Analysis

  • max time kernel
    643499s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20230831-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system
  • submitted
    12/10/2023, 00:47

General

  • Target

    9b55f8708c349c1360c4fe60b22993a62dc16654b569f74c467ade3b26567032_JC.apk

  • Size

    2.1MB

  • MD5

    87e86f2ce5624ee7e4f5d11a9b3b9cac

  • SHA1

    e808d0ea324e70340b1ed234587401b35e2609a2

  • SHA256

    9b55f8708c349c1360c4fe60b22993a62dc16654b569f74c467ade3b26567032

  • SHA512

    5be8ab11c5333ea19671e401c9e0879ef4d3a306a4c7124405e32f032da05b948431b0ab5774cdb8160d17faf4a10153249feb44252a99c67d82371a04ff7a32

  • SSDEEP

    49152:AEahFJ/IunV2Hk3ZRBfIaqU/RK9XFhRSIt1bovH27Gxaz6OEb5CbsKWP9FF5Qd:AZhj/IunVuk3ZfqUc9XFjJPohxaW1lCz

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.MrXnxVip.global
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4164
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4282

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.MrXnxVip.global/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      0453b5665509d675311b51f9a4a0963c

      SHA1

      02c132ed65076964b698bb1411dd73cb045e840a

      SHA256

      3bccc796cfb8249129ca92f76f81d9d3b2bebb9f7c39a2512eedccd09b31aeaf

      SHA512

      dcce97c7a0b587b28c11819ef22cef84e7337632271f695cbad02ccbb474294fb098c03ec9f91c2706b86558fa4e78e5c4b63b299c19c1dddfdea8ee6ad4aa71

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      f512298db4ca69cd89f37ca0383dd8c5

      SHA1

      4ef1bdb1d776af75a9d84ca2f453d24609d7b38d

      SHA256

      39cbfc687264fff01a32679f7905d37923a6761fc84a3e7be6dc1e2e8d8e6077

      SHA512

      5d6823ffd0ddcac3f44301e56c85e5e143780deea45c6ffc97ff1693685f21cacec40806d3897b0c604e97aebb931ff56ee5f2c3f6797ee41a1546d1084756ad

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      e3a3433e8370f850bb1a4256bb14f2d9

      SHA1

      6306ca3a10a066e25f44de1b16d2d83507e9c4d1

      SHA256

      b3a27db92e3ceb3672adf50ba6934eefc64ef4343ee1010d03e8a531ec5b4485

      SHA512

      8cf376db4fbff229ce29b5b7c0369becbebd6cc65c28c3b4cf504bd6c727792a9c6d9184c130ee6f96ea702d0231bf55cca3489034db51ab0713a2b76dc35647

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      e3ae2a2c415f49dcdd31d9142fa028c3

      SHA1

      82c2ef6c3961b56380f5029352ebe77f99bf67a6

      SHA256

      b0a7539becb1fc96d0d6661b63310a3bedc7608d30e5c26817dec569194a6108

      SHA512

      394a6932a73a38f02a0480f1ffed1154404906b125980ac597b3455ef2f454266577d4ce4fc4ce586caa7977d7e84d4acf4d21f9caa593f83e03f6fd4d5f9a65

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      3e881d9a01ca707bed38018ac69f4518

      SHA1

      5820f9351d7cc8082de6e5686eb9f8fedf6fb830

      SHA256

      4a5bf9bfe9b032546f886dd5fe6717de78716734aaadab620c0444ed6df5151c

      SHA512

      8f0395c94b3a449f3c61e7117f400c7b8a12c23d3655be6772bce2c8aa0ec8d8be8000c5cd2c6e10b334ef54a4add5583717393c3239da80c334c45b8b392db8

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      7237409e0640cfab7bdbd429bf821a3b

      SHA1

      4c3da934842f8d4835dfe2a9c275a300e5123309

      SHA256

      5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

      SHA512

      c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      1bbb9a5b7e7e14d8792bde5fca690c9b

      SHA1

      d438651436bc76507c0f56a47cb437730cb2e405

      SHA256

      22cd2304a5c7f0d42fdc14abb964d85f1e877bf52fd8968d3dfb2e3b048670ba

      SHA512

      3e82056c479811616efe8cf4ea73b36f978ef8e82373f408bb943e3c98af4c611c61ba6cd93315e048d311326b3fdd400b5ba2fd9673f509882b7d6179d7e90f

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-shm

      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      155c6194961d42011e9051cd4806c292

      SHA1

      10adc13f1106a571851a66a7c69bec61beedff45

      SHA256

      79ac73fd04ce50ef69fa9524c82f9069a51419664f9f14a010df0fab9906e3fe

      SHA512

      b2838b5a8de08b2c5c131c369a4b214e4068963fecd22b923ba910edb1be3e5bbe9c2a0dce09bad4f9a86921e599c508dbcefc0f43d075ff439524b2f0465907

