Analysis

  • max time kernel
    3918531s
  • max time network
    157s
  • platform
    android_x86
  • resource
    android-x86-arm-20231023-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231023-enlocale:en-usos:android-9-x86system
  • submitted
    19-11-2023 21:48

General

  • Target

    688bca48ba4194561672dab19c8bf5d3d8d6be79515da70c467388c064d61220.apk

  • Size

    2.6MB

  • MD5

    e01cecff89c4690f158cc4cf2dd7597f

  • SHA1

    f081a9b94c47bdf165c945f0d5412e286a6ea626

  • SHA256

    688bca48ba4194561672dab19c8bf5d3d8d6be79515da70c467388c064d61220

  • SHA512

    7cb12b6a6d29c0de0871abcef17a9026d2e4841d07628c68f4f4597594bf381ffe4c1affed37d2d5e89f14af5ab2e28c3bfbff05143ccb8bb231c3fd0ba4bebf

  • SSDEEP

    49152:R8EEzJGntKseWfUaXpcYWMRlH+6vd6KmK/r8ZNV6iTOwgCxBdxqROOORqBR7:ZYGtKsffUi7zq6F6K/r8B6i60xBy2CR7

Score
7/10

Malware Config

Signatures

  • Acquires the wake lock. 1 IoCs
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • vip.app.com
    1⤵
    • Acquires the wake lock.
    • Removes a system notification.
    PID:4313
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4368

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/vip.app.com/cache/1

      Filesize

      5B

      MD5

      68934a3e9455fa72420237eb05902327

      SHA1

      7cb6efb98ba5972a9b5090dc2e517fe14d12cb04

      SHA256

      fcbcf165908dd18a9e49f7ff27810176db8e9f63b4352213741664245224f8aa

      SHA512

      719fa67eef49c4b2a2b83f0c62bddd88c106aaadb7e21ae057c8802b700e36f81fe3f144812d8b05d66dc663d908b25645e153262cf6d457aa34e684af9e328d

    • /data/data/vip.app.com/cache/2

      Filesize

      28B

      MD5

      4e6ddb391da2e63afdd4822076a014cf

      SHA1

      d064a4f8de6c5274ae5d0f21d5c1597aa798070a

      SHA256

      e66a9ee90dd2d951b5b695c3d3bb5dbb73af6115a24bdbfa806675ff8f43328c

      SHA512

      80ea25b1f08b9cddb60c846e38954490d65b6b580db956b01e7cb25a5722e431474cc9812cfba602de28063b6fc74b670941f0b067b30f0fc591c6ffaa75d76e

    • /data/data/vip.app.com/cache/3

      Filesize

      690B

      MD5

      bdd89b9d5f598ff13f4d9eaecfe86033

      SHA1

      fc4926068a2c242847710dd623f0a60e3b405e70

      SHA256

      cf40a58b3b009116d3469ebb16808827519f22eb6216aa9dd2740c389199ea79

      SHA512

      f74423fa0d082f4e011c3e60abc2f81825e872e6a78ee30d9c4a7b2b357f4cad0a4921789538554194cbfa4f3a9d99713676cd29f7941bcdcd4cc891455b4b88

    • /data/data/vip.app.com/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/data/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      f7ff81a56543d17fb02bc7d67db057b5

      SHA1

      8ba97b1c8591889044cd1dbd52eb97f7b9c754a4

      SHA256

      eca73e1a399594f8326c5fe18af6b701344fd63bccc830ab23beffb2ca25e864

      SHA512

      775b03136772ce7792fb0ad24b5523604e90f81961cbf30678490b9655bbdf5b5bf48ad08305e5ba780177a3e2e50c4378501382b53da8c35f972cf8d7f8f507

    • /data/data/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      213edffe8ea6268f29056f71010e1fa5

