Analysis

  • max time kernel
    2500627s
  • max time network
    152s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231023-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231023-enlocale:en-usos:android-11-x64system
  • submitted
    03/11/2023, 11:56

General

  • Target

    app.apk

  • Size

    2.7MB

  • MD5

    692fcafd124e57b9c1b9035c0a108aa1

  • SHA1

    10dadd7b5e8ddfd8c6ffe0f31129a27d01a54783

  • SHA256

    e1346ae88753a44d85451566789a5b8c3b3423e2868d41a89378415aad04d688

  • SHA512

    d7aeda62e5509c18d3e82ce7fd50201061ea36bc641ad126d7a102753dbad6beb90d73882495b188e29c6a285a37bfb87324f48423d7c4985bd18af65081bc59

  • SSDEEP

    49152:+/6EtL4/LrDlfe18926e+52dr5z039Tmfu0gExL33ZOENpPd1PaVEFM:0624jZf325z039TmfufExD0ENZdsuC

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.

Processes

  • vip.app.com
    1⤵
    • Acquires the wake lock.
    PID:4405
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4465

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/vip.app.com/cache/1

      Filesize

      4B

      MD5

      b326b5062b2f0e69046810717534cb09

      SHA1

      5ffe533b830f08a0326348a9160afafc8ada44db

      SHA256

      b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b

      SHA512

      9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de

    • /data/user/0/vip.app.com/cache/2

      Filesize

      690B

      MD5

      bdd89b9d5f598ff13f4d9eaecfe86033

      SHA1

      fc4926068a2c242847710dd623f0a60e3b405e70

      SHA256

      cf40a58b3b009116d3469ebb16808827519f22eb6216aa9dd2740c389199ea79

      SHA512

      f74423fa0d082f4e011c3e60abc2f81825e872e6a78ee30d9c4a7b2b357f4cad0a4921789538554194cbfa4f3a9d99713676cd29f7941bcdcd4cc891455b4b88

    • /data/user/0/vip.app.com/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/user/0/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      cd257b72d57d2ee11c993dc96fa3e709

      SHA1

      81f59c92d4914bfc3a6dc46187d47818de43d546

      SHA256

      e46eb5283cbc0daab00632a7c48e8aa1a2334f5628bb169b8294efa047265f4e

      SHA512

      a23176e1ab9ff527217c7a0f67551b5e4ee4a62ae2a0bfc623e5ce7b19abcc6fd0dc3cb721b670247ef5f7753781cbe375422fc5a8a20df1576b6672265d47d0

    • /data/user/0/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      08c7c92519fe6de31479e9d463cd71bf

      SHA1

      e3a6e72d9a7a4fea3d3ab60f3495aa676dc3dd22

      SHA256

      af4ba6edba436d136333a76e49ee20cab72e9c8db0497258a7e220adc33b82aa

      SHA512

      b51d443c5af7836ed3e52b83f0696bc28147acaabb1434d435f9cd9df5ebc35f488a5901ee2471b4a94e9c913c6774c9a5870b8e32d37a01bb179872492d79d7

    • /data/user/0/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      db2d2b94fc46f986eb5aa90a383f83f1

      SHA1

      9047ec1caa8fb0620a2c14c86242e040bba87192

      SHA256

      0f93262db60a2e3d531c86d510561c437941ac67ebf025f7ee3dfdfc6fde14bb

      SHA512

      4c51b690bb1376d55e34a4783e953a5ea0bd8d2a207ab4fbcc318a0a302410d15bb1876462b41de4c7200d78fbbe7531b6ff6169bfb9e31a0c9463f2dbd2e638

    • /data/user/0/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      fd03388ceb5aa9fc53c3b33e81e71a0b

      SHA1

      e5ea7a70aabf76b37b722532461d3f7aaa59fe95

      SHA256

      bb77081e5f193b441c1c7f3d7fcdfc83d61c6fd6e9f9ef98474cf768d202179b

      SHA512

      1e977e06d65e3cfe19bc817256414b1f90d1cae475b21936f241ac79cf5de689d5656ca56bb02e8a201fe29e0aae000dc8295b9beda2404fd00dc34f0ddb0721

    • /data/user/0/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      de82e2c94d2718988804b035a46d17b1

      SHA1

      705f5ff19093ad209f2a666085d6ccaed3bf58a4

      SHA256

      29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39

      SHA512

      68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e

    • /data/user/0/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      d9cf75fdd1c2292d986f6c3d5d60f2c8

