Analysis

  • max time kernel
    511846s
  • max time network
    145s
  • platform
    android_x64
  • resource
    android-x64-arm64-20230831-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230831-enlocale:en-usos:android-11-x64system
  • submitted
    11/10/2023, 08:05

General

  • Target

    app.apk

  • Size

    2.1MB

  • MD5

    310b0ee6697b37709c450eeae9622feb

  • SHA1

    3305b72036cf77a989d570db72a4f8c3262e285c

  • SHA256

    930d03984c56ff26d399a5fd1067dcef0dd93a47090360bcb16274cd49ab0122

  • SHA512

    d6aac80575e16ea514f05626993d0fbacc3616e6cd63a5d67b728419a31a4713d72ea63774f246015b9b90f2a8c9009884573392d72c24a165d59b93710ffc9b

  • SSDEEP

    49152:AE3d9ysCydl8V0NKLSqOf6UL10ZVV/nHhC50QBqktGRDpKVjFl:AaHrbl8V17OfRIVV/BWVokt0DQj7

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.MrXnxVip.global
    1⤵
    • Acquires the wake lock.
    PID:4425
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4665

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.MrXnxVip.global/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      119095d708a9eb1fc1051b48da53f46b

      SHA1

      d0073dce285acd2e661de3d1e49a862cad100fc8

      SHA256

      31e101b8fd164e14bba5ad9e8b2a9a76c720785867aefd98052a884e8aee58ea

      SHA512

      961098b806d880c8cd3fc1fbfba19a1e57db2395e2d1e5a8eb83fe524e064deace5582e42ff4d7d0f2c1e05682a4153d3ed962813313da9be6a8f7653b8dc5ee

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      8e8df4325c00895bc7ed6f533f1f4d8d

      SHA1

      22462192371f38bc47af02e8cb9275f1446a66c4

      SHA256

      05f320bd705fe77c1e083e5c2573ff764b0222bd27927a21b633d4a97e27143b

      SHA512

      2209a3ca7f833e82a28cb1232841a63a8b7255afb7c0a792031d99bc0adc6e7cd2f7442a2bfeb229608b90d4c6e4a8221e554efb4eabb97d92751a3093ad7fdd

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      a119c937cf20f699c46fff2ada135010

      SHA1

      d65095a8e085bfdd043a803fca13b9f4280f7dab

      SHA256

      339d4305ea7bd18d51960f1df24a50730a3583e9c9b8ad6844e417362fa2d849

      SHA512

      b5b426e839a73cdb3f93a1498e48acf29e5bdf2ed45b2b89f626cd04e30d6d9ed9f36aeffcde99179acf1c00913e376cfc1601748e4e60daed692d46d82c03dd

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      00ac60c3b436064dcaec694f8b9a66fa

      SHA1

      5d38dd35fa82b3766dfa87de88432f092485c759

      SHA256

      cbd81e7c0c5623cb02dc8c937ea6e29d131cb05a666919e7f9b39f000ce692e2

      SHA512

      44b06ddcaa071a9c6e7d5fff1a982ba9324af5a88cf5313623a7745f2be324291bafdb86ed5611a953e2ace7a523f35ee889ef26420b89d5c2d472c151bb5c15

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      de82e2c94d2718988804b035a46d17b1

      SHA1

      705f5ff19093ad209f2a666085d6ccaed3bf58a4

      SHA256

      29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39

      SHA512

      68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      d9cf75fdd1c2292d986f6c3d5d60f2c8

      SHA1

      07ecb1d3a26d952ae5fecf54f36699ab498510b1

      SHA256

      2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

      SHA512

      442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      1d31f50428d3bf415065a9ec88c52eb1

      SHA1

      e4fd0965b0be518c631d18a70e771bf120522b6a

      SHA256

      7f0a15aef0ff8f79b0279e8f7168df8a69e98e1a852afa7103edf89d0d6cea7d

      SHA512

      9f6e91e4ae89d3ed24f6aecfe7eb8b1ebdca44e3bf5c2fa4942612ccdc482539780f542f189121930dc1a504a4ff8f4ca7ce2628392c7a146950ff59371b3bf0

