Analysis

  • max time kernel
    2337802s
  • max time network
    163s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    20-12-2023 02:58

General

  • Target

    7f81a7aad68b590608401d7fe6aa5bf4fb4a9e389ff0913283b53fb88196b2c3.apk

  • Size

    3.9MB

  • MD5

    ece1a79e46d75efdf6187561a7e0db8f

  • SHA1

    fe06c7e3251981636fc330fc4efd7af9ac4d87a2

  • SHA256

    7f81a7aad68b590608401d7fe6aa5bf4fb4a9e389ff0913283b53fb88196b2c3

  • SHA512

    1a90f78812694da4a085942f9d6030853d03f615b2636fa85b9d674f8e2f65edbb21febbf237b39f37401376dd9596c2e3c36bb23c2fcf636c1b4db04780cfca

  • SSDEEP

    98304:BL3hGQupu/b6GW7AI+BIsoBhd4iY1H+LfMhPx:nmue3sehLW6s

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Checks the presence of a debugger

Processes

  • com.vladlee.easyblacklist
    1⤵
    • Acquires the wake lock
    PID:4990
  • com.vladlee.easyblacklist:blockService
    1⤵
      PID:5109

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.vladlee.easyblacklist/databases/easycallblocker.db

      Filesize

      32KB

      MD5

      9f507a9aa8da84d2d472efbb2fe28626

      SHA1

      58040381de1a3ca9a26fcde660ce301eefb5c79f

      SHA256

      418b888c7e64ddd3717233867d85a7b09230c9c2b02c2afec61361b5e6bcd8f8

      SHA512

      fadde8c68c732562ab867eb56a5e8277a8b1c52cebff26882ab0f6e2e2cb352853b2435a566f275040c258c3d1b90c6638d67e8cbad500935c36f87dc896c710

    • /data/data/com.vladlee.easyblacklist/databases/easycallblocker.db-journal

      Filesize

      8KB

      MD5

      6885f514b6f8fc692770e07806bbadd5

      SHA1

      a8d99d4e42277461ca156d039388eeee0c97f353

      SHA256

      dc9ee3643d8ca33194471881c9a5a9459156c956bfa0ed6df1ed7b208d85d3af

      SHA512

      126858b94802bbdb61cabc51a618b582d0c58509e6f4c10e073d47543c14075cf65b89494ebc3b737d186e1249e135e6af6bc7c13d7f62705b0e6646d7c5433b

    • /data/data/com.vladlee.easyblacklist/databases/easycallblocker.db-journal

      Filesize

      512B

      MD5

      d64618c8b74ac46923d1fe3f4a8f9da4

      SHA1

      64f29d46582e9490e8add645881c70a366a4e94b

      SHA256

      d60549157d485ba5c7e967010a72dc793f9566560608f8fb420af1ffb9eacf6f

      SHA512

      7aacf70ed59c4ca512d373f379bfa1af714457812da647fa1a543122a80ff111b83fd2b7c3038b365e434000f1a50fff40e796b2e1cfae2719e56adfab2ee820

    • /data/data/com.vladlee.easyblacklist/databases/easycallblocker.db-journal

      Filesize

      8KB

      MD5

      a2d7df6bc8d269c6f3d157db5aa89a0f

      SHA1

      50607434b0148d5c8c5a7ac1deff7f93874eda4f

      SHA256

      d48ab32a9a5441dfee047fa8b7863f788ed82328f00727294f280b2ad2951854

      SHA512

      3a70c11c9ec16c83c39f61168390e9bdcf7c53523f520cb666db81f40a0ac14a36fbf0d07898fb2ed3129799d2e3e6a15287877e6eca262166057e8a573a7504

