Analysis
-
max time kernel
2835806s -
max time network
131s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
23/12/2023, 14:08
Static task
static1
Behavioral task
behavioral1
Sample
2a7da0a302d62842a62d3de55b4ea4c4ded51bff1cf283e26c7e290d4fa221c5.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
2a7da0a302d62842a62d3de55b4ea4c4ded51bff1cf283e26c7e290d4fa221c5.apk
Resource
android-x64-20231215-en
General
-
Target
2a7da0a302d62842a62d3de55b4ea4c4ded51bff1cf283e26c7e290d4fa221c5.apk
-
Size
6.6MB
-
MD5
b991adb8a119f9935c1e680d816d7a32
-
SHA1
fcd807d771ee1572ef44d141c9aa33c627e02f88
-
SHA256
2a7da0a302d62842a62d3de55b4ea4c4ded51bff1cf283e26c7e290d4fa221c5
-
SHA512
0aa50918951166d73125d777a3338923ba165bc92da3d45c29aef182c39015d5ef6c36a21ff87b2caeb980f4c37f27105a4ebdea63f06bb7dd641024d0e8e699
-
SSDEEP
196608:Y7QOKhZlZJk+DgiaAG0W1hWeZXxk4izKx0CZpZ7F:Y74brkAgDzRhWeZXxkH5wZ5
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.jb.gokeyboard.theme.tmekbdcolor -
Reads information about phone network operator.
-
Checks the presence of a debugger
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.jb.gokeyboard.theme.tmekbdcolor/app_tmelib_KinesisFactory/KinesisRecorder/kinesis_stream_records
Filesize609B
MD59c94b7da2d7212bec94610c01805a1d1
SHA182bb38f6d96d6960ef3a09e5fa567cffbae19c20
SHA25639d7f2bea3024232484ac61d1f7c367235f455e8e8ec09ec8935d2f0052b41c2
SHA512b3f06c1c091d6aa8e489fb7bde1c8d16cc6f4f0bd0a054a404bc27cf4caea21433fb3e4e4e04f7b6415ed150f17beea7242996a29d1327c56ae79756fb64f246
-
/data/data/com.jb.gokeyboard.theme.tmekbdcolor/app_tmelib_KinesisFactory/KinesisRecorder/kinesis_stream_records
Filesize601B
MD5416d5fa68740f365334fdc36a0c60ca7
SHA1c6c44d9584b67a5de20800a9d1bab414633917e2
SHA256dbd6cefa8eab4cb49d62281d872e10b8af1fc2fcde0291b3de79cd8b1b400c89
SHA5120b72e90b353a0ab7c36c54d27bf972d629d691a409abd7e710895ee5ebe168282e7128ba907763d95cfc8416292fc4efc51b09af863552c3eaf0ac13e6298fe3
-
/data/data/com.jb.gokeyboard.theme.tmekbdcolor/cache/settings-manager-cache/ff771eae3c31249a7140a3c9521ebae4.0.tmp
Filesize749B
MD5e6abdb204ce86fbb3d5cafe6f94f1e66
SHA109dc27d39c84d90ce876d987f7eaf50404febb0c
SHA256a6251f76eeb6acbed0cc59e02727f91ef7bf6b391b90ff93fe977f13db0fd493
SHA51287476dbcf649dd2be3367095e7653147b1e5cff0e437a7e82e5fa400feeff687f5c6d4d36f6cc4408e55d1a8f53892a9de5fc672560525c54cfd5963478c19d4
-
/data/data/com.jb.gokeyboard.theme.tmekbdcolor/cache/settings-manager-cache/ff771eae3c31249a7140a3c9521ebae4.1.tmp
Filesize2KB
MD5033e81d28c98fbe364c60bf861b3a6f5
SHA1cfd4c9a57ca471c52132162a5afa9c7aee398442
SHA25625bfb2e8144ed69b80316d42ad10d00a1e9d18aa05888d85aaecc1e90f2121af
SHA5128d0b31b0b6c6a993fe142cd654752e022a9e5778693beb69fcc2a25be68ac2cbb86c87f00e18088f4a3c72a967646910517b5d3b7a5d9d4118ffb29dd8ad8677
-
Filesize
36B
MD537e8e716e0e2f4a0b05cd9571d95b84d
SHA1f8d068f6931707bddb8cd69f706f2224ad1fea3c
SHA2567080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca
SHA512e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6
-
Filesize
16KB
MD502085e4c494caeafab1203f7a0fefb31
SHA1a17841f5ea1b00b4d52782b08f9a8cb7eda04712
SHA2565acec128f04de7b618a172a04eefb7254ba3fd629d84bd13b7f4ec4fe3ef7898
SHA5120ad112f8daee5b76144abe9b21696a605ed8b4e5b31e5c92794d272137603e057c5a072c263135da7869a80d32264417fe0e452614200c2a0e503b671b19ce66
-
Filesize
512B
MD54cf77fcb7e2e075753272cbca66cc776
SHA1be6fafeb05895fdeb86681cc004fde4a129b6aa7
