Analysis

  • max time kernel
    2212297s
  • max time network
    57s
  • platform
    android_x86
  • resource
    android-x86-arm-20230621-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230621-enlocale:en-usos:android-9-x86system
  • submitted
    23-07-2023 17:46

General

  • Target

    Plinko Adventure_1.0_Apkpure.apk

  • Size

    6.8MB

  • MD5

    8243ecf6457268a0bcf5051c57ba734d

  • SHA1

    34e21feb5b9887b146c8b4004e7dc255b35487cd

  • SHA256

    a8ea06d85ebf9a896a5d4fbdef5e931ed3aeb8e5b728c4d764a7e23826f7d0c8

  • SHA512

    e7de6b3a3a1aa443079d7611f20e17be764d1d342030beae6d28783749635a579466c78bb507b624a4080999f9ddb0f799d6ff6511763b4a3e3b8ab73371ceab

  • SSDEEP

    98304:fWIrSdosKh6YEr3BaqZcc04z73R2AJps6svCfmLFDADG/uKMTCauRHWhJgLCrK3G:Qe360qX3z73R72cmLFDADGxL72oG

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs

Processes

  • com.ale.rainbo
    1⤵
    • Acquires the wake lock.
    • Listens for changes in the sensor environment (might be used to detect emulation).
    PID:4127

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.ale.rainbo/databases/OneSignal.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.ale.rainbo/databases/OneSignal.db-journal

    Filesize

    524B

    MD5

    53cdf89a8b0fbc8fb3a30af8fa07e812

    SHA1

    a26a36a8c969b72fe8afad6a1ddea71b47410415

    SHA256

    15b41302ea893597279e9efd95711ea5c2b781b4eaaa6a4738933ebf0a4ee991

    SHA512

    2108910fee8f73fa24a15846bdcfa50c83d70f78e854a3dba4c08157838c831c3f88a55ead6743518f77bafa4e07da5ff1a25861a34872d3dbec16207dd4a0e7

  • /data/user/0/com.ale.rainbo/databases/OneSignal.db-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.ale.rainbo/databases/OneSignal.db-wal

    Filesize

    64KB

    MD5

    9c0847af5f453d9df3b42afc6f858aa6

    SHA1

    9e3299fa900e3104a2aedb696bf72d94f3991689

    SHA256

    9a1775a5ad2a0c2f7be727a52a1b8b0870ebf98438e5a9689d6b230595ad06bf

    SHA512

    77897f91fcf11a9d2473d76ffeeb8d16d8288b6fdbe99c985fc69f8a8b0e8369991081819bf125e696f27b807439aeb91c453ce5cb681cd1602cb619abbc8799

  • /data/user/0/com.ale.rainbo/databases/com.google.android.datatransport.events

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.ale.rainbo/databases/com.google.android.datatransport.events-journal

    Filesize

    524B

    MD5

    0232ec33087807590bce1c91240d6cf9

    SHA1

    e35b30ffa92e2d44d6e827eb319d0a0792060578

    SHA256

    25ec92fab9b2a7272c729b13251f25371da3e60234c6f4714c2b12a37a56c161

    SHA512

    877222214e196e7d3522ccb79d1ca7c6ecae4c00dd20658b8166b0082368fc2966451297d7b4a37b1cafcb95ab9efbaa446f9bef2b2c9df0a1f3eea291024a14

  • /data/user/0/com.ale.rainbo/databases/com.google.android.datatransport.events-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.ale.rainbo/databases/com.google.android.datatransport.events-wal

    Filesize

    52KB

    MD5

    492d3979b6cb2f52922a195a52f4e519

    SHA1

    f7f6850bf86acfe3336e204b92491a1068bc94b7

    SHA256

    085d2c28b4aae9aa6277debb38de3f7ff4547dcd812686af6dd076332c61bce8

    SHA512

    ae8be27b1b2acb972ce74f5f11b96a8fde7ee49ab28fdb0d8ef819045b07da50694daadfc4f888405fe43377539414d643088763722a6cb19bcba21b9c356804

  • /data/user/0/com.ale.rainbo/files/AppEventsLogger.persistedevents

    Filesize

    261B

    MD5

    c94926ea2a228d5f3b3fcf15044f0b82

    SHA1

    c8a4a1e7a48809b13fa73dc468c457a4f49bbc77

    SHA256

    71bd4871155741c5d88ecd7d7076ebcbe89c03754ced3cab81dc5a4d26ac5982

    SHA512

    ddb14993b114610eb747208e91142679a2fe29a9e83fbb567eba98a3e51f34240cdf33a3e55d57c0da4268ab938e25b197da5c8f4be4181c31559319e5c7f02f

