Analysis

  • max time kernel
    710234s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-20230831-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system
  • submitted
    12-10-2023 08:40

General

  • Target

    f5ad5b62708c2786c1f465de8f0c17bf.apk

  • Size

    2.1MB

  • MD5

    f5ad5b62708c2786c1f465de8f0c17bf

  • SHA1

    7cffb0323df716c48ee442452959bd948efd371d

  • SHA256

    1fbf256b1e8d02bd2bb92e8cfc30f9d8cdc9c63d277319e58b969a2334e0183b

  • SHA512

    99ad9e9942a50bec4b7546960fa8b8d084e8e1a621ca29f4a41b3942e4604ff0d2aefcd2007b4947ad4a7469f3d29dc73734e290138b5daa5031698171d449b4

  • SSDEEP

    49152:3EiZWHwaDXXtcpx6d+i84mP8IVrswDTjUssI6OEbEhUNSngX:3HkQaLtu6cTPV5sqPUsw1U5M

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.MrXnxVip.global
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:5043
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:5171

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.MrXnxVip.global/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      0da5926e663c4b13d086857b0bef60ae

      SHA1

      1c34cd8dbde3ae915740ea25acb5bdc541ddd75f

      SHA256

      1095c32320b42e03ab5b6b2122c1a31fdf9ceca4d60a8a44636dabc8aa8c8f67

      SHA512

      4d14eff2a3aeb3c79ce56783f1da0730b44e55b409aa54b9af9c233f148fb10a58f3653e7b0847219a9bcf45c2b14160e55c86fd519816b9f8852a74293ebb1a

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      3489058bc4c18d344a72dfe6abf83558

      SHA1

      2b7a069a01273c1741c8abea34d884e8cc2b7902

      SHA256

      3183a3de8f62ed1208dc1d848ad2d6794f1f59a46e001e299e46baf1bd05619d

      SHA512

      17e74aebba60979342ae4e9ce00273c16514287ed04266cd26fbb4dbcf933e91686d425ce14d4f380eb6bb72ec8eb22bfa64462751c6063e49b98e90e17ea337

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      1971d9eee5d2d4d6662317002933a795

      SHA1

      fba4e46f6d21d390664a84b083097be5ea6c26a5

      SHA256

      1bf3c056096d8f2b30866b7245a431dd08997785f337fe6a3d2b49205ab788b0

      SHA512

      5755b2807eb143d1b9129f673e6e8dbcc5e7b78389853bd676763560905aceb2a00333a6326d80509954952634d0a23a8e46611b2c9825bd729c48f5e171ac01

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      b12a471f55592c0237314907ae1b98d3

      SHA1

      3f09546724157c6666208b4c5e9da6465a360352

      SHA256

      5cc024d74caeb4a09eb17e2b7563d316e31ae61d93f6eefde44dd2f7a4734e6f

      SHA512

      ee76dc4058c11432cdc200dc43e595081177f25832434d6c15b4e64fc023ad94ac73ed8e124aeefe6094ffb679686fc48c26f7568a92f64a1a9909e736e037c6

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      adf6082723784327d7d1b34adf974e7d

      SHA1

      b1502f70eb881a1dfe41139cb719fefb877ee37c

      SHA256

      252defb835b04f4af7c59bde7bd119664e901928f1373171a287897e729cb2a9

      SHA512

      762f146c452e590e0e3015a080e9821b5488551b9cca7a212ceb11a853ddf6b1894c99d09ba20e6691f5078aaa8e17a6ed66dbbe541eaee152978fab6884e27b

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      eb52a90bb70b76e946b62f50b6f7fb85

      SHA1

      42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

      SHA256

      48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

      SHA512

      b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      787a57b7a2d7e3475f536c729e44fa95

      SHA1

      e8fd840bcb41d1ff5a51899abab483044b742e7f

      SHA256

      3a3ba13e8a29c233e8b8f4022bd72115b01f678512a1ba44913ed280934385dd

      SHA512

      9b57949de4a077444349e38247837cb631e405f9d6b3725c48094f6af85a44a03977cd0faa71947c267704c4795e3cadfac0ab275bcf935b88741970c87d9e74

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      d123d5b978ec1ce520b8b3306e0c08b8

