a0f220f64b4574f6e3ba6c88ed756088ccdbef14ca71684e1e80947c50eccee2

Analysis

max time kernel
2268031s
max time network
174s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
20/12/2023, 10:09

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

base.apk
Size

46.0MB
MD5

1f43223e8048bad733c884ec2eafba61
SHA1

785236de5cc286f2721a87a0909d6b1332355b6c
SHA256

a0f220f64b4574f6e3ba6c88ed756088ccdbef14ca71684e1e80947c50eccee2
SHA512

87da789fb22d962d88c5cf57272f7366277fc20a8b42558d8ba4daf1dd0261dd2c9546844cba7c127970febdb469d110accc011f7a3685217d40883dd34ba19b
SSDEEP

786432:TQDQ0Dd6Ol0l9D3BRWZAkLhgAlFnTDQtH+Fgf7rczWptsM7z+RSQyPcyYn+6BMLS:ROl0l9VaTLauFH41NfsM3exPn//X

Score

7^/10

evasion

Malware Config

Signatures

Checks Android system properties for emulator presence. 2 IoCs

description	ioc	Process
Accessed system property	key: ro.serialno	com.shopee.fms
Accessed system property	key: ro.product.model	com.shopee.fms

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.shopee.fms

Checks the presence of a debugger
evasion

com.shopee.fms
1⤵
- Checks Android system properties for emulator presence.
- Acquires the wake lock
PID:5042

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.shopee.fms/databases/_db_monitor_cache_.db

Filesize
12KB

MD5
3e1fd075448ed4b62a9edae42285fa59

SHA1
5c6faba8f7084b7ed325ba75fb1bd452016ceeb6

SHA256
32916071d0fdaa6d832b4ed66e65f4bafdd620816d7cdf6a7070d118e6aeb869

SHA512
2a9f9b43a82c1922cc2bb00ba351b85fabf4e4809839208b0477b18192fc8cb40dc32e6af5121cf659bf9be478ef9811006de9d8d5aaf8e52773daf4c6e9b6f2

Download Submit
/data/data/com.shopee.fms/databases/_db_monitor_cache_.db-journal

Filesize
512B

MD5
929a8ebb62682ff50ff43edcc30b70f1

SHA1
65ee8494412adc1d53a24a51920533824aac9896

SHA256
7c81a4a68c524f4ae4c869150cf833abda58410e476a2db30ff5159e403baf54

SHA512
cd7c51e57fecb895b84c9b789ee750edc173efbbfec5d4150863d67e41407479e194ef180890809546095655c8a249e00dd49c6ed613f9d658f125dea97881f1

Download Submit
/data/data/com.shopee.fms/databases/_db_monitor_cache_.db-journal

Filesize
8KB

MD5
103e196744724524e1f9309bf4d42882

SHA1
2bd6140741dc65f7e07a2e47a9d9573ca8b4cdf2

SHA256
2a250bffd7f52a4b2fe84691a5ad0961e8638b11e4a4c18abb912c5a888e883c

SHA512
00fb4c2acac3d5aa0c2ac5a056247736f270eef8bb18f654b068c755132bfad630ad78a22216232dadb308b339effac94700efe3b974578bb389a7104dbd0f9f

Download Submit
/data/data/com.shopee.fms/databases/_db_monitor_cache_.db-journal

Filesize
8KB

MD5
be11722d7408dc0427fbd4cc074816fd

SHA1
a9005afe76fe5b5c0790ff06ee55b96713287762

SHA256
1b3c37a00f10fc23d720a04eb7d879ce25505eeba0afb0315d31a7dac14a7440

SHA512
42312e5303f2fb8ca9af0c0fc0cd992f3735b7973ed1ff1076fd9e2e65469f24ee0c79f3ff05ebb3e9f0a52d8d33e58092639e237813dbe67cb837acf3de15fb

Download Submit
/data/data/com.shopee.fms/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
1103f85e207164c709ba4a87423a30c9

SHA1
1becd77c716065ff81748b46a118c65aac227c22

SHA256
dcdbb087d2e6230f447f1f3c49d4b12a6212d3779348535fe06b0a80e6201329

SHA512
5dda6c59065a7a8335d716ddb15ae8932503557e6aec57b584266e1ab2d3d10987db909e7d072c36cf00a08f86bbdfafd467a0fb3d8f62383ce257e129160af5

Download Submit
/data/data/com.shopee.fms/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
6051a10b0284f6fb34828811101f5853

