Analysis

  • max time kernel
    2534074s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    23-12-2023 14:17

General

  • Target

    2cf167947422bdb3525a44861316df61b69529cafb7d5c74f39e269e95a968a4.apk

  • Size

    13.9MB

  • MD5

    e721a7ac4acfd2251f0adc709b9bd1a4

  • SHA1

    46351a5d75ed8c4c535bdcb9a12b395a2df642ea

  • SHA256

    2cf167947422bdb3525a44861316df61b69529cafb7d5c74f39e269e95a968a4

  • SHA512

    eeb6210b2e5570fd7dc9d9e88527ade94ecde48af2c19a31b091b97a99cafa2b989d1cb23e2258cd24cdc3e04cb3d0a8a844f4849c05ae317bb32c9a30e85def

  • SSDEEP

    393216:raQANaPa8HLy/6mjbUw7CFdc+q1sjvQ5WT:rBxDLej4w7CeaU5WT

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Checks the presence of a debugger

Processes

  • com.attijariwafabank.main
    1⤵
    • Acquires the wake lock
    PID:4991

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.attijariwafabank.main/cache/image_manager_disk_cache/01bcfa1c90588f717a6eec4ae526d08a20f74ce653003c1e4f8662a2aaa3f52d.0.tmp

    Filesize

    7KB

    MD5

    af0cf984bedef7c3a56d0d3e364cdebd

    SHA1

    4d089daae7c1913750a34374d9ec9afdc7914cd0

    SHA256

    0c0aa08332907a2c15b80bb2a987bf0cc325d0ac441945d011db8460d4442ca0

    SHA512

    ab96d7292f25a3ad160ebc74ce541b1bdebf8ba7535a82007cfb49eedf10501127ff0c1a3ef66d87bc5625a65d5e138f22391bcc3176bc70dbdc26728e953ed9

  • /data/data/com.attijariwafabank.main/cache/image_manager_disk_cache/b17bdcc9471f497c30c5a8cb0a8e2f1f3bb60b38c39b4338670c96dbc95ac33e.0.tmp

    Filesize

    155KB

    MD5

    3177d64efdf9c12e7760f84137f5dc1c

    SHA1

    8881c874701bca84254ce31276d5b57510f3d4b6

    SHA256

    a8e1f7c0f99b5ea673491048e7a898c7a3e1b1242213fd1adedc441c62fb44f6

    SHA512

    6605a08e7675dd72cae45cad051262830a4ca6a090c525e9f80aa708a04dd34b84afb7691bc12c15800836e96bdb835bd95b928d849c7d1eb23493168928f6f1

  • /data/data/com.attijariwafabank.main/cache/image_manager_disk_cache/d02387a31c8f2462972378d19a42b38c958a1c65088d9a5fe09304645e18baa7.0.tmp

    Filesize

    4KB

    MD5

    4126746751c64056a8389158e1846ae3

    SHA1

    45ea8af5fb94db27636eaa3257378e329842c869

    SHA256

    cb35c49442e2a78422519f8e92d838df57ffe528f00921af0c0d932f9f21abdc

    SHA512

    54a655d7089447c94ce365a31767d15c704b20ae1f9759997e1e37dc3ad0d8535569c96dda7e450f7d14ad186968670c367eb1be873ee4fc5d8de89c9cb30cc7

  • /data/data/com.attijariwafabank.main/cache/image_manager_disk_cache/journal

    Filesize

    71B

    MD5

    5291ca052f46cc1fa1befc1dfdc1bd38

    SHA1

    0aa053dbdc698532ec42b07a824dcadcf72a7eed

    SHA256

    71aa44eb35f6b2f2e729a18979853fe9dbe19872de6294ed63014e04acca0480

    SHA512

    be490b3abb132b61e36c40c0d8823a59e5616bd9f6b28df8af1d0bf99d5d95ef2ddd9b94edca63646f295c3a7cd1bfb9d374f4e2d997148a6dd66b452d323259

  • /data/data/com.attijariwafabank.main/cache/image_manager_disk_cache/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

  • /data/data/com.attijariwafabank.main/databases/google_analytics_v4.db

    Filesize

    12KB

    MD5

    df834499781bad31942bf9a9f2ef7964

    SHA1

    835f2e8352644ff1d69b05cfb646c779aed5a32b

    SHA256

    4c5545be1872c61e16fa03d4dc0c98a6905c75c4f360a590ce6702d495af2d97

    SHA512

    f48b1ea88f98b74b42b519c428761545bffee866ae5e16d9a415043cd6ac9bfefca44b5861a0cfce6586fb769419a2b53fdcd2abf92a0244aa3f3fef33dffc10

  • /data/data/com.attijariwafabank.main/databases/google_analytics_v4.db-journal

    Filesize

    512B

    MD5

    0e6903ca3bf90eed529898a9af2e9707

    SHA1

    24b44a59066710bff7cd8a25975535f557263833

    SHA256

    b02c5e7f2c1186c48169a1ff8939fca80788f5a052381e60cd72cbfacb30f997

    SHA512

    98a74152a3274f0e58e78735aad1776e07de5490f9ac5ed0b46e25d3ba012d086bba500a62fa6303a43c3f019be810e042a47f7cc3d514800960a7ef9815c4ea

  • /data/data/com.attijariwafabank.main/databases/google_analytics_v4.db-journal

    Filesize

    8KB

    MD5

    c7f0fae3b7bdcc4f6aa5be779502c859

    SHA1

    f7039053c6342e149b7cfb66ed264785d3b28160

    SHA256

    1815baf3877797128c8a4dd648c76bf584f9d4a246430c56ac945c3e6d9a3d91

    SHA512

    14a9524468d641771578f5a468d07e16297f81da6ebdd222e790bae18cdd7aafeca75a5ff9af5f75e747713c06fd99575a7690cb3bd841742fb84d911a05eee0

  • /data/data/com.attijariwafabank.main/databases/google_analytics_v4.db-journal

    Filesize

    4KB

    MD5

    8b0f2d09f7b9046d6c415f664095f383

    SHA1

    ef7a0ebd52ff653cc59244024981c71a285cd7a5

    SHA256

    905bf9f629a9802067d18a12ce05bfe223d014b6197fda68216487493676e8d8

    SHA512

    1b439281ba718e16a21a6493e2fee7ab9e30194d06c4ef53ab3ff7e2183a866bd6dc52b38e74723987029a6f51e37cb35cc458609d5819fd45b6192bf0f5a9a8

  • /data/data/com.attijariwafabank.main/databases/google_analytics_v4.db-journal

    Filesize

    8KB

    MD5

    b0afc727f8a52e2bebd2e5d721cf7906

    SHA1

    b11e7f5a8acc13c5aa1ff5f34ac4168a1d865044

    SHA256

    03ab683d1287280053584c046bf12b15e7726f61b189ebd4d3e2998316a1dc17

    SHA512

    587b3c7162168dc58ccf20f8aff5fcec045bdf1bfe6be9153c3c292f4b767e129ad37a21aabc70b45fb36e7a4733f5045bd8d0533b2c31c5168fb961c6682c02

  • /data/data/com.attijariwafabank.main/databases/google_analytics_v4.db-journal

    Filesize

    8KB

    MD5

    b213fe6a343188c7af4b2e57d073f6f3

    SHA1

    9d70a83e116c083e0a5fe333cf711f833247eb32

    SHA256

    b03beeceb05d3e2756cedad2af3062916b8df74b7a969c70d7c8cb4e8a869374

    SHA512

    75906492017629f9223b7345097fe093ba8efa4ee78418ab5a4b8c6ec267ec735f2fbb0071b4b28032a8c6054329ac2850565a021b86f049482acf58b934a918

  • /data/data/com.attijariwafabank.main/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    7637fa900d29d6e7df8beb3551adab1b

    SHA1

    06317a0ff889e0f60e499fd27d4f2d3d5b1580e3

    SHA256

    a7f53e525d896c4820b925abd89f674fd5dd09de5b32c77a69aaf19dd6efaa38

    SHA512

    8bb374aeb0ff99d53fe4ab8a346daf6e9d92f9385f34e7dd7a63dc446a199f43dd317f9b25d8b2217408678fd7eef5babac51b5adbe06c234e3ca75019b72f78

  • /data/data/com.attijariwafabank.main/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    7c853a0481662efe46085410b9e2ed2c

    SHA1

    23cec758f6766afbc8921345bccc16d6cda74eae

    SHA256

    594f5be7d436b85241dd3a43a9478e032bfdd6dd5783a240581c8439308afae6

    SHA512

    a1326b2622c3dacfaaede06c05c41d4b671b1087c66cd4e43d03214dc0612944f2c3396f4921c4a4c3a8860b3420405128a5731fb63307531cd20792cd469cdf

  • /data/data/com.attijariwafabank.main/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    a4dbcd779151ba92b9f637fd89ebeb1d

    SHA1

    0f627e2a5c279bb4c263abf713659fdb80781a77

    SHA256

    e4d9edd43086834faae1ab096f1142c58a637b6c36c9b677914aa85a18d023fe

    SHA512

    98b0b378dc4cb36fe29a1431ca9546e0bf8352c65515323d4585c0010f0e10d144adfeb41bab3d913c18442fd803f88ee318a6293b8075e8e3ccaf70d5ce3e7c

  • /data/data/com.attijariwafabank.main/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    a0ff4dd177f83551ec655d8102d0c639

    SHA1

    66414ea5a163790f5d2cbfa5bf03739d672d9ede

    SHA256

    437abdf60557593e5da3f1b59b95b35f44fdd86aa31c49d8e7802a9210d8d61f

    SHA512

    d09f260fbe59504052d911ac907efc5e9ea023c361e38007bef5bfbcbce8cde562f579f74348d6922354f4fc4b56e700db65866f006411ebe3467f799b7832cd

  • /data/data/com.attijariwafabank.main/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    03e585855618cc2b18f30b2a78711a69

    SHA1

    368a3c401bcf4b6e3059010c5f0b1fee2151c089

    SHA256

    4a97c5034f4e1f543232fef690e0777a2ada28ee94708e836419ec778b5d044c

    SHA512

    2c73aaf42f40a99f4696595576a6afc1785a5f48ceae22548d8f0cc55d42a80c64bf49517d27d41e0688bddbf6093b76ccd4e7bf028495a784db84e56857d78c

  • /data/data/com.attijariwafabank.main/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    ad3671ed30eb013aca18eed4640a72c9

    SHA1

    2f348e97c5b10ab18312ceccb8c5e25b4f201e01

    SHA256

    37012ec6d6ca7db68152ef8771a4138800420902b66cef1a48970ea42d87d290

    SHA512

    4f784a301e1e09041a8f38c54689733613ddaa09f0b92fa2054955dbca7162f8f598893c6a12ac2aec70713e1745277385e0226116b94f1aee2eb8ff00f7509c

  • /data/data/com.attijariwafabank.main/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    fd3a4856e4c4a29f6038506b3ffacad5

    SHA1

    bc93b919ae44b7600110618e5a4a35fa0aeb2242

    SHA256

    da445e71d2ea201ba2182ab8da4d5c347169b38820c3c2c03f2aca0661c4a2db

    SHA512

    dc2d8b5639b0898501f1508c90f58a1687e3b5640643c05d88ec21e63e6e6cdd5773c72ced1cada2fccd41e3044b535157aee7e08b8dd4ff56d012b0aeaec819

  • /data/data/com.attijariwafabank.main/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    a403432cf7f57a28b4866a8a8ec56d49

    SHA1

    15be6147057cb3793a57935b8ac7ed99d352f345

    SHA256

    98f95453722cf30513ad06d75414df9136fe07a24e9c432c05f1066b57c041c6

    SHA512

    6a762988a17957a66307ef9e6ac1bfdeb13cd816f4ac6df730c717334584fbaac1dcab4ce88edd0ee1792a33eca1da3789e56a39cb02daf5cb6db806448b66d4

  • /data/data/com.attijariwafabank.main/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    b085f105feccaa45a54669e7ea6705bb

    SHA1

    2861bade7a2afa09953d516c57f1cc5c81b4117f

    SHA256

    83cc5b7c726d3f0aab0db5f534df2779b49f10d7279daa00792144cbe170f714

    SHA512

    8574f5da88a1cddcedc85bbe257e7e08e1222887ec6ab10ee9713fb81caae0600d8788a8b559357b01ddd43d3e0c02f56d1f9eaa8805590903847e3305554441

  • /data/data/com.attijariwafabank.main/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    faa797a241749f91f100be49180ecf18

    SHA1

    bfb9ac89521a6242e6ab0940c15a89e10f2edf12

    SHA256

    24bf02c79017cfac69aa8e687fcd27b2a75418bb2fb69d16d1f8e9d821159a92

    SHA512

    d8687b1d5ef44521674f4865470142cac640c59f44f405894be1b286158de0e82ec2457789af4e8cf96660d0849d7cd1b493edcd9f5cc32d3a39f37ae04f4ec4

  • /data/data/com.attijariwafabank.main/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    d93940befc856a046dcb4d681d404a48

    SHA1

    613b4ca5089c83de51fa6b1ad2aec30140ce2494

    SHA256

    e1146a3489db73fd0f76d0b91b894d04747b067316295a98e30f3aac99775c29

    SHA512

    70285357113e218dd8c41e8d673c1b0fbace4d5376d93a6b977676eb2d9105179a6f70caeff63599cb6fd6e753449e1a6349a3dfa028de67f72522a26067e05c

  • /data/data/com.attijariwafabank.main/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    229d20d091f0aa31433518b902663202

    SHA1

    0bacc135b2d152dc1d196bc47c570902ea016c96

    SHA256

    a5fd14c69efba4dce8d63f8cda31aba9489cb7f4ff4f6e4994df866e88dc27ca

    SHA512

    033f3a8fb006d15fefaca28f7cf5026ed5b5d13137990f0f6714580205bb550071a808fa2e22b33ebfdc2a741cc93b3514a594ee4e1a82f1250b26757a5aba03

  • /data/data/com.attijariwafabank.main/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6586EC2D0029-0001-137F-9C3C48CD3C35BeginSession.cls_temp

    Filesize

    77B

    MD5

    f21f49996890d2b3d13f96fa7e27d369

    SHA1

    52155a82a0e7ad71717bd3a1fed2b822ab94f93b

    SHA256

    baabd8c1bd61ca1c96333a691990e7af4c8d2d85bebf2a47f6140c82d2a67e65

    SHA512

    98009f3e619fd300146f2dce2c8da11d16dd78e245a1293cac670cddd38583c7df8cf23fd032c812e15c982c02604444c85d3c58316de5313f95efe04e26673e

  • /data/data/com.attijariwafabank.main/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6586EC2D0029-0001-137F-9C3C48CD3C35BeginSession.json

    Filesize

    132B

    MD5

    e095f69df79e883de43d5cca263a7b5a

    SHA1

    076c2ce77dfef604ad41c5a2c2c7022f79d7a20f

    SHA256

    378184fbbc8c8624eae026493218053b81240ade0ed82cccc4b1405d47693e96

    SHA512

    e866e4f15db7416595bacd9f9f92e5ec51139a36a186c46bf66d6d57abfe7e4e158a1e4e99cc2c8136669fb7dde5a8a7e894524b08bba216fe8d714d10354107

  • /data/data/com.attijariwafabank.main/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6586EC2D0029-0001-137F-9C3C48CD3C35SessionApp.cls_temp

    Filesize

    120B

    MD5

    3d1791855665da130576ebc6b9c3d9b9

    SHA1

    660d28f96472ee7c586b910e6ee73cace8ec654e

    SHA256

    0e9695d692fec60fb36331a04f52b41e14b42915eef59ccbfad2226bc58903bf

    SHA512

    cf1f18c21f4efca4bd50d37a3db236ffd6006abba27c8760086ec64d26faa83f02ef1941efef4f2cd1307f3d51e04bd229c3b4fcf9e2224f15659e80aef008b8

  • /data/data/com.attijariwafabank.main/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6586EC2D0029-0001-137F-9C3C48CD3C35SessionApp.json

    Filesize

    234B

    MD5

    cadb15a869c1b22a769da1913b44bb57

    SHA1

    acac5b55a57b315e517e2325ab035a624a8604b0

    SHA256

    b67b8f619545e3927a5c2bf36ca95cce1972f88d97d5e500560f4f30180ba23d

    SHA512

    444d80f53db7dd3c35e6e32505a71632abbc2fcec030c1d0d9fed596be9b27af5a5c17258b510a425193102a0fa3a48bc21062186b7457086108be7c6012a2bf

  • /data/data/com.attijariwafabank.main/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6586EC2D0029-0001-137F-9C3C48CD3C35SessionDevice.cls_temp

    Filesize

    48B

    MD5

    2390c1f21db00b20c07107e3ec7275fe

    SHA1

    e663a646460acc071aebee942cc1776c23d77655

    SHA256

    d348072a01496839cfcde3a18866423aee74aefd613fa3bf1ff4a203ef46a699

    SHA512

    43ff60754eb60795ca1c318f44dcfe49194add26cc3d92c2eac7bef538fd65b6290f2e5953b8f1693b9425ebbcdd022ab16a18280146ee0b0c2eefe27bc0bd63

  • /data/data/com.attijariwafabank.main/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6586EC2D0029-0001-137F-9C3C48CD3C35SessionDevice.json

    Filesize

    202B

    MD5

    afa07370d07ed0a8ac9554ee7001bb72

    SHA1

    d1e9de22fda1295087525ff3a377f7d7dd410ac7

    SHA256

    8d4b99fc4968c9cdff4626ff6c1467cdb427f7a597b153f03b4bfb62dde6c07d

    SHA512

    a7a974b1c4ca3d7ca92e1449dc9718d5ea2af7f8e4c605d25c731fb4bbe891fdf340835e2a4e3a363558744e5ee30aec22542f377eb5bffc0097c70d24f241d1

  • /data/data/com.attijariwafabank.main/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6586EC2D0029-0001-137F-9C3C48CD3C35SessionOS.cls_temp

    Filesize

    15B

    MD5

    2566d27ce8c28d8961f082c375d7535e

    SHA1

    92fe585b1a2c9c523d2fa1f65ab5c1b6a1a6edaf

    SHA256

    5acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a

    SHA512

    1c70679bbd25a57f9ac02083d5af0fe72b1417cf3070a195497f03d6f492e87b1ed3f570de7ea7c814c995a1530e32610d9570f31a480648f4062e8d3287be8f

  • /data/data/com.attijariwafabank.main/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6586EC2D0029-0001-137F-9C3C48CD3C35SessionOS.json

    Filesize

    55B

    MD5

    5caea4b68c57072f7f52a5a41720566c

    SHA1

    4d9712f1702c7238949da43f7d8ae6efb233a666

    SHA256

    3223857b618b924c2b0fbc7bfb373a1aacf300a7b5ab585e18fffcf19039f363

    SHA512

    fe1455d21c521aeae3292bdcc386f6d2005dc253930c03e44dbcb972f96b849670d2aba039ea59e1a5ebc0350e6315151d17bcda55c161a62987d4bb01e91f9f

  • /data/data/com.attijariwafabank.main/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

    Filesize

    438B

    MD5

    2bcb47655dfcb023864ac756b5946645

    SHA1

    74daee811d352c96e616d0bb253ee804f3e05ba3

    SHA256

    a63e90ba3643cd23acd5da0b7bdacb4a234a9c8c59b463e78992e37bd431f9f5

    SHA512

    70ffeb397ffa51ab06cc22521ad6f578f1cb9f0f22320a759b9432d8b6254c84fc1669aa7fd64524a3b0de5b1cff2a46cb349a190e98d2d1039b7bf39fecab2a

  • /data/data/com.attijariwafabank.main/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

    Filesize

    933B

    MD5

    04d3d7f1972a5fe109c71f304dd84fde

    SHA1

    a5abe66193f9bf46e80c253d011b7ffcdb9132c0

    SHA256

    505bfe8517d049be9d3b9ae149219a7511e3eba087f5cb4eff0092f0215cd2ec

    SHA512

    7140e6c2c356b7b53e2e8ceaf31442a1825b76153a8f62f96fd9204d5fd44f44a5d21c3b864bf83141bcafffc98ab1e8dc33216567a57203e3b90ee9019f898a

  • /data/data/com.attijariwafabank.main/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/data/com.attijariwafabank.main/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_007250d6-854e-4b05-8bb9-03d20179c4dc_1703341102300.tap

    Filesize

    353B

    MD5

    df866d1183aa1b26e7e0efe2d17370b9

    SHA1

    c2dddbf15eb9ed3f80dbc346fd125eec98040375

    SHA256

    9853ecd509ec2dbec11734840ae75f889b39c22df711d5353c790f63069e5227

    SHA512

    5d4f97ec339e863449bec5e12de8346ed4cb781923cbe9211c581aa8e6f7623e523d19c3c9cd8959f06b64d321c2479194a1f60dce7b8989c7b088d551a0b17f