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      24051209715153fb696fa3f71bcf3106

      SHA1

      b0aee49e069e45462c60849e4981ce82a2fb189a

      SHA256

      f84862bca555503b7a2d93882b19a3d661fb024a913c2777573e24c78391a168

      SHA512

      5a2d63cb8e18e320841d3646667fb4cb1b951b141782e7fd095472fb51758cfc6ac0f1e7964e9d10837926e9644d325f879672670c29bc5fafdb7999157dae8a

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      8ceb6f5c6bc43361dd736cbe0fb683f4

      SHA1

      047df132a66f5ecfc0d1e5239a25f8008d50a239

      SHA256

      2f4e7fc3841aec0808dfe01d2eb3ce80c8257093c4f7377fff7abd5a904a5f45

      SHA512

      26b4e0b7a5b143e7f65c998266a383cac4beb81a7feb0bd8a52570d7438aeaa226893913545f6258aef0776121ec4d57dcf6e729873974714503b9fb9aab3810

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      bcd33f955c61095d6c8492e323a45287

      SHA1

      c293cb4c13b607ff3083e28eef31a94c032acf71

      SHA256

      700d5f52fd95544eb4a02553d25d9453525441a4bcaf1157c9e0581b6649a880

      SHA512

      6ddc9f307bcfccf8a55c5860f7912bbd53b4f5f52a73b6e5b8391b5f38bfcf6af4021c59e26e89cdc9726b55be5a3f56c582d1f307570bd6b6e89ecb77d2259f

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      7aee11e7cb561d409fdccfc58c93fb44

      SHA1

      192580b9a97cc8f64e53f67245f6ab92536502f1

      SHA256

      3059018dbc043f8b50c7d759b627f0fc79a943c5e67866674805766fc281951f

      SHA512

      b6bd2fd8990689b5d7c10a423759068c0aa1986aadb11f217de60fa539c4630c8f415375b91dd8fd85a65765d04f440bf06ffc8ddd3ad7262be5b57d3ba8a7d2

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-wal

      Filesize

      36KB

      MD5

      f316c46eca348ee6de4030fe04dbb7ee

      SHA1

      3c1db64acb0a66b104ecd1783545c9836f9d9fc6

      SHA256

      d4e9ad27e88020bbec4c81a21b33fd172f2704c229c68e28d27fce0e575cec9c

      SHA512

      f6372bfc491b52b53bd964ae4d70883e4b92fe63e00d96a6a1bbb6f4058a6f5568bebabac6a9527374f24ab3dfb629d7f0a580b0446d03b341610cefac020af9

    • /data/data/com.MrXnxVip.global/files/NULL.txt

      Filesize

      10B

      MD5

      68e109f0f40ca72a15e05cc22786f8e6

      SHA1

      db8ac1c259eb89d4a131b253bacfca5f319d54f2

      SHA256

      872e4e50ce9990d8b041330c47c9ddd11bec6b503ae9386a99da8584e9bb12c4

      SHA512

      8ae6ae71a75d3fb2e0225deeb004faf95d816a0a58093eb4cb5a3aa0f197050d7a4dc0a2d5c6fbae5fb5b0d536a0a9e6b686369fa57a027687c3630321547596

    • /data/data/com.MrXnxVip.global/files/PersistedInstallation4368919707352060759tmp

      Filesize

      90B

      MD5

      fcd751b0cd0c7100cb0dc3df20141141

      SHA1

      b2b45b25cdd97fbf5d29d19536aa18cf36b693e1

      SHA256

      757a93eae5cc07e84cb8fabf647129bca0b87340fc5c7f028b05a01cb5de5731

      SHA512

      0cda3d1160c8dec244d6a5058b82538e3fb33ea96fb192731c0b2e62bba3ca22cb8a0d7dad6affb2eb3c1b0118f6c045d21cda4a3938b9ebb47457be62067d89

    • /data/data/com.MrXnxVip.global/files/PersistedInstallation9123840302020288043tmp

      Filesize

      568B

      MD5

      d6b1280ab2833c8e6fe22ee50d905005

      SHA1

      4d88e6eb44df7b3d454530735fef25cd509f8983

      SHA256

      4f40a2dbfcd760fd873cbd307c8398637161111730b1738a0f7fe4fb1b7a886b

      SHA512

      af1e91d9a530dcb3febcb15a5b94fc3aca5b0bb9ec4c4b28e2137ba24667356bc48755f6401b7e797b3732cb822157eacb39cddf5aafc241222ca2c0b8425eed