SHA1
0d2c93f5d331d93b58eee2600c15772614eb1d1e

SHA256
b05ef8e14679dc110a6cb241277b9d0b77d7504b63d3ec5b7deec100408fcc7d

SHA512
8f207aaea250f0d177cc8684cfed17d8a5dda6ea6ac384ea3bb6edd2d4100803fb3f14b6f64bcb80e007f78fb797c897282c13a7e6b1940e67961db45223fcbd

Download Submit
/data/data/com.shopee.fms/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
b1205d92a17050264c67713d431cbb52

SHA1
68f385b380fb5c1f8dbd21644c2182674c40bce9

SHA256
16e3dee7b52fe97711d66ae77601608286f00edf39747bedbf15ba058518e66a

SHA512
7ca81ffd1a4deb4da8dda6ed90b8beb171fed49cbc9c9b82d6e569bc4cc43e84221414808717ffe811e3e9a18062eb29c0e901d77c27fd042c5550e0e57e490f

Download Submit
/data/data/com.shopee.fms/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
01a7387b9056013b3947434698e114af

SHA1
f06c8c46bc9eef5faa2736c60677ba60020b701c

SHA256
6defda617cb77d1031532ec5e3dfb36ed1978ca42fbc54c9e087e27a768bcc5b

SHA512
d86091ee8d42f5f5f4663373b070537cdc9fba12663589a5e0c15a8c62e8b3797bbf2e202e580b5156932a3c6e45d362aeed567db35a5ea622835e10dd900fc1

Download Submit
/data/data/com.shopee.fms/databases/event.db

Filesize
16KB

MD5
71f8d8e2fb70ead45c07336873eddfe3

SHA1
56b7faa1767a88b30bbc53e92b52f712655ba24b

SHA256
43437f1c76187230df02520889c0b3bb213b677bf46a25652c17d0dbf0e1ffc0

SHA512
d1f479c6cfd4eb7a486235620fc0d08dce9a38813e9256b3edad9627b986734af3cd09b64aa6187cf962c2bbf86f574817b52231e9b399ce6930e04f7e629b91

Download Submit
/data/data/com.shopee.fms/databases/event.db-journal

Filesize
512B

MD5
a1ac7a170a35b47304b8ff9c24b84f43

SHA1
74adbdc90b4948d061682a23fc9a54fe9278f5cf

SHA256
fee1dae29a508a3d15ec95da69ebe0d55f9fe8a1ce7d905867d45471ed9a7e81

SHA512
dd9407c318655f93f9cbe976e9e675dfbe3bb125872d3d20ea6c569d1ade1f121ae025ef75dd646dec2ec9825e2d87dca2731f5539014a5406bdc7e08aaf6659

Download Submit
/data/data/com.shopee.fms/databases/event.db-journal

Filesize
8KB

MD5
2675fddf2eb306d859e3b5a95c29200c

SHA1
e5ae56088f4340b527cfc6d06e60562b4a39ef5d

SHA256
43821be6d1454f2ab7ee3a84a9328e18047b0a8b77095f4da57ac10785ca4dd9

SHA512
c85791d3bcc0ad862f6bfcfc2f46f88fe813dbf099e53d662340fbc6e92419aa8bcc9bbf9faffff18bb8a386bc4f5b5435deea7d86aaecb1f2190fff18cf042f

Download Submit
/data/data/com.shopee.fms/databases/event.db-journal

Filesize
8KB

MD5
ba6e867f6ece8b73ffcbe57f3fc5a4bb

SHA1
1cc8ae04f0bf5e39b144a10bd697e10274a89d78

SHA256
6e13391341c03d85eadc108e277e7e88d22c1afff38b1ef672798eff5bec4612

SHA512
511a3fb54fcfe608bd539c7b446ce817f49168ddc55abba96f35715ed30badf94d9d607fc89041f57d16c219cc57d6b38380ff732e5f93ff35968a9a0dabdd8d

Download Submit
/data/data/com.shopee.fms/databases/event.db-journal

Filesize
8KB

MD5
ea19faafa12b13595a8b57c01cd34030

SHA1
c0c7cf51523fe4f0cd746fbfb9710d649db9b22a

SHA256
5f827243a60110f5afbe8e7b0c75c51f82a4c670f397f11af7afc927e4201898

SHA512
d08ca0cd90d1060a62489506f7d7f03ec5807aa473f910ff661f464c8e6aff32d210c50f96d8d02bf0e29791a03994ce14c4c09402ef977d08569d39414c305e

