Analysis

  • max time kernel
    2812619s
  • max time network
    141s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 13:44

General

  • Target

    2448d21e6e3765917028e5eb2347ef06332652c46eca9a5131583b0580acd0b4.apk

  • Size

    11.8MB

  • MD5

    986444b08b135f8ea6f037429765a00a

  • SHA1

    1c3a5931da5918d77d0ef8a53dd2e348bed6fd2c

  • SHA256

    2448d21e6e3765917028e5eb2347ef06332652c46eca9a5131583b0580acd0b4

  • SHA512

    711cbf03eb3c99eb3febc45ee7838a3cbe347df1a9cf1b90a5bc583dfd6f02c02adbf2995fb802890730befd4ba6d7371704304cebc0febe847f09905cff4771

  • SSDEEP

    196608:6wAKmzU/dQyzFI5Fir9ygVo/KnSE3nrRuMxNRoNoXAryPCvCkuQ0aymmjazeJT:dAKm4z4/KSE1voN9e6ERaymmjaq

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Checks the presence of a debugger

Processes

  • com.korbitec.property24
    1⤵
    • Acquires the wake lock
    PID:4275

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.korbitec.property24/databases/OneSignal.db-journal

          Filesize

          512B

          MD5

          8cc5d47eeca455a31648e5ca82f97317

          SHA1

          b5ebb9e70d404706c19362adfefd5b99e54323ea

          SHA256

          7df4a8b2c76db61eafa39d6fd8bda051aef59800a5206fb5354e8129c669a68a

          SHA512

          80a63f392ccafcd277df0b9d5d10913b1e6a0bf8c237cc4618c087de4fed61e34fd4ba76d2820931bf7d9496acea42be95ee703b7f6be35c628e06dacbc42b6c

        • /data/data/com.korbitec.property24/databases/OneSignal.db-wal

          Filesize

          48KB

          MD5

          f42ca1a676fa3e9fc465f636ef86cd75

          SHA1

          bba2a60cc6bb996b22955ee390cd0b74dc7ddd4c

          SHA256

          03d52bda2c37280b6248212226cb59b1254a43ce447c851fbc6a8e871282caf8

          SHA512

          dc1d8304e47e2e9c8e36b34453a4ad731f896bf80df4affbbbf3605882ec6dcfcf48db894be7e01e2c9e8264afe5b278578232bf50796aa6178034e4b4b35060

        • /data/data/com.korbitec.property24/databases/crash_reports

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/data/com.korbitec.property24/databases/crash_reports-journal

          Filesize

          512B

          MD5

          a50c4880dec2700c02bdf6fa0875f840

          SHA1

          ca726a4ca69b758c24889510c45ba97613e716d6

          SHA256

          dbb566d715de05ed413d4769677cdeda7aa3947d5acaaea7dc6686587584a675

          SHA512

          8e434e9740e6ea5205a7a8e91631d3addf27f6ef5440a53adb19e137807f76abe65bd4103c9f42e74304b8f3343b500df4936d6009467b3a79623b454e0843aa

        • /data/data/com.korbitec.property24/databases/crash_reports-shm

          Filesize

          28KB

          MD5

          cf845a781c107ec1346e849c9dd1b7e8

          SHA1

          b44ccc7f7d519352422e59ee8b0bdbac881768a7

          SHA256

          18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

          SHA512

          4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

        • /data/data/com.korbitec.property24/databases/crash_reports-wal

          Filesize

          36KB

          MD5

          0479c8727d482a56ec899d8721c92aeb

          SHA1

          5aea97465d839fd1f22fe0264434432576921847

          SHA256

          af624eb9a59138635146620921e493df09b6c4a3d0fccfe164ac8e66970d98f4

          SHA512

          9e595a9fc7dfc748b575df4dae4e443dbe284fe85eab9489dbbbbd2eae60cd7cbe3b526c88f5a9096078b55ba1916e1269ef6396ced04f55230bf67d5c887b49