  • /data/user/0/com.ale.rainbo/files/AppEventsLogger.persistedevents

    Filesize

    261B

    MD5

    c94926ea2a228d5f3b3fcf15044f0b82

    SHA1

    c8a4a1e7a48809b13fa73dc468c457a4f49bbc77

    SHA256

    71bd4871155741c5d88ecd7d7076ebcbe89c03754ced3cab81dc5a4d26ac5982

    SHA512

    ddb14993b114610eb747208e91142679a2fe29a9e83fbb567eba98a3e51f34240cdf33a3e55d57c0da4268ab938e25b197da5c8f4be4181c31559319e5c7f02f

  • /data/user/0/com.ale.rainbo/no_backup/androidx.work.workdb

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.ale.rainbo/no_backup/androidx.work.workdb-journal

    Filesize

    524B

    MD5

    f5769b3ae8c5d84c52c5d07a2b5f543c

    SHA1

    5d00960f2253588a6e5b8c1294743787529c284a

    SHA256

    52e1ff4312bb5d383fbba43c3a36c0639ed6bf452db4bda16674af32c5e84fa2

    SHA512

    14fa93cfb5e0328a862cf208513d24b4c84619b5f3eb8e87d7de5cdb28f13ca5e3ba9dda7fd9d10cf957542e00ffde994a779ad4423ce82365366a5a94cee0f4

  • /data/user/0/com.ale.rainbo/no_backup/androidx.work.workdb-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.ale.rainbo/no_backup/androidx.work.workdb-wal

    Filesize

    342KB

    MD5

    ca42008f9988ea7282bd1f5681ef6cc7

    SHA1

    3c3257d52a73cf8fde7f5314e2e8e59d0a1f996a

    SHA256

    e778e7301e62f980e1b2ff4a6a6a59744142bf99ae39e76ea999f4b26ac04848

    SHA512

    dd0db4224008635015e33902842bb7237a198f40d7acbf4e8090d9a821cc15d1c614c57c6dcc0e6d866335ee42d5c0b7e9af9f05e932fcefad6e43688d582af3

  • /data/user/0/com.ale.rainbo/shared_prefs/GTPlayerPurchases.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /data/user/0/com.ale.rainbo/shared_prefs/OneSignalTriggers.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /data/user/0/com.ale.rainbo/shared_prefs/a3.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /data/user/0/com.ale.rainbo/shared_prefs/com.ale.rainbo_preferences.xml

    Filesize

    448B

    MD5

    72b85f735c2ebea6cf6950eaccac6dbe

    SHA1

    c88e9e9803f354a5107876b00712fc5dcfde052b

    SHA256

    5da397cf94df4608d2ae9ca049f54dbcd0695496386ab1a752dcba945ac322ec

    SHA512

    38b16517e816a83def6aeec29aae91dfe50cc5358f575703f891b05e022d682156a3c99fa438e1322e04b64664ea174705a31744562f4bdbef516c299a44d7cf

  • /data/user/0/com.ale.rainbo/shared_prefs/com.ale.rainbo_preferences.xml

    Filesize

    448B

    MD5

    dcee35f9ff4662f8e7eb0e3560d01484

    SHA1

    0daa8d8902bd261b0d81a20051b24fb5249a5fc1

    SHA256

    9b76e0ab6ed4ac962fa2f4ac1a6f8b097775413af883c7a601580db0a3a792c8

    SHA512

    f90c560bfccacd7e74bb104ab5bdabcaa92c837addae02183bacd72da678fcc60ea13546a2681b7e60a829ac7d9c1cff95423977207aed08d887a4c357933407

  • /data/user/0/com.ale.rainbo/shared_prefs/com.ale.rainbo_preferences.xml

    Filesize

    448B

    MD5

    22c86453483934b03c574eb7a91044be

    SHA1

    0d89512e85b002d51bfd40faa6823d3b6db8a568

    SHA256

    99a2fc45b44032fa10f913619ce1df7a7a8d056f4d2efd4458d83c6b2dd9d3dd

    SHA512

    d98c69548ecca8e2af3e9da000671b769d4d07e3535c983d59eb192f03eee6eee033b8361edf64982d321159f4f8a684e0fe679e66972ecd277e72f667bda6e6

  • /data/user/0/com.ale.rainbo/shared_prefs/com.ale.rainbo_preferences.xml

    Filesize

    448B

    MD5

    02bdbe69296125f2a858c909fc92152f

    SHA1

    17fea3c50a8f0a9f8706ed05c9eb0aa0d0ed5d65

    SHA256

    dcbca8a9f5135c855a14a87cb294d024994ca626206276a0b3bc76b33cf0a017

    SHA512

    8660edc999d962f00240ca673491632825e908145925f96c8391ec525102eb0629304f8df935ff8cba2791896add3c611ce7de30fbacbe8f729039e8a5abff29

