Resubmissions

11/01/2023, 04:43

230111-fcrj8sad92 7

11/01/2023, 02:26

230111-cw7tsaea81 7

Analysis

  • max time kernel
    2670006s
  • max time network
    29s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    11/01/2023, 04:43

General

  • Target

    18cf15c4b963be0217f9608b652107e80afba0e8723ca2148832b2e407ac5209.apk

  • Size

    6.2MB

  • MD5

    06085183f0f0d17645277d5dd4741349

  • SHA1

    fcc7a20524ec8923f9c059e2c49f6a1ab9924225

  • SHA256

    18cf15c4b963be0217f9608b652107e80afba0e8723ca2148832b2e407ac5209

  • SHA512

    955b6cd67ced46474f44e5630d716f248c9e3960b7e9e3fbda6106f4994e5cacfe4d80fa4322eea293d315fd20c4352f281f8e1d0f60e865fa6a57d7adaa029c

  • SSDEEP

    98304:3S0mPqRXsTwNFluCYs2mSWM0BarNee6fveHii6POPpE6Xl7JLLNs9dFJZhgM5Y:iyRXsTErHY3uAN7Ue5nu6XlNLN2XY

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs

Processes

  • com.ots.remotesecurity
    1⤵
    • Acquires the wake lock.
    PID:4407

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/com.ots.remotesecurity/databases/google_app_measurement_local.db

          Filesize

          88KB

          MD5

          f79400920190b99b56e98f90f2436c15

          SHA1

          29f33e02c52a0fbb22c1cc5b0dbb2392eee636ce

          SHA256

          3e085a196ea22e6265fe01ee71853be70b5c338ea0c6dcec2ab8f023fbc1f07b

          SHA512

          149d12504a6f49533f7e930d1fddd62ff86fd302cd81a725472b59c74765fd07d9c965a7582383aca9830f358613fcb3446746fac0187461a5225a4d1100e3f2

        • /data/user/0/com.ots.remotesecurity/databases/google_app_measurement_local.db-journal

          Filesize

          1KB

          MD5

          14aa069435bfc7d7b64aa839ffe82984

          SHA1

          8f7f2d2bb628627c05f9e3b4154d413c642202f9

          SHA256

          5fd921a379271f86dca3dddfc2e09e6ec38df577526260d723d2c88fbbd8e38a

          SHA512

          a39dd823ccdab2384e9684b2b9ecbd21762548adb93ed292c5d120ab1a1f467b034906132dc4ed2519bdde05375bbde219e8e46a69b7f8b0fbb0e0f398f92fac

        • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

          Filesize

          365B

          MD5

          60297e10df13efb4fbd82d50225b484c

          SHA1

          693a99a6337796ca148105b6bf094276f7c52f31

          SHA256

          ebc504ec857c7c9ee58d2a79a49797d5fd8d8620def4b8220125645fd0042031

          SHA512

          8e6215adaba0ce3cb0e90bc70ebcd33b90602dcd0e87a94cd3d0e16eddb10366c1dc35a4fbe85e7d8f227c3781822137097acc10d9ce1f8c438800b34b674135

        • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

          Filesize

          412B

          MD5

          65991fe59942f5f6eb84674579ec11f0

          SHA1

          1031aad07a8605f38f05278e6963ef3634e0cd74

          SHA256

          0593d1e4648adffa7b936b42ea9d7edf0eb0dc89e900ef597faff7ab9ba8a9d7

          SHA512

          c44dbbf28cffc192b93799e2722c01d9be542b66f8ac7c2eb030202d19af5ab277d30a4c75343dbefa0a5dfadcd56b069d2b275ab74f6015d1fe6bc9d19d6f5e

        • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

          Filesize

          458B

          MD5

          3a1a040be844f70b0324d147d16fd8b6

          SHA1

          0fbd499157de623efe864918416321bf6a153b2e

          SHA256

          9a508e75abba93ba760d9721814f5862afd15f643c5e83b183df357ebcfa15f7

          SHA512

          fd1042ae2c47dad59cedc55342ebd5d907e7f9683cebd7f5db63b299c59740e47791ff475490c7ac2727f3945c6589c341f852c4dc6bde6fd24a849a5117734a

        • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

          Filesize

          507B

          MD5

          64fbafab4b33c69b1be64751cd8f81e9

          SHA1

          59a5e465aaa159350fa47b3f97995d35013e77c5

          SHA256

          e210a577d9b12a597f68a2fcd368fcc53233bfb0ef395448b82ad1901201e114

          SHA512

          ed1ea9a7305a4c48c9ba2b2fe1d073c56f85d457bda2980ee3ca78c2aa27d49425cedfb9dae8c6996579a051a531aca78cdad69abcb02f6a3a4566557d019eb0

        • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

          Filesize

          557B

          MD5

          20ab15e1ca6d3a7068bf934f8c1ba43f

          SHA1

          e00fc2c8aa584f860011c3a983b75e7913cce02e

          SHA256

          609ffa066e9ee08c1cdc0e121c5f8c474f551661757c69db33365d9eb7d577e8

          SHA512

          4f1ab0bc2f0174f71c0df04cc9349c16ea4fd376cd0382b1e11f3d6e5ba721e6a56354845b7b6dd2932a6af596a3937e0dbc9b3c36137f02cb88fbff87d36fae

        • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

          Filesize

          606B

          MD5

          8f2af0aadef6c214d6228dec1f39a133

          SHA1

          2e87bc50e95e93313570c755e185b944de954f1b

          SHA256

          d3ebd84a32cb99fb551d0c4634f052c4bab74afb1b9af0d1a517a8af0ee810c2

          SHA512

          c050a9f59e29800f7ee020483fb1111988caec306705acc8567f3d4a37db03f929a5e40d4da74f34ee79c4142718e52ac387c2310ba4bc26319a87f00f690035

        • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

          Filesize

          656B

          MD5

          34ceb23ba657bc727ce64120fc7a9218

          SHA1

          953c710d48e7da982ca4ef65583f16e0fc7e37c3

          SHA256

          ef73df71c83fdfc4e46036e16b5913c079134e8a2bfa2e9d332e4a1a4528b149

          SHA512

          2f6955ba62653b9b4afa52d1f3ac5a586c34b54ae31f657ea109a8bf773a793d8d4f0c5ea4f9a214da3d360a54771e6cdbb92d59addc564530508574535c4b7f

        • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

          Filesize

          701B

          MD5

          53fa8675396dc54e92ee7e622615735e

          SHA1

          4c1844181fca3448f1d54eef850e3bde0a546b25

          SHA256

          e422034fab0a8689ada6e0528a80619a9214b572a1c0c9404cbd4a6ad260b7c9

          SHA512

          f40ab1119dce05d9fa06b994f1b272b7c37e5450e7cd8b3072f857a0317544c3f94af06712d8a4a267a6a5d6adaaf46a82df874671660cb81b22b8033f0215bd

        • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

          Filesize

          751B

          MD5

          69d4b7e56dd5d911fc24cfa9ff5c0aea

          SHA1

          7662ca15183e433bd8bd65e7cb8502704246eb91

          SHA256

          8ce1bdd65f776be9ab8c672939ab63171891d56d576b44eb5ce1ccec69d0fe5a

          SHA512

          a91f811eecbca9cebccc0b3e89934f9e5697c7f5702ed39b0ff2623dc45d3d44bb38d5c0538aa76bf5c864fd7b5715dbbb28d174be9ebabf476ae86293762fbd

        • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

          Filesize

          802B

          MD5

          caeed9a4296017a805e9ca819121e593

          SHA1

          7e6e2c06624dd735555e4df2b6faf125ade4f6f5

          SHA256

          2f5286c3cdb1b9d042fcaff781a68d569393e98431815cc011160289f5c39fb1

          SHA512

          f625f44e532e38bd0d9fcad897776cf0bedec1022d4fe6cc9d458da582e37cda0f5a8a957cc9c1ac43ebb2a8c127eef901636ca5295b86a92212f4f55609cf26

        • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

          Filesize

          852B

          MD5

          00ef54e70099d0445a9194ea51125501

          SHA1

          7aedaf4d485810ca9c0401494329f1f37f1f4e0f

          SHA256

          c3b1b949ce15968531a6ff0eeeebbb62b9923c0725ffc725173e94da493cbc8b

          SHA512

          eea882007500829e75829110a6421d766e4832ebee9cfcb869f98199233aef24d4d673aa641ff1af220f1d29b428a885bfa344e24621a9d2b8c47fc135422963

        • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

          Filesize

          904B

          MD5

          bb20e0bd642b27d99e19a67c0d117d24

          SHA1

          b841f7a78ec862f4304b4063d029e48386014aca

          SHA256

          0bb3feba77561b2579e1f7d82b611c735d830826f224b7f4b6ad8125edd934a8

          SHA512

          b37d202b10fe7e4c978adb9b39136adc903329ce963761bf2c56466b87518c7d8f12919e2a17bc1a8d01a991253dc6a06b8427ec47ac33a263355af748a87fad

        • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

          Filesize

          958B

          MD5

          28cf4c79c0d11ddb1a5a981f6f1ba8de

          SHA1

          f0674c31034d5e4d1bf6746664d3fbd943750501

          SHA256

          0a3e420c9add17b06e9e7b18462c6b47e352eec687d9cc38b0d425c2f6d485c4

          SHA512

          5419e665011b0a30fffd0ccf27f38e27f942d7bb4b31115ca1d208392dd905b7a895d8d70b2786329132bdeda7dc344b3639f7ca274138300762b9d688b15843

        • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

          Filesize

          118B

          MD5

          2bc3ca107f6bf4d66d2a60ed62797276

          SHA1

          32fc0c2ada2cea2785cc5d78ea02c30ba4056483

          SHA256

          601ce0ded5168462186703ee54488f4432a83a6ec2c2d5e245a7fce520fe2a31

          SHA512

          fcd6bc851e67ef89bab2b82fb206b1a2c92a95129b86ea72643a8242ea39a12b08ac5a9ec77e64791c4d7cc81180e02631abf6e00ebc58744a0ae3c77bc20a3a

        • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

          Filesize

          169B

          MD5

          30f45e217fb40b7041750e4e5720450b

          SHA1

          709c9894a44c9ff53313087b84c6ce1ccd5be7e3

          SHA256

          34322bce5ccf25855bb3afb612a877ac67b8b364611c96c673e11ed3fecfa308

          SHA512

          eaaff4d1f86166a7f29a7e643b7c3148a4c20f5190d10044a1100e20e10b10a8065b5ea8bd86a5845e837cb1a61888c728afc7e146610ec13ea8d7e95ad3357d

        • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

          Filesize

          215B

          MD5

          4ca8acc98a7bb4320ca4b195ab765089

          SHA1

          45d67143f112bb5f03cbc5fc676bd25e0f1f12b8

          SHA256

          b86c05e4054ec5aa6a66d7f40f9172b3f4fd498a38ded26b15cd1cf1b4571844

          SHA512

          17fb1629e7bc9fe4336e2a184b10af70945fde46e790e4d43c4c50c69e80da634965c8acd842003ad891569e4bceaf58c426d8b097b01cf7ca217c9e89e51d2b

        • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

          Filesize

          263B

          MD5

          bb0eb3e459478c82b0e91f87eebc5d03

          SHA1

          dc5d1c44ff2b4bb1fe2225f4fe368c788a5e9b41

          SHA256

          4410a51e51aec0fbe2ebbe5ddf4e6aabbc78a352afe428e09c1eb85a0b6ab445

          SHA512

          c199e5c9016284c67b7ab32c953f697e541c39ff1fd42b1c5764cee11ad632452edbfc7876ca6aa4bdbee9094d57da1c2605358c07776bed3361af2eb2f06ce1

        • /data/user/0/com.ots.remotesecurity/shared_prefs/OneTouchSecuritiesPref.xml

          Filesize

          314B

          MD5

          5585ee8ef050c124e0782e2d90ff7dd4

          SHA1

          f86b8fd292c1a497dad9b344a664d7e8a244cfca

          SHA256

          46befd2c1e39c17557eb7c1971e29b192839261aae15d454083cdcc82b2f88cd

          SHA512

          a55b1c868da8d9c54ab980ce195fbdf2015478b9174745e92ae8c4e0e15d8e63a58326889660172b82a26854053beb78c0850ba98fccc027d020d4b33b5471cd

        • /data/user/0/com.ots.remotesecurity/shared_prefs/com.google.android.gms.appid.xml

          Filesize

          2KB

          MD5

          b5da3c97eaa5dda7b9c50ed65dc6b04e

          SHA1

          712c8c78fab39514a1ba3e65f24c686d64a6b30f

          SHA256

          0a7758a91166c0778acf353b08cacc23342f7981fbdc51cddd21e48f9e001a9f

          SHA512

          5bf9992409d7a3f873f1094656db43220ea584bb6761fbcce91e7f7decc5190d2ba427b4cf3bb66a1a63e148740308ae51d3fd381bbbbfc8253f09a2cc446369

        • /data/user/0/com.ots.remotesecurity/shared_prefs/com.google.android.gms.measurement.prefs.xml

          Filesize

          548B

          MD5

          dd6612ecb83f33f8c8e7056f15b89a3e

          SHA1

          e1c8a96bad072549ad9fd9a1c51992ae542397a7

          SHA256

          7e700c414e5706354122ddc022de59cccd3a1f938805bce46a004b3b8e0241df

          SHA512

          798e390e7323dbf374acdf89b20845ca868acaf6fe5d31e51ebff0dd3bd730157f97ca06f8d33d2825b666e09da3e09f4f30258ed1023a2152efdd17e1057ed6

        • /data/user/0/com.ots.remotesecurity/shared_prefs/com.google.android.gms.measurement.prefs.xml

          Filesize

          704B

          MD5

          40f748c5f80074dbd3bb6e85e532fddf

          SHA1

          9c25af3f2609be1ee08925013d8bf23113ab2e08

          SHA256

          6a96b3b6c022a00e33ee33e82de146742b46b526e2c1230c932ce279391b477a

          SHA512

          d6ff6b8836f660b3ab186815458570b873cfb1fb0c11348e2e9280e818c29d296c3727ac0f223f748a9cab8634799b2eadb1eb1071660da20c6f10082396ed17

        • /data/user/0/com.ots.remotesecurity/shared_prefs/com.google.android.gms.measurement.prefs.xml

          Filesize

          122B

          MD5

          250b4caeba60ddf53228405750ba66ca

          SHA1

          422ab714feb34e9f3b4f1cbe669887bcd581ddb1

          SHA256

          2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

          SHA512

          373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

        • /data/user/0/com.ots.remotesecurity/shared_prefs/com.google.android.gms.measurement.prefs.xml

          Filesize

          449B

          MD5

          3c6e6e7dd3c7c92904935a9e5e1b1675

          SHA1

          3ee662397bac146f57e2dee9168c7be5775cbca1

          SHA256

          8fa03d575250046e79aff9b089c1ef5b2814924d99c78134942f8a22b293f706

          SHA512

          5b18ff0419c9200da5b781e0b5891523747803d03384e5d04916f87ce7cb9d11ee8398c9bec3219111da45b252456b07cdb2b8942f8a682188ed02afced40a52