Analysis

  • max time kernel
    965602s
  • max time network
    33s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    22/12/2022, 11:17

General

  • Target
    Night Clock_10.0.3.apk
  • Size 33.8MB
  • Sample221222-ndv8taed43
  • SHA256 d3c731f966dd4f5a86c8e17de24ba8b1cbf95ba64f47d32ed52e217d16b09a53
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Checks the presence of a debugger.

Processes

  • com.digital.nightclock
    1⤵
    • Acquires the wake lock.
    PID:4710

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        Web Data

        • Path /data/user/0/com.digital.nightclock/app_webview/Default/Web Data
        • Size 120KB
        • SHA256 8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
        • MD5 SHA1 SHA512 SSDEEP

        Web Data-journal

        • Path /data/user/0/com.digital.nightclock/app_webview/Default/Web Data-journal
        • Size 2KB
        • SHA256 fe5374e0f00e5358af82b8afa5ef187a97f9fe634d250e34e07857dff97d4dea
        • MD5 SHA1 SHA512

        webview_data.lock

        • Path /data/user/0/com.digital.nightclock/app_webview/webview_data.lock
        • Size 28B
        • SHA256 43577e6d871469b1678b8da6129b676e5c6763175c98b2cac1cfa454fb7ce96c
        • MD5 SHA1 SHA512

        settings.dat

        • Path /data/user/0/com.digital.nightclock/cache/WebView/Crashpad/settings.dat
        • Size 40B
        • SHA256 eb937c4f5ae269e1254a8daee58d2275b0b904cb081d1f3259890bb15817d0f8
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.digital.nightclock/cache/WebView/Default/HTTP Cache/Code Cache/js/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.digital.nightclock/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
        • Size 96B
        • SHA256 9a35998d7e65b51003902e89ee804d02beedf5b0470d618e68fe68b9225368d5
        • MD5 SHA1 SHA512

        index

        • Path /data/user/0/com.digital.nightclock/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
        • Size 48B
        • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
        • MD5 SHA1 SHA512

        temp-index

        • Path /data/user/0/com.digital.nightclock/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
        • Size 96B
        • SHA256 64b7f412d4fd3755bde7f41daf28e3a3bb07f80b15058ab60e246cb1c5e53ffc
        • MD5 SHA1 SHA512

        font_unique_name_table.pb

        • Path /data/user/0/com.digital.nightclock/cache/WebView/font_unique_name_table.pb
        • Size 57KB
        • SHA256 0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
        • MD5 SHA1 SHA512 SSDEEP

        OneSignal.db

        • Path /data/user/0/com.digital.nightclock/databases/OneSignal.db
        • Size 136KB
        • SHA256 959a0aa793423c8668dd1e4cd4e005e3e1a9fdba67fb86eaf84389f915bbe823
        • MD5 SHA1 SHA512 SSDEEP

        OneSignal.db-journal

        • Path /data/user/0/com.digital.nightclock/databases/OneSignal.db-journal
        • Size 1KB
        • SHA256 0af5a5ccd501205f55beaf6250a3db586e8e94833fc3522da8d72a3d64bbb741
        • MD5 SHA1 SHA512

        com.google.android.datatransport.events

        • Path /data/user/0/com.digital.nightclock/databases/com.google.android.datatransport.events
        • Size 144KB
        • SHA256 09739f5db0eee215b122ffed41c611803686d1ae0769e8535b4f534d436a22d1
        • MD5 SHA1 SHA512 SSDEEP

        com.google.android.datatransport.events-journal

        • Path /data/user/0/com.digital.nightclock/databases/com.google.android.datatransport.events-journal
        • Size 1KB
        • SHA256 95903a94a805a3afbe273c88e0b12327b193dc7950d7965d35c186d95ff128f8
        • MD5 SHA1 SHA512

        google_app_measurement_local.db

        • Path /data/user/0/com.digital.nightclock/databases/google_app_measurement_local.db
        • Size 88KB
        • SHA256 a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2
        • MD5 SHA1 SHA512 SSDEEP

