Resubmissions

18-05-2023 12:01

230518-n6zrpsaf62 10

24-11-2022 09:53

221124-lwmnaafa25 10

Analysis

  • max time kernel
    2836333s
  • max time network
    163s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    24-11-2022 09:53

General

  • Target

    com.pagnotto28.sellsourcecode.alpha-5-apktada.com.apk

  • Size

    13.6MB

  • MD5

    425ca585e1689771f69c442036192d78

  • SHA1

    3d7e48669307cc962f18de5639ae0697ed950d1e

  • SHA256

    71c78101f7792fe879a082e323fed89c5e4a43132d01d3f79ed02afd8db45497

  • SHA512

    4441be3ac3bf49229ddb771c4418719a60fdee11711265e41442a49f643e7a97c8b1731c786e80c811cd63124996c5787cb7588c06d81ae60a67cf46996925df

  • SSDEEP

    393216:C9wxkH5macX7X52NWdXJq2TNhyWfwcVpMrfum77:C9wxkZqgY5Uvaq7

Score
5/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.pagnotto28.sellsourcecode.alpha
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4727
  • com.pagnotto28.sellsourcecode.alpha:BackgroundService
    1⤵
      PID:5087

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.pagnotto28.sellsourcecode.alpha/databases/dbytes.db

      Filesize

      96KB

      MD5

      adde2cf8b72d1b8be308d8f1ec6cc5d0

      SHA1

      fdb4c0cd175ab42eca23e6a0871e0288eebda822

      SHA256

      2a757107e9b847c0767c780033c867a1f589b9e86ca94fdd9509d65c48fc357c

      SHA512

      281d6d2e6b1ab96cc8c6d865ed441999a1ecf591397d6b82bd62ed37dbc95190f4c2f0e7cac4886fd70f569071af277f966dc3ff082ece020125df21f1d8efa2

    • /data/user/0/com.pagnotto28.sellsourcecode.alpha/databases/dbytes.db-journal

      Filesize

      1KB

      MD5

      17e198084521e18219b3f4f5f31939b1

      SHA1

      40ca12714268500f2d26e837e33d45f9b921846d

      SHA256

      534a74f0bf852c5fbbb87719aa27b7db4ddf6329d902ed9d35c585d21991c07f

      SHA512

      f8f2f19a20d01060f9eb3571f3f6d7c2edd8be5474aac0d8b94531544c8dc4001f00b9f289657408b9557aeaa81a3acb9167fdcd86c909cd353346a788a60bd8

    • /data/user/0/com.pagnotto28.sellsourcecode.alpha/no_backup/androidx.work.workdb

      Filesize

      8KB

      MD5

      b6ca8b30661a7844ed292db75a29a953

      SHA1

      8e0d397ab1f2ced1f143829084c3f53333743bdd

      SHA256

      63a219c7092be26641907c5f955aa977e7675e3922a8e4ee2af25bfed8c7bbfb

      SHA512

      d21ce3adf13d61369708ea000438f626973f20b08ca05a744c1cccb2d5e7c264a8af9c3ebd18a7a6a464d38e1c64146f8e881d29d71a0484dd94212315f6dceb

    • /data/user/0/com.pagnotto28.sellsourcecode.alpha/no_backup/androidx.work.workdb-journal

      Filesize

      1KB

      MD5

      625803186789657ed4a56befbe49d27f

      SHA1

      f3568d34ce059ec1807c4ef213bba095e4d57ea3

      SHA256

      3685e818367bb030625ab387b887abb4f08b30316e9522d5d2dcdcf91b8b7fe5

      SHA512

      2a1121e07543c2caf23a9a88b665b6675b0683663bc12d2010bb24c0ff3f79747aec80c9fb577e153afae2fe3b9949dee993490fbc9a05287db3dda58e478b00

    • /data/user/0/com.pagnotto28.sellsourcecode.alpha/no_backup/androidx.work.workdb-shm

      Filesize

      16B

      MD5

      4ae71336e44bf9bf79d2752e234818a5

      SHA1

      e129f27c5103bc5cc44bcdf0a15e160d445066ff

      SHA256

      374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

      SHA512

      0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

    • /data/user/0/com.pagnotto28.sellsourcecode.alpha/no_backup/androidx.work.workdb-wal

      Filesize

      217KB

      MD5

      19a9c7fef05acd0fbdcf1d261305315e

      SHA1

      f637b484c6e64c2a03f0109a0e0497b4ecbd43e2

      SHA256

      f1da0916783382bf414f22c061c1014bf2abceecd695f78bfdebf7bc27cc8a2d

      SHA512

      12d618044a64339578a478e0a901fe4aa6340c9800bbed0fb071a7ba25b89ee406d0a9de8decef192c472a7221d0bc6d314510b9e42315102d4645fa30fab652

    • /data/user/0/com.pagnotto28.sellsourcecode.alpha/shared_prefs/com.pagnotto28.sellsourcecode.alpha_preferences.xml

      Filesize

      129B

      MD5

      3e738c1d8eb0ec3137bfb1127f7c8f4d

      SHA1

      74feb692d9a21a9e9f497bb8459018c9dffbae55

      SHA256

      a291c71288fce7360d119255011459ed3b73f88f14d19140a929d71affb738d1

      SHA512

      9f18a2ed715ae5c6ce181ee885bba4451d8868c54d9f04149f8c31ad5f2826cebc17f1e0ffd3c1b5a9a11d655843439df42b625faf404450b594a2b7667ee3ba