Analysis
-
max time kernel
222553s -
max time network
162s -
platform
android_x64 -
resource
android-x64-20230831-en -
resource tags
androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system -
submitted
07/10/2023, 23:53
Static task
static1
Behavioral task
behavioral1
Sample
a68ca6c38ac5442fdf1111634f6e866ad7710687237c28c737f9e460ef488442.apk
Resource
android-x86-arm-20230831-en
Behavioral task
behavioral2
Sample
a68ca6c38ac5442fdf1111634f6e866ad7710687237c28c737f9e460ef488442.apk
Resource
android-x64-20230831-en
Behavioral task
behavioral3
Sample
a68ca6c38ac5442fdf1111634f6e866ad7710687237c28c737f9e460ef488442.apk
Resource
android-x64-arm64-20230831-en
Behavioral task
behavioral4
Sample
about.html
Resource
win7-20230831-en
Behavioral task
behavioral5
Sample
about.html
Resource
win10v2004-20230915-en
General
-
Target
a68ca6c38ac5442fdf1111634f6e866ad7710687237c28c737f9e460ef488442.apk
-
Size
8.8MB
-
MD5
bed9a5a1433536c4ccea8295e13dc98a
-
SHA1
a162a83d4d5fc12a3f66d104c12f14cf66ef17bb
-
SHA256
a68ca6c38ac5442fdf1111634f6e866ad7710687237c28c737f9e460ef488442
-
SHA512
d0da92b44b48c2ba161de916e29bcba462aa8af34f83b4b220fa24278d01f2fe0aff846513721673c190907f848b6bc1a3f3365d39fcc2d19aa8e058e05e1de1
-
SSDEEP
196608:3Djy8rLi5v85BvzVKC3O0inWYleHnNSb/qB8JClEzqlk6KvtcR/:3rrLi5v85NzLe0CWY8HNSb3JCluqlVvJ
Malware Config
Signatures
-
Acquires the wake lock. 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock cz.eternal.cityguide.bilovice -
Checks the presence of a debugger.
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5962e56171f5926cc0b9b0c9b1dff4179
SHA1d94f2e9c4e75184af07b289c93354ae3150b1380
SHA25645272fdb13145d4fba7371ffb1eb0cc9bdd26d9bc6d2c02c7fcacda4fe424441
SHA512cbbf93595881b58787268c56968ada55af9dd42572614d3fa1a8ac04df8a11f089bc18c76731debc8592f0ed5d5a7c9a7e3cb2038b6ae375631302632a0bbdec
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD574c22af655a08338c03b00c676dcc21b
SHA1b3101ef9a6bb2e94bdccd82366949660aac057f5
SHA2565b7f5385597d1bf4ad9d8f6398a938784133294c404262019ac5199cbc66b162
SHA5128ba79121d765013191d1d21355f63342955458dd80dd928d9e7dee5c6fc191d78bcc8b2612daf0c4f8cc076a0d9db998982e91a7a0d2dc5c616bf71dcb60486b
-
Filesize
88KB
MD5e7774d1fa6a12a6cfd0942ed2f380094
SHA14962038414b9e3ca31cc6569f451faac2f7086fd
SHA25673061907908e8f0b69da039b401892a8e8dfa28844020428f620083e4bd35be2
SHA512fdd5514ae31ee3057b822b9f83b3b0a225d75e135e4e197f67748ae44a1da45aa5f64a52d99ccc2ff7d4eedc5c68200c422b0b25c1ad3de61abe0772ef3e7eb1
-
Filesize
102KB
MD551b7e37db16e5d760cc48be2583956e4
SHA14e0866b051cd3ceea280f484d7565a460138402e
SHA2566251a5d964b0e341edb1daaa29adea43e8422d1d2df91be89b6319fd8aec279c