      SHA1

      07ecb1d3a26d952ae5fecf54f36699ab498510b1

      SHA256

      2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

      SHA512

      442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

    • /data/user/0/vip.app.com/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      9b92047d681c52536b424842a74cc332

      SHA1

      634b2f46daf8d5002393be82d6d44c2aa73d0101

      SHA256

      796b8678a9482dddfd504a6068f940268c18207783944877e9688326bf1b2a8c

      SHA512

      d2c2d1f79c3a084754422983d2f8904cfef431cccb425d032c4dd625a95ebdd9f1dbf6f3620cf19261eb029e411a64a42ea649fb24b3f94dd99521a9dddcf2de

    • /data/user/0/vip.app.com/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      a88d877ec0d3783ce0c7e4adac5066dd

      SHA1

      617f942de24961c185ba062997d9328e548654d9

      SHA256

      3c9b98ec04e55ed5babf18a5f6c3a4d560ba71903f7f55be82a0b2aa70422f00

      SHA512

      c0bebdb20dde7bfe55eac369ded2a29a6e6edce08c096dbc39fc9179077da2260094a02d72b49fa3ee1aafc40d13fd2be28a79cb87691d2e70888245981afb6e

    • /data/user/0/vip.app.com/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      554b55ca6de266a3bbdfd5740c74e8cb

      SHA1

      500dad3016a9b8fd04c867f032e7a2607569cb36

      SHA256

      e678d43385b37193ae0a360713ce726558f24f7f74f6bdac391ae8a290469f64

      SHA512

      3f5270696b29f3e8b7e1978dfacb3ff912b0f8896f0db069a702c77e171e2de8c56a7728f0af7c9f7fdbfc47f484da13f9392bad57572fc97a68bc18847b8a4d

    • /data/user/0/vip.app.com/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      d81b3f790634bb49768c92967044aa2b

      SHA1

      d335f2f78fb948625784208193df51201b909003

      SHA256

      4f5af651429d60b6d1aec8ae360fe7c26d8cadd9fa7ae63ca48aeac2cc7f21b4

      SHA512

      8848c3fabfe09717dc11b95edd086a115c75f3accccca7535cd5f337d69996158ade0601fa03414b34335e2140259584813bdc98551264e0507ce2a42e439536

    • /data/user/0/vip.app.com/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      3cf59a7fc5f3c816c9c32fa55d5df5bc

      SHA1

      a0156d8fde533702e1458b25a30bc74147278e1d

      SHA256

      c2815e4e5a7ea5b01d1d389d1b15f0138109bd83625eafb5e483a585ad75455e

      SHA512

      984df32f9831a3b8d5c65fb54f84540299bc71579688787291d1c2ad8c4f290facfdb58f7b68c0d4eeb89f6e50aaf6cab9ce2f374aa31bf3ff5e27f727c12ccd

    • /data/user/0/vip.app.com/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      aa357a1f206d4a307d4550b74e17e65a

      SHA1

      643da3698f13a11097f6d66f3d930c31aa145e88

      SHA256

      2dcd92a46147a4faf996b15549b5cb5996290514476552252dcb583bc38cd08f

      SHA512

      85d5e4cf3ef7a72d270e5a1ea2a6faae31b2ebb0f718834e4a194ae04023b8e7bda4509ef33d1098358ca098b7662312717b73aa394677b3b11b9327d0e642b3

    • /data/user/0/vip.app.com/files/PersistedInstallation2027564240961945197tmp

      Filesize

      570B

      MD5

      8a8d01125a296507b26ea32ece1036f4

      SHA1

      9fba9a9f742c235c2d07fb7074cb07e27f79d3cc

      SHA256

      21fd2578f4a7a2da5ca44187e0bad6fe14a0923e29738d10691db6bead1b7a2e

      SHA512

      b2fc6b0722f2c214230926b9b4981796269e1683840a85f29d065c2002eefb5198c5ed9feae38a1cde1482b43c09374f5afcafba30be0954cbe42f1ee6fc0ba1

    • /data/user/0/vip.app.com/files/PersistedInstallation6927765693902587355tmp

      Filesize

      90B

      MD5

      3cf2c21e6745b2c1d59d2acf8e43c29a

      SHA1

      c9fa40ea6f5fab61577c1f3133667faa73b011e9

      SHA256

      8d70c5234f05dcda33269197dab54035acdf6762f8b16274ca943a617ae876fd

      SHA512

      b9dd5655fc254473eec9c8161adfa2653b0696af50c8df63fbd589db4d40c94413c0de937af41e0383d74e65db7f3c0c2f28d065e69c19afb87cf744d2194342