Analysis
-
max time kernel
2305427s -
max time network
143s -
platform
android_x64 -
resource
android-x64-arm64-20220823-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system -
submitted
05/06/2023, 02:34
Static task
static1
Behavioral task
behavioral1
Sample
4c5a6bdab07dba57fe5536b23995fc1ddf117a238b74ade99acd26a2bf545be8.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
4c5a6bdab07dba57fe5536b23995fc1ddf117a238b74ade99acd26a2bf545be8.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
4c5a6bdab07dba57fe5536b23995fc1ddf117a238b74ade99acd26a2bf545be8.apk
-
Size
15.6MB
-
MD5
53233a389ea9c05a23d9750571b25eb4
-
SHA1
adea02faf44c6899ef4bb7f63e0955c12c37ceca
-
SHA256
4c5a6bdab07dba57fe5536b23995fc1ddf117a238b74ade99acd26a2bf545be8
-
SHA512
ad06e174c67dbd9cd117ed7df7a8eef513ceaba44eecaac9af99145ca36dae1ae10b94646415b53e561e0263f6181a7cac1ccff83353b318d85445bfeda88b24
-
SSDEEP
393216:T8PQYDoa8R3TcX1XuK+5QRiGSQOLGLuRgZW7ptY2VdQrV:T6QYDoaVY5QAhZg5kQx
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.alienmanfc6.wheresmyandroid/[email protected] 4559 com.alienmanfc6.wheresmyandroid -
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.alienmanfc6.wheresmyandroid -
Checks the presence of a debugger.
-
Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.alienmanfc6.wheresmyandroid
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.alienmanfc6.wheresmyandroid/[email protected]
Filesize3.2MB
MD5e8267ce8fc81e9d1c7099d480486d960
SHA10aef0c04cd5ebe6f4fde6e2526937b7c64f7d109
SHA2566233ba1598115f3646b60b99e1556ce1ff0b66458c67620cd2a94fd9a59140bc
SHA512a1da017e8f0316a7f391b49c10cc94c877c425bc0f5320ddacb6f076ecb7dfe3c6132a74d74d025e25c038dd4f220811517c4e9eabbf542836080b83e182ba2f
-
Filesize
96KB
MD575d869672c7c5cf6a232f6ba54e320ec
SHA10f84b9e2be0527bbddd4d7c535734d5771857502
SHA256a906ec4b4452abad457fb7df3bfaa75800b0aadf71f847ee96b6e48459b5232d
SHA512c7ca7babf8a0977fb2883f8c1528d29552f7d59c625060f3a5865fe3d6c7bd615a52f9fe45a637403185f526f606afcb793f4b1e9f047f8e174c4b15877768cd
-
/data/user/0/com.alienmanfc6.wheresmyandroid/databases/com.google.android.datatransport.events-journal
Filesize1KB
MD5b492b6e7e06ea73b6a1878e1bf8451b3
SHA186f5a98216f1815d7b93c2704cb07c92f3813e10
SHA2567c5702810d8d760f2b66fd36a823c7cf99328b473ff259e5b64ac995998779c2
SHA5122e2e9bd4901af0ca41a1b093083fb9e4c41ae82856dc65d663fb4e521daad9f80b1557271881c9f3f2526bea04a91442ccabd02259c0dffd874d317e1d541802
-
Filesize
160KB
MD5d3af1d671c1f4ed6a19c92f8dfcf9ea7
SHA1f97b7ba3639b49e5dde6850ab35ebbcdf16cb570
SHA2564574c609ddab58023910b910772e2ab9eb34111f4f06e1b3ca7ff1532016e481
SHA5126712c19597f2662252541dc054794e27f2d44657ed609cea86d96758c1e03d99b7ff665f6aafeca81e9a72d265ee2a31d0147b1288cc6914357b55fd76721be4
-
Filesize
1KB
