33363d90f4bd455185901

  • /data/user/0/com.example.confirmcode/cache/image_manager_disk_cache/609db4da4dcf9976458ae01bc295714342606c49484dd99bba5530a7cef56cf6.0.tmp

    Filesize

    3KB

    MD5

    c71705a01d2c6dc737247685329bb44c

    SHA1

    ac5854130a9b04a40eb5284db1fd6bf87d424288

    SHA256

    dc41356e3228bfebea946f21ab2ed8aba57df553a7e89fdee4fb9cf78b6b2fff

    SHA512

    9e330052e7dfaf0b2abb08285978d89c2fd5cf2a820affe7edb39cf4d3518a37e9b226f2548b91d10e956ceac69078c68bfd0f003672c53e06fd5596f03edfcd

  • /data/user/0/com.example.confirmcode/cache/image_manager_disk_cache/7456cb9e755a4234442eb0e9811f12eee9a9bc8808315c942550e189c437b893.0.tmp

    Filesize

    3KB

    MD5

    6dd3598be4372227e5cdfee32bf264b9

    SHA1

    8edca9c7ad9b3f685d95ec873fbe51c107cd3edd

    SHA256

    676c7a68b3c91fa5327d8a2611c5b2d38d2b9da58fbf2f5bef22735c1e157e71

    SHA512

    76a52bf54110290c6e20febb3c1f4b6a38fa8af9c43aa46e024507ba0b76946906f2aa402fef618d2014ed864d19cf0792f2bcdb7de9b23a02823c07f2ea3260

  • /data/user/0/com.example.confirmcode/cache/image_manager_disk_cache/755e47e4e1e97adbd05bab7f1828e4595f88216849c0d2ec8a165a79f12014a8.0.tmp

    Filesize

    4KB

    MD5

    f4c6d3a3377b452ab4b1179b8c162ffd

    SHA1

    163f8e0e20f477f15a5aff73ffd6fa4b7ac5a6d6

    SHA256

    b021ab2e30df9b58286df3435ba81055a4c2d7ea4383622118f831d82c3858f7

    SHA512

    906dcfc664948b4e2f9aab1a38f4c3a83a8616a0caaa2651213521a9b2249fa13af1769b29b5696e6c75692b02648da9e584ad57d5cd512821124f2720920fda

  • /data/user/0/com.example.confirmcode/cache/image_manager_disk_cache/f552b050ed856210dbbd0b28a431723ea70c7b55932fd57a9dfcc568fb33ec2a.0.tmp

    Filesize

    4KB

    MD5

    273bc1d2bd2160a68c146ee4cb0fc21b

    SHA1

    83264bca50e2449716970cea50c1059632627533

    SHA256

    eeee652a7d1d5afbe792fb813851e8e54e9bed8f34623529356ac90495047154

    SHA512

    39f3dc1b079472c3852afafb4129d01e547591cef23a8c0f84d103970452100bfb3f6b4763423d1717408945d2d48d42cfcd595ecd9de2369fecf982eeee75a6

  • /data/user/0/com.example.confirmcode/cache/image_manager_disk_cache/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

  • /data/user/0/com.example.confirmcode/cache/org.chromium.android_webview/a27b4b55c6c53f54_0

    Filesize

    1KB

    MD5

    8ca92a5cf355228771d1a6e04235e973

    SHA1

    abffe0c35313d3eeca5c1e75df4926aec5a9a215

    SHA256

    f67f850866d13c4a33144295ad9efad6bc598941a3e80dcf262bb032acc4c039

    SHA512

    9cef66aa9f0ca0097ec5ce919864cca1f9c1ddde0378c38dc91c0d37d738463c7b6196512970144529fc7a3ea0a6a0d1ee79368567d1f079676992bf3a41e283

  • /data/user/0/com.example.confirmcode/cache/org.chromium.android_webview/e39b57534fb632e8_0

    Filesize

    877B

    MD5

    c62cc924600d22cba867635189dca209

    SHA1

    276454a4c9798cbb2db8a9b07011460fed304a10

    SHA256

    4b771967d312f3d817584819f4dfe2df9037bd2e140f17586b69225c4ab2ddbf

    SHA512

    e900bc97f71ad8b9e2fbb92cb3e4fb388e46b7cf74ca9fef8849a91c5e52344d401c1fa0a4e228618b9c0fc4d420880db2d35fac1c267fd75ad0cb0bd208b172

  • /data/user/0/com.example.confirmcode/cache/org.chromium.android_webview/f8c66dd55e9c28f8_0

    Filesize

    49KB

    MD5

    3f03bea7aad403ae909cb133c6b4e181

    SHA1

    0bbd086ba3cb3c9e3055d7d138f4bd33df127628

    SHA256

    1ce0c26742e44abba1654dfb8ecee2ce3ea11425559d4897d9fd0f8ddf2dafee

    SHA512

    e038f882c1454e957c6a3911a46b168a5a69545553f5dcfa64766d954d38eab29ea267709e51c671f5f0a5dd104f4b21ae90fc3728cc2643b3e9157d4063f79c

  • /data/user/0/com.example.confirmcode/cache/org.chromium.android_webview/index

    Filesize

    20B

    MD5

    93027d42b314432c4216e6cfca48b384

    SHA1

    43448dd8102979c3926828182579691945eedd4e

    SHA256

    3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

    SHA512

    a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

  • /data/user/0/com.example.confirmcode/cache/org.chromium.android_webview/index-dir/temp-index

