Analysis

  • max time kernel
    2737021s
  • max time network
    17s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    10-06-2023 02:29

General

  • Target

    4c5a6bdab07dba57fe5536b23995fc1ddf117a238b74ade99acd26a2bf545be8.apk

  • Size

    15.6MB

  • MD5

    53233a389ea9c05a23d9750571b25eb4

  • SHA1

    adea02faf44c6899ef4bb7f63e0955c12c37ceca

  • SHA256

    4c5a6bdab07dba57fe5536b23995fc1ddf117a238b74ade99acd26a2bf545be8

  • SHA512

    ad06e174c67dbd9cd117ed7df7a8eef513ceaba44eecaac9af99145ca36dae1ae10b94646415b53e561e0263f6181a7cac1ccff83353b318d85445bfeda88b24

  • SSDEEP

    393216:T8PQYDoa8R3TcX1XuK+5QRiGSQOLGLuRgZW7ptY2VdQrV:T6QYDoaVY5QAhZg5kQx

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.alienmanfc6.wheresmyandroid
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4805

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.alienmanfc6.wheresmyandroid/databases/com.google.android.datatransport.events
    Filesize

    96KB

    MD5

    db69318f7ac426f5d2a2fd249f508fff

    SHA1

    026c8f2b19a4ae40df2b7d6eae2b7ec0a8347f8c

    SHA256

    aa9a12606c059bf75f027e2f2762a9e50879a4ea0461d1d9fbfde6227548d065

    SHA512

    9aaa12827bed1b2902ea56344ef8b3dcc07b812d2951f155507e181f72ee3a54e8f53c9883d03b936da245914feae0b80f533586cd9ed5f2e07f8b666d2c6a30

  • /data/user/0/com.alienmanfc6.wheresmyandroid/databases/com.google.android.datatransport.events-journal
    Filesize

    1KB

    MD5

    9fcad5d93ae6610ab48131d4dc48b538

    SHA1

    3298965bd4f7262f2e31f3bdc9ff9d0dbd2c23f1

    SHA256

    c6304c9c1637f724f0de9263f9dd89087d012bd47d9b3f7be4e40239b46ce907

    SHA512

    b26200ffe09a9fbf739a12e1f92636d85a45f313aa256e02cfe159bd8605d04e1eb373760899d790427c748db18432952497998f3f2d91c0f44dcd5ee3055e53

  • /data/user/0/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db
    Filesize

    88KB

    MD5

    3b8c85802d190ffa29c3c074a1d698ea

    SHA1

    f6c88bedc790517adac946ff38a88da7644fbd36

    SHA256

    583969182dcbe6a3432b6c19a7bb9e21e451ef24967babcf3b3e63e9a35afc82

    SHA512

    367d124e3d9a59e490d9f05edd42cecb20f7d0ea39f87ebc8687579cfd5f720efccbf054194078f12dfadfc26e5a1902df2bd917143c12bf31518034af082b30

  • /data/user/0/com.alienmanfc6.wheresmyandroid/databases/google_app_measurement_local.db-journal
    Filesize

    1KB

    MD5

    deda833c4cc719dc569566b90f9d09d1

    SHA1

    959c9acf6ff1a63955a66126a320e1a28e40e4c5

    SHA256

    808bc5f1f976d6437015d5997e396340b9e9f50a0d002a56d738a08177de9fcc

    SHA512

    ae817a48d1f4e5be2459158dd7cce6ea532237c10cafd169aff0790d905e6cdc9dbd1fb3045e1da4869b2fe4adcc5b6544d07334c46394d6b3f64f6f780c0992

  • /data/user/0/com.alienmanfc6.wheresmyandroid/files/audience_network.dex
    Filesize

    1.2MB

    MD5

    6239f4aca898b9fe915d610210b66a47

    SHA1

    2807150546811297dd4ec420bcf0dacf3756ba75

    SHA256

    6c5690ca562a65afac1fbe07a45fab4a654509d82ecd8f2cbc7167401cc6c9f2

    SHA512

    c7d908e065a2d4bb14fbecc67c0724feb5d3896474df6fb81a4b9bf4a43f1a0b71a2391feb283f201c73025ae26ad9b651aac9bb658b34f58ab8a9fec27efeaf

  • /data/user/0/com.alienmanfc6.wheresmyandroid/files/gaid
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.alienmanfc6.wheresmyandroid/files/server_synchronization_status
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.alienmanfc6.wheresmyandroid/files/settings
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.alienmanfc6.wheresmyandroid/no_backup/androidx.work.workdb
    Filesize

    8KB

    MD5

    b6ca8b30661a7844ed292db75a29a953

    SHA1

    8e0d397ab1f2ced1f143829084c3f53333743bdd

    SHA256

    63a219c7092be26641907c5f955aa977e7675e3922a8e4ee2af25bfed8c7bbfb

    SHA512

    d21ce3adf13d61369708ea000438f626973f20b08ca05a744c1cccb2d5e7c264a8af9c3ebd18a7a6a464d38e1c64146f8e881d29d71a0484dd94212315f6dceb

