Analysis
-
max time kernel
2337785s -
max time network
160s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
20-12-2023 02:58
Static task
static1
Behavioral task
behavioral1
Sample
7f81a7aad68b590608401d7fe6aa5bf4fb4a9e389ff0913283b53fb88196b2c3.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
7f81a7aad68b590608401d7fe6aa5bf4fb4a9e389ff0913283b53fb88196b2c3.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
7f81a7aad68b590608401d7fe6aa5bf4fb4a9e389ff0913283b53fb88196b2c3.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
7f81a7aad68b590608401d7fe6aa5bf4fb4a9e389ff0913283b53fb88196b2c3.apk
-
Size
3.9MB
-
MD5
ece1a79e46d75efdf6187561a7e0db8f
-
SHA1
fe06c7e3251981636fc330fc4efd7af9ac4d87a2
-
SHA256
7f81a7aad68b590608401d7fe6aa5bf4fb4a9e389ff0913283b53fb88196b2c3
-
SHA512
1a90f78812694da4a085942f9d6030853d03f615b2636fa85b9d674f8e2f65edbb21febbf237b39f37401376dd9596c2e3c36bb23c2fcf636c1b4db04780cfca
-
SSDEEP
98304:BL3hGQupu/b6GW7AI+BIsoBhd4iY1H+LfMhPx:nmue3sehLW6s
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.vladlee.easyblacklist -
Checks the presence of a debugger
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
32KB
MD52fca10b48398751740aae4b2c4a59fe1
SHA12b2c26eb56d59a4bce08f3e8a9818efa6bab5981
SHA256bb3eb55ad960a034e867a39d5b22fa841691e5054751078faddf45cfbba9b6cf
SHA512e5ea2df796be698a6d03d1ee86973b19ed4167aa6eaf1d838f8df141370bc80d0ceb65ffa395d3529b08d846ef23da607ed2c9e84c6ce20457bd685fca7cd62c
-
Filesize
4KB
MD5e9ff268899e0a229061c45ab2527afc5
SHA15285889319792cbe2cd91f923d592ffb1a590e7d
SHA256e2696d70e4f8fc3f5697e21cdae66a99f20032e6d2b459a138b2d2ab7fc13017
SHA512ff23506e2398e82cbe942f85c3abdb30ea5c16355ef1962f2c41d27e9a23f36362acc7398ce9f84fc7920b64eb7b27ef8b89063173a86916bf4413a2afa3dc55
-
Filesize
512B
MD5901efdb5f1c910deb2532581b80aa26d
SHA1d20698cda75f1e3eb27754472137ed8f6968b81a
SHA2569a05f88836a21533a5c3127f41c46f1b1526431c0cdd0410e142b1ece41c851c
SHA51221a80a6ce3e233f3ca7cce23db7708aa55375de8b88a332080956f8724b5f762c58a827c5d910f3652da25e1af8a98ecabbdf3db80537664dfe0c88da67bb8aa
-
Filesize
512B
MD52be54516ad747ef83c20aeace08512b6
SHA1fa56e2ab87ea502295f074ab1ba7773fde5c2d15
SHA256f624cdfcffd6b09ada9eb1a6955e88dd6c86c2d959d788ce068e4628cf8c0a27
SHA512f1e35a8b0533068d8bbea096bc7ed89e425c953da92adad89d0fbbaa27ff61840be330b27fb9d6378400bc31c456831eb0fb574ee770e8e9a2129fc410ab8ea4
-
Filesize
8KB
MD58aa7b1284f97ff6b18367dddb20cb6de
SHA15c3bcfa6620b77ef15be41021c5246522daebda7
SHA256f16eee518fe2c87d393059b127c4bfb0b6d9d1226890dcd13c9512b7c5dced64
SHA5127fcc029ff8f4bfc5a7d87053a10e1b51bd92c732919bb234e4e8e9a00f73da20a0c956d1fefdf338ff132f8ddc8f572d818c3dc6b0758aae9eea4285d5d9c8d2
-
Filesize
8KB
MD5c13b6e6b80a3c88307449ef102a9c31f
SHA1fc066017d7a1941ddf29e14d67503f67b7235f56