        • /data/data/com.korbitec.property24/databases/google_analytics_v4.db-journal

          Filesize

          512B

          MD5

          41fa860cc32c573e07dfcc9b3feb6a83

          SHA1

          bd97d7b4605e49238657fef071771ed28eb2fb63

          SHA256

          73c57254bab9edb8dc784a959361d26dc23bb3d43f6077395ab165508eca27fa

          SHA512

          909a793c0ede8e675a6f736d1d21c47678d56a8374518e813bf702f5202854bd95e831cddec9837a6d5abe6947481e080d8cf8e833709a449cbabba01c27e961

        • /data/data/com.korbitec.property24/databases/google_analytics_v4.db-wal

          Filesize

          52KB

          MD5

          027a25f80a6002bdd3075054c0ea0b81

          SHA1

          0c93169460baa8beeb5fc2c53f6ebf489e58a426

          SHA256

          c5f20af287f494f0ac86b2b5975ff7fb7d964e0d59214816ee66b5dd0b3f0554

          SHA512

          ea001d5fda9f8f9fb628b07be1ef390ed64eb9a650350db9a4eef4e19e24645dd0b2aec55b9d72bc30e313abbb670665dac24caf40049923ca777b4f382daf80

        • /data/data/com.korbitec.property24/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          57ede3c5346467b79e033d97c27706a3

          SHA1

          c0cdde79adbb25fead64203e74a9cc9a304a8e47

          SHA256

          a562608d3dd59767dea9cc09087555e963353190febd39b381d0ad5d0ed08b99

          SHA512

          64538a290e9140baf32daa507da0e2a1983e43111982e26ef43fee01baabcaa93192af719c0f26a6769840a91cf78c670917dce2bba326e5ffb8fe9dc2413fe0

        • /data/data/com.korbitec.property24/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          a40bd70f8431f54b34c9abcdea489188

          SHA1

          0e2d00572dd95747d389f3577c973732bdc525e1

          SHA256

          6878e9a27126497e314c32cb48473fa5f5a4e978f43f2c464924122fdf813b0b

          SHA512

          0b8720060219b00cb9472bec7b2dcfdd2f66bbcf90248051c08c0792700dfa1ef7cecf0fa11e23b4ca235a5a170b92712f42ca88174a17df2ba0d521c8930549

        • /data/data/com.korbitec.property24/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          d4e400486d84293efcd65c922ad1ea08

          SHA1

          462099407e2543679e056379e1c48ec23bec2fb5

          SHA256

          57f6ba7f463579fb720360b8ae639bbf15b15eb3752e690cd02b4993b001427e

          SHA512

          d786deb4682da7af4297dc2b7daf9fa1dc77bdc541d2a4377c3f87f033a0f6418f213cf14ea1c6e3fa0a3c38ed4f7be9eb663d273b7699d01199eec5485a10ee

        • /data/data/com.korbitec.property24/databases/google_app_measurement_local.db-wal

          Filesize

          4KB

          MD5

          97ddfd9ccb50ab9a1bba7f9e32800316

          SHA1

          3a83568900cd993c50b90f878c8196ef5ea8c316

          SHA256

          7343d472a90ce1e6f3938cd3b7308cb9fca8bbe325c67487cb0284db6177b585

          SHA512

          d8ad96bd018e14ad7de979b65bbab21784b09bcfb5d4d4e9b57d02a305684cb9e523d5487ef7ca1a2aa7ec6263b7a553c2d528ecd6cc47db2a432b527aa408e0

        • /data/data/com.korbitec.property24/databases/google_app_measurement_local.db-wal

          Filesize

          4KB

          MD5

          c4c6ba6f0ea69f47f3314a4793ab2527

          SHA1

          870af264a2e14ae0fc647f2bcea41473aada5b8a

          SHA256

          3c41228f3c60a171c18448c3fe82e21cd05b344d241da4758a088864bb8ec0ea

          SHA512

          44cbeef56c484e0fdd7731c588281eab373f2c496195006fe4c78500394c6d3235687ef57f1a6d0065592bab41e4d54d54749fbb4d7c2933b7ddc90a1028038b

        • /data/data/com.korbitec.property24/databases/google_app_measurement_local.db-wal