      SHA1

      98adbf3f1d6796ab021b5c821d74f78a2c902fca

      SHA256

      1434e6eaae89aae0ce2d82c1da21b5fcbfeb58b168edc40f5e8694b749ee0f52

      SHA512

      4598915328e481026ffc7b23306e7ceb6c082661bd21e09085c7468209393298d96f254aec223427a9ce509a76c226c34199e826c35fee3e88a39aa7835e73eb

    • /data/data/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      fbbe9b35c20a8ee50f989d0896502eee

      SHA1

      291e2c2432cb72b536dbce5ab463a2069061d2e0

      SHA256

      6685b1fe642ef4d29be1c43664c51bb2b0c25c95e07743912f34994e70bd6640

      SHA512

      9ba31a36f7a7fd63c96a1543b4cb46670d47146dc5a34634c74896c1728778e97235a6d10b6ca1fe8e7b4ec119293870ecadd878acd7578439ca65af03c8ecf2

    • /data/data/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      fa5e6b8496e458da889f12170391ec81

      SHA1

      89a119de3b3f6bf0830a05afce30ed7706248377

      SHA256

      5b5564262fb3325c0409b7239f0aab65e9105f07594655001a85b89ac288fef4

      SHA512

      de4caf8ad3964a8eb84199cf775c12dc79d853211047aa5f02e8c360b5d46fe2235ddc86fba6324eb1fe70f73aec8b4e45136ee95dd7f09bde9ce4a794e96899

    • /data/data/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      3e881d9a01ca707bed38018ac69f4518

      SHA1

      5820f9351d7cc8082de6e5686eb9f8fedf6fb830

      SHA256

      4a5bf9bfe9b032546f886dd5fe6717de78716734aaadab620c0444ed6df5151c

      SHA512

      8f0395c94b3a449f3c61e7117f400c7b8a12c23d3655be6772bce2c8aa0ec8d8be8000c5cd2c6e10b334ef54a4add5583717393c3239da80c334c45b8b392db8

    • /data/data/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      7237409e0640cfab7bdbd429bf821a3b

      SHA1

      4c3da934842f8d4835dfe2a9c275a300e5123309

      SHA256

      5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

      SHA512

      c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

    • /data/data/vip.app.com/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      293c15c14023e01bf36fbf49b3558947

      SHA1

      730f3dee92b3954e35ee4cc2f9dc6f28f82dc500

      SHA256

      b3a1a7aabdd5e139e0457103ebb579fd722c2c177397ddce90425b7d0d9877fb

      SHA512

      22c8a3ccb22cd0321dde33e5bf206b79f6e3291c6287f91ab9ee05983b1a27456656bf1f1e398aeab14b1e856ebddfed93e5b69f3ea2d4b21566aba24494d1b8

    • /data/data/vip.app.com/databases/google_app_measurement_local.db-shm

      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    • /data/data/vip.app.com/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      f37666dd2ed3a18350c2cc7535110c06

      SHA1

      f0cef2ceb1fa08de4c22c9764b8ae548da0a739e

      SHA256

      eaf04846e17a8e0dc6e5f699d6df5822614ef7ce1ea824c08d21bdec7d6c2998

      SHA512

      ec28e01519d5911180c8c581792e0a5fea901ae78518f09a700bbdb5215f282b0b71c7ca40dc422001801cb66b3af92f2e428429ddc34fc33066e6bac2d44df9

    • /data/data/vip.app.com/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      c8c14580ceebfd807740f2e09955e0e5

      SHA1

      518f2015eec18552a3777166320049b84a384713

      SHA256

      756f8bc2a233c618a58cdc32c8bec10bd0c66806db4b2748befd55cad23e9e0c

      SHA512

      5f3517bb2bfe24de3b61397d27bb6023251a1ec638736a5f5fece50ea1c239a76ba2e78262fc3511c2102616cee8f30efbab3c4e6d1b70031d4adb4b2ed7aea4

    • /data/data/vip.app.com/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      db8484c5a35f6277ab09ad5f7ae8b7f7

