Analysis

  • max time kernel
    2668223s
  • max time network
    161s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23/12/2023, 13:36

General

  • Target

    227c4dd018090ef85e5d325552c4594f42f76c4e6a1c0563510071886bd3064e.apk

  • Size

    12.5MB

  • MD5

    77b191acc04936b561932a0f341c54a2

  • SHA1

    e65cfc231de49f29766baaf491f917b99c8351a5

  • SHA256

    227c4dd018090ef85e5d325552c4594f42f76c4e6a1c0563510071886bd3064e

  • SHA512

    3529e555098b8f789a3d15290554fea3916867aca45eab98146d8f792122d86ae3e0aaadae6b6888d5ae77a918641e84031f15489a45ba5bf4a46daf455b5f7f

  • SSDEEP

    393216:oRUUhKRP7G+sIJMWUElg4fUjjp9lbUtqZf:TU6qNIJMev8Xpqq1

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.app_alcaza.layout
    1⤵
    • Acquires the wake lock
    PID:4652

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/com.app_alcaza.layout/databases/ba_storage1_5.db

          Filesize

          80KB

          MD5

          ab8272f1393a1837ebfef0160ae8bed3

          SHA1

          3a869a7a9dc6068668588ca88fc56a0a9b0f8dcf

          SHA256

          5dc4916326d7a2f6a68cdbb3e362bcc1898f83c47249764bbe4a84fad14f9667

          SHA512

          cb7852a7457548827b24612c1e800b2c482543af0a02a023927b2eef95987fd35507ff2dd379de86563f55c077d539c8c8b2bd3448bc362ea6429ed9b95a8e18

        • /data/user/0/com.app_alcaza.layout/databases/ba_storage1_5.db-journal

          Filesize

          8KB

          MD5

          f2bb4a91199e89f79ee27b000af4c338

          SHA1

          7ef5949924a43a5d0cd4331c592d9baa2ce94c4d

          SHA256

          e7f557058aa8cebce8d9ce76eba3bb812d474ec2fe7d08ee03012796d4161c97

          SHA512

          1be27d4ac851dd4dfa673f2df0ebc4f83432a92059e8809688e6dd54a9b2dc17d0d6cbbf5d2a7150087524ea684011803e6ceb6f8b8d914aa78ccf764ca23a64

        • /data/user/0/com.app_alcaza.layout/databases/ba_storage1_5.db-journal

          Filesize

          8KB

          MD5

          cdd40cebbf32e3fe1807b4c5eb8beded

          SHA1

          1f7989ac091eba30c73ea43d0d16fc4c916da7ea

          SHA256

          661d1b14bfddf27bcf44cbea9b5b42794b893cb9df274fea9efad7c34f922337

          SHA512

          a159874494080d79fb1cca28c1a659b456d1c033cc7300faaebaf8f54e22290ccc23aef62e10f0dfe21bf427a4a0439508978690ecc602bc6b31d119a9347005

        • /data/user/0/com.app_alcaza.layout/databases/ba_storage1_5.db-journal

          Filesize

          16KB

          MD5

          6ddb46706c0936be79b500d901637372

          SHA1

          0ef1b8a7ba72fa59fde9cb7cf968414135633584

          SHA256

          f788e6cfe58ef3a70e4d48f8b420e54d711206fe6068d754b8c97fb694180d8a

          SHA512

          530f8037deaa1cd0eea3528f0dac59a437020973026a73857d2bb5af0729de8d2abe0be9b29fdf82c82c14167fcfd32331a0dcbb83de0eb03812fddec191e252

        • /data/user/0/com.app_alcaza.layout/databases/ba_storage1_5.db-journal

          Filesize

          16KB

          MD5

          c5ae80e49c669185b40b08c75b6c8772

          SHA1

          caeea48ad0c4ee6f21d8a93feb893d0b20b135d4

          SHA256

          7471aec8564f61d6fe8a63dea2df6bdccb6e523d6be0222bc9b6402c17a637c2

          SHA512

          7678b9171ccd8288acc8fdd8e657fd8ce9198916ca4d1c4551942582a6e58103a1435a8bec566e0dc9e16d3ad58080b47a7d4350d03cf72e11881dc3ea54caf1

