Analysis
-
max time kernel
383661s -
max time network
78s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
25-03-2023 04:42
Static task
static1
Behavioral task
behavioral1
Sample
APK_Editor_Pro_4.2__7922_Revdl.com.apk
Resource
android-x86-arm-20220823-en
General
-
Target
APK_Editor_Pro_4.2__7922_Revdl.com.apk
-
Size
5.3MB
-
MD5
e79a2fb422d14162bef474b34943e802
-
SHA1
972ea32ffa370b18078ceaa011e4c39466aebb05
-
SHA256
6dc2600743f01bd8ba5c78c51cb7ca846edc927be460b6beb9954ed40fe35813
-
SHA512
1d396ca19a1f27430b0d3955fcbaf8c72531a50a8156dd7494eba78d1a1affec1502213d24d2164131078ee8cb7dc4a9d706a05539b6a62a8215f5af84046479
-
SSDEEP
98304:Xrtq8iTvp3noBxJMiNXfu5rU3eFbFROZ8V+M8Awgojf6qYAFqIw:XRAVnKzpxar8AZ0CqYAFq
Malware Config
Signatures
-
Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
Processes:
com.gmail.heagoo.apkeditor.prodescription ioc process Framework service call android.content.pm.IPackageManager.getInstalledApplications com.gmail.heagoo.apkeditor.pro -
Requests dangerous framework permissions 4 IoCs
Processes:
description ioc Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE Allows an application to read from external storage. android.permission.READ_EXTERNAL_STORAGE Allows an application to write to external storage. android.permission.WRITE_EXTERNAL_STORAGE
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.gmail.heagoo.apkeditor.pro/files/bin/aaptzFilesize
1.2MB
MD535974b44dd07a688fa487da782f35113
SHA1057784ce3f424a56738558ee62ce9074fb6c8681
SHA25611fd748879af68a62ec09f294a2857d09d7af3b23425571746cd2ae2fc9c95e3
SHA512a15b6e829b8a8d8363a675e5c3a0b5cb919214b2e4395d9cad448ba3ffd2fee3cbd934e5fce966d97d033f5d5ab9b09d8640de0e141faaecced3292917908a1b
-
/data/user/0/com.gmail.heagoo.apkeditor.pro/files/mycpFilesize
81KB
MD5bed2f76d0760a5ee3e2a4afa0d728259
SHA136519f091cb16c607b7124eae649f5c15d0fc75f
SHA2566cd670753940e281b8efe1e00ccb3d07d73d678e88640405e816cea14aee2d81
SHA512af8579947609affa51f04e8208256e3c2d901624fae75ef70c21ca7a722020a41413a42d10f766549d27eb8f1ce59a3a9d5cf3880b5563c3e6729644b0d117f5
-
/data/user/0/com.gmail.heagoo.apkeditor.pro/files/signing/testkey.pk8Filesize
1KB
MD51823e4bcadb53e275a8ff8e1b261b7ad
SHA192de052cb804dea75f9815a66d7d3f6f911cdb63
SHA256495675d32e89a149d5abe191f4e9c0e218b9068714e9b53a7c91e164a0741a23
SHA512b0d46eee477ae57c4dcb417f4f5b7b51691620c51603ed9097bc0d1e39ce94a2d7ade29d1ab80819e3639fd404034dd025c13c824d9cb21ae71ae366a2ce21b1
-
/data/user/0/com.gmail.heagoo.apkeditor.pro/files/signing/testkey.x509.pemFilesize
1KB
MD54033dafc873dc7271e205b83cc9b4b17
SHA1ef543a467d830d9975ccf0d569a7841c8b5df988
SHA256a4384ba815b9499a5ce349b4e33c1755278873fe2eac150a068823f526e6dbde
SHA5126051af324ad8b3837086092f213904b26d63cbd9bcde46a75bce6dde69669ae418c265ebc91c1fe163ea1199959f4b594d982d4e38c201895a948f9490357ec3
-
/data/user/0/com.gmail.heagoo.apkeditor.pro/files/work.dbMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.gmail.heagoo.apkeditor.pro/files/work.xmlMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.gmail.heagoo.apkeditor.pro/shared_prefs/fd.xmlFilesize
110B
MD56c5db0db83d0245ad12f06316464cad0
SHA15e817c37fa84d6f8ab50061b1635ae99e19f3903
SHA2563447aa5f871a9043aae1b7dda365aa3bfdba48ffe476657485ee0b6709b4060a
SHA512cef8ecab669b3ae92630225777fa673f0a6a2b14a736eca0e0513306b5e341ada0b02a2888ef38422f87fa979cf1f8b60e84c78f7100bf09e4fd67a662f778e0
-
/storage/emulated/0/Android/data/com.gmail.heagoo.apkeditor.pro/files/apk/gen.apkFilesize
5.3MB
MD50d623e3912c9b1a508a97b75aa629657
SHA1a59e689c97d960f6306e44e6534704199f0a62b3
SHA256a245ce2315551ee5870b51b206bf9de0bf5c215f68dfd13450ec45502084212d
SHA512965d816957d9b4fe1179df110b57ece17218ef14d7acf4a6f5bc302af218a4d71c4fbdc7ae7c614ac86a9559d00345b6dd8c3242627a3a2605fc9e1808df7141
-
/storage/emulated/0/ApkEditor/tmp/.arscFilesize
291KB
MD5479dabec25011bd1b48e29e369587b1e
SHA1778a47b29ea35282a72e674cf6bca847eec4d07c
SHA256b4f0901bd21f35394eb0dbf5aeac24ebb6739282eba05532fc1cbd4d489c185f
SHA5122a2e0f07bb15931f48be17a0d3f780fdbcc498f3b5a8db0147c11a2cc3c5dac73348944f552ca8e347bd2411b0439bb929747a4eee0aaf9043ab625b48366b79
-
/storage/emulated/0/ApkEditor/tmp/.xmlFilesize
9KB
MD50232359e361d290e6528046a6eb7196e
SHA1e2b7639ed7ee995a4fbd9e4c08bce1ead5818196
SHA2561d7afa198c215f54becf188842f7cf5de22e7bc8f1f9d58d7b23c3533bcda688
SHA512b1b7464437b78db07f0a1d8b3518e2c8294c535ee5ad06d58d47309adc363b391ebc543880141505cb1f3a394120fd53656e2f839d0ddaa8b81c1bd906e26c4d
-
/storage/emulated/0/ApkEditor/tmp/APK Editor_signed.apkFilesize
5.3MB
MD50d623e3912c9b1a508a97b75aa629657
SHA1a59e689c97d960f6306e44e6534704199f0a62b3
SHA256a245ce2315551ee5870b51b206bf9de0bf5c215f68dfd13450ec45502084212d
SHA512965d816957d9b4fe1179df110b57ece17218ef14d7acf4a6f5bc302af218a4d71c4fbdc7ae7c614ac86a9559d00345b6dd8c3242627a3a2605fc9e1808df7141
-
/storage/emulated/0/ApkEditor/tmp/APK Editor_signed.apk.signed.temp.VnAy9uFilesize
5.3MB
MD5cfe44744d8791df1ccf3fd2c39cf9329
SHA188bab3ab0c5a7b0a9954fa240746840ff9e9f6a3
SHA2568e8c7bce716f2f3c6d3c5e833c4381fbf2551ef1f9390efba75a64782df22d0f
SHA51205e6f0b38942638b0d488d3f5c89f6327076025bc01ef57142cf7a3b8374213234417815e7325bbd350fe4ec0c2743253ad7bbf585f4456927f0d599c2d4905a
-
/storage/emulated/0/ApkEditor/tmp/APK Editor_signed.apk.signed.xoLiA6Filesize
5.3MB
MD5cb6a37b5e24bd26412210d8529f6492c
SHA1c97e67a58274c1d8ac725d92c38963935173618c
SHA2564fc67474f6ad9c340477174aaa941e5d6a2d7e1702984bd3d37b2e3b8c5de798
SHA512fcf3c035856ad316e62d037f5187d3665fc5ddd4049e2dedc0dd22d7e2bdf6378c323549f40a696152fdcfbe7586956c5e8ab666742236bd767828fe92c40289