Analysis

  • max time kernel
    2212268s
  • max time network
    31s
  • platform
    android_x64
  • resource
    android-x64-20230621-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230621-enlocale:en-usos:android-10-x64system
  • submitted
    23/07/2023, 17:46

General

  • Target

    Plinko Adventure_1.0_Apkpure.apk

  • Size

    6.8MB

  • MD5

    8243ecf6457268a0bcf5051c57ba734d

  • SHA1

    34e21feb5b9887b146c8b4004e7dc255b35487cd

  • SHA256

    a8ea06d85ebf9a896a5d4fbdef5e931ed3aeb8e5b728c4d764a7e23826f7d0c8

  • SHA512

    e7de6b3a3a1aa443079d7611f20e17be764d1d342030beae6d28783749635a579466c78bb507b624a4080999f9ddb0f799d6ff6511763b4a3e3b8ab73371ceab

  • SSDEEP

    98304:fWIrSdosKh6YEr3BaqZcc04z73R2AJps6svCfmLFDADG/uKMTCauRHWhJgLCrK3G:Qe360qX3z73R72cmLFDADGxL72oG

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs

Processes

  • com.ale.rainbo
    1⤵
    • Listens for changes in the sensor environment (might be used to detect emulation).
    PID:4777

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.ale.rainbo/databases/OneSignal.db

    Filesize

    136KB

    MD5

    aa585a29cdbcef4192ecf02699bd5e55

    SHA1

    a827332048eceb76974db0ff513b87a474dbf746

    SHA256

    97f5b42ff4bd9d860b50fb455485fd379ca69ec1c1f91d732679a75c272ed9a1

    SHA512

    646316a6cf43a3dc73c01890dae199e3fb16fc3fc4e9b493f90f5e9364c91173dbec145ba1f79dfbd6617c4d4fe8132162c8a408961e6a72f15e3c65f7a747ca

  • /data/user/0/com.ale.rainbo/databases/OneSignal.db-journal

    Filesize

    1KB

    MD5

    7687b8af59a07d126d9972004d907a41

    SHA1

    4eb7f6a58ca4cdfdb4be835b86481d9f8f680f67

    SHA256

    846fa72fde325f936926bf1b6738a861a0b791913b423e81be80788df17e38d4

    SHA512

    12440076b85a2728e13350ecda9871422dca44509a0df9324b6f75ee154e8238f3bc03a91040e3f9df695b8e69ae6296ef7ee69d107349d052ee1d653e543413

  • /data/user/0/com.ale.rainbo/files/AppEventsLogger.persistedevents

    Filesize

    261B

    MD5

    c94926ea2a228d5f3b3fcf15044f0b82

    SHA1

    c8a4a1e7a48809b13fa73dc468c457a4f49bbc77

    SHA256

    71bd4871155741c5d88ecd7d7076ebcbe89c03754ced3cab81dc5a4d26ac5982

    SHA512

    ddb14993b114610eb747208e91142679a2fe29a9e83fbb567eba98a3e51f34240cdf33a3e55d57c0da4268ab938e25b197da5c8f4be4181c31559319e5c7f02f

  • /data/user/0/com.ale.rainbo/no_backup/androidx.work.workdb

    Filesize

    8KB

    MD5

    b6ca8b30661a7844ed292db75a29a953

    SHA1

    8e0d397ab1f2ced1f143829084c3f53333743bdd

    SHA256

    63a219c7092be26641907c5f955aa977e7675e3922a8e4ee2af25bfed8c7bbfb

    SHA512

    d21ce3adf13d61369708ea000438f626973f20b08ca05a744c1cccb2d5e7c264a8af9c3ebd18a7a6a464d38e1c64146f8e881d29d71a0484dd94212315f6dceb

  • /data/user/0/com.ale.rainbo/no_backup/androidx.work.workdb-journal

    Filesize

    1KB

    MD5

    48afbf328a9c7f6b1842b2c4e510831c

    SHA1

    243962873fcf3b5d9bba317e6e9a7dfcee025865

    SHA256

    ef745cc083a79e7e686d96e8d3c8a0809e66ad09f5a206931cff2316279d3813

    SHA512

    d1ba9e3717fee82c609ac7eb2f8300ab79991c68b9cc01c81ddcd5e3f8bae27c56f375bfbe023fc66062bf7295f1cb6c73e52eaa51353165d4198219ce96ab8a

  • /data/user/0/com.ale.rainbo/no_backup/androidx.work.workdb-shm

    Filesize

    16B

    MD5

    4ae71336e44bf9bf79d2752e234818a5

    SHA1

    e129f27c5103bc5cc44bcdf0a15e160d445066ff

    SHA256

    374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb

    SHA512

    0b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27

  • /data/user/0/com.ale.rainbo/no_backup/androidx.work.workdb-wal

    Filesize

    370KB

    MD5

    3d860fc544413020d58027e1370edae1

    SHA1

    59db55bcc821cf4a8be00d4f0a77551675b5783c

    SHA256

    c46eb3e2cc9759541e40cfad53e71836601dc06c6def898a27385e24a21aeb27

    SHA512

    0fc3cabf349052cf46db6adb29637eace5e0c7a3dc8a93bb36d4dc53813892d66581bf199f4dfa4fda9dcb1890c4e19e3afeb799cf665e95bc83d55a7ad0ddc7

  • /data/user/0/com.ale.rainbo/shared_prefs/GTPlayerPurchases.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /data/user/0/com.ale.rainbo/shared_prefs/OneSignalTriggers.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /data/user/0/com.ale.rainbo/shared_prefs/a3.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /data/user/0/com.ale.rainbo/shared_prefs/com.ale.rainbo_preferences.xml

