Analysis

  • max time kernel
    222553s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-20230831-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system
  • submitted
    07/10/2023, 23:53

General

  • Target

    a68ca6c38ac5442fdf1111634f6e866ad7710687237c28c737f9e460ef488442.apk

  • Size

    8.8MB

  • MD5

    bed9a5a1433536c4ccea8295e13dc98a

  • SHA1

    a162a83d4d5fc12a3f66d104c12f14cf66ef17bb

  • SHA256

    a68ca6c38ac5442fdf1111634f6e866ad7710687237c28c737f9e460ef488442

  • SHA512

    d0da92b44b48c2ba161de916e29bcba462aa8af34f83b4b220fa24278d01f2fe0aff846513721673c190907f848b6bc1a3f3365d39fcc2d19aa8e058e05e1de1

  • SSDEEP

    196608:3Djy8rLi5v85BvzVKC3O0inWYleHnNSb/qB8JClEzqlk6KvtcR/:3rrLi5v85NzLe0CWY8HNSb3JCluqlVvJ

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Checks the presence of a debugger.

Processes

  • cz.eternal.cityguide.bilovice
    1⤵
    • Acquires the wake lock.
    PID:4973

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/cz.eternal.cityguide.bilovice/databases/androidx.work.workdb

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/cz.eternal.cityguide.bilovice/databases/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    962e56171f5926cc0b9b0c9b1dff4179

    SHA1

    d94f2e9c4e75184af07b289c93354ae3150b1380

    SHA256

    45272fdb13145d4fba7371ffb1eb0cc9bdd26d9bc6d2c02c7fcacda4fe424441

    SHA512

    cbbf93595881b58787268c56968ada55af9dd42572614d3fa1a8ac04df8a11f089bc18c76731debc8592f0ed5d5a7c9a7e3cb2038b6ae375631302632a0bbdec

  • /data/data/cz.eternal.cityguide.bilovice/databases/androidx.work.workdb-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/cz.eternal.cityguide.bilovice/databases/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    74c22af655a08338c03b00c676dcc21b

    SHA1

    b3101ef9a6bb2e94bdccd82366949660aac057f5

    SHA256

    5b7f5385597d1bf4ad9d8f6398a938784133294c404262019ac5199cbc66b162

    SHA512

    8ba79121d765013191d1d21355f63342955458dd80dd928d9e7dee5c6fc191d78bcc8b2612daf0c4f8cc076a0d9db998982e91a7a0d2dc5c616bf71dcb60486b

  • /data/data/cz.eternal.cityguide.bilovice/databases/androidx.work.workdb-wal

    Filesize

    88KB

    MD5

    e7774d1fa6a12a6cfd0942ed2f380094

    SHA1

    4962038414b9e3ca31cc6569f451faac2f7086fd

    SHA256

    73061907908e8f0b69da039b401892a8e8dfa28844020428f620083e4bd35be2

    SHA512

    fdd5514ae31ee3057b822b9f83b3b0a225d75e135e4e197f67748ae44a1da45aa5f64a52d99ccc2ff7d4eedc5c68200c422b0b25c1ad3de61abe0772ef3e7eb1

  • /data/data/cz.eternal.cityguide.bilovice/databases/cityguide.db

    Filesize

    102KB

    MD5

    51b7e37db16e5d760cc48be2583956e4

    SHA1

    4e0866b051cd3ceea280f484d7565a460138402e

    SHA256

    6251a5d964b0e341edb1daaa29adea43e8422d1d2df91be89b6319fd8aec279c

    SHA512

    0c72c883a23eb90889da5a30bd7768cfbb11e428a9021b989a5e81aed55321e8d379c7f0c892d7a59aaefa40359f29bdd7ac1f173bd8059f56a49f4c815a3f75

  • /data/data/cz.eternal.cityguide.bilovice/databases/cityguide.db

    Filesize

    2KB

    MD5

    6da30e3d632843fafc2252bab048b7e9

    SHA1

    c0975e2b72ecb73431028a46da19dd9682e26d9c

    SHA256

    56a69f9494943486632f57bd60ede756829475705accfa903abc02a261860087

    SHA512

    fcdf96bc7003e7156915f38944b8dc7338b8a4ad25f6dee7f209707754e4df334be4fc54dae30e98c6e138ba0d40a8410449a83dffe3624d260d12f738806dea

