Resubmissions

29/05/2023, 01:11

230529-bj2assha72 10

27/05/2023, 19:22

230527-x3jqrach68 10

27/05/2023, 19:19

230527-x1ph8adc8s 10

06/05/2023, 03:47

230506-ecc66sab7y 10

Analysis

  • max time kernel
    4012789s
  • max time network
    162s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    06/05/2023, 03:47

General

  • Target

    ee6aec48e19191ba6efc4c65ff45a88e.apk

  • Size

    7.4MB

  • MD5

    ee6aec48e19191ba6efc4c65ff45a88e

  • SHA1

    f3b135555ae731b5499502f3b69724944ab367d5

  • SHA256

    0fdfbf20e59b28181801274ad23b951106c6f7a516eb914efd427b6617630f30

  • SHA512

    0f1fb2554bd05df4c4987f64fc9c22695cb2f0951b1b46202fb0aa24ff5008d14dfd2782e1c508b5534c16c024034d75b72cee2aebeeb4337e0fda69314ee0db

  • SSDEEP

    196608:Cej0iP9EswQ2qypeQa/twJFQdKShmodX34Rd1k7Q8Ufy6mC:CUvP9ryjeQa/tYFQRtd4be7cfZmC

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Checks the presence of a debugger.

Processes

  • com.devnied.currency.pro
    1⤵
    • Acquires the wake lock.
    PID:4154

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.devnied.currency.pro/databases/db_default_job_manager

    Filesize

    40KB

    MD5

    d3c7af90c7158a578350f212e581cd74

    SHA1

    8e3237a867a16f875433e659e36f3a35d43185a1

    SHA256

    30b36d543cb5644a464e98e6c59efefba60b5154f29abfa83e8281d655ff5700

    SHA512

    e192c1d280b1b861f9153ca30ebc0c6150be98faa10ce80f5c65ef4244359b0622e603e6730fc382bda3e51527ddb08d2edf9d18a26589e1561d1d7a6d865afb

  • /data/user/0/com.devnied.currency.pro/databases/db_default_job_manager-journal

    Filesize

    524B

    MD5

    c400f0f1b52e3c93fc7cd3387c3491b6

    SHA1

    04068969030307b257a15f066bcc0a5526d0ccfa

    SHA256

    c00291522be70731d4f6c21fb6854543c71b063bf3a80651c7f0e404a57a341c

    SHA512

    560a24fc11d0c212ed3d6eb8d46e0f8be4425e8d9fd8af0a6cc9a740a63fc23984a41845613e31b495441874a6b595c647e8911b54e2fc33327c8f9e99ad2157

  • /data/user/0/com.devnied.currency.pro/databases/db_default_job_manager-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.devnied.currency.pro/databases/db_default_job_manager-wal

    Filesize

    865KB

    MD5

    cc763f4388eb3ac722375dcd76efc455

    SHA1

    c54ce018d4937160e22e4499770da7ab7f52991a

    SHA256

    3b10967fac7d68a1ca4a12fa9d57cf037511dd5eda42516b86d05fdcb60f9194

    SHA512

    5c372c7588a7dd7fee93435f41144bf939e2a7bcdddbc8e8bfd098a08041b1714a45bd84dccac1b72047fa3242d12e2e83048d3c6353ac9fef03ae5335e63a44

  • /data/user/0/com.devnied.currency.pro/databases/google_analytics_v4.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.devnied.currency.pro/databases/google_analytics_v4.db-journal

    Filesize

    524B

    MD5

    4f0b731d92c0989133ed50e42c82b493

    SHA1

    7264c40b558f436a981920dac34f224968fd370c

    SHA256

    6baa7c35d61b9b991e0aada6854c3e0ea665a92c4417c0ce9dbec02136e47649

    SHA512

    bf2b5253ed6f600334ce076e3bd07bb57b2c5ed508f73a84d0099397e09a648cab80d3b80cbfdc18177bd480b11b37d1ae3aae93dcabcf9b8a8c35f160382fa4

  • /data/user/0/com.devnied.currency.pro/databases/google_analytics_v4.db-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.devnied.currency.pro/databases/google_analytics_v4.db-wal

    Filesize

    52KB

    MD5

    e80ce59aaee5d9315cce695b9e9ffcf3

    SHA1

    a4ca2187ebc5c4c751b2563cfeea165efe2776cb

    SHA256

    6ad6ad9ed1af2e6714bc772960909c1f13a12fb00f9f753139ccf51661cf8e17

    SHA512

    34650a0ad441e1122217d66123d380e35657cb05c73e066369b3c3560cce1c16b0dc3b3df60fe211ad6bd676ce782b06ec174c919b26c9be261781e9cd27a566

