Resubmissions

21-01-2023 09:05

230121-k16raabg47 10

Analysis

  • max time kernel
    3549662s
  • max time network
    168s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    21-01-2023 09:05

General

  • Target

    220fcfa47a11e7e3f179a96258a5bb69914c17e8ca7d0fdce44d13f1f3229548.apk

  • Size

    12.7MB

  • MD5

    07532dea34c87ea2c91d2e035ed5dc87

  • SHA1

    04ec835ae9240722db8190c093a5b2a7059646b1

  • SHA256

    220fcfa47a11e7e3f179a96258a5bb69914c17e8ca7d0fdce44d13f1f3229548

  • SHA512

    270319f1a8a8fe9e19a78741cdcdf5f7c62d3072e55ea68a8c5ecb154bea9fb0895d1562164a0a04ffac19cd2bfa760ee219e3e0ef3890ccce564ace0c1f51ea

  • SSDEEP

    196608:A8ULZA2UNZPFyeRlQbQ4Waex2Jg6K3KVSOjQHITUI8KgYeX1EVsf6lCJwtBD/SZP:qqdZPFyeR2b/WWO3K75Uv5JEVsaUwtNu

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
  • Acquires the wake lock. 1 IoCs

Processes

  • org.schabi.newpipe.mask
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
    • Acquires the wake lock.
    PID:4407

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/org.schabi.newpipe.mask/databases/com.google.android.datatransport.events

    Filesize

    112KB

    MD5

    42234a0297173062f6ed764ca6c0208c

    SHA1

    d8105d91e5557e0392dc749fbac6974d2daed956

    SHA256

    7265e8650b06d78c24ca70a41564680abfe6e529ce6ff5f5aa7504caf9113dc6

    SHA512

    001960aca53baf55b045b0b1d1f8609d1d614bb145306da3d8eca698d33d3a6d5b66a81cedb8a581b7e0a9fa97349b0ce0b19113564ecfcc41ba95201b871f53

  • /data/user/0/org.schabi.newpipe.mask/databases/com.google.android.datatransport.events-journal

    Filesize

    1KB

    MD5

    1d596998170167790e1bb34a730189c5

    SHA1

    3c3aa136b79985d6ba0183e85502d444a52299be

    SHA256

    540b5a07a4318569700ac3652b83cdc62b0a07dd44c7f1f46b514ca288be3296

    SHA512

    558f35b0ddff36f0704d4946a640a271254ec782f560f290ab22964c351db78f71d366322967e9e50120157ed933e19dd887cd0c42068c1c0a5a1ab9953ec9f7

  • /data/user/0/org.schabi.newpipe.mask/databases/google_app_measurement_local.db

    Filesize

    88KB

    MD5

    8dfcfdcef5a9793fb83bda404ec3f42b

    SHA1

    dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b

    SHA256

    a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2

    SHA512

    e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807

  • /data/user/0/org.schabi.newpipe.mask/databases/google_app_measurement_local.db-journal

    Filesize

    1KB

    MD5

    08ac9854201d1314d3d58845e828b1e6

    SHA1

    6829b062172e93994fb5dfdfc0f0c4756eee5a8b

    SHA256

    eacba334458ff4cc19621de842ec6a5c8c62e1672550e6ee5e3858a3717f70b2

    SHA512

    b6d0df269e00b7f33959d46394fa3ea1f56d64617688361d98e7c76b3f8fe54ecdfca23b87407e7271bb93a4ff1187b0b98abafb8a8189be986324333238e43a

  • /data/user/0/org.schabi.newpipe.mask/databases/newpipe.db

    Filesize

    8KB

    MD5

    e579a6b00eef1318f9166352228eba18

    SHA1

    76988896854f0139083e77862eea1a4846cf039f

    SHA256

    4b34cf505050facf47aa7936e4e7667e1969105665c632b3eefe7ecddf9a6935

    SHA512

    c47632e957d87727bf6504a82ca7a44d8da24d30cd997a0f449a96e4f97c656a1b4d9da3fcd827e2a48c59677688da0b872358ebd0f9369d898d1b8ec18d5699

  • /data/user/0/org.schabi.newpipe.mask/databases/newpipe.db-journal

    Filesize

    1KB

    MD5

    0e31c88d4a44bed1bc93e0f7493d157e

    SHA1

    9e3235db78e688b8552954c612b072506274339f

    SHA256

    0469b04e19d125b17890f2584bc0619ad2b690907d0810b72abf630270da1e3b

    SHA512

    20d820a8cbcb93a975db93665083f3f8a1df988fafb27cbdada9a7a19c2b64b31bc5e6f4d1ab7b2a685657f70b563087f6800561cef6580b416691e90d2abd95