SHA5120c72c883a23eb90889da5a30bd7768cfbb11e428a9021b989a5e81aed55321e8d379c7f0c892d7a59aaefa40359f29bdd7ac1f173bd8059f56a49f4c815a3f75
-
Filesize
2KB
MD56da30e3d632843fafc2252bab048b7e9
SHA1c0975e2b72ecb73431028a46da19dd9682e26d9c
SHA25656a69f9494943486632f57bd60ede756829475705accfa903abc02a261860087
SHA512fcdf96bc7003e7156915f38944b8dc7338b8a4ad25f6dee7f209707754e4df334be4fc54dae30e98c6e138ba0d40a8410449a83dffe3624d260d12f738806dea
-
Filesize
1KB
MD5385f18b72eb969bfd2d482e490e4e97b
SHA16c13b55c1531334e5c88076d0cfc414c0746cb34
SHA2560bca4d47ff36f8fde7576e24c2f8f3f7ec076d8bb539fd3a86906169aa1ed088
SHA512ad665e2ddf8d8d4bfc15a50f76de67cd96cbb67e7d8fed6d3fa752ae6c0be775280d18d42f7cc15982001793b6012934de12bc596cea2704e662139d637877aa
-
Filesize
2KB
MD589f8f4ecbdd726c4c37bfd1c30fc7584
SHA194e4a59b16bb389d991e38001b5f990a02d5719d
SHA256688465cacc71f1b1558c9278d33fc8e6fc77663ab6d64ac4c072e29a1493bbfe
SHA5120725bf1da44242873c600fc3a3c696eeeb8f9d4b89306a7c29730e7d2c60bf787ba642dc00847d58d211338ecfd05688c47cbbcf009958779fd99aeda1ba863e
-
/data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D1F011B-0001-136D-4CC854B044C3BeginSession.cls_temp
Filesize77B
MD5b8f1b56bcd9c15ecc5f873b0ab5e6494
SHA13c1ad56befea5b4bd4f825edd16ba45eea3f123a
SHA256738f690230619f2d45960355cf6bb6f77d6ce79240dcbbed23761167d6cf9505
SHA512da4b3141430bbc24ed48ec28c995f737a1af06a16cf6847b2088d2ae11c58b44231dc0bd4e52adf6b18ced66c4df3cc62e9c50e146acfc77e0e575b20ac67f7d
-
/data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D1F011B-0001-136D-4CC854B044C3BeginSession.json
Filesize132B
MD5027133b18407bfb045e1ed25dcdf5476
SHA1ea5dc32ac950cb486e80bda410908eba218709db
SHA25640e6e464c5eee91fb486252c6154167a77297e1b9e61a1daf9c48f18aa0c3474
SHA512fe601aa2f01fd3a13f50a8140e9af69a8cbf8ba92c267e5168a6b3a0326294b1327ce9bc8571f586e1c1223ad7d5511f05714582b7578c57ab60a7196a76a77a
-
/data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D1F011B-0001-136D-4CC854B044C3SessionApp.cls_temp
Filesize121B
MD5d8a33bd1cbe652d443a01e06ae774dfb
SHA1639a9800e0c35f0af969aa4475a075e410e6622b
SHA25601a025391daedefeee05068306100040bcc5c98d2d5231692c8ba44df1bc360c
SHA512ef09ea55b3e395766c545937065eeb72c16a9ab75583b4c3504e134f81b5dc1838ef75171fed57dee38fc92cc1d3187ad16bd54c7b7a919f98ec214f26aa7dbf
-
/data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D1F011B-0001-136D-4CC854B044C3SessionApp.json
Filesize235B
MD50896c1572588a36e3b0281a8a7c3205e
SHA14d12f453eaa89dd69eb03d5a15cc6db72482ba5b
SHA2560b1afe04ceddfa4e256ebb4aab457a20cbd0dc5084dbaa22df9398238980d494
SHA5120cd411c8cda5f09aa6fecf914f72b93844311ecd9244b07ee99d2dd2b027acb1fd9e05c90cee22638c8d553394a744005c6fc5ec9eb6f8522bc40c7236beca17
-
/data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D1F011B-0001-136D-4CC854B044C3SessionDevice.cls_temp
