Analysis

  • max time kernel
    2659052s
  • max time network
    150s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23/12/2023, 21:50

General

  • Target

    93c89fd17818cd7c87dcfe96f4b3c20d78ebb3d267e165ba3a538a5ddc23d7c2.apk

  • Size

    9.2MB

  • MD5

    dcf3d9e425625b7c85f7f98e7cd70de0

  • SHA1

    0daf19d2431ca121b94ed1a58a280f6051b1047f

  • SHA256

    93c89fd17818cd7c87dcfe96f4b3c20d78ebb3d267e165ba3a538a5ddc23d7c2

  • SHA512

    4416bad37ebbfdf57e2fd2e4b55fe4f38b1950ecd86e368760f6867bce4bada7993eed50f5cb0834d4164cc0eff17d8563a712f146f849d3e878f65aa4e3e7cd

  • SSDEEP

    196608:6oSZDVbrTUtACi/pTFyMiu6ac88sbFxttUGUqWT:6LfbrToAT/pR63/GFbTy

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Checks the presence of a debugger
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • cm.aptoide.pt
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4471

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/cm.aptoide.pt/cache/robospice-cache/RetrofitObjectPersisterFactory_RetrofitObjectPersister_GetApkInfoJson_9996099

          Filesize

          6KB

          MD5

          aa595f23021db6a10df6cdf57101920c

          SHA1

          da071cb53074ccd98c6a7538e31da4d311e78321

          SHA256

          247d9a304bc460dd5ab17ed4b48c74079252df096e0c5155edf2e4f8aead0d96

          SHA512

          2e96a7c354d2a5af6422bcfe635c8dd6f585304a16be7459a9c3e8b1beb746d97e4d2904163c452fa6ec01863d5edb4962e48abfe106a499ad499d4481550486

        • /data/user/0/cm.aptoide.pt/databases/aptoide.db

          Filesize

          12KB

          MD5

          171aedf968e17a2744d2585715606cb9

          SHA1

          bbeddeb3b89fcf809619c35b4a318a80e7d5b029

          SHA256

          d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e

          SHA512

          78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

        • /data/user/0/cm.aptoide.pt/databases/aptoide.db-journal

          Filesize

          4KB

          MD5

          335808c971afb52d21edd0bc799b4545

          SHA1

          16b802ebc86eaf8dad72589277cdc6bfe5900d0c

          SHA256

          075a921eb74f373ac718c6a2d6605357521fd45f75d3664f4a20e0b6c57cc56e

          SHA512

          61f2cdf2cebca1f3610a0ddebee499aaf067e6684b371fb6f26df40f6753f9ee4cfaa7a58abe112d4ffa30c9528e76f103e996de16ac7da754fb40eb31e5a352

        • /data/user/0/cm.aptoide.pt/databases/aptoide.db-journal

          Filesize

          512B

          MD5

          977ca4e30662082330c918983ddc2ef7

          SHA1

          834e83fbd4e2f54abcecfac79a4bc64dd1c66120

          SHA256

          cb71251ab9bcf17b1b57c3db85aad7122f16e00c1524654f0ebb3d89558032e0

          SHA512

          c4073bb6ed6d53b996aaf07e6321375d6666dc4ff070db4154ad8b9bcfdda165a69103609dd19ebd74d0bcd88c99ee1d8bfb7ca5906b1ac9c1736ea59c832c20

        • /data/user/0/cm.aptoide.pt/databases/aptoide.db-journal

          Filesize

          8KB

          MD5

          00daaf369fbc6f69617200013e45bae4

          SHA1

          593c46dda85a2540326203f844fc8586706a3422

          SHA256

          654eeb26b6137b2a9716f44627e83cf5e90fd3e81092b5b75f533a782ea9fa67

          SHA512

          f5957f9c97b7189266566983de075665aeb34902c974696f60bce1be8f3e5d24e0d24cec900b5caf2b8527972c4b68734e5962779401396e8302eadab0f79cf2

        • /data/user/0/cm.aptoide.pt/databases/aptoide.db-journal

          Filesize

          8KB

          MD5

          5d218e88af596db2487abfb2eea95f24

          SHA1

          e93a09ab09a27e8d768aabceaea9bc3483661afa

          SHA256

          c616c559bbb34b9da013a08426549fdb0327e8bfdead20af129eaee8a04eee33

          SHA512

          c8cd2d24f207ae0d912534a1682931c6e5f78e22341563b3de0b4bfed9b96f7fb5e2f7cbdee3148d0a6a5e2872228d833f5ba601611cfbf381620fcf95d30370