MD5fddf646964206b7c6aaab74ee7145e5c
SHA1f64461ca78c6f56c56379856e9d322544f3ed323
SHA256c031d95ec0d64b279a072b0540dbb3905c4f740fafa1cc4a64b30464ba5a07b3
SHA512dd14397e9bfbf75d4cd432e76797dfe87b9d5145a2b290ec682eb87e173684155d1ee2d881718bdf6797ca614dd97bd49ead37d2efd70a7c4e50e30f7f11b279
-
Filesize
88KB
MD58dfcfdcef5a9793fb83bda404ec3f42b
SHA1dd02caf5757e9fdaf184ab299c45e4c92ab3ae4b
SHA256a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2
SHA512e04d1892c052fc3766881d3f21e26961714e575766cb316bcada34cce49cf6e17eb26c3fbdee0038ed2c75da0a9cab99e0e3e78374be20ce2790cc0d0d9cd807
-
Filesize
1KB
MD50dd592fcae5bb1d23d2e5bb076904cc9
SHA16c61b1f6b6bc86545494b74feea9046e2e5d0fc0
SHA25642175c9f73f49018ba26ad6b8fc3fdfcab8782631c0c525427d5af18ac188a49
SHA5128466754b5b833c8dfdc11584abb60d3560987e930e8077880b68f4b08961a72dd0abb0d93006727818888250bdf3b5d11b9e848a642e4e3df6ab1abec6aa359e
-
Filesize
36B
MD5283c929589774080128f3f7a6275249c
SHA15998d2cd30781753dfc1f03aa68e060940f08536
SHA256c00f7285ce11ed891f921e9c71004f893e12acfc742d3c4134d2d7d5bff47d50
SHA5129b2fa77d53cace534aff74c86cc8922048976af0ef2f4c196ae445efee6f6eb4340ef2541bb6bca5c1e2c94ac1c747f8265cef5f1e93fdc33c056d34c3788a69
-
Filesize
32B
MD5563ec7e69563c737e9d36ee313a3eb93
SHA1e1d036ad11cc01e4f78e42d8204aec2d2ba7c4bb
SHA2562bad0fbe47570d1251ce3cff175ecf0b980262ba34639f7801f8d49dd8b7fc96
SHA5126b4fc042416fa77af64d6ba0b5c2b878b9ce9754080b8cbcf8fa2c6666e541a7c4453b364538647f1d788006cec41e91b819b12fe305c387161da2bb6aa5b51e
-
Filesize
8KB
MD5e579a6b00eef1318f9166352228eba18
SHA176988896854f0139083e77862eea1a4846cf039f
SHA2564b34cf505050facf47aa7936e4e7667e1969105665c632b3eefe7ecddf9a6935
SHA512c47632e957d87727bf6504a82ca7a44d8da24d30cd997a0f449a96e4f97c656a1b4d9da3fcd827e2a48c59677688da0b872358ebd0f9369d898d1b8ec18d5699
-
Filesize
1KB
MD52ddf3e7539c781dcf677176850f2558f
SHA1abbb191de8374da90d5341aac36ab93d8cda2a25
SHA2562ee51d33214e23c668232767a8f89b5857477adf5764fb5e0cbeca247bb922ca
SHA5124fdef6ac96c549505bf28ff1004d04245dfefc3bd9c4d46792f5c061568e3b73e621ea3d05f57dd61546f0854ff391a2648aca7c657504f54c9b172513e70f17
-
Filesize
16B
MD54ae71336e44bf9bf79d2752e234818a5
SHA1e129f27c5103bc5cc44bcdf0a15e160d445066ff
SHA256374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
SHA5120b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27
-
Filesize
217KB
MD5fcde4014d0b25c5baf1c02a8dcf98136
SHA1aa565f07c19e303809f627fc05a8bcbdcd1c9994
SHA25604f9841f580101737b5828192eee324b4957347354aca74871cf75d699f5d7a5
SHA512dd8b895d55c24e9360a15afa2d621a1c71c93210a19ad4e7b60d7138b3839a015e84c28efa6a46a46fea1620fc969b23cbf952bbbfd7f7d6c5cd88aef72db6e6
-
Filesize
121B
MD53bc8edb583d9c55f45306be7fb63c5f2
SHA131207d782aeb04ec2c30ec7d1f9be796800a5ad4
SHA256529a4f66d24f52398b0a5ac06b6c836d39306c5140197cff792551f7145c23a0
SHA512e06f34614e4d96ea3668a78d250d472330ed240ad235af4886d52d760c53f2e70c06a240c88cd90f20fca04c86d5deed4aee32226a0643091db65cc014134df1
-
Filesize
175B
MD5ba197aee1b3208e48c76d5c976b86d1a
SHA19626908af91572fc1d8d2b0cad9c69d36f5e9681
SHA256029d7ecf4f2f1af620a1586d7a7433fab77a1a187c3ccb0b249f82e3e514fc94
SHA512f988793851a8bc0a942af64336db225f305981c0eb445ef2bfb6feb2a1295cd320537c265c931ec8bf9b5631a9784e261d5f0592271c655bd4ac1cea7bb82733
-
Filesize
114B
MD58176ec30c75578f43c6a1e133b5f7883
SHA1fa9e60059d05da40816a4e49e2f66569bef7662f
SHA256a7a542cfb8c25fb14567a6ab326ea61b983f3b1d092edd8073e1b63ce591d70d
SHA512dd3856c82accb4522c62c606f135a5126661a174838ab146e468489303ca7d379941340db941ea3f6f0e44c7b317bd833a1049f679f2d737fb26c99831d15136
-
Filesize
169B
MD55ac52c11fd6cb9d3e0c9f01bfa0024f1
SHA109117f9807128dcf8b8fb5bc70f3ed6ab07a845b
SHA256415cfa245fab467c90168941fc5ccaf11dca33c87fa3645afa4a51480c8bbe80
SHA512ab4d69973c54968f2feb9e244e9a635be5ece3ff9d95c6a5f880ed541a7494273f2fd19ed71edc11320bb6db705f4ed4575d7b5e1fcbdabc149356cd749decde
-
Filesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
/data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.alienmanfc6.wheresmyandroid_preferences.xml
Filesize448B
MD596fc28399c8367a727077a54f1d26acb
SHA15b6b8f1e3d83a80cc018f49a427e95dd46fa0c18
SHA25694143901863017208274d268c56d2b00041c82250864fad7ffb95a58bcb4d17c
SHA5128f1123cc454c2b9c2dc942b47dd91a4d3b06e22045622d1e63b28cb4814865db91d3cea2a53ec6d4aee578c6c5f609453a75a45763a44c9f41fbf6e92134dc94
-
Filesize
1KB
MD5681b5bfb1744831c4d4be053af16199d
SHA1fd9e73f55251dab7e69484c4e3812a5dca663f3b
SHA2563c4b03f8431650f7094c0cc58ba4d69943ba6616bad6788aa28b319ba7e900d3
SHA512263421db097208df1f9d870e8b9f7dc355b224820336194ff14d7f129eb6852399585716c424f3e649b4600d6f3b8da911c9dbb88d9bcdc49d384f2465c6c2b5
-
Filesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
Filesize
127B
MD5bdae9caf2b8538295da4b3a5c2a91c1b
SHA139534c306767341f26456b178dceebc2ce579d9d
SHA256d88fb624fc9c786e5e1d230702d277333289102cb71d74f4ca7f64b3cb5b836c
SHA512dfd15acf6f12fae1b93a5a3885ebe233215bc3d1b428f7f372e1b29c29767b3588d81b898891042202da548bae1a9004f02f12a37240aefce94c35448128e073
-
/data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.facebook.internal.preferences.APP_GATEKEEPERS.xml
Filesize3KB
MD519a545bd587fbf4492537b01f71f75fd
SHA1b3aec0128c197af6afd5706a728bbafdf44efb13
SHA256157c47576f1a1bbc83057dd30d16912a9c2d4a47b4f03e581e9ea29b857fa07c
SHA512c942f1c6d0c5935dcba1686351567732e51960498162d940059163217d672b79b806092eb14dc54dd2f03b11eafea170f5da176ef76a1b6c3553f1a30731fb03
-
/data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.facebook.internal.preferences.APP_SETTINGS.xml
Filesize1KB
MD51a2ad87056e5700eb0465e18fa810350
SHA1234e759b70de2060e2b4f705e24a9477cae26dd8
SHA256972a7243bb8b4aa32c2e9bbad5dc5b4d46d79a66b8f8d6ad70c83fa24ba56665
SHA512e013fb9de038ecc1100911ede124cb1069f923ebabc66b2462b2c18b645532dafa00ac14899c38058bf2ec795a13c544cbc0da19c12fc14c0dafcc2f634b176d
-
Filesize
138B
MD52be7f5409087c1bab1039f11474a8ecd
SHA1807bae1044c5394c8f00986521d82a4c85a129ac
SHA25646f1159adc403ac823b3cac5931a362ae5dd48fbaf448b577f33919c7b023a50
SHA512e3f26a430807e67f5298dc9655b2673c66e172cf1cec7c011781b2a0ad1dbe49a9cfdc0009a284c99b03846eb5394bcc3dcce705500f11e8953761226b1a9278
-
Filesize
160B
MD5e5543338499e4691e34a7747d203e78d
SHA16a6de78672ce0c13917554f04ee8d69408787f17
SHA2566f2d409960ecf03c9e25df99ecdd3746ba9488e87ec112324346868d3c2d5611
SHA512f99b4bddb07d1cd8bf7b489db7cb32dfd582971d1334012382cd8270e539eaf674d68ece9a1406a26fd48d79ee87d6e2b9971e3c9753c21d9c5beee6b1600ef6
-
Filesize
203B
MD5d0e34ab69c975133bc2b6df773cb5df6
SHA15edcbcb3e7495efbf802a8c343d34283d50c04b1
SHA256ea3a3adb4e20a599221041e13b073adc5aa10247dcad6448bf1a515f9d12235b
SHA512918ae7f8438d28e85b33a310b18f00b68a25aca8680858532f4aef6869a1cf0093a8d3b5aa0f029bba57e6b9179a5fc279ec17dcd851c7348573e961523fe32a
-
Filesize
132B
MD5021895de0f5f841828bcc45605b7b559
SHA14c9ba8fd9b70d8c570778ca6d8648aff92ca13d4
SHA256903d3a7b9cc1c7d89a8051f53a9739190e8d320ec858fdcb9f15a5be3c47ba04
SHA512413b93d9628311fa4d0b22117477870f52c7ebfd5a9abd8b7cfce16c70e5cd246d561d0b65aa19c12b320538eab42a947c4c20007249932c07957bd061d425ff
-
/data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.google.android.gms.analytics.prefs.xml
Filesize129B
MD5682a57d17228b30acdc7d1d8d97d9328
SHA190d2cd59b9286750ad1cf0838e3ed5304685d4e7
SHA256119ffedfd9b186fb24784646279b947a3ed214c3f457eec549c82d624d743cb1
SHA512d4eb61f67fae72f9229ae6d1e453978c6c36009ada17e24ee0b88a84e9db8b95efede739bfb4397e5a40573dde982afaf964fff57f697784fc94a9fbae785f16
-
/data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.google.android.gms.analytics.prefs.xml
Filesize448B
MD59a725469a5cee3b5cb7e1d9f396d1998
SHA13bfc03e6b75b7b1c15a31d6a5f07bd9d52fa4549
SHA2566916fe9ac4aab6d39c45b84b7658ca74de73fee12c9f696f5bfe622fa56c9e6e
SHA512a419285a4fdd8eb5c7728b6d79e9088b6050da0f329b451be8c4b6271a9af2b13821cac9ed590443fefda904949d662147729005b557ecc31578d80eb6fd6f79
-
Filesize
165B
MD54ade12c01ab0b2a2cab6671c959e706a
SHA199b4731210b08740afbf7d6cb4fe6050835b69ff
SHA2567d1043efd97353b73c6fd67135ea9a3e2a93f0840b95983817a0b716bd7de1e4
SHA512b04c89edb4c0e6942d3d53081c57f06f0cd9f959e3878f4313e6837bd330acba4ff0a0ed21c2559b16d0da04af50b1f2f013050045f72d679fc0cde09fc53c3e
-
Filesize
472B
MD5f408dd7324da6567d348535e83698d52
SHA1f66bd3307650c9cf54281dc0c0386d97e2c2693b
SHA256c2cad89d0013d39f11e8d3665b87373eebba984f56a2c4e76c26978a88b3ee4b
