Analysis

  • max time kernel
    2187361s
  • max time network
    167s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    19/12/2023, 11:01

General

  • Target

    0f2ce9a46ff195da3bc4085d6aca1203.apk

  • Size

    4.7MB

  • MD5

    0f2ce9a46ff195da3bc4085d6aca1203

  • SHA1

    8c8aa0e4da20427bc6d3be160637e98bd7965fdf

  • SHA256

    6ec2c5ddd89dfed4d066bf6ab8e7576614b4ce49479898a0aad86835661052b8

  • SHA512

    56401772711efda6184713fdd173c62312a2e528a12df001678366520ff2c5810ff7721e0013fd837b4ed164e8dee8b38f32f602404de6d0ac2577bf56b2f725

  • SSDEEP

    98304:Yzhqka7Qm735bxNz3e9h+85DOF84FeGxLs7/QwPHth:2hqVRprzu9h+84I7/QOz

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries the unique device ID (IMEI, MEID, IMSI)
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.ResepKueBasah.oscadroid
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4603
  • com.ResepKueBasah.oscadroid:Metrica
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4858

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/com.ResepKueBasah.oscadroid/cache/1582435991586.jar

          Filesize

          9KB

          MD5

          e8e0527a01aefdb89afd2c508f131da1

          SHA1

          f1103e6b260c657ceb3d95f1b023af3fda8b133a

          SHA256

          f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce

          SHA512

          fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

        • /data/user/0/com.ResepKueBasah.oscadroid/cache/1582435991586.jar

          Filesize

          20KB

          MD5

          fde2ee00cbd121cfab5290b078aa3ceb

          SHA1

          e2b77d5320e155e413d040a8c20020962065b2f8

          SHA256

          2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685

          SHA512

          a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

        • /data/user/0/com.ResepKueBasah.oscadroid/files/ZPkFS.log

          Filesize

          90B

          MD5

          3818fe4ee9f42f34af322f7397d8be5a

          SHA1

          adba862deb5da18b7bc191027229dc053c1e01c4

          SHA256

          396ef24094655029e6e634a70df2ac4873684e5e704f726d7ede032c2025647a

          SHA512

          68c86bb4134deb736cb77a47b063583abc7bd43df3aa488c09d9e07823eae05734ae0f89ca96e5c46174ac7035aff0cc6de5f285b279c3e996f368c8ec99b829

        • /data/user/0/com.ResepKueBasah.oscadroid/files/ZPkFS.log

          Filesize

          12KB

          MD5

          15b29d8cc5c1ea55a3e92f05fae4288d

          SHA1

          623952742f239a0f4bf122b8e4e63535c8f0eb47

          SHA256

          f39c3646a042e9c2b467a82cd189b6ac410cc1adde05bcdd31a0151303e058a1

          SHA512

          00bb8e3d913c69b1afa6d8affeb617d8910d2a5c804a0bfa4a52b17d9ff61f5c55b5647473a46e89ecfce7e00c515f4346c488123a7527468d87f40c24626cdd

        • /data/user/0/com.ResepKueBasah.oscadroid/files/ZPkFS.log

          Filesize

          12KB

          MD5

          2aa8294391146ca1e0f98d118bcec681

          SHA1

          f872574e8c23d71848916689b9d89580e6ed166b

          SHA256

          3a610113d22c3f6054ea13ec7a1bf2cde800d7dde30ed0905746c0b374da8a3c

          SHA512

          0da00012774f0e233a4b23354f94ab74e3ec9be359fab70568eeb3e04809dbf3e7bc88796350a2d8201175e221032f9c34a803a4e5d5a55e598e5843e3305d7c

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/db_metrica_com.ResepKueBasah.oscadroid

          Filesize

          36KB

          MD5

          ab081b5582c440dec192605b4e5edc15

          SHA1

          9d2cd79faa72229f56d0f1a24b28495ac9828666

          SHA256

          e63ab3a09c202a4796aee285284d79ffba0652a30c6b8ef8c8a1d7e93a7db7be

          SHA512

          3948ce2112ed847006dc13ec5e65a09f0e9606d7abff39d366e8df9131193958ade0de2757a20770077db362f00076d9534919ee04b393aba0e903c0bf7f211b

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/db_metrica_com.ResepKueBasah.oscadroid-journal

