smsfactory | a81ffdcae2361909fe16e35e60e2481a73e0ae16a4bbe4b550b88f3147a4c7d6

Analysis

max time kernel
2511731s
max time network
151s
platform
android_x64
resource
android-x64-arm64-20231215-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
submitted
20/12/2023, 11:03

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a81ffdcae2361909fe16e35e60e2481a73e0ae16a4bbe4b550b88f3147a4c7d6.apk
Size

5.1MB
MD5

8c780bfa9f87c14aded1b219e04c83f9
SHA1

1d3decd5e7f05e53efd500093842c7a0f856847c
SHA256

a81ffdcae2361909fe16e35e60e2481a73e0ae16a4bbe4b550b88f3147a4c7d6
SHA512

6fa8fc1abf5bb3c7942a7c1704329a0f6fcf520299e319d4f4b01c0c02d17a45c8120c06e4a2ba8d1c2620b2df1299799afb1062d53d82d93f5903a67f6312f6
SSDEEP

98304:pz/9XzDc7pax2K27Fi5Ab08kr1uouVVPWOs6xP1tR+hNh77qQJDcQUh276inSqf8:pz/9XzXx2KqB0BpSbpRin+QoChfoi+

Score

10^/10

smsfactory infostealer trojan

Malware Config

Signatures

SMSFactory
SMSFactory is an Android SMS trojan malware first seen in Jun 2022.
trojan infostealer smsfactory

Acquires the wake lock 2 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.inkle.sorcery1.hack
Framework service call	android.os.IPowerManager.acquireWakeLock	com.inkle.sorcery1.hack:Metrica

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.inkle.sorcery1.hack
Framework API call	javax.crypto.Cipher.doFinal	com.inkle.sorcery1.hack:Metrica

com.inkle.sorcery1.hack
1⤵
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:4583

com.inkle.sorcery1.hack:Metrica
1⤵
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:4630

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.inkle.sorcery1.hack/files/Mint-lastsavedfile

Filesize
8KB

MD5
4617b1b78d1d216bf743872b5608e1be

SHA1
4384c7599a883cfe3180f639adb467c5149e5e88

SHA256
3b6d19bf63b1a73722b8df7fe31cb725405dafccf0281ebef802e8c72dbb0e2a

SHA512
581515d836cec90dd851e8d35a91c19eb6b2c66d296ccecb541f67ab73c9587ad39054304d898e450ad91fb112096dbde0f782575740ed8cf05a4925ed32c8aa

Download Submit
/data/user/0/com.inkle.sorcery1.hack/files/MintSavedData-1-1703318686764.json

Filesize
36KB

MD5
6584fb1285c58600f86f38c3376bd7c1

SHA1
4c3f2994b950b857a0237e54f0ad41894b10b9a5

SHA256
12c79de11b4b80713220edf6bcf00ea7059928697e771e6d7d8b732ea1f5c6df

SHA512
95193c26ae8f6d80ee4cfd9e59289e45f553fdf5181bc73e149148835dabd72cc45d7aba407fef46eaff562c493b7759bcfef85aebba80d92f5fbeca3474ae6f

Download Submit
/data/user/0/com.inkle.sorcery1.hack/files/MintSavedData-1-1703318686764.json

Filesize
226B

MD5
fb43c561ce0d5f8bf1f3bf7a809d8c53

SHA1
e02ef0267c2ee3b99edb10fab8a7d3d6d81494aa

SHA256
87736403580e225e9fbc100ec5bd08d19377499294b89f9c408b072fcb256ca8

SHA512
81894a6e323aa4bfdddc8db42887cdfb4fdfd05f76d6427d5226aa57ab155e73c7b92bde8b419a607c545e54e8e0d5515126e6cc046773cc7c72b3986ea7ae20

Download Submit
/data/user/0/com.inkle.sorcery1.hack/files/crashCounter

Filesize
253KB

MD5
4c3faf69bcf5a976d1e5981e92b829e4

SHA1
3a4227ebb5e64e8beae99abfa9bb585c20f9e973

SHA256
71832f9fdddb2442578b25efd5ab02aa5efd8c3bae47b72770b7a164343d717b

SHA512
a81f83b45e8ccf5506a8914d18e4114e825c22b0cc5101de02ef8b60646a87236266c7d73fc52e03e8dfab2607061c476ec20e06db5b8d26fb93fd63188974d7