SHA25682ea953f7e4439416fb757216660d9289d68747f2a09bdb2b33515b90acad482
SHA5128d3516e9396446945653073b3f096eeb872e95ee3ea5ec25ecae5abb6ccde1f7f2035b5b8e5cb9ad92c88fb65e86dcb6d4358a081cb5c43e2c3a3b8479796d9c
-
Filesize
8KB
MD5d3319cf779d4c453ec3241f1dd6a6e63
SHA10fa76a9891ebdcfaa68ee8e8107d0a5b3a38ab9c
SHA2563f1c507e14e34560f081c9529386b29094f62054310a836fb4ab55acfd4e5450
SHA512fbde175837df4093ae32fb5603f93c63eb497ef43f8bc4af2f881ea30e9ebd7e7f2af969546096e1c25e333cccf36e026e1e54726488d96bccbf47c8754b28e8
-
Filesize
16KB
MD556095d3ff8bd3b4c948a13de73361b8c
SHA1e48bb9f545c343517ce5a23ce096a37345ca26de
SHA256cf2c0bd6e8515a907aaf7b61a2860eff9a4c5b9673e74c6c356334e25645422c
SHA512193a1dbac5496a6ac86bb439d8da3289f70631191b8c4290527d4048153a1b133b2171dde5cd9dd602989edfd6f1670e753889d4d5e4f8c2b8b3c2b42b5a0255
-
Filesize
16KB
MD56cb753e65edff2a24dff4219b5d963bd
SHA14579d1a03b33aa888df22bb6fc93d3e5f30b2824
SHA256f0b2dca77d4b5b341b7f503c0f5d919ba7dcaf030e7c491cc4f6795a9d0b1a5f
SHA512b7c700667148795b57770d59f71d83f78f2fee92f7b2437584de09d2c509c81b10029eec5d4dd0b8de7fa1c4b58747fc9265ba9bc59bc2725262cea6b4a75464
-
Filesize
16KB
MD5d4365dea5fe7e396dd5a532dd8535b8d
SHA11103cac62e7e6819e7cca7e61662ebbb54e8ce84
SHA2567972a9942f2fd930825f949e5a3cab070806a9e6e7b087d92c474b6e2b4bb8ba
SHA51288d710a18f992e3bb763fea1720ffe6a64cf7ac557d46cb06e3a5532af27f6919f95c9053ada5162a1d2c8e7c4e27565bd8c5e6c3317bb536f2b1add5050724f
-
Filesize
16KB
MD5a574836c1c2c71d57680dd1e062a59ba
SHA1264926cfbf19f96f207f801772ebfc55362d96d8
SHA2562dd56888b0b099b8eab95d133366fa54760103595b9711cc7050f00de89508dd
SHA5128090cd5523235ce7ee17b6bfc8d0a3485690933c5e3d4b00087766de81108dbbb267318f352bf33bd83171929f9aded62ab5133f1400230928a40a16d8f43e57
-
Filesize
8KB
MD5143a2fdc3b2263e67cd595c000452b02
SHA15ece0886aedf785ab589c5a984be835fb0709905
SHA25629bdabdd2ffc01bf723ac75b326af3f1a69e14781eaba36b78804d655ba81bb1
SHA512e1f1b28a603dc78e1d5dc9e2c5c5621bf9564098e5575915df1a18ca9c86dde97141efb06e76ded5596774add83d49e1a33fc30f3e0e69dd4f087bf52cd2bdc0
-
Filesize
8KB
MD545d67aea39acc6ce6dd3c8a249dd7ed4
SHA19185b64aadb864df82ea741bc5e3931fafc8b55a
SHA256730bb58ab0e771d56e875cfd7df6a4b57bda4c890f86ae4512d1771c2ff8bc93
SHA5122fdeeb8d0ce148cf448d0a40eb5c93d0272cb76d2ff0517dd64aa9f1391b138c85eb97405d558e8aca7656f07ecba803699741563281667d51f213cf2993c502
-
Filesize
8KB
MD50bef19827490df6e3e1da48c3fcf5c74
SHA162bbe90ce33cac0d7f9c933df91d373e126e9ae5
SHA25609879b326e19811e9f2ed4c8d661a3ccfae947c87839f739b714df205f787a9d
SHA5124bf30fda77b97e4cfdb1637f71af150194745c7dbac8f999f6ce9fd4bbb025b5db48eefe058e59f0b34faad6b700206e87af4ef3df25ea61a4082379d43b6371
-
/data/user/0/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6583ED6D01A8-0001-11FA-D57AE015819ABeginSession.cls_temp
Filesize77B
MD58775c9070df8144cd0afaac3d44e8805
SHA1466449749fad79f9c99ffd5567779d30f726bfc0
SHA25672ae9e4722f64da21942d9aec03340db9330d615c0a32c8a32f0e3dfd3271124
SHA51290693ba04eccce5e982c762c7c75cf029202c50c8a5347fa149e6d0297a75f70f6301760213753b9ae71a2b38e003692645d01eb1e8de97aeeaef0577030aa92
-
/data/user/0/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6583ED6D01A8-0001-11FA-D57AE015819ABeginSession.json
Filesize132B
MD54561f24b62458a3445b43171660e7d34
SHA1d68eaa2737049dad31fab20a64bcbb2700486892
SHA2563e8c52d2895b04a598bf24b93cb17add669f963f7decd34b60a5a53235ef07f4
SHA512a098a074fd742af5e63364dadb0397735f94c4c51f1921f18482e27871805efd47ceec4dff3cdab61a070ce8da94bd9dd1ca0fb3369d23ed8d6a963b379f6aab
-
/data/user/0/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6583ED6D01A8-0001-11FA-D57AE015819ASessionApp.cls_temp
Filesize122B
MD5b07ee51e13d6de42879d6b08cc5bec69
SHA11231eb7ff6c1a1d7e1512ffebed23d7f0b4f5c2a
SHA25696f97302fbd8d178fd467f7e383bd806be5e2e0628d3733c28a509a8e856f774
SHA512283e45f35c48404c3e2506b8ede9c86c40f4dc216ae11d340d1f82b1649fde986691fe075012ed0a193178270bb7cadeb3bba4f2a086729b2c6e9c8d0d2d510d
-
/data/user/0/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6583ED6D01A8-0001-11FA-D57AE015819ASessionApp.json
Filesize236B
MD5c8988e4bb3f2fe0c78ec1e6010bedfb5
SHA139bba33edc885b9b88c01cc449d47ee97ee65ead
SHA2567984d6f4cc342f24a8e61946862a5c3c1383a20316a40b021229cc0736c647f2
SHA5122efb8a8af516b732455400b59dbb76e01f8b4b5b0d462e0430b6aea337afc5393b989c32aeaf57b82e140d6bc26800c473fb7dad998aa338d061065fcc6d8a42
-
/data/user/0/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize409B
MD5d0f7a720a183f23f8b75b15db9e927cf
SHA14cdc3fa7b9832bc9c4e25a777a995b203839f591
SHA25672e3872e4f67a034b57b43c506d47cdaa61f1f19acf72cc8460728a6abce49b0
SHA5122c30b17459ca1a83427a6683f8cd9311017b91d3dda19dc6523fc82c767571e2167c73f976ae35174b2a5a032574638d6877d97c73b3fb31bf82661999a4fc84
-
/data/user/0/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/user/0/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_a3adaa7b-f822-4f59-8f14-92046ded4d07_1703144817429.tap
Filesize330B
MD581fb327e9fd93ab96b5b9905e764ef54
SHA107e03bfa89d62a8a594b32908951e717e708d80b
SHA256f2c497c390fc0459a5fb9a15cb57074010cb5bc77225fa4f03fc293ae149ce4e
SHA5125ad685efe8837e512d2751c1e830478095125c029c33fbff2628489a5447a8b4a9975f505146c10ba21cd50805faaad870df078d44ac714f785d6b12e1e8cb5d
-
Filesize
2KB
MD5817207f731bd9afeb8c11b53af76f878
SHA12b279a5aeb60d9c7d5017a21359f31cbabcc1d9d
SHA256628dcc0dc8a9c30f96560694fb1b2128789247aecaaad78fcfc9d82c11df6060
SHA512190735c493a661f053c1c70f61cd4c0d6446836fc76b6586984a613aefa574aff2f07be819aac53602b52a7f47ec3ec1d24b10ebacf728014e83a8eb2333ec13