Analysis

  • max time kernel
    2951107s
  • max time network
    135s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    25-11-2022 11:18

General

  • Target

    dab842d83052414e82d09093c02e4d6b83cc97b3e8ac6278bb81651e2ed0c908.apk

  • Size

    129KB

  • MD5

    423ad30db6fae5d57d5694368791dc3b

  • SHA1

    ec8b3ab7d32a897011eee19524b81319b02045a6

  • SHA256

    dab842d83052414e82d09093c02e4d6b83cc97b3e8ac6278bb81651e2ed0c908

  • SHA512

    db845e7a08b4750886c2d895786f6498ee0d3431880f525e8b00822410d050d44ea1456371ecaaed2a71be021fdc95176c6c012461637c3cf60f8f13c0e626b4

  • SSDEEP

    3072:2F+gwtLqLn+uIq1IHLzrrW6kydicbA7ZmmSduMi1zSutB+x:2pGqL+uIHLzHW6kydicstw61e

Score
5/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • org.kman.AquaMail.UnlockerMarket
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4786
    • getprop
      2⤵
        PID:4826

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/app_webview/.com.google.Chrome.XsBtf4
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/app_webview/Cookies
      Filesize

      64KB

      MD5

      9b23e6a88d5a95f155f205cb04b93cd0

      SHA1

      b62dccbbef087a0731f226b96d15d35d8aa5e5fc

      SHA256

      f2f3c3c0c7f085399a6f9a464c1ac30a59ceeb5a4b7026286fa5609e6e8ef857

      SHA512

      bce5f25d98e2e8296c4101b62082dcb6a43902f3431ff6f725e41be6b9aece76e887ef94c4818baf4da845708fd76fd51c37fb6915710c870647593868f27482

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/app_webview/Cookies-journal
      Filesize

      1KB

      MD5

      a9e71d6c6111e075e4b782979ee5d638

      SHA1

      02a21c1dbda9850643c322f6f411271a3daf141c

      SHA256

      814404afec76927a2b802993342325bdb22da8292f3f1c2d5a23cb5d7ec0cca0

      SHA512

      16fb1a12a79d71be0e3328cbbc6a1bb3ec89c884736c1c68910e2481cf7dd5c8d47b442438b892fcac0d65c1b9425d6b3f40afb4829d4bab551185cca5e9c77d

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/app_webview/GPUCache/index
      Filesize

      48B

      MD5

      6d7d499960179766cd4261d12dacc411

      SHA1

      e6f8553b0015e12b23cc551afe98763f3b1c9bed

      SHA256

      c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

      SHA512

      6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/app_webview/GPUCache/index-dir/temp-index
      Filesize

      96B

      MD5

      c30c95183a3228a20adae0ec7f239473

      SHA1

      64933f0395b59ff6aeaee526d824f25379de0bc4

      SHA256

      6408e2d23018861060f0d1a06f5b0f7d26d93b17b856eea037d045435ac21437

      SHA512

      dd77abaf2dd6bb21d8cc0223468a584804dd39a060bd0b3b628f2b4c66755e07293d0800153feee57885e6ec39e3ae2450e6a1f9bb3595fab7ac760dfa1e4741

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/app_webview/Web Data
      Filesize

      112KB

      MD5

      b663831f8cc130493476d94f2d7a5330

      SHA1

      043a1956ab8e40821d67043f8a9110a8eb36fb93

      SHA256

      c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

      SHA512

      e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/app_webview/Web Data-journal
      Filesize

      1KB

      MD5

      5b3224d36acfd6c52f820c91a5f51108

      SHA1

      05f828ac510ac7a06a7e9036d471368c8b0a97c0

      SHA256

      2f7533d369719cb904b59a849edbde86802e35d36cc36872b7a744a608c37fdd

      SHA512

      351b602f8755e21c5f3dd0799f298f49ba0c2830a4ce35dc9645ad867c0bebcef30bb4d77b5c621c86b531885628e628616fc68b3c8282acec89252982eb4c38

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/app_webview/metrics_guid
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/app_webview/metrics_guid
      Filesize

      36B

      MD5

      f9519e446b4160c625aa9ae069f5fa98

      SHA1

      a268c11478ad57e3fbf998071d5a4f1e74b53bdc

      SHA256

      072e9887126fac91d4638536239e6ebe898dff210d36cdfa5a54c53afe620c59

      SHA512

      38ecc67070a2fa159f02ea968c1d9d597257a9be9a16e243c46fef7774f47ed0b0c357e09bf77fea03e613820a38913d53bb4881882cc0d7a921fecd1c992a0b

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/app_webview/variations_seed_new
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/app_webview/variations_stamp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/app_webview/webview_data.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/cache/WebView/Crashpad/settings.dat
      Filesize

      40B

      MD5

      15e3e2d319332b1e717018fdd7698cbe

      SHA1

      600a0084a0d9ed7a90d1e07edf0b2d6a5b8ba653

      SHA256

      80304a5fff64938732e2a11d394d41f5f58305ac2862a70ad729d1b272b4c4ff

      SHA512

      a5e280577c68f2d93df238e1b41c2e28ceb068ddd0727a6a6fff81d32fefdf32b349bec511762b79e99624ccb1925008b0842d0209fb4b9ed2bd6507e9eaf487

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/cache/org.chromium.android_webview/0d5be970c411b1c7_0
      Filesize

      434B

      MD5

      76dea9f502666aae345f07d8e1f20b67

      SHA1

      9021d1a0ece744ae588f8dab12f718c21337a489

      SHA256

      a662c78146ef9a846c3c0727fdaa0417776277b50b01a5711c39d1defebfbb18

      SHA512

      eec03a535314de6911a860aa366300551b34d23edf62f56524b99821078ea9aec2ca8c9e6120019914685866a1f3cbc005e28f8479d7e4386e93d64529f0b9d1

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/cache/org.chromium.android_webview/Code Cache/js/index
      Filesize

      48B

      MD5

      6d7d499960179766cd4261d12dacc411

      SHA1

      e6f8553b0015e12b23cc551afe98763f3b1c9bed

      SHA256

      c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

      SHA512

      6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
      Filesize

      96B

      MD5

      9300b298a4d5886a5010e90b9eba6da1

      SHA1

      d452e0c4009b3da1357089fffb243e11de2d4049

      SHA256

      8c68c37c3d5d17e890163cd19663e719fad96efd5ae8633760e2315f6b90f9d3

      SHA512

      0b1d1a98e617de7d54c7ceb9a1d87678ff37b9db0ec188b5faa90b3f654ce273e62a494c21450de27baf8ac8bc4d95740325b6c7235f6c1c5e013e9917dc5d3a

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/cache/org.chromium.android_webview/index
      Filesize

      48B

      MD5

      6d7d499960179766cd4261d12dacc411

      SHA1

      e6f8553b0015e12b23cc551afe98763f3b1c9bed

      SHA256

      c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

      SHA512

      6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/cache/org.chromium.android_webview/index-dir/temp-index
      Filesize

      96B

      MD5

      0a07427137f6b683175e5d27b6c995b5

      SHA1

      246049b5879de1a784eb137e53dbae135b911853

      SHA256

      e5018a5f8bb0a3fb17eab4491b535e9950da6dee067ad252c809ea77648f1d46

      SHA512

      dcfac1ae742dc8a5a7b15fe3d00fd57178b0ce36bf4ce63a430e2a22ca6f37de320ce2eeaa6bc5cc7fa3666f7f88ea5a5737f21e5dc7ff97f13ea28bc793bc5f

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/cache/org.chromium.android_webview/index-dir/temp-index
      Filesize

      96B

      MD5

      a9fe5d503feffadd8147a36bd67d7c61

      SHA1

      e9ee0f7ea7219cdf9d5f193939f1cacad401562a

      SHA256

      f629a8c6d7fc21a8d30fa707e6b89db658a47abbaaac5e46ebb44dbdb7dbf6d6

      SHA512

      c5677e2c57e0c3f508628e5560ce7390957ae947a9df7ce33c54273834cd316ca8f64b51c91078ed1092afbb8acd2d3abe722bbc4b5803e2d21eaa2ccdbe0b97

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/shared_prefs/WebViewChromiumPrefs.xml
      Filesize

      127B

      MD5

      6ef709b8536878951e87c29a1518fc2b

      SHA1

      24376c70b00152501b3d98df61fa7db435339172

      SHA256

      10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

      SHA512

      96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/shared_prefs/nnr4dtsv.xml
      Filesize

      116B

      MD5

      d6bcb8ccd8306ca97bc9113a3559e406

      SHA1

      ea2263ddca37a02fb2e054395f386aa0da027efa

      SHA256

      96af3ff99e99dd6ce9ccd046ef2e8e0164a27013512ad6ef39132c9b745ef005

      SHA512

      2087a9d81a34cf7ef0823b2c10b28191b74538d4058159f4f41fd810bed008acc7a385f034e4a79862939afe36b5c2067898ddbb595e8e1d106345eccd000f71

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/shared_prefs/nnr4dtsv.xml
      Filesize

      168B

      MD5

      641914a9d8b90ae96a5c6464ee8e1b43

      SHA1

      fc1e8862e808979a986be2c976aa1fbacacc74d0

      SHA256

      15d5417d1f09d2634daaa21b63e7bb12388173bfd018b32b6ea8dbc2f3cf0701

      SHA512

      a58306ad02db0134b72bfe8b5153f5f31d91c7113c0c8c509a0a350772405b26aaa4b3f2be82d313c06acf0d2e1b15dd07c3ab9ef8b769d9dad2b38efe0a0753

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/shared_prefs/nnr4dtsv.xml
      Filesize

      169B

      MD5

      b5214b83f69eff91926d83d5844057da

      SHA1

      1fe26442542b8cad04cb7ba8505512892117c0d1

      SHA256

      5365688348cd4672e2bc6d8f7f6e9f09f3202ab98245f2016bdb29cbe84ee1d2

      SHA512

      8956214d6c632ef52ef8d7a5b5d58a860220f024b56de6e6a83877a7c14692db1ac75a7fdc179b7e0034a5f1ff210d7c2065e19e7bc1d9f5b1d4432dbbd81d49

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/shared_prefs/nnr4dtsv.xml
      Filesize

      217B

      MD5

      37cd03331833a4e81bf5d2deef3b266d

      SHA1

      380782203dfc0e2e4cf4e6855b4dd4c3a4f4602a

      SHA256

      b644d70bed659888f96721f40a8746927fb27004412a510afe19832c8122d322

      SHA512

      816d6f8ae8459df7adab93d245610560ae29f066146f4ba0aa88e618f1f939b8614353c6fd9b7efda00218368d4c899fb214a5916e328fd420ee85e05bae2ea7

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/shared_prefs/nnr4dtsv.xml
      Filesize

      265B

      MD5

      3e2bcf40156765e010850875324e9593

      SHA1

      793021fc16c0d40ae603655b48a919fdfe393734

      SHA256

      d6300b9df45826eaaf213eec88d9a115fe2c74885a2e5ff95e75145d0dfb8793

      SHA512

      b9c4c4bba3d95019d03bc4db8cf739030715bec091f39645581efe4e00f5e18c94d25a7189843fafe24cec2074ea02ec8677a6c12d6ac25a35ee61dbf92916a3

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/shared_prefs/nnr4dtsv.xml
      Filesize

      322B

      MD5

      4e6ad51255d0ddd147d83e1b9474a811

      SHA1

      775baa5697a534680a145ba9e0f2497751a5d87c

      SHA256

      9866ac6cc6f8f1f41b64a77b6fa5ca4e7c7339f2b8efc4c286393e16c68afaa4

      SHA512

      0acb576ddea49b159d279ceec66e13c160b223b1a55e93770b3fd752040a47c91bfb78d5604f49c30f707ea16894562cbd0ff3de401326ff0714c5b04be0b05e

    • /data/user/0/org.kman.AquaMail.UnlockerMarket/shared_prefs/nnr4dtsv.xml
      Filesize

      380B

      MD5

      70bfb31e417de880ea82cb0e61602aa3

      SHA1

      ceeb7154f7846463a45f41eb1a0595f26057335d

      SHA256

      a073031c2b8e720a54e41e43d47468c3fd9bf4c111939ba27735a4107c49f8a2

      SHA512

      2984582c3c71b24784cc24be4f790e874e581ac930b60efbd2271f3def6e4cab72508400ff113d05de6fa429f6015663523a95822638614aac9eb50d8dee146e

    • /storage/emulated/0/.lock-i4s.30.29.4
      Filesize

      13B

      MD5

      a232f2ab068b7db73d57668f41dfca58

      SHA1

      4a933c913bfd4a066d50d5647e43ea1cfaa455d8

      SHA256

      151edbe52009deb1f4ce50049a31d3d092ec49c8a2588fde1957a3cb8892865c

      SHA512

      6296836f7bedc4bfe26ea7f56f84569c3d6127b480557d7f5e040671bf58a3447947a3aaee9bc15520f35be01a1a775ff68840e8052ae4853de1d137686c75c2