Analysis
-
max time kernel
4098261s -
max time network
161s -
platform
android_x86 -
resource
android-x86-arm-20230831-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system -
submitted
03/10/2023, 06:40
Static task
static1
Behavioral task
behavioral1
Sample
pdalife-app.apk
Resource
android-x86-arm-20230831-en
Behavioral task
behavioral2
Sample
pdalife-app.apk
Resource
android-x64-20230831-en
Behavioral task
behavioral3
Sample
pdalife-app.apk
Resource
android-x64-arm64-20230831-en
General
-
Target
pdalife-app.apk
-
Size
6.3MB
-
MD5
b30dddde74f8391164b43bd477108682
-
SHA1
c2878186d227cad4b4c77fcf7baef2c3ed3d4854
-
SHA256
cb50167b3726d03ff97ff020c70102cf8f758c8d7a151c90ef2ce9396d29135c
-
SHA512
99cab2a4f48e5e6206ad0aeb330ff97f2afc3a556fa7097856371a024a771e51f593f8222afa8d68f0763295389b634281f978d4addbf498eac299eb2cfb8a20
-
SSDEEP
98304:2ylONuhvfi3MZQeFFY1ln5bl/Wc4oh7upoDKAvyZUacIRgPHajKNXwJQFWef/C2d:2Kvs4wptZupoDDyBcIeHgiwqUUq2nMA
Malware Config
Signatures
-
Reads information about phone network operator.
-
Removes a system notification. 1 IoCs
description ioc Process Framework service call android.app.INotificationManager.cancelNotificationWithTag com.pdalife.installer
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
226B
MD56613f43c5dbd9a51f66fca7d6d2e9eb0
SHA19d8dd4eaf75f4244780988906307671a3947ecc5
SHA2568c19e5d94ceac7bbd964ddc265f754df237951a69da3f4c8f79ee92378c15046
SHA5123c9e0f02de4f393a9d167196a437d1a19b752787a8ea2a67411d8e9d7a31370dfc78bbb265229629db6694b258030c47d5ed5acc72bc4c5df5fa5e852f354293
-
Filesize
226B
MD56613f43c5dbd9a51f66fca7d6d2e9eb0
SHA19d8dd4eaf75f4244780988906307671a3947ecc5
SHA2568c19e5d94ceac7bbd964ddc265f754df237951a69da3f4c8f79ee92378c15046
SHA5123c9e0f02de4f393a9d167196a437d1a19b752787a8ea2a67411d8e9d7a31370dfc78bbb265229629db6694b258030c47d5ed5acc72bc4c5df5fa5e852f354293
-
Filesize
36KB
MD5fca6c28c5652a427964005eb58c4af70
SHA12302226b6fb1028de4b0a673169e47ec9138c385
SHA256b4c0ec2b6e5fc1d259fd8edc19f0b52ed9d05759a096b63aae104b9963f4f238
SHA5122e510408d78ab0cca09c2971392f1d71d500c2dba8ee168f77555fc9df4522f2cabd318eb681677395efd4be3c0a65a19251eca39f49b62815e79c37d01815c3
-
Filesize
512B
MD595d8257037617a60ad43134c35fa32fb
SHA1ee775904b3b000b7c9d7f2b6e27b114460aaeb53
SHA2565eb33708a4c9e52836d7da5060c7d1b59bd7c72f12c189adb3ed67073841d3b4
SHA512bc898188275c2de1da25f50df32ab2f6db0519a3efde6b7385b3b43a0df54b1c7370c851fd96f6553a71e34889dffd1aed5cd6e228795e29768449fca5e60738
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
406KB
MD562f43e6b550527c308d6b2a9a0de467a
SHA1518965873acb17345ae7473c3c3702be7e56e77b
SHA256f80c543ceceb05df6020ff3106f51ed2343f2a9d83c6d87497347ff17caaf257
SHA512faabbf70dbef74caf59cb988ecf20802e1cd8fd1812c08bd31615c1f842120dd68c928a3bf8bf2cd3c9318ae38b4db6c2a5053128ff37565ff97cb4834dfb536
-
/data/data/com.pdalife.installer/no_backup/db_metrica_com.pdalife.installer_20799a27-fa80-4b36-b2db-0f8141f24180
Filesize20KB
MD5c4dcc3d2af53fff0271988a390a53803
SHA1a84a471fc77a623548a5eda4c4b1757acb05d89d
SHA25624e37dac3bc98baba72360c2b591f45b9dfb852b5f58e98262a25c997f609ebc
SHA512f5c4045365bf18ccd062ead15f3625e460091bb3f8a985af80182f33c439d71b99a83906819544255914dc1a720aceb8f2dd229217c1bf7b36c3199bcada4ed9
-