  • /data/data/cz.eternal.cityguide.bilovice/databases/cityguide.db-journal

    Filesize

    1KB

    MD5

    385f18b72eb969bfd2d482e490e4e97b

    SHA1

    6c13b55c1531334e5c88076d0cfc414c0746cb34

    SHA256

    0bca4d47ff36f8fde7576e24c2f8f3f7ec076d8bb539fd3a86906169aa1ed088

    SHA512

    ad665e2ddf8d8d4bfc15a50f76de67cd96cbb67e7d8fed6d3fa752ae6c0be775280d18d42f7cc15982001793b6012934de12bc596cea2704e662139d637877aa

  • /data/data/cz.eternal.cityguide.bilovice/databases/cityguide.db-journal

    Filesize

    2KB

    MD5

    89f8f4ecbdd726c4c37bfd1c30fc7584

    SHA1

    94e4a59b16bb389d991e38001b5f990a02d5719d

    SHA256

    688465cacc71f1b1558c9278d33fc8e6fc77663ab6d64ac4c072e29a1493bbfe

    SHA512

    0725bf1da44242873c600fc3a3c696eeeb8f9d4b89306a7c29730e7d2c60bf787ba642dc00847d58d211338ecfd05688c47cbbcf009958779fd99aeda1ba863e

  • /data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D1F011B-0001-136D-4CC854B044C3BeginSession.cls_temp

    Filesize

    77B

    MD5

    b8f1b56bcd9c15ecc5f873b0ab5e6494

    SHA1

    3c1ad56befea5b4bd4f825edd16ba45eea3f123a

    SHA256

    738f690230619f2d45960355cf6bb6f77d6ce79240dcbbed23761167d6cf9505

    SHA512

    da4b3141430bbc24ed48ec28c995f737a1af06a16cf6847b2088d2ae11c58b44231dc0bd4e52adf6b18ced66c4df3cc62e9c50e146acfc77e0e575b20ac67f7d

  • /data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D1F011B-0001-136D-4CC854B044C3BeginSession.json

    Filesize

    132B

    MD5

    027133b18407bfb045e1ed25dcdf5476

    SHA1

    ea5dc32ac950cb486e80bda410908eba218709db

    SHA256

    40e6e464c5eee91fb486252c6154167a77297e1b9e61a1daf9c48f18aa0c3474

    SHA512

    fe601aa2f01fd3a13f50a8140e9af69a8cbf8ba92c267e5168a6b3a0326294b1327ce9bc8571f586e1c1223ad7d5511f05714582b7578c57ab60a7196a76a77a

  • /data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D1F011B-0001-136D-4CC854B044C3SessionApp.cls_temp

    Filesize

    121B

    MD5

    d8a33bd1cbe652d443a01e06ae774dfb

    SHA1

    639a9800e0c35f0af969aa4475a075e410e6622b

    SHA256

    01a025391daedefeee05068306100040bcc5c98d2d5231692c8ba44df1bc360c

    SHA512

    ef09ea55b3e395766c545937065eeb72c16a9ab75583b4c3504e134f81b5dc1838ef75171fed57dee38fc92cc1d3187ad16bd54c7b7a919f98ec214f26aa7dbf

  • /data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D1F011B-0001-136D-4CC854B044C3SessionApp.json

    Filesize

    235B

    MD5

    0896c1572588a36e3b0281a8a7c3205e

    SHA1

    4d12f453eaa89dd69eb03d5a15cc6db72482ba5b

    SHA256

    0b1afe04ceddfa4e256ebb4aab457a20cbd0dc5084dbaa22df9398238980d494

    SHA512

    0cd411c8cda5f09aa6fecf914f72b93844311ecd9244b07ee99d2dd2b027acb1fd9e05c90cee22638c8d553394a744005c6fc5ec9eb6f8522bc40c7236beca17

  • /data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D1F011B-0001-136D-4CC854B044C3SessionDevice.cls_temp

