Analysis

  • max time kernel
    2534021s
  • max time network
    140s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    23/12/2023, 14:17

General

  • Target

    2cef29be9af105063780d77e8fc72248aa5291521f52f5d2f215b10c50ecd8e1.apk

  • Size

    10.5MB

  • MD5

    398b907a8c2dedd27c1451a9be335bc9

  • SHA1

    9e9dd61b4df8f28219ffb45f8d4eefa3532f9335

  • SHA256

    2cef29be9af105063780d77e8fc72248aa5291521f52f5d2f215b10c50ecd8e1

  • SHA512

    de68c5a40f1c119f2e5fca3aaf76fa6e0f4030f76706a2f1d0e0c78de5ef5d3a507c2735df2f3d4c632c69f705bc60c3c1c504db85f6ed47d5576e17ef089c5f

  • SSDEEP

    196608:4fJK7OVSIvLaxfyIDIqZQsLyiicHXsznQiw9YpGtwBUW0c3ib:4hxVpvPA7Pgn7w+pCRCib

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
  • Acquires the wake lock 1 IoCs
  • Checks the presence of a debugger
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs

Processes

  • com.trade360
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    • Acquires the wake lock
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:4987

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.trade360/databases/com.google.android.datatransport.events

          Filesize

          40KB

          MD5

          15d5b92dcbda7ef7f9ca327a903e46e4

          SHA1

          ca153b66028a58d90346ff8abadbdf01b95c37b1

          SHA256

          e802fdc1ccd833b91d80bb1d8f54cab2b585393e6a07622c4d9feaab07633370

          SHA512

          2352f167ee5aa37cb3438a0a7df8f632771a1d019c5cd120fe62313fb73aed6d0e09186a9bf306a564371b846a8da020f6acd7aede0cc47ca50701611fa84aca

        • /data/data/com.trade360/databases/com.google.android.datatransport.events-journal

          Filesize

          512B

          MD5

          ff55fb3b6c8462997a6cc0f09abb52f4

          SHA1

          c9ae0c369c859ff3281c93c0cb4945f6cecc34e2

          SHA256

          d6977dc5f0fb6bbddf8ecad5d0f8ee9d144134194a85410aea96eca3cf477602

          SHA512

          f85742a4ad152482feea0eb712262203a519315f532e7e9908c728d77764b6b804c4322b15207134be999d000e9236a724b81eea913c29e268e99746583a16e0

        • /data/data/com.trade360/databases/com.google.android.datatransport.events-journal

          Filesize

          8KB

          MD5

          cd04ffda8624731ad712694b6d78cd1b

          SHA1

          e60bd480f16879442db6ca0598701eda6a426969

          SHA256

          477a5241e69777db8f756eeeca3e01e7f808666133908c5cf6ca6215580c62bd

          SHA512

          e625258d716753a21dc0f3369cc3b3caf644a11232f902a7ae9dc9fe375db4e7ca6b00d40a38e4890e0e82534aa37430d2c201b03370067990d0d21961f081f7

        • /data/data/com.trade360/databases/com.google.android.datatransport.events-journal

          Filesize

          8KB

          MD5

          7956e0041682b8c0c8d9b485c74e2f21

          SHA1

          2f450c23bd085b25423e9514f2c24cc13482c105

          SHA256

          9d7f63ab92125a3048003d9527cccad4622bcc957eeb1248a47994c2420e2dff

          SHA512

          376eacd44233ae6d58910ea992e48ddd2ec34dc3d1187c9d01858664dc1283892f16f9f570150c436e6fe8dc2ef7cd57ba05afcb4db132d2a10cdcc7632403bc

        • /data/data/com.trade360/databases/google_analytics_v4.db

          Filesize

          12KB

          MD5

          6da302a2e5fc0263420684f38a00e3fd

          SHA1

          9e1c35e91c3b84600dd8ebc10e072ccb91b5895a

          SHA256

          a9b2f6227429fd83edc4db9e62c5e3f8c45b55598f7b10c3132d6b339283c8d2

          SHA512

          6e91d3076e4f382a5e4119e6429b90bd4d604c858acb4914e8b67226f4ad0626e29726e09d12965f075ac6aebc49eb22faf0f5c6a286913aad9515887f91fa1b