/data/data/com.pdalife.installer/no_backup/db_metrica_com.pdalife.installer_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize8KB
MD5ec69f6ef1cb64cf8272f22d0198b9c0f
SHA191cec9d29b5352d19729d9b092dc14a330bc4fdd
SHA256c1171d9a8aa98f3219cd4acf5f890129b50b11ff10f368c888c8675902c20b7d
SHA512f6471af18f0059589f77753120aa4e29e86129b6cbe0e705338dfae39740c8fd43c51ac1ae3b5429a4afc02adec135d1c297270c0008ffb4c7879cbc956370d5
-
/data/data/com.pdalife.installer/no_backup/db_metrica_com.pdalife.installer_20799a27-fa80-4b36-b2db-0f8141f24180-shm
Filesize32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
/data/data/com.pdalife.installer/no_backup/db_metrica_com.pdalife.installer_20799a27-fa80-4b36-b2db-0f8141f24180-wal
Filesize249KB
MD52d1c8fb3ad9eae921982f5d060aeb4a1
SHA18425804fc6460c04dee056adfa1071d89eb99ab2
SHA256da3ddb829cf3b1ec841bc1ab50e67d74e5a1e9c9c403130cf228a4cf9cb958a1
SHA5124ef06a1dea6adb0375372fe45faafc51cf481390717597830586f48298f9867043c6489ad21ae1d22f3b8f45d0f4cb1f6a5b7afce5e8b459565308c4e940d9c2
-
Filesize
20KB
MD5b2157ddf6977e5ca9faf81c7e7c1f96c
SHA1b1796edacfe4f591f0da65442a4099abce534a8b
SHA25649f4701ca18ea84e7a25fedfc760703ee284478f1ac8c1aec13b08f32b10a4c8
SHA5120e2e17d6dbc0a0a63221f822e3bfbd8043277ae5a65e9d21981452a5293f825f6c058120e0e72947d57bc42c077bdaa5bb8355a04c7a8f97a9ff7c93af0629c7
-
Filesize
20KB
MD5c4dcc3d2af53fff0271988a390a53803
SHA1a84a471fc77a623548a5eda4c4b1757acb05d89d
SHA25624e37dac3bc98baba72360c2b591f45b9dfb852b5f58e98262a25c997f609ebc
SHA512f5c4045365bf18ccd062ead15f3625e460091bb3f8a985af80182f33c439d71b99a83906819544255914dc1a720aceb8f2dd229217c1bf7b36c3199bcada4ed9
-
Filesize
249KB
MD52d1c8fb3ad9eae921982f5d060aeb4a1
SHA18425804fc6460c04dee056adfa1071d89eb99ab2
SHA256da3ddb829cf3b1ec841bc1ab50e67d74e5a1e9c9c403130cf228a4cf9cb958a1
SHA5124ef06a1dea6adb0375372fe45faafc51cf481390717597830586f48298f9867043c6489ad21ae1d22f3b8f45d0f4cb1f6a5b7afce5e8b459565308c4e940d9c2
-
Filesize
20KB
MD50a2fd742a27c8b0120e526c97598f740
SHA181707dbce1c416177b0440e7529c0935bedbd1d4
SHA2564cd8c48b4f6fa86f250a926a816b30e74c724e309dde20c037f69f02201e87ce
SHA512facf20b6d49e1b7d71142d29a6da31e35424eca8d0a0698cda24e3f1002840d1a73be3e80f9611271f4cb2b919a65d92570eaf282544b35acb16cda3afbfdef1
-
Filesize
20KB
MD55ae1dae9eb36649faeb07a94ca96e7f8
SHA19056cb35b999726d6576ef6ced55ca9228cb97c3
SHA25662eafa0fe191047857cbfdbd6909930487f2216d260b4be27fd52e3cff6086d3
SHA512e33d2cec8122673da3c8ffc788bf2984eac878f7dada265485d960a886ebfb00e17b12a30b546c959bc04c62a31d5646fda748df693e0bdafbb974abbbe77c1a
-
Filesize
20KB
MD5f9422b67e42b7e609f16cbf2e00b04f9
SHA1f1334e8ff538e6665cce20f06e17d7a32140f5f1
SHA256e0c7b9ba905012e7c44098e1e19dd2edc06f433a58a8998d4a74c7a7e3a6bd24
SHA512a00f7adf840472516ef59fedfc3be76de69ce5371e9404e09bf90ebe8a70aec774a7a39572f7e22e4e7551509e70e537ad7c910c99abe0d21a16a741209daa11
-
Filesize
402KB
MD5c7908ee2a0b2e4360cf5dfb07bcdebb9
SHA11f0304312c8000dc571afca3cf5db2989b344315
SHA25609ef4c9370388200e76ddc73d3537fa744ae51f8a043f508f8006807278cdcf3
SHA5129adf1465cd4b25c7792226e28701a1c8b324533b786f3ae5d6145aa3a351fd77f98ec08af1e2b389e9d0a1eb8e2681309a2b3562befc45b5618e54a0fbcdd24b
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
32KB
MD548c1a6dcca67b3720cebc38ad0d389b3
SHA1a8d638e20f99cc154bcfb02d32e34ade89f87b14