    • /data/data/com.vladlee.easyblacklist/databases/easycallblocker.db-journal

      Filesize

      8KB

      MD5

      30868e62abc97a3f3aae7e099ee8267f

      SHA1

      28b9aa20555134b4860ed37d88c2492955d4c7c5

      SHA256

      3166de5f362c2ec2b007715496ddc361ae99fd573b962fe46506ba722a33162c

      SHA512

      0faa791f0bb251dbe452671ff6a33b80eb1dc59373dbf4bfb2afc2bf0664fd13be976fcf408ac33099f02c76b446a571d071e75ee84f5207c042b0fa475e9f12

    • /data/data/com.vladlee.easyblacklist/databases/easycallblocker.db-journal

      Filesize

      8KB

      MD5

      ec1c779733f675e6398d9ec603eedbc0

      SHA1

      2176369607f6e028d1047a84d5853a3f697472f8

      SHA256

      3a8b2d95412d82cd48a2e9234f97ce7affeb45c8ae6d6a4ff54dc37829041490

      SHA512

      3ef5bb11550aff3496b18960995319a0ec1591038a42669355043e34b5d8399f135c330400ad0429a7c68b09b7066aec02fec7f33e83e2dd7a2030122834e6f6

    • /data/data/com.vladlee.easyblacklist/databases/easycallblocker.db-journal

      Filesize

      8KB

      MD5

      a53f9c7664a3238a013520efffe51ac1

      SHA1

      55ce63f70e0d12a894e4ba2eb22804a03a81976d

      SHA256

      87f492d4e73145f48fc7c4fd99db3855246ff7a5c359e54c7b221d25b310af91

      SHA512

      10551342cb1155fe81c10cf711840234c15160a6a68733a6f367b68c13df79971e97ce3216b575e867382387aeb94304d008403a5fd84c7710633042b5492d25

    • /data/data/com.vladlee.easyblacklist/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      45a19747680e4bd773c061a4325c1f0d

      SHA1

      f11b7c9f9c40ca01faab9aaa09bf23ede7a3cc86

      SHA256

      fe8d48e774798e2807d20087d2090a0a9cb8c1af937841f8d83beb277e93340f

      SHA512

      f683a53e9faa401d900dd6df202fe71bf328b15a2c3cf402dc2340ce85a7afa2c38472c4cd381293f250962a4d943cd31b9aca9e81d9f6288078fa50bc93ec9a

    • /data/data/com.vladlee.easyblacklist/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      f7bbf320a8b6ad841325807b4cb9decf

      SHA1

      abfed3fd169bc846a1b247aa84da90aa35b5689c

      SHA256

      065c4764ff8f6ebc1e9b57fbf19320d97fe3a0c4329df49b275fedc61e47b1d8

      SHA512

      83069c696d4f1c1a098007866dcbd8a2c0c13b739a7f609f0ad094b5558128667388232cf2710592a2529f13320afd6b96e42964d3ec849801bf767156146814

    • /data/data/com.vladlee.easyblacklist/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      5e98066f367a75edd278baacc4c9ed4a

      SHA1

      587ec2c4dac9ba0d192612880f79c53550f8cc05

      SHA256

      549029fc276f04bfe2ac08de1d89df950736cc424f4347f65176c2f3683ab74e

      SHA512

      d02c34bbec20574f631b5f4dcd51ef6e59f6b08d7bd2e2ad1d8450242db983d08a5d883c82b2b4ef51d07aa4958508f0aac817412bb6b233269e0f78b8e22e2d

    • /data/data/com.vladlee.easyblacklist/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      0411f843372735c9d12130839638f1f4

      SHA1

      fd7ff3e7b619274714b4d2703a7f84fb9c27595a

      SHA256

      16e452b137fec92cf1731146c3954a0813c50cce4d684b4067404de5a2c7e346

      SHA512

      fc9097e68d905a2b88232d1be2ef9ae91e983caa52499ad2eaa7945f66aacd4628b19aee7a00a54db4865bc4eb89b79f183c216401adc8d728db028ffb1ae10b