    Filesize

    48B

    MD5

    0cf57aa6989e5d57368f5cc7d081c88a

    SHA1

    d705693f843c240ca463eab38022d3ebe3f00e2f

    SHA256

    99343b3b20b002247aeff36e2e58ed650900126b1da0ede948506269e4bf84d3

    SHA512

    79fdc7a5d2115a12f0ef6708c59f8aaf3532a04a5dda698d584873ca98d5439c6a65d78a0e15b0483cc1ab89751a07bff1a7bf470503b3abd0192aded6afcc7e

  • /data/user/0/com.example.confirmcode/cache/org.chromium.android_webview/index-dir/temp-index

    Filesize

    120B

    MD5

    06470442cccb15ec12e128e34c494326

    SHA1

    56e1b09818c159827ab74b438abb244639087b38

    SHA256

    645e75e3079aaa692ecc397840b1a5a74bb5dcda0781483a968193ed314e8bd7

    SHA512

    8e91600ec662cf30a5e7a47c141ca54ccdc10e29c35b5f5163e1a920d6ff6a2f47ffd0aadb6c6398c7bd77a6f6b4f8457759467142c2489b1ce4e2cffbd69920

  • /data/user/0/com.example.confirmcode/cache/picasso-cache/7e1268ef7306f2b5e35bd602ed3b8cf9.0.tmp

    Filesize

    6KB

    MD5

    4a1cf43d47003c7e96ffb55e8b6730ba

    SHA1

    46f5938c7d9041031d76f7fdb449e0ad8e9d2ce9

    SHA256

    d950166e61ded3a9b636f70f7c38057543ff602257e079a59c613e489c52298f

    SHA512

    b78592e0cc0ab3eb02243339289c83fa45b4c6c4501769f2bc870297f19efb3488a429a93f2970e350acc21275bee16b7c614ce9c1baa387096f8513961f9c04

  • /data/user/0/com.example.confirmcode/cache/picasso-cache/7e1268ef7306f2b5e35bd602ed3b8cf9.1.tmp

    Filesize

    3KB

    MD5

    e243f394fae25400aa8eee899363c367

    SHA1

    7bf95f128c73aa8853ba5ec7622cea29d4b48dcc

    SHA256

    cd146facd9de2ad73bad6cb272b7e1a04c07cfc284c24971e9f574f2fb84af78

    SHA512

    d5d519b93404a1d5975d35359cc28154df72ab7aca244bdc187fc313e2d5453499e359921391d59bc254e3230854ed7a3bc979f947c639bd2c7e1537ac765927

  • /data/user/0/com.example.confirmcode/cache/picasso-cache/b95295b581435c237b6abcc7cdc46412.0.tmp

    Filesize

    6KB

    MD5

    2bb7c7f94c84db84f7d0841c5e44d5a3

    SHA1

    420b862980793d6fe60b7419fd8844aa6c1e5921

    SHA256

    1b856318b3f72b491702e480515335776b9e0c6fa22a7e47327df3ef634ccfe7

    SHA512

    e9cfbb43aa62fad7799c112b0d8e73caaf0257d5632f54b229f8b8c6dbe5f751b8c08d98e33b30c542630db66e06418c48c2ead9503fd571f3ff5a99f75d39d4

  • /data/user/0/com.example.confirmcode/cache/picasso-cache/b95295b581435c237b6abcc7cdc46412.1.tmp

    Filesize

    2KB

    MD5

    e7b51f8e0f934a16727c282681635774

    SHA1

    124483f5f861a438df3591f2591bc2fba0213338

    SHA256

    b0524faab7d5bb063b481c632199252acaabafd44574fd5f795f560dd0897265

    SHA512

    b33c1a38db767c5256adde94c6bb14ac422ebbb0b63176ebc405295d9a0579773a7666e073f8bea611a4a5c2206db43233974ae25fb33363d90f4bd455185901

  • /data/user/0/com.example.confirmcode/cache/picasso-cache/journal.bkp

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.example.confirmcode/cache/picasso-cache/journal.tmp

    Filesize

    36B

    MD5

    37e8e716e0e2f4a0b05cd9571d95b84d

    SHA1

    f8d068f6931707bddb8cd69f706f2224ad1fea3c

    SHA256

    7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

    SHA512

    e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6

  • /data/user/0/com.example.confirmcode/shared_prefs/WebViewChromiumPrefs.xml

    Filesize

    127B

    MD5

    21223e9184445fe043476484cd8cb1f9

    SHA1

    2b4813f849121d60ba35eb0889080668bb62c778

    SHA256

    bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

    SHA512

    be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

  • /data/user/0/com.example.confirmcode/shared_prefs/com.example.confirmcode.xml

    Filesize

    141B

    MD5

    9ece12015e3ccae1aa0a07537bc6e053

    SHA1

    33edef2b84a89e4d1d58f6dcd86639e95f1b3ea7

    SHA256

    c83cd79e4ab94c8fa6fddcf4bcd53770314b79e22561f290d9a115087a5edbdf

    SHA512

    dd501d0736d42bc3e21d4dec7912ac90958cb88f2396ea2d75283f07890a90f0fcfbddb84a46528ea6238270b4f98dd8ac05bb90dd452ee5efdb39a48e15907e