SHA256f33bc552df7b032608efc038de4e25f88736b824cbc38216bdbfe61226b90c24
SHA512c2c297051acc3775b0df8ec885f4bad798a4e78c7006ca570084bf4bf14786bac97c254318a679327b6893a47a66ca754bc8fde169a654ab6828532aad03d63e
-
Filesize
20KB
MD5b2157ddf6977e5ca9faf81c7e7c1f96c
SHA1b1796edacfe4f591f0da65442a4099abce534a8b
SHA25649f4701ca18ea84e7a25fedfc760703ee284478f1ac8c1aec13b08f32b10a4c8
SHA5120e2e17d6dbc0a0a63221f822e3bfbd8043277ae5a65e9d21981452a5293f825f6c058120e0e72947d57bc42c077bdaa5bb8355a04c7a8f97a9ff7c93af0629c7
-
Filesize
8KB
MD5ec69f6ef1cb64cf8272f22d0198b9c0f
SHA191cec9d29b5352d19729d9b092dc14a330bc4fdd
SHA256c1171d9a8aa98f3219cd4acf5f890129b50b11ff10f368c888c8675902c20b7d
SHA512f6471af18f0059589f77753120aa4e29e86129b6cbe0e705338dfae39740c8fd43c51ac1ae3b5429a4afc02adec135d1c297270c0008ffb4c7879cbc956370d5
-
Filesize
32KB
MD581096ba8c6a89f872dec200e0368cc65
SHA1da08f960741c5bc5d9d3c821bf7e0e5d1728048a
SHA2567559b4c50ee3745e267e2009ea58dc9f8c614b3d27119e1ecc492b5088c7b0f5
SHA51289929bf56ceb35ea19a36a6b61ffc67d1777ec75003ad5164d757a03dad864ed1cf32eaeb2d51b7bed90658466f08c770229332408511ba31ff916b187123af7
-
Filesize
8KB
MD5389dd034caf39b4ddcc2bdc3f897e421
SHA137e5fe0acd00b0c1e0f5a56db0bfcef125599816
SHA2563de68d149bfa12c7aa4fc0a38e0ce6699b210141636f413795f3613e451b2567
SHA512f06cfe913164649335fec4a9170a4fef58ab593e90bca0527d1c5125850703a1740771f663153ce09bc36c6ff48293198b6ae0668ab8c1e73eb57559c61218cc
-
Filesize
32KB
MD548c1a6dcca67b3720cebc38ad0d389b3
SHA1a8d638e20f99cc154bcfb02d32e34ade89f87b14
SHA256f33bc552df7b032608efc038de4e25f88736b824cbc38216bdbfe61226b90c24
SHA512c2c297051acc3775b0df8ec885f4bad798a4e78c7006ca570084bf4bf14786bac97c254318a679327b6893a47a66ca754bc8fde169a654ab6828532aad03d63e
-
Filesize
20KB
MD5f9422b67e42b7e609f16cbf2e00b04f9
SHA1f1334e8ff538e6665cce20f06e17d7a32140f5f1
SHA256e0c7b9ba905012e7c44098e1e19dd2edc06f433a58a8998d4a74c7a7e3a6bd24
SHA512a00f7adf840472516ef59fedfc3be76de69ce5371e9404e09bf90ebe8a70aec774a7a39572f7e22e4e7551509e70e537ad7c910c99abe0d21a16a741209daa11
-
Filesize
44KB
MD56168cd234b9ec2a5e9b3b3dff1572e60
SHA158f70751b8b0f5bfb20fb9f55e106f716571ddd0
SHA256820ba6e12c9f48e7763739f97610e057642d00944344ad9253bd722bcd32751e
SHA512892fe3a93a59f4f2a757e1e621a50f9b01427f866cd695a67ec5d9ee7d283ead2fc57a4bbd6bf61f69ee815824d937d6ba2e5553c1608b1af425a9a6b5be035d
-
Filesize
20KB
MD50a2fd742a27c8b0120e526c97598f740
SHA181707dbce1c416177b0440e7529c0935bedbd1d4
SHA2564cd8c48b4f6fa86f250a926a816b30e74c724e309dde20c037f69f02201e87ce
SHA512facf20b6d49e1b7d71142d29a6da31e35424eca8d0a0698cda24e3f1002840d1a73be3e80f9611271f4cb2b919a65d92570eaf282544b35acb16cda3afbfdef1
-
Filesize
32KB
MD581096ba8c6a89f872dec200e0368cc65
SHA1da08f960741c5bc5d9d3c821bf7e0e5d1728048a
SHA2567559b4c50ee3745e267e2009ea58dc9f8c614b3d27119e1ecc492b5088c7b0f5
SHA51289929bf56ceb35ea19a36a6b61ffc67d1777ec75003ad5164d757a03dad864ed1cf32eaeb2d51b7bed90658466f08c770229332408511ba31ff916b187123af7
-
Filesize
402KB
MD5c7908ee2a0b2e4360cf5dfb07bcdebb9
SHA11f0304312c8000dc571afca3cf5db2989b344315
SHA25609ef4c9370388200e76ddc73d3537fa744ae51f8a043f508f8006807278cdcf3
SHA5129adf1465cd4b25c7792226e28701a1c8b324533b786f3ae5d6145aa3a351fd77f98ec08af1e2b389e9d0a1eb8e2681309a2b3562befc45b5618e54a0fbcdd24b