        • /data/data/com.trade360/databases/google_analytics_v4.db-journal

          Filesize

          512B

          MD5

          d21822680355cd065bfa08d8e9d8082a

          SHA1

          91696a202f229edb6568a9a56319cd4a2d53b67f

          SHA256

          fe6dc37839dc885149205642d196d2785c31b8d7b978caf678fbe8e8c56a541c

          SHA512

          8a8d07a8f861207811e6b1c1416341bf9f04eab3c4f20eb3065ca851e3f294f0c0bd2a20f7281875f3be951e8af9c5be33968b9dc0278f76cd57088ea040b390

        • /data/data/com.trade360/databases/google_analytics_v4.db-journal

          Filesize

          8KB

          MD5

          0d6f88f45842874694d8ae1b15d6ae5b

          SHA1

          8bfc879399fc6712aea434287ac316cb7493bb24

          SHA256

          19625a9395dd7657e5d02fa3369e316435076443466d9b63662ba823d3a5ac39

          SHA512

          b74ee8bb56d150f7d39ac7a948ecf6e7c2a4d8b071ccee8cf38dcdbd7e488a17b51fa5f9c5f2cbd3c5b47dc078bafd3208c2fec0a8dc5669176e694add34798b

        • /data/data/com.trade360/databases/google_analytics_v4.db-journal

          Filesize

          4KB

          MD5

          07b3fcfccb45abefe3454ab197f519b9

          SHA1

          ddf0d91c90d35df093ba3cae703e14afb388591e

          SHA256

          cc5a3739da71cc653ac18aa6e6c21803fe9c40f6f2a4405fabb88f2077aec6d8

          SHA512

          9e5f3c2ef54cf2b090748da6fa6c15137b920339c00f795595b66b5f5015c1378a71c855826dabc04b5eeed6a4a638b98ed2b18671ac5ae450781a98726cf2dc

        • /data/data/com.trade360/databases/google_analytics_v4.db-journal

          Filesize

          8KB

          MD5

          a7d8c52b17d0cee71b495be731d2976f

          SHA1

          4dae2b4873cdb858a9598fc22357f6002320dff6

          SHA256

          0883999907f87cf3846e6638c9394bf5c520236d73133ac83a964c83e1d48a4d

          SHA512

          09dc0e15211a135e03f241725e38a9ac04fda4229ee52ab7f93a9f61969d6c54c79bc316775fee447add64c642a637921a4b588aadd261bb1291d08f23b8ab8b

        • /data/data/com.trade360/databases/mixpanel

          Filesize

          12KB

          MD5

          163b0e3f017becbc89b9d7f330b78f09

          SHA1

          1ef9cd8ac8655190468d0ccece0a4738634ab0f9

          SHA256

          cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36

          SHA512

          6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd

        • /data/data/com.trade360/databases/mixpanel-journal

          Filesize

          512B

          MD5

          9e22f08d29826b97ddfd022b4231eaf9

          SHA1

          d6f074c46dbf8b6edaa460ff7351c06217bcf9c5

          SHA256

          fa44d8bd69f28a6d817a47a76191f9a890ac67a50504d65844dc04b39d8146ea

          SHA512

          fa7df558f44fbf37e565fc227e74728ae1813cb71b9a8feca4cfd778984260f070f79a4ab47dab8e158148999b87e3940a57d6b37ab1456b6b348568d2851271

