Analysis

  • max time kernel
    626781s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20230831-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system
  • submitted
    11/10/2023, 22:25

General

  • Target

    c4f03a8ba2c49933bc750a2a849c0299f2a19f5685e86d798da9ba629fd9c009_JC.apk

  • Size

    2.1MB

  • MD5

    b1edfd7aba1d45a042eeb82893697291

  • SHA1

    67d69aca103149f36e067617a15889fb3395ecfc

  • SHA256

    c4f03a8ba2c49933bc750a2a849c0299f2a19f5685e86d798da9ba629fd9c009

  • SHA512

    5c4e53ab79f3cd032172eff78b66a4198171e8f22ff5dff0c3056d33dbea2c00edd72a91d1ee6175f4fa94a3a6f1bc976d799f234e86922f8880defd1d03e040

  • SSDEEP

    49152:AEhKR7EFaDarTTnneg46ZLxeiz10gY6dm65m9uHajKMcofDrD/gnPx:AgKBaFXTnnVPBY6dmmHajHDrDop

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.MrXnxVip.global
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4176
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4304

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.MrXnxVip.global/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      8cb727e7d054b1f3937872845cb67baf

      SHA1

      ffa23a6259d1534b39521c7e0c8f793fff24c741

      SHA256

      a6f158c62762cbe0603718dc70ec63672ea75ba0ce5e3ec4e1d0d20442308d3c

      SHA512

      b3a3a81b06c6abd6a8321fa894c9c8cefd9ecb70db91bbc36dcf8261911dd0ca8c74e0d353153d194f85eefedeea2686a7ed64ef060411b06130be34285dae80

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      7c7537c032b86fb80cf41b31f083fe2a

      SHA1

      ab9ade300ced064074d906653ed896c03922a05e

      SHA256

      f2fb9d545b73319a138bedea498aa164407a24e8720b16dd98b85dbe6b05c032

      SHA512

      0082fb7328f494d774a245c0218b76d2789744b0a7d847310a782fd514f96aa79b219d1536dbd6bce9c25a6fccfe854e01e4355786afaa79f19e43ccfc9bdb04

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      0aebf388e3205b69ce88b12ebc2cba2f

      SHA1

      601f8dc2792981ac13fae34c74638bf7d7a85014

      SHA256

      3b0166acd7c0d6338f3bc113a24f84d9e26dab183f84fb0e83f4758ad4996140

      SHA512

      0c690611190c2a29499cde3121087719995beb754fbba86096af510cd30ce09246f02b0932f81241784b4d5ee7bef37a2cb651aa05cd9d02d9f25e5c2a3be11b

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      cd5489a384dbd09f3467fca440c2d6f8

      SHA1

      ab2188878e532d284e7cae7ba2c8e91394b0d8ab

      SHA256

      52c0d7d0eb1afac353459bee5e7fd4e84cca2838d1afbd80af27250af23331fb

      SHA512

      5eace03d6e2527516359a878e3359f098b6bde16cfb2aff2e616a46a2da1ce3f05da766cd8040de85c3194c87c7e7a7cb1647ddff0cd7d02272ad3901d61d23f

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      3e881d9a01ca707bed38018ac69f4518

      SHA1

      5820f9351d7cc8082de6e5686eb9f8fedf6fb830

      SHA256

      4a5bf9bfe9b032546f886dd5fe6717de78716734aaadab620c0444ed6df5151c

      SHA512

      8f0395c94b3a449f3c61e7117f400c7b8a12c23d3655be6772bce2c8aa0ec8d8be8000c5cd2c6e10b334ef54a4add5583717393c3239da80c334c45b8b392db8

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      7237409e0640cfab7bdbd429bf821a3b

      SHA1

      4c3da934842f8d4835dfe2a9c275a300e5123309

      SHA256

      5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

      SHA512

      c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      745545445c9c0fd2e7f4ac5df48e8b19

      SHA1

      87c3c9ce557abf15c9ff6df858c5c88143cd6d48

      SHA256

      bf79fb64b454cb4c1d6c6ad49d22dedbb344fff9b34a23490986a38a33bc4d87

      SHA512

      b5d77a7134fd634ef1e9a5b4e2727a358a9e1d95669fa8d72b4e5514428f6e2c96bdf0efb9bcaef0112618ad36044b47f39f9a0326e4290ee59df1e4a4327d67

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-shm

      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      23fcddfc90a1657adbc26ce669e649d4

      SHA1

      a89ec7755465dbb2a01223dff9e2bf584f086950

      SHA256

      117f278c4f09565f69d33f3e63ac3d00276f0335175efdf5bc947e06ab99ef09

      SHA512

      ecbd3b1ee3a6533510363e16546801acc0bca9fdf0f168a64b8155bb0c32654d10b441ac761c2fc2030404fefa9fd07bc75f9d8bb979c2fd5f99bc89a66289b5