          Filesize

          512B

          MD5

          a0216bc5b31fc5f13a746855279f725d

          SHA1

          7df6c9f8a619fc0992175bdbbaf4818d371745e3

          SHA256

          165151a88f1a71ee6abe449410d4ffd637f4c236bd3dbb8e3a654f0bd93182ac

          SHA512

          416f1fb78ed69db8070551f8d776a6978a398430dcda1803b0c60cef6bc3bdbaaceba6a8d432fbbcbec92abdb5fb0a5287893b2d5cab7144c73d27422e6ce03b

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/db_metrica_com.ResepKueBasah.oscadroid-journal

          Filesize

          8KB

          MD5

          af0282ce63a667e274e8c903e31171d1

          SHA1

          7b410347f1a604f66abb5c26ac8fdf30905672fc

          SHA256

          b07d6f161653af8d6508c0c2cb23964130c8339b6fe81651645cbf49039174a4

          SHA512

          3bbda71ac9c51a5615fb39c1fbdd5570b3c766c329c403573e4ddc934b06d6e2a6826a2b1a6236e2f7d5eec80854b7d96a9da29e743ac89e591f55f1b1027b40

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/db_metrica_com.ResepKueBasah.oscadroid-journal

          Filesize

          8KB

          MD5

          217bf0f235596827feca373c9c9c99c0

          SHA1

          af80c6e0f852984df9ffdd4505e66e125f0c0af8

          SHA256

          963a971f41c11aefab8476a75cb4c1120f7b88fef1a52c6a8049b9dec2f7b4f5

          SHA512

          14c8bbdfe7004207891a544c2d0e00d4313eb40a19aa9a241fbeebe1c6335c5183124aa3bafb34b18f9dae719da864d4e4b816bc11d94569229501c2862ce7db

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/db_metrica_com.ResepKueBasah.oscadroid-journal

          Filesize

          8KB

          MD5

          e982bc52bbb2c75b465558a912ce2a32

          SHA1

          04f4c38eefd54c0c2429ab30675b488769715790

          SHA256

          45c41b09fa48db824068b4781086a9b7bac8bc09d156dd0014609764ec94ba65

          SHA512

          b7a8d6b2010cc7c15a97f3a9fa9a45502c30edf64107d8f10ab34051807d0243762c47535ec82d89dc1560ad0ef13f3c29f05c8cfc3f5db314220c83f3c6129c

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/db_metrica_com.ResepKueBasah.oscadroid_20799a27-fa80-4b36-b2db-0f8141f24180-journal

          Filesize

          12KB

          MD5

          34f8e40519234491490ef0e5f1ec0748

          SHA1

          cf869a52aa767a58c7a19aec949b8a81f1234b69

          SHA256

          ff551f0c14c6a514f07e93e9efee8a615e7016df17606f48ccbe0166ac7c77f4

          SHA512

          e3eefa11f7bb67afb51f96f4d10201528809561b9345cac089f6aac9f68e6545f5a26bb66ab63111541bb2f5bf8016e61959ee0507fd0a327c0243070351a1f1

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/db_metrica_com.ResepKueBasah.oscadroid_20799a27-fa80-4b36-b2db-0f8141f24180-journal

          Filesize

          12KB

          MD5

          36f6d8328fb533a5cc73600deb147541

          SHA1

          8f73d78c5b2fee4c1766e58bd96fd9cc41ee3ff7

          SHA256

          9dd0fd77127e059dd50be422b2174f085fb62fb64eec182c4577ff36e52ae83a

          SHA512

          a32fa3992929a9944854a965dae7806dde40b0f2587d19bbf44ebbfc93391be69a8a9d333c2a69389e31901506e139ec76ae08496c016ae4fdc1057d44efb715

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/metrica_client_data.db

          Filesize

          20KB

          MD5

          e5639b469346d3d19c79ae3bdc2f4a9a

          SHA1

          b4d9041b94176f65417e63e77f0f324b81e8dded

          SHA256

          cf283c9f2c282ef339f1ac0c4eae7d6f44f86bc1744cbf8a9b5703edc7368aaf

          SHA512

          273aa09cf7f4de26661bbedf2ecd180b5adb537022cd824d2185beaf7eb1784bd1ea1f1f22c01e4762729bdefeb81964f1a47f13e90b883beb27ce7c8d1f03b4

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/metrica_client_data.db

          Filesize

          20KB

          MD5

          d01115ab3b3ab6cd76adfbc07994cd9a

          SHA1

          2e7e72949ae2c3c9fc3faef4ff50f29153ce10de

          SHA256

          477bd41c92d45d060b57856b501048725ba8cd344d54d65459d2f6a0d5c38e68

          SHA512

          bdf67bda728f6ba75d0f993d24b0feb954d5cbc369d522ea553400482ccb65ed6c9fb042608d7ecb2940bfae1df0e47a7cdb37409561581c8aa31a774334092d

