Analysis

  • max time kernel
    2142975s
  • max time network
    15s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    05/01/2023, 02:20

General

  • Target

    18cf15c4b963be0217f9608b652107e80afba0e8723ca2148832b2e407ac5209.apk

  • Size

    6.2MB

  • MD5

    06085183f0f0d17645277d5dd4741349

  • SHA1

    fcc7a20524ec8923f9c059e2c49f6a1ab9924225

  • SHA256

    18cf15c4b963be0217f9608b652107e80afba0e8723ca2148832b2e407ac5209

  • SHA512

    955b6cd67ced46474f44e5630d716f248c9e3960b7e9e3fbda6106f4994e5cacfe4d80fa4322eea293d315fd20c4352f281f8e1d0f60e865fa6a57d7adaa029c

  • SSDEEP

    98304:3S0mPqRXsTwNFluCYs2mSWM0BarNee6fveHii6POPpE6Xl7JLLNs9dFJZhgM5Y:iyRXsTErHY3uAN7Ue5nu6XlNLN2XY

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs

Processes

  • com.ots.remotesecurity
    1⤵
    • Acquires the wake lock.
    PID:4424

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.ots.remotesecurity/databases/google_app_measurement_local.db

    Filesize

    88KB

    MD5

    fb13ba0c53bc7bd70f02df381ad776e3

    SHA1

    b6ef869a49a79b13e28368856695bac4aa2adedd

    SHA256

    0feb9b557a64e47800f577de1722b07eb4ca1cba28cec6276149b0991193e58c

    SHA512

    7bae80bf140e86e6154282ae7559f88002657ba251c97ec62e483691d379bde3d1c88298ada380411bdd8860838024216c0ce4d51b8679a6b40d13e6679d950a

  • /data/user/0/com.ots.remotesecurity/databases/google_app_measurement_local.db-journal

    Filesize

    1KB

    MD5

    1154b14766230e571bf0ae310ec47490

    SHA1

    1b77f70e5689738728dd5c6d05952e9940105c0e

    SHA256

    18e2a3049ec41691f9e3af2c1a1f0100a4574be85ce70c5e1d7ed657b7f467e4

    SHA512

    4f05c09b7de37f6ca015e1f7febb4609aa3af5f65a821f7211c30c6b21d705adf5384ee129d1fc06374451c3648aa2d41235e42b0c0a14d1dd06c470e0b5b519

  • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

    Filesize

    365B

    MD5

    60297e10df13efb4fbd82d50225b484c

    SHA1

    693a99a6337796ca148105b6bf094276f7c52f31

    SHA256

    ebc504ec857c7c9ee58d2a79a49797d5fd8d8620def4b8220125645fd0042031

    SHA512

    8e6215adaba0ce3cb0e90bc70ebcd33b90602dcd0e87a94cd3d0e16eddb10366c1dc35a4fbe85e7d8f227c3781822137097acc10d9ce1f8c438800b34b674135

  • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

    Filesize

    412B

    MD5

    65991fe59942f5f6eb84674579ec11f0

    SHA1

    1031aad07a8605f38f05278e6963ef3634e0cd74

    SHA256

    0593d1e4648adffa7b936b42ea9d7edf0eb0dc89e900ef597faff7ab9ba8a9d7

    SHA512

    c44dbbf28cffc192b93799e2722c01d9be542b66f8ac7c2eb030202d19af5ab277d30a4c75343dbefa0a5dfadcd56b069d2b275ab74f6015d1fe6bc9d19d6f5e

  • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

    Filesize

    458B

    MD5

    3a1a040be844f70b0324d147d16fd8b6

    SHA1

    0fbd499157de623efe864918416321bf6a153b2e

    SHA256

    9a508e75abba93ba760d9721814f5862afd15f643c5e83b183df357ebcfa15f7

    SHA512

    fd1042ae2c47dad59cedc55342ebd5d907e7f9683cebd7f5db63b299c59740e47791ff475490c7ac2727f3945c6589c341f852c4dc6bde6fd24a849a5117734a

  • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

    Filesize

    507B

    MD5

    64fbafab4b33c69b1be64751cd8f81e9

    SHA1

    59a5e465aaa159350fa47b3f97995d35013e77c5

    SHA256

    e210a577d9b12a597f68a2fcd368fcc53233bfb0ef395448b82ad1901201e114

    SHA512

    ed1ea9a7305a4c48c9ba2b2fe1d073c56f85d457bda2980ee3ca78c2aa27d49425cedfb9dae8c6996579a051a531aca78cdad69abcb02f6a3a4566557d019eb0

  • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

    Filesize

    557B

    MD5

    20ab15e1ca6d3a7068bf934f8c1ba43f

    SHA1

    e00fc2c8aa584f860011c3a983b75e7913cce02e

    SHA256

    609ffa066e9ee08c1cdc0e121c5f8c474f551661757c69db33365d9eb7d577e8

    SHA512

    4f1ab0bc2f0174f71c0df04cc9349c16ea4fd376cd0382b1e11f3d6e5ba721e6a56354845b7b6dd2932a6af596a3937e0dbc9b3c36137f02cb88fbff87d36fae

  • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

    Filesize

    606B

    MD5

    8f2af0aadef6c214d6228dec1f39a133

    SHA1

    2e87bc50e95e93313570c755e185b944de954f1b

    SHA256

    d3ebd84a32cb99fb551d0c4634f052c4bab74afb1b9af0d1a517a8af0ee810c2

    SHA512

    c050a9f59e29800f7ee020483fb1111988caec306705acc8567f3d4a37db03f929a5e40d4da74f34ee79c4142718e52ac387c2310ba4bc26319a87f00f690035

  • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

    Filesize

    656B

    MD5

    34ceb23ba657bc727ce64120fc7a9218

    SHA1

    953c710d48e7da982ca4ef65583f16e0fc7e37c3

    SHA256

    ef73df71c83fdfc4e46036e16b5913c079134e8a2bfa2e9d332e4a1a4528b149

    SHA512

    2f6955ba62653b9b4afa52d1f3ac5a586c34b54ae31f657ea109a8bf773a793d8d4f0c5ea4f9a214da3d360a54771e6cdbb92d59addc564530508574535c4b7f

  • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

    Filesize

    701B

    MD5

    53fa8675396dc54e92ee7e622615735e

    SHA1

    4c1844181fca3448f1d54eef850e3bde0a546b25

    SHA256

    e422034fab0a8689ada6e0528a80619a9214b572a1c0c9404cbd4a6ad260b7c9

    SHA512

    f40ab1119dce05d9fa06b994f1b272b7c37e5450e7cd8b3072f857a0317544c3f94af06712d8a4a267a6a5d6adaaf46a82df874671660cb81b22b8033f0215bd

  • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

    Filesize

    751B

    MD5

    69d4b7e56dd5d911fc24cfa9ff5c0aea

    SHA1

    7662ca15183e433bd8bd65e7cb8502704246eb91

    SHA256

    8ce1bdd65f776be9ab8c672939ab63171891d56d576b44eb5ce1ccec69d0fe5a

    SHA512

    a91f811eecbca9cebccc0b3e89934f9e5697c7f5702ed39b0ff2623dc45d3d44bb38d5c0538aa76bf5c864fd7b5715dbbb28d174be9ebabf476ae86293762fbd

  • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

    Filesize

    802B

    MD5

    caeed9a4296017a805e9ca819121e593

    SHA1

    7e6e2c06624dd735555e4df2b6faf125ade4f6f5

    SHA256

    2f5286c3cdb1b9d042fcaff781a68d569393e98431815cc011160289f5c39fb1

    SHA512

    f625f44e532e38bd0d9fcad897776cf0bedec1022d4fe6cc9d458da582e37cda0f5a8a957cc9c1ac43ebb2a8c127eef901636ca5295b86a92212f4f55609cf26

  • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

    Filesize

    852B

    MD5

    00ef54e70099d0445a9194ea51125501

    SHA1

    7aedaf4d485810ca9c0401494329f1f37f1f4e0f

    SHA256

    c3b1b949ce15968531a6ff0eeeebbb62b9923c0725ffc725173e94da493cbc8b

    SHA512

    eea882007500829e75829110a6421d766e4832ebee9cfcb869f98199233aef24d4d673aa641ff1af220f1d29b428a885bfa344e24621a9d2b8c47fc135422963

  • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

    Filesize

    904B

    MD5

    bb20e0bd642b27d99e19a67c0d117d24

    SHA1

    b841f7a78ec862f4304b4063d029e48386014aca

    SHA256

    0bb3feba77561b2579e1f7d82b611c735d830826f224b7f4b6ad8125edd934a8

    SHA512

    b37d202b10fe7e4c978adb9b39136adc903329ce963761bf2c56466b87518c7d8f12919e2a17bc1a8d01a991253dc6a06b8427ec47ac33a263355af748a87fad

  • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

    Filesize

    958B

    MD5

    28cf4c79c0d11ddb1a5a981f6f1ba8de

    SHA1

    f0674c31034d5e4d1bf6746664d3fbd943750501

    SHA256

    0a3e420c9add17b06e9e7b18462c6b47e352eec687d9cc38b0d425c2f6d485c4

    SHA512

    5419e665011b0a30fffd0ccf27f38e27f942d7bb4b31115ca1d208392dd905b7a895d8d70b2786329132bdeda7dc344b3639f7ca274138300762b9d688b15843

  • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

    Filesize

    118B

    MD5

    2bc3ca107f6bf4d66d2a60ed62797276

    SHA1

    32fc0c2ada2cea2785cc5d78ea02c30ba4056483

    SHA256

    601ce0ded5168462186703ee54488f4432a83a6ec2c2d5e245a7fce520fe2a31

    SHA512

    fcd6bc851e67ef89bab2b82fb206b1a2c92a95129b86ea72643a8242ea39a12b08ac5a9ec77e64791c4d7cc81180e02631abf6e00ebc58744a0ae3c77bc20a3a

  • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

    Filesize

    169B

    MD5

    30f45e217fb40b7041750e4e5720450b

    SHA1

    709c9894a44c9ff53313087b84c6ce1ccd5be7e3

    SHA256

    34322bce5ccf25855bb3afb612a877ac67b8b364611c96c673e11ed3fecfa308

    SHA512

    eaaff4d1f86166a7f29a7e643b7c3148a4c20f5190d10044a1100e20e10b10a8065b5ea8bd86a5845e837cb1a61888c728afc7e146610ec13ea8d7e95ad3357d

  • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

    Filesize

    215B

    MD5

    4ca8acc98a7bb4320ca4b195ab765089

    SHA1

    45d67143f112bb5f03cbc5fc676bd25e0f1f12b8

    SHA256

    b86c05e4054ec5aa6a66d7f40f9172b3f4fd498a38ded26b15cd1cf1b4571844

    SHA512

    17fb1629e7bc9fe4336e2a184b10af70945fde46e790e4d43c4c50c69e80da634965c8acd842003ad891569e4bceaf58c426d8b097b01cf7ca217c9e89e51d2b

  • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

    Filesize

    263B

    MD5

    bb0eb3e459478c82b0e91f87eebc5d03

    SHA1

    dc5d1c44ff2b4bb1fe2225f4fe368c788a5e9b41

    SHA256

    4410a51e51aec0fbe2ebbe5ddf4e6aabbc78a352afe428e09c1eb85a0b6ab445

    SHA512

    c199e5c9016284c67b7ab32c953f697e541c39ff1fd42b1c5764cee11ad632452edbfc7876ca6aa4bdbee9094d57da1c2605358c07776bed3361af2eb2f06ce1

  • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

    Filesize

    314B

    MD5

    5585ee8ef050c124e0782e2d90ff7dd4

    SHA1

    f86b8fd292c1a497dad9b344a664d7e8a244cfca

    SHA256

    46befd2c1e39c17557eb7c1971e29b192839261aae15d454083cdcc82b2f88cd

    SHA512

    a55b1c868da8d9c54ab980ce195fbdf2015478b9174745e92ae8c4e0e15d8e63a58326889660172b82a26854053beb78c0850ba98fccc027d020d4b33b5471cd

  • /data/user/0/com.ots.remotesecurity/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    2KB

    MD5

    e75bcc572b7a3147e0c6707a910f0313

    SHA1

    5e2c473852fc22a107257531b5746ffa20fc1e50

    SHA256

    8ce746720ccd7d7bfb32962cbae6f7c1130a7bf70b0f8d34283521e9bea9e01c

    SHA512

    14f19c5dfc14f8386e369c0411c0ee5760e56fefdf72e82e7fc04c72df8d19a9fdd2f1bbca61542bfe6b3c0625d71dddfdfd9bf42ae648b5fd36c366f9c0d710

  • /data/user/0/com.ots.remotesecurity/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    449B

    MD5

    f75fb21d4e2ab7ff737b1964d77d9c23

    SHA1

    39786b38fb8d4aa248b249e30c5032a5896c1cb3

    SHA256

    be8d042b9cb7e1a3d085f961f74be78bd58c8c00df16244bfe207fe2864494a3

    SHA512

    479a7326bdea3e8eb82f4318b93aa1c2ccdf2ef1ad8ce6a3afda007f987eb2a246fd7abf25cf500e0410d7256d973e8520e87d5b50426c86ce42ca2cf639bcac

  • /data/user/0/com.ots.remotesecurity/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    548B

    MD5

    613f410281b6a2b6e9d8e03e5d508821

    SHA1

    a1436a06a8410b6905d70f0449e7ac86ce6032b8

    SHA256

    8ddd87915ac840ca49f705322cb34587f1a53914a970f5f29bd62f1ff5024995

    SHA512

    06e297f1211d7a8e3297c8e333bb67be98463f6d2b4d3dd26e1f4dff4f0def6128248f26cea1ae5ecfb1f6d5d7f0f5050dadb7ade39089fe5c6bd6bc71872419

  • /data/user/0/com.ots.remotesecurity/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    704B

    MD5

    388f8520e13eb593c14484fb7f4bb075

    SHA1

    28e9c21087924b28565a9297264654324b3eda13

    SHA256

    c3e5e05e94f13787bd592fa43adbaf2c1da1b556c72f5fa9c7a8746d28137624

    SHA512

    5427fd2406709693aa209e748ceb3517dc50d604a4f59beed62ce2d603a48d9425f0872669d2d8dd551f9054587fea6e5560eb9690b790645765026d1c73902f

  • /data/user/0/com.ots.remotesecurity/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    122B

    MD5

    250b4caeba60ddf53228405750ba66ca

    SHA1

    422ab714feb34e9f3b4f1cbe669887bcd581ddb1

    SHA256

    2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

    SHA512

    373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

  • /data/user/0/com.ots.remotesecurity/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    234B

    MD5

    17c3797aaa0535173deb4b373af47e51

    SHA1

    606efabc7d60c6adc6ced2f6c8194904b9c2b55c

    SHA256

    807cb5d9c6e3d19581f175007b26a2a198fe7d567f8b8da3225b4124e4cbd9e5

    SHA512

    0e9bd1433cd2405a2f42825fe2d2023f6f6407765d7ae2870c2fa0297fd35421526a2431c56a19c071163c0fb9a796aba542ad10ee7ea62c0dcfc80387cdcada