Analysis

  • max time kernel
    2282604s
  • max time network
    169s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20-12-2023 01:05

General

  • Target

    774ffb2f7968233385581b7635d1e40a1f79a8a550bc19daaef92595668fde3b.apk

  • Size

    11.1MB

  • MD5

    dfb449b082fd865e53cd9a6699359cc9

  • SHA1

    2021bffa4bb361bf8ac5598ebc83e9158dc0d17d

  • SHA256

    774ffb2f7968233385581b7635d1e40a1f79a8a550bc19daaef92595668fde3b

  • SHA512

    b1acbfb3ed3b2db2304d0a1f1927e797a26b41953d087337e1981547136f32fcc3d0c3f3b09794b457e9a6bc0bd665e9345cfb8700b660ee4405cfd68f1b54f9

  • SSDEEP

    196608:FcYQUPfwW+Ncr7hBA/F9efkIJE/E/uOqxUEioh4W1/LuseiiV4vCZ/D:aYQUP4W+W5W/Wf9C/E/ucoh4W1/ysesK

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.canoodleapp
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4508

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.canoodleapp/databases/KochavaFeatureTracker

    Filesize

    32KB

    MD5

    a192edfae0c99557f89f7f311e0cc258

    SHA1

    999c8f61777029958d376cf85fbfee0b65c728d2

    SHA256

    03795629002d4097096ac74ba055f7385dc3d42f0741b069c13fe0d37a4d638f

    SHA512

    2dae0604dc859e7afa699cb5f948189db18dbf5ade0716369b9c1695b834dd5e1e6f0a2900978bade9ff87497c336de57b82aa335f1d552b801d62ddf9730fbb

  • /data/user/0/com.canoodleapp/databases/KochavaFeatureTracker-journal

    Filesize

    8KB

    MD5

    1396db8391ed91acd848005a62b025a7

    SHA1

    6e6ee5b4a2916e78390ca6420c863b2ec7e5f96c

    SHA256

    ace60edcbe4a1ee12adc7ca9683f9d211765be74ed8575ed50019cd242efc901

    SHA512

    00154eea073fe1a12b4b213dc9a903980d4e23fc639563834ec0c091c0ae2459d91e00025b11a6cb285e9a03164b9862a8a23cd1d6dc3675bf43c8ba5a4fa690

  • /data/user/0/com.canoodleapp/databases/KochavaFeatureTracker-journal

    Filesize

    8KB

    MD5

    c35ca6ef6e41322c3ed663ebfc1bc762

    SHA1

    32ce4aa5fbd06288de1e29a848611df82c23510b

    SHA256

    b418115c82bfe279f7bf2bdcfae1c5575ed44d3846a4938f14b3ac0211211388

    SHA512

    59acede3d5839a64539b70fc78581c2350354646568c189e617a68b32d1fa11799d9a5d4cfa53da3f87b2a29374b8187300f3e3323cfadba4ab2b7934e51d721

  • /data/user/0/com.canoodleapp/databases/KochavaFeatureTracker-journal

    Filesize

    16KB

    MD5

    927d4d70a771be7af12bcd741c6a0e33

    SHA1

    00840dddb91c52d7c4b8e6850840467f997a15f0

    SHA256

    3bcf97b950563c978aab05311ad01703300b19109412cf0956c9ae3315d052da

    SHA512

    c4453f41978be4843a0aa8897f72f8e82be7a7261336c378c7a476655300dcae844e244beb102f85a3a64ce20ded90d8f7d4ec7e22342e45e5848025b208c05f

  • /data/user/0/com.canoodleapp/databases/KochavaFeatureTracker-journal

    Filesize

    512B

    MD5

    8c904027cfb562aa2dfbfadfb7b43545

    SHA1

    1f1a0e1d290f768fbec76a4039a1ec64c9ed8f43

    SHA256

    92c29f19dfe4555838499e032373da80d0824626a82c5db09e409ea79e13bb22

    SHA512

    7624b07423bed44994e0c642cfebeba164e0df1171c9ce31e0332126cdf566a4beda406b51e322bbacaac23eb84a7c87f160e919506b1c5eb983ac2949f2c635

  • /data/user/0/com.canoodleapp/databases/dating.db

    Filesize

    12KB

    MD5

    f41f531c07d4141546a531ff9caffdcd

    SHA1

    9dcac5aed06972d0ff6bd4cc1f1cdff85b36d3f5

    SHA256

    bb8dee5b5c3779f175abbd142722eb0022b98d374783aa80145b34614a4de646

    SHA512

    e0c8d1a820cb4c098e45776e8b50ea8c83944ef2e3f005cb0acbfc07688974d370f78100ae022f62564fc4c12acfdc43b710c18ca1c30f4f575bc08b9b12d2d4

  • /data/user/0/com.canoodleapp/databases/dating.db-journal

    Filesize

    512B

    MD5

    13cb1b46b95477b1eb781d85a2564787

    SHA1

    4067f3a60d72c1caf5aff04136be3b8f2946f9a4

    SHA256

    c366c026ac80121951506515bb7bb8b839af421e7e2f7ec5e7f88cab699380d0

    SHA512

    c4e8adfdaa5acb960efc53bc7ebb50ff33cd7dfc535a5fbc358375e9cb21790af99e5f5ab8f8d683a0907603cffae1ad84159bd99217e3345dfa941c43cc2543

  • /data/user/0/com.canoodleapp/databases/dating.db-journal

    Filesize

    8KB

    MD5

    875d220d3364ff7abb6154fc3476c2d4

    SHA1

    9c91a9f6259fdabac34f654b5a419da5775cd3f7

    SHA256

    a15bf3d0bad95ee620d691093b23df601bdc719d18c76d7bb97978961c84bbea

    SHA512

    94bd0d9818742a74253ae72c549dd81105d9843ab9c5fb5669df1f1e70ca9ad037f9ad1a0ba63821c9f0dfd906b7e9278e97372e36ff2f03ba1a42215ee71a5a

  • /data/user/0/com.canoodleapp/databases/dating.db-journal

    Filesize

    8KB

    MD5

    6f050b5dc40ba8e9c06c4fd8236663c3

    SHA1

    934d7a380d864cdc6deb68d079a0b80f2599bdb8

    SHA256

    bc93b57d8423b9512f1892fd6b15c8af6846b0f265c3300046b53896dce89d79

    SHA512

    16c2eebcf5e5f45ae528aba3e62e39ae4c2d2aece328b085691b3544be9ab8b93d4028b9c26a706eb408b71e0d60edcffcddce7450c665487dae067e1e2bfd61

  • /storage/emulated/0/ppy_cross/7c8818e0b54505648c31ec132d64a3a7

    Filesize

    32B

    MD5

    2eaf1047d77004fde9c73a14abde4da2

    SHA1

    cd85623484c78a2cf0e7c7ec0203eba7478808c6

    SHA256

    fd733dd51e018d50f9c11a18db2b0954a4bae24df37ab291369822daf1872f25

    SHA512

    bb9cea9b58a8b2ab280ef30205a34831fe260414a16ffb9d28a956ab9ba6c538ae70915331ee267f78c484633495114260cef8723b6680f5628b87023812846a