Analysis

  • max time kernel
    3236695s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231023-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231023-enlocale:en-usos:android-11-x64system
  • submitted
    12-11-2023 00:24

General

  • Target

    App.apk

  • Size

    2.6MB

  • MD5

    dc9af32c88dda3930c106a536575e460

  • SHA1

    a79583d81919e8ad949ff9df24c5563c61fcd879

  • SHA256

    25ff0c5de86b2a1a11eda832f427c945884ba8a95d27698266e18cf09a05819a

  • SHA512

    6b17132757ea61758fc3448a9e740e1b857d4f62e7ca57f473731fbc91cb67b3cc5c1e7ac1a543ece6b3b579f444973946825c7a0f6873f9446d373dea5260b5

  • SSDEEP

    49152:QE7UIMCQj5NLumokhjIqOr7aWDk5oYHj4UeBW+HLHEwrIMS78RXm4RdHDbC:QbOoNKmokzSe6qTj9exHTEqf13RdHDbC

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • vip.app.com
    1⤵
      PID:4361

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      caa6d1b94bcbbf8aaa90a2adb4669581

      SHA1

      fd1b6e7f9b7410d042c589faa04b7b1ee76188c7

      SHA256

      54c14263f1c67116e9733e3be55f61540ede1bff3bef54866a23136a26542f12

      SHA512

      7b5c30098e76c5707b709e2d00ef3992c3d0cbdd0f52152295d27a61780c94fb6a7cd0f57ae228ad01f50235880693528e250dfcc56ee32e243bd00d90568dec

    • /data/user/0/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      167c8af2920a3615808b48b8585c8e78

      SHA1

      074df3422d362ed815febe41f8732f00e377ac93

      SHA256

      0b6587af79a2b86d4e463406de4b19d2f1a9f6424cf24bb3386f8a4f8fbf21a2

      SHA512

      e716cf55bc9ffafb79ccd6e5512215ceb94a6598a509da2f51e47aa84c30ad136d76516cfefda9fa6e84d0745e81c1d8b4739581896e944463e99f781fd315a1

    • /data/user/0/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      eaca10724f9c6b36b81daaed2a9c5ddd

      SHA1

      e6ddc90d996939a34b7cdb19392d1ca924de1bc0

      SHA256

      1ae62cbf2adc37d362684494f924610ea3b32037461602e3e13e2b81be16ec7c

      SHA512

      02e7325980af7528f262a9c3086f38dbef1ace57325f51a9800a00dc6610ac6b943b1fe06683b3bb6b3c5e2856577e7ee0eaa0702ecce61fbec5f0eb6c101592

    • /data/user/0/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      d9cf75fdd1c2292d986f6c3d5d60f2c8

      SHA1

      07ecb1d3a26d952ae5fecf54f36699ab498510b1

      SHA256

      2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

      SHA512

      442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

    • /data/user/0/vip.app.com/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      417e515a8d438da30c58f902000f7a6c

      SHA1

      375defc36c90bd2a059c5852c9e3a65e34a964c6

      SHA256

      984e4b29bdde2d7282930e6b4c78602d1aafc89d802ddad2f56bf9819197ac2a

      SHA512

      7d7dac5a77e3d6a58307b2fc8f85836a6cfea2956e57115491e399af2f0a16cb11b0195b1746b51c81450f2d45caf66f30bb5ad96d5c418ddbc00ad0e174ec6f

    • /data/user/0/vip.app.com/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      b120fe3ebc6d44adcbc23b86638735c2

      SHA1

      410c0b12119d0d80b0560ee400f13b6dafd79a0e

      SHA256

      3eb96e2a6c12a3a601bc3bd32eca7bcfd55cbcab1a4703439068809473a990b2

      SHA512

      e20d7c69d7631699243f1adb03f9248c08275d97ca57b62075450ccdc88fd94252d07f51f2fd7f0c9c9e8c3e57767f560556ed21a901368df6dd02579890ed59

    • /data/user/0/vip.app.com/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      fa7f4c4704205b54653b771439f3566b

      SHA1

      18a4116a15723e45a044f4e91c5cc1f1aa09adcf

      SHA256

      542e1969e5e0f1795f7e5b673c9d4c90366b58d4b79ab94096dd8c649ebbc13f

      SHA512

      3123eea888f3a9aff5111a56211ba030c16004d960b6ea9e7dada8f4aaa460fd43e5b77ceb755d5e765a0ffd95ac8f5333a22359222f0bcef319531facce5938

    • /data/user/0/vip.app.com/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      91e1ae765041a1fbbb339b51e9fa9e27

      SHA1

      dea801f310a29a7c2bdfeb0158a11bbcc03f3c4c

      SHA256

      aaa63e2605ba4802e6ad1523b991e1cf40b104a939316797659988f334dc024c

      SHA512

      d5d5f63c96b92fa2a26f3e5396b4b75a5138a0e9160fe9348f9fbe61daf34651bf57c564aa98f6ecbe118b2587a1bf14ccd95e78fd06b2a51b1f9fe437c3e66c

    • /data/user/0/vip.app.com/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      84df1bee892a38461d59f1dadb0dbc0d

      SHA1

      2a15399740e13385c41b2554c581a0233f5e06da

      SHA256

      0760f50824fcc7edd56eb83501c0f3f59472809687e07e80ac81d35dd0fc4751

      SHA512

      0ad016feb82cde50533df6c036af1f261af58f40110299be360e6273ba373b466d31814e369b0ea658edceb7942fa8b9d555ce3a3045fc4691515ce9a1ee3799

    • /data/user/0/vip.app.com/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      00d5a6dcd77738941d1c4c1bc75ab9dc

      SHA1

      da6ce9e6206e71127325528c357152524205a744

      SHA256

      54c838f1886f85ed2aca21e8347fc2177bba266284f25a5072943e0f58527240

      SHA512

      a026d832b4e548ea21f20f43f5b49e0d48501cb913e4004ea8eba7342855a96c1c021daa8fed9740980ba5253c86912f6608e72f3706e4796be2679d18712c06

    • /data/user/0/vip.app.com/files/PersistedInstallation2342624111838516980tmp

      Filesize

      90B

      MD5

      df4c7ad683f06fb4bf791c5a37a3d33b

      SHA1

      ab7126439c4aebb56e92104fef3839e80fa26539

      SHA256

      227362c5a3c8132a9fe44810e4ded92c5ac3a3cd792cf28b62a068d12919ee2d

      SHA512

      f9d86ad0226a5c9e3caab6f785abb03c9b36265bb09c6d41c5b0a45470daf690da4eed2245fa89bb43b8a18767b82a7b2381f352f8313129b426c86abe766eb0

    • /data/user/0/vip.app.com/files/PersistedInstallation644201033656758632tmp

      Filesize

      569B

      MD5

      392c7a4ae737db7b7a6168aa0d915262

      SHA1

      f6a893bf8fcef980d8bd1e193d2337c5e9677499

      SHA256

      8888e44f63a66504c23608292c939c14eada3c88bc5405b91b8856ed84ea58ff

      SHA512

      57274a86bc31f416b00c23eb8cb581ee2625a5e611ee1a2699aa1a4c659dfe8ffe452a3a3bfcd35f3ea3972db00fc2081719711ae4571bf986d1e1924e54a877

    • /data/user/0/vip.app.com/files/starter.txt

      Filesize

      4B

      MD5

      b326b5062b2f0e69046810717534cb09

      SHA1

      5ffe533b830f08a0326348a9160afafc8ada44db

      SHA256

      b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b

      SHA512

      9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de