  • /data/user/0/org.schabi.newpipe.mask/databases/newpipe.db-shm

    Filesize

    16B

    MD5

    4ae71336e44bf9bf79d2752e234818a5

    SHA1

    e129f27c5103bc5cc44bcdf0a15e160d445066ff

    SHA256

    374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

    SHA512

    0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

  • /data/user/0/org.schabi.newpipe.mask/databases/newpipe.db-wal

    Filesize

    305KB

    MD5

    21c78c260b766965a99b84993afb8708

    SHA1

    a27aec951815318c1ed4e79291bf61ca940f7af8

    SHA256

    9ec78b8fd4dd96ef6d9fda491449eea4d0e6e8ac0b4a7e070c2074a859f65ee3

    SHA512

    e08b8352235b9767d5011ef506b7fea0a1deef55982caaf471913487cac13ea044cd367e3e53574e187036d61b5f8b18ac1a9f6942c4189621be09f33d2dafb0

  • /data/user/0/org.schabi.newpipe.mask/no_backup/androidx.work.workdb

    Filesize

    312KB

    MD5

    b05eb0829296b62fdce79a52653ac76a

    SHA1

    d9c90c19fd35e0734c3759b8ad298337b573c263

    SHA256

    8a64f9f7d083a96ea0d868a037c5f668f2b29ccbf515979328e122fdbf1c54fe

    SHA512

    9ea1b990795f68595d93220a0624fa147dc0bb99abaa1359e6d0649fc49aae7a0936883e3b3d5dc31fb5d9ffa274127b7c60cd0bbfdbb6072112427ac843d644

  • /data/user/0/org.schabi.newpipe.mask/no_backup/androidx.work.workdb-journal

    Filesize

    1KB

    MD5

    c9cda1c6e3e803919d4c7ec1f2d19326

    SHA1

    b5ff1992eae72f36b67a89e096963ab88877ab6e

    SHA256

    9d23b752a28258a7e6764cbd62499d66d5e26b8c4fdc8ae797406435649b6414

    SHA512

    0275473985b302b827fff2b789b2d9a0d07025fbee8e29f1d1fb619f187a54c9598dc976e7391faabad82edc2973b57538aefb24c73ddfd57ef691938814efcf

  • /data/user/0/org.schabi.newpipe.mask/no_backup/androidx.work.workdb-shm

    Filesize

    16B

    MD5

    4ae71336e44bf9bf79d2752e234818a5

    SHA1

    e129f27c5103bc5cc44bcdf0a15e160d445066ff

    SHA256

    374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

    SHA512

    0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

  • /data/user/0/org.schabi.newpipe.mask/no_backup/androidx.work.workdb-wal

    Filesize

    2.2MB

    MD5

    3cfbf2f2f4c7edea31466ad5f5f02308

    SHA1

    e8b493a6b472cb4cdc67bf0d0f0e4cf2251ccc1b

    SHA256

    384789e47e58a434485da2b7f1a6c94f713521569ae68637dc6850f2781b9f85

    SHA512

    71be14c2c94937fdedde4aa62fe2be4c75806c719e5fda6be6f5411d9328ef1ea726b6b0849346133824ddba7286e240a1267297ca1d8d3eba0113ce44789d71

  • /data/user/0/org.schabi.newpipe.mask/shared_prefs/FirebaseAppHeartBeat.xml

    Filesize

    134B

    MD5

    9ff8e29e059340773cb95b8154183f59

    SHA1

    b3b3fd1d98db5f57dd02e2464f34ab903c2a7cac

    SHA256

    8e3858e05ad19827925c64be04832c061c67b939e7e40214cb29aeaf2276e9eb

    SHA512

    05fdd21237971b96479d82ddc6b4121b145830ed48c49b225174387e4e11f9cf937a8231c02456281ccf87291f312b8f54458ddc67c122aa0bea02538698e205

  • /data/user/0/org.schabi.newpipe.mask/shared_prefs/FirebaseAppHeartBeat.xml

    Filesize

    188B

    MD5

    c44513291545a7aed7a259eb416f92ee

    SHA1

    ac193aedb824c9f0340d7ce8180fa43bda4e9437

    SHA256

    6c628bbc77f66e93a9a8252dc8f159dbd7dc0f3173582d90e07ff6d67839f974

    SHA512

    3a0a62907916ff03483a373926913efa53ed43cb65c4e3d4fff70a40899d6f39ec1e75ee3dc07b69502507ff1bb46f7e6d6df7da013fe31e250e733c03bd7534

