Analysis
-
max time kernel
222535s -
max time network
151s -
platform
android_x64 -
resource
android-x64-arm64-20230831-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230831-enlocale:en-usos:android-11-x64system -
submitted
07/10/2023, 23:53
Static task
static1
Behavioral task
behavioral1
Sample
a68ca6c38ac5442fdf1111634f6e866ad7710687237c28c737f9e460ef488442.apk
Resource
android-x86-arm-20230831-en
Behavioral task
behavioral2
Sample
a68ca6c38ac5442fdf1111634f6e866ad7710687237c28c737f9e460ef488442.apk
Resource
android-x64-20230831-en
Behavioral task
behavioral3
Sample
a68ca6c38ac5442fdf1111634f6e866ad7710687237c28c737f9e460ef488442.apk
Resource
android-x64-arm64-20230831-en
Behavioral task
behavioral4
Sample
about.html
Resource
win7-20230831-en
Behavioral task
behavioral5
Sample
about.html
Resource
win10v2004-20230915-en
General
-
Target
a68ca6c38ac5442fdf1111634f6e866ad7710687237c28c737f9e460ef488442.apk
-
Size
8.8MB
-
MD5
bed9a5a1433536c4ccea8295e13dc98a
-
SHA1
a162a83d4d5fc12a3f66d104c12f14cf66ef17bb
-
SHA256
a68ca6c38ac5442fdf1111634f6e866ad7710687237c28c737f9e460ef488442
-
SHA512
d0da92b44b48c2ba161de916e29bcba462aa8af34f83b4b220fa24278d01f2fe0aff846513721673c190907f848b6bc1a3f3365d39fcc2d19aa8e058e05e1de1
-
SSDEEP
196608:3Djy8rLi5v85BvzVKC3O0inWYleHnNSb/qB8JClEzqlk6KvtcR/:3rrLi5v85NzLe0CWY8HNSb3JCluqlVvJ
Malware Config
Signatures
-
Acquires the wake lock. 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock cz.eternal.cityguide.bilovice -
Reads information about phone network operator.
-
Removes a system notification. 1 IoCs
description ioc Process Framework service call android.app.INotificationManager.cancelNotificationWithTag cz.eternal.cityguide.bilovice -
Checks the presence of a debugger.
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
20KB
MD5fd10aa90dbe453ea36e60b5a198abc4c
SHA1321591172291841d4e9f9a7f7174849a5f37f0a9
SHA256eb72b30ab2d0113e90ec8136d94e5b236c5f04f7164b69ae427b0c52d61f6f92
SHA5123cc9f2ac9269a1ed13d27be55dbeda332a36b59d98fa4d07eaecf3383354a6b7d563fae049d5f41f548a995493bd539a831e9207a0b81f4d35c8b621f4d944ae
-
Filesize
512B
MD585da8ab3f879abaff224534005a34fda
SHA1ca26c3f7136ec6887ec5dc1771441e586857e848
SHA256cf40f3ca19ecec0cca78226fc0fcf29108a5cf360907edbd3e7a3dbfa60752a5
SHA5121c287b072fbee14f0f42c52d1451963154fe195b7bd1ce59d1865a3f3cdb931d808f0b196b178aaa47ca8d0b4df9289f32cdd151532a9a3b57adf42b595b2e85
-
Filesize
8KB
MD56b21681ece6d2eb1bfd521c0bfff2a6e
SHA18571a762352ff3b34897bcb6fd586100ec6e8373
SHA25652c2daba4fa77d83c5d4ba8f5d6202fa2f84fd8d0adf54831b5d96ed015c44dc
SHA51274243dd492c82726c0a7fc488d8825213988990e7b7ea1dab5e3f062aa1a314182fd52ac34f18d51d72a53a3d3e638c8f425d54caf15ba760cbc4f30308543c0
-
Filesize
8KB
MD55d501e71d681037a5bdbc0dd2bc6a562