Filesize48B
MD52390c1f21db00b20c07107e3ec7275fe
SHA1e663a646460acc071aebee942cc1776c23d77655
SHA256d348072a01496839cfcde3a18866423aee74aefd613fa3bf1ff4a203ef46a699
SHA51243ff60754eb60795ca1c318f44dcfe49194add26cc3d92c2eac7bef538fd65b6290f2e5953b8f1693b9425ebbcdd022ab16a18280146ee0b0c2eefe27bc0bd63
-
/data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D1F011B-0001-136D-4CC854B044C3SessionDevice.json
Filesize202B
MD5afa07370d07ed0a8ac9554ee7001bb72
SHA1d1e9de22fda1295087525ff3a377f7d7dd410ac7
SHA2568d4b99fc4968c9cdff4626ff6c1467cdb427f7a597b153f03b4bfb62dde6c07d
SHA512a7a974b1c4ca3d7ca92e1449dc9718d5ea2af7f8e4c605d25c731fb4bbe891fdf340835e2a4e3a363558744e5ee30aec22542f377eb5bffc0097c70d24f241d1
-
/data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D1F011B-0001-136D-4CC854B044C3SessionOS.cls_temp
Filesize15B
MD52566d27ce8c28d8961f082c375d7535e
SHA192fe585b1a2c9c523d2fa1f65ab5c1b6a1a6edaf
SHA2565acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a
SHA5121c70679bbd25a57f9ac02083d5af0fe72b1417cf3070a195497f03d6f492e87b1ed3f570de7ea7c814c995a1530e32610d9570f31a480648f4062e8d3287be8f
-
/data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D1F011B-0001-136D-4CC854B044C3SessionOS.json
Filesize55B
MD55caea4b68c57072f7f52a5a41720566c
SHA14d9712f1702c7238949da43f7d8ae6efb233a666
SHA2563223857b618b924c2b0fbc7bfb373a1aacf300a7b5ab585e18fffcf19039f363
SHA512fe1455d21c521aeae3292bdcc386f6d2005dc253930c03e44dbcb972f96b849670d2aba039ea59e1a5ebc0350e6315151d17bcda55c161a62987d4bb01e91f9f
-
/data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D1F011B-0001-136D-4CC854B044C3user.meta
Filesize47B
MD59eaab887381b5679a93d92543f7f28ad
SHA13b149dd714c05f08c631f64a5a8fc2af7f33e4c5
SHA256b05d021abecde48750f1ce1ca3a4b6ea8440f5bf001f01e5c61b48ed83ac1a94
SHA5127dd0ba7c5e129c63e911c7555a2e5f323e2908e4ff9a291e642ad354c3fab7977b5b51086af4712678f6723f8d07e1cb3aca6328b0f255d8636244c3e2477c8b
-
/data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize408B
MD55e6ea6dfcf2a8655c5cb724a9b077040
SHA1af724f07128aba255d7f5a42c873d290be4cc371
SHA256061cb1cd37d912da4708c87569054198130de0a1357811f81672909ead98f97b
SHA51230140dc0db48e00ad728341f5b91826fc5584032d6e6b8a6cf5fd40c5c7593c0808ae401522541266d3e9e335047b28be6286b8d39837b5383cd70e2d277cc61
-
/data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_cabc4f73-8f01-4969-b947-552b733e53a1_1696734515831.tap
Filesize329B
MD53799cbc777f943ea08c7fa9048fe2988
SHA17f725a406b43a36b2e7d7525300060d8d0e2ec95
SHA2566a8faa44fea60e009662ad8d7b339c67182a464ad36a782b9e0d14ec5258bf76
SHA51259bc57889176d63d8a899fdf7c9028c26490eff22ad37ccbfa28adc67d54673bc894910032a6b7f1173a1c26317511486a8b34ff1ef0ec198278bdb08ec6530e