Analysis

  • max time kernel
    2337785s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    20-12-2023 02:58

General

  • Target

    7f81a7aad68b590608401d7fe6aa5bf4fb4a9e389ff0913283b53fb88196b2c3.apk

  • Size

    3.9MB

  • MD5

    ece1a79e46d75efdf6187561a7e0db8f

  • SHA1

    fe06c7e3251981636fc330fc4efd7af9ac4d87a2

  • SHA256

    7f81a7aad68b590608401d7fe6aa5bf4fb4a9e389ff0913283b53fb88196b2c3

  • SHA512

    1a90f78812694da4a085942f9d6030853d03f615b2636fa85b9d674f8e2f65edbb21febbf237b39f37401376dd9596c2e3c36bb23c2fcf636c1b4db04780cfca

  • SSDEEP

    98304:BL3hGQupu/b6GW7AI+BIsoBhd4iY1H+LfMhPx:nmue3sehLW6s

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Checks the presence of a debugger

Processes

  • com.vladlee.easyblacklist
    1⤵
    • Acquires the wake lock
    PID:4602
  • com.vladlee.easyblacklist:blockService
    1⤵
      PID:4709

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.vladlee.easyblacklist/databases/easycallblocker.db

      Filesize

      32KB

      MD5

      2fca10b48398751740aae4b2c4a59fe1

      SHA1

      2b2c26eb56d59a4bce08f3e8a9818efa6bab5981

      SHA256

      bb3eb55ad960a034e867a39d5b22fa841691e5054751078faddf45cfbba9b6cf

      SHA512

      e5ea2df796be698a6d03d1ee86973b19ed4167aa6eaf1d838f8df141370bc80d0ceb65ffa395d3529b08d846ef23da607ed2c9e84c6ce20457bd685fca7cd62c

    • /data/user/0/com.vladlee.easyblacklist/databases/easycallblocker.db-journal

      Filesize

      4KB

      MD5

      e9ff268899e0a229061c45ab2527afc5

      SHA1

      5285889319792cbe2cd91f923d592ffb1a590e7d

      SHA256

      e2696d70e4f8fc3f5697e21cdae66a99f20032e6d2b459a138b2d2ab7fc13017

      SHA512

      ff23506e2398e82cbe942f85c3abdb30ea5c16355ef1962f2c41d27e9a23f36362acc7398ce9f84fc7920b64eb7b27ef8b89063173a86916bf4413a2afa3dc55

    • /data/user/0/com.vladlee.easyblacklist/databases/easycallblocker.db-journal

      Filesize

      512B

      MD5

      901efdb5f1c910deb2532581b80aa26d

      SHA1

      d20698cda75f1e3eb27754472137ed8f6968b81a

      SHA256

      9a05f88836a21533a5c3127f41c46f1b1526431c0cdd0410e142b1ece41c851c

      SHA512

      21a80a6ce3e233f3ca7cce23db7708aa55375de8b88a332080956f8724b5f762c58a827c5d910f3652da25e1af8a98ecabbdf3db80537664dfe0c88da67bb8aa

    • /data/user/0/com.vladlee.easyblacklist/databases/easycallblocker.db-journal

      Filesize

      512B

      MD5

      2be54516ad747ef83c20aeace08512b6

      SHA1

      fa56e2ab87ea502295f074ab1ba7773fde5c2d15

      SHA256

      f624cdfcffd6b09ada9eb1a6955e88dd6c86c2d959d788ce068e4628cf8c0a27

      SHA512

      f1e35a8b0533068d8bbea096bc7ed89e425c953da92adad89d0fbbaa27ff61840be330b27fb9d6378400bc31c456831eb0fb574ee770e8e9a2129fc410ab8ea4

    • /data/user/0/com.vladlee.easyblacklist/databases/easycallblocker.db-journal

      Filesize

      8KB

      MD5

      8aa7b1284f97ff6b18367dddb20cb6de

      SHA1

      5c3bcfa6620b77ef15be41021c5246522daebda7

      SHA256

      f16eee518fe2c87d393059b127c4bfb0b6d9d1226890dcd13c9512b7c5dced64

      SHA512

      7fcc029ff8f4bfc5a7d87053a10e1b51bd92c732919bb234e4e8e9a00f73da20a0c956d1fefdf338ff132f8ddc8f572d818c3dc6b0758aae9eea4285d5d9c8d2

    • /data/user/0/com.vladlee.easyblacklist/databases/easycallblocker.db-journal

      Filesize

      8KB

      MD5

      c13b6e6b80a3c88307449ef102a9c31f

      SHA1

      fc066017d7a1941ddf29e14d67503f67b7235f56

      SHA256

      82ea953f7e4439416fb757216660d9289d68747f2a09bdb2b33515b90acad482

      SHA512

      8d3516e9396446945653073b3f096eeb872e95ee3ea5ec25ecae5abb6ccde1f7f2035b5b8e5cb9ad92c88fb65e86dcb6d4358a081cb5c43e2c3a3b8479796d9c

    • /data/user/0/com.vladlee.easyblacklist/databases/easycallblocker.db-journal

      Filesize

      8KB

      MD5

      d3319cf779d4c453ec3241f1dd6a6e63

      SHA1

      0fa76a9891ebdcfaa68ee8e8107d0a5b3a38ab9c

      SHA256

      3f1c507e14e34560f081c9529386b29094f62054310a836fb4ab55acfd4e5450

      SHA512

      fbde175837df4093ae32fb5603f93c63eb497ef43f8bc4af2f881ea30e9ebd7e7f2af969546096e1c25e333cccf36e026e1e54726488d96bccbf47c8754b28e8

    • /data/user/0/com.vladlee.easyblacklist/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      56095d3ff8bd3b4c948a13de73361b8c

      SHA1

      e48bb9f545c343517ce5a23ce096a37345ca26de

      SHA256

      cf2c0bd6e8515a907aaf7b61a2860eff9a4c5b9673e74c6c356334e25645422c

      SHA512

      193a1dbac5496a6ac86bb439d8da3289f70631191b8c4290527d4048153a1b133b2171dde5cd9dd602989edfd6f1670e753889d4d5e4f8c2b8b3c2b42b5a0255

    • /data/user/0/com.vladlee.easyblacklist/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      6cb753e65edff2a24dff4219b5d963bd

      SHA1

      4579d1a03b33aa888df22bb6fc93d3e5f30b2824

      SHA256

      f0b2dca77d4b5b341b7f503c0f5d919ba7dcaf030e7c491cc4f6795a9d0b1a5f

      SHA512

      b7c700667148795b57770d59f71d83f78f2fee92f7b2437584de09d2c509c81b10029eec5d4dd0b8de7fa1c4b58747fc9265ba9bc59bc2725262cea6b4a75464

    • /data/user/0/com.vladlee.easyblacklist/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      d4365dea5fe7e396dd5a532dd8535b8d

      SHA1

      1103cac62e7e6819e7cca7e61662ebbb54e8ce84

      SHA256

      7972a9942f2fd930825f949e5a3cab070806a9e6e7b087d92c474b6e2b4bb8ba

      SHA512

      88d710a18f992e3bb763fea1720ffe6a64cf7ac557d46cb06e3a5532af27f6919f95c9053ada5162a1d2c8e7c4e27565bd8c5e6c3317bb536f2b1add5050724f

    • /data/user/0/com.vladlee.easyblacklist/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      a574836c1c2c71d57680dd1e062a59ba

      SHA1

      264926cfbf19f96f207f801772ebfc55362d96d8

      SHA256

      2dd56888b0b099b8eab95d133366fa54760103595b9711cc7050f00de89508dd

      SHA512

      8090cd5523235ce7ee17b6bfc8d0a3485690933c5e3d4b00087766de81108dbbb267318f352bf33bd83171929f9aded62ab5133f1400230928a40a16d8f43e57

    • /data/user/0/com.vladlee.easyblacklist/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      143a2fdc3b2263e67cd595c000452b02

      SHA1

      5ece0886aedf785ab589c5a984be835fb0709905

      SHA256

      29bdabdd2ffc01bf723ac75b326af3f1a69e14781eaba36b78804d655ba81bb1

      SHA512

      e1f1b28a603dc78e1d5dc9e2c5c5621bf9564098e5575915df1a18ca9c86dde97141efb06e76ded5596774add83d49e1a33fc30f3e0e69dd4f087bf52cd2bdc0

    • /data/user/0/com.vladlee.easyblacklist/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      45d67aea39acc6ce6dd3c8a249dd7ed4

      SHA1

      9185b64aadb864df82ea741bc5e3931fafc8b55a

      SHA256

      730bb58ab0e771d56e875cfd7df6a4b57bda4c890f86ae4512d1771c2ff8bc93

      SHA512

      2fdeeb8d0ce148cf448d0a40eb5c93d0272cb76d2ff0517dd64aa9f1391b138c85eb97405d558e8aca7656f07ecba803699741563281667d51f213cf2993c502

    • /data/user/0/com.vladlee.easyblacklist/databases/google_app_measurement_local.db-journal

      Filesize

      8KB

      MD5

      0bef19827490df6e3e1da48c3fcf5c74

      SHA1

      62bbe90ce33cac0d7f9c933df91d373e126e9ae5

      SHA256

      09879b326e19811e9f2ed4c8d661a3ccfae947c87839f739b714df205f787a9d

      SHA512

      4bf30fda77b97e4cfdb1637f71af150194745c7dbac8f999f6ce9fd4bbb025b5db48eefe058e59f0b34faad6b700206e87af4ef3df25ea61a4082379d43b6371

    • /data/user/0/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6583ED6D01A8-0001-11FA-D57AE015819ABeginSession.cls_temp

      Filesize

      77B

      MD5

      8775c9070df8144cd0afaac3d44e8805

      SHA1

      466449749fad79f9c99ffd5567779d30f726bfc0

      SHA256

      72ae9e4722f64da21942d9aec03340db9330d615c0a32c8a32f0e3dfd3271124

      SHA512

      90693ba04eccce5e982c762c7c75cf029202c50c8a5347fa149e6d0297a75f70f6301760213753b9ae71a2b38e003692645d01eb1e8de97aeeaef0577030aa92

    • /data/user/0/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6583ED6D01A8-0001-11FA-D57AE015819ABeginSession.json

      Filesize

      132B

      MD5

      4561f24b62458a3445b43171660e7d34

      SHA1

      d68eaa2737049dad31fab20a64bcbb2700486892

      SHA256

      3e8c52d2895b04a598bf24b93cb17add669f963f7decd34b60a5a53235ef07f4

      SHA512

      a098a074fd742af5e63364dadb0397735f94c4c51f1921f18482e27871805efd47ceec4dff3cdab61a070ce8da94bd9dd1ca0fb3369d23ed8d6a963b379f6aab

    • /data/user/0/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6583ED6D01A8-0001-11FA-D57AE015819ASessionApp.cls_temp

      Filesize

      122B

      MD5

      b07ee51e13d6de42879d6b08cc5bec69

      SHA1

      1231eb7ff6c1a1d7e1512ffebed23d7f0b4f5c2a

      SHA256

      96f97302fbd8d178fd467f7e383bd806be5e2e0628d3733c28a509a8e856f774

      SHA512

      283e45f35c48404c3e2506b8ede9c86c40f4dc216ae11d340d1f82b1649fde986691fe075012ed0a193178270bb7cadeb3bba4f2a086729b2c6e9c8d0d2d510d

    • /data/user/0/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6583ED6D01A8-0001-11FA-D57AE015819ASessionApp.json

      Filesize

      236B

      MD5

      c8988e4bb3f2fe0c78ec1e6010bedfb5

      SHA1

      39bba33edc885b9b88c01cc449d47ee97ee65ead

      SHA256

      7984d6f4cc342f24a8e61946862a5c3c1383a20316a40b021229cc0736c647f2

      SHA512

      2efb8a8af516b732455400b59dbb76e01f8b4b5b0d462e0430b6aea337afc5393b989c32aeaf57b82e140d6bc26800c473fb7dad998aa338d061065fcc6d8a42

    • /data/user/0/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

      Filesize

      409B

      MD5

      d0f7a720a183f23f8b75b15db9e927cf

      SHA1

      4cdc3fa7b9832bc9c4e25a777a995b203839f591

      SHA256

      72e3872e4f67a034b57b43c506d47cdaa61f1f19acf72cc8460728a6abce49b0

      SHA512

      2c30b17459ca1a83427a6683f8cd9311017b91d3dda19dc6523fc82c767571e2167c73f976ae35174b2a5a032574638d6877d97c73b3fb31bf82661999a4fc84

    • /data/user/0/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

      Filesize

      16B

      MD5

      c33583fae4e0b61cde1c5b9227963237

      SHA1

      fe2ebe4d27469af1460f7e852031a04208ef629b

      SHA256

      35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

      SHA512

      fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

    • /data/user/0/com.vladlee.easyblacklist/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_a3adaa7b-f822-4f59-8f14-92046ded4d07_1703144817429.tap

      Filesize

      330B

      MD5

      81fb327e9fd93ab96b5b9905e764ef54

      SHA1

      07e03bfa89d62a8a594b32908951e717e708d80b

      SHA256

      f2c497c390fc0459a5fb9a15cb57074010cb5bc77225fa4f03fc293ae149ce4e

      SHA512

      5ad685efe8837e512d2751c1e830478095125c029c33fbff2628489a5447a8b4a9975f505146c10ba21cd50805faaad870df078d44ac714f785d6b12e1e8cb5d

    • /data/user/0/com.vladlee.easyblacklist/no_backup/com.google.InstanceId.properties

      Filesize

      2KB

      MD5

      817207f731bd9afeb8c11b53af76f878

      SHA1

      2b279a5aeb60d9c7d5017a21359f31cbabcc1d9d

      SHA256

      628dcc0dc8a9c30f96560694fb1b2128789247aecaaad78fcfc9d82c11df6060

      SHA512

      190735c493a661f053c1c70f61cd4c0d6446836fc76b6586984a613aefa574aff2f07be819aac53602b52a7f47ec3ec1d24b10ebacf728014e83a8eb2333ec13