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/metrica_client_data.db

          Filesize

          20KB

          MD5

          cbc93ca908c9ac5025db394b824dc4e9

          SHA1

          62cf750a5156e57abb4f0199bb90b210fd677715

          SHA256

          0ed31bb45b04b4010d6a5241ea7e0c7e08f98905aeba449c997d92b4fd825960

          SHA512

          a14fa77add66b371eebff006667b4d339c36a391afdf507fabd96d890e14a427d93fb0e8302dd7d7286e5989578b4f283bcbdde3f20c02f31e3b4289031b9fba

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/metrica_client_data.db

          Filesize

          20KB

          MD5

          c555707011903d687d33a0dab0982519

          SHA1

          e7daf2952ffe476f0b432fdd8dd3b6a6491cfb8b

          SHA256

          468f643cd897672e2f0a7e0619adcd362089ac8859ec389f64305034da26dcac

          SHA512

          c4f5d5d7e639cf251e4e6f4a77fbbebe9d183b5bb1fb72d66022cdb176f292995ce928a4392e2d644ae8d0057bc7eb8543d5ef1d68a6ed5b34c8bea15b750be0

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/metrica_client_data.db-journal

          Filesize

          20KB

          MD5

          f556ab1c7b01c11ed1c14e2793a89725

          SHA1

          9ada7f5429db350a6afd50d8c53c022a0bed0e71

          SHA256

          d91bab9460def1e7e361f937abbf3c4e60d7f950e3a4b5c7d93cc104f039d9b8

          SHA512

          25b18bfad267019b81992c757acdf3c889d5bab97bc373bbb6200fa3216ecacee36aec18083c29fd88fb8f951e3b93c174cbf1a03ab2705d2575a121b5dcc9a1

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/metrica_client_data.db-journal

          Filesize

          12KB

          MD5

          fe7631569b810f25851c27690f0d40b0

          SHA1

          9ab99ecfce58e82fbf88fb8fb08bb7e51d17bebf

          SHA256

          7bbfda5373f0a659943e5aaaca5086eab326a8c0d52c90bf890d2ed581e4db5f

          SHA512

          f35e6ad26de76ae2beac448377b19f50f06545eb329bf49891d6b889237487d8bd00c525341533ad825d8332c1198343a054c2e1baa7e9cf8542728ac4afe992

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/metrica_client_data.db-journal

          Filesize

          36KB

          MD5

          53cc301451561d8d2e39ab253d9384bf

          SHA1

          4f52b5a74d64509ecc2864d1228594f9c7ec0ea1

          SHA256

          ed24b894d472f3c14f186d72f582ecd2d8c7a8904a96bd43924e9858b5d1e3f4

          SHA512

          2f99c2d09d27e172537d34d4c3391e0f98ebc82e4eb8f5a41a5f6a2590e4833fe86fa5a20959b5d30a2404389f5cfd697e23e802cfc91fc9c1b601bc5a4424af

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/metrica_client_data.db-journal

          Filesize

          512B

          MD5

          9da4e6e901bf8a2211b6a9cca962d167

          SHA1

          06b18665bab35231aa9d1ae64885530b2160950b

          SHA256

          39386304dbef0d8da7a4f235646784c23168d157e2dc18e3a62c3fde56a0a51c

          SHA512

          1911e497f7aa128135da3b679874f3419dae355753ccfb55047dba2520ba512f66969687bbeffcca0d0d377b31c3c9ae2ececc29645d8c09d6e534e726551295

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/metrica_client_data.db-journal

          Filesize

          8KB

          MD5

          3f8f1dd4a7c60fb9f03e529c534baaf2

          SHA1

          eb75be8357e1d60468c03dd9defd855bf99156a3

          SHA256

          88a166e2955a912b975a4dbc3ab815d76626dbcf886af3598702c166d03032a7

          SHA512

          b47a7768abf02e6133d4c845de33b277e5d3d9617fa5cce44d1e486cc4c7329d3c2c75980a0effd10d4fb93cea9ce935a3b68434fe77457018fc37b732c4b58a

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/metrica_client_data.db-journal

          Filesize

          8KB

          MD5

          f827730e7d9f84a55a0b15cf71579287

          SHA1

          6d52ebded877a1c51c70f5f3815d9ab4ae6eb36e

          SHA256

          8e82b35471b43fea96173cdf9b435ecaa44a99bfe82945e199a5f410c2a724ac

          SHA512

          d51de252e804f1b59fa9e4253f6fc5dab3209fc699b0c4e2900cdf70f89117c7d319ff1c7b172fd82066f3ddf8df65010c10caa390da9a779d22248e0ed71105