    • /data/data/com.vladlee.easyblacklist/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      51c98c321ee01e1b8723ee0a9e05cb60

      SHA1

      943e935737e9e0ffd68575e83dda3fd3a2b921ab

      SHA256

      4c8d70de965a9b13ae745e53add9305c5ac4128d1d6c6dd5ad1953b18b78ce33

      SHA512

      ca5fcd377b80b02f623880d91eeddaf36d45ae396b666fdfe53765687386d186ad369f51fae9404408c473a25829f2c40e0d59fc630c3c25b476d0f073e7ee36

    • /data/data/com.vladlee.easyblacklist/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      188c0542bc062e48b614e5ca8c1081af

      SHA1

      0eb9b89a5c92957cd1fe748cc063b32853339774

      SHA256

      c1ccc325c2699ed7f556cf171566317f706a911c4d02b1644a2a7908b93da58b

      SHA512

      62a67f2c56bc3b40d49c80094f160d355a8f67130e1924109426e0481008bc2cd11a9e2675a901abd03cad1e7fe0028031e20d826437edcf35b6f86e2499c2b4

    • /data/data/com.vladlee.easyblacklist/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      db1db885efa81ea198ad82cfcd9f3846

      SHA1

      4d14dc3ee67ebd1087fa3953e65daa377c957312

      SHA256

      a602c9ea936a3af52edf15d0692f300b9a3d62fd025ac771b2f463cd3650566b

      SHA512

      76a739b23d7e7f3fb66e7b5fa29625c2f3248f6074bd95a2084f0a6ba16bed301c1f2319139464580674baa055104a673ae33f74d715941ebb1aa21324301d8c

    • /data/data/com.vladlee.easyblacklist/databases/google_app_measurement_local.db-journal

      Filesize

      4KB

      MD5

      f6a3fcec1d08a87f2c7ea1b97c7be740

      SHA1

      cbd493c1cfa3c5787247527d84eab095f0e5004b

      SHA256

      f4da7d84cc2d0b77f7d26cfb99e2e4cd3de2fc43aca96109b8784ee9aaf4704b

      SHA512

      95897a9faf8d7eaeae257350c30bea1b105c211bf74ac4d860f2dbc9623f08320b16391cd76eb009653c93f9f7860bf6847b002d6b0b23c2294f982a833c3674

    • /data/data/com.vladlee.easyblacklist/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      1ba440acb62d6737c8ace63f033ebb16

      SHA1

      0fcd953b0c29fa18c945ce4bf5008121659e9053

      SHA256

      2af9fb6d14681b08a1965c141a2629311658279a520d8fa54ec8dacee22971a8

      SHA512

      e6016d75cd1687653536f86504077a92bb7cdb63491eb0f99b46f97a9c0ea3817b2ea002066fadad570d1dedb120121433f7488565be9167ef2e6d21753646c9

    • /data/data/com.vladlee.easyblacklist/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      228521599ea4fabbe6a28cdf787afe28

      SHA1

      7a169e37ee4c2fe4f170a3403bd973e0d1a19ac0

      SHA256

      ef2aa6bdb275c8b9698d397e2c21f0ac579ed06d9d0e9f95f016846ad21ba0fd

      SHA512

      da64fbe032dbbed9c39c59d8cccdb47f702278e120cada85e3773e1d5bdbc09ebe1ca9e0148e5751cc1b125260abf9efc1f8047f4deb415bf0e38b2a7206de45

    • /data/data/com.vladlee.easyblacklist/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      dec75da74f9c60c715d8b407359f300c

      SHA1

      f6fcfd8266c3eb61c92aef42d46befd9660a9133

      SHA256

      2d6d64b026ca4af39b79773d330abde463d0d0330f8090306738eee0c6fc1ca4

      SHA512

      f5dc5f4dc0d07e3e92487bdd873e46ecbaf6d05c12fc4362610626e22c1e869b367482b9defa936a896fbf53e5f36af0c2c61fe1593c896ba75a26c3a8e4a1f8