        google_app_measurement_local.db-journal

        • Path /data/user/0/com.digital.nightclock/databases/google_app_measurement_local.db-journal
        • Size 1KB
        • SHA256 3000158b69955688d92a46fbeb9961cdb253a3b6846b0165dff9a58e7079bb97
        • MD5 SHA1 SHA512

        event0000000000_

        • Path /data/user/0/com.digital.nightclock/files/.com.google.firebase.crashlytics.files.v2:com.digital.nightclock/open-sessions/63A43CD6006F00011266DC9F40034EE7/event0000000000_
        • Size 55KB
        • SHA256 1e479747ab97b2680acf177c816ffd5c3adb5be732822eca12b0f949172c08bf
        • MD5 SHA1 SHA512 SSDEEP

        report

        • Path /data/user/0/com.digital.nightclock/files/.com.google.firebase.crashlytics.files.v2:com.digital.nightclock/open-sessions/63A43CD6006F00011266DC9F40034EE7/report
        • Size 751B
        • SHA256 c1bb8476c4a12f86ecf927366ff442d4819e5c3a6d5952075fa7b7d61333a086
        • MD5 SHA1 SHA512

        report

        • Path /data/user/0/com.digital.nightclock/files/.com.google.firebase.crashlytics.files.v2:com.digital.nightclock/open-sessions/63A43CE5005A00021266DC9F40034EE7/report
        • Size 751B
        • SHA256 e897cd41faedf34cf532f6037e8a9156ea00bbf4a16232eb5c530837f90515bf
        • MD5 SHA1 SHA512

        63A43CD6006F00011266DC9F40034EE7

        • Path /data/user/0/com.digital.nightclock/files/.com.google.firebase.crashlytics.files.v2:com.digital.nightclock/priority-reports/63A43CD6006F00011266DC9F40034EE7
        • Size 56KB
        • SHA256 da1c28d938132683508326dba739742dd5134b4f62dc52154ca9f21735a210ad
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb

        • Path /data/user/0/com.digital.nightclock/no_backup/androidx.work.workdb
        • Size 8KB
        • SHA256 4b34cf505050facf47aa7936e4e7667e1969105665c632b3eefe7ecddf9a6935
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-journal

        • Path /data/user/0/com.digital.nightclock/no_backup/androidx.work.workdb-journal
        • Size 1KB
        • SHA256 b0f3428297ed7a364fcd679435544088a2be603e956f76057b4c53f62c9fddd9
        • MD5 SHA1 SHA512

        androidx.work.workdb-shm

        • Path /data/user/0/com.digital.nightclock/no_backup/androidx.work.workdb-shm
        • Size 16B
        • SHA256 374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
        • MD5 SHA1 SHA512

        androidx.work.workdb-wal

        • Path /data/user/0/com.digital.nightclock/no_backup/androidx.work.workdb-wal
        • Size 378KB
        • SHA256 646fb517798f483e7f86946333cd31516f8b0b9c3a1ed14395f55d1748e6cd24
        • MD5 SHA1 SHA512 SSDEEP

        FirebaseHeartBeatW0RFRkFVTFRd+MTo3MjAwNjc5MjEyODE6YW5kcm9pZDo5NzkwZTI3OTU5ZGY2OGY1YjA5NDgw.xml

        • Path /data/user/0/com.digital.nightclock/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo3MjAwNjc5MjEyODE6YW5kcm9pZDo5NzkwZTI3OTU5ZGY2OGY1YjA5NDgw.xml
        • Size 571B
        • SHA256 e7099b638c1a273ec8fe1080f77cb0edb4af35fa28c15591bd436e4e2519cb7f
        • MD5 SHA1 SHA512

        FirebaseHeartBeatW0RFRkFVTFRd+MTo3MjAwNjc5MjEyODE6YW5kcm9pZDo5NzkwZTI3OTU5ZGY2OGY1YjA5NDgw.xml

        • Path /data/user/0/com.digital.nightclock/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo3MjAwNjc5MjEyODE6YW5kcm9pZDo5NzkwZTI3OTU5ZGY2OGY1YjA5NDgw.xml
        • Size 178B
        • SHA256 fee006a8d1b413bbdc99698201b88946c4530000ad043c5d247e6ee9cae5ad3d
        • MD5 SHA1 SHA512

        FirebaseHeartBeatW0RFRkFVTFRd+MTo3MjAwNjc5MjEyODE6YW5kcm9pZDo5NzkwZTI3OTU5ZGY2OGY1YjA5NDgw.xml

        • Path /data/user/0/com.digital.nightclock/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTo3MjAwNjc5MjEyODE6YW5kcm9pZDo5NzkwZTI3OTU5ZGY2OGY1YjA5NDgw.xml
        • Size 517B
        • SHA256 14b655cf7e9bea55039885f8c5139202d8f978dbd7a9dddd727b885165846288
        • MD5 SHA1 SHA512

        GTPlayerPurchases.xml

        • Path /data/user/0/com.digital.nightclock/shared_prefs/GTPlayerPurchases.xml
        • Size 65B
        • SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
        • MD5 SHA1 SHA512

        OneSignalTriggers.xml

        • Path /data/user/0/com.digital.nightclock/shared_prefs/OneSignalTriggers.xml
        • Size 65B
        • SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
        • MD5 SHA1 SHA512

        WebViewChromiumPrefs.xml

        • Path /data/user/0/com.digital.nightclock/shared_prefs/WebViewChromiumPrefs.xml
        • Size 127B
        • SHA256 248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
        • MD5 SHA1 SHA512

        b3.xml

        • Path /data/user/0/com.digital.nightclock/shared_prefs/b3.xml
        • Size 65B
        • SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
        • MD5 SHA1 SHA512

        b3.xml

        • Path /data/user/0/com.digital.nightclock/shared_prefs/b3.xml
        • Size 1KB
        • SHA256 6abf80b16db213a93eacf6f0336eb68aa0d9593bc4ff530ef6718c7b171f6a3c
        • MD5 SHA1 SHA512

        b3.xml

        • Path /data/user/0/com.digital.nightclock/shared_prefs/b3.xml
        • Size 1KB
        • SHA256 29891b9d51d496de30636d444ee98d4df06eaab90a68e9e464cd20f4bff8f78d
        • MD5 SHA1 SHA512

        b3.xml

        • Path /data/user/0/com.digital.nightclock/shared_prefs/b3.xml
        • Size 1KB
        • SHA256 bcfcb4b8024bf2ff668817638581963be1c0bc7d877a20ec96ee452a356dbca9
        • MD5 SHA1 SHA512

        b3.xml

        • Path /data/user/0/com.digital.nightclock/shared_prefs/b3.xml
        • Size 1KB
        • SHA256 d60b24470088658505f27a6bad0fd4dd39cf3e2e0d8e6eda1cf00aa3731e88f2
        • MD5 SHA1 SHA512

        b3.xml

        • Path /data/user/0/com.digital.nightclock/shared_prefs/b3.xml
        • Size 2KB
        • SHA256 50e8ce6cad5a5228fcc1e005dc8ad2a3f7cb9a06a01376b4b5971b8f1b558a14
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.digital.nightclock/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 122B
        • SHA256 2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
        • MD5 SHA1 SHA512

        com.google.android.gms.measurement.prefs.xml

        • Path /data/user/0/com.digital.nightclock/shared_prefs/com.google.android.gms.measurement.prefs.xml
        • Size 395B
        • SHA256 2349a64208a935f59418a1f4aa5b91622e9dcebcd6d2592e4d4b3af915a55f56
        • MD5 SHA1 SHA512

        com.google.firebase.crashlytics.xml

        • Path /data/user/0/com.digital.nightclock/shared_prefs/com.google.firebase.crashlytics.xml
        • Size 235B
        • SHA256 5d6f46ba38262945d9ec4a6ed3790af1129aed7cd9b0228e7620910db12a4a95
        • MD5 SHA1 SHA512

        com.google.firebase.messaging.xml

        • Path /data/user/0/com.digital.nightclock/shared_prefs/com.google.firebase.messaging.xml
        • Size 137B
        • SHA256 5d262a249d4523aa6285643f3e7d110697e3aa653bf68909d3a56f4fad151a75
        • MD5 SHA1 SHA512