Analysis

  • max time kernel
    2326603s
  • max time network
    158s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20/12/2023, 01:55

General

  • Target

    7bb389b895fd5e92e9a9b5a39b9eef75a6ff194ea5ff7d659c6fc131de97d288.apk

  • Size

    26.6MB

  • MD5

    825046d74997264fd8af3b1c5607aa29

  • SHA1

    0d6386a9c2efd0bb1039e641ca730dbc5b06dd19

  • SHA256

    7bb389b895fd5e92e9a9b5a39b9eef75a6ff194ea5ff7d659c6fc131de97d288

  • SHA512

    56f86e8b2af265dd75ddfaf2b5657ce5ae6afe31b731e790ca71cd4c5a12b8318778988e9da1d2ffa990a548783ba72a72e123d6ab3e22ea46fa965fa157867d

  • SSDEEP

    786432:OdCDoskc4Ap7qz06SxNqkvocnOhT9TOd6J0k5Uj:OcZkMQzR8QoWTrJtqj

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs

Processes

  • com.sleeplessclinic.brainit
    1⤵
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:4250
  • com.sleeplessclinic.brainit:ngds
    1⤵
    • Acquires the wake lock
    PID:4282

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.sleeplessclinic.brainit/databases/com.localytics.android.3975f6aaa5ea617e2a2eb6468dd9e8089e01c10d49811ca2ac55dd523c6214b9.sqlite

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.sleeplessclinic.brainit/databases/com.localytics.android.3975f6aaa5ea617e2a2eb6468dd9e8089e01c10d49811ca2ac55dd523c6214b9.sqlite-journal

    Filesize

    512B

    MD5

    8a118cff2f4549a3800dfeacafb8789d

    SHA1

    01ac0addb63d91fa59d48c4a34e437d23f7bf595

    SHA256

    2096449feccf2dba6863ae183e22e877abfc5fb65146728ed9863d5608a3acf5

    SHA512

    ca090309ad27464e65229ce2b7ff4a68a686cc26a85ca31d1779a79e8310956458e602317b4aae3838f016a8ddcb19108418e7fd919f0e86332ac4af5bd81bd0

  • /data/data/com.sleeplessclinic.brainit/databases/com.localytics.android.3975f6aaa5ea617e2a2eb6468dd9e8089e01c10d49811ca2ac55dd523c6214b9.sqlite-wal

    Filesize

    16KB

    MD5

    0fffbfbd5c388c888d22d63a7b03d0db

    SHA1

    0e17cdb5830f79f2a1487a26c3b37f246af51bc2

    SHA256

    7b523bb743b183cabe878af836fdf0840f105208ece663afbfbe98c550f50ee1

    SHA512

    0db64598aa6c3019804b00161ea9b07fff65fa2b71f54c82c6b290dcc43cb283865fe203ac2a0e01601ea55253766ff05ffe2a17fb4a6eaadccd5edcb7f3d990

  • /data/data/com.sleeplessclinic.brainit/databases/google_analytics.db

    Filesize

    4KB

    MD5

    f61ede169862cdb85658fc51ae1a8926

    SHA1

    c8818c318a901e18790ac7c941fad72be55c0ff1

    SHA256

    e73a4cd5cd3dfb43132568946863cd80aa36aea882ec9b6b28a0f1ea9167d26e

    SHA512

    da10d7328912179af711dd35721fdc03ba2811a43616db68c38701a007c141f47e186f448d6aa902ea4f26e5cda0c75761cef259921397e0d3b9ceb1e8a090d0

  • /data/data/com.sleeplessclinic.brainit/databases/google_analytics.db-journal

    Filesize

    512B

    MD5

    ce89451db200af17b7ea8da8cc56dd28

    SHA1

    ad6c2409b862e91ee957d66dc3f1ad804284cd86

    SHA256

    fbbc4fdcdabb501d2504c069f036616f4dfad5556abc88bf8f736e64a4757cc6

    SHA512

    b6cb6da868c3cf9d95ba59aafc2def6f9005730ff32e76afe5696dc291c3a6d5896d19ae6e5d781c742a84d9073f4834f432da5ecc1db1600292847844579247

  • /data/data/com.sleeplessclinic.brainit/databases/google_analytics.db-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.sleeplessclinic.brainit/databases/google_analytics.db-wal

    Filesize

    80KB

    MD5

    bac4280c58fdf97891cc29e11d116276

    SHA1

    1ca4e00535f7b1bad9115d6a51e540d17a437475

    SHA256

    ad7f134ad177e392fbf95ba051dbcfbbc0ec3aa9b1ade17c9bfc014c464b991d

    SHA512

    125d2072e64b0bc68b44e986f05ec748b6c4151aee46d8d3bac07533474e045e0a54a599ca71b8b2d6269eaff12b958e0769fb5c9fe791d823e4ff2c648d253b

  • /data/data/com.sleeplessclinic.brainit/databases/persistant.save-journal

    Filesize

    512B

    MD5

    f5180c86b9a7217d2ddd28952cfc1307

    SHA1

    62c8dba1263ad51c9a106d2e56b9709dc5fefad7

    SHA256

    e1ccf5dc20366c60ea339475dfc5c47de2e47a1d3540c5b7b424e6337bde4ebb

    SHA512

    d3b9e62cc0da30630d065e8a6245f06c31610b771a8f7c8bf1b34331fb1cf28680b51efa2bbae3309ab6d38eb4344f7e06a03fccbdc205f2478e52a7eff75029

  • /data/data/com.sleeplessclinic.brainit/databases/persistant.save-wal

    Filesize

    32KB

    MD5

    c794706f8e789f352a8c32c6db0df2ae

    SHA1

    46be5c575154ed54936180f21fc65123f272fb67

    SHA256

    6eef0a1742438a59bb77687f828e26e56f7acdbe79c927fa00dac8315889b5e8

    SHA512

    fa1ec6adb9bee36033c83da2af8483357acf07cc71890aec1d2601058eaf73241a26dd2a680febe342e129a07161692cff40d03afb930b33cdb627a3c7af0e6d