Analysis

  • max time kernel
    912494s
  • max time network
    136s
  • platform
    android_x64
  • resource
    android-x64-20230831-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20230831-enlocale:en-usos:android-10-x64system
  • submitted
    16/10/2023, 02:49

General

  • Target

    saham.apk

  • Size

    2.1MB

  • MD5

    08be09bb5778a2bd10d53b66add1f045

  • SHA1

    09a93a841355f3939053fd5dcaf7cefaee4a86c9

  • SHA256

    5b3f08582ea2e823eb672204c64ac1b563540ae9c21f18a85ce852b876877d28

  • SHA512

    62661226bec234601cfc9ccdde27f8f2a7e03f14b0a0ea50531dcaa2a9d826442e9575669ffa1a8703b356292755859cb70d73b402016a327a59fd6a461c3753

  • SSDEEP

    49152:AEPPYpQSYdZaOpmKT7xrAacWxhSifeEZa7AFsxwQ3HKOjpHS:AsPwedZFrVFV4YfIwQ3Hty

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.MrXnxVip.global
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4972
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:5142

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.MrXnxVip.global/cache/~test.test

            Filesize

            4B

            MD5

            098f6bcd4621d373cade4e832627b4f6

            SHA1

            a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

            SHA256

            9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

            SHA512

            ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

          • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            dc83c4ec14884a87d8d6fbaab34740a4

            SHA1

            6ed8908b789b74596a818f86eade8d213d840fa7

            SHA256

            da94a14825d6267d9d7cb9f4cefe4adc865fe13a167f35efefb743a549f9f630

            SHA512

            1148a90b1f0ac3a582ecf0296c9451d4297134688431c8efe6ee2e17bb431ee6653aaf9fd2237f8224b5834540e0284a40ea3b9647ab99b565dea75d41705986

          • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            22741a37663218fca70a27b68980bc0c

            SHA1

            3aa02e4c6040aac93e5c812fde5151f8bf3be6df

            SHA256

            fce792e65f2205443dfcff20ebef082bada36987058e6bdcabf3f9fd1c3f076d

            SHA512

            efeb61148356374fd3ce4861c90107968f8e7ac9f4726261174458db7e5ebb72736d1ff7377343ad401fc9a961e42ac87fa637639605d26131948a7e9d64d798

          • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            5047c9d6e4795101dd6a70bca012c36b

            SHA1

            a8e89f0ef13ad8913f5472b8912865f2286fb24c

            SHA256

            78160caa5782b85a59d1dd45c098b4502aaf29293d3e3850228e17434cee81f7

            SHA512

            e16d15b1990ec5b085135f2c4d4d53b5dbecfa2bbee2e3fbe92bb7a26dd6c5a10e379999977fbb33cdc3b2449ceebc2c4603932631cf749adb9922c89b11e3ab

          • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            eb52a90bb70b76e946b62f50b6f7fb85

            SHA1

            42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

            SHA256

            48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

            SHA512

            b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

          • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            f0ba3d5552fce20e1b35152b056f1004

            SHA1

            761aca5662699b190a597ea661209b6d79c2aef7

            SHA256

            b6527c74de944df2dee1f009df3a75cde4c45ab5e8bb0cf2c084df683739f4e4

            SHA512

            2d0422c661b9dfdc5a15332fef2aa43da40d3df2bc2cf1d26524dde7f18a0156194cf5445097de3441738613005a100b604e01418ea7dfd41a455f7db9daf595

          • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            63cd46deeb2b509c860baadbfaf939cf

            SHA1

            05313c200c415e48ce039d7d53d6f5a1a61748d5

            SHA256

            190253a2c20faf9224022ad5e3033a180c211e8fd7890a5a066473341e6898f0

            SHA512

            de9b900b086a612006456f992178a67d3991c2fe7e5af20eb3816d028c1bb8ed9a41bcdaf35ed9da0db93bb96a4c7840a1cac0069b599eb60271a05a7aa68097

          • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

            Filesize

            512B

            MD5

            0d73b73fc57d3b7db7fb1eeb22dc1056

            SHA1

            570d3fe7aa502d90fc79d29e40b1612daf594bbb

            SHA256

            14ddf7b7dc938d1ced8c179186921f72ba2c56e6e03ebc4c14f4fc3cc4f28062

            SHA512

            7df9c93982107d541eb44274d11d71c2d5676104bfe8fdc12a6f26779b0b98a7f1717093808cc7862ab3f6328db3c041456537bc21d474f6d60016165d868d90

          • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            1d27edadbf5bdaaae46d7f16e982a494

            SHA1

            43c44f1840c3c4853374a272a3adb3cdcdc756c8

            SHA256

            ca772b66da6bff86e10ae69be61e38f080adb8e2df7f7407c99a06f156eca477

            SHA512

            cd175a70a981b343adb8176c8d6300b2b41e44671e2d6c8cd15777d201495bb0a7b3675a7d800610ec36bc55423da4ec6391659a630d37ab23fce6d015d534eb

          • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

            Filesize

            4KB

            MD5

            b05f3aea44076c13fba79e6940767da6

            SHA1

            c3e2a6a4ce8d46e14e8a939e8552d03d22617a38

            SHA256

            142aaa097c8dfe7788b4f7c6a0184397944432b9d264da03a254d3acd24f1f89

            SHA512

            7a3e299c0162379ea3cb0c5bcd5b8dde3f583a0fe2c54600f0dce64a8aae8dcf91a27e6d4484e5c8c6d5a7e58237496852afec0e3e05da27f34c3684ddfe9e6c

          • /data/data/com.MrXnxVip.global/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            1da73c2ddfda39ef5222e654b1dda896

            SHA1

            172043f163675d6ca37bedb542a4d214d951901c

            SHA256

            c566950b32eaaa1f65cb28d8a8db0934058ea8dd2e8ac25e935ec0474a306162

            SHA512

            069b26f6869225e96c822328d58d9523533f0caadaed8bf980f3811bfd6b14a229777b0638525698c6785751ec57598bd8f1ef591611ceb439e479dc80168a35

          • /data/data/com.MrXnxVip.global/files/NULL.txt

            Filesize

            10B

            MD5

            68e109f0f40ca72a15e05cc22786f8e6

            SHA1

            db8ac1c259eb89d4a131b253bacfca5f319d54f2

            SHA256

            872e4e50ce9990d8b041330c47c9ddd11bec6b503ae9386a99da8584e9bb12c4

            SHA512

            8ae6ae71a75d3fb2e0225deeb004faf95d816a0a58093eb4cb5a3aa0f197050d7a4dc0a2d5c6fbae5fb5b0d536a0a9e6b686369fa57a027687c3630321547596

          • /data/data/com.MrXnxVip.global/files/PersistedInstallation171990457145832007tmp

            Filesize

            90B

            MD5

            398f13a11b25399227c49048ec403258

            SHA1

            30b62ed22b87c5a12fac501d625627fc721c73bf

            SHA256

            8bebf73a8cc0378a2a4f533f4acbaca12dfbbbe17345404cfa1d8f8ec41e6441

            SHA512

            d4effea8606e603589c2f0e0a2f75580c90b3b665791328c6aa4739f2cf60a6cf99a4ce6a6288e152af14e553bee257b0461e56d42d224dc38d1dcf13698d868