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/metrica_client_data.db-journal

          Filesize

          12KB

          MD5

          b2ee89b7544d17003ad44dfd67e79ac9

          SHA1

          5dce33f31ca7c20060c4c9229f0599c678c99e04

          SHA256

          75af3b391ae55eb2bb23e0c7ae44c9341edb24965112b672f1996fb05007b924

          SHA512

          d48ed45d092e5e1d374e69659213eab0918aecc475a41d45b00f7c076ab9b2042294c99a524fe03e7a699dc53c5b7194c785993dc921ef396f742ce55988321e

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/metrica_data.db

          Filesize

          12KB

          MD5

          171aedf968e17a2744d2585715606cb9

          SHA1

          bbeddeb3b89fcf809619c35b4a318a80e7d5b029

          SHA256

          d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e

          SHA512

          78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/metrica_data.db-journal

          Filesize

          12KB

          MD5

          f925de36ff0d582fc0d070bc1e4f7516

          SHA1

          383535e744b52a234a0ade9c340043d2488506b2

          SHA256

          166b921dead2df09b50364238bf401e74e8ef0d190ef6e479f9d2afb7770ef61

          SHA512

          4c407c04bb8c48a8c67c0daea8b9908a88632c9d8381ca4af0e1f665ce22283f122a6f49b736fbbf0b4a4a1e81e4cbcd9815f0b3adbe075af164daf976d78114

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/metrica_data.db-journal

          Filesize

          20KB

          MD5

          b9c81468ce6f81cd8001aabe9d9cc368

          SHA1

          464452fd8e20e4140a28d6cc1b2af2da715f4cbc

          SHA256

          3a62bd821ad524b38785cb5d76819543678a6a88416043ccb46048f055ec6371

          SHA512

          83d9f53f75bb262dcf5eef9162fa367fd99071ac98847fb34f51974c6591b323d32088f9dc29e4a0305a620a1b4f490f05499fee5925de7e227848b1f3c2e504

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/metrica_data.db-journal

          Filesize

          512B

          MD5

          ef124faf36a8c5b0f56de7b6445b2e73

          SHA1

          bf7bd25e2555da89eed9a7e774abbaa872f17954

          SHA256

          cc918f3b8ddb572119b477f26ab135130d1330d976e48aab91165c4620094fe9

          SHA512

          41cbf0cd43e70b632a6ede729c7f32149846dca773fcfc0b0d96fae3bdfd7693a4c64bccdf31c54d7e6bb41420e8ac4bbd519d71dc3540fdd4340a64019da651

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/metrica_data.db-journal

          Filesize

          20KB

          MD5

          a20a65b245b2c40a9ede5f148049cc09

          SHA1

          c7b083dce5faea267bf76c80117ad79b0144425f

          SHA256

          a77f3005e1b99ae8cda147c059ab465a741a577a3368a173eb28e7705926445a

          SHA512

          3667cd8a8acdd8ba87a1deb593a0d6a62dd847c0f24d8afa119c81ab0cc29967b19461779c9bd783e96044bd69415c514560cb6886f18c8c041d6ed5833184f8

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/metrica_data.db-journal

          Filesize

          8KB

          MD5

          b53abb2872ddc38940aa92a53be20da8

          SHA1

          eb2ca3a7629c0f8c7fd02ea975200b527202b1b6

          SHA256

          d07acb06de509177af56bb608c798836fb85201315363de78a799c155c26e15f

          SHA512

          06fc01ebbd63b9f52ab5d77b3f077c2f97986b9c07a73f139682dee34639de962304167f92a4fdfbd52f4c11243a4400ce1b9bcec135d96f2e8af59d528dc2c7

        • /data/user/0/com.ResepKueBasah.oscadroid/no_backup/metrica_data.db-journal

          Filesize

          12KB

          MD5

          63d44463ca8b83b74989e33e3aa9d0f5

          SHA1

          8c966bacd7f9e5cad82cba64b2202d320c68504d

          SHA256

          af3fb52c45ec09c1e665615209dc9c69b8a5b86cc8c6b34adfde5537867a57df

          SHA512

          1d9744bcbbe4728ddb90e4d90511e78db5d87f8a82ec9dcb5ce7a18d9c6fb98eb08d78a177b0ca31fe4b69b892e8f84d27a102ef134b4d7571f2c775827094c5