Analysis

  • max time kernel
    511466s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-x64-20230831-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system
  • submitted
    11-10-2023 08:00

General

  • Target

    app.apk

  • Size

    2.1MB

  • MD5

    eb3172d644ce7672ef642281ed4dfbd2

  • SHA1

    ce3f68090ed8907f57d6078e9d23486e5db75a3e

  • SHA256

    35dd1004737fb01787411a6f527132ee2a05dfaedbb2a3e4d2bd982ad3bfdc4c

  • SHA512

    1afb34a1a68d61f579e23f1fbfac6d168686f36e5c4acba0d4a7371dde8d94df9c85bdd50772a9509350a58c58744b6038a5c64c84991325564b336a6d599606

  • SSDEEP

    49152:qRjilZVjRGZwHANQI4i9ER/87Y1lg+4BUrFKIpyPA2JvRjcOb:qCFmwH3i9EyYnaUlpyo2JVD

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.MrXnxVip.global
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4970
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:5099

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.MrXnxVip.global/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      623a692de44af57076fb6e5cb31ad412

      SHA1

      bfed21f6df1e34951b7ec9fd999d082eb5c04fc3

      SHA256

      69930430968ff80a51431a004eeb8b0516ca8a179ab14c03fd90a46b582bf291

      SHA512

      8aff79bbeb4dafd44021e85a8dbfea4a11a842080766f6566222eccb55d0e338d26f3fb2c54d4cb56e2aae6a071f3ac92912ce556db7edef7103df1674672f51

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      68b80b1161076b2735aaa7baed81c57f

      SHA1

      b54c77e6f115102a472b011037e86ae64fb2a159

      SHA256

      7035010be4b879fc89de57368e4645b39c1471308844957c1e56c5afd1396167

      SHA512

      3f30fa6a9ec19ea2ff1b82ff7996ad060b6a035baf76ec16061eaf3d5fb632eeb03e3be1723302c4144565608192351f4c2e7ed4565420eed598bf0584fe8396

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      51bb534e8edc18ff7d56d5585d4852f8

      SHA1

      347a99ac40ace141777819314f3eb4ec93e2a9e2

      SHA256

      c7c0e3a7fbe1106b274b983599ac345277510e9d384590e9782c038f2ebf86e5

      SHA512

      4687e2941eeeea88e119d810b1df66d4f3ef4bea8c3278a0444b168c9e1adf95274887fb58d2f6796bfa2de1b086c1501c9cf9a85e8695ec9c49f35f13a23864

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      d8efc128e0c9e3dd4034cd6584954bf5

      SHA1

      7f7505ff7b713b7c3ff1a0be5eb27b989e17b493

      SHA256

      45b523ac24fdfb99a9b824f414f4a1d79fa89924981d7c70bbd4b26da1e565f0

      SHA512

      d0ba34b339f2f6ebd12ed44dd3a0129f01de48d3614d77a93ab8278e4b030c7482e28826f645a985ec65ff2f42a3131e9602c2440d23e1138db88ced6da3304c

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      adf6082723784327d7d1b34adf974e7d

      SHA1

      b1502f70eb881a1dfe41139cb719fefb877ee37c

      SHA256

      252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9

      SHA512

      762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      eb52a90bb70b76e946b62f50b6f7fb85

      SHA1

      42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

      SHA256

      48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

      SHA512

      b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      9e1076c504a6a0045fa7762e2358163e

      SHA1

      5c1f7137be1430382ee18c01fe7482c46782854f

      SHA256

      4c84858e60176551b1238206b9d40434a7b287c72facfff23cd8615f79ebb0df

      SHA512

      4d3fa89520d5873fbb5371ac89f4f52a7f161fd955abab8553cc3e07f9f5c62f881d22161394db0cb864e937ebb476e73665ffab45e77a525c470003e536334a

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      ad94bd062df468a3dd3f82e15010afe5

      SHA1

      e964c4c1fad18dc5f2cc49e49e16bedeacf09ae2

      SHA256

      73043df24e9c07f7f3039f2c5303f62b0794e2b0d1bd522cfa542ecaed4a7497

      SHA512

      174f3a42df4f29b48b75da5c6314aa6fe5ca15d09df473fe5a879d7eb28f737ac519e4e21381f3a5483bab75a3a35c1256a43fe0e7249a08be0593ed9d461621