Download Submit
/data/data/com.shopee.fms/databases/okgo.db

Filesize
44KB

MD5
47a1bcf3ac2331ca2b7d9c3ce7ccd774

SHA1
b412e9a8eedede7a8a9eaa53749f173dd0e20db2

SHA256
b6025b9929f63f061c504da406b5476a2605c89d4492abe66b45b5e933413a9e

SHA512
1c63a6506abb23a4f1981310efbf7ec4f46430d5e82b901ea540cbf27571c5f5c49591e63655654275b70b51a4696cca2b9f0d10c56c2952b4e9845ffc7e771c

Download Submit
/data/data/com.shopee.fms/databases/okgo.db-journal

Filesize
512B

MD5
6621ca4251b7fd0cd2a193082da295a1

SHA1
448b8b2ece12c27cb5916dcefe2923abafd3c747

SHA256
2d5057dc2162b0e72edcd07afce3fd9e5d100908c13f9b9433a5faca2933f4ea

SHA512
9d5b9e23ad311c0c5e8514bb6112e4445bba4375b8370560b9bedd2b7cd85bf9c637ae8958c90c017609cc0e3da5cbeb6d0172e7d77567d9bd8856f97557c6c9

Download Submit
/data/data/com.shopee.fms/databases/okgo.db-journal

Filesize
8KB

MD5
8d37c1b4ce2f314d55c1ad9e3958cae9

SHA1
6ab1c12c82654434885b4213bdfcabe162661832

SHA256
14a2cba92be260ca1cc579cf657c9e01272c4ad0cf99a40f365961f05bf447e9

SHA512
ff7b67f0eda57912efc895adca04946aaf90d0c473f0214cb1962affa772d5679b5011974fe191cfc6d650b87695adca3167d96f384454196be51803a35484ae

Download Submit
/data/data/com.shopee.fms/databases/okgo.db-journal

Filesize
8KB

MD5
b2ecade98a7e800c22a341c4f756f54b

SHA1
c209a4b948add04d567e3dbb619023b9d7dd9a7f

SHA256
ef5df3440982fc5c89b668764a0b283cd0ccb81a03b29e643ae762d9736e814a

SHA512
0db7a5f8c76459e6eb7153e91164452799db90b17e53193db33b3d484af54328c43c107ab4573ef3f0640ac9c22ad931b69cb2d17e3c4d14947de79708546287

Download Submit
/data/data/com.shopee.fms/files/.com.google.firebase.crashlytics.files.v2:com.shopee.fms/com.crashlytics.settings.json

Filesize
709B

MD5
d9423e4e566e74aa43847c9b1f0a0c87

SHA1
cf90122be760f52a89920fd244499ea346b1d6e6

SHA256
ff1300da1052effa6a038b0ee0aa07f6601132a1b93a62a595c53cf46ac77a97

SHA512
b2cdcda049dcbec57dfdb1026f4944c304ee4f1764efcf775227026f93337f9c7034182afef9c4cb10266e2c9c83ed72832dad0ec02d9c35242dd9693cc635cc

Download Submit
/data/data/com.shopee.fms/files/.com.google.firebase.crashlytics.files.v2:com.shopee.fms/open-sessions/6582DD0301DD000113B273E0FE4448E6/native/app.json

Filesize
212B

MD5
75d7666aae410295cac1747a78a052ef

SHA1
d1fb280506fd7bf69c2b8be0293c28256f82d63c

SHA256
6fab39d6ff0a4324d4b31eb011e9855710cbc468cebe4346816e1002d2b45361

SHA512
c3b4c60e85f7b96276d58bc512d3ec31d9f8fee05acfffdd974ea866c8af5f38bddec305ffac3e065d9eafc4a4ce7378f17052af85bf9e2f536a7b8d38563323

Download Submit
/data/data/com.shopee.fms/files/.com.google.firebase.crashlytics.files.v2:com.shopee.fms/open-sessions/6582DD0301DD000113B273E0FE4448E6/native/device.json

Filesize
193B

MD5
d44327c6868dd023ff2b59bdbbf101ab

SHA1
6ff80a6957743f697ff2bb328198aeebf083b356

SHA256
22b6850ef0761bcce5492d39fce898ac06fbd006f8ee47e0adbe74a57eae0fb2

SHA512
20309736db7a1f910caa24c338bbb594f10032d782ef6227153788eefd8baf72cac6a3b80e3f0a2c5b841edfa5ffe14739049cceb2c41110fd4fae475002efb4

Download Submit
/data/data/com.shopee.fms/files/.com.google.firebase.crashlytics.files.v2:com.shopee.fms/open-sessions/6582DD0301DD000113B273E0FE4448E6/native/os.json

Filesize
55B

MD5
962ad05a45736a958d7e7c507c6b5c63

SHA1
aaf1f20cf113c6032073de9cb0c2dadd5bbe5520

SHA256
230b1fd1119fc991110e60f62427de4e9410d2b7f14820fb41466882b08059e6

SHA512
6c55e6e4b2727c7f528361a921f8f5203bc066e60e63ff0b73cff449bb775fbadaf83a504048bdbddb536339b902ab1812d91e7f77087fa7806ab0c1d01a3177

Download Submit
/data/data/com.shopee.fms/files/.com.google.firebase.crashlytics.files.v2:com.shopee.fms/open-sessions/6582DD0301DD000113B273E0FE4448E6/native/session.json

Filesize
126B

MD5
f37455e4eae097c562ec5c43063934a4

SHA1
f0a492bbc5a50c62df320f7360781da994e734c0

SHA256
b3c1bb7bf93a4547785905330b98161f4bdb114a7b341a03233c34ad2d2e7aa1

SHA512
07a8e8aca22120db8452036a6491684304ccdac476e59f489300d084ea0e969573976a206140cb50d452bb3c4cc5b4d1dbec65562887e198a3647dea62538678

Download Submit
/data/data/com.shopee.fms/files/.com.google.firebase.crashlytics.files.v2:com.shopee.fms/open-sessions/6582DD0301DD000113B273E0FE4448E6/report

Filesize
740B

MD5
fe03ab2a068ed9dbbafbd7381e7c4345

SHA1
1a44f25e9808801bda076d61de51f87f1c967983

SHA256
a68c618925e7b834eab35106aaa3c35df1d50a7ec9992ed12cd9fb66f76f415f

SHA512
9380113ab5b608c3107e66fd83c1fc765572b1713ce300d5ffc743faf126110634032d4759b5a9be374c238f955e4a3cdf3a8b37bead78a85647cabfd7a80715

Download Submit
/data/data/com.shopee.fms/files/PersistedInstallation5069737757606839980tmp

Filesize
90B

MD5
74f9ed533707e1352dabb56e967bb7a5

SHA1
aca44aa16bfbd304796fee6fe5402b3c0777156b

SHA256
c7cc184b1f4334f97eb9d0b093ab20b305bf08721da00bde6a51d88375e50e72

SHA512
eec5488d6423d5d200c305d9327aaec93f24ca112bbd979310dd45bf871e813cee5c6b2c71dbe72a6736b12b1a35718f2b7ab9a0504836719bb3bcb7a3a562ad

Download Submit
/data/data/com.shopee.fms/files/frc_1:923805779317:android:a43d2de513a3decddbbf3c_firebase_defaults.json

Filesize
152B

MD5
144e6d8f316a7289dcb086060da475e3

SHA1
2117984078958934f9e0f1bf9444e0d42dbf6275

SHA256
93f2c7178c82c4e71e6947fd926a064eb7434e87be87eeebd536af99da834c2a

SHA512
d56a087b8035d428bae7f552ba75981a7eaeb097a2a62fe623dd914b475bf99610ef9684b4fcab7af04092337a2ada8834e9a5238fbe38b3388ccf5659ed5520

Download Submit
/data/data/com.shopee.fms/no_backup/androidx.work.workdb

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.shopee.fms/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
5431a1dc80cf276acb2b5cb880c73be6

SHA1
8c5485b009d8dcf6955ee451536c9cc5334a24db

SHA256
8169ff7f65e6aa90a2968103b9af2e92a65e804a2d606f8d30597392839795ae

SHA512
89960d9451418f52f1c47ae19f39406a6e493f8bcf4564f959fc59eeefef42886a0fa54bc332691a3f8b21fd541ffeab4a70b043015623e78c1d6507c8226238

Download Submit
/data/data/com.shopee.fms/no_backup/androidx.work.workdb-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.shopee.fms/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
f2d0506ff7481e14863c5a5fc1bd59e0

SHA1
d9938c138df24f88b00fd417a9915094e39ee7d0

SHA256
c6c06d06220ab3bac46a7a36e45be0c09ce3652a51f664a65dfb724de6cc7293

SHA512
f009bc7564f4338c843eedc4511dc85fe4c77398c999db6ded07574cf42320c53ce606e6dba7556cb09bd937dec2db16de87b2848343ce696534641f0bdb3444

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads