Resubmissions

29/05/2023, 01:11

230529-bj2assha72 10

27/05/2023, 19:22

230527-x3jqrach68 10

27/05/2023, 19:19

230527-x1ph8adc8s 10

06/05/2023, 03:47

230506-ecc66sab7y 10

Analysis

  • max time kernel
    1588349s
  • max time network
    162s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    27/05/2023, 19:22

General

  • Target

    ee6aec48e19191ba6efc4c65ff45a88e.apk

  • Size

    7.4MB

  • MD5

    ee6aec48e19191ba6efc4c65ff45a88e

  • SHA1

    f3b135555ae731b5499502f3b69724944ab367d5

  • SHA256

    0fdfbf20e59b28181801274ad23b951106c6f7a516eb914efd427b6617630f30

  • SHA512

    0f1fb2554bd05df4c4987f64fc9c22695cb2f0951b1b46202fb0aa24ff5008d14dfd2782e1c508b5534c16c024034d75b72cee2aebeeb4337e0fda69314ee0db

  • SSDEEP

    196608:Cej0iP9EswQ2qypeQa/twJFQdKShmodX34Rd1k7Q8Ufy6mC:CUvP9ryjeQa/tYFQRtd4be7cfZmC

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Checks the presence of a debugger.

Processes

  • com.devnied.currency.pro
    1⤵
    • Acquires the wake lock.
    PID:4081

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.devnied.currency.pro/databases/db_default_job_manager

    Filesize

    40KB

    MD5

    71d390c49ca58cab6573e0fc27234cfd

    SHA1

    3a0c8af8665f73b195a8833c90ea41aed262790f

    SHA256

    e549e25ad1c634fd3be04081a70a03f19f8d241a07577813c3901fbbd3e19614

    SHA512

    d62ca4f99948af3bafe001bdf729c1be05ed867353dc876069c25cb0a927420228ce583413d9eb182a47ae5bf01dcb75a8cab72d147022088e74aa8191db51f1

  • /data/user/0/com.devnied.currency.pro/databases/db_default_job_manager-journal

    Filesize

    524B

    MD5

    93e96d9fa43b791fad5ca2028d516ae0

    SHA1

    70bf0d6dffaa1e1dacca2a4d07802038bda5d795

    SHA256

    a878657a5e414ed634d7eb6adeeafbc0585692abefe4d9ac977e14e05c607638

    SHA512

    4185285f81001ebc7d4d3cc30eb88faa492f1ef478eb11191aa393e26508e74801f864b40a8a105f68020be29fb8845646bacabd751fd7580f42ecb4dbcc35f9

  • /data/user/0/com.devnied.currency.pro/databases/db_default_job_manager-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.devnied.currency.pro/databases/db_default_job_manager-wal

    Filesize

    869KB

    MD5

    96a13ce5a855957aee8caef3c268e1f4

    SHA1

    0d12a68552cdb3f43fd7dd6a53aa60405b303965

    SHA256

    17c011e5a248500e86e5778eb93e349a8a090067a6b9216aa23017ed686ad4ee

    SHA512

    6f043b8a557370f1ea807ed8a97a71f7e27ee009c4c9a4e8390b80c608fe4f508ae801edee6cde0bd50c12698294f7116614841191acc22380b69d5b70e40039

  • /data/user/0/com.devnied.currency.pro/databases/google_analytics_v4.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.devnied.currency.pro/databases/google_analytics_v4.db-journal

    Filesize

    524B

    MD5

    26b052cf44d20f1e8fb22efa9cdadd87

    SHA1

    520c7a21e8d13ab8e5632d57a1a1cf2dfca82c10

    SHA256

    d12c96b452a11b2865c4ef6cc9d768249f969aa58e764a4b89ecd0a57669cfd0

    SHA512

    31cd8c27fab2693101dbb41a011bb4e14a1199b4c2007a7d229f13c71a17930961ec42c78f5967346d2bea0982eb7b0dbc613e1a2d57357b64b46dfa7ee4c041

  • /data/user/0/com.devnied.currency.pro/databases/google_analytics_v4.db-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.devnied.currency.pro/databases/google_analytics_v4.db-wal

    Filesize

    52KB

    MD5

    1a6b12acffd43cea80446470cc79205c

    SHA1

    41f43224f248544992d1a3636531ff05a4c33f07

    SHA256

    bc59fcda3738029838b1ddc491d80ad62a92c28a403e2dca4d4fb48450178f06

    SHA512

    ab4b4ad7873d296a1aac77abd017afabb9e28b15172984507949a6ad35e472398c0d369feab9bb928e9652769320bd5b966e114eb9bce38a6f5f8b50fdaaecb1

  • /data/user/0/com.devnied.currency.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/647258950018-0001-0FF1-C2C0ABD265CDBeginSession.cls_temp

    Filesize

    79B

    MD5

    c19f2d2976f129d21f980c9404e51fd6

    SHA1

    70faa593cb926c3f5e7bb909201e2340b86dffec

    SHA256

    acc296a7f70575d70b7c71b1db9e88ca7f684bacd0cbe1d252e81aff0e363f16

    SHA512

    ac01f047b6c34cb28009894b5592942b32642cf18eeb6ae179156f250d680a604a498fb8066b224bc5cd253fbee65b8d1e981e070a622b9d9f4e5b9307d7e94e

  • /data/user/0/com.devnied.currency.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/647258950018-0001-0FF1-C2C0ABD265CDSessionApp.cls_temp

    Filesize

    118B

    MD5

    fc084a17d6f82b16c1d5bbec1c134a00

    SHA1

    ecd9ebc15bfc916c66029747ca8c3a761d80dd0f

    SHA256

    35a22729537fe9f3dec1b0f3344c9c4de7a32b76d5b1ddc126b3d050f71a7912

    SHA512

    337ece24d60763132af8df188496cc038322cc1eac398ade78a6eabf1fd2070028ab5b7cf40d9fddee9e2a382f268d326cd79e79ddde8033786502c138709dca

  • /data/user/0/com.devnied.currency.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/647258950018-0001-0FF1-C2C0ABD265CDSessionDevice.cls_temp

    Filesize

    131B

    MD5

    7410700c7d06d8721123e406fda9c4e4

    SHA1

    1581c47d51d563b274b433d812fa78df96ff4774

    SHA256

    4b90154e2ac4ea7f19283fce31eb481980cf20991a778fd8ede80811cce8c5f9

    SHA512

    30d7521b4cce0e37d631e03611ed68e80ab0ce7e46fc861ecf6ace9a4537a8760202b0bcd8e53d9062dfe79c376cff74bd45efc19adfdd143abe86a5eeea4146

  • /data/user/0/com.devnied.currency.pro/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/647258950018-0001-0FF1-C2C0ABD265CDSessionOS.cls_temp

    Filesize

    14B

    MD5

    9b3d4522944ce6396563812bfdb92fa9

    SHA1

    6d2a6133c8f01938a48ccc77ef86ad8ca335c020

    SHA256

    d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9

    SHA512

    091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

  • /data/user/0/com.devnied.currency.pro/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/user/0/com.devnied.currency.pro/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/user/0/com.devnied.currency.pro/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_58825cc0-d224-4c2b-ad4c-8d8679acfa14_1685215382880.tap

    Filesize

    378B

    MD5

    d812ba52225251d668c2f83414374fd0

    SHA1

    a957d412526c5e647fe6fb7d3447c54ba3891ed7

    SHA256

    e90c4b6089b0d2a0991655efe1f8a8537bc7870eaa20a9de5574f86565409cb1

    SHA512

    a694fbfcfaba40ce8faaf0fb843e81f3e6bd928dd963084473f67549ad53698b26dd3b825fd7bb8093c197d7000eac0f5920b4f4974e451b2762783446bfd27c

  • /data/user/0/com.devnied.currency.pro/shared_prefs/android_rate_pref_file.xml

    Filesize

    138B

    MD5

    7cb915e2dab068bf5083d70af2175b06

    SHA1

    ea0f317a92b61e6b3ea0248faf8caeb3e8e6ff9f

    SHA256

    9df658758bf43583a053500dccedb58dafa7ba5fa1776e855c8258aa94485c21

    SHA512

    13730fdeb994500639d16b2da31a7f8d9be19b8f8363a20df9e481225481d6195c8941617362819e735b2e01dc03194875649977f960e672804fb71b4686be26

  • /data/user/0/com.devnied.currency.pro/shared_prefs/android_rate_pref_file.xml

    Filesize

    193B

    MD5

    e5627caebe9a6b4e62ca1e853a595789

    SHA1

    5e857bba11c98ecc4603ef7d62e41988198df38f

    SHA256

    afe399aa79fde3e1ff33ebca719f7ec0b5f6c64b5af42dd6d202ff7b2cd90ec8

    SHA512

    0cc7499a8dde46b3e9fcf88613e638840bb6bee80efdeb4989d2e775ede3fccd33019b84e7ca2c37cebc8a9f52c4eb9d88d55d81def224f0f3a9bf3e2c05495d