  • /data/user/0/com.ale.rainbo/shared_prefs/com.ale.rainbo_preferences.xml

    Filesize

    448B

    MD5

    674d7b0545b185784d50c1d1df87c339

    SHA1

    eb9e3e7c87de013f2dc678a1deb0bb28f07796d5

    SHA256

    41c0bf022976c99c69b802cdf5b7354d2662e70c25c38b6782fb0d36467ad541

    SHA512

    bbbafbe34e508aeb3a48ba5450e39689cff6dd6ea864e8ec5c878d17c4854960fe76d6b3a8ea6664c3dd7d1b91cd2af63190a1ca3ba514777d7875633b7ae98e

  • /data/user/0/com.ale.rainbo/shared_prefs/com.facebook.internal.MODEL_STORE.xml

    Filesize

    1KB

    MD5

    a62d7db1c0587fa28f13fea6212b0b5c

    SHA1

    927efd8567d6a0bd47ebce416965e7615307053f

    SHA256

    470714ee203141091e4f2290c8de72518b76c5b082fe5fd287f25ded8a12cf91

    SHA512

    c87431f0fcbc721b0343dddd95e50ba40dae6368e3263a22a044e7b59a4ce64e04344f003f418dc791bb0d82176e7babb4f9e770ee13f55437b2d616a54ce6e4

  • /data/user/0/com.ale.rainbo/shared_prefs/com.facebook.internal.preferences.APP_GATEKEEPERS.xml

    Filesize

    3KB

    MD5

    5efc0e7f79cc8af269957460cecb80c4

    SHA1

    8cae39e7ecb5da97e2fd9f5847ee7691362d8fc2

    SHA256

    267fed87dd48270c49689bb6529dc2d11bfaea779b1e218b4dde840fdd4d33ce

    SHA512

    06ca97a4ae5bff60a9a7681cd0c3ae4f01a9e2cb2805616cf10c48b70e650bbf0572b8cede9b8c6a94600eaee03aa997f46c410b26748dc334bac12cf0c6a38c

  • /data/user/0/com.ale.rainbo/shared_prefs/com.facebook.internal.preferences.APP_SETTINGS.xml

    Filesize

    1KB

    MD5

    1c5892fc8053ef702eaa187ce9035894

    SHA1

    6849288ab47df6ea60688481bb74e681a5aa01da

    SHA256

    39c14b2d106cd12fdba355a1161d99777756a296dfe20e0d11c954ffb9640d2f

    SHA512

    1c11027c38974f85152a876b09166ca0310580a1e0f4745fbc4ff52aff3ace01abf3fcf550d0e9847138de31156758477bb41a44d6ef3c094ca6039c30737126

  • /data/user/0/com.ale.rainbo/shared_prefs/com.facebook.sdk.USER_SETTINGS.xml

    Filesize

    139B

    MD5

    34d145a1f9d7290f517f621b0e5635bd

    SHA1

    89108d6cae8d351c53efb5b70991fea2deaa8e64

    SHA256

    777b4dbcab9944d8855218bf93d3dad6bdb25c3666702a3f5ba8953f7752504e

    SHA512

    ac5ed49d296110fac3ab4ff1fe5ec3c2ed13fd15452a86ea95a3132e7625c63342703dcc29b9a84fe4c49617cd647b48efa51f0a43267eebf1f996da88ebbfcb

  • /data/user/0/com.ale.rainbo/shared_prefs/com.facebook.sdk.appEventPreferences.xml

    Filesize

    160B

    MD5

    976abb96ac8c857e2565b64789ceee72

    SHA1

    2128bf455c416237da2c09ffc1c4c8cbb4fe02a4

    SHA256

    39159fc3a6e31f0d539343234a529500cb5abe3fe3f725e53139249f06cf057d

    SHA512

    198dee97f6da78b1c3100c21444f53ec527da2d937c717fc8b11a0545ce0eb7c1943efc51d0223c63765751a0a44a31d58ae3d7709b26c6a837aae6e00e38824

  • /data/user/0/com.ale.rainbo/shared_prefs/com.facebook.sdk.appEventPreferences.xml

    Filesize

    203B

    MD5

    926deb90d6b057161db6789ffb923227

    SHA1

    9a427a6e8a90a83bb5fa01e651850979350d2953

    SHA256

    735513662cb3a129c934a4048c8299f94067947762061e424836afee2ee59cb7

    SHA512

    0783174954114790c04e960d2cb4e22d69b8c87c750dc051f61c8f5875337c8b7a55b82303e457f36a88ef29fd150937b0fd7c8458c813a5f9d31b3d3395fc97

  • /data/user/0/com.ale.rainbo/shared_prefs/com.google.android.gms.appid.xml

    Filesize

    480B

    MD5

    4a34db1b864f4e7b359111aaab8a5e53

    SHA1

    86afbbe6bd6141562f51f6a40072b04aca5dddf5

    SHA256

    1f851355f36946262bc5937a2f7337713d05e73fcadbe9134e5f08c3219487f3

    SHA512

    5a4177f2301a175a84535ebfb0d84abfbd49ea522739af2e31a15bdbb59b7c05382a815ae659d4300f17e429ade3b13cf3a14c0028be0ed84433e5e7c70c5c90