Analysis

  • max time kernel
    2335340s
  • max time network
    144s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20/12/2023, 02:41

General

  • Target

    7e2c9f717adeda8c3bc7cdcdf362a7aa44b34dd39eb5199f90d3275cfe5b3751.apk

  • Size

    2.1MB

  • MD5

    3ef59e0e6fe475ec33cfb8797be8532f

  • SHA1

    c301fb85cc2a6025a6f51088abce3caf4bda3860

  • SHA256

    7e2c9f717adeda8c3bc7cdcdf362a7aa44b34dd39eb5199f90d3275cfe5b3751

  • SHA512

    7882adf20a60c53c29eea805950b116798d0f3f989ec0f70dc7e2e84fcc59de9fec493e3aa89b32e316bf73d2a8af87620c3b6a096c5c322e5488f0ecacde841

  • SSDEEP

    49152:sWMJVcSAMI0vic6hGJYIjEW/wBZjHGP/Ic0TAe4pz+Pan:iJWSAMIyl6hqYXW/iZKP/IDipb

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.

Processes

  • ctr.teodor.nipald
    1⤵
    • Acquires the wake lock
    PID:4468

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/ctr.teodor.nipald/cache/~test.test

          Filesize

          4B

          MD5

          098f6bcd4621d373cade4e832627b4f6

          SHA1

          a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

          SHA256

          9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

          SHA512

          ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

        • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          a8685c9e22e70f5bdec924a322c53d09

          SHA1

          6f9b9e854a2d6ec56c27f3b4477ff40d7b4aae76

          SHA256

          2d660e342e8423c868df5a6c0502c4ccf41d19c5ebca11f9a7a6a4614022353f

          SHA512

          00948aa145e4d0bb32115b47cc1821b4b0baff104463a12cc61037930118f2b28cdf7203ba15b54feeebb9de9c5bc84f37052ff263800d8597915d0a7ab8a595

        • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          da87f1f6794fc305b047dd5e0ddd21de

          SHA1

          731d23eb7febe2bb93d9f27e5c35dc2e1199b6bf

          SHA256

          70d76c2204a25b8b1ba3a24eca8eb567b2e18b53c825fbbce63280a2aa30ce60

          SHA512

          80437c4d468f5840602ce6d1acb9ec97dc1a5bd534c4c9f8e0ba8a565719d832e60133ec64242d93bae5fe26a974c33ea6e05fb662061e7b3e368f77cd6e1a2b

        • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          9a7d09a33b2db5a688c9895c56e7c3a1

          SHA1

          173226ea388551b84aed57dd90689c7426190dfa

          SHA256

          91b3a0f6de556da48acae8af71ac98700c4002816733b68ad8a06d332023b145

          SHA512

          f836fe8a197161678ac85a0babbdf8b6084b14dcf4cadc966b5703a1d5f38203ec35e63234f17be47f2b48e8b7dccce9550d5241e2d558b1390663869a81438d

        • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          ab5d088bfd58ffc707f48f421dbf1dee

          SHA1

          bc7521b6f1d6bf4994fdb01b4d9112f4204aa317

          SHA256

          b89a633768a5795d837256e6d60c455de1426ef878ca3bf01ad07119a8ec23ad

          SHA512

          1d72dc5de4f47ffa46349be50aa2c71171bd81a3c668a61d09008c4439cc0c5083f1a5a68aac1cb19b2bee612a76e6e6ec38ed36cb92078aae301b4ac88d6130

        • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          de82e2c94d2718988804b035a46d17b1

          SHA1

          705f5ff19093ad209f2a666085d6ccaed3bf58a4

          SHA256

          29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39

          SHA512

          68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e

        • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          d9cf75fdd1c2292d986f6c3d5d60f2c8

          SHA1

          07ecb1d3a26d952ae5fecf54f36699ab498510b1

          SHA256

          2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

          SHA512

          442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

        • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db-journal

          Filesize

          8KB

          MD5

          5bfb3afc54c593b9eeb464392778530b

          SHA1

          3fae67407b2932215474a1d9ef4c4fba60092ecc

          SHA256

          a3a82d5936e6aa43306dd0d8550c9f7d5c78f249a2ffd8dbd4d583e801e4641b

          SHA512

          0ec532b5d837a349c8f94fa1fc999fa002a9187b445eb148e4afdabf244823ba613a0f0bc4dbb8f72d0400e830ff2faaa8ec02bb9ff4388b790808fc27e28d90

        • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db-journal

          Filesize

          8KB

          MD5

          cf806637fccf8e3d2c2438e878c4aa46

          SHA1

          95038eb4a2c4a41a53f9bf0b1b2a24ce1aa0446d

          SHA256

          6605b9e4cb5ecc7dd183ba3cceb4502968e5f03615588d5ebd176c37c7d4cb85

          SHA512

          8d73649f39a33d25b08bba2ba51e12b8fdef78bc9d90bec21ac61705ef840a1bddf7c6fb193cf26af65cb7e0b2afb926a14c599b593b547a372ed675acacebe3

        • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db-journal

          Filesize

          8KB

          MD5

          6ad2b9db03445b3ce0b9abed05f30e43

          SHA1

          38a857fdab430a47e881e2ae4d41962738685987

          SHA256

          4b2081fe5ccaa992c5021889f83dd333af50eac5d3f9a1a57dcbbe000d28b6d8

          SHA512

          29754f086bfb3f1fb895a8e80511c53f1f603fd7bdaa9cbf4386ee8f3835dde0f1181d40c5f2b26811321e5511a261db02c19af385a0a0deec8df58121f11e60

        • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db-journal

          Filesize

          512B

          MD5

          62e5f1cec905a91ef9958a3dc2f93aaf

          SHA1

          dc402aad14e6559f607d427c27de2b45e52b4e11

          SHA256

          fdf0c06260eea5711558182d6636746f87a037e64d3fcd55f80a0aebfc746cca

          SHA512

          0fe816d7d476cce5e4c59facf08a13baf651fdd97a11d19bf06a76a9e789a0cbd3da4f0502328a9553e8f7c6fdda52a88be3d535708b12623833f69954b870c3

        • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db-journal

          Filesize

          8KB

          MD5

          c9c9fd98fffa56a31887eb3237c53a0b

          SHA1

          9cdfd6339668c89b8ecaa27a0b98cc4512bd463b

          SHA256

          cb987d1e0420dde7560048d9be11b84eb3103fdfdf3b228f7e337fbe278c8e18

          SHA512

          f33d550153867d27eb59a78b815e1efa32ad371aee5f77befb99675dfba13de33492bac8e346c78fd27f3af4a87e7e374c9765ea7b0ee9d5305051e1bb4a4ccd

        • /data/data/ctr.teodor.nipald/databases/google_app_measurement_local.db-journal

          Filesize

          4KB

          MD5

          4295e6ad610b66c70a2749326346de45

          SHA1

          8cae26aacd074e459458759db545b058a6706a1a

          SHA256

          ea7cd33319ef0ac6291e1cd7ec55d283b77d85fe3a5c85aeaf410a8153e0afa6

          SHA512

          54813286e19862627c77630aa598b39f8c0c725d1d9d9e444e1a0ca9f8e4c923747f070bd0d464bb99e29735913d5af0159397ac0ea3d11d464e7c8c9ec18c6c

        • /data/data/ctr.teodor.nipald/files/PersistedInstallation5825524167353253141tmp

          Filesize

          90B

          MD5

          e386d20f653afc0cba4b6e0c21fc17c3

          SHA1

          d876918c099164f4a22178f7c8f8259eda0272c6

          SHA256

          1c88d3a06a750591603334048788988f2168b8d8328fda3b8927523b818f7a21

          SHA512

          b2a6933f5193bb5deef86119098748b1d55ced70746aefccd6f164ee4adb95009a9353a6faf03a92af71e0dfab0a0fe260c2efe2145fd1a82c3e5b1734699a79

        • /data/data/ctr.teodor.nipald/files/PersistedInstallation7862986074168871250tmp

          Filesize

          563B

          MD5

          c5f998dc7b3e7bc8bfadc156889f82e8

          SHA1

          5e731881cea2a67b99a75822fc3f2ed9ea594583

          SHA256

          b8477963870a5614f6f094a6b557115cf10489ce68bfe72ddf92331653742f63

          SHA512

          e72b4b835f57cf0914a4bebc24895466e292062f33c82ab9e7a783489e8c6a25e24d392a2f73fe0c3ce04ab78cf0c615ac78284f8ed09b4f161211a7279db654

        • /data/data/ctr.teodor.nipald/files/install.txt

          Filesize

          13B

          MD5

          a60170ee627c2561f1334bc7149ab187

          SHA1

          86979e6b3a1cdd020a704683122340e3b91d6a8b

          SHA256

          477d3ee173463bd816b59930c9083ab8f70f9627f035e3bc599077ab6a1f2d07

          SHA512

          1534ad679167722dc317f2b9894159edfd19e32b1df3448a68093c8b799212d74394f4765a6b49bbd6e4a9e4c1840d9a6c00c52051980e4dba15d706c25c1b79

        • /data/data/ctr.teodor.nipald/files/lastmsg.txt

          Filesize

          4B

          MD5

          334c4a4c42fdb79d7ebc3e73b517e6f8

          SHA1

          71f8e7976e4cbc4561c9d62fb283e7f788202acb

          SHA256

          140bedbf9c3f6d56a9846d2ba7088798683f4da0c248231336e6a05679e4fdfe

          SHA512

          ab93a9e95d70edb06025511cea4e2b8047fb7e1deaf7244fc0d3edf5e7cb57d8fb7b951bdeb3c6b552714878749eb19b9103e64a83635e8885c7d3e1d0fc5649