SHA2562546a5242b5e858f07f8c4f60e20bc56cadeb5defcda137bc5e1c2966366c954
SHA512de52860cbec354d9062719c5b0f2f63d2a7e789f9c3e027eeb42f21c822e0cc9a925e33be795986fc01640bc1a8e3dd80f474b6318acd479bfd3cac143beca47
-
Filesize
16KB
MD5d665b78c691488ab9b2ffc0e99a878b5
SHA1ccf4c2ec12a52b2bcaf17985fa7e6237a23076a1
SHA2561168bfc02521260b343e6a22698bbd5cb9810328f98ee3cfddf45507f49ea989
SHA51265f0d92dbf2ce5a1938aaf7a56c66d881d642713505a7d76983aebc7fc09ec29d03d505a59c8e4ccd79aa6bdbe9b8dacd7fe8f22362e0272cfa635d0481486c4
-
Filesize
4KB
MD5ff56d020398525c14c8bb7df89d297ca
SHA19c97f3fec8b564bf944506d988028dc4156f8024
SHA256afaa040dc27c121617a7b9403fbb4e57b3a558743c1a349a9540ab0572afd880
SHA512f7062652b5b45a9d89a16fa3ef21f1af58eb38bceabd1f08581172ca33f20962b3181d5d070fec4184e6ff6d6abc37ab0c95400e498ae901de6edf76251d1fa7
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5d0f4dbde7baf1c33ee6b52cd49c7fc09
SHA12211e59debe5482e19fadffef8c1e8194a090473
SHA25633daf9efbe43c17886213cb7aa6dd304b5b2aed5db148a729c847053154f5480
SHA5123e99667d94071e1bb3aa265c2d450b63ef8115b84d87caa56503670086dd089f2ccf9fc0da5f193df060e1cc0e2b3ea2b4fb18203ac30b6564d18c67c3dc7e92
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
60KB
MD59c5adf93398f20311e2ec0ef5488f517
SHA1c7bec00c47517fb4dfd6a1a97f540091f64b042e
SHA2566495336ce5d960f1914f93aa4942e066ab1fe9cc7d4a6dfe6372e905726716bf
SHA512dc0464132cc779c7e606783f3ae98d6427d0139e77f7596e6db3c510412e92e3343c4f44151ebf2f0d286e6d3ae68eaf9abf8d4e8077aa25b28cc89a135df0fc
-
/data/data/com.jb.gokeyboard.theme.tmekbdcolor/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/658B865702E8-0001-1191-4B4060993186BeginSession.cls_temp
Filesize77B
MD58cac5d10e593887a8686463a1f1a1a9d
SHA19fe2bbfc0226b9cb15260f8d30292c9a0051c169
SHA256396c1b1487b927cf3dd46c7327a0ce49a370cf8634310bdfc9e65d9fbdda19e2
SHA51241cf9b95aeb3d7a77a7d4e7f8395cc835f1e37e289fa5730dc484353234c1ed127b7252762c73d6837d62cfe23ae31c5b487c52f2dea3225d01a3e5c397defe9
-
/data/data/com.jb.gokeyboard.theme.tmekbdcolor/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/658B865702E8-0001-1191-4B4060993186BeginSession.json
Filesize132B
MD5e80e6b28a5c317636dd072b60a62baef
SHA1f9f5d37f262b8dbbd2501a1640a023d3727dce2e
SHA2568d445cd1adb2fec85d5a0b462012345e3f1272f96055e5d0ad9d700c1629e66e
SHA51252f6b9b9902e2d70837bb9134588e3bc0e9b7da5219b46113f95cac1bfa5b45da3800d14ac57c7201f5d9478b6e18c9febf80586e5002c29aa47d9d9c4d30924
-
/data/data/com.jb.gokeyboard.theme.tmekbdcolor/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/658B865702E8-0001-1191-4B4060993186SessionApp.cls_temp
Filesize137B
MD545d101b67fabdfc13809ec0ca5c52eb0
SHA131bcb808761e4f8f61a8f6868328fac4f16421f2
SHA25614aa1b8bde6ca8c6a740cc855c891d262e1281af585e597458fb6b95ae76e393
SHA5128bea24d712ff41b4bc99ac6164de280f0b0a0defd3b0728936747ab39dafd970d60e2cddc830669edee512f0a694bdd734a05ec029f6c497c6380cafcd9d6e47
-
/data/data/com.jb.gokeyboard.theme.tmekbdcolor/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/658B865702E8-0001-1191-4B4060993186SessionApp.json
Filesize250B
MD59d6b8ec39aa5a19b9baeb2610caaad4d
SHA112cecc7228702e7f66ec59a5e9a7805c23d60761
SHA256056294d778169b161e4fbad2050207c5076f8dc3bee68f926a2c621c1dcd1765
SHA512aed79ee1d2553aef61d61f55e87442533293223f5b772152ef54ca7ddeaf8346e4fe2650b866ee91c379fbfa482988ba7fb75031745bb5cfc012aa72764e3c20
-