        • /data/user/0/cm.aptoide.pt/databases/aptoide.db-journal

          Filesize

          8KB

          MD5

          34a2cf94c110bb08422b8ac5a3b913a2

          SHA1

          7e787b1a92e111e0f537d9faebce3e8d6c42ffe2

          SHA256

          5ad371b9a959a9f58a3de6a94288355cb214801ff4444a4e44a6669435744b31

          SHA512

          2edafd40d909d9e57e5d862b611856bc2f3ba9141f115503713974e67b5dba458ea59447896452d35d0c93b1355c6c18eaf0343143e32164e322153e523aefad

        • /data/user/0/cm.aptoide.pt/databases/aptoide.db-journal

          Filesize

          8KB

          MD5

          e1875073636086ccf971f1580c40f2cf

          SHA1

          d4fe1609e96eab68adb05a528faabad4cbeb48ec

          SHA256

          b8d1f4d4918e7d5a9d37915713ee277e1030e6e3c9fa7335f34121f3dd2e48c9

          SHA512

          49b6d1665ecd43d9ada06d2bf75933b4fc9bc7951c73f9999afe82e2a00e9c9a4d9e95cca7ea8e1fc6c8d85430b1944930095b61b4afd90ba7bdfc61ea1db31f

        • /data/user/0/cm.aptoide.pt/databases/http_auth.db

          Filesize

          20KB

          MD5

          ed710a8968441282a5939621c2771927

          SHA1

          b6ac28b3e32ea66790c52d6934608b5e71f3d5b8

          SHA256

          6e7b95a553c2528d6c564296a9e481a6d913074c35011a19f2da8e4807c53bb2

          SHA512

          547d7c530ad345edf6b880b7685d2ddf3770e595fe3a40041677cb0c296b15ec6d9e8ebf3f2db51624be41766a0af6764512f1c352d5fde22bdea81d7c08e364

        • /data/user/0/cm.aptoide.pt/databases/http_auth.db-journal

          Filesize

          512B

          MD5

          35c33a559e7cf175daf9a63a69b525a3

          SHA1

          03944c01d1cc9230a329963d1840d549da068b3f

          SHA256

          3de029e1c73d790eaf8d3cbce2b4cdd9a8169754b12d67c5f86c3da09b4c4f4f

          SHA512

          1b5f2da98ad9088b70dd586b44025bd73eae595746c886876914c69e49d1d823e0169a92e7c5f583a014f504c44df946e4b550a8d3051c4006ed869574e0890f

        • /data/user/0/cm.aptoide.pt/databases/http_auth.db-journal

          Filesize

          8KB

          MD5

          ae7fc7ab26c034ad2a882af3f88800ae

          SHA1

          d287d49a16d5092363fa5266c7adcfe36a536960

          SHA256

          9f3ec48515a854ce2b864677de77aeaf2fe3952c49561ab211fbca376e0f98e0

          SHA512

          eb76c3407235fffd009146be89b451d1c1c4140e9ca344a979807e9c500a0add50aa8136f53a869e7d869e31d57d453f6263abef4b5dfd4d1e0decf2d153aff1

        • /data/user/0/cm.aptoide.pt/databases/http_auth.db-journal

          Filesize

          8KB

          MD5

          ac5acea0fa941a06439f472b6045f5c6

          SHA1

          faf0817d22811dc631703b661d3a5b2d2d9d0439

          SHA256

          8f3a3de5acf0787ca5427157b7273e2bbbefbf7ba9a81d264606b6d12ca5a5ec

          SHA512

          77ac184c19870fd9ee0ca5ff67f100d01b53cca4422059e78873831b055abcaee5b86f8447755fb60458f93d1102610f14d45b52da77ab838296779d198e1b75

        • /data/user/0/cm.aptoide.pt/files/.FlurrySenderIndex.info.AnalyticsData_X89WPPSKWQB2FT6B8F3X_172

          Filesize

          42B

          MD5

          a64ca38fdc33a2bbfe2307f8999da24b

          SHA1

          234fba93ef49929c8feb0eec913c5f71b1d8ece1

          SHA256

          5ca025cdb0db613fda80b4b70cc96732f0a95257d8674d0577b25efadaa148d3

          SHA512

          521e56029065bcc015966b91576d0e155a31fc5841d2a363326456fb12ba398f4bd3d857a8197f8c94801763e3f339f931c57841d14cd8ba9abbb12836b84e05

        • /data/user/0/cm.aptoide.pt/files/.FlurrySenderIndex.info.AnalyticsMain

          Filesize

          44B

          MD5

          c784280bb2bf49566946ecc76ccf5470

          SHA1

          6280e4abc6cb1de7d781281971ad3a7d5bb6ed84

          SHA256

          922fdcb4e6124c4aa9a91e30c326dcd5e5b6f2dacf67033080338114f3dd7a72

          SHA512

          bdf9f5264d897dab3d89c73b2f80f98d679ac8d84c1f238bee33cb21a1cbaebdf9f57d508a9a05a1f00360bc45d672cec07afa6e189459a9505dcb1646b509cf

