Analysis

  • max time kernel
    2653646s
  • max time network
    132s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23-12-2023 15:22

General

  • Target

    3c9e0ea605366e972ecec9b1c6a60408841b7582194e16172c9a72267fdde306.apk

  • Size

    23.9MB

  • MD5

    1a77cb8b2c4646e512bd0a940d1ea727

  • SHA1

    fbf6223aced4aaea081672b6c1a0651aac4a713b

  • SHA256

    3c9e0ea605366e972ecec9b1c6a60408841b7582194e16172c9a72267fdde306

  • SHA512

    6ce807e453ab7fee6c07000f44ed4dfc24bd0cc62c378d377212d8f80bb38abcecd6d0153af90e3ed76fc15caef3813d4b269ac03480e299f8b46167f921e84f

  • SSDEEP

    393216:tRcjWZ545UmxhITLvr3SryRQ6rO7TbwAqWcF9+VrKfiar2xYu0DrPo0wFpFvv4xB:vc6zmxiLDSrEQhTb1qlcRIPHwFpFvv4j

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Checks the presence of a debugger

Processes

  • net.zedge.android
    1⤵
    • Acquires the wake lock
    PID:4283

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/net.zedge.android/databases/androidx.work.workdb

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/net.zedge.android/databases/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    afc8579bfe949710fa1660b34d55e9d6

    SHA1

    e16ce29f22e3beedd22d7d8e296c8ab25978d210

    SHA256

    6291728acb256c4451469b33517322ee7004091cba27b9f45078bf84fbfcaa6a

    SHA512

    75c71cee28edd00f8b4a6c8dfb9920153301ed98a5ee506bd01f8a371c86ebc56aec646fc0fa7d73f3394818b3c316f75af1f6df2ce62b7dfabfcf6710f80df5

  • /data/data/net.zedge.android/databases/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    bb4ea69910c0c4c673bfa5787bf44159

    SHA1

    b01dc3f46add8c214bb2a838dfe184aca7290a29

    SHA256

    834c1516c0736d7e0292d219b2c41baa11cd4fb1dc2ebda2fcd460aeac4e03b8

    SHA512

    c3fe3f5b60f885da274e1b8374538d020dc5882bc96a28abd75dd8b1d8e546d4fbeac82d39345f1a760cde5e222510990ed1a896018599519c981edad3f6346a

  • /data/data/net.zedge.android/databases/bamboo_share_apps.db-journal

    Filesize

    512B

    MD5

    bfb1cc710e3ad614a25dc16d8987f25c

    SHA1

    de0ed5e24082e0c9eb46bd09ff333f81071250cb

    SHA256

    e310577d85774d3d9fc441fdcfadb152274ee830f6e4b6245a9eb0c037f50b45

    SHA512

    2b8242528ce701783aeee6060504861de2f68c81d9c8704f92ddeba020a6b807b702733dd29f1aa575b0c2a124612732ea8f6032fabc6a9a990ae304c2174e5e

  • /data/data/net.zedge.android/databases/bamboo_share_apps.db-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/net.zedge.android/databases/bamboo_share_apps.db-wal

    Filesize

    36KB

    MD5

    1dcad12e8e5d2cce5c2332acd7d6e738

    SHA1

    ffc34ddb7b2261ae6892ce8a9f95bd9e9bd08198

    SHA256

    9f384f0689b8c75704a23e072023e8e402cadebd7bc81119e29b4b2451c7af21

    SHA512

    089310746a460d8d0354b7fd0519b790bc1005ddd36145f16f4b5219f3b6dda9428edfd3b386c3a1d30cbdd65dff20c6be9b666f26bce25449aa53e6f3f1d61d

  • /data/data/net.zedge.android/databases/bamboo_share_apps.db-wal

    Filesize

    44KB

    MD5

    bb699ff4e072ad025bb3fdf65742a07b

    SHA1

    3ab0e4c38c80395cd605b80dc0955310fbe8bb46

    SHA256

    d4579e8cc45f6274fdd8fb35415eb67f297877ce5b1d9f9cca55846aefe59d68

    SHA512

    9fd98cb29957ddd625ce8026f7c83ea5683005bd79b4c5052f37a6504d8f81f540b8570fd1ef63915f5d0319fbc21c692ddf4dec7ccb4f4ad3eb0e279e6580b7

  • /data/data/net.zedge.android/databases/bamboo_share_apps.db-wal

    Filesize

    16KB

    MD5

    0296fefe1d2859c2cf592eb6b56e7b99

    SHA1

    704b4f5f3843e4ea67d5820aed09bb054a296eee

    SHA256

    e52afd9174ee776f875499ee125390323fcfe0143102bf93c297f6fb1b3b8241

    SHA512

    52b4ee193a39a1abcd68504891e6a72e9b662620fd3ed3b72d0085b30ad26fa983934551d1d650a1c230ad219007bae2379a92497ae90887782ad96e89ffff57

  • /data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6588BF2B02DD-0001-10BB-8F69190483F4BeginSession.cls_temp

    Filesize

    77B

    MD5

    c770e07abd8820d3113b73cac55a77c8

    SHA1

    1348cd4b9d75b9b3e24e454d2ca9e817dec28bee

    SHA256

    bf607135e488729886c3293e3219d7b4b8e6b4aaa77fe9dc50c92752eca3ea16

    SHA512

    ba92c644d8edbf1ec402ec514d7ab317109d89166f7648ec80617c56a514b37454ca1a7c5b27511a08c0c93040ff9089c1cddc95805730b11d5f758d0d9e0db4

  • /data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6588BF2B02DD-0001-10BB-8F69190483F4BeginSession.json

    Filesize

    132B

    MD5

    57c84d18613ee83c66a84ab9014f0503

    SHA1

    d97563aa3211f3d3d1fbac5dca0dfeac4082b0f4

    SHA256

    732002d6f41afb4d0e330a3a9c6eeb4c594977e195ed1d716f0c3a83d86a2b8d

    SHA512

    1d0fa3c1470eec6cb3db4a2152cbc1ac5973eddb335d501192bb6b46f99ec39caec7ee6fb54557c961eaf4c6730e736aaea3fa45636d2cd01c74a57187a67935

  • /data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6588BF2B02DD-0001-10BB-8F69190483F4SessionApp.cls_temp

    Filesize

    120B

    MD5

    7263fdf58c99958777cc7a9c981c6818

    SHA1

    719aebc6b0874c1271100a715406c45ea23db538

    SHA256

    14fd5fbb185c5a556b05966f073d58fca7efc457eff5a5aad39e131f7f5eeb7d

    SHA512

    afdb906cf07e5746ce528601632f546875c1cb5fd76cc406f1a7cc989b7ea0e3f8b3861c6265112893dcf4bbf27267efc5ac85d1e92763b415dbf91b7a48158a

  • /data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6588BF2B02DD-0001-10BB-8F69190483F4SessionApp.json

    Filesize

    234B

    MD5

    c20fabcc3a5f2fb94458f044ec38c6be

    SHA1

    dd963efeba7e2865527cd12ffb171376585af6d2

    SHA256

    27f007361871fc55d50365857af5c11da00feb8aab84f244e9a80c4fae1469cd

    SHA512

    cb5353c708d0a4543ba3cd1de7fa4efb624c8d28ab1c1bd21ba8ea884ff1ef295eb123354efcfc81cac1fc898400f3e824390e023bce7e63fff154833a9b6852

  • /data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6588BF2B02DD-0001-10BB-8F69190483F4SessionDevice.cls_temp

    Filesize

    90B

    MD5

    5381dc6a4e4a46edc0799bc986501014

    SHA1

    a36769250ef7d8c25cc1912632a06f2eace22035

    SHA256

    8e2047499b5dafb77287c341363b8816c0ba930fc81469cf24bdb1f2fabc45d4

    SHA512

    5975359bb97dc02437557952eefa60dc68e6b8e8a9eb79dd3f1d6e43f9c6e94c04f52e58760283594c24a4e2847909711c6ce065c789bcc24fede5340663dd0f

  • /data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6588BF2B02DD-0001-10BB-8F69190483F4SessionDevice.json

    Filesize

    204B

    MD5

    5d1ce0f2aeb4721dca215b6868007c78

    SHA1

    d93ce1169ff37b19a79c7b4494d939a1f4c082fe

    SHA256

    44c8829bedc7d9caf7357dd41aa13e838ac1fa5a055af3945819cfd6424a93ce

    SHA512

    890f5a61c21643f31eba828cb0fc4009e0417e8885846605a8ce1c969f5203c62235d3ab76d79fc31d855238f8eb9eff6d1676f0331e9959a0f088bb0acf44f3

  • /data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6588BF2B02DD-0001-10BB-8F69190483F4SessionEvent0000000000.cls_temp