    • /data/data/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6583ED67010F-0001-137E-0FFB1D6AF359BeginSession.cls_temp

      Filesize

      77B

      MD5

      7d49a6298ed2474ccb686a48d5ebfe49

      SHA1

      3464d1887266fe7e6e5a9eaccc3fe00c4c3610ba

      SHA256

      54eed24ed694cf111b999b4cb50ee8b7c428624eddc24e05dd4fd74bdc58a131

      SHA512

      579268bc839ed6651256fcf0ef09bf47e63fa8a95d40428a4348aa880394b21aeb7e0ceaef76c96124624ea78cc86c83c6dea3e7d118bde56643812f1b7dcbaa

    • /data/data/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6583ED67010F-0001-137E-0FFB1D6AF359BeginSession.json

      Filesize

      132B

      MD5

      4a5d859ab77e14ae27fc8fcff5c159fd

      SHA1

      f78c3b3888946553db8ec6a501943e8abf8c8dac

      SHA256

      f570c7b00311b295445576801cec1f53f0cde0f44a0c622002ea257686de5f71

      SHA512

      fe8b4c23293265418c7c2b7b6a97063df6569a82165186757c035aa695274f1b089f6ff0c066d00c0e4fdd8368a6f10f8a5943e711456df49f0afc85cc135883

    • /data/data/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6583ED67010F-0001-137E-0FFB1D6AF359SessionApp.cls_temp

      Filesize

      122B

      MD5

      c9124b15656df31598af1de27cf50e3d

      SHA1

      915d2bf6840ba61f157d655e01b8026f95aa6ed6

      SHA256

      f2911301563b233f4d3e5ce73c24dd9f345060541873cc273b4b8b7b300f5fb8

      SHA512

      1559d8a03545e7269cebea579a8c0a8f39f649bbcb8fd3963b7a15f0920eb605fe00e7d14dcb942b0828e1fb09151368a354199165560dd6d35077349d491c86

    • /data/data/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6583ED67010F-0001-137E-0FFB1D6AF359SessionApp.json

      Filesize

      236B

      MD5

      982b0a68994dac42f1b38add0f7c79ba

      SHA1

      bcb2cd0eb4df9962cd52d5f57b12b2896570bdeb

      SHA256

      77c7c4dea19b61f0a03c6d0a2af236900f39ae078481e94502da6d0ec2fbaa88

      SHA512

      a7427d7b07c7da5cfd519da11369ccf5b727570e41329552489dfcf578dd6cf52658bb7a89194eb221b37e6b1e9bb6bf420ab0e804f00701f4d2d6d28c14362c

    • /data/data/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6583ED67010F-0001-137E-0FFB1D6AF359SessionDevice.cls_temp

      Filesize

      48B

      MD5

      2390c1f21db00b20c07107e3ec7275fe

      SHA1

      e663a646460acc071aebee942cc1776c23d77655

      SHA256

      d348072a01496839cfcde3a18866423aee74aefd613fa3bf1ff4a203ef46a699

      SHA512

      43ff60754eb60795ca1c318f44dcfe49194add26cc3d92c2eac7bef538fd65b6290f2e5953b8f1693b9425ebbcdd022ab16a18280146ee0b0c2eefe27bc0bd63

    • /data/data/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6583ED67010F-0001-137E-0FFB1D6AF359SessionDevice.json

      Filesize

      202B

      MD5

      afa07370d07ed0a8ac9554ee7001bb72

      SHA1

      d1e9de22fda1295087525ff3a377f7d7dd410ac7

      SHA256

      8d4b99fc4968c9cdff4626ff6c1467cdb427f7a597b153f03b4bfb62dde6c07d

      SHA512

      a7a974b1c4ca3d7ca92e1449dc9718d5ea2af7f8e4c605d25c731fb4bbe891fdf340835e2a4e3a363558744e5ee30aec22542f377eb5bffc0097c70d24f241d1

    • /data/data/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6583ED67010F-0001-137E-0FFB1D6AF359SessionOS.cls_temp

      Filesize

      15B

      MD5

      2566d27ce8c28d8961f082c375d7535e

      SHA1

      92fe585b1a2c9c523d2fa1f65ab5c1b6a1a6edaf

      SHA256

      5acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a

      SHA512

      1c70679bbd25a57f9ac02083d5af0fe72b1417cf3070a195497f03d6f492e87b1ed3f570de7ea7c814c995a1530e32610d9570f31a480648f4062e8d3287be8f

    • /data/data/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6583ED67010F-0001-137E-0FFB1D6AF359SessionOS.json

      Filesize

      55B

      MD5

      5caea4b68c57072f7f52a5a41720566c

      SHA1

      4d9712f1702c7238949da43f7d8ae6efb233a666

      SHA256

      3223857b618b924c2b0fbc7bfb373a1aacf300a7b5ab585e18fffcf19039f363

      SHA512

      fe1455d21c521aeae3292bdcc386f6d2005dc253930c03e44dbcb972f96b849670d2aba039ea59e1a5ebc0350e6315151d17bcda55c161a62987d4bb01e91f9f

    • /data/data/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

      Filesize

      409B

      MD5

      e4432c811deae162402b7fe6f6e02fee

      SHA1

      04c453aae9d5ece1ed83cc2c00fd7c8b5586cea6

      SHA256

      c6c6674461c940d35f3485e91baa82a000d24c6e252abdcd1bfbc9e46f16478b

      SHA512

      df69f653bb0a0ee16e4326f5f02c38625ba8c78a5c56e6b2db76f669fc754330791d7ba93fc3ef6d9b6b166ce7e21d56e8ac86959a3fd73f4cdacef9eee1643c

    • /data/data/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

      Filesize

      861B

      MD5

      72d5c234753d457fb2fdfa0b893e44d9

      SHA1

      ff240be319ef699577741ed1030b135d8c684863

      SHA256

      a34d92f53bbaf1e80e7596393c2235041cabc1eb69c5ef1e3335f58427220909

      SHA512

      d153adb31750e06d92e1c84708f145d3167a40bbe8d66534ca19f3c19623ebce8ef88c89fd3a396e40ac362da95640846c9b1972632b9b5fca35758dec2b0d14

    • /data/data/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

      Filesize

      16B

      MD5

      c33583fae4e0b61cde1c5b9227963237

      SHA1

      fe2ebe4d27469af1460f7e852031a04208ef629b

      SHA256

      35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

      SHA512

      fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

    • /data/data/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_7a0aad5b-0041-4b11-862a-60580e0eef60_1703144812165.tap

      Filesize

      331B

      MD5

      ec9f1accaa66e8528c6b1b6b3772ddc2

      SHA1

      85513069c1c0c779214bda79331f03ca9bf24205

      SHA256

      768d2950f1f0b5da2eb317f72d8b14301822237e5ef4d5d34955ac1ce8cfcfb8

      SHA512

      f37a363efb6ead596a4345ba159c482589f6502518014337ed05f673eceed11d8e8ea5259f036eee0597027bd06e6f56c682391701157aa0102d6a0cfba05bd0

    • /data/data/com.vladlee.easyblacklist/no_backup/com.google.InstanceId.properties

      Filesize

      2KB

      MD5

      65d671c987d0b7fd1e6bc6a8047be8b7

      SHA1

      dbdf288115c48b44da3314b5d2d4210c9405726e

      SHA256

      344899dd690bbd19855909ffb05789644a6005cb5340d4c5a1784bde9f135f54

      SHA512

      8379c0a3b7561823b4cacd841bbfbe0e093e60b55fc113c292f814809cb59e107536b800aa116b600f75762b44050719cedbae28149b6bef43379bf736e407e9