Download Submit
/data/user/0/com.inkle.sorcery1.hack/files/lastCrashID

Filesize
8KB

MD5
99e6fbd0122dfc6caed86a3f1d6ca7e5

SHA1
2a51c1873fb3356c00325df0d265c60b09a1c320

SHA256
4daa4dc7854e4892271a990de1fa1bb31534aa4dfb06d9fd35907cf1b6bac7f6

SHA512
566b8a957795c2670164297d0c344613531447095d2f02de9000cfbbb35f54f4e650949a4a973c53d103f7743d2c2be62b1cf329a5ba9f8ad653b8e7085e11eb

Download Submit
/data/user/0/com.inkle.sorcery1.hack/no_backup/androidx.work.workdb-wal

Filesize
116KB

MD5
2e42a694a7fafb3f1f1ad087d35d46ba

SHA1
84cfce4798a44e0c837789f636f2da3cbb319a6f

SHA256
7b81a3ea8c5d1277db0cb7150682db9ea45c498cf5a1875796bc116dd8760e6c

SHA512
e7942ac0f7126d1a74b4992673656c1e9e5b15ea89722fc5a67aaa180c93ba12ea001cfb396dfbef283d8f3e17d7e84d85257c2be93ac5ddb8294d6c36f3947a

Download Submit
/data/user/0/com.inkle.sorcery1.hack/no_backup/androidx.work.workdb-wal

Filesize
12KB

MD5
e9debff52f5ac1e035a2489a333e10bf

SHA1
587aecf23304956980c9d0786d7621efd429d84e

SHA256
f928046186619a39e55483a2bdf2af430f8d3ce47df9fb02828431a80454d299

SHA512
4d4ae27d0fe81a95c0c9012e0efdabcafbcfbfcd1565e1c51f35c8b53e3efd88301aa764d7f4267b955cc9de1108d145ee39c79d4279c74c0b0669cfa7ccc50a

Download Submit
/data/user/0/com.inkle.sorcery1.hack/no_backup/db_metrica_com.inkle.sorcery1.hack_20799a27-fa80-4b36-b2db-0f8141f24180

Filesize
12KB

MD5
171aedf968e17a2744d2585715606cb9

SHA1
bbeddeb3b89fcf809619c35b4a318a80e7d5b029

SHA256
d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e

SHA512
78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

Download Submit
/data/user/0/com.inkle.sorcery1.hack/no_backup/db_metrica_com.inkle.sorcery1.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

Filesize
16KB

MD5
d414cf035a1f8c4ef5776bca469db0c8

SHA1
472cce7cb57d440363228d53f66015bfd28b7d4a

SHA256
63aac3ffaa64788d34c91b5e88265e85b15a3bcd2bbe4932558deae0be202a1e

SHA512
1c0444d3eede3dd9c65fdf4b6d95e36206647f9f1e7ebea9354cf8a25a5b6aa1109d637937694a071ace135869ada3dfd17d0aef553222b43fd46325a151c566

Download Submit
/data/user/0/com.inkle.sorcery1.hack/no_backup/db_metrica_com.inkle.sorcery1.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

Filesize
32KB

MD5
fca731379470fbe132d08889c291e364

SHA1
8b62ddd5167a6855602cdec92c4ae4acb35a9a0f

SHA256
f436bcd76f8fe81855cda4763799334f4632bceddf0295890a40531edfadcea5

SHA512
fd19a4369434e823b252df939ca349e07a3ce4c8697779fc309136bdafbdf93e99082188898f685ee860f0606738658eb68c6a89e677ea922a37433018635aec

Download Submit
/data/user/0/com.inkle.sorcery1.hack/no_backup/db_metrica_com.inkle.sorcery1.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

Filesize
8KB

MD5
a4c72388a0933b496ecf2a62094f050f

SHA1
97f12169535776730511ff392af09c4214d7a815

SHA256
9d530c0499ac716823c54111ee7ae9f068b06538ca73fd4c9085972d1a01198c

SHA512
e538540340656a85a0e2c9578a5b3ad2e19d70bfb9d542d6488ee754d0a47ed15b8f956d3b6f403b5b77c2eba97d4f0bc4e4710ccf8ee3909489b6b3a00a3e35

Download Submit
/data/user/0/com.inkle.sorcery1.hack/no_backup/db_metrica_com.inkle.sorcery1.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

Filesize
2KB

MD5
f91a7a035ecc397e5bdad57a2ba5fa80

SHA1
b24b75cc9244b467791f68405878046dae91eb1f

SHA256
002bfb76b61de9578eaa175798d4af3cfb270662490acaa20c475e494f24fbcf

SHA512
e99bc684acbbeb407120399e9e4fb28d80bddb17e2a102c80e95923ae32998bf8ff4a9380a7e5d0373b743cac69b00ac64d1d4765ad65a3727079f5f18c87d0e

Download Submit
/data/user/0/com.inkle.sorcery1.hack/no_backup/db_metrica_com.inkle.sorcery1.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

Filesize
108KB

MD5
48b932480bb2c3605f50b3ecc021a20a

SHA1
34e1bd30fc87dd6b4c647b7b9f2d5a1aeb09fdad

SHA256
603ace50e2d6953bae185ec5a37653d85e01b7654349df4826a2948ffd58cb28

SHA512
338fbf0cb2f8220c9f3be90050e66b8a03077015e3cab7fea98c197b42b471dfdd36b213aab5601ec1b3cddaec479346df8db2b3fc85cbf615d7ad0c00577ba8

Download Submit
/data/user/0/com.inkle.sorcery1.hack/no_backup/db_metrica_com.inkle.sorcery1.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

Filesize
12KB

MD5
5ff4ed780b9f4cfb60a616997cf3f168

SHA1
77a88fd4d58a8b965008877e5669926a98390183

SHA256
d77058554e82a280c6ba47e8725b66ca3a85fb0ba704826f0c4758078912bec9

SHA512
e40dcf0ac051f9d086cfacb2b362046a25a25f255df420b218c77368d4a60947e437ce618715ae52aa7d817019f520f20c63d617458563dd84dff450ac8061be

Download Submit
/data/user/0/com.inkle.sorcery1.hack/no_backup/metrica_client_data.db

Filesize
20KB

MD5
fc318483a677c71a725dbbe6e9516df9

SHA1
8ac3af9cbfb464e53b709028d1f64a4d019bb2f4

SHA256
d6d65421dac425ed42a96af8b94a1d708f6e23b556f0bc80011eb4970304b7f9

SHA512
0e3a0d7629cbfdcaa59e415c4ba982355f249b9595d234c0de6fda993c65c121435c442945766017cd78533fbd059d7edfe2eda0185ec6e4d076499536a63140

Download Submit
/data/user/0/com.inkle.sorcery1.hack/no_backup/metrica_client_data.db

Filesize
20KB

MD5
94eee90126e94713eea8e3bd7f6949bf

SHA1
3ec4efb3576699d4043bf8f27c58ba19478a7fd7

SHA256
3536cb1933cb0f89e97e1da600ba4bd261cfddec72e7467473c557301e4b2465

SHA512
d90000d586277d9d8201d5af9a92f9930db7b36daf85b718d154c35ab09f6ed8115ac3ea491064231b7efa7e0eac81f214ed872fe47b8e0b6151addfca0558fb

Download Submit
/data/user/0/com.inkle.sorcery1.hack/no_backup/metrica_client_data.db

Filesize
20KB

MD5
bd07e7c458537033c1d82d99ff33e15d

SHA1
8793bc3da033917976db3705e75bb435e253264a

SHA256
e0d07f9270b7fc2110be745d877cfc96b6e7255bdb7c604e502d91cc6d47d53b

SHA512
54bc7d7fac88ce3712796a9a2103fab5309a4ee64f7d3706a4852dca139af54d2e0c847614116b8d373d948c9217f53a851bc394080d48fc4c4caf130eacd548

Download Submit
/data/user/0/com.inkle.sorcery1.hack/no_backup/metrica_client_data.db-journal

Filesize
512B

MD5
2b60f662dd4373aee0fb6973a30ec901

SHA1
23a81d692ba25d1f594ff1fb7c05edc085dd3685

SHA256
c80b311daa48e482e6240f28056a9c276c6cd7db4c6f63e2d1bc6f7c57cd2717

SHA512
97d2656f6cf3b2cb2a8c476fe1a2167c7179d1f83e6fe2ee04e8a6daa820a556a9be48d51680b710456aa181966e6d6f3c4d12d4d1a8039a4fc65fff2d3b0fac

Download Submit
/data/user/0/com.inkle.sorcery1.hack/no_backup/metrica_client_data.db-journal

Filesize
12KB

MD5
54c2fdd92c3b8f6400ff30f761636f01

SHA1
f34547d96a03745cb25c7b1c3fc32a1f9b1a0459

SHA256
050d8bf8227b5c08c7698200e61bca2231689d1856f7bc209e2ad8ef51c91060

SHA512
f1d3ca934a32e7372eaed209d99f98d2ff34e99a7cbd9078e5e493d95787c9e9877c30603df8fe6aa6197cbbbb44cf22c3bbf78b528ad1ec4b9a7ad29f1772d6

Download Submit
/data/user/0/com.inkle.sorcery1.hack/no_backup/metrica_client_data.db-journal