  • /data/user/0/com.devnied.currency.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6455CDD7001B-0001-103A-330E080CB887BeginSession.cls_temp

    Filesize

    79B

    MD5

    c8bb7b6cb8bc5017a71dee2eaa8b450c

    SHA1

    e24aeab7393caabf7b08f5de45eb92531d000689

    SHA256

    899bff6e8146f7fd39c2dd143369c45ba1b48168087a970a8d71e177dc36165e

    SHA512

    de01f0bdc07bf82e7b4926d4d5778f3d1c479b71b7e4aa15425014ec7d8cccf84d3c24f7f9d8be54177737ded510d0229e5a34330b7ee543c39eb1fbad0b73d1

  • /data/user/0/com.devnied.currency.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6455CDD7001B-0001-103A-330E080CB887SessionApp.cls_temp

    Filesize

    118B

    MD5

    948c8ecde6931d8a2e3a7ec2cc8e61c3

    SHA1

    a09fd39c16b482ec6ecbd58bd63e36845b9b5d2d

    SHA256

    a738300ec53ad0b80ca88fa824bf8b0308b0edbb8e3af9847b49889ac437a923

    SHA512

    35e8b9586ab9f3ad7f3d1f8c93b472a5d6e6f2091b34888671ffea5a522bb413b3ce401b94d97ac7c22cf415ac2f2ca67a66496520b367632f899b18fb215b7a

  • /data/user/0/com.devnied.currency.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6455CDD7001B-0001-103A-330E080CB887SessionDevice.cls_temp

    Filesize

    131B

    MD5

    6f0b0d9883a54c6e02e6cd7ee4d6a3fe

    SHA1

    0536135c85398087f7fe32e72075529bba06104c

    SHA256

    1706719fd39054f3387443c9719dbe1e65c3cf0421dfcc9cf3f03b89bf9b5fff

    SHA512

    4d54d361138f342d638b2a8a9ffd5f27348f35b7a05931e7fd94d2102a8184893b5803ce28d9591c79a021477e3b7b352b61b33eb71605f665d1cb6e9c3534c3

  • /data/user/0/com.devnied.currency.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6455CDD7001B-0001-103A-330E080CB887SessionOS.cls_temp

    Filesize

    14B

    MD5

    9b3d4522944ce6396563812bfdb92fa9

    SHA1

    6d2a6133c8f01938a48ccc77ef86ad8ca335c020

    SHA256

    d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9

    SHA512

    091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

  • /data/user/0/com.devnied.currency.pro/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/user/0/com.devnied.currency.pro/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/user/0/com.devnied.currency.pro/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_bb0c9cd1-eed4-42ae-8739-7d3a9f1f84c6_1683344857203.tap

    Filesize

    379B

    MD5

    bb8b38c0cd14da79cc8544117d932f4e

    SHA1

    ce195189b711d7d1683a8ee2ce7327664f0fcde4

    SHA256

    670055c3c19120ebc4e7d16890767daad2acdb193ad5e1b58dc7e7d6dc4a6bc6

    SHA512

    b5f97b670da639bbb97e4fdfc4d7a3d1204d73c96ca215eeeef80af74e3fa2a89b5f3f1aedb1f0b33927b2c894fde238c071b7ade7bf565ab024c2c9f1bdda43

  • /data/user/0/com.devnied.currency.pro/shared_prefs/android_rate_pref_file.xml

    Filesize

    138B

    MD5

    61599febffc6ea7cdf6eddad9ce19c40

    SHA1

    9c47ce297edaddcb525f4d56cb52ab77c8adbe4c

    SHA256

    caceb9813ed8491ef7e3ce5e00fc1a21fcb3ff999576d5609355766bac8ef1c6

    SHA512

    f9378e64c9f761d0045761b575345b6bfd13c6bad8ad4a5e7984ce4173ddc6b88c070eeca3d495788842147c9e7429bf436578b60271011d174075d83b6ff956

  • /data/user/0/com.devnied.currency.pro/shared_prefs/android_rate_pref_file.xml

    Filesize

    193B

    MD5

    96ec985fd85d97a4a923489aec79981f

    SHA1

    3f1096d7fe6717891ac24630c96f79a551bada0f

    SHA256

    2d5b63d7376501e981370b4deb29441e05ede82e76e7c4c590e2ed98a698bd82

    SHA512

    7e6e9f88aa24b4ffa585ce1fd33da0d510ff9b446948373ed6ac0c94356f59ac503b444f715f3c46102a0b01d9a9ac77286a9ddeabe3ac7907efe56733d567ee

