Analysis
-
max time kernel
2534074s -
max time network
160s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system -
submitted
23-12-2023 14:17
Static task
static1
Behavioral task
behavioral1
Sample
2cf167947422bdb3525a44861316df61b69529cafb7d5c74f39e269e95a968a4.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
2cf167947422bdb3525a44861316df61b69529cafb7d5c74f39e269e95a968a4.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
2cf167947422bdb3525a44861316df61b69529cafb7d5c74f39e269e95a968a4.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
2cf167947422bdb3525a44861316df61b69529cafb7d5c74f39e269e95a968a4.apk
-
Size
13.9MB
-
MD5
e721a7ac4acfd2251f0adc709b9bd1a4
-
SHA1
46351a5d75ed8c4c535bdcb9a12b395a2df642ea
-
SHA256
2cf167947422bdb3525a44861316df61b69529cafb7d5c74f39e269e95a968a4
-
SHA512
eeb6210b2e5570fd7dc9d9e88527ade94ecde48af2c19a31b091b97a99cafa2b989d1cb23e2258cd24cdc3e04cb3d0a8a844f4849c05ae317bb32c9a30e85def
-
SSDEEP
393216:raQANaPa8HLy/6mjbUw7CFdc+q1sjvQ5WT:rBxDLej4w7CeaU5WT
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.attijariwafabank.main -
Checks the presence of a debugger
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/com.attijariwafabank.main/cache/image_manager_disk_cache/01bcfa1c90588f717a6eec4ae526d08a20f74ce653003c1e4f8662a2aaa3f52d.0.tmp
Filesize7KB
MD5af0cf984bedef7c3a56d0d3e364cdebd
SHA14d089daae7c1913750a34374d9ec9afdc7914cd0
SHA2560c0aa08332907a2c15b80bb2a987bf0cc325d0ac441945d011db8460d4442ca0
SHA512ab96d7292f25a3ad160ebc74ce541b1bdebf8ba7535a82007cfb49eedf10501127ff0c1a3ef66d87bc5625a65d5e138f22391bcc3176bc70dbdc26728e953ed9
-
/data/data/com.attijariwafabank.main/cache/image_manager_disk_cache/b17bdcc9471f497c30c5a8cb0a8e2f1f3bb60b38c39b4338670c96dbc95ac33e.0.tmp
Filesize155KB
MD53177d64efdf9c12e7760f84137f5dc1c
SHA18881c874701bca84254ce31276d5b57510f3d4b6
SHA256a8e1f7c0f99b5ea673491048e7a898c7a3e1b1242213fd1adedc441c62fb44f6
SHA5126605a08e7675dd72cae45cad051262830a4ca6a090c525e9f80aa708a04dd34b84afb7691bc12c15800836e96bdb835bd95b928d849c7d1eb23493168928f6f1
-
/data/data/com.attijariwafabank.main/cache/image_manager_disk_cache/d02387a31c8f2462972378d19a42b38c958a1c65088d9a5fe09304645e18baa7.0.tmp
Filesize4KB
MD54126746751c64056a8389158e1846ae3
SHA145ea8af5fb94db27636eaa3257378e329842c869
SHA256cb35c49442e2a78422519f8e92d838df57ffe528f00921af0c0d932f9f21abdc
SHA51254a655d7089447c94ce365a31767d15c704b20ae1f9759997e1e37dc3ad0d8535569c96dda7e450f7d14ad186968670c367eb1be873ee4fc5d8de89c9cb30cc7
-
Filesize
71B
MD55291ca052f46cc1fa1befc1dfdc1bd38
SHA10aa053dbdc698532ec42b07a824dcadcf72a7eed
SHA25671aa44eb35f6b2f2e729a18979853fe9dbe19872de6294ed63014e04acca0480