    Filesize

    2KB

    MD5

    579dc67d24baafe99694e14c1e57e09f

    SHA1

    97706b670b2ef4248ed8e841a9115d621ade1b1c

    SHA256

    858b02e3e2a70c89b2103bdecf1b0875cbcf0ffe584ebf8a23e182505873d790

    SHA512

    b5cd664b1a48d9dca89b74c0857ee55366715498f732ffa4eae6c06228075d1a08ebcf6f0baba3d03f69fa99eccfaa492e396147d5c89b79bff92278010509c9

  • /data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6588BF2B02DD-0001-10BB-8F69190483F4SessionEvent0000000001.cls_temp

    Filesize

    2KB

    MD5

    6bcd22476ce9828d94877be9cab13e7c

    SHA1

    e4067cf4617a902987f921e487f2d95e60903127

    SHA256

    0b952d5905f45749950c0cf0949e0f323ad20b9660082a53160049ca4d54bc95

    SHA512

    8db9fdc9d73839a18e4b57459563eb93c261a630ea90d41c7fed410a22db27b703c6a471ff22f7ec8dbd52d9084c7c615e2e5f2ea4260ef5fdfa62df8605a917

  • /data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6588BF2B02DD-0001-10BB-8F69190483F4SessionOS.cls_temp

    Filesize

    14B

    MD5

    9b3d4522944ce6396563812bfdb92fa9

    SHA1

    6d2a6133c8f01938a48ccc77ef86ad8ca335c020

    SHA256

    d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9

    SHA512

    091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

  • /data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6588BF2B02DD-0001-10BB-8F69190483F4SessionOS.json

    Filesize

    54B

    MD5

    93023624eb8dff5c20050da136aaae0a

    SHA1

    acfd1ffed752c28fb135ba83c0c6345ddf2f6995

    SHA256

    968bcd7c4f1abed89a09cc0e6dadd238a81e8655e64196b39a86be49ceecd39c

    SHA512

    bb25dfa144d3f0e17203936c503c5fedec5f9ca710e177f99e273010ba4a682199d4bda5684151d65f3cb1549f4611b3a645ce39646d3db9a1b2c17d6b160579

  • /data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

    Filesize

    492B

    MD5

    9670e41a0bf945bee7e427c81cce5ab5

    SHA1

    e8255d98dd943a8f1d627eef6f0be06a9a605628

    SHA256

    3c24ea214f65e27a434a1142da04124faeed28f5ed0b8411bfc45ef1c39e6105

    SHA512

    b3c05ef7b43f9cd728f5de9d87550b10cd07d03bbb02f80f33a443a70c4e8fae85fd46bf5696ae6a12535ae228deca6255642c2bbb98f194c1ac4461fa9e37c9

  • /data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

    Filesize

    977B

    MD5

    f8c71c0436fd244eba937c71b6961d65

    SHA1

    23273586c0c440f35fc27b453612dbb2188da6d2

    SHA256

    afbf9ebd408ebb118574a5394cb77ea5d608b76186a71b8300321c9fca001582

    SHA512

    16d3e38586bb09e6cad49afc72cd1c1903378e067401bdca4a702782b65dacb98d57e67a7ea46ec032340f855b25ea5b0fde15e6379988a42264af029b02c643

  • /data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/data/net.zedge.android/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_827ac2dc-1d95-44ea-b8cd-ec44a62a15c6_1703460658371.tap

    Filesize

    383B

    MD5

    95186a83a3e9353563692704c008a63a

    SHA1

    45ff3f591a5bacd642927fb68a6a700fce4fc481

    SHA256

    f8b53f0b2eab6afd08a9d1f998fcd8fead6e187f0d01b8a50b155f75e9bd7898

    SHA512

    8b08975ddcd55e88fa8dc5f9048b052a29641f3c4be311b7141bbd2cb8cfdd8a7ee0bb3b244a5bf2a93ddb193bd6350f8eb4ec81f1ddd2200504090917833e4d

  • /data/data/net.zedge.android/no_backup/com.google.InstanceId.properties

    Filesize

    2KB

    MD5

    bdfd47aa560fcdff4d6f3bb70419faab

    SHA1

    808df9f5ddaa30f7575a27a68f9a1c5d30c6ec41

    SHA256

    d699da024294ecfeddd901c45f37e856ccdfdafc63d3bfbd127d0db00c6e7daf

    SHA512

    938e66fb4ffa6dbe8c4e3bd4be4f68f20a7f627e12ad918d11f2f9b2e9c37d8ca408cf2eb4b649ac5ee612317c855908fdde62f3b9bef426943684a2afd8cba5