        • /data/data/com.trade360/databases/mixpanel-journal

          Filesize

          8KB

          MD5

          ac6f7aded328b3ba59d87d8c3d8dee9d

          SHA1

          dd4ce2df19a6ed0fa44c7566bf560a12f923c9ed

          SHA256

          41ccf23999e76a9e75d1b2b81372069e9909d465c9587ab8031f5eb96c16eaf5

          SHA512

          96dcb11fc9aeb8b4c9f11bd8c5f627ff3dc666f7d24115838b4966b0e4a85742e97be78bb54c535ebfa86fca1af0bdc2fa02982d37862f0ecb91a7a90c342409

        • /data/data/com.trade360/files/.com.google.firebase.crashlytics/6586EC080241-0001-137B-CDF169B69D3ABeginSession.cls_temp

          Filesize

          75B

          MD5

          3cdf1d165d81f6df06ce3ae95638e5fb

          SHA1

          6f82c1d9c9ab614b17782389af47f8d25b215692

          SHA256

          a45039970841fb22fa20aa315c360b2cb583dc92a22cce34cb2a515ae12a7fe1

          SHA512

          ae0877d28433affb81974ab3c3785bcdce5e4a716a28536cd5e1e9c370aa68dc63d9d146941df5527b1742a59a84b015e0996507423c3ed558fa18b63181c9cb

        • /data/data/com.trade360/files/.com.google.firebase.crashlytics/6586EC080241-0001-137B-CDF169B69D3ASessionApp.cls_temp

          Filesize

          63B

          MD5

          92f67f5ef967b7f9ad97d9e764298ea9

          SHA1

          35656c3ffc4e7b7ecdfd15f32eef0c78547b6db3

          SHA256

          859724e1ab8c7834b814819ca26ec3b13426e89296d0e14a42e5484c9a319ac6

          SHA512

          052cdcb388f148142ce2db0b5578a2398b1fa1de52d42a7e097cc484b31175d789ee7e39ef2b4d1f8a84ef041066b06441d59135b85068abf2a31ecff1fe81e1

        • /data/data/com.trade360/files/.com.google.firebase.crashlytics/6586EC080241-0001-137B-CDF169B69D3ASessionDevice.cls_temp

          Filesize

          48B

          MD5

          2390c1f21db00b20c07107e3ec7275fe

          SHA1

          e663a646460acc071aebee942cc1776c23d77655

          SHA256

          d348072a01496839cfcde3a18866423aee74aefd613fa3bf1ff4a203ef46a699

          SHA512

          43ff60754eb60795ca1c318f44dcfe49194add26cc3d92c2eac7bef538fd65b6290f2e5953b8f1693b9425ebbcdd022ab16a18280146ee0b0c2eefe27bc0bd63

        • /data/data/com.trade360/files/.com.google.firebase.crashlytics/6586EC080241-0001-137B-CDF169B69D3ASessionOS.cls_temp

          Filesize

          15B

          MD5

          2566d27ce8c28d8961f082c375d7535e

          SHA1

          92fe585b1a2c9c523d2fa1f65ab5c1b6a1a6edaf

          SHA256

          5acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a

          SHA512

          1c70679bbd25a57f9ac02083d5af0fe72b1417cf3070a195497f03d6f492e87b1ed3f570de7ea7c814c995a1530e32610d9570f31a480648f4062e8d3287be8f

        • /data/data/com.trade360/files/.com.google.firebase.crashlytics/6586EC080241-0001-137B-CDF169B69D3Auser.meta

          Filesize

          13B

          MD5

          5ccdc309fb531b8dbd976f27be362d95

          SHA1

          51fd9a8ca79ab68d11dff6a6582e7cbb7771c14a

          SHA256

          718bf1aa55b13315471e60d362327b973a71b0de31922d9f0f1e9b54f422dfb7

          SHA512

          a22ffa190c8fab023e88bb19e261d2cd1dc5b0c6a8cd8573e4b475ae006e843f523e79a5fb99a98cfecbdee774e92424564c4caa24e575caefb020d143eb34a1

        • /data/data/com.trade360/files/.com.google.firebase.crashlytics/report-persistence/sessions/6586EC0802410001137BCDF169B69D3A/report

          Filesize

          730B

          MD5

          fc2b8fe84f47cdbc7a8bba4cb1b04c05

          SHA1

          975d26e94888b3756c858a8d6e452f53b6370638

          SHA256

          918c81d27f774e42ea5c01a47fb3483dad6ef42922525fe77fb4d938ba298689

          SHA512

          3d2edc6c354a5003651939d103da88efd329525597e7ca28dcc6c8aef47934f33950efc3fe94f5748bb88a1e46400dfcde4530119fed613daa2a82df27ebd98d

        • /data/data/com.trade360/files/PersistedInstallation6407620666794747773tmp

          Filesize

          90B

          MD5

          fee1af11912e2e3884312fe71eaddec3

          SHA1

          7743a45753c5e727a93a47da9da273b6ba087e1f

          SHA256

          2f2c536f745408915faa5fe918733bcc4ec896f540523f771dbab753b6d84e7a

          SHA512

          714d38614ff913aa1bb4df136ad1151c72cc5b5367957b9caf9d564a77482174142ec24994f568171a0feccabdefdf8e318f2f8cb7791cca9b3d91a2ecdd0829

        • /data/data/com.trade360/files/PersistedInstallation923578804216475584tmp

          Filesize

          561B

          MD5

          cc0fc6f18005677b1073e750e1baef87

          SHA1

          15038e1e3c65b6fda5a821d09cc48db5ed33d71c

          SHA256

          b90c557a3d827590cf8699974c4d54dd7e45168097cb14f9c9b78d9ed485d843

          SHA512

          0707b59bb145d1e62a09fa3f2bc91bc21edcf6405ec858cb2728f338ef06490483fb9edcda7ef665096deb14444e1410a60a119e2471a16571ae8a1849c1cdd1

        • /data/data/com.trade360/no_backup/androidx.work.workdb

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/data/com.trade360/no_backup/androidx.work.workdb-journal

          Filesize

          512B

          MD5

          c177c0dbaf4d74121994236aeeac4321

          SHA1

          6a7dec8c04a49fda2f5d1580b672a4a62fc5f1f1

          SHA256

          1dae1c0ea458717c0e8777bfdb6fb683dcca599b3875415753b782868ff49828

          SHA512

          5c59555221d3a1f00bd384e3389d0e621175d4a1c261e1d3780a5b623e659d18509db71ad19c5671207806437d8d3a108ceaf348c9d37b46718010453d926eee

        • /data/data/com.trade360/no_backup/androidx.work.workdb-shm

          Filesize

          32KB

          MD5

          bb7df04e1b0a2570657527a7e108ae23

          SHA1

          5188431849b4613152fd7bdba6a3ff0a4fd6424b

          SHA256

          c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

          SHA512

          768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

        • /data/data/com.trade360/no_backup/androidx.work.workdb-wal

          Filesize

          16KB

          MD5

          1ffffb9ed3d97695d55e13cfd7277d2b

          SHA1

          8ad1d3d798826a6f87ccf323ff89dadbe80b116f

          SHA256

          e5b6d75b8641d5bfb734ca1a6f89f30bca8ab0e01a686a26b12fcf7e1ca3032e

          SHA512

          1cc5db755708d7728f40a7c0ca17d2dd8e62e754b15281fdce2319193359e10f5307c2c4f17fa26295dcf0a403b429869e48352f327820ff6a6e3a137dee142f

        • /data/data/com.trade360/no_backup/androidx.work.workdb-wal

          Filesize

          108KB

          MD5

          11fe47cb303686cdb11f66b1d65abf16

          SHA1

          e64d86650e6c99632950c7c6bb7f929c273b4359

          SHA256

          f9d3812de1a9266419d68b33c4d8e6532536eeb2d13a7ab9447430f1bcb9fcac

          SHA512

          bf68a1aed326616c8afb3c52521d0e6b5e30180dfbab0c5362541e76ee9c540b18a61943dc7603005b0b89ca0b4730a75732137665bdf97d3cccc51ba6a24cab