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      6acad7271dd726ea54e5117aef9d2a2c

      SHA1

      5f2dfc389198a999c4ec99a63f3384c71586e828

      SHA256

      74ffab312514703de99d7975f0a580912225ecd6b73b06b2f477b87db942a731

      SHA512

      8c994372e4c58e2e1d01e31bd6e4fe3f6021463a37e3806346900cab379a340bec2ee4778f0e8e3ce199cebc0c5880a3d4691c2e1833fc6144d5339b050b55fc

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      a657f9326080de2bc5e61363c35e32db

      SHA1

      d4c8b709b052ea52d53d766fe7ecd20159a9732e

      SHA256

      fb1e41e5dbbc1c9d404bda7cc4706c2982c233a1db16a800a6df05123ecb1f64

      SHA512

      3b7379a26190b556bd7c2f02fea559125b5c23e4f6311f604b3abe1a2acc66f40ac8b9d27a95af277fee8f930e142f15fa3811472b1bb4626ab277ea2798395f

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      0af9491c42368d0757de6fca0ca5cfdd

      SHA1

      310b265f31b56d3bb6b9872c52adc2c677f867f6

      SHA256

      c346065ee49f12392ef426e4882d66ad3b4f5d374bb6a0851f76f95ad4982a2c

      SHA512

      319ebe29fef966862edd0e47e9f3fe6d251255fec24a0e71defd466b1f4094decee246af80377aef9ba28dacbf8ca829d4cafc7b23bf1fd0f60ffd4a7830d4d8

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      3d70513c02ed7730517e82591ec2475d

      SHA1

      1e5ff5f9c25bcf5c465e4e7dc1c8615ab91cf278

      SHA256

      7a312bd362e4e7c9552c5b39db5498d84f9b186907683d15bdae5d81e05cfc9f

      SHA512

      9d652429f2026295150dbc1d675a4a418ab5f26749c50d3350dc6a7a6bbbeb0d52113936516569d93b1d6136389b679c978e4c5333f1cfce8144779327b20ed6

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      36KB

      MD5

      fc9000d6d819c39ee62afbbeafff6bea

      SHA1

      6dbcbfc70dc593fea7937514512edc40e20030c7

      SHA256

      1357301c519745452e5096ce16f4e445f99f471c384bd1413026da7f6b180ec3

      SHA512

      793f24bbf1314573054b3f70f375bccd17074fedc476b53f2e50d1db3c602543b98c7bb26eee53e83bd463b3d64d0c7a981ab00f3ca002ae4fa31ba150e6eda8

    • /data/data/com.MrXnxVip.global/files/NULL.txt

      Filesize

      10B

      MD5

      68e109f0f40ca72a15e05cc22786f8e6

      SHA1

      db8ac1c259eb89d4a131b253bacfca5f319d54f2

      SHA256

      872e4e50ce9990d8b041330c47c9ddd11bec6b503ae9386a99da8584e9bb12c4

      SHA512

      8ae6ae71a75d3fb2e0225deeb004faf95d816a0a58093eb4cb5a3aa0f197050d7a4dc0a2d5c6fbae5fb5b0d536a0a9e6b686369fa57a027687c3630321547596

    • /data/data/com.MrXnxVip.global/files/PersistedInstallation1587104950751809089tmp

      Filesize

      570B

      MD5

      0e4c3fef16592d1c0a418305cd6cd3cf

      SHA1

      72f4c156657da05c75e064f9f7906e2f258e7e04

      SHA256

      87316022b7d7a87ab9036324bc5b7dbf22808b0277a0482d34660cb637bb0e31

      SHA512

      c9e56a78c84563b20d4e9fb2d6018f823015eb07f05ca8681b77e8c5a3aa88d646aa6ffe4ac57d2f64f5a2f43d9bff2f81d57300757092e1be93eb931639d540

    • /data/data/com.MrXnxVip.global/files/PersistedInstallation4881969508647176373tmp

      Filesize

      90B

      MD5

      77ebb22ebd84a60f57679765e6aad578

      SHA1

      6745ad1ee993105e3c0565f86e5750bee2f67ba9

      SHA256

      fcdb800bb41e2016676f98659a387d31575a9cd593fcd705d08883e9ed95aa7f

      SHA512

      ae58c101a8650e5736bb9d086daee3e18f82f42945057b307015f388c913c6cea1dc7b957345329df29b9d5a2989834c48c289588b35012d7851bf7a5c51a150