Analysis

  • max time kernel
    2940119s
  • max time network
    170s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    25-11-2022 08:33

General

  • Target

    2e0671423c7c92267e1bea526b5bf1c56d6810fbc61758199cc53c383711b1de.apk

  • Size

    4.9MB

  • MD5

    905e2095ed9d4fdbb641777f0cb0893f

  • SHA1

    4c79b9ab0b806698b31658b08d17e040a92f8f43

  • SHA256

    2e0671423c7c92267e1bea526b5bf1c56d6810fbc61758199cc53c383711b1de

  • SHA512

    1d1ad70a9df927d728ed4aa3fe3b2379210d8da3851aa9fba41811269ad8a8a312c96cb1061208475e0a7d866635db139b746154ee98f8a37324c9da384e8e3d

  • SSDEEP

    98304:ema62ofgzAP/7LtKM+Gk8blTl1YJV7LHXgEkcY95nnSqf3DD+CU:Q63fgUN9P/TsRLHXTkcu5nBv+CU

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.ksmobile.launcher.hack
    1⤵
      PID:4447
    • com.ksmobile.launcher.hack:Metrica
      1⤵
        PID:4498

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/com.ksmobile.launcher.hack/app_webview/.com.google.Chrome.CMAqbg
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.ksmobile.launcher.hack/app_webview/Default/Web Data
        Filesize

        120KB

        MD5

        a48cd9324b1f8754b07f00d863b840f3

        SHA1

        11c6614775b35a58f440971dfc87c8aaac6d6173

        SHA256

        8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

        SHA512

        35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

      • /data/user/0/com.ksmobile.launcher.hack/app_webview/Default/Web Data-journal
        Filesize

        2KB

        MD5

        c96d52159837347e4fe34d7340aa34f6

        SHA1

        9b79588ae7cb3012b3388978734aa84cd6932ce2

        SHA256

        0cd5473721319dc63baf27a72b7899d71d5792735408a3f31496286c5eaf4602

        SHA512

        67525b50553287a1d7685621bd864ae4435a82279314a9fecf9ae774005c733bf1e406fd7c360be200c67d349297a671a5f781c1cc03667bc44b0cfa339870e9

      • /data/user/0/com.ksmobile.launcher.hack/app_webview/variations_seed_new
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.ksmobile.launcher.hack/app_webview/variations_stamp
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.ksmobile.launcher.hack/app_webview/webview_data.lock
        Filesize

        32B

        MD5

        87a0565b95f57c12ce01361ca59f4922

        SHA1

        98f99fb9a6fba7bd48a26fd0081c54a759b99a51

        SHA256

        91c3110d13e6e399c5dad3cda3b8b784d404c57a192c59a1cf4155946fd22d55

        SHA512

        bdb5aadf3b6022356cb789c1323b33979bd55da1da2bb6b56fd0c39bf167d9e37510a81bd4c159f36b95b6de96c3f5ffdb9162a16005e53fafcec998aa622f8e

      • /data/user/0/com.ksmobile.launcher.hack/cache/WebView/Crashpad/settings.dat
        Filesize

        40B

        MD5

        f7a0dffb4855c4f986ee77a170849eea

        SHA1

        2888392e717795f11531b37ef47594bb5355e610

        SHA256

        8c58a948b0f9b85e9b3df643dfc0ca9a285993c5495ddcc4d82d4cf820b04a48

        SHA512

        ebe23d49aaa9d5e67f1db0f8432b12a6c9848a45638386c71336644c5fc5a6968a7a8181e989c0763cfde36d2f1c03df17a843f645a4237f8d74949945c06cbb

      • /data/user/0/com.ksmobile.launcher.hack/cache/WebView/Default/HTTP Cache/Code Cache/js/index
        Filesize

        48B

        MD5

        6d7d499960179766cd4261d12dacc411

        SHA1

        e6f8553b0015e12b23cc551afe98763f3b1c9bed

        SHA256

        c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

        SHA512

        6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

      • /data/user/0/com.ksmobile.launcher.hack/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
        Filesize

        96B

        MD5

        f56cb7a84e2ea797a0ee64f20b29a521

        SHA1

        fd5648338cc7211127d7a64eccb74e92766a0173

        SHA256

        56935240edc1a8af96377dbadb7dc437fff3ced6a80cab26286f38e13ef03357

        SHA512

        82fe7e54c957f04fce86b0101d610734a20ee21ab8522dc8fe63f836902c351fccfb8479fdf39856ef8e2d8f989b66974a9b84b4f8740f7f7e13ba74961b378f

      • /data/user/0/com.ksmobile.launcher.hack/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
        Filesize

        48B

        MD5

        6d7d499960179766cd4261d12dacc411

        SHA1

        e6f8553b0015e12b23cc551afe98763f3b1c9bed

        SHA256

        c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

        SHA512

        6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

      • /data/user/0/com.ksmobile.launcher.hack/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
        Filesize

        96B

        MD5

        d70783e6e80ecad52be2cf364ec8fab9

        SHA1

        17f6e2f985fdccc2a3e6a62d6979f8b15b28d2fb

        SHA256

        f2bb7e4e8a05157d9a1c20a0baed03d7ce5d9b547dab966bb447b8f85f672a01

        SHA512

        d5968bfc246780f475cffc5c12c77813c62d1d75b96c45b51b92a377300f5bd50eda68bbec1a09ede5aaa70beee3c448c66714c5d493958cb1052740d2b28056

      • /data/user/0/com.ksmobile.launcher.hack/cache/WebView/font_unique_name_table.pb
        Filesize

        57KB

        MD5

        f080fa2a56ab5479d58063e5ea871447

        SHA1

        4b3fd57a98916fa5784305b76ba30af26b5253d9

        SHA256

        0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

        SHA512

        8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

      • /data/user/0/com.ksmobile.launcher.hack/databases/OneSignal.db
        Filesize

        136KB

        MD5

        a96c8acb9d82816c30a3a78aeda9f391

        SHA1

        c66c2bc8f6ae52abcf47dd3c5d74347f16b1f207

        SHA256

        07aab2c799a32a069d3eaa2e789250ac7e7a9093d5ecab67b341f81a0fda0acc

        SHA512

        794b0bde80d39f0e60b6d440bf9e815e5c498207244b561a103aa2e38b24469975e3e1d27712c256ce5c32bb4566ecaa9e35a3b7a3e9b804849b4599fefa94d6

      • /data/user/0/com.ksmobile.launcher.hack/databases/OneSignal.db-journal
        Filesize

        1KB

        MD5

        144770b02b9147a956eb2b4cf66d451b

        SHA1

        eeb2217b04e9e3e545cf38dac9e967089dea88e2

        SHA256

        2b3347f37eae6838866e3152278937dab5c04e804cb9b7435c9497e9315ce4f4

        SHA512

        04cb40cf3f5f729ff20f74af95aab97612d946eaed684f562fbd75ee246601ff1d1a6aa2969209a83fe27fe411c04e6dc7d8eefbd3bb49c0d6646c02307d0c27

      • /data/user/0/com.ksmobile.launcher.hack/files/Mint-lastsavedfile
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.ksmobile.launcher.hack/files/MintSavedData-1-1669387288457.json
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.ksmobile.launcher.hack/files/metrica_client_data.db.lock
        MD5

        d41d8cd98f00b204e9800998ecf8427e

        SHA1

        da39a3ee5e6b4b0d3255bfef95601890afd80709

        SHA256

        e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

        SHA512

        cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

      • /data/user/0/com.ksmobile.launcher.hack/no_backup/androidx.work.workdb
        Filesize

        8KB

        MD5

        e579a6b00eef1318f9166352228eba18

        SHA1

        76988896854f0139083e77862eea1a4846cf039f

        SHA256

        4b34cf505050facf47aa7936e4e7667e1969105665c632b3eefe7ecddf9a6935

        SHA512

        c47632e957d87727bf6504a82ca7a44d8da24d30cd997a0f449a96e4f97c656a1b4d9da3fcd827e2a48c59677688da0b872358ebd0f9369d898d1b8ec18d5699

      • /data/user/0/com.ksmobile.launcher.hack/no_backup/androidx.work.workdb-journal
        Filesize

        1KB

        MD5

        00b845c50c7a9fd0d4731f371a0b44a3

        SHA1

        f4d9d15af0d2d0eadd8c27fb0b9342d8d106728a

        SHA256

        0311a98e89df8497e25dadb90d70f61c7b5edf6f23297c38ae52cadfd02452fa

        SHA512

        6b275c58f023bbf5b51f6cecea605c0568ba0c7be3d6bee6f2437eef7cde810d7fb2ca87888ca021d611b8ce596cbad490def93963d5d7b8cce97f1c61c7c0f9

      • /data/user/0/com.ksmobile.launcher.hack/no_backup/androidx.work.workdb-shm
        Filesize

        16B

        MD5

        4ae71336e44bf9bf79d2752e234818a5

        SHA1

        e129f27c5103bc5cc44bcdf0a15e160d445066ff

        SHA256

        374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

        SHA512

        0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

      • /data/user/0/com.ksmobile.launcher.hack/no_backup/androidx.work.workdb-wal
        Filesize