        • /data/user/0/cm.aptoide.pt/files/.TwitterSdk/v/com.crashlytics.sdk.android/6588D3EE017B-0001-1177-6521F25A18D6BeginSession.cls_temp

          Filesize

          78B

          MD5

          8265f9229d9f17940e472ca8955313b4

          SHA1

          cc92cbb3672343cbe2c7971986b6e2b538cefcd4

          SHA256

          fc9d268d32f3aa8395079f940a67bd86599fb44d3cc1efc194f66fd7b294b2fc

          SHA512

          b9fc470675dff9ce7639f9799e9eb38f29ad9966999d69f79d9722175796f4d8e7e8f3d62e57534a085f9fbc44465d70f9403146628cfe24b350e69b08c419cb

        • /data/user/0/cm.aptoide.pt/files/.TwitterSdk/v/com.crashlytics.sdk.android/6588D3EE017B-0001-1177-6521F25A18D6SessionApp.cls_temp

          Filesize

          109B

          MD5

          35267b8bbb1d922a654ec9998c39bd84

          SHA1

          daa2748dc02ee362ee6092a51d0cccd844176403

          SHA256

          0113e711401ff2bd176c2521ec7093453345c172d9344c1940fea3b22672ed18

          SHA512

          72229d2b1008d3f4956df61eb904684974a842c5431acf148123188e3c10e6a1d02733a5e763e088458ea895a18432d318655b2326279d583c362938a9bd4c65

        • /data/user/0/cm.aptoide.pt/files/.TwitterSdk/v/com.crashlytics.sdk.android/6588D3EE017B-0001-1177-6521F25A18D6SessionDevice.cls_temp

          Filesize

          101B

          MD5

          2b1a82e5aa95eb29f6149cb365f64aa8

          SHA1

          bf70aa489aa42edefc43a9beb1c8078f7998c17e

          SHA256

          0b3e97059829a6ba0e57b316018adc85c41dbc11669d85e1c6c0c1e4376b23d5

          SHA512

          e76dbb5c80569d91b5e406e76be6904c3f325eedb2b06ef3a691d31aae960d0c13fa4a8d9d8d6582af0644238d13718a0f4814a93a13263b19d0237b377e3972

        • /data/user/0/cm.aptoide.pt/files/.TwitterSdk/v/com.crashlytics.sdk.android/6588D3EE017B-0001-1177-6521F25A18D6SessionOS.cls_temp

          Filesize

          15B

          MD5

          b3d9541cc92a9153d14e5160f8d8c008

          SHA1

          2e1ac80eb381dd82a03795b682f92020348c0113

          SHA256

          1ead5b213c87f182ffce484c34f7d9f140ad3425c0f303f460492efe8a26c56d

          SHA512

          78074409135a210ba4e1407ad9b3f784f5683e83aac4ce3482d4e8135425cf2b30db1ff5dd0041901c490a551a477237c6d255671c7b1fad74090980dcf3334f

        • /data/user/0/cm.aptoide.pt/files/.TwitterSdk/v/com.crashlytics.sdk.android/session_analytics.tap

          Filesize

          383B

          MD5

          2d429f977c0aa4381aa2baadfd43faa2

          SHA1

          e88e4978febdd4dc4c39fcf692d0f400f9a47402

          SHA256

          a373d5d0b14fd5ffc856c7f965fb13f9ab84813f8445c92017d20b9be1c5f1d3

          SHA512

          a69b8d06079389fd0e8079b6d738d0f888588636d3ff4da8f0e4be1cefd737d39054c0cf7d92f7044d16ed2c70c6067201c4547a6de6fc5306ca612716b92b3f

        • /data/user/0/cm.aptoide.pt/files/.TwitterSdk/v/com.crashlytics.sdk.android/session_analytics.tap

          Filesize

          349B

          MD5

          a8c50670397d2eed8d898bea8586149b

          SHA1

          2fd398ce64c2a9c53b6aadad3a08d3e079e8dd02

          SHA256

          722f966286b2f203028cee56e8a9f8d146c13ff39acfec31de8306093057a7bc

          SHA512

          25b2cf22a9cb251ec9cf180c6dbda6901e1741be10c57112cf969e684f22d8ccbc161f8d3b00ff305f25193b158fbe1e93afc566170dd5bcff8b09434235982e

        • /data/user/0/cm.aptoide.pt/files/.TwitterSdk/v/com.crashlytics.sdk.android/session_analytics.tap.tmp

