Resubmissions

18-05-2023 12:01

230518-n6zrpsaf62 10

24-11-2022 09:53

221124-lwmnaafa25 10

Analysis

  • max time kernel
    784155s
  • max time network
    135s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    18-05-2023 12:01

General

  • Target

    com.pagnotto28.sellsourcecode.alpha-5-apktada.com.apk

  • Size

    13.6MB

  • MD5

    425ca585e1689771f69c442036192d78

  • SHA1

    3d7e48669307cc962f18de5639ae0697ed950d1e

  • SHA256

    71c78101f7792fe879a082e323fed89c5e4a43132d01d3f79ed02afd8db45497

  • SHA512

    4441be3ac3bf49229ddb771c4418719a60fdee11711265e41442a49f643e7a97c8b1731c786e80c811cd63124996c5787cb7588c06d81ae60a67cf46996925df

  • SSDEEP

    393216:C9wxkH5macX7X52NWdXJq2TNhyWfwcVpMrfum77:C9wxkZqgY5Uvaq7

Score
5/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.pagnotto28.sellsourcecode.alpha
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4755
  • com.pagnotto28.sellsourcecode.alpha:BackgroundService
    1⤵
      PID:5211

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.pagnotto28.sellsourcecode.alpha/databases/dbytes.db

      Filesize

      96KB

      MD5

      cfd3e0980a68e3553b0849c6fc0508c8

      SHA1

      d0912789b91781a5741a8c08f83c438f39416944

      SHA256

      feff1fe7976056df6163163b849251b0092bf145a8c156dafa914080a2827dec

      SHA512

      18ee5041a7fa7cfbb5e109a5331a75636a8abb4916d35fc017c3e436ea217859e61ddbb654543ede09af8781005dc38a14e1f21e42e163421d1fd75b17c62b6a

    • /data/user/0/com.pagnotto28.sellsourcecode.alpha/databases/dbytes.db-journal

      Filesize

      1KB

      MD5

      18d6f5445e5c883cfbfbdd9769a7e31a

      SHA1

      2481b808ed1941d7e478ac55ca66abe8f83198c5

      SHA256

      9152cb9aa064ce666c0bf0b2bb902242da80b7f1079da22b5758a1211ce731c8

      SHA512

      c2a56cb0458c6e80d45f4fef07005ada8b0bb86aee6047d0e1762c63a5fa8e0b1bc428efd06272a44ed6914d16b770cfeaf6f867d91a12f3dd8ea0a511ad57a0

    • /data/user/0/com.pagnotto28.sellsourcecode.alpha/no_backup/androidx.work.workdb

      Filesize

      8KB

      MD5

      b6ca8b30661a7844ed292db75a29a953

      SHA1

      8e0d397ab1f2ced1f143829084c3f53333743bdd

      SHA256

      63a219c7092be26641907c5f955aa977e7675e3922a8e4ee2af25bfed8c7bbfb

      SHA512

      d21ce3adf13d61369708ea000438f626973f20b08ca05a744c1cccb2d5e7c264a8af9c3ebd18a7a6a464d38e1c64146f8e881d29d71a0484dd94212315f6dceb

    • /data/user/0/com.pagnotto28.sellsourcecode.alpha/no_backup/androidx.work.workdb-journal

      Filesize

      1KB

      MD5

      82c9aaab01c58c1f8edf9f07e7d0c505

      SHA1

      7eed2e510bfe5fa009027ab0506e941f7431dce0

      SHA256

      8fc141ee067a1db48fbc75b19704e206ba2ae707d0236ebe822f5f97490c42c6

      SHA512

      ed08d6c68b9d869501ff5480a7557d9647c21995ecb29b4b937f2b353964515207e428311518b7774f501ead1d0c71f138ccc1bf1e8b37f60fab43351725e934

    • /data/user/0/com.pagnotto28.sellsourcecode.alpha/no_backup/androidx.work.workdb-shm

      Filesize

      16B

      MD5

      4ae71336e44bf9bf79d2752e234818a5

      SHA1

      e129f27c5103bc5cc44bcdf0a15e160d445066ff

      SHA256

      374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

      SHA512

      0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

    • /data/user/0/com.pagnotto28.sellsourcecode.alpha/no_backup/androidx.work.workdb-wal

      Filesize

      217KB

      MD5

      4151d72de35dd0750bbd7d51410ee98e

      SHA1

      5d95b65aaaf236cc0e2392875b4b6a81ee872a20

      SHA256

      a0a3ac58d5fab172742ecc859a18db0363c69f71ffd0f7f35405252ad984ce1a

      SHA512

      5ef0b1c340d9a1ecae93a9315f1cef315cda2ed871ae32f4e1aea6c868863a161d5b9f066e8cae28701722813172ff35ca55897a81be3528bda2c4fcd1e79367

    • /data/user/0/com.pagnotto28.sellsourcecode.alpha/shared_prefs/com.pagnotto28.sellsourcecode.alpha_preferences.xml

      Filesize

      129B

      MD5

      0a3645bb2d0b4e34c2f2b036f0f0730e

      SHA1

      b637646a76c34c66d77bd756d21f4df7d36b1662

      SHA256

      6f74803fd0af4ab4ecd71c3161ee510e212c8b9ba14f30a574b2a05f96f3c408

      SHA512

      9090eb8101cee99f4d7c370a175b82b9e514fca7351d8d99a91c05d401d0a6448edf89ff835e1dd0b0308e624b548af99d04348ac47843cbdac00bb8d7138e87