        • /data/user/0/com.app_alcaza.layout/databases/ba_storage1_5.db-journal

          Filesize

          512B

          MD5

          86b0129560ae0d96339a2cfd16255935

          SHA1

          c8863329aa05ee5dfea1e1e2d1e0ad16f66106ed

          SHA256

          9e3acb98954f49efac5d45168788f216a01d5d7892a464281d1b4a7dc4e56a78

          SHA512

          70e20b06b2d85bc05b7c10b2eda000e3f807b6bf7a8886d4f1df18ca4d8f7f3bffa0508cef1dba474b2524d524e079daa5a0f48d90bb95083eee4cb8e313576b

        • /data/user/0/com.app_alcaza.layout/databases/crash_reports

          Filesize

          24KB

          MD5

          04ab7550be5d71ca45a3dbc64c316703

          SHA1

          45d41c31a1a2664a0dbdc9f57412b75480f5d300

          SHA256

          5d601c06a1a32f9a5f9cab6d6406f660faba9f16d29534c62f281a17211e3d8a

          SHA512

          982b602284994b898cc68ae288cb063275cdcfb9eb4375cd88c265879de6d6c79d5b99819996465b024bb58bd6205977acee398637d315e2ccc2164b23cb32c6

        • /data/user/0/com.app_alcaza.layout/databases/crash_reports-journal

          Filesize

          12KB

          MD5

          781c9d25bc2d1aa5d02f0204ec1779b2

          SHA1

          7eb72603ed4d6d3728d41cb86ef74e947630545a

          SHA256

          b58cbf8a365e1dc9e2c05ef864067e976736ae5c2f0e750d71dcdc8503975034

          SHA512

          9dd5cbb0c873e71e11d16ee6391372e2737c49572bb24d2f18f707d524ab81f81b24d409bd6ecfa1992e8d80dea24391edbc4bd94ab7afc50b28fef28a0c8c5a

        • /data/user/0/com.app_alcaza.layout/databases/crash_reports-journal

          Filesize

          12KB

          MD5

          87dbbbc9946245db4a4550f7311b0e9c

          SHA1

          d1009b6815f28014aa99b6fac54755fc63ea3a1d

          SHA256

          3c49952005817540e7e2d835b034e6021d1d579362675e5b1d5215fb7f89b8fe

          SHA512

          56a5bb8163994843170c39ea376a14dcdca8056834d63f7f3df7c3cba83574fecb719b59538a1e2e6dcf257c621f6819aeeed4123c0998b1fe87fa10cc8766ba

        • /data/user/0/com.app_alcaza.layout/databases/crash_reports-journal

          Filesize

          12KB

          MD5

          e4e07ac9df9f1614ce9f944763e43bfc

          SHA1

          59edf52bc6542ed78e601c3d9db2c6725397acf6

          SHA256

          c59fec57514b42ae7c2c3aad0f1969154d5470c3d2df816cffa417dc7696d873

          SHA512

          e6764fcb79e0137172aba6059ba1ca9e1e5338a227d5d61817b0fc5b6eff88c87fda52ec2a212c178097b97142133b44a6b720a0c049038901c8b9ea30130a22

        • /data/user/0/com.app_alcaza.layout/databases/crash_reports-journal

          Filesize

          512B

          MD5

          8c555ed4b195a822cc872b2c5539e4c0

          SHA1

          a01829d748cdf56564657dbe6c08010f90cad48c

          SHA256

          d001ccb0ab3a0e449628fb43574f2d08f89402e57a601cc7cd696db6355fc60c

          SHA512

          a1debddd95eac078d0489495899580af72a47f2c5d53134a1b60a0f1e3e56708820d5c534cdc07b76a25cf58c0a365fb76efe89b2281006c36da9bf69b808350