          Filesize

          4KB

          MD5

          f4fe44b7711a5e2a7c546b5a1695165d

          SHA1

          9e92ab4d3be46b1ab81947838a29b5d21decfded

          SHA256

          3482c0f0891447f5ea341aab07ae49c739100b589243fd7528b30a9fd3fd795f

          SHA512

          dc85f77e27c2f60350fde3a35afe2e4f5384051b36637652ba5083b216bbcef7a83ae6dd761978af4fafa13211e265a5f1fa420e145787e06c762a412f657247

        • /data/data/com.korbitec.property24/databases/google_conversion_tracking.db-journal

          Filesize

          512B

          MD5

          8bc760edfd16ec2189ad5c1d1a5f9078

          SHA1

          544b883819351ae75d534fd7569140156bf80a7c

          SHA256

          0b5733fdce026dda248728feaf978413df72a8c97ef9ddb987302f281c0f5a3d

          SHA512

          939399cef72a0e0cd404cc4d6497c7e8680e6809be370762c7ac1ac8496ccd081b8943e384379f118370ffda9c78591d247c94e0f288364197821b46939c9fef

        • /data/data/com.korbitec.property24/databases/google_conversion_tracking.db-wal

          Filesize

          40KB

          MD5

          675f67b8c6852cdf655d9f896786a61d

          SHA1

          8bbe8474f9ec231a1d0a093140525cb547420f39

          SHA256

          dfd8dad9244dbd3239f8eaa597a4762402f59c97861265913d27419f575e2925

          SHA512

          76c920a58f5f95046bd163cb1a0b886aa0040e2207c6ba62ff1cbdbd82debebefc2d024a79ec0fa4afefd8a0f2248f2be470d24720d8f4aa2dbfa7301b63ca3c

        • /data/data/com.korbitec.property24/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/658B2C4500CF-0001-10B3-B65CF3A2D43FSessionApp.cls_temp

          Filesize

          122B

          MD5

          98780e0665f6f9ec7914deb1dea2d854

          SHA1

          2d1acf8f17974e9adb27d2569675d2709e10cb76

          SHA256

          4650402e26699b4ecd71009bd73c247c1f992cea6717e1f9db99619e2d73d29b

          SHA512

          ce78b6d9c8add93b06b11972a79d44246445777d7869beb7c1f1ca1c534f25c64460d0777a86866520e731017b84210040737dd646c2adad0bca921e8d92cf79

        • /data/data/com.korbitec.property24/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/658B2C4500CF-0001-10B3-B65CF3A2D43FSessionEvent0000000000.cls_temp

          Filesize

          2KB

          MD5

          07cf5963a2e5b33241814eb8e36507db

          SHA1

          64e404b27c35f52a9484e6e0bf1d46311138e7a0

          SHA256

          f77cab1a6b5d0be2a114e306a73a23aad89cc04c3c464262d2f7421e97a2457a

          SHA512

          3868dbd1ecca5329791158c0c83a84292a41e40cd3623d4329512b8e3f329b7520a9ef3c6f3e59a6ea029d959d95f77a65742bddacec20380fc4c020c973a27b

        • /data/data/com.korbitec.property24/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/658B2C4500CF-0001-10B3-B65CF3A2D43FSessionOS.cls_temp

          Filesize

          14B

          MD5

          9b3d4522944ce6396563812bfdb92fa9

          SHA1

          6d2a6133c8f01938a48ccc77ef86ad8ca335c020

          SHA256

          d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9

          SHA512

          091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

        • /data/data/com.korbitec.property24/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

          Filesize

          525B

          MD5

          418caca1a77c0051b95d955ec11f0183

          SHA1

          609222a83723fb2db983f1696916c86e597b65eb

          SHA256

          d3a142ee8afbfb797c2b3e9a6763bc9fd1ec6bb1eae228aab20095929d9ff441

          SHA512

          8294a234ed9f7a31b080654a96d3d235c6a3fd518c0ea0a5f0d435382aa97ef977026d0a249cdf5004bc050b2501d900191062216e57f58eed9c0fc7a51278a7

        • /data/data/com.korbitec.property24/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

          Filesize

          553B

          MD5

          a765f12babf01b1d84e190c8a93ee879

          SHA1

          d2e21b55b985268316bba9a13c6b8f506e235c7e

          SHA256

          c18fcd6f71507100158e617a8b2600c54fa86b4f5bb31727b45c459fc0be3ccf

          SHA512

          2a35d723aeaa4e1d1f955fbd6c230245f61d1e3a42085c1a81d663878e5328a94b916996a245940b3e1d2090f83bd5a02960607bea995da13d5f21aece72225c