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      c4cf4557c81f78840f7233fdf1b2580e

      SHA1

      3dbf33674c5e4e0a216e12e93fab0b2840a36a85

      SHA256

      cde728a0d53a51467df23d9bfadceaee3e186a65bb6abb2a21471799949f740c

      SHA512

      a2720fc34c0755b5064c940ef5d1b57ac77eae371dde1a75ed940d821948d7171620e9fdf3a47422dc5426d5dcd61efa0b19bb6b4bc6cb3cac9330b629826b96

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      c60f9bed1dff7d884dd2757e279f9d60

      SHA1

      75ab097d05a03a1f617b31b10b07ebafaf405fe5

      SHA256

      a2c774f3e89edb9d0543feb810628f042bfeb515f78b9f12d4333eaf2c362507

      SHA512

      a52ad84cbd961bb304fb973185904a69d68c89845f5c9d082e2d757c64cce60fd1f7229e489a05cddbf2c5791843c9a2713f858142f178e6a9f57493c6183cf0

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      be015068c70eb1b2b568e6035b3cb639

      SHA1

      52b376b45b8e01d42e04de6ae219e085afc8de1e

      SHA256

      b6a37d5a79fc77151c72c4ee2c602a882e3920f1a2946e2814aa8313012e6f78

      SHA512

      13b809b0a85d17eb12f74d55717b204d8e6e267e6e7062cfca579c3c66bb780400aa05dca5924b5b2c0cea05a44b1f99b4cf3adcf5ebc6519be8f0f37d9fa31e

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      a7bc1c01cd42fe5dd071bd9f75c7a6fd

      SHA1

      fa9d5a3df3643e1cb2857283b5feeed17d388a0f

      SHA256

      59369c652341061efce888ec053614cb838937415566d5625bd035f0e0284b3f

      SHA512

      a593c08db988f1792b6cd605b33ab104a737def20b2da149c59da65ae49584a4cfbe7d2e16af47a26c7347f255862d00b782e9ef6306c1959d614521c90c7b66

    • /data/user/0/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      03b60651436d10c37387c9956126bbd7

      SHA1

      60ee605ca28099904a47456b3118292fcb854a57

      SHA256

      9e44b615be280e06bcb9a81b1dfcb8bf74b0bcc3f1ac691a56718c348e4a32dc

      SHA512

      5ffd7e654e2f51b395da405579f50c3a2f358c077233563c2758f371cb0e056c01b706d5bc31130f6960c869abcbc7a4fe7aa655fb8d9ef2a2c9792b01947e9d

    • /data/user/0/com.MrXnxVip.global/files/NULL.txt

      Filesize

      10B

      MD5

      68e109f0f40ca72a15e05cc22786f8e6

      SHA1

      db8ac1c259eb89d4a131b253bacfca5f319d54f2

      SHA256

      872e4e50ce9990d8b041330c47c9ddd11bec6b503ae9386a99da8584e9bb12c4

      SHA512

      8ae6ae71a75d3fb2e0225deeb004faf95d816a0a58093eb4cb5a3aa0f197050d7a4dc0a2d5c6fbae5fb5b0d536a0a9e6b686369fa57a027687c3630321547596

    • /data/user/0/com.MrXnxVip.global/files/PersistedInstallation1782979049155832764tmp

      Filesize

      90B

      MD5

      bc7c414d01daf60fd033018901f1fa54

      SHA1

      807776ffd1f95b7d60f00e7295bfa8a91865dffc

      SHA256

      bab4fa200d778e4ff35ba62b7242dd6ff8995b37adf9800a63339a7fe7eb8900

      SHA512

      3484e579854c5117e5c41c30b457b42989ed2da14cc6964de730b88069407b88b58afb5f16109c77f04c0ebe32b2524867cde1baaff9dd3f207032bd1cb2df91