    Filesize

    448B

    MD5

    acc32cfa3c7ae994ea6619721e8d13b8

    SHA1

    e9759468cf9f32d478edaf772159887fd5bb8357

    SHA256

    39574ffe43b07d493792711c1dedaae4023001d5ef4410f54d1d0f4a471bb405

    SHA512

    a34b6d2558e7675cb05d29d8fedf82f912ced675c23175479f5de2622e20e37974e386d91178bcf69c3752cb5fcb7992c92599ff8590d63fd57a9d3f31208f71

  • /data/user/0/com.ale.rainbo/shared_prefs/com.ale.rainbo_preferences.xml

    Filesize

    448B

    MD5

    3792e9344b9a94f182c2ca10a81f296d

    SHA1

    488adc8ee988d7da9ea89b32b2ca27ecb4aa45a5

    SHA256

    0c7199e46535bef306626b7e3814052bc05a55fb00f3f14c399da51cfb336183

    SHA512

    a13ad38b84043e6661f1e36e9dd57026d8648ee4f368ff7dd1eb9dbe0c66bb16b14e059162c1f7b718e978917690d77f31c550dde94c0c0c18bbd5e1921d075a

  • /data/user/0/com.ale.rainbo/shared_prefs/com.ale.rainbo_preferences.xml

    Filesize

    448B

    MD5

    4141313fd83327724f84e87b55dc9d0c

    SHA1

    3c6f3b9809a589776c7db0c0054448af1947bc75

    SHA256

    6218b813e5433c1a9101ee4180f2afa007a90c85a5018992920dc27699429197

    SHA512

    de39f130190997f8b47390bb73e9e963fd99a9cad72fd96a295705b6edfefd92312c1e2bc72a5c3cc39d4e9349272b69373b3692c36b4a6e53e344c3d7c7a87c

  • /data/user/0/com.ale.rainbo/shared_prefs/com.facebook.internal.MODEL_STORE.xml

    Filesize

    1KB

    MD5

    158f256ee0159e8b6f45920ab178e87d

    SHA1

    8d5e506ff946827fff7d4e18102af655d12e8072

    SHA256

    46783b9239087c097fbc5f3eb8c642164ff3597eaeac47c921df0ce3bc37122b

    SHA512

    759a3881fca11f337935bd9bd5aaedb26fa6dbe3cc5f8056d36392273f112d91b4c615cac3ef7787bcc34b7fcfb5b59060d9b87bb4f57daf170f15c5f71a9cf8

  • /data/user/0/com.ale.rainbo/shared_prefs/com.facebook.internal.preferences.APP_GATEKEEPERS.xml

    Filesize

    3KB

    MD5

    5efc0e7f79cc8af269957460cecb80c4

    SHA1

    8cae39e7ecb5da97e2fd9f5847ee7691362d8fc2

    SHA256

    267fed87dd48270c49689bb6529dc2d11bfaea779b1e218b4dde840fdd4d33ce

    SHA512

    06ca97a4ae5bff60a9a7681cd0c3ae4f01a9e2cb2805616cf10c48b70e650bbf0572b8cede9b8c6a94600eaee03aa997f46c410b26748dc334bac12cf0c6a38c

  • /data/user/0/com.ale.rainbo/shared_prefs/com.facebook.internal.preferences.APP_SETTINGS.xml

    Filesize

    1KB

    MD5

    1c5892fc8053ef702eaa187ce9035894

    SHA1

    6849288ab47df6ea60688481bb74e681a5aa01da

    SHA256

    39c14b2d106cd12fdba355a1161d99777756a296dfe20e0d11c954ffb9640d2f

    SHA512

    1c11027c38974f85152a876b09166ca0310580a1e0f4745fbc4ff52aff3ace01abf3fcf550d0e9847138de31156758477bb41a44d6ef3c094ca6039c30737126

  • /data/user/0/com.ale.rainbo/shared_prefs/com.facebook.sdk.USER_SETTINGS.xml

    Filesize

    139B

    MD5

    34d145a1f9d7290f517f621b0e5635bd

    SHA1

    89108d6cae8d351c53efb5b70991fea2deaa8e64

    SHA256

    777b4dbcab9944d8855218bf93d3dad6bdb25c3666702a3f5ba8953f7752504e

    SHA512

    ac5ed49d296110fac3ab4ff1fe5ec3c2ed13fd15452a86ea95a3132e7625c63342703dcc29b9a84fe4c49617cd647b48efa51f0a43267eebf1f996da88ebbfcb

  • /data/user/0/com.ale.rainbo/shared_prefs/com.facebook.sdk.appEventPreferences.xml

    Filesize

    160B

    MD5

    de661ad29edb9b4d3553ee319a064803

    SHA1

    4d498707b13410b2ca69dd46391467621066f416

    SHA256

    aab83483978483d1ebdc8e7566d45d70aa632cf07354d1059b565fd44459e1a3

    SHA512

    0d7acc44f65141cfd2a0a33ded45faf2666c64bb310d019fe3f095c71379d9270c45ae06af5d258888e1cac19d0a5b2cc12e92ead50c17036efad9a20d07b2fc

  • /data/user/0/com.ale.rainbo/shared_prefs/com.facebook.sdk.appEventPreferences.xml

    Filesize

    203B

    MD5

    1a07593abfdcf1a4ef0fb88ae43793e4

    SHA1

    51400daa07e76f562526eeea8a54f6630363f600

    SHA256

    ec8ec6195258cab30bbb875c6c37811c7cc8499b318a8ac9d3c8c923688eadce

    SHA512

    b3535ba303c41f5567d56c3a417156aec929ef2c256c7009430e2749037bc4e8788db7547212aeccc63f0ada94cea3dc0da8cbf0fb57e342b2a4bc388e2d964e