SHA1d5eefc66bba2bd3c60401b592d6edcdde8ed9692
SHA2569ca5edf7e68cebe46375da3e4ac76004991b9e8407f2346fece869bfff06a6a4
SHA512fcdd7c2dcc64c64d3aeccc456de1afc3f5baa8a609b8b00f677174ce9b33c58f2c1b4396d342bbef1dcf5243384be2b17b69cfb0cc3640e005dc00902041538f
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD5716a756f180ec8d77c97af1fa4276cb5
SHA1397e223b8be976efe06210f17b5759ffd58b3667
SHA256807b776497ce5eb43b405ad5d4431a6fe688e01374505dcb476c7516fd035894
SHA5124c94a7252e445040a0ae896873175f2f13dd31274ff1181abfb3450639e9da60310133cdd8bffd7604ea4e15b2c9e2d606d9752b50dc0133f6ff86db3a39560a
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD5d171453ad7a4b8399139fd6dfe93d26f
SHA1861d68f258aa64c3060644ea8ec5c0c6ca7ce9fc
SHA2560537ffc4eaf1863d2f6a66b7c62c8ce67e6f9938803ba75d5b43cdaa2a734b66
SHA5122b4c0f21162c7267341e3e7bb932745d97ee40ba4ab65d5de1c2ba131b6c298b89d348b40661ea2555ee6ab3dabe5bb0160c3328e468fe66941f8c9968e98c2e
-
Filesize
88KB
MD57b7f6f0aa0afce41b5bcd3e0dd50d079
SHA19f0de2edbf21641239b8afa80a45f08d01920ee5
SHA2561782aae0f0a56a57cd7921de3d574d2707865b9babf77703b88c5f22291b6181
SHA512545d1972ba995ecfac94629e0bb7257b4b5846560d2c4645c990caeab36bc885112abf393f0481e7d7a2cd3a8452b56bb00f589fd99997eb5ea3970278e57418
-
Filesize
102KB
MD551b7e37db16e5d760cc48be2583956e4
SHA14e0866b051cd3ceea280f484d7565a460138402e
SHA2566251a5d964b0e341edb1daaa29adea43e8422d1d2df91be89b6319fd8aec279c
SHA5120c72c883a23eb90889da5a30bd7768cfbb11e428a9021b989a5e81aed55321e8d379c7f0c892d7a59aaefa40359f29bdd7ac1f173bd8059f56a49f4c815a3f75
-
Filesize
2KB
MD533b1875c6209d009ed07add87f93303a
SHA1d82f66d8e8304194ebae71f88725b118debad234
SHA2568941a5ae6c047f0a08c56db6bf46f11e05c758a966c48f1e919310f1def931d9
SHA512dfd0b94a715b7aa64c865c3e91e692d59b80284498dca847d4d0def88ab1a278453b2dd2fc9f229ddfdc1ff385f72d9db415efbc706b0837674d915de3a96298
-
Filesize
1KB
MD5d886edc4619e2b03f80a572cb7a40262
SHA11f69e36d3b31a7ed8539f0c09e1eabb8c76b1593
SHA25649be9894ef3f10c36435e5a4cc60290e4899c0b46305f68525629e9a83d49ebf
SHA51264f7348934e51c4fa7e1186204bc879a7da1ad5aa0d90f5a37635154a466c01c15234e4ad21340fc0714bdb2e9cf0610f1111c212eb17d067c8929019c334652
-
Filesize
2KB
MD5abd8c9875ebe2745421de22ddc529e22
SHA1d142178cdf96c65140bfead8da98f11ae2dad440
SHA25653f4e03e7da86c58469efb0e3f68fa8adec981b17d89b325e337dfc89aa3037f
SHA512e4121eec66ee77327e4db7545bc7d3c4118091931035cc6c8cc2d5863ec502d814c6012022e1992e0827c6f1b914c5f4452baf504329adca2c954cc2f91b6666
-
Filesize
16KB
MD5f73b8596e059cb4c2adcaf6c0ff45977
SHA14f78ddea267b2ca03dbbe4721970009df4200e10
SHA25667fd54880b2d1e5e6aa96f0006df3797721247a0b084b4e67fa62ea035453ba7
SHA512e41853b8013818abf0cb163fe18994ad7cbe94ba5297a2836383c67be35b030b6e7ed4355553c21472a1c5f080ce89533fa39348c3da3b862c161c02ebfaf671
-
Filesize
16KB