        • /data/user/0/com.app_alcaza.layout/databases/crash_reports-journal

          Filesize

          8KB

          MD5

          116629cc24f2df3d56168988b384d4b4

          SHA1

          7d01ab286bdd50f7be8c378131f8566ac87d9ea2

          SHA256

          2961f51e6387a739cd2351e5dc9c0d956ed9f58507ec3167334494fe4d566bbb

          SHA512

          84149733afeb1c9978b60a4f4d92797ef5dc8c7f166ccf5f939435c41342ccd5b043755a5ab3ae1c29b69fe04cb5c2b77bc6970590fc5cb0f6b3819a2e8f7096

        • /data/user/0/com.app_alcaza.layout/databases/crash_reports-journal

          Filesize

          8KB

          MD5

          d63a21de99551578bd19dc7e02f03e2f

          SHA1

          3e820a1bfdb2b099e06450792a98d01f39f94e2c

          SHA256

          7a41a458c958638e3bc4ba0018cf1128da6d2b467ef7a1c1992d72e2e2c24744

          SHA512

          354cd56c41576e7139c6e55ee14c07a62d34c3574840e31012afc2a542212e1d466585200f2e8d034d626e11bafba5238b56c425db92018ba008f63a89eca8e5

        • /data/user/0/com.app_alcaza.layout/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          73dde037d43818d6392e51665bee0446

          SHA1

          79d2b7aaad055aaa21aa371d61b05684c2164073

          SHA256

          d8aa44c8b932aa136e23d352f22689c2173c343125e0e7588bb111fb635b30be

          SHA512

          95c88a7ca75a3f60fc3715bcac6a0a0f67bcf8a3a9fde5482f15e8da321521faf184548fc7a31df3f6019c48214b97a683b9fd7d0d2b1bd5595e50fb5d80f4fe

        • /data/user/0/com.app_alcaza.layout/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          1e95abeaffe32a6f0c9800a033e2f0e5

          SHA1

          6d7110a999cfe0cf8cd7b27372668d620e7c012f

          SHA256

          36db564020fb3bd2346d078ff2eaee051ba27d0df44c5405f2d17cb8558d7f10

          SHA512

          1b2ec87ce5a67d140aa70fb13605f859b5282390c34a3df62104e72b77316168f7dede303496ae188c66b5cfa7449c60650584408b6b1e51570384639f35fcd3

        • /data/user/0/com.app_alcaza.layout/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          83e46854d464d4f092b2dc5f1b38f7f3

          SHA1

          fcf67da3456daeb2545c5aee1614e31896fdbf36

          SHA256

          ad1dc4c893814fa27ab01944ed3b25c286a11540ec9d481ad491aa1297fecc71

          SHA512

          653247e94b34767c689a0ce2f70c72dcb13c08ae31083bff79e79d01f652edbdcc35f7965f4c2f077c7c8197f0ce9953ad7f5126023788cea51a070e21b90f48

        • /data/user/0/com.app_alcaza.layout/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          7fe3db1a493c997cb2c73ceb2ac436e3

          SHA1

          210b2cc8ffb343613bb7acb97bf0c1711661dcd1

          SHA256

          ea16d964bb4e3d73ff28c56b2a4a0a3f6f198b6493a11ee02e8dd13aa40ce938

          SHA512

          68b6fe91d6a3ff479df602e05fa2bd29e99dc1b39b61763bb80d48f789b680ef7ec6d51baea2b3b1dd727babe1edc8c5e9012c65e83e49e4194e6159cc47ae93

        • /data/user/0/com.app_alcaza.layout/databases/google_app_measurement_local.db-journal

          Filesize

          512B

          MD5

          c97aa1ed70a9e8c8f3b2f70e9115c3af

          SHA1

          5a1183709d2ca49908eea1bd6410763e3d033302

          SHA256

          8272200ffed15e47098d18748d627c7a3d1b746ff67a471cde3e47a9294f6d30

          SHA512

          4c64b86161d650afc334964d284d371e44408563509cf2d10665bc0260584d3a2dc0e99fea1672ae7f2b9ec1804e2c0fbe5f15898a328a512feffcc4df874664

        • /data/user/0/com.app_alcaza.layout/databases/google_app_measurement_local.db-journal