SHA512be490b3abb132b61e36c40c0d8823a59e5616bd9f6b28df8af1d0bf99d5d95ef2ddd9b94edca63646f295c3a7cd1bfb9d374f4e2d997148a6dd66b452d323259
-
Filesize
31B
MD58c92de9ce46d41a22f3b20f77404cc1d
SHA18671a6dca00edb72be47363a7071be65cf270373
SHA25668bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
SHA51230f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56
-
Filesize
12KB
MD5df834499781bad31942bf9a9f2ef7964
SHA1835f2e8352644ff1d69b05cfb646c779aed5a32b
SHA2564c5545be1872c61e16fa03d4dc0c98a6905c75c4f360a590ce6702d495af2d97
SHA512f48b1ea88f98b74b42b519c428761545bffee866ae5e16d9a415043cd6ac9bfefca44b5861a0cfce6586fb769419a2b53fdcd2abf92a0244aa3f3fef33dffc10
-
Filesize
512B
MD50e6903ca3bf90eed529898a9af2e9707
SHA124b44a59066710bff7cd8a25975535f557263833
SHA256b02c5e7f2c1186c48169a1ff8939fca80788f5a052381e60cd72cbfacb30f997
SHA51298a74152a3274f0e58e78735aad1776e07de5490f9ac5ed0b46e25d3ba012d086bba500a62fa6303a43c3f019be810e042a47f7cc3d514800960a7ef9815c4ea
-
Filesize
8KB
MD5c7f0fae3b7bdcc4f6aa5be779502c859
SHA1f7039053c6342e149b7cfb66ed264785d3b28160
SHA2561815baf3877797128c8a4dd648c76bf584f9d4a246430c56ac945c3e6d9a3d91
SHA51214a9524468d641771578f5a468d07e16297f81da6ebdd222e790bae18cdd7aafeca75a5ff9af5f75e747713c06fd99575a7690cb3bd841742fb84d911a05eee0
-
Filesize
4KB
MD58b0f2d09f7b9046d6c415f664095f383
SHA1ef7a0ebd52ff653cc59244024981c71a285cd7a5
SHA256905bf9f629a9802067d18a12ce05bfe223d014b6197fda68216487493676e8d8
SHA5121b439281ba718e16a21a6493e2fee7ab9e30194d06c4ef53ab3ff7e2183a866bd6dc52b38e74723987029a6f51e37cb35cc458609d5819fd45b6192bf0f5a9a8
-
Filesize
8KB
MD5b0afc727f8a52e2bebd2e5d721cf7906
SHA1b11e7f5a8acc13c5aa1ff5f34ac4168a1d865044
SHA25603ab683d1287280053584c046bf12b15e7726f61b189ebd4d3e2998316a1dc17
SHA512587b3c7162168dc58ccf20f8aff5fcec045bdf1bfe6be9153c3c292f4b767e129ad37a21aabc70b45fb36e7a4733f5045bd8d0533b2c31c5168fb961c6682c02
-
Filesize
8KB
MD5b213fe6a343188c7af4b2e57d073f6f3
SHA19d70a83e116c083e0a5fe333cf711f833247eb32
SHA256b03beeceb05d3e2756cedad2af3062916b8df74b7a969c70d7c8cb4e8a869374
SHA51275906492017629f9223b7345097fe093ba8efa4ee78418ab5a4b8c6ec267ec735f2fbb0071b4b28032a8c6054329ac2850565a021b86f049482acf58b934a918
-
Filesize
16KB
MD57637fa900d29d6e7df8beb3551adab1b
SHA106317a0ff889e0f60e499fd27d4f2d3d5b1580e3
SHA256a7f53e525d896c4820b925abd89f674fd5dd09de5b32c77a69aaf19dd6efaa38
SHA5128bb374aeb0ff99d53fe4ab8a346daf6e9d92f9385f34e7dd7a63dc446a199f43dd317f9b25d8b2217408678fd7eef5babac51b5adbe06c234e3ca75019b72f78
-
Filesize
16KB
MD57c853a0481662efe46085410b9e2ed2c
SHA123cec758f6766afbc8921345bccc16d6cda74eae
SHA256594f5be7d436b85241dd3a43a9478e032bfdd6dd5783a240581c8439308afae6