MD513cf2dc4da705062144ba9e4bc1e5ab8
SHA1aad4a0c78fec303effd6aa277f0f23b96b6b7b87
SHA2564f0574988d4cc7a0210964344aee8d2f66542b58c2864c08a2093088d5038dac
SHA512be98a5e3c31eee85e8a398110fb7d6b4e0081e48b61d6255b149e75d02572b1ab76eb941f4430cf0374189ecd618622b82a1966c630bbe9de731f658fbdd06c4
-
Filesize
16KB
MD5b56dbfa2e1ab90ca4322e0cf6d02e981
SHA192499cd7e6f5790c8039553d847be16ede5cd6b5
SHA2567af8e1420e584f82df8c9a0655b77c80d3a93cf98da4b04d31aa511d4e32b417
SHA5128776c3cc1939ae36106e52c4e5e6659e200a81b36fa10afe6cbd6639ccfec5d3a27173caa569887719f3cb8ccbdb0cf05279dd92c18370201effc6d7266452b9
-
Filesize
16KB
MD56484d3779c9169ba05e71e4cf3cd9b76
SHA13aa32883beeb9eb6a0096e970605803e083846d5
SHA256a034b9cfd6d8cc020cd64d16d59d4532681ed9b9f350ceb921fe51f43abf663a
SHA512c37bee13006cf11c73ed1b3e50871389d906bafd5a8ef4ec9ea533c7118395ad6cb2804e24bd589cb245a3665a2a8081c6409d524420f31c037e1d9c0dfdcaec
-
Filesize
16KB
MD55d13eae70fd37285efb133df22642b80
SHA10d7cfdc68faeb31a92cdb36645f6655a06124eda
SHA256e04f16db45b28af50d45d43f57a1dd1185fe76339209a5a8ad545d5fe8b66509
SHA5129a1576c0ae12635e85781af4ef4b011db46efcc20ee647c8b0ebdff2a89628745eab9a4286c3e7c027e4529578b8ba12ec084cc0d50e96770d07f53eaf127b8f
-
Filesize
16KB
MD5c9d954b93aaa1754ef37483b034eab38
SHA13147b34e0306fcdb7abffbcb8c51f87e2aee1153
SHA256b37e1941922e511ac5f835fdcd01ee88cff6f9b70383e72741ee42748b925ccb
SHA51221795549dcd59f5b816e8fdc016d01d86b3e8b33e4cc7c289fed96ef311a1169f2812b0c7b4cdb3ed4e0bda936ac6cf7e0b588bdb7a139cb5888f06dd523c909
-
Filesize
512B
MD506e3d97cc579252c0279657e97c66f65
SHA19134e5031580bd6da6a5857fcb39615475e9622f
SHA2568eb393064bfe4ebcc713f8a741954d8f9ce139ba77f507e52bfe1a35f1906eac
SHA512423105f34cbce09e7c0367fbb8749b6c9a56cbf8ba417eb3bf261a73c1b6f4fbffdb085d6c1536c3dc84a39640e3345dac5aafa18f822426993a0fee8ba1125e
-
Filesize
8KB
MD5d1505a6ada793c671c1d82979430a182
SHA1ca427d2c1c7daec2d4ce136e38fe36b96c0870ad
SHA256c9abda4647e3b03056080af2baf0b2c79321e230765b29f2c7fa4bb7526d58f0
SHA51265d8cb5cd3add8e6dfcf50a29c17173aed63f2c69f4a37dc8d7fb838a890fa4fc0f367e188ad90ac299f8583d41a7a6076182d3acbbcfcd27b9bfd1b74581c3e
-
Filesize
4KB
MD576bc325228f5631656eb81e8f409939f
SHA15bef72f3da261acc82465fb4c42dc5505bac6021
SHA25688c9806600860f890c00d5dba1812cc5d13036afd866820fb190c3afbecf2e72
SHA512efc8092ea6d77d7ccfc3d4735f132f7e5ce0612562bcf9b4b09bd41158d28136fefbc2a44666ec3ff1bed1a80ce646c37168f955d132997dafbeaa94d7717a54
-
Filesize
8KB
MD53ab366ca8c8218be94ed145dea92a9fb
SHA1af1fb33d6570f2526acc301eed74491a83546d45
SHA2569bfa0a7fb52398f8eb694c1487a81cdf57d96e1c21a37252019236e287ffca2f
SHA5125983f4442e95238e47fcb9726afd704d64cc4402c3f6cdb4c9e1b7792b60614cdab3795f2cc299c0f5d2c210766ad11c9da5bcb946ce7aac8e7986eed0c52c6c
-
Filesize
8KB
MD5bc38f27bad808b9f83f7106df98e46ee
SHA1f7d32a992f339637414248136b2beab03f452197
SHA256fe3cbfa206054741e29f2290d372143c97cbbd3aeff961dedbc4105c54834f0a
SHA512ba0f4c2965071e1d00bead26f5b42c7e4dc976896bf070d77740d7e30093998f5a461f1d6893b6115379dbf6d0102853c6bbf145016da13bc05c1c7a857f6c04
-
Filesize
8KB
MD5a3b581b9c5b8dff70fd9876cbb56c323
SHA10c7859ca35ae7b501a531942b73ae86f21c16c47
SHA2566f6f5be477ac3157b6d09d6ae47633bd60eff606ef40e1fcaedd955cbc16027f
SHA512a30d54bc89cc0b1b7eb53d66b7b245635e5b8b378ba5ecbdd7b168936ace702f0d5ada6d8916746cf652f7a4791a755c8f1e4f043f524488e273ac07cc07d8a7
-
/data/user/0/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D6B0289-0001-11B0-4B311A6397C7BeginSession.cls_temp
Filesize77B
MD5c9f114f4f959532c7fe694d5f668a903
SHA1ac7203d0582d672499b4e9781ffb7c2822d9092e
SHA256f60011b8e6fad51be0c81eab6e12278aa445f2c20cdcb56c8633163a2bea53cf
SHA51255ebb00c23c43522ec7a06b3355f3dae69ca9278f3fcac9f7fb831e277591e482b42ac6b61671629d2d830e550673c3bc946d33c1b7bc1b94aa26caae635e5ab
-
/data/user/0/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D6B0289-0001-11B0-4B311A6397C7BeginSession.json
Filesize132B
MD5f4ac315ae8e37b768bd63148768da958
SHA136cff3b4b72d9e67fd6c0907b69c15162739f849
SHA2568d4bc8d7e8bc5511f82e883125725458e2ab49d4026058239b4c5587e1b5de3d
SHA51203d3d828c2a03603b8618e5c1617a76bbe141eb53bc6c56ee262e2ecd479bc70586b88f7b149c5bd0ae37fb2f9ed57b633c326aba3d8e617a9026152c99d16d0
-
/data/user/0/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D6B0289-0001-11B0-4B311A6397C7SessionApp.cls_temp
Filesize121B
MD5bca0192c7ebb1a7347f4e96a1396a774
SHA1bfd2b5ab9961970459c6c340b1ff1394bd43b491
SHA256891f1972e5297f3620f50ea21e6cf7a0e2b3030f1227f0251ba6d41a24b6f19c
SHA512c4a134b6ffffe5ec644552899c283b36da1c57b21bb4e79425d1af0efbd97b5e21d95771994b7c4be9ce16de2248aa5f3de6d0072518ac2ceb83bcdb813d7099
-
/data/user/0/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D6B0289-0001-11B0-4B311A6397C7SessionApp.json
Filesize235B
MD555325b5039efdc6e7db1e710b65c6d02
SHA19cd6126cd8b23e560e3117db1eddb21780c01952
SHA256a40a1793baaeee06222bda1e5c0b10652fed61eab3d46bbed183dce5bf817aa2
SHA512ba6791dcdaa730fcdefa930c4db91bd9c2ff470786f4a2c264c2d5792a5378baf01f25b4eb02cc7cdc47af325dae66124884de71bfbb3cc51a750b122c73c7cb
-
/data/user/0/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D6B0289-0001-11B0-4B311A6397C7SessionDevice.cls_temp
Filesize48B
MD5fd6372364a5c5c9cf8945ac3ea7a5d94
SHA13c798cab71f6ae7a81e71e58712368231230588a
SHA2567400bf714ca32b64dd89440c9d5ace4e0115ddce44d169839e465df0e1638641
SHA512a18b18d061dfd979bce1e0b769009668c322300e7174f51d2532e86dc6018769194507a106dd30b97317f8c1a7539d13a7baeab2900c1e00da7c74e899dab276
-
/data/user/0/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D6B0289-0001-11B0-4B311A6397C7SessionDevice.json
Filesize202B
MD5eeeb942571fa704cf8ae49731fbe9789
SHA1b5989c4cb932ffc779ee25bb3f7bfb79cf720427
SHA25678809f7ae96de01e3922b6d3a134c3f7e9a0cbdacef313f70e8d9345bf5fbd71
SHA51271e55c16f9f8fc936f8607448916bbfa1ba233b7120b8676fe11552916ac4dd3e3a7b0f9c31e14048933c8bb9c9d6d630ab7d28389f31749640cc965b2636565
-
/data/user/0/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D6B0289-0001-11B0-4B311A6397C7SessionOS.cls_temp
Filesize15B
MD5b3d9541cc92a9153d14e5160f8d8c008
SHA12e1ac80eb381dd82a03795b682f92020348c0113
SHA2561ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d
SHA51278074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f
-
/data/user/0/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D6B0289-0001-11B0-4B311A6397C7SessionOS.json
Filesize55B
MD5fc1dcee4e422d77e7fab7c08c8a41344
SHA1d5340127e9d5f735b9d33b9dc61c772fb0e2dc15
SHA256b843f05ed78cd137c272ba7f0ce8ede3aa853098a856863e51d5c223b58f21c7
SHA5123ec07617e3e1008572f6f2528de9d4b827050cc5a7cf19a1604c961f9ec370ede6f5fd83bfcc252c0ee286fe244ee6734046ef1aa638dcfc689cd4407a6a8f61
-
/data/user/0/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65221D6B0289-0001-11B0-4B311A6397C7user.meta
Filesize47B
MD54d2cada4285fc7094b7eb8ea036dd43b
SHA14f419093d131d9032669e66fb47ef2d31b8fd9b0
SHA2560058e2364c89db2cb3f67cc13f0e8bef1d0ea14de627ce9242fb85ed96b4a6a7
SHA512a865476f67b523448424aa65218d8256770be27bf6e5928386502fac25196a92d6f7c859cfc784591338f3b823f52b86552e3fbcb677f39120a274d3a3a54828
-
/data/user/0/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize408B
MD59ceb85705d8dc69b202e3f443200d9ae
SHA18f6f1da8d11c54b90d55316d44b82ac729340bc9
SHA256d359ae3d57f4d50ef678a2653a9a04bc161588543b22f8737a2005acde220063
SHA5129da833478721065442e33fcf8abe3662f11303b3d3ecaf6fec9920e3363ea5d47978941c4ffd6fe720ea412f113b28cac1a1ffdeb3e9fd7076d57739c1c2b966
-
/data/user/0/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize4KB
MD535c47fcc0ddbba48a3e44cd010aad562
SHA15cd5d0c4648ab525e83dc050c2373d8dfe980ed2
SHA2565eef93d90cf83246fcb998683ae4fedbc8d59c05eda7952ac12961bea67b22a9
SHA51245e02208f168890fdcacf9e1e353347ed06ad145a4a6ea876f798fec81fdb4c0c8c8e5d4412d360ae23210d8dbf8b4bc0ac1ad2abc64efc1503ad62bc62fb3ba
-
/data/user/0/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/user/0/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/user/0/cz.eternal.cityguide.bilovice/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_315d541d-3f7b-4d07-9101-2597b29f39a7_1696734573825.tap
Filesize329B
MD5f8ba76065f598d239be7da0f9b513855
SHA12dc070cf550a2ead5c8f7055115d7db03f9dc462
SHA25673b43a41a3dd0f1e76eae75032991bccdb67ad6ed7a7ef2c0257c30929c6168c
SHA512c651017607cc98f226f7bcfcd5d04acd9f30f9a363c691accf69b5782458c935497f3053aea793fee625d17c6883f75aec6a11c8cdda908fe3306a7e82a9180c