      SHA1

      34abad80fc85dff47357246eec06b19e3777495b

      SHA256

      00e4479f06f9c34446cc0d2de378964ad07f298397325cfe98b1926c7f081390

      SHA512

      8fc18c1e6e534eed5179e20237ff87c2b75f3c56b346bfe3eafdd2dadcc2b13f49eaf74c0437d10fa2d7c5c6e08dad071cc5acfffb6c3c5570f0d4b50deee345

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      baa0c67fa6f57fdbea6a37a09bcb3b99

      SHA1

      ce1b28d7b052573de676480a2cc6243cd00805d3

      SHA256

      3eeb92e3e536ddf829b682fdc376c0f8bbcc624a3dce814658e4371ebbba53e0

      SHA512

      dfa88c0cd21b742ce9526ef82b8c911a839c9d2ee1fee3c002da84004a2f4050cd472b46056f335f5955d2f34fc0ebd5aab9e9f9019d2530972e20a7bb9a7a6f

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      1d57e2d7a55857230a9869fd20128586

      SHA1

      a41b0a173576599e6d51ce5e12e83c7de1cfe78f

      SHA256

      1ababef9c0865b8c0a3fb7763666e8b7a07eda7f62fa578e35e08c0f656c86d7

      SHA512

      4b0e0a47f0a0f918c3a2dd88260585338d2c5828663719edf9cb05dea861357126483c33a1aec7656a4098a71a7804a1da2c49dbfb1fbef41e302731c142d884

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      6a4a9e99f891c8522e762f16e5d80ba6

      SHA1

      351406083418e6454bc87af7699893a64331a07e

      SHA256

      3a9a0ae1bed69b7c61f4ca7516f5913f38141dedfe95ff7e2d1c4ff9b94fcb68

      SHA512

      b97ed1891d4f70de5617bd783e05428487ce3f6eb074998a31fd6a326eca4d5c36088b9d8d11b03be055770bca3ac29499b5ee9a108d7beed79799bf1ec056f0

    • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      94e11e47cec61c1cc6074ccc0bc23fb4

      SHA1

      d1bbf4de0561096f36a059f7b07539f088084b50

      SHA256

      ba30884c25347d60ff88cf753ddf59d97ce14ad514cca4fb69d65775de630182

      SHA512

      7d3cae5d360080fb7c3dd7317a82bd98455ceafc029c1fc236dfa37e608dfc527144ab9ed2f415219a6234cfa19f5110b59d0517280df1a98e51131065e3b16c

    • /data/data/com.MrXnxVip.global/files/NULL.txt

      Filesize

      10B

      MD5

      68e109f0f40ca72a15e05cc22786f8e6

      SHA1

      db8ac1c259eb89d4a131b253bacfca5f319d54f2

      SHA256

      872e4e50ce9990d8b041330c47c9ddd11bec6b503ae9386a99da8584e9bb12c4

      SHA512

      8ae6ae71a75d3fb2e0225deeb004faf95d816a0a58093eb4cb5a3aa0f197050d7a4dc0a2d5c6fbae5fb5b0d536a0a9e6b686369fa57a027687c3630321547596

    • /data/data/com.MrXnxVip.global/files/PersistedInstallation554127534990958289tmp

      Filesize

      569B

      MD5

      1f6bcf816730e6fe7b362fdb3a7fc242

      SHA1

      a68e7285b5cb94d3d0ffd882d8265a0a470cd754

      SHA256

      a3c9484d3434e9e12ff8adc80412cfed5fb54dbfbd8f65d257c91473b6780f39

      SHA512

      dad9eb9ef3c668f0200cd2b93c820cdeda328a2410022f2f5a6cae40935bcd3391caca67c633131b74207209b2dc113f485be83c32a186b5b67ab1fa4a225991

    • /data/data/com.MrXnxVip.global/files/PersistedInstallation6809403758763724866tmp

      Filesize

      90B

      MD5

      4abe2758dfd4d1e2bef2479525ebebb5

      SHA1

      a6cf30dc79274394506766f32e4046d0a21f029a

      SHA256

      5a552a24b8b888a81984ea9ec7ff8b786ed1714919e45899656b12c9e4ee6eb5

      SHA512

      947a91e5ce148cecad8c630dbbe4aa985dd31aedcecb32bd6bba7e19be177d7e409c925d4796df31238dae6b80cfcab6b2cc903e59f1e0f1312bcd1e7e1ba61f