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      4ef66ee89429913f59a3f508b5a9046d

      SHA1

      be9c3c65318b8cf8df648a1f398ed823885cc1f9

      SHA256

      158b1e9b9a436372ab8758c2dd23a1b472c29923052f8d68e13f734df6b601ea

      SHA512

      9edd06d6933d3c84520f47818e05f9932972df71f1580fd3420af778913097d4eb2253f3e4544cbc8953dc20628b6441ecd236a2bd0659372ed42d01020c5e92

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      513ebbbb4825fbc4c310c2304e7360d0

      SHA1

      58bcea924440bb83ddcecb599a2b8dcd5b095f6b

      SHA256

      f5f0bad0fc8df509320c5dd63055562fb86de459648e77c983459dded5ccfb8d

      SHA512

      69dc5f780b362f6f8c0df41a6ac663dbcf60dec44315fd88efa76dbc0f378955656ad8ec847cea62be86a00854f51dfa4bc254d5e186fc4cc63bfc058f5abb3b

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      b6bade7199784874e1cc1d77439360c6

      SHA1

      154db0cc172e3c632876c740e7ca5efa0669a7cb

      SHA256

      d2286f227316bb89eeef1a6c0d4a838c336ad3a907b68101483fef4f24a2de22

      SHA512

      4733c570d12b49f5f8d7b828236b312db448d4f9b923c600b4de3492709ec31b811409f04b6738164e46cc9946ff7aceccbf9ab91e90b4549c083720a724e257

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      8d2fc7f9138736ffc583b4768bf06176

      SHA1

      dc17adb48e4455448a3662390be2dbee01471b08

      SHA256

      3598fef9f1f1d301f036dd3217159a3110194890664fb3af6044c4227abd7c9f

      SHA512

      09a987f94563de78e65334630d76accef3765111a0bf1c41fc29ef63f69190c0db9650d0e7875d5a590ccd16e1712adc3929c54b3f1eb141731c0348591cb043

    • /data/data/com.MrXnxVip.global/files/NULL.txt

      Filesize

      10B

      MD5

      68e109f0f40ca72a15e05cc22786f8e6

      SHA1

      db8ac1c259eb89d4a131b253bacfca5f319d54f2

      SHA256

      872e4e50ce9990d8b041330c47c9ddd11bec6b503ae9386a99da8584e9bb12c4

      SHA512

      8ae6ae71a75d3fb2e0225deeb004faf95d816a0a58093eb4cb5a3aa0f197050d7a4dc0a2d5c6fbae5fb5b0d536a0a9e6b686369fa57a027687c3630321547596

    • /data/data/com.MrXnxVip.global/files/PersistedInstallation2132030398795386814tmp

      Filesize

      569B

      MD5

      8510c21d8ac33741a3eaa669626c8310

      SHA1

      c91291c8d6a3d11b9d911deee2d1ac71ba32ab93

      SHA256

      115cf6d8711d90a10de64a2f5a772fdc4b6a15ff74cb09fc7259027e15f62528

      SHA512

      81ea538ad4db0a3238543cf6185a8c28849ae9b0ad20e2270492a82f83f8cf7a21c955b6ea4e7364fadb191a15a03536860cd9ef4182b16fe0ec0a79f087e50a

    • /data/data/com.MrXnxVip.global/files/PersistedInstallation2646633554240353125tmp

      Filesize

      90B

      MD5

      5bb6023b8f2ff722f99ecbf9443ef400

      SHA1

      8c4bdb01882925f82518a267114327e1e68891da

      SHA256

      a864681d550fa4c046579dd4a305b9fff16b97cc3652eeac304005b786348b4c

      SHA512

      5cbbd678acb15bd173f6e5b761cb990a62e83ff81ade3c5fd91110bb34f65b4616e1a2d2c4c4e00817cdfac25f6d55b7f9ee3759f8f3026fd0bc896dbd441ff4