Analysis

  • max time kernel
    2418549s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20-12-2023 02:41

General

  • Target

    7e2c9f717adeda8c3bc7cdcdf362a7aa44b34dd39eb5199f90d3275cfe5b3751.apk

  • Size

    2.1MB

  • MD5

    3ef59e0e6fe475ec33cfb8797be8532f

  • SHA1

    c301fb85cc2a6025a6f51088abce3caf4bda3860

  • SHA256

    7e2c9f717adeda8c3bc7cdcdf362a7aa44b34dd39eb5199f90d3275cfe5b3751

  • SHA512

    7882adf20a60c53c29eea805950b116798d0f3f989ec0f70dc7e2e84fcc59de9fec493e3aa89b32e316bf73d2a8af87620c3b6a096c5c322e5488f0ecacde841

  • SSDEEP

    49152:sWMJVcSAMI0vic6hGJYIjEW/wBZjHGP/Ic0TAe4pz+Pan:iJWSAMIyl6hqYXW/iZKP/IDipb

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs

Processes

  • ctr.teodor.nipald
    1⤵
    • Acquires the wake lock
    PID:4260
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4307

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/ctr.teodor.nipald/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      f0ca02fac97b2aa0fb028f74195f8eba

      SHA1

      ee27640c8fe378b0e50f48800dd26d91d9df55aa

      SHA256

      8964f5606210446a9289b761132695cd54f8590ca6473c6d5298651fc81588e4

      SHA512

      16cc0c0c6aa9bbfd9d3bdd41df71e46bca4749c82394fa6014098e128a22e56fbdacc4ed8ba060807ef6af80c8c7e8a59dcbd066303d64684e9f010822d42e72

    • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      89e07682b18ebbe416c742adb8a5b4f2

      SHA1

      1406de1c04b35566af40526de383c8c3c0d2b9a0

      SHA256

      bd069a0a414ef5fd56456174a7e0b8031602ee72f9df844a4aeaf6be0331159d

      SHA512

      2681d134d776bd344fa9d50d4e1872a2e623a3694d4a760ad8dfb6694969bc531132cb9ecac7c513bc84a642420976fcab62697cd14a820e9b611a344b4a6d0a

    • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      e8e96344f9f8122d2de686020efde2fe

      SHA1

      9323d12beba6599f84892e506344b552b2dad3f6

      SHA256

      5af15dbe5ae980850e79d1c517412d6fda888563937be5cf138e12dd335d3428

      SHA512

      75969c6229183ae5555c67b4d855d9e05afe3d3f2079e3480e1fa8a1c72878d51b04aee4be3600564d985713bd0d608efa9d5593409ddf58597e465c3f948897

    • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      920ad7ed638ee1139a973d1b0ee27187

      SHA1

      74235cc2c2b473ad283bdff160b17829f8f4b159

      SHA256

      c781bd1c92da50ae1c54654821f2caee359fd31b1b40447c3cbabfdc5a0aca3f

      SHA512

      7be30a17c0a385eb43f5b2cdc23a366884a5118de9d3663af79897adb6961c42c2ae778385b31a37c224781c27ec78f2f37c72016e93d60cdfba161ee6123929

    • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      3e881d9a01ca707bed38018ac69f4518

      SHA1

      5820f9351d7cc8082de6e5686eb9f8fedf6fb830

      SHA256

      4a5bf9bfe9b032546f886dd5fe6717de78716734aaadab620c0444ed6df5151c

      SHA512

      8f0395c94b3a449f3c61e7117f400c7b8a12c23d3655be6772bce2c8aa0ec8d8be8000c5cd2c6e10b334ef54a4add5583717393c3239da80c334c45b8b392db8

    • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      43a5eedffb658ee1e91e6570941e2b1c

      SHA1

      afed5fe89994178e9e43f32abe2720ccf0d4b625

      SHA256

      66506b3209b4c344c82bcdc47b3f683f81033a44f117efc87c1cfb68abf698e4

      SHA512

      9713d034dcfcbd34186b2bfda517b7c5c6787c710e2070d6e883b94263487fd53a413638ca0da3ca44847e5d62305294c4a446c2459b61940806d48e0f64091c

    • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db-wal

      Filesize

      36KB

      MD5

      949c4bf75e1c05bed54b75c26f60b926

      SHA1

      67c468cc175b6747b2c9225fa2c0cc3c70c54fe6

      SHA256

      6b6e5a4a595c427730e2d92888083f6c3da23cffe31bf394f7ad36102e436f49

      SHA512

      9ca5a75c9e939042eb783ebca9e3b6c71271bd95fff6afd4a08c84b4bfa55350135934869b357091f4e8a2496350741edc5cb68b7b406a431a1fc927ad7bf401

    • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      358b9f5388220899dbb0e31968fca8be