  • /data/user/0/com.devnied.currency.pro/shared_prefs/com.crashlytics.prefs.xml

    Filesize

    159B

    MD5

    de43dda23221c3f5b33b59923ccd72d7

    SHA1

    345375c8576549aaf154e90011c81418d1a3800f

    SHA256

    ac93702abe20d5b79a09d5706e2843b0947db633867938bb262e03f117da808d

    SHA512

    0797687760a7458a5dc34a241b81cc78b9ce140b9797330f136b877bfa384041057cbbced6aecf0aba0190f6b37f3d760284289c5a7e05c6400352d5744404aa

  • /data/user/0/com.devnied.currency.pro/shared_prefs/com.crashlytics.sdk.android:answers:settings.xml

    Filesize

    125B

    MD5

    7f72a0e25eafdeb4c7d2dc814d70fc89

    SHA1

    bd49e6008f67e11b8ce4d98a13d2e94a66cf33ae

    SHA256

    f5dfd176edc05ef7d7b5ab505ab4c3434cf0cda3053df8720fed53c2c4a28424

    SHA512

    696adfdd1d654fbd9ce3ef4004e11d4d9cddd256bcb6e4dadee1bee5bc308a66272ac6db39cf27494b98879a57858c7225496e6f78b54956e5eadafb89263ca2

  • /data/user/0/com.devnied.currency.pro/shared_prefs/com.devnied.currency.pro_preferences.xml

    Filesize

    122B

    MD5

    a7354157190ac3056ccada374acb44d4

    SHA1

    9229d5cfbc31a32482a4b57204082dc02f5d5f0d

    SHA256

    0d14185a8243c40a0cbd96029f8ce0c436ca20a3be307c1465659f22839af914

    SHA512

    9990b84cbdbed85e05b7f42a74533325869eb494d30a75297728caf01f72c3845fdd420648ad4666f80737ad9907f7e1f8009834fca5ddb31edb080394472b41

  • /data/user/0/com.devnied.currency.pro/shared_prefs/com.devnied.currency.pro_preferences.xml

    Filesize

    168B

    MD5

    4f1372519e6ef433f5b7762722ae5e2b

    SHA1

    17f679b811bc131f1217285f00cc0dd8f5eec10e

    SHA256

    96f90ed7fdd90332363693d7f1d045792a4ef51c0badb535562883d1a6c9b612

    SHA512

    b0fbae8b74d89dcd7f63b1c43a08cdf513dbb64d1f10585d5eac4ab7ecdaa241c0d8c20024b132be22665ddb4e2f4a9e079e96aa2c80303368ad040b261af999

  • /data/user/0/com.devnied.currency.pro/shared_prefs/com.devnied.currency.pro_preferences.xml

    Filesize

    206B

    MD5

    165f59dcf4f4d0c1b23a3b7c38f7df63

    SHA1

    183549f188c333fe45f4c121bb378f6885eae641

    SHA256

    73858eab70d0d0f4d041224c773bfbc75eda78206f05ccc04ff64024d1e0941d

    SHA512

    d041e7fc10963f0564dc862e04a70f04657928d74487bbbb8255430c28485fcedf50712ccc8b56c4e4d69bbbf09f1821b631f8d0880af90d28ca54e2fda85cca

  • /data/user/0/com.devnied.currency.pro/shared_prefs/com.google.android.gms.analytics.prefs.xml

    Filesize

    129B

    MD5

    67df84e748aeeb2d4169024f3fd27e06

    SHA1

    85f2d261c18f68a761d75ab43abacff9a35a7cb6

    SHA256

    3a3fd477e5918ddaf49cfc89d46019c5035ea8bd87282e96687c9b7c72809860

    SHA512

    c47dd73067aaffa2d86267d16b14a89774f61ae68f168bd3896ea7f6af99eca7cf22c18f4153a5889d4c7d1fe43d41915c2a00189466f8513a32578a33792923

  • /data/user/0/com.devnied.currency.pro/shared_prefs/com.google.android.gms.analytics.prefs.xml

    Filesize

    324B

    MD5

    7fb6972554a4321a8577e7ec09199c9d

    SHA1

    c58020f33a58314cf546df9fa49cfa9cca671a69

    SHA256

    bd336871772604c936cd5fb8ecc6254a5e2cccc40a46f8772667f6f7e2296be1

    SHA512

    e6b1a3722e3915c497c3e7eba47081749e2c19dfa07ad167cc4492a6dc6ff4e7c06572775aab51adc2e03e710647b396abd6769bc5a855ca0cce01e8aebfb5be