          Filesize

          8KB

          MD5

          6c0acc61c22c93cc7490a4187121086f

          SHA1

          fd4376fa3e5c3941d5ec8ab27a9bb9173d1bca0e

          SHA256

          47a6621c64a3407d1c77cd9a72dc4664797c4985e3868dbec83166b4305ee000

          SHA512

          e5be391e5dfd4739d7b99320afdc7b3277a5e54f09f2f1ed0d342ed3a3d2aef4a07575da7d5917887c23c194ab95d9b98d584d07950e67e9ca5d999ef5678247

        • /data/user/0/com.app_alcaza.layout/databases/google_app_measurement_local.db-journal

          Filesize

          4KB

          MD5

          f51d4da34773f6c820eaea3cf63186b0

          SHA1

          5b76ab2cc5fc6f1f7251678e0ed1e863254468d0

          SHA256

          1836fb81ee5197e5bef86603c881aa35f5b36c61d7de4282fe43fa097f1842c7

          SHA512

          acfe2c9e91b4eb5d7142721d22219a5a85e0333f291318e1aafd3d00f834066dad1ce95f7047498c654db909d1e15e3cbcbcf41580f67e77cf82ec3a5577856e

        • /data/user/0/com.app_alcaza.layout/databases/google_app_measurement_local.db-journal

          Filesize

          8KB

          MD5

          b368ac39beeebd4bbc6e860de304e676

          SHA1

          00cbff9a11028432dbf324ac89b0a6cb26f61483

          SHA256

          3a7adc46c88951f67e2e0be35c2632c2d9b60ffc413abe2edf0e5cf055d42e35

          SHA512

          9beb125fc8a27f41736dc84bf7e3bbc77ad54ef52c6ee813ee6215bcde1f117756594e93fbd1c41eb4dc4e0a93d1de8116cb96214b445ce0838358dbe11eee1d

        • /data/user/0/com.app_alcaza.layout/databases/google_app_measurement_local.db-journal

          Filesize

          8KB

          MD5

          bf3c70bf849225d53712d99a74da882c

          SHA1

          7e0843f5e21795a1bbfdbb4f5fe837da983df185

          SHA256

          a855ea7eeedf59882aa76ecb445ac764c91713594e9b499e17fd70195b14d700

          SHA512

          0b847840d7be873a2bc5860cbbe105067b51175f84575e6490a3837343994bebb03c86c531dfdf7d29eafb869ec8c33231a021b4b555e6a1e95c8e453a9567bd

        • /data/user/0/com.app_alcaza.layout/databases/google_app_measurement_local.db-journal

          Filesize

          8KB

          MD5

          4b5822e55e446dc15119f83bc3d0896c

          SHA1

          696aa711ff1acb7eb47e3ba842c96ba35c3a5c01

          SHA256

          3afa12fc2800215a29badba16d6d2faeea2e9d65b3f52f6d6c91aa6bfa7cd0da

          SHA512

          aa477189d631acd85913924de9d600ba9075d13d9dfd5b5ef9233033a21a2d0ea2e8c4128ab8414817bbbcc4941518465c0fe63d130e8bfbd6561e1a2ba95580

        • /data/user/0/com.app_alcaza.layout/files/nr_installation

          Filesize

          50B

          MD5

          592be6e86357836cb20ed389ec729947

          SHA1

          69540020b193c7711114dc57db7569412b18f36e

          SHA256

          796a405b28d7b0ce1a2ba6b06c61be952fabf0403c9ea78635ef9ff3570f292f

          SHA512

          517d60a560b1f879be61145f0f63c3a0ee0b59b3fcce067f10442e5b62ef92e1c0e36968f95c0ad46e6e5a247c190efa96c823c76a5b760d724e35ad886f8e81

        • /storage/emulated/0/Android/data/com.app_alcaza.layout/cache/app_images3/journal.tmp (deleted)

          Filesize

          31B

          MD5

          8c92de9ce46d41a22f3b20f77404cc1d

          SHA1

          8671a6dca00edb72be47363a7071be65cf270373

          SHA256

          68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

          SHA512

          30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56