Analysis

  • max time kernel
    2835081s
  • max time network
    163s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    22/12/2023, 13:55

General

  • Target

    b1aeb0a25f6d31c805f293e0fddfb8b7.apk

  • Size

    6.3MB

  • MD5

    b1aeb0a25f6d31c805f293e0fddfb8b7

  • SHA1

    d7fff3b09b22adff2626c091cd8979a3cc36fd5f

  • SHA256

    9393ff6718116b3690e1b029318c9abf906e666caf253de2b109c057e211769f

  • SHA512

    34361f378cb9952cb4cfe6551f8d6e3c16d1c5d61a1288ac0704ab63489f38499e811f8072391af8acd8b2f3c97848188a4ede69eeb197ab393dfb806c27bcd5

  • SSDEEP

    196608:y0nps49HtMkd4Xf4avUqTSAiG07qRGKCvFS:c2MHwqXT2qHCg

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • cmn.pvtk.theworld
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4978

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/cmn.pvtk.theworld/app_Parse/CommandCache/CachedCommand_0000018ca8f9ec87_00000000_224227284795386286

          Filesize

          338B

          MD5

          5d0ba842bac2999a43d928077e28e3c5

          SHA1

          477137340d30a9e100f564d567c84c91a593007a

          SHA256

          278a778c054c52bf69457b3a8bf828f8c024b4b186bc5faac6e231a0b85045d8

          SHA512

          a6d3e84d6ac9833fc935b5682be4bd01e5adc08cf30875435822cb154cfd9212499d54b98bd8d4fe34e52091a32399fc67c8c352da86ad008d908bcec1d1bfd9

        • /data/data/cmn.pvtk.theworld/app_Parse/CommandCache/CachedCommand_0000018ca8f9ecbd_00000001_2098912864060394526

          Filesize

          114B

          MD5

          dc084d3a00f0dd8ae9e908fa1ce4b934

          SHA1

          08310377715049ab2d0c094916cb829e7d10a235

          SHA256

          2247c0a7864269cd9ac2cdeec95e92c513f3558c5af11ee2725d6311366d2e95

          SHA512

          e2806422f00bcbea34d23774c362eea9c2da3c8a1e9f014a2338b47827ba99e65bb4fad704043cd650a6c8e6083082a6d01c94bdbf81c8cc2a6f9ee7eff0e493

        • /data/data/cmn.pvtk.theworld/app_Parse/LocalId/local_34adb4b806335242

          Filesize

          17B

          MD5

          9b42aab1d2522e937abf53dd3a9e74f1

          SHA1

          cfeebf2c70fde3ed33ddfbb7b482b543a8cc6a55

          SHA256

          3150a415ac4b4b49679268b99f43132f9e46be879659d0bc493e4a3e93bd2da4

          SHA512

          0d41a49e803826d135e33c8cd3773d9f21031f62aaaff6ffcf809c73cad899cc1a03ed7c419d5b308d4ac6d27d679f1d081c899afc5c756ee83125b3993b3e64

        • /data/data/cmn.pvtk.theworld/app_Parse/LocalId/local_34adb4b806335242

          Filesize

          17B

          MD5

          e6fdb03f1d8341b66570c05c5c4b1221

          SHA1

          6f1bb026bb15edd717f6f8ebb23205877bf81d46

          SHA256

          db500db2fe579953c5dc1547087bc7bbf93ba0106ac64ff18084a85077b4eeb9

          SHA512

          cec7fdbe76acedc473d95d7ecb1bc2bbeb2cfd72c0808fd4c5fa3f8578744d0698d6c58439b860a1ccaf9491ce1ce2a4e6c2818cc7e9b71a94bfcd33b760d447

        • /data/data/cmn.pvtk.theworld/app_Parse/applicationId

          Filesize

          40B

          MD5

          58b1f1c748029b1404a5a4bb2c8279d3

          SHA1

          05617b7f8d60f4162d2ca4aa21d202e2adfc308d

          SHA256

          14bb51a32ccb2f00eb88edd1c14587c80998cec1cdca7a5cf159b7af69fcf3e6

          SHA512

          133bf32be1b5e4f9d2d5b557f0dd77917545558e9973c2565f36a37074af1ec70604da7c11932d043adb462f2244eced996fad6f85662983c745bf20a81fbbdb

        • /data/data/cmn.pvtk.theworld/app_Parse/installationId

          Filesize

          36B

          MD5

          7d1539ec6ef308dba97ed64e2936927e

          SHA1

          2616efd77bc245ddd9e4149dfa0057ea72478893

          SHA256

          3219f1c0adb16a65a76a99fd07b0fdff1932c3e96a74245cb6ab3e5803b45e58

          SHA512

          86eb4f8683008772836d89cc7cfe90630b4c663c2b7a28e2f8ca2a797fca2edde833b95bb1c7e9e7851f5ecfbcd73af94cb7ac7cac8610fbcb7244a328d5e77f

        • /data/data/cmn.pvtk.theworld/app_Parse/oauth

          Filesize

          50B

          MD5

          3fc2808d2652a35ac68a2edf145e1c07

          SHA1

          5beb270f32d59a74e90c0c863dc9db15bc093b09

          SHA256

          ace1a1dab3c16c38691568ef456ba14b5c0d66e23f950c8e41f7433af9754304

          SHA512

          a8e1fec281b6d958118d2cd3ce6bcecfb76b1951bcfcfbf2710f5effbde90638f883df2cb6036be29f163ec61fe5a7b45a7fbc9a205d3e87db71d7f912774862

        • /data/data/cmn.pvtk.theworld/databases/recordstoredb

          Filesize

          12KB

          MD5

          163b0e3f017becbc89b9d7f330b78f09

          SHA1

          1ef9cd8ac8655190468d0ccece0a4738634ab0f9

          SHA256

          cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36

          SHA512

          6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd

        • /data/data/cmn.pvtk.theworld/databases/recordstoredb-journal

          Filesize

          512B

          MD5

          0fe3a80f1aab0636337417b44496cfd9

          SHA1

          bfdf579031e79df8612a1b0abcb5cfaae6bb03ba

          SHA256

          761e3fc24ae15fd27f357d33284438460374cb59dd843470d7092be2b79d0cec

          SHA512

          884e8631df05919e3666dc2f7ee53ea4716e3deed954077806804b3ba0229cb8c9854bc3f087993dc0db2fc7497003252c4a7cea032e7531e02c9561219a9f96

        • /data/data/cmn.pvtk.theworld/databases/recordstoredb-journal

          Filesize

          8KB

          MD5

          4e8296a81c4564812c40c149b6eee64d

          SHA1

          e0a1312492367107182189b1b60ab699e071331b

          SHA256

          54041f8713d2d2141e7f74a48cf9a1c5388bc21c330f8a40e8b76a1db2f0baf2

          SHA512

          63e5ab0bf2dfa1be446d6891a9b799d48de8bf4f45715428e275bbc518767bd8d8ee34327853fd36ab677c18ae764bc67a599ae83ab1976e23e04acac04f0674

        • /data/data/cmn.pvtk.theworld/databases/recordstoredb-journal

          Filesize

          8KB

          MD5

          50f11e38e469bec2ed76bfa558afb8ca

          SHA1

          ba539d900886a88cb3414b919477a0a8ba34c256

          SHA256

          db89ef5884fee5818586a1c0e1f7a122c35d4a5813a7d73c95df97d5caf64692

          SHA512

          8b684051b310522ddf57b5a7fee330bfa45a8c6d610ce43f8a415abbe535f0f7b15aced58f34065e81e8feafb1aaeedc18a6dda7e3168def27fdb84a4bed784a