  • /data/user/0/com.alienmanfc6.wheresmyandroid/no_backup/androidx.work.workdb-journal
    Filesize

    1KB

    MD5

    dc327525bc054224628bced3510826ed

    SHA1

    8c7fbed1913bfd0147c959d28b0824ada10c0b88

    SHA256

    0047bcf4b2c38aa5a71d8b7f048b8a0a952a073d2996c66b521c9996acf64010

    SHA512

    aabbe803159bd4e3dfe0aae0666ab5c95f9d4c2a4461f7d1fd5b5a83b4f7773990f8c4f9400bf5e871d77de0b9b1073f04942a3d2274c8bd28493cbe8e22791c

  • /data/user/0/com.alienmanfc6.wheresmyandroid/no_backup/androidx.work.workdb-shm
    Filesize

    16B

    MD5

    4ae71336e44bf9bf79d2752e234818a5

    SHA1

    e129f27c5103bc5cc44bcdf0a15e160d445066ff

    SHA256

    374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

    SHA512

    0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

  • /data/user/0/com.alienmanfc6.wheresmyandroid/no_backup/androidx.work.workdb-wal
    Filesize

    217KB

    MD5

    166351835ff7b94ceb8248825b2ff06a

    SHA1

    147c148b70b87d6230c192da1b72100a4ace3ea6

    SHA256

    3b5bd2b206bc83e9573ed58296e2d5adc54b563750f1c2ca8df30e34105677f1

    SHA512

    e956c2d1ea88f72ba113b261f2f49bf1fc99920e66a68947c7b9982ae5baf489cca93fd5f91b19cf6c57acb103784901356795e0c80bb6bf0bc2f53892a320de

  • /data/user/0/com.alienmanfc6.wheresmyandroid/no_backup/com.google.InstanceId.properties
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.alienmanfc6.wheresmyandroid/no_backup/com.google.android.gms.appid-no-backup
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/FirebaseAppHeartBeat.xml
    Filesize

    121B

    MD5

    6d12372f92837fc9fb50464910b477b8

    SHA1

    34b45cf577246e6c45e60d25d6094625c80c1d95

    SHA256

    59fd3c0b1095d0a2021e63c343626d5872f3a0f0faa1b880f83d9a76dd89b5f7

    SHA512

    d7085bc75b133d68a1dbfb487e92d0208330a3fa4e274b8fdf5029898dcefa2863466fc972d0a54e4321b3820bf3d8cccb50bd20c7d1ef595e74092d17de5307

  • /data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/FirebaseAppHeartBeat.xml
    Filesize

    175B

    MD5

    37b5bc803e7328274a6b4983036e19bf

    SHA1

    cadb753e87c933641042e96b8696fb392a5925f2

    SHA256

    7dcb3a0d75d26917c8dcbe723d39ebd5c7f90caed0c744ec021b5964957b204f

    SHA512

    13952c92f5222f9c2ddbd131f1942ac2e5357840982384da4b9ba8dccc4b6407358fd8183a3004d01a53785ca007a03f724ac2e877ff081fd198ff5266532245

  • /data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/PrefFile.xml
    Filesize

    114B

    MD5

    8176ec30c75578f43c6a1e133b5f7883

    SHA1

    fa9e60059d05da40816a4e49e2f66569bef7662f

    SHA256

    a7a542cfb8c25fb14567a6ab326ea61b983f3b1d092edd8073e1b63ce591d70d

    SHA512

    dd3856c82accb4522c62c606f135a5126661a174838ab146e468489303ca7d379941340db941ea3f6f0e44c7b317bd833a1049f679f2d737fb26c99831d15136

  • /data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/PrefFile.xml
    Filesize

    169B

    MD5

    5ac52c11fd6cb9d3e0c9f01bfa0024f1

    SHA1

    09117f9807128dcf8b8fb5bc70f3ed6ab07a845b

    SHA256

    415cfa245fab467c90168941fc5ccaf11dca33c87fa3645afa4a51480c8bbe80

    SHA512

    ab4d69973c54968f2feb9e244e9a635be5ece3ff9d95c6a5f880ed541a7494273f2fd19ed71edc11320bb6db705f4ed4575d7b5e1fcbdabc149356cd749decde

  • /data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.facebook.internal.MODEL_STORE.xml
    Filesize

    1KB

    MD5

    c033bf59a899d5745b721c29b8efdf12

    SHA1

    3b123f6a8dbe85790b0134ad2313aea9bdc8c381

    SHA256

    35668d394f9b84fa2278b9058f3dd4f8a2e0863573d3365ab0ba0e427f740016

    SHA512

    a9a7bd607eddea6cb8468c8ad54e67b2905076d524ebd930c0606c9f4c39e69e3b831e3ba0530b3397f49eb2de3cae664bbf67c151f0153c1f6cdfc6a1ddd0de

  • /data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.facebook.internal.PURCHASE.xml
    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.facebook.internal.preferences.APP_GATEKEEPERS.xml
    Filesize

    3KB

    MD5

    19a545bd587fbf4492537b01f71f75fd

    SHA1

    b3aec0128c197af6afd5706a728bbafdf44efb13

    SHA256

    157c47576f1a1bbc83057dd30d16912a9c2d4a47b4f03e581e9ea29b857fa07c

    SHA512

    c942f1c6d0c5935dcba1686351567732e51960498162d940059163217d672b79b806092eb14dc54dd2f03b11eafea170f5da176ef76a1b6c3553f1a30731fb03

  • /data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.facebook.internal.preferences.APP_SETTINGS.xml
    Filesize

    1KB

    MD5

    1a2ad87056e5700eb0465e18fa810350

    SHA1

    234e759b70de2060e2b4f705e24a9477cae26dd8

    SHA256

    972a7243bb8b4aa32c2e9bbad5dc5b4d46d79a66b8f8d6ad70c83fa24ba56665

    SHA512

    e013fb9de038ecc1100911ede124cb1069f923ebabc66b2462b2c18b645532dafa00ac14899c38058bf2ec795a13c544cbc0da19c12fc14c0dafcc2f634b176d

  • /data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.facebook.sdk.USER_SETTINGS.xml
    Filesize

    138B

    MD5

    2be7f5409087c1bab1039f11474a8ecd

    SHA1

    807bae1044c5394c8f00986521d82a4c85a129ac

    SHA256

    46f1159adc403ac823b3cac5931a362ae5dd48fbaf448b577f33919c7b023a50

    SHA512

    e3f26a430807e67f5298dc9655b2673c66e172cf1cec7c011781b2a0ad1dbe49a9cfdc0009a284c99b03846eb5394bcc3dcce705500f11e8953761226b1a9278

  • /data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.facebook.sdk.appEventPreferences.xml
    Filesize

    203B

    MD5

    3e44360dfa07ffe05ae2c632351f35cb

    SHA1

    86b8908532347974550875be9e85514efc85d324

    SHA256

    333859bbba2c07b52c973488b66c0900207cccac8704b1d1b756dc9c65fb5e2b

    SHA512

    d337f860d0f2151437708894cb7606d46e374de75a5a5fddc00fbe0494c64217caaf2dfb7baf5f3ddc7a55ba415b907b50ac7e79c427e0499dfba3e6c00a0e35

  • /data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.facebook.sdk.appEventPreferences.xml
    Filesize

    160B

    MD5

    5a0333c9870ce40100dc6abe08118bb5

    SHA1

    528cfcc48a029a79e3d6c202d9daac05bff90aac

    SHA256

    7642ed98d25f79c31f2ed7c4e0fc1b3cedb4707bbcf25f448d392ed9bc70bb2a

    SHA512

    6cffe2b20b92985c79f1420ed8a193ade906edde19a64ee70c248b064530d0506caaedb747b1030b88bdc8ad89cd3351ae4479e25d0a44b8b849f88528cd563d

  • /data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.google.android.gms.analytics.prefs.xml
    Filesize

    129B

    MD5

    4ed8ca4088fe69025707a93e4f426639

    SHA1

    5416a083af005186bf17b48bd5ea0f3fecac7cbe

    SHA256

    0177897ba21a4ec83da652192e82e76f565ba80f75ecc7a25e6d0b686de48ccb

    SHA512

    983160191e3ec10f76f0903a9fafab4aad1c22634fc7598a4e7b131cd0bb01d30d228aadedfb57e3f011a7b5eebd17f201de02fc8615653dc1eb8a225d63dd48

  • /data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.google.android.gms.appid.xml
    Filesize

    165B

    MD5

    51578976e28e825296cdfbe533c0fea1

    SHA1

    7d5ff9a642400b26aa5ab0d2139f11f48d9cc812

    SHA256

    8e475b96f5bbd034c40deb4330abd40e135c34348a1e4ec444e9de4828911734

    SHA512

    cd1578a9677c4a21b81898a8da7b0e60b91947627e4b12a933895867efa76f8f1510efe3e639bb9422a564090caa0468b0804f8fba163baf204c961934ca74d1

  • /data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    654B

    MD5

    599d86aba42446ddb2b6d093aa420bf4

    SHA1

    eeee20545d913f692152df2d9efcd2e5f35a8863

    SHA256

    497c3d315cd541d722fa07c63600b7961732e2998c6c4e775f3e864c34412085

    SHA512

    9aeb3513dfea4438c7924bda284b75a6cc4ac9ca29f1897765347245cf89d14bccfd886b3c1e9f25e0a6b4920f872faae2739b4507ae0a085a15aca3fdffa31c

  • /data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /data/user/0/com.alienmanfc6.wheresmyandroid/shared_prefs/com.google.android.gms.measurement.prefs.xml
    Filesize

    122B

    MD5

    250b4caeba60ddf53228405750ba66ca

    SHA1

    422ab714feb34e9f3b4f1cbe669887bcd581ddb1

    SHA256

    2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e

    SHA512

    373750c29942fef90281109b6025c398d0f4ac62b58a984a3651d09f8c016440bc40f6bd84fb6d40acf8e48a553d4c1d22e01a95c40a41567c079ba9a338afdb