  • /data/user/0/com.devnied.currency.pro/shared_prefs/com.crashlytics.prefs.xml

    Filesize

    159B

    MD5

    27cc3e1d4712a220de9c1513863432a8

    SHA1

    ed07d5f7f0523ebaebcebff5ab1ff0c2ed9387ce

    SHA256

    63ba93bebbb047c3e7211e890e9b4a1fdc21fc3cdeea003fa9315e20393db9f5

    SHA512

    5514ff4a0aaf4a8927c28b7793499e52fb6723a421b3dbe654c9ca4b2257afc17d42d36f113275bb2e85d3b57147b111330563bf97f05bc5cd5c794262e48907

  • /data/user/0/com.devnied.currency.pro/shared_prefs/com.crashlytics.sdk.android:answers:settings.xml

    Filesize

    125B

    MD5

    7f72a0e25eafdeb4c7d2dc814d70fc89

    SHA1

    bd49e6008f67e11b8ce4d98a13d2e94a66cf33ae

    SHA256

    f5dfd176edc05ef7d7b5ab505ab4c3434cf0cda3053df8720fed53c2c4a28424

    SHA512

    696adfdd1d654fbd9ce3ef4004e11d4d9cddd256bcb6e4dadee1bee5bc308a66272ac6db39cf27494b98879a57858c7225496e6f78b54956e5eadafb89263ca2

  • /data/user/0/com.devnied.currency.pro/shared_prefs/com.devnied.currency.pro_preferences.xml

    Filesize

    122B

    MD5

    a7354157190ac3056ccada374acb44d4

    SHA1

    9229d5cfbc31a32482a4b57204082dc02f5d5f0d

    SHA256

    0d14185a8243c40a0cbd96029f8ce0c436ca20a3be307c1465659f22839af914

    SHA512

    9990b84cbdbed85e05b7f42a74533325869eb494d30a75297728caf01f72c3845fdd420648ad4666f80737ad9907f7e1f8009834fca5ddb31edb080394472b41

  • /data/user/0/com.devnied.currency.pro/shared_prefs/com.devnied.currency.pro_preferences.xml

    Filesize

    168B

    MD5

    4f1372519e6ef433f5b7762722ae5e2b

    SHA1

    17f679b811bc131f1217285f00cc0dd8f5eec10e

    SHA256

    96f90ed7fdd90332363693d7f1d045792a4ef51c0badb535562883d1a6c9b612

    SHA512

    b0fbae8b74d89dcd7f63b1c43a08cdf513dbb64d1f10585d5eac4ab7ecdaa241c0d8c20024b132be22665ddb4e2f4a9e079e96aa2c80303368ad040b261af999

  • /data/user/0/com.devnied.currency.pro/shared_prefs/com.devnied.currency.pro_preferences.xml

    Filesize

    206B

    MD5

    165f59dcf4f4d0c1b23a3b7c38f7df63

    SHA1

    183549f188c333fe45f4c121bb378f6885eae641

    SHA256

    73858eab70d0d0f4d041224c773bfbc75eda78206f05ccc04ff64024d1e0941d

    SHA512

    d041e7fc10963f0564dc862e04a70f04657928d74487bbbb8255430c28485fcedf50712ccc8b56c4e4d69bbbf09f1821b631f8d0880af90d28ca54e2fda85cca

  • /data/user/0/com.devnied.currency.pro/shared_prefs/com.google.android.gms.analytics.prefs.xml

    Filesize

    129B

    MD5

    c46c2b3f614adc1a1272dcca085cf386

    SHA1

    00e38731d472c53f37ff38eb6af16ba0ddc5dbb7

    SHA256

    29acf9cee5af129ccb82c1a4ec444a399059575fd1821a2731e2535631d3a762

    SHA512

    997526a05a38801ac22a24844c2a624b6f48ea8e2a9bb6de2661dba380babd4913e1844000a825693f0791620cc2ba346a7bd8babca47d6f9c06524b6ee23b61

  • /data/user/0/com.devnied.currency.pro/shared_prefs/com.google.android.gms.analytics.prefs.xml

    Filesize

    324B

    MD5

    a425cb1843b58c2b1a15e1dfac4fb57f

    SHA1

    cf46146977455e1e099bfe650dee872f6df3082a

    SHA256

    c471c8122036260adad2f43d907f47861fb4ee32c13bf53cd238baf9edfc5dfe

    SHA512

    538ef22813a4ff15b1ab16007fb0b90933bce035add5b2a911b8fec15e390f66cc36535b4b77d2e5cdd72e25e4231feff2a7ee3b525f99790b4aee3ef9f0d66a