      SHA1

      2edf05a73cb709f2463b6adbc201e67c9010081c

      SHA256

      2fc4bfa8c564b4864830cabf95a54e6d2c53ec81eb76431afdbc55f986d00110

      SHA512

      34420ec97ff791e4d2fb93ecb244f5931b367d9e59dd35a11c77909712e870541e06be30d8a62a15b9f08fcc12e325dd39739804d0de4ba830c82e65e81b1315

    • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      017348e9ab7288bccd7c89cd75731c87

      SHA1

      81975b3c0ca5f9ebf7b471d7f806d1147454ece0

      SHA256

      08f09cad44d95328b41eba6be82590902a86dc24e2c968896366456bbe21d2af

      SHA512

      abe2341cd2d43604739e2b9cf1994503f49400fde5ac79b08e3c802adae41f91d3a745ac84e9e8a728480f6fdf237ee85c9cf8bd5743200c986fc7d3d8f6851a

    • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      aee49c874f1dcd9d2de06d82b9167dc2

      SHA1

      5242fb90cb966e07d0e1820a74428fade97af530

      SHA256

      b1f6816318a509c7fa1f334bae06ac3b325320722f524ec4160c2c75aab9bc27

      SHA512

      beb7f819f475667fee9b460ae64d2a7818e4e5d1b70462960d99a97f9576e2a6a22bc9c73ba8489249c5b31c21236da648d3a32c0bc12d9158c16070f0fd6345

    • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      a2da080c6b0732f9f4a9870fb69a44b9

      SHA1

      226882ffda50bb58065fd6a62d11911257209f5e

      SHA256

      3d46c9bebbeeeef787ee41ca9417ae084f57e69c96e51288034baddba638205e

      SHA512

      c1141c419de11f64923e34623e916ac2c7e282b08e9262c13aa5fb3f9fdc83c621a74b65ed0617ed971a5c92cc1faa38f403b0878a55daffbae6a877685cd748

    • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      3450992e4631dafa06f257d411c3ac88

      SHA1

      f9689eccb0f303d1fbc3945a4fe6f49db1e78a26

      SHA256

      8d842f1c08ade9043242c5c7e2d13242bfbf696686d1d310c6a3aec060854b1e

      SHA512

      989260409646a2016fc8eb2e8fcd585c18289b5af3df5a7867b9d33a30280ec6c5d210bd4c78b0830d6efe6b2b01b48eee91e34e8801529d8a0c0f12dd6713ce

    • /data/data/ctr.teodor.nipald/files/PersistedInstallation6094418682705022174tmp

      Filesize

      564B

      MD5

      f0303c4e60f79708afb9b9382ece589c

      SHA1

      144a987d1ce0890025064e74fc15681ea3e4b7d0

      SHA256

      efed3b61263adc56af1a3db1990b322304ab99e5c332fe6da11c3a9635209662

      SHA512

      fe86e95b80a3286cfcb64ab07b268c984ecf694d360ae20f4ebc5a6608b9903028dd3d53a69cba5cc82117afea3114b18c36ec0455ed4e1cfaab34481de76b50

    • /data/data/ctr.teodor.nipald/files/PersistedInstallation8488301149449157071tmp

      Filesize

      90B

      MD5

      44047da843b593991580eaa4f7f810fd

      SHA1

      a9333f9d7763e5056298a451b230a82966d83af8

      SHA256

      4d77f4950ccf7cf941ec1d0d4dd37b43ba3091e2f6783899dbfc048aeb60138b

      SHA512

      fa0b221825ab4a4e5aedf1bb95d7627b035c9863c4feff553668563aa77e8c222368291fbd6c85f09b2aa1b27856626e098b6d722eb6db9cf8de61a5573ccc1e

    • /data/data/ctr.teodor.nipald/files/install.txt

      Filesize

      13B

      MD5

      f64ff66bd253363c4c9fe417246e7784

      SHA1

      679fb861619bf017d7a0281bfd9f0e219c1e47f0

      SHA256

      00288e71476179f559d88536f6645ddeb51c562a8b3ffcc327c0947c1d1ee6ed

      SHA512

      46c521a87a1c85b9e66bee651e07773d7d3c919036b078ebe22a5e56d8ce7b230cbf019c88e9854fdd75af4f3af651e6fe34333c610c9fb3e1a050dbc74ade71

    • /data/data/ctr.teodor.nipald/files/lastmsg.txt

      Filesize

      4B

      MD5

      334c4a4c42fdb79d7ebc3e73b517e6f8

      SHA1

      71f8e7976e4cbc4561c9d62fb283e7f788202acb

      SHA256

      140bedbf9c3f6d56a9846d2ba7088798683f4da0c248231336e6a05679e4fdfe

      SHA512

      ab93a9e95d70edb06025511cea4e2b8047fb7e1deaf7244fc0d3edf5e7cb57d8fb7b951bdeb3c6b552714878749eb19b9103e64a83635e8885c7d3e1d0fc5649