Analysis

  • max time kernel
    3064759s
  • max time network
    143s
  • platform
    android_x64
  • resource
    android-x64-arm64-20230831-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230831-enlocale:en-usos:android-11-x64system
  • submitted
    21-09-2023 07:35

General

  • Target

    app.apk

  • Size

    2.1MB

  • MD5

    b1edfd7aba1d45a042eeb82893697291

  • SHA1

    67d69aca103149f36e067617a15889fb3395ecfc

  • SHA256

    c4f03a8ba2c49933bc750a2a849c0299f2a19f5685e86d798da9ba629fd9c009

  • SHA512

    5c4e53ab79f3cd032172eff78b66a4198171e8f22ff5dff0c3056d33dbea2c00edd72a91d1ee6175f4fa94a3a6f1bc976d799f234e86922f8880defd1d03e040

  • SSDEEP

    49152:AEhKR7EFaDarTTnneg46ZLxeiz10gY6dm65m9uHajKMcofDrD/gnPx:AgKBaFXTnnVPBY6dmmHajHDrDop

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.MrXnxVip.global
    1⤵
    • Acquires the wake lock.
    PID:4388
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4565

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.MrXnxVip.global/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      3ff9ce0c2dec759f78301b827f955eff

      SHA1

      db125ab60ecc9037f952aa2c45010ba682234457

      SHA256

      5bbca54d4e7874e7b54f7216a71f935a8367fbd340735f928de3940174294cd2

      SHA512

      a84dc182380ce12bdf04ce3dc3c4d53d36a25cbde206a8248cd2e279223df8aee94934d6ca38a5b98578279103f3920f479a6b63e7cd8a59bad8008cca81e870

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      191ff0bcced62e4233be325dd825ba68

      SHA1

      699217e9044d77270f734074064f6ec4bad6dbd2

      SHA256

      133d74b6d207fc398c91c30274028b241f68f431ee5709ab550f37781370c995

      SHA512

      fa4c9e2f3024d80fb255a735dcfa175435f63187815bdd45e10fd94bd28414067b25d2f1bd95690752a118d5aceadb37ee7d9b1b5dab09ca3749cdc2b8fc8071

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      07372aae71f05a5524e8850fa855d2c6

      SHA1

      2d2760a70c32811cbbac56089234a5588898bdb5

      SHA256

      371a3610fd5a8a5c5025768a74c5dc9aca99960b8d1138b9f94d0e76cf08c829

      SHA512

      e6275b2394a68d62e412a3623d85891b45bb8fb90130d8fd090b673eedea57dd316158d9dc23f5d8b80696948eded37133a34ba2e5e756dfda2412728a02b3df

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      6e007d33efe3291bd3d87d897754607f

      SHA1

      9ed692e094e107bd12bf8f39c86c4c3268b85401

      SHA256

      0d1a9663e4de293990828dfbd62505985c282cae34ad9a610afbdd6a512c0a6c

      SHA512

      b95f73b564a894e6c1cb930289b238fc6864611cad9f831315b4e082dc534c65ce1c685d9a5e209de9bdab6176121ec626134dcb1bdc5f8610cc929ceffcf5ba

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      de82e2c94d2718988804b035a46d17b1

      SHA1

      705f5ff19093ad209f2a666085d6ccaed3bf58a4

      SHA256

      29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39

      SHA512

      68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      d9cf75fdd1c2292d986f6c3d5d60f2c8

      SHA1

      07ecb1d3a26d952ae5fecf54f36699ab498510b1

      SHA256

      2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

      SHA512

      442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      1130b564fe6cbe81b9347c6db38da072

      SHA1

      4ad8a41d1789c8656caf435a391daee2038d50ff

      SHA256

      cb3454b436046dd11047ada34b00db37a7006c8fd4a3098788989cee0c5d0286

      SHA512

      5746c187673619bb619839006f5c769a780ac9bf84f9fc6db5b2c9e5933ad817770984d49442917f1a26794211f80b58ee2eab0030a5c473195a923eeb96407b

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      457c7123352bd1b0d11bf971f232b442

      SHA1

      5636309075058151d36d1bbb5079b7d35c224b50

      SHA256

      a8909dc91e41e6fb5ba7533741f30974b5003b01d5d9d56934dd02ba0eebc92d

      SHA512

      5378ff187d90382f67a1614ee5c69bea2f37a443268bb58322076c778c6510dd6f79b083180b147bcd098f3a30c5a9b3afa387aa6c639306cd9256633d82bcd5

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      ec087374203f543fbdf4222529a336d8

      SHA1

      4c70242428fb2e20ecab0aabed9dd7a07bced565

      SHA256

      35f97f9cc286ff070a2622797cceac2313fcfa8273c9a4e1f181370ac9d64687

      SHA512

      e30cc32ce48f37536da1d3069143dea0ef8e6456e7feddee660054dad085cf08bd48c01e594624b785303f6d282c2ec03df732b0ff027ca15dc4b525616f63b4

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      7c99904eb642b6080e825564a677287d

      SHA1

      67d9816e11bff4279a214496b94a69d093750e93

      SHA256

      386ea2a14e4d8c797d3fca722c9974de50e8d4b5d841fd7416ec87dbaca9b581

      SHA512

      f49a410cf2fda38eaab12fa95728c322c61baaa084f3417ff4bce06bfe5f5a678788fc0f721d494f0c0dde11730f38bb57c4d512eec2c157aaf6e3c2e185b61a

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      98bc686465cbcb24eaf41ccf5c15c4c4

      SHA1

      6f12bf2a2152189780543ac85834486fe84b37cb

      SHA256

      61484ca776d9ad612ee0304879c29c91ec27808f29c2d4520ce0f5ed18f4bf52

      SHA512

      9b849ca50faa96c09244e9794d280ac0a87c9bfcc9764f21d08100f1624bb9fb3a6216c89c30f45abc336572b321509ca120e02808457297869f4097450fe33c

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      e28cc70736a86288891969effafd03ff

      SHA1

      e4b6f61debb3b27949b7f15f189a9e9228070cc9

      SHA256

      b95cdfc01a62f4cd6d80a3827db3f51ea8a81343038b69c1a11bea805ea90dd4

      SHA512

      87f7c623b543c6548b5df48cb8fb476b0389daa891b0c47cd7e301e0dda439027eb37dc0df226b799b1ab79a925f65663dcc2b2516780a494111995809511dd1

    • /data/user/0/com.MrXnxVip.global/files/NULL.txt

      Filesize

      10B

      MD5

      68e109f0f40ca72a15e05cc22786f8e6

      SHA1

      db8ac1c259eb89d4a131b253bacfca5f319d54f2

      SHA256

      872e4e50ce9990d8b041330c47c9ddd11bec6b503ae9386a99da8584e9bb12c4

      SHA512

      8ae6ae71a75d3fb2e0225deeb004faf95d816a0a58093eb4cb5a3aa0f197050d7a4dc0a2d5c6fbae5fb5b0d536a0a9e6b686369fa57a027687c3630321547596

    • /data/user/0/com.MrXnxVip.global/files/PersistedInstallation4273087280520311601tmp

      Filesize

      90B

      MD5

      1c34cdd8200322543e685b4f27fd2f87

      SHA1

      d4f62cce7998e4520f092d625e0a675f9eaebd10

      SHA256

      964382608e7cd85108fd8e9b2b902fb58c012e24edb0b262ba0a70443022ac9d

      SHA512

      91529332aa28308b12d5c33bf1c410a474dae1fc5b3091d959c994c26bf312a75ff029f017fe43235572b22b696afdab082124f2cf2ae22a4306e09948dcc417

    • /data/user/0/com.MrXnxVip.global/files/PersistedInstallation782901611176857151tmp

      Filesize

      569B

      MD5

      3eb71f51d978cd256a13b35046f0ebb4

      SHA1

      87a36fd6c0db3e1c7be0cd304645b0446304151a

      SHA256

      7b7b91e2a812f1b5ca81a79e944e2f591e5216ba422df65e8268706446f746d4

      SHA512

      8ddbcbbd6ba4c3e218e1e5030baf6ec26f8907f5704242724f0ed855d2d1349dd890caeaf73aeaf6786071c9a35d7c5c5601a4a20c0d2404ba2accfd479d404b