        • /data/data/com.korbitec.property24/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

          Filesize

          16B

          MD5

          c33583fae4e0b61cde1c5b9227963237

          SHA1

          fe2ebe4d27469af1460f7e852031a04208ef629b

          SHA256

          35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

          SHA512

          fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

        • /data/data/com.korbitec.property24/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_cd8f0c40-2c68-4d77-8d3b-97e800032c2b_1703619656149.tap

          Filesize

          402B

          MD5

          0cad3d0c45c496708f490cd3c3722c36

          SHA1

          3ad88db1ce14392584ac56a371aa3b7103e6439d

          SHA256

          2d5c0a50607f7f4212beb52bf8b82b3d687d7a9b9f1b397da3ea8b885b7c5c2a

          SHA512

          036c0674bd531245e551c518e6872ac79484147ea62313c7fdcd93c38d9abdba13794954a71f91ea4efb2e0aead5cb154493c1041668936a9fe1c7186c6837fa

        • /data/data/com.korbitec.property24/files/gaClientId

          Filesize

          36B

          MD5

          400893a1ec9308e6ae5a4d97c052b6d7

          SHA1

          f3c6934b80d8d79a43cf9cb4884dd93f9123982b

          SHA256

          3e1288c952e44975711dadaaea914a7da63cc0f7c01bd5e5fdef7a5a65aa404c

          SHA512

          fc84be1682131de0439d5ed51d6f11ba0224a3fbfdeabad85c54132369955b7cddea3404f2ee99d904f7ce5efa3fe659823350302a4f3aa1e03cfe18dedb8b67

        • /data/data/com.korbitec.property24/files/optly-background-watchers.json

          Filesize

          19B

          MD5

          8d13feadb9dae1bcaeb41a8ae11eefcc

          SHA1

          90c210559fee9bbc6ea17aee6c068313feca00af

          SHA256

          0129689b11463aa3a2f302001e9ec0b842974b655270e8fb67dbf4263e026a5f

          SHA512

          eb08587837ee3557ae177156dc6a13bb5622eec447bee61ff41cff5214c0c8c0cfc24d53e6456d9e868afc191fe530083e5e36c75c31ff91b32bce5096ca4f77

        • /data/data/com.korbitec.property24/files/optly-data-file-9225330325.json

          Filesize

          89B

          MD5

          60a4c5e44fbc1066d01af52cdb9655c1

          SHA1

          1732d0480cd76e290f64d4a4d77b39f1ae451d08

          SHA256

          eb486e6a0f94a67ab22d50345c8638bfaf50d02b7ad3ed2db8e9846a6251da78

          SHA512

          163054cbe84e7dddc52cd5aa428a80ef198581e01000b7826dd1a123407121eb6af9c11695cf6728db882cae1335a0d36890fade7a5acf97a78d253d7acfb5e6

        • /data/data/com.korbitec.property24/files/persisted_config

          Filesize

          4KB

          MD5

          75115f9c4e3767cd02dffee69252a6f8

          SHA1

          c88d1a1fbd45e3e059aa23a9ba0ad9350dac4539

          SHA256

          8577e49c337bf937934998caa2d36444e89dd2a9fb4fcf270fe4bcedffc94985

          SHA512

          4668188e83d7980bea5bfeb012ddc6b9c189bae22061d6ed63c49fc65b5601403d832157cb201203cb8fe561e25531487aaed5641dc232c630f17226cab00d7e

        • /data/data/com.korbitec.property24/files/persisted_config

          Filesize

          1KB

          MD5

          001384b3deb547de09cf5fbdb001b193

          SHA1

          9dc5fc16574985cc95b46efd4379f2e978b7a8f3

          SHA256

          5ca848f34200d426001352a5743ab99ec2cc87f7af3e4a5b96871e42f1cdf07f

          SHA512

          1658da14c52bf5ad5f84b538193a279394c96c3d59b323a929e688e00fd8aec3ed141c89354eb9c863258b4fadc5df2d5193bee7a258a58fdeba99dbaf8dd5c3