Analysis

  • max time kernel
    3101882s
  • max time network
    167s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    26-11-2022 19:32

General

  • Target

    25216b34ffc69d8571b9d738caae2ca8e6533af4b03ffaf26b997b1d8b71cdd1.apk

  • Size

    1.8MB

  • MD5

    6748ee6231c58aaa46ca75fdd67e7977

  • SHA1

    4a69b1027b33f3c37a0346c0290281e4e876cbf2

  • SHA256

    25216b34ffc69d8571b9d738caae2ca8e6533af4b03ffaf26b997b1d8b71cdd1

  • SHA512

    95cc605e6f9aae7cc12553c0e9463597d10ed683f475bde4cbea34d9bbb54b1f65f409a31588391289f0019078566e4e982143074ca483ee73d6f5a758cb4bef

  • SSDEEP

    49152:TWm84cCgyP8ENctZvCvwgeFWW1Cp6Ug0tO+whNHDjPDcSrg:TWCcCl2tZbiWgp6wtavPod

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.hdc.bookmark243911
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4519

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.hdc.bookmark243911/databases/google_analytics_v4.db
    Filesize

    136KB

    MD5

    9a3a3b81cba0a638d3f65f22a2a086f5

    SHA1

    9d2ebebecb1ba077b6f02157aad794acca3839a9

    SHA256

    0e375a055d74bbc962e8ac1c6b360f84b468d9f59e605d041f0dec4b49f318d7

    SHA512

    96fa7010527efdd3435362b874d5908615d083afd454420415f678d04f20aa9b5d18f78ab8c4f20379c6e3c73dabc2702e3a9004cde2c9f29f8377df9586283e

  • /data/user/0/com.hdc.bookmark243911/databases/google_analytics_v4.db-journal
    Filesize

    1KB

    MD5

    15eb268b34cc4cdd3f34cd484b74e129

    SHA1

    a62adeafde49bdb80dc345e0421f02a9b8dfb0a5

    SHA256

    c5e50a31bacf7b1dfb42fb0dcd92604076e6285c459f94982c2074cba8e229ce

    SHA512

    fa8d3bffd87dabc7d06715d821b03be179d2e06631e37e53e94adb96f6fdf2d2e84e4caac1181a7e8cbca9971d10e0b6ca97f15b29d513298478a44a90fc1b6b

  • /data/user/0/com.hdc.bookmark243911/files/gaClientId
    Filesize

    36B

    MD5

    2db43fd9249df9b46e848fc21196d234

    SHA1

    8346979f7d93e339dde44c6e916bdeaca5f8ee53

    SHA256

    4efc26c6e1b763b3ca5572a78cd26103356b5e46a1624dab3da596ffbf80f7e1

    SHA512

    779c41008f7b7b5a8e6a429d3fc8554ed835b343603f22f9a346e79515b2e7494bd3613f8e197037692c95f3b1960f33fffeba36c3169550618fced0c4f56cde

  • /data/user/0/com.hdc.bookmark243911/files/gaClientIdData
    Filesize

    32B

    MD5

    db9bf45cde2957694fcb6a6a30d993db

    SHA1

    78ce846d13fc628d493c5e23ff798055d9341e7f

    SHA256

    b95e349c44b1755f578a4400f5b732803aeb81f5813e911b129893310a4db4be

    SHA512

    e6cc406cb63c5813ecf3cbf2e79778d3215f3c59bc27f3977d8cb46a42c6aab721629a1ecff92e0bdf3b9b9ab6bcf00aaa02845a879d333f189d2335799956d3

  • /data/user/0/com.hdc.bookmark243911/shared_prefs/com.google.android.gms.analytics.prefs.xml
    Filesize

    129B

    MD5

    84301278a25942b8f77afb00b4036a4a

    SHA1

    6ee62df7fcbb23e220fa5365993fc4a3f45de010

    SHA256

    3947c765f6c9c5484290f8d7a71f0a2ddda2993c8d2276b63189f6392550f271

    SHA512

    537ee20df9da4f5a84a6ee8ea7cc5e87616ef40ee89f40b65049db44411d3abe1818e890f6d4aee5ed56567678218461d22a3f532505c90c5eff7798f4982e9c

  • /data/user/0/com.hdc.bookmark243911/shared_prefs/com.google.android.gms.analytics.prefs.xml
    Filesize

    447B

    MD5

    bec31c7d8c2fddf7ac5fca8799c494f6

    SHA1

    0ce70ebb8f0d6cec144fe92c3e784f8508f25cf3

    SHA256

    c057a67f452e9f6772d951d035a9aab07e2a87589ce64052fb63da4a0c13558c

    SHA512

    2255c8924f84942f3a6b8fa9c84bf7954e306530ff3a1db252fcfbe3aeebf824ba65ff43dca00de5de2c8a7b322016611fdef41929df8086b4600e6765971d6d

  • /data/user/0/com.hdc.bookmark243911/shared_prefs/com.google.android.gms.analytics.prefs.xml
    Filesize

    417B

    MD5

    9ac5cd03476458645c0ba2f1de6babc4

    SHA1

    2c4ff3b830777824672da10c41b0ffa78554625b

    SHA256

    2b07446cb8ae33c7e1b6759b3f9dac5686c20e356890968f55bfd81378e404b0

    SHA512

    f011efeaedbed3345216097cf365535e78f16861065464336fc85db128f2f5bd3d7eef54501438905a1bed44b4c382e480ad895215153bd3bc918e35fbd7b8b8