      SHA1

      403b2b42f878fd25496210e840f09c5b07b3729a

      SHA256

      a746e6d6e905f746f6e2d32fa7d9be2fa3839472c2e63dca94eee3c9599f22c4

      SHA512

      8755d0a19ce8050709d7ccb3f73b9ee4d2297c55d120a65d47052b4f109c3b26a592da648b38e3469d7758baabcdf6cfa2e330c687631d3ca6f5f435bea93370

    • /data/data/vip.app.com/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      8478a90c1991c2a1ce533678c1305cdb

      SHA1

      a23f74543d6d9bd0d496b5b49a3138bed049160c

      SHA256

      93e2f4d995c0ba9dc9078fd4088fe207bb40ac8d065ae9a25b7a522dad59f967

      SHA512

      6e59f4eae1052eb1761cdab594d8cb73232696828a22ddf1c00b590b5d34b43abf2956de14a274973a0823cfa84add4dc858455f35348f20a3fdc703b12a7ed3

    • /data/data/vip.app.com/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      549e32db3d577db84e3a20cd8feed137

      SHA1

      378c29c0e14915c52174d8f2ebeb93f2f839d46b

      SHA256

      705bf1b630a44e4e7faf6898368df2ec697fb8bc9b4bce0e3ae09457e06d3970

      SHA512

      5cdb273a0b8b6b3f50b1402a99e93876e40ba2debf57741c0634d2e9dd874eefd8b2349a31fdc93eac5b0c636b2ac7c3a12e9fc671dd7d0fbf248390dc101a2c

    • /data/data/vip.app.com/databases/google_app_measurement_local.db-wal

      Filesize

      36KB

      MD5

      053f5e64b1c98c9aa1b475ee6091ffec

      SHA1

      701a5b652c7ad5baeb20d02adfa91715186a2d6e

      SHA256

      c4217b434f4d65e27c72776e5e30a289f398dfc8d19ad745b2c66f63101c8863

      SHA512

      1d226d951125de5aa4f32d99b685a2f186589b823ba0a4fd466d44e562850b535d277bbfbf786deb4e2a273ef6f8d19541bf80e1abc59f09598b11353af7ce14

    • /data/data/vip.app.com/files/PersistedInstallation1643617040090598894tmp

      Filesize

      90B

      MD5

      e01324ae7c9ef737f1e864b1bb3be51c

      SHA1

      0e63b88628865a9e67ab4fb980727f27fb6ae9e3

      SHA256

      28c9ff630e0917d6114e020479b895a66fc706698f9394ef66ae4bee96926904

      SHA512

      55d8b6f8bbc39646fdccb486400dcebc6d5ae4109373cd7a714f16c65c166b47f2043b2bb35615f4c6aecf209a0e12572c9f32b28d62c9496ba4848253265601

    • /data/data/vip.app.com/files/PersistedInstallation2889666201983853929tmp

      Filesize

      567B

      MD5

      87df73a3385162c90e456ad8246aa2fa

      SHA1

      3ea2c07b6d59ed7cac5e235b6d3f8e26aebfc167

      SHA256

      257e24a0d5230a1d19d03ec0d2f7b0da8581b7ce8e1a88eae2db608de9a81e36

      SHA512

      a548695cfe11c0d89d7a58758ef6c16f463160765e4f122d3f29a1f39b06b8a7cecfbde086cf651a1414bbc5c85d961f6b762e0b419718bfc25c996220dda767

    • /data/data/vip.app.com/files/phonenumber.txt

      Filesize

      19B

      MD5

      b5f50a9abc694ad9adf0e7c78c30f9a5

      SHA1

      9ecc687d819e519664740bc2ab3427bcd9e1a4ac

      SHA256

      1f00b91d3c22c2e9e6d94335ab58471fb228c8daba97f4e443cba87217b850a3

      SHA512

      a2a057a297a3b7eea07b7e671070d35f9815487cd45d637138accb0db0114165bf658e0519ac0a926df6320e8a10745124824f8a65297d6bc3eb1484d1b32068