    Filesize

    48B

    MD5

    2390c1f21db00b20c07107e3ec7275fe

    SHA1

    e663a646460acc071aebee942cc1776c23d77655

    SHA256

    d348072a01496839cfcde3a18866423aee74aefd613fa3bf1ff4a203ef46a699

    SHA512

    43ff60754eb60795ca1c318f44dcfe49194add26cc3d92c2eac7bef538fd65b6290f2e5953b8f1693b9425ebbcdd022ab16a18280146ee0b0c2eefe27bc0bd63

  • /data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D1F011B-0001-136D-4CC854B044C3SessionDevice.json

    Filesize

    202B

    MD5

    afa07370d07ed0a8ac9554ee7001bb72

    SHA1

    d1e9de22fda1295087525ff3a377f7d7dd410ac7

    SHA256

    8d4b99fc4968c9cdff4626ff6c1467cdb427f7a597b153f03b4bfb62dde6c07d

    SHA512

    a7a974b1c4ca3d7ca92e1449dc9718d5ea2af7f8e4c605d25c731fb4bbe891fdf340835e2a4e3a363558744e5ee30aec22542f377eb5bffc0097c70d24f241d1

  • /data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D1F011B-0001-136D-4CC854B044C3SessionOS.cls_temp

    Filesize

    15B

    MD5

    2566d27ce8c28d8961f082c375d7535e

    SHA1

    92fe585b1a2c9c523d2fa1f65ab5c1b6a1a6edaf

    SHA256

    5acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a

    SHA512

    1c70679bbd25a57f9ac02083d5af0fe72b1417cf3070a195497f03d6f492e87b1ed3f570de7ea7c814c995a1530e32610d9570f31a480648f4062e8d3287be8f

  • /data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D1F011B-0001-136D-4CC854B044C3SessionOS.json

    Filesize

    55B

    MD5

    5caea4b68c57072f7f52a5a41720566c

    SHA1

    4d9712f1702c7238949da43f7d8ae6efb233a666

    SHA256

    3223857b618b924c2b0fbc7bfb373a1aacf300a7b5ab585e18fffcf19039f363

    SHA512

    fe1455d21c521aeae3292bdcc386f6d2005dc253930c03e44dbcb972f96b849670d2aba039ea59e1a5ebc0350e6315151d17bcda55c161a62987d4bb01e91f9f

  • /data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D1F011B-0001-136D-4CC854B044C3user.meta

    Filesize

    47B

    MD5

    9eaab887381b5679a93d92543f7f28ad

    SHA1

    3b149dd714c05f08c631f64a5a8fc2af7f33e4c5

    SHA256

    b05d021abecde48750f1ce1ca3a4b6ea8440f5bf001f01e5c61b48ed83ac1a94

    SHA512

    7dd0ba7c5e129c63e911c7555a2e5f323e2908e4ff9a291e642ad354c3fab7977b5b51086af4712678f6723f8d07e1cb3aca6328b0f255d8636244c3e2477c8b

  • /data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

    Filesize

    408B

    MD5

    5e6ea6dfcf2a8655c5cb724a9b077040

    SHA1

    af724f07128aba255d7f5a42c873d290be4cc371

    SHA256

    061cb1cd37d912da4708c87569054198130de0a1357811f81672909ead98f97b

    SHA512

    30140dc0db48e00ad728341f5b91826fc5584032d6e6b8a6cf5fd40c5c7593c0808ae401522541266d3e9e335047b28be6286b8d39837b5383cd70e2d277cc61

  • /data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/data/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_cabc4f73-8f01-4969-b947-552b733e53a1_1696734515831.tap

    Filesize

    329B

    MD5

    3799cbc777f943ea08c7fa9048fe2988

    SHA1

    7f725a406b43a36b2e7d7525300060d8d0e2ec95

    SHA256

    6a8faa44fea60e009662ad8d7b339c67182a464ad36a782b9e0d14ec5258bf76

    SHA512

    59bc57889176d63d8a899fdf7c9028c26490eff22ad37ccbfa28adc67d54673bc894910032a6b7f1173a1c26317511486a8b34ff1ef0ec198278bdb08ec6530e