  • /data/user/0/org.schabi.newpipe.mask/shared_prefs/FirebaseAppHeartBeat.xml

    Filesize

    239B

    MD5

    3d6e8afde8d82a8824c61ab7d3d6a83c

    SHA1

    703e3c44239bd7237ce1067c799b7914150fce20

    SHA256

    527b566fd726acc28144d21f60269d5d8a87b741a33b2fff56f6ea86bf869b40

    SHA512

    aaf56684b77b2b317dcd8505795639d64bad2f1abc863d751401b26450cd49665f4485cce9ab4ad7db244c007e7b9e0057ca320d0ade53ddd6fe276b0b3ccaf7

  • /data/user/0/org.schabi.newpipe.mask/shared_prefs/_has_set_default_values.xml

    Filesize

    130B

    MD5

    f2b4296ffe441b87312ddc80a3ac98ff

    SHA1

    0603dc05dd32b5dec50acfcc1951a85c18b8b4dc

    SHA256

    70b6eecd62c222a39f6a2f3d8164714dcfcc2e7afcfbf0a7e773887266230ce2

    SHA512

    2dce930f6c49eef639567068731437f6df2043da467b41a51f1c5aab66d346c1b0e8197905700d30c8c259fe5e445a0ca66d7da5ee1fa983d7b33a5c9971f4e3

  • /data/user/0/org.schabi.newpipe.mask/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    262B

    MD5

    762b9ecc92c62d8b9a596a39851c4afe

    SHA1

    317779690005fa03b51e9675f56fae7516f77501

    SHA256

    55268586e7f16c11cc704f831b4fdf1b840d6081d20afb32fd671ef720fc2644

    SHA512

    7214e56ab65285c75fc605bc1cb4253cda9bdd79e511fbbd879ca7fcfce2ed782336956688a5971ea24d431366e424ed804d5d7aec254012587099e6d5d1ee88

  • /data/user/0/org.schabi.newpipe.mask/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    192B

    MD5

    6d64c4b24ce22f425bad4ee96750c3b3

    SHA1

    81ef1fb137fb5c64a853f26ea7c257b27527e1ca

    SHA256

    ba3cf68761d54ff342620ec0c4917e9c18f6822f55745cf47fceadd2b1e80fac

    SHA512

    d6cf6f2c716b645298b2208f4cada3646574ad2c90801970a60d1c62347cd3a21acea2b8112d47fd5711bc363ab88feda645bd84f368446249449dcc8616ed43

  • /data/user/0/org.schabi.newpipe.mask/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    122B

    MD5

    250b4caeba60ddf53228405750ba66ca

    SHA1

    422ab714feb34e9f3b4f1cbe669887bcd581ddb1

    SHA256

    2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

    SHA512

    373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb

  • /data/user/0/org.schabi.newpipe.mask/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    395B

    MD5

    b8506f178da94fcd71e022cfa448e752

    SHA1

    e8341ae7b0aafea0690153fefed649849af5965c

    SHA256

    723b00e94c3826e02880cc37c47025bcc437d4eb59fd25b771b67616112af18f

    SHA512

    989067c32d66b35315585974ac12d846490e0f287c3f26aa8340d53c671db45ffc58d8a298afd0a3596981d7bf7a381f27cd05e7ffcaf45a118bf3d32847db85

  • /data/user/0/org.schabi.newpipe.mask/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    606B

    MD5

    9736da6d9921a4eb52cceeece616ad81

    SHA1

    086fb425f076dd2fb2cd774aa457dc166be414b1

    SHA256

    4c12b3a6e8108e7a02a68159545c183e7c2138691daf2f3d54fe6a57d1dbdd8a

    SHA512

    dfcee44bcce055abcca8088d484bb004f4c97e1127e990569576b75e01a818d0091424d887a8d451c54dc7233b447cf2fe0f8ff4a88ca7e2233b9c946acc2a94

  • /data/user/0/org.schabi.newpipe.mask/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    665B

    MD5

    8529e074e952cbf928ae9455ad305ab0

    SHA1

    ce494a5c72610dbb28ef74dcea1561917625ec49

    SHA256

    77245a7e16f7c75fa347e67ffe341b8948c96e43b8a333c8a5013b388f3cf978

    SHA512

    9306105db0a537831088f6d95265c3482ea241db85e54dcec3218acf1e5a5bbb5109f8638bc0b8313dfb50c7c84689e8a51d24671f137cf08a3c49a71807829b