        466KB

        MD5

        374ffd33a44d0b2eee3032fbc304e76b

        SHA1

        f279698f9b9fe70b1e67902b2b3bfa72a55df0cb

        SHA256

        d2794400b95eb39f5377f19eaae1e478e890d04ecc8c55dfdfd737668c476d5c

        SHA512

        c22020b9b5f9a2cdf453e97043d4e502a62798e6e107e92155ed7ee12d0da32ccb6a02f14ce790b9f6a34a5b18c3476ed9f115a53bb063b606bde2f90fa6396b

      • /data/user/0/com.ksmobile.launcher.hack/no_backup/com.google.android.gms.appid-no-backup
      • /data/user/0/com.ksmobile.launcher.hack/no_backup/db_metrica_com.ksmobile.launcher.hack
        Filesize

        2.9MB

        MD5

        2e56a1212b6e0619aaa49027e88c89bb

        SHA1

        e0b6a6de21094a72f3fbdbad3f5f856237a1bb5d

        SHA256

        f06b6fc1db06a5504c82c459a5dce57484f955b5bffe5faafa8f9796f9d19afd

        SHA512

        8dee5e48e5758c5274f3b4ced68bcdac1452823bcaaf04ab87dc2e52c07135eda0928f087fecd1a114e33e5a5fc0b0fffc2c0212086d052307fa3f2cd26c7a77

      • /data/user/0/com.ksmobile.launcher.hack/no_backup/db_metrica_com.ksmobile.launcher.hack-journal
        Filesize

        1KB

        MD5

        668185bcfae338ccb943a8acedd1309e

        SHA1

        a8c29c8ac7689c9ff625916f5f1b9586e615301a

        SHA256

        905388d60f533c1e3b58b5f4f720716bf1561b2b8c0bec18200c9cde42ee11ae

        SHA512

        2768870c090d0b5158c3632bf5a1d7d36a047341f4d20572ec5ccaee6a682b209f2d5182b985b0e09aa1dcba9adf7c33f58aeeea48a678316ea99b8d9387d7a5

      • /data/user/0/com.ksmobile.launcher.hack/no_backup/db_metrica_com.ksmobile.launcher.hack_20799a27-fa80-4b36-b2db-0f8141f24180
        Filesize

        320KB

        MD5

        479cb7d6d3b0d419b50a179ce751f2fb

        SHA1

        00e0846c2755fa00c2fe8a628596d547ed33ce17

        SHA256

        667f16b8f204ed463e442c69eeb54794b9929f8fcac54c20f9c49ed1dcc1dd3d

        SHA512

        7868d0d985a85536fc4ec99c5c1a0831190a397b461062db7c81b31f4ed62034399b9d28da6ab30344c12135ddd680347ee0f67a68862c0d894d58b5e2277e44

      • /data/user/0/com.ksmobile.launcher.hack/no_backup/db_metrica_com.ksmobile.launcher.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        Filesize

        1KB

        MD5

        d081cb182d60092ecf8cb1b1a65c8c93

        SHA1

        25166c6491afa9ddb40518b17851e5a9557e1128

        SHA256

        1a4e633d63ece6ee4b206d14da84cf3c31295b1b5881e0e64a1b4cf6afee724a

        SHA512

        13770536e6751e3a464caf73d11d54899ea6842f1f1ad7194133f7d0c9d200ef3ec866ebbb5eb71303ce350460680c3eae3babc8d0aaf6de8c1591a068c33baf

      • /data/user/0/com.ksmobile.launcher.hack/no_backup/metrica_client_data.db
        Filesize

        72KB

        MD5

        f4e630321c99d978dec87e3532c06e54

        SHA1

        0d09438c6eb960640128540c377a1aa12d2326e3

        SHA256

        f4a4d84ca8203e7cbb910359aea40d5f027dc57887ec3a5031249196371c6de6

        SHA512

        32d668cd0befddfc4df59b63fa60fd21a4a8fad1096786c48248e137704788d011137eff5a0e3b65cd83312c50752ecfb1cfcedbb0f724bf5841b3202f57e644

      • /data/user/0/com.ksmobile.launcher.hack/no_backup/metrica_client_data.db-journal
        Filesize

        1KB

        MD5

        06ecff63b6f1cad741ac5d1f136bc843

        SHA1

        863d2e99e7e56472130fa33714620f9f5fed7d0d

        SHA256

        66947efe35b9024d5c4c270f82fe993c9b1b9220f4763c51eb5183b0bc57c334

        SHA512

        f1628e90ec157ecf03e33ca1aa1abb8d47a45879890612570b17add47f8d0ce43b4e8668dcd6237e0d6ca981f1a6c5f7397848f72f0f47839ef76cb801c88861

      • /data/user/0/com.ksmobile.launcher.hack/no_backup/metrica_data.db
        Filesize

        2.5MB

        MD5

        8a5c7a9c9dd9bcd459ea7e02019c2237

        SHA1

        d90291e6e0c8458f67a5a91e7893536422f3cec6

        SHA256

        497a18900d060d13cc914759701f100bcf475e24f3e977f2315433a1dff553d6

        SHA512

        cd2022c437bbd8ad34dc5e2fe40c92084c02ca59e9f617354c365ea258cf2d7bf650ccdf67f8225361a19c28821450f6b538d7ceb6b48dc2b24f3ead1733ea54

      • /data/user/0/com.ksmobile.launcher.hack/no_backup/metrica_data.db-journal
        Filesize

        1KB

        MD5

        74cf292a5f490f1879baf7c46d71e77f

        SHA1

        c2c143ee9a6f614303e1aa3000eb4ae5dddc9950

        SHA256

        e2f1973cdf1c27a3ea4f7836879d22b33dbe6186d8cb25b0f14ac3de8297270f

        SHA512

        099463a7718a99f2f71167f7bbfa06fc008bb96e117621ee3a88bca675e4de94ed4f145a3c62e3fc431933fffd084ba2012ce643aa80f00644a7ec72306972a3

      • /data/user/0/com.ksmobile.launcher.hack/shared_prefs/GTPlayerPurchases.xml
        Filesize

        65B

        MD5

        9781ca003f10f8d0c9c1945b63fdca7f

        SHA1

        4156cf5dc8d71dbab734d25e5e1598b37a5456f4

        SHA256

        3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

        SHA512

        25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

      • /data/user/0/com.ksmobile.launcher.hack/shared_prefs/OneSignal.xml
        Filesize

        872B

        MD5

        79c3eb7b7f9c410a05ed0008df5ff436

        SHA1

        36ef7176c6419cfb0a74679e932966cf1ef33f51

        SHA256

        d8a34c8779392abf7d4b2edf3c0e18c338dd2577090e31884b63855c8512d7e4

        SHA512

        1442b0201e33cebc7f87704c4c513d5f16946dd3d0a0bb71cb8b9d25ebecf6a687adf3b3f6c86447d81d2aab01b52f4188e708f1ac132a2cb4d6c0eba84d2b6b

      • /data/user/0/com.ksmobile.launcher.hack/shared_prefs/OneSignal.xml
        Filesize

        872B

        MD5

        4e2d5536b8a432791c2b7425354ddd86

        SHA1

        dc215ffd22eb8bf4503d6bded368ae7c501c00b9

        SHA256

        4adaa6ee21c437fa72759e73f32134287030423bd6151164374e9d8ca618d5f4

        SHA512

        f28674d04e7703098122f447402d1896f9e001ed1bb8c290b560c9e2c84221ce99dbc03152f58fe65c391a4b19d51fbf2b35dbca5070f16b9d50296863ef1f3e

      • /data/user/0/com.ksmobile.launcher.hack/shared_prefs/OneSignalTriggers.xml
        Filesize

        65B

        MD5

        9781ca003f10f8d0c9c1945b63fdca7f

        SHA1

        4156cf5dc8d71dbab734d25e5e1598b37a5456f4

        SHA256

        3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

        SHA512

        25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

      • /data/user/0/com.ksmobile.launcher.hack/shared_prefs/WebViewChromiumPrefs.xml
        Filesize

        127B

        MD5

        97ccd9a2b2063143df56b6937f961ca4

        SHA1

        5e78a91ae5df289ce83443cb7d5589dd3504fb5d

        SHA256

        248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

        SHA512

        86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

      • /data/user/0/com.ksmobile.launcher.hack/shared_prefs/com.ksmobile.launcher.hack_migrationpreferences.xml
        Filesize

        65B

        MD5

        9781ca003f10f8d0c9c1945b63fdca7f

        SHA1

        4156cf5dc8d71dbab734d25e5e1598b37a5456f4

        SHA256

        3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

        SHA512

        25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

      • /data/user/0/com.ksmobile.launcher.hack/shared_prefs/soax:proxy.xml
        Filesize

        65B

        MD5

        9781ca003f10f8d0c9c1945b63fdca7f

        SHA1

        4156cf5dc8d71dbab734d25e5e1598b37a5456f4

        SHA256

        3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

        SHA512

        25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03