SHA512a1326b2622c3dacfaaede06c05c41d4b671b1087c66cd4e43d03214dc0612944f2c3396f4921c4a4c3a8860b3420405128a5731fb63307531cd20792cd469cdf
-
Filesize
16KB
MD5a4dbcd779151ba92b9f637fd89ebeb1d
SHA10f627e2a5c279bb4c263abf713659fdb80781a77
SHA256e4d9edd43086834faae1ab096f1142c58a637b6c36c9b677914aa85a18d023fe
SHA51298b0b378dc4cb36fe29a1431ca9546e0bf8352c65515323d4585c0010f0e10d144adfeb41bab3d913c18442fd803f88ee318a6293b8075e8e3ccaf70d5ce3e7c
-
Filesize
16KB
MD5a0ff4dd177f83551ec655d8102d0c639
SHA166414ea5a163790f5d2cbfa5bf03739d672d9ede
SHA256437abdf60557593e5da3f1b59b95b35f44fdd86aa31c49d8e7802a9210d8d61f
SHA512d09f260fbe59504052d911ac907efc5e9ea023c361e38007bef5bfbcbce8cde562f579f74348d6922354f4fc4b56e700db65866f006411ebe3467f799b7832cd
-
Filesize
16KB
MD503e585855618cc2b18f30b2a78711a69
SHA1368a3c401bcf4b6e3059010c5f0b1fee2151c089
SHA2564a97c5034f4e1f543232fef690e0777a2ada28ee94708e836419ec778b5d044c
SHA5122c73aaf42f40a99f4696595576a6afc1785a5f48ceae22548d8f0cc55d42a80c64bf49517d27d41e0688bddbf6093b76ccd4e7bf028495a784db84e56857d78c
-
Filesize
16KB
MD5ad3671ed30eb013aca18eed4640a72c9
SHA12f348e97c5b10ab18312ceccb8c5e25b4f201e01
SHA25637012ec6d6ca7db68152ef8771a4138800420902b66cef1a48970ea42d87d290
SHA5124f784a301e1e09041a8f38c54689733613ddaa09f0b92fa2054955dbca7162f8f598893c6a12ac2aec70713e1745277385e0226116b94f1aee2eb8ff00f7509c
-
Filesize
8KB
MD5fd3a4856e4c4a29f6038506b3ffacad5
SHA1bc93b919ae44b7600110618e5a4a35fa0aeb2242
SHA256da445e71d2ea201ba2182ab8da4d5c347169b38820c3c2c03f2aca0661c4a2db
SHA512dc2d8b5639b0898501f1508c90f58a1687e3b5640643c05d88ec21e63e6e6cdd5773c72ced1cada2fccd41e3044b535157aee7e08b8dd4ff56d012b0aeaec819
-
Filesize
8KB
MD5a403432cf7f57a28b4866a8a8ec56d49
SHA115be6147057cb3793a57935b8ac7ed99d352f345
SHA25698f95453722cf30513ad06d75414df9136fe07a24e9c432c05f1066b57c041c6
SHA5126a762988a17957a66307ef9e6ac1bfdeb13cd816f4ac6df730c717334584fbaac1dcab4ce88edd0ee1792a33eca1da3789e56a39cb02daf5cb6db806448b66d4
-
Filesize
512B
MD5b085f105feccaa45a54669e7ea6705bb
SHA12861bade7a2afa09953d516c57f1cc5c81b4117f
SHA25683cc5b7c726d3f0aab0db5f534df2779b49f10d7279daa00792144cbe170f714
SHA5128574f5da88a1cddcedc85bbe257e7e08e1222887ec6ab10ee9713fb81caae0600d8788a8b559357b01ddd43d3e0c02f56d1f9eaa8805590903847e3305554441
-
Filesize
8KB
MD5faa797a241749f91f100be49180ecf18
SHA1bfb9ac89521a6242e6ab0940c15a89e10f2edf12
SHA25624bf02c79017cfac69aa8e687fcd27b2a75418bb2fb69d16d1f8e9d821159a92
SHA512d8687b1d5ef44521674f4865470142cac640c59f44f405894be1b286158de0e82ec2457789af4e8cf96660d0849d7cd1b493edcd9f5cc32d3a39f37ae04f4ec4
-
Filesize
4KB
MD5d93940befc856a046dcb4d681d404a48
SHA1613b4ca5089c83de51fa6b1ad2aec30140ce2494
SHA256e1146a3489db73fd0f76d0b91b894d04747b067316295a98e30f3aac99775c29
SHA51270285357113e218dd8c41e8d673c1b0fbace4d5376d93a6b977676eb2d9105179a6f70caeff63599cb6fd6e753449e1a6349a3dfa028de67f72522a26067e05c
-
Filesize
8KB
MD5229d20d091f0aa31433518b902663202
SHA10bacc135b2d152dc1d196bc47c570902ea016c96
SHA256a5fd14c69efba4dce8d63f8cda31aba9489cb7f4ff4f6e4994df866e88dc27ca
SHA512033f3a8fb006d15fefaca28f7cf5026ed5b5d13137990f0f6714580205bb550071a808fa2e22b33ebfdc2a741cc93b3514a594ee4e1a82f1250b26757a5aba03
-
/data/data/com.attijariwafabank.main/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6586EC2D0029-0001-137F-9C3C48CD3C35BeginSession.cls_temp
Filesize77B
MD5f21f49996890d2b3d13f96fa7e27d369
SHA152155a82a0e7ad71717bd3a1fed2b822ab94f93b
SHA256baabd8c1bd61ca1c96333a691990e7af4c8d2d85bebf2a47f6140c82d2a67e65
SHA51298009f3e619fd300146f2dce2c8da11d16dd78e245a1293cac670cddd38583c7df8cf23fd032c812e15c982c02604444c85d3c58316de5313f95efe04e26673e
-
/data/data/com.attijariwafabank.main/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6586EC2D0029-0001-137F-9C3C48CD3C35BeginSession.json
Filesize132B
MD5e095f69df79e883de43d5cca263a7b5a
SHA1076c2ce77dfef604ad41c5a2c2c7022f79d7a20f
SHA256378184fbbc8c8624eae026493218053b81240ade0ed82cccc4b1405d47693e96
SHA512e866e4f15db7416595bacd9f9f92e5ec51139a36a186c46bf66d6d57abfe7e4e158a1e4e99cc2c8136669fb7dde5a8a7e894524b08bba216fe8d714d10354107
-
/data/data/com.attijariwafabank.main/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6586EC2D0029-0001-137F-9C3C48CD3C35SessionApp.cls_temp
Filesize120B
MD53d1791855665da130576ebc6b9c3d9b9
SHA1660d28f96472ee7c586b910e6ee73cace8ec654e
SHA2560e9695d692fec60fb36331a04f52b41e14b42915eef59ccbfad2226bc58903bf
SHA512cf1f18c21f4efca4bd50d37a3db236ffd6006abba27c8760086ec64d26faa83f02ef1941efef4f2cd1307f3d51e04bd229c3b4fcf9e2224f15659e80aef008b8
-
/data/data/com.attijariwafabank.main/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6586EC2D0029-0001-137F-9C3C48CD3C35SessionApp.json
Filesize234B
MD5cadb15a869c1b22a769da1913b44bb57
SHA1acac5b55a57b315e517e2325ab035a624a8604b0
SHA256b67b8f619545e3927a5c2bf36ca95cce1972f88d97d5e500560f4f30180ba23d
SHA512444d80f53db7dd3c35e6e32505a71632abbc2fcec030c1d0d9fed596be9b27af5a5c17258b510a425193102a0fa3a48bc21062186b7457086108be7c6012a2bf
-
/data/data/com.attijariwafabank.main/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6586EC2D0029-0001-137F-9C3C48CD3C35SessionDevice.cls_temp
Filesize48B
MD52390c1f21db00b20c07107e3ec7275fe
SHA1e663a646460acc071aebee942cc1776c23d77655
SHA256d348072a01496839cfcde3a18866423aee74aefd613fa3bf1ff4a203ef46a699
SHA51243ff60754eb60795ca1c318f44dcfe49194add26cc3d92c2eac7bef538fd65b6290f2e5953b8f1693b9425ebbcdd022ab16a18280146ee0b0c2eefe27bc0bd63
-
/data/data/com.attijariwafabank.main/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6586EC2D0029-0001-137F-9C3C48CD3C35SessionDevice.json
Filesize202B
MD5afa07370d07ed0a8ac9554ee7001bb72
SHA1d1e9de22fda1295087525ff3a377f7d7dd410ac7
SHA2568d4b99fc4968c9cdff4626ff6c1467cdb427f7a597b153f03b4bfb62dde6c07d
SHA512a7a974b1c4ca3d7ca92e1449dc9718d5ea2af7f8e4c605d25c731fb4bbe891fdf340835e2a4e3a363558744e5ee30aec22542f377eb5bffc0097c70d24f241d1
-
/data/data/com.attijariwafabank.main/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6586EC2D0029-0001-137F-9C3C48CD3C35SessionOS.cls_temp
Filesize15B
MD52566d27ce8c28d8961f082c375d7535e
SHA192fe585b1a2c9c523d2fa1f65ab5c1b6a1a6edaf
SHA2565acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a
SHA5121c70679bbd25a57f9ac02083d5af0fe72b1417cf3070a195497f03d6f492e87b1ed3f570de7ea7c814c995a1530e32610d9570f31a480648f4062e8d3287be8f
-
/data/data/com.attijariwafabank.main/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6586EC2D0029-0001-137F-9C3C48CD3C35SessionOS.json
Filesize55B
MD55caea4b68c57072f7f52a5a41720566c
SHA14d9712f1702c7238949da43f7d8ae6efb233a666
SHA2563223857b618b924c2b0fbc7bfb373a1aacf300a7b5ab585e18fffcf19039f363
SHA512fe1455d21c521aeae3292bdcc386f6d2005dc253930c03e44dbcb972f96b849670d2aba039ea59e1a5ebc0350e6315151d17bcda55c161a62987d4bb01e91f9f
-
/data/data/com.attijariwafabank.main/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize438B
MD52bcb47655dfcb023864ac756b5946645
SHA174daee811d352c96e616d0bb253ee804f3e05ba3
SHA256a63e90ba3643cd23acd5da0b7bdacb4a234a9c8c59b463e78992e37bd431f9f5
SHA51270ffeb397ffa51ab06cc22521ad6f578f1cb9f0f22320a759b9432d8b6254c84fc1669aa7fd64524a3b0de5b1cff2a46cb349a190e98d2d1039b7bf39fecab2a
-
/data/data/com.attijariwafabank.main/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize933B
MD504d3d7f1972a5fe109c71f304dd84fde
SHA1a5abe66193f9bf46e80c253d011b7ffcdb9132c0
SHA256505bfe8517d049be9d3b9ae149219a7511e3eba087f5cb4eff0092f0215cd2ec
SHA5127140e6c2c356b7b53e2e8ceaf31442a1825b76153a8f62f96fd9204d5fd44f44a5d21c3b864bf83141bcafffc98ab1e8dc33216567a57203e3b90ee9019f898a
-
/data/data/com.attijariwafabank.main/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/com.attijariwafabank.main/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_007250d6-854e-4b05-8bb9-03d20179c4dc_1703341102300.tap
Filesize353B
MD5df866d1183aa1b26e7e0efe2d17370b9
SHA1c2dddbf15eb9ed3f80dbc346fd125eec98040375
SHA2569853ecd509ec2dbec11734840ae75f889b39c22df711d5353c790f63069e5227
SHA5125d4f97ec339e863449bec5e12de8346ed4cb781923cbe9211c581aa8e6f7623e523d19c3c9cd8959f06b64d321c2479194a1f60dce7b8989c7b088d551a0b17f