          Filesize

          16B

          MD5

          c33583fae4e0b61cde1c5b9227963237

          SHA1

          fe2ebe4d27469af1460f7e852031a04208ef629b

          SHA256

          35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

          SHA512

          fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

        • /data/user/0/cm.aptoide.pt/files/.TwitterSdk/v/com.crashlytics.sdk.android/session_analytics_to_send/sa_13c29ade-f0c0-437e-93bb-7f39b97ddb5a_1703465966576.tap

          Filesize

          294B

          MD5

          aef9c253aee8eb395580afd00d5b4562

          SHA1

          33e725dcecd8088bc96f6d8bb5c27c48cabb2136

          SHA256

          117f7d38fb5d9da2eb3b31dd22eddcce43c88332a4eb721d2afb9f05af486677

          SHA512

          0237eaa84018419f36fcf550aec6d3c5d0ebe11797af0772e85bad60156f36a03c27b407959f30360aa5262e41c7f999cd55e408ec7b6ba81b1b6d59fdb301ee

        • /data/user/0/cm.aptoide.pt/files/.flurryagent.4597422d

          Filesize

          58B

          MD5

          7c1db521d6b12312dc9a0510cdb3017d

          SHA1

          686a0ac2ca4f513c33e137c02a278ce6b3375c4f

          SHA256

          20c2c3ba8fb6fca6a2f1d1ac56534b8d073b6a5f3e043a60b5d4e8f0ac5805dc

          SHA512

          dace6da26e0f8264e25524c3ce77b137297dad5ee8f8c83210abf6764999e062f9d5c809b2bb23bec5c3c15a24d990a89c47ef210622b9060800336e9f0e8729

        • /data/user/0/cm.aptoide.pt/files/.flurryagent.4597422d

          Filesize

          152B

          MD5

          190061b09b9ef1e7fe979cee04c360a0

          SHA1

          41288d897d32c036b1d77ffd5c3531108362de6a

          SHA256

          65a8008e57a51ba670efd7df4b9e02c817b83427c265561b0cd4acde8d441676

          SHA512

          51fccecc795332bd1d6de3a6e716ee63eb0eb8cc367e481a635ac257cc4e368ff8072ea961ed0ab9bd5fd4f68aa1ae803611e76d7937ef018f783d3a2695d91c

        • /data/user/0/cm.aptoide.pt/files/.flurrydatasenderblock.3e1232f4-8f0c-4ffd-af36-a250e890660b

          Filesize

          305B

          MD5

          df26bfea4d1a0a9190bd0c4b7dbd8f43

          SHA1

          db191859f4f62e966df096b1a565caab30b27ce5

          SHA256

          826c49534f79ae381508980b1931ea416a8a81c0f8ef4f908803fde8a83ee447

          SHA512

          fa93e4cbe6cf2ea2198873b5c54f35e2777980c9cc63470a6f847b5f9f5444471d222b694f21caee04c3f2456adfd6907ba6ddced73973581fb674831d8d5a1a

        • /storage/emulated/0/.aptoide/apks/d9040aebed4ede418cac215cbc53aaea.apk--downloading

          Filesize

          15KB

          MD5

          7a52ac69ecf44a0d9810854cc154e09f

          SHA1

          c3cc10709691cb9009bdf7d96de4a511d08c241e

          SHA256

          8c05799229ad9774e49d826f87bacc3016ff516e5ef79853462854f4f3f14e53

          SHA512

          5f754b07453000510cb9fcc1f291eca683dceef3751285d796105b6672fbe9ab2fb8c4bc2df9ba62331dbe2191babf21f1d662f210c44c4f7a24b4092cb959cb

        • /storage/emulated/0/.aptoide/icons/0780f035d5f8eaf961ea4242410a52a3_screen_96x160.png.tmp

          Filesize

          6KB

          MD5

          d6d5e130a54cff4d3a97ab35146454f4

          SHA1

          1f686ebe52e0df0df7698514cd44b57330a49e6a

          SHA256

          a49322ebb4c49dc611c60494f63c8f68ca9768c7542fb7b31793a58f48000965

          SHA512

          1c005f8129c58c336591b84c1f91923d699b58875df7844a307e2ccf884543c3b4bf9f4b821cce2386562ed83606dae57b1fa5038d03e083c1aaf5aaedf05da2

        • /storage/emulated/0/.aptoide/icons/78e9bafdcbffe48b3f357815b0010d52_screen_96x160.png.tmp

          Filesize

          18KB

          MD5

          3fe097c214d19b9ebf52d573059e9ad5

          SHA1

          f925b2cc547d8194bd24b347e22bc9681e60c3c2

          SHA256

          58b088fb2c08e751201ed2d2d0747653c0299dc290f188fe1cdc9ca575f06f28

          SHA512

          7c1936fe29b5dc8238ae8fec2c19b249288902d2d1c949884a59a40491c1331604d4b8559d114a7337a641d86073800259241474f3d341284e48fc0621efea60