Filesize
8KB

MD5
4c4fd8984b567cb52e3a7c7b4c085b8e

SHA1
f8a47cd7d97c68f059427cb97304dc3a9873d1fe

SHA256
856e092e98075cc27dd89be41461fa3023d5799da3a522c5f96f57d2255e0254

SHA512
ea81c1cfdb076ecb06bcfd4e6320c0238c023b8f84b9f36a67b4c21765c27d2b7e2faf05cb4301ea48d2b236a102af5104d888edef5cb4a056fccd82c92626af

Download Submit
/data/user/0/com.inkle.sorcery1.hack/no_backup/metrica_client_data.db-journal

Filesize
8KB

MD5
890008463283e483afdaf5c8f7a59ad1

SHA1
e097968fb3fa8193fb7006134e2181e82715f03f

SHA256
70a4ada3ed809076d11b40c208ab0f321830780385ddd4cf9912b9a4f4ae5b60

SHA512
2c1d1a823b46da2c790618b8a08a3224fcf3414e5a54f81b8a9970aaadbaad8781a8dd67de37ae6b7c86495cb1699da0f3f6b9798c3d15e742d57729bb8c6433

Download Submit
/data/user/0/com.inkle.sorcery1.hack/no_backup/metrica_data.db

Filesize
12KB

MD5
f41f531c07d4141546a531ff9caffdcd

SHA1
9dcac5aed06972d0ff6bd4cc1f1cdff85b36d3f5

SHA256
bb8dee5b5c3779f175abbd142722eb0022b98d374783aa80145b34614a4de646

SHA512
e0c8d1a820cb4c098e45776e8b50ea8c83944ef2e3f005cb0acbfc07688974d370f78100ae022f62564fc4c12acfdc43b710c18ca1c30f4f575bc08b9b12d2d4

Download Submit
/data/user/0/com.inkle.sorcery1.hack/no_backup/metrica_data.db-journal

Filesize
20KB

MD5
a078edaa5f09e0a53efb8969cf02d600

SHA1
2f3babdba06d801da0864d192712e2f17f53f3fb

SHA256
4d515271e2abf55c2cd2030417d15487a33f50da949989820a5c90c3c1e0e84a

SHA512
38e41e897e5928e25e69e9d909b0a0e7770279b418b4451067ebcd1a0ffd9fc72d5884a03d623533ec13582aeb84f7cc954a231c11f0483360b3cfe5f875df5a

Download Submit
/data/user/0/com.inkle.sorcery1.hack/no_backup/metrica_data.db-journal

Filesize
8KB

MD5
bef57cc57ee46a5023f0e8ffe7386d0c

SHA1
b51f8f27fccb4b82b9a98dba241b5a350e893453

SHA256
703237b05be5a046397a82a74f123d341bea0afc2ee669ad7e54b8845ff2a7f3

SHA512
adea614210ff07ad2e62e7a5a01850c3b62ca602e4d707c41635ceebdb24f0876e8fe560b408a90610d3ab506516591876573d7fc6523db5077dae02ebf92638

Download Submit
/data/user/0/com.inkle.sorcery1.hack/no_backup/metrica_data.db-journal

Filesize
12KB

MD5
6820b53e25e542ae9f2543f90a9a954a

SHA1
f159eba631593c61d65f206973bf77c742d12459

SHA256
9a4f7fc0c53e4d041d4da5c994b4edbc7d46c5605ad76693873ca5c2949d6fef

SHA512
346c42a623ca345cc9f09fcda1fdb3d7e4cae4056735cfe332266628a729d120e3bfa06aa4574b574a7c68211dbb8d94a31a7316b77bcdd08bb75957ebec9d5f

Download Submit
/data/user/0/com.inkle.sorcery1.hack/no_backup/metrica_data.db-journal

Filesize
20KB

MD5
0e14fd9d72fd0046d99dcde79cdf95c7

SHA1
077e1fb6695233ede6a679712cc8d669d9582620

SHA256
cf5dffb0782fd34f19936ecdfb8f7fc6cce350048b617627e09302790da759f0

SHA512
87b8f8e5350b707ec5d28c080a3860e49029f104dec9419781ca74819464c2eab115df470d68af59f1b2eb9a1db99503de13e2f2e3e021c1b977be4adc14a92f

Download Submit
/data/user/0/com.inkle.sorcery1.hack/no_backup/metrica_data.db-journal

Filesize
12KB

MD5
976d2f04bccf30e84901f250b499ee36

SHA1
00e1183bd2321b524d1b620cb0f39b64ea427cac

SHA256
2f524478a1118fc9232325cfd9340e082263d8816592f175781ca073e96d3f6b

SHA512
06b73cc7dc01afb95a2a25854571d9b353393aa50d198e62252dfce710ac030bc181a52fc4a11d6a614aa21777b8660de9509e95f51826210b5c7982cc98f1d6

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads