Analysis
-
max time kernel
2653646s -
max time network
132s -
platform
android_x86 -
resource
android-x86-arm-20231215-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system -
submitted
23-12-2023 15:22
Static task
static1
Behavioral task
behavioral1
Sample
3c9e0ea605366e972ecec9b1c6a60408841b7582194e16172c9a72267fdde306.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
3c9e0ea605366e972ecec9b1c6a60408841b7582194e16172c9a72267fdde306.apk
Resource
android-33-x64-arm64-20231215-en
General
-
Target
3c9e0ea605366e972ecec9b1c6a60408841b7582194e16172c9a72267fdde306.apk
-
Size
23.9MB
-
MD5
1a77cb8b2c4646e512bd0a940d1ea727
-
SHA1
fbf6223aced4aaea081672b6c1a0651aac4a713b
-
SHA256
3c9e0ea605366e972ecec9b1c6a60408841b7582194e16172c9a72267fdde306
-
SHA512
6ce807e453ab7fee6c07000f44ed4dfc24bd0cc62c378d377212d8f80bb38abcecd6d0153af90e3ed76fc15caef3813d4b269ac03480e299f8b46167f921e84f
-
SSDEEP
393216:tRcjWZ545UmxhITLvr3SryRQ6rO7TbwAqWcF9+VrKfiar2xYu0DrPo0wFpFvv4xB:vc6zmxiLDSrEQhTb1qlcRIPHwFpFvv4j
Malware Config
Signatures
-
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock net.zedge.android -
Reads information about phone network operator.
-
Checks the presence of a debugger
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
Filesize
512B
MD5afc8579bfe949710fa1660b34d55e9d6
SHA1e16ce29f22e3beedd22d7d8e296c8ab25978d210
SHA2566291728acb256c4451469b33517322ee7004091cba27b9f45078bf84fbfcaa6a
SHA51275c71cee28edd00f8b4a6c8dfb9920153301ed98a5ee506bd01f8a371c86ebc56aec646fc0fa7d73f3394818b3c316f75af1f6df2ce62b7dfabfcf6710f80df5
-
Filesize
16KB
MD5bb4ea69910c0c4c673bfa5787bf44159
SHA1b01dc3f46add8c214bb2a838dfe184aca7290a29
SHA256834c1516c0736d7e0292d219b2c41baa11cd4fb1dc2ebda2fcd460aeac4e03b8
SHA512c3fe3f5b60f885da274e1b8374538d020dc5882bc96a28abd75dd8b1d8e546d4fbeac82d39345f1a760cde5e222510990ed1a896018599519c981edad3f6346a
-
Filesize
512B
MD5bfb1cc710e3ad614a25dc16d8987f25c
SHA1de0ed5e24082e0c9eb46bd09ff333f81071250cb
SHA256e310577d85774d3d9fc441fdcfadb152274ee830f6e4b6245a9eb0c037f50b45
SHA5122b8242528ce701783aeee6060504861de2f68c81d9c8704f92ddeba020a6b807b702733dd29f1aa575b0c2a124612732ea8f6032fabc6a9a990ae304c2174e5e
-
Filesize
28KB
MD5cf845a781c107ec1346e849c9dd1b7e8
SHA1b44ccc7f7d519352422e59ee8b0bdbac881768a7
SHA25618619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
SHA5124802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612
-
Filesize
36KB
MD51dcad12e8e5d2cce5c2332acd7d6e738
SHA1ffc34ddb7b2261ae6892ce8a9f95bd9e9bd08198
SHA2569f384f0689b8c75704a23e072023e8e402cadebd7bc81119e29b4b2451c7af21
SHA512089310746a460d8d0354b7fd0519b790bc1005ddd36145f16f4b5219f3b6dda9428edfd3b386c3a1d30cbdd65dff20c6be9b666f26bce25449aa53e6f3f1d61d
-
Filesize
44KB
MD5bb699ff4e072ad025bb3fdf65742a07b
SHA13ab0e4c38c80395cd605b80dc0955310fbe8bb46
SHA256d4579e8cc45f6274fdd8fb35415eb67f297877ce5b1d9f9cca55846aefe59d68
SHA5129fd98cb29957ddd625ce8026f7c83ea5683005bd79b4c5052f37a6504d8f81f540b8570fd1ef63915f5d0319fbc21c692ddf4dec7ccb4f4ad3eb0e279e6580b7
-
Filesize
16KB
MD50296fefe1d2859c2cf592eb6b56e7b99
SHA1704b4f5f3843e4ea67d5820aed09bb054a296eee
SHA256e52afd9174ee776f875499ee125390323fcfe0143102bf93c297f6fb1b3b8241
SHA51252b4ee193a39a1abcd68504891e6a72e9b662620fd3ed3b72d0085b30ad26fa983934551d1d650a1c230ad219007bae2379a92497ae90887782ad96e89ffff57
-
/data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6588BF2B02DD-0001-10BB-8F69190483F4BeginSession.cls_temp
Filesize77B
MD5c770e07abd8820d3113b73cac55a77c8
SHA11348cd4b9d75b9b3e24e454d2ca9e817dec28bee
SHA256bf607135e488729886c3293e3219d7b4b8e6b4aaa77fe9dc50c92752eca3ea16
SHA512ba92c644d8edbf1ec402ec514d7ab317109d89166f7648ec80617c56a514b37454ca1a7c5b27511a08c0c93040ff9089c1cddc95805730b11d5f758d0d9e0db4
-
/data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6588BF2B02DD-0001-10BB-8F69190483F4BeginSession.json
Filesize132B
MD557c84d18613ee83c66a84ab9014f0503
SHA1d97563aa3211f3d3d1fbac5dca0dfeac4082b0f4
SHA256732002d6f41afb4d0e330a3a9c6eeb4c594977e195ed1d716f0c3a83d86a2b8d
SHA5121d0fa3c1470eec6cb3db4a2152cbc1ac5973eddb335d501192bb6b46f99ec39caec7ee6fb54557c961eaf4c6730e736aaea3fa45636d2cd01c74a57187a67935
-
/data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6588BF2B02DD-0001-10BB-8F69190483F4SessionApp.cls_temp
Filesize120B
MD57263fdf58c99958777cc7a9c981c6818
SHA1719aebc6b0874c1271100a715406c45ea23db538
SHA25614fd5fbb185c5a556b05966f073d58fca7efc457eff5a5aad39e131f7f5eeb7d
SHA512afdb906cf07e5746ce528601632f546875c1cb5fd76cc406f1a7cc989b7ea0e3f8b3861c6265112893dcf4bbf27267efc5ac85d1e92763b415dbf91b7a48158a
-
/data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6588BF2B02DD-0001-10BB-8F69190483F4SessionApp.json
Filesize234B
MD5c20fabcc3a5f2fb94458f044ec38c6be
SHA1dd963efeba7e2865527cd12ffb171376585af6d2
SHA25627f007361871fc55d50365857af5c11da00feb8aab84f244e9a80c4fae1469cd
SHA512cb5353c708d0a4543ba3cd1de7fa4efb624c8d28ab1c1bd21ba8ea884ff1ef295eb123354efcfc81cac1fc898400f3e824390e023bce7e63fff154833a9b6852
-
/data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6588BF2B02DD-0001-10BB-8F69190483F4SessionDevice.cls_temp
Filesize90B
MD55381dc6a4e4a46edc0799bc986501014
SHA1a36769250ef7d8c25cc1912632a06f2eace22035
SHA2568e2047499b5dafb77287c341363b8816c0ba930fc81469cf24bdb1f2fabc45d4
SHA5125975359bb97dc02437557952eefa60dc68e6b8e8a9eb79dd3f1d6e43f9c6e94c04f52e58760283594c24a4e2847909711c6ce065c789bcc24fede5340663dd0f
-
/data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6588BF2B02DD-0001-10BB-8F69190483F4SessionDevice.json
Filesize204B
MD55d1ce0f2aeb4721dca215b6868007c78
SHA1d93ce1169ff37b19a79c7b4494d939a1f4c082fe
SHA25644c8829bedc7d9caf7357dd41aa13e838ac1fa5a055af3945819cfd6424a93ce
SHA512890f5a61c21643f31eba828cb0fc4009e0417e8885846605a8ce1c969f5203c62235d3ab76d79fc31d855238f8eb9eff6d1676f0331e9959a0f088bb0acf44f3
-
/data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6588BF2B02DD-0001-10BB-8F69190483F4SessionEvent0000000000.cls_temp
Filesize2KB
MD5579dc67d24baafe99694e14c1e57e09f
SHA197706b670b2ef4248ed8e841a9115d621ade1b1c
SHA256858b02e3e2a70c89b2103bdecf1b0875cbcf0ffe584ebf8a23e182505873d790
SHA512b5cd664b1a48d9dca89b74c0857ee55366715498f732ffa4eae6c06228075d1a08ebcf6f0baba3d03f69fa99eccfaa492e396147d5c89b79bff92278010509c9
-
/data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6588BF2B02DD-0001-10BB-8F69190483F4SessionEvent0000000001.cls_temp
Filesize2KB
MD56bcd22476ce9828d94877be9cab13e7c
SHA1e4067cf4617a902987f921e487f2d95e60903127
SHA2560b952d5905f45749950c0cf0949e0f323ad20b9660082a53160049ca4d54bc95
SHA5128db9fdc9d73839a18e4b57459563eb93c261a630ea90d41c7fed410a22db27b703c6a471ff22f7ec8dbd52d9084c7c615e2e5f2ea4260ef5fdfa62df8605a917
-
/data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6588BF2B02DD-0001-10BB-8F69190483F4SessionOS.cls_temp
Filesize14B
MD59b3d4522944ce6396563812bfdb92fa9
SHA16d2a6133c8f01938a48ccc77ef86ad8ca335c020
SHA256d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9
SHA512091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727
-
/data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6588BF2B02DD-0001-10BB-8F69190483F4SessionOS.json
Filesize54B
MD593023624eb8dff5c20050da136aaae0a
SHA1acfd1ffed752c28fb135ba83c0c6345ddf2f6995
SHA256968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c
SHA512bb25dfa144d3f0e17203936c503c5fedec5f9ca710e177f99e273010ba4a682199d4bda5684151d65f3cb1549f4611b3a645ce39646d3db9a1b2c17d6b160579
-
/data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize492B
MD59670e41a0bf945bee7e427c81cce5ab5
SHA1e8255d98dd943a8f1d627eef6f0be06a9a605628
SHA2563c24ea214f65e27a434a1142da04124faeed28f5ed0b8411bfc45ef1c39e6105
SHA512b3c05ef7b43f9cd728f5de9d87550b10cd07d03bbb02f80f33a443a70c4e8fae85fd46bf5696ae6a12535ae228deca6255642c2bbb98f194c1ac4461fa9e37c9
-
/data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap
Filesize977B
MD5f8c71c0436fd244eba937c71b6961d65
SHA123273586c0c440f35fc27b453612dbb2188da6d2
SHA256afbf9ebd408ebb118574a5394cb77ea5d608b76186a71b8300321c9fca001582
SHA51216d3e38586bb09e6cad49afc72cd1c1903378e067401bdca4a702782b65dacb98d57e67a7ea46ec032340f855b25ea5b0fde15e6379988a42264af029b02c643
-
/data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
/data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_827ac2dc-1d95-44ea-b8cd-ec44a62a15c6_1703460658371.tap
Filesize383B
MD595186a83a3e9353563692704c008a63a
SHA145ff3f591a5bacd642927fb68a6a700fce4fc481
SHA256f8b53f0b2eab6afd08a9d1f998fcd8fead6e187f0d01b8a50b155f75e9bd7898
SHA5128b08975ddcd55e88fa8dc5f9048b052a29641f3c4be311b7141bbd2cb8cfdd8a7ee0bb3b244a5bf2a93ddb193bd6350f8eb4ec81f1ddd2200504090917833e4d
-
Filesize
2KB
MD5bdfd47aa560fcdff4d6f3bb70419faab
SHA1808df9f5ddaa30f7575a27a68f9a1c5d30c6ec41
SHA256d699da024294ecfeddd901c45f37e856ccdfdafc63d3bfbd127d0db00c6e7daf
SHA512938e66fb4ffa6dbe8c4e3bd4be4f68f20a7f627e12ad918d11f2f9b2e9c37d8ca408cf2eb4b649ac5ee612317c855908fdde62f3b9bef426943684a2afd8cba5