/data/data/com.jb.gokeyboard.theme.tmekbdcolor/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/658B865702E8-0001-1191-4B4060993186SessionDevice.cls_temp
Filesize90B
MD55381dc6a4e4a46edc0799bc986501014
SHA1a36769250ef7d8c25cc1912632a06f2eace22035
SHA2568e2047499b5dafb77287c341363b8816c0ba930fc81469cf24bdb1f2fabc45d4
SHA5125975359bb97dc02437557952eefa60dc68e6b8e8a9eb79dd3f1d6e43f9c6e94c04f52e58760283594c24a4e2847909711c6ce065c789bcc24fede5340663dd0f
-
/data/data/com.jb.gokeyboard.theme.tmekbdcolor/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/658B865702E8-0001-1191-4B4060993186SessionDevice.json
Filesize204B
MD55d1ce0f2aeb4721dca215b6868007c78
SHA1d93ce1169ff37b19a79c7b4494d939a1f4c082fe
SHA25644c8829bedc7d9caf7357dd41aa13e838ac1fa5a055af3945819cfd6424a93ce
SHA512890f5a61c21643f31eba828cb0fc4009e0417e8885846605a8ce1c969f5203c62235d3ab76d79fc31d855238f8eb9eff6d1676f0331e9959a0f088bb0acf44f3
-
/data/data/com.jb.gokeyboard.theme.tmekbdcolor/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/658B865702E8-0001-1191-4B4060993186SessionOS.cls_temp
Filesize14B
MD59b3d4522944ce6396563812bfdb92fa9
SHA16d2a6133c8f01938a48ccc77ef86ad8ca335c020
SHA256d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9
SHA512091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727
-
/data/data/com.jb.gokeyboard.theme.tmekbdcolor/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/658B865702E8-0001-1191-4B4060993186SessionOS.json
Filesize54B
MD593023624eb8dff5c20050da136aaae0a
SHA1acfd1ffed752c28fb135ba83c0c6345ddf2f6995
SHA256968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c
SHA512bb25dfa144d3f0e17203936c503c5fedec5f9ca710e177f99e273010ba4a682199d4bda5684151d65f3cb1549f4611b3a645ce39646d3db9a1b2c17d6b160579
-
/data/data/com.jb.gokeyboard.theme.tmekbdcolor/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize508B
MD5de83bf921f200b01a9fad3238c767a4a
SHA1c91cf994ada3b8526d9bbd03fe4e1da8e9470ed9
SHA2562cbd03852375e743b617975d0df18ebb5b88fdbe050f5551248d88db2af1a8be
SHA512835e56d1bc646bbc636b624215c85969fdc2f8937f0023af0eacd30cdb57b95c99505a31f3c19deb615ca0555ff504769547b7b3dc7f7e570f80f13adb9f7b21
-
/data/data/com.jb.gokeyboard.theme.tmekbdcolor/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize529B
MD573955be36065e75811b4fc54f749f39c
SHA198d07988d7d31fdc814addce17cbda86933b5246
SHA256124dcec02c02ed216bdcfd436d5bdd9262f574f1f32be8fb20b74f665f98b3fa
SHA5123f95bf458430600772e23a21a344e4f80f5a462e07a7bc6631152b210d085e30f0bfe1db66a0107c353b0baa80d25c479f3df31b910edf9074f463546fe4f2d0
-
/data/data/com.jb.gokeyboard.theme.tmekbdcolor/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/com.jb.gokeyboard.theme.tmekbdcolor/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_2172d012-5374-49d2-b652-18e309cd08d9_1703642714770.tap
Filesize396B
MD5cef44b6974b4ca50ae44f1069a669df2
SHA13fb25cae0f85f84a4640340d223e1b90640f37e0
SHA256be8d5f652a6a7e0bafb8867e7793ae5b34759a08c24ad8d198eb0e1737f58f96
SHA5128a8e1387536ac1559edb0ecddb936a62e6f6134ddf7110af56ca029444326d6c113068fb2bd64889b50ce381edb6be76725ac309861fc7df8e234becc90dad3e
-
Filesize
36B
MD5c02a72b8fcee65846584a22a38b8bff9
SHA11c7a03889acd31ccd616152e00926f5ea2a00767
SHA256abba73be6dc3ab1feecbd8c14ecd4315da91660662e2763267a446658ff1123e
SHA5126190ac3fe8106516367fa028f0147f06adf83426fe100d224825195acd41464fc105d299f8def88cf3951ada9e36eec3f7ce0262437edc6367922c46f35b4c33