SHA5122290e26a6a6e07c649cb1d237f9eb911ee12db2559a5d91ee762162866356de70bc0155b8dcbbcdad8854c714b40797a469bd242ca9239bb8e36ae0f0aef4a71
-
/data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize313B
MD52374051367a845d4bc88bf90ccc90a58
SHA1e31846334d975e485505e317df523f55a978f415
SHA2569246ac8a2a5d769e878ac34012d4541c095cedd005ef9cd3a20678a2e67658be
SHA512c5e08490ede15a21dac59e395c16a471c8002123c788094f809fc1ab764933b26ef6be9d032902ebe86a0265e41119aff2363447c6bb36eb5db35bc44e836168
-
/data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize443B
MD55118666fd0d632a8ea72bfddff941e75
SHA13c7f0ab9feee9dcbabb505a27163a268da6c50e6
SHA25654789b7b5ddbbf32e9828320358557fd3eb2f1f53942b847086f3687903b9682
SHA512be287bef88426660661631de985ceab28b71be95499db2befd65cd55c73a599f0371823ee6c65ffeb619e654df23f44ad7a95713f74933fcf4c0a9292b79bdd0
-
/data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize654B
MD553efa8aec70796879308b0a8839fdbab
SHA1a5c2b2521eba7dc9b8fb037e56d5eec685a2b673
SHA2560ad7aa5082711e908e636e458a87813075dbfa8dc3d60bc338074b18b23ddb01
SHA5123e84aef8091bf08787619a40e662b865ae734bb1a0be0509a4e383a2edfcce4d11eff9993041cd69152c368dda2481a37315e241d3aaee10c33a1666e982b246
-
/data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize655B
MD52e44089392cfbcd25a51d34a15d84afc
SHA1c5a0576aa469fb2f21de563138bfbdcef782cd3d
SHA256c9d199d38e51b1fe572e6cf35f5b06b678a9b411dde879f67e893fdc0c91e83a
SHA5124cfccde512e64bb336a4f3a18cbb6f4298bad24cb2150969df3c3cea09f35401a338cc4ec2d413d42630523d3067da7eb9cdbe907f173b5ad9b4942229abd333
-
/data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize822B
MD5c7a8ead278bce90bf92543f45cae4be7
SHA16359d4e760dd38d78b8abb79043315152da164c0
SHA256e9a34f8340e0e69c9b32af13509f5d3b38834543d241dbb503174522a49fb140
SHA5121b8a60704a7bcea2c2f5c398e047accdedc1e50bc1005d36ddd13bf42d3b41a5b221227aa88d753738f76ed7c614aeb543a6712ed548659e35088066cd0e9f1e
-
/data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
/data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize899B
MD575ea004aedb42ab0e14c5c30798535a7
SHA1a0c373aad72570cbfb7740b8bb6bf112873ab819
SHA256c58b38ad47b7313abf9f5852cb5e441b810c32f81d3ed8783850b98fe2a796d3
SHA51272bdcca3123d089759ab70d0daba506fe222632a4beb4e144149f8b91877344caa2b453aed7a3d22b43a4026ed4cf257c6d9b6c666e0ca96e1e1cb6ef3d5a0df
-
/data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.google.android.gms.measurement.prefs.xml
Filesize122B
MD5250b4caeba60ddf53228405750ba66ca
SHA1422ab714feb34e9f3b4f1cbe669887bcd581ddb1
SHA2562478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
SHA512373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb
-
Filesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03