  • /data/user/0/org.schabi.newpipe.mask/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    719B

    MD5

    4ebd69bb9fac1d9eb54c4eabe923bb9d

    SHA1

    838ab910e28604f07babc709cc6358ab1f1f215d

    SHA256

    7ff19c5d8c42ecca999c4ca51c2ddd51e7cd4959ee6932db8531b396fcade55f

    SHA512

    31d04665667f7ea9cdfe9a558b80b082c6ce2b02d1705efbcba2a785588178e1d9d406ddf7bef7b43b043f5d5e4c6260ec9c0eb4bc569789574d0768015986b0

  • /data/user/0/org.schabi.newpipe.mask/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    719B

    MD5

    c493cad111ae0efe6650a26c18e43a7b

    SHA1

    b7e982bf86130b85157ac44a8c4bb8c2f8e8738c

    SHA256

    a9b36dda46b3d9f573d008ba857b3339aff6c105321e3c7202e741866e67e50e

    SHA512

    e754fd4883d565203e9e0bde86ccfe7136da7378db07ec022ad7f69242c5980c6f1d1c3971ee886427a92730cf1f5c3d1113a3ffb578a0db67dd64b2dc5e0116

  • /data/user/0/org.schabi.newpipe.mask/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    719B

    MD5

    48c4a9ae9638f9f577b568d269e7dbff

    SHA1

    4f83a194525e67e25f2e89ba1e1f2a231e69d4c3

    SHA256

    dea8046ab179917d5526bd8f4551159ea398b4ab0ee5ecd95d5d787244d51935

    SHA512

    7b5d155384bc8a262afb7000eaf836548918c03467c1e8f05795d08fcf6bf0680a30e54231427737964eaffe3675dbac40c759edc0e12932271e562d3d14aed4

  • /data/user/0/org.schabi.newpipe.mask/shared_prefs/com.google.android.gms.measurement.prefs.xml

    Filesize

    796B

    MD5

    56467128f1ee73a110e9c245bec500a0

    SHA1

    6b3fd871eb6b05bfd8ae7ead1d4da83f405e4957

    SHA256

    dd690f34a4ab4fb266327cfc832e5ceb42e211ae724a2b5b2b7c4af433e9ed0e

    SHA512

    2d02d67f88929c59373405d549dbaeeb15eddb76cb692e38fbe99a558349d45c96eb7641bb2dad7aacf482a021b1d6fe768a7e7ac4f231f10a14b7262a48f2dc

  • /data/user/0/org.schabi.newpipe.mask/shared_prefs/org.schabi.newpipe.mask_preferences.xml

    Filesize

    141B

    MD5

    3f592c836aaefd97b6846bdc810c1200

    SHA1

    f2dcc34fe49a45deec63f413dfdb39a2397ab325

    SHA256

    246787dca5913cc01e571eba600fbc318fce75039f464bc8c259146b99206396

    SHA512

    d46d58ae4d152291c18af044e6873771645738821b20708a96c5ab7475002f0c180fabe94ea5a0c1f6343bfbf628b1477662f00f6d65452f0e974af4b7accdf6

  • /data/user/0/org.schabi.newpipe.mask/shared_prefs/org.schabi.newpipe.mask_preferences.xml

    Filesize

    3KB

    MD5

    e4c7f1d9370887df6d869cb92743e352

    SHA1

    cc6127e3586d9d607ed0075fb7baecf960e8d7b6

    SHA256

    7514c218a74b8ce3d7b495ac0b126f9ab649da261d0135cbad9e2526b119bb61

    SHA512

    2835374b35bc877f1dba107b5de1998aeca12036ab0274a7db84f80bd091f53b3bba6aba19b75d30d7b39f45dc160ea7a79d65850e1933ed234614e6506dfc6e

  • /data/user/0/org.schabi.newpipe.mask/shared_prefs/org.schabi.newpipe.mask_preferences.xml

    Filesize

    261B

    MD5

    3d6e85981991ed2fc7d34cc2a9ae44d7

    SHA1

    769e317ea50cc8b6440b9c274fa5cb0d3ea4e4f1

    SHA256

    a454f5f1bb2fb0d3e9bffc737d9f8b6d8b996af9aa11d6cd3bf8a11d0c927382

    SHA512

    ddba75a6a88f57521b910399c1fc03d236445f4d47f84c17663d6e0c597923a74a6c0ec0b90902d6e24bf9a0c82d56ddf6ef6226db3edc98bca381a3801a3180

  • /storage/emulated/0/Android/data/org.schabi.newpipe.mask/cache/uil-images/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56