Analysis

  • max time kernel
    2614045s
  • max time network
    132s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23-12-2023 15:51

General

  • Target

    428fccd9f79731dae8e604e33dd3aabf15ee6fb0e359cdae56e1fa2a3da154b1.apk

  • Size

    13.0MB

  • MD5

    a0d7c309fed58a513f93d89e5abc5be6

  • SHA1

    8bc7f176ef7d8af115b1f695a9fe62fb0f00348f

  • SHA256

    428fccd9f79731dae8e604e33dd3aabf15ee6fb0e359cdae56e1fa2a3da154b1

  • SHA512

    fedb603f3120a48867e6a6167a7f23f719c002802b1d4279df6bbf4cbfaee6342983984d648357d1795d1f7a227793edcec7711dcfd261273ab8ad244e28f339

  • SSDEEP

    393216:Y8u/SYRNJmVAZGIw04LIteUoW7Yinsyc34a:/iSIN4Vy54LIerWEisyc34a

Score
6/10

Malware Config

Signatures

  • Queries the unique device ID (IMEI, MEID, IMSI)
  • Reads information about phone network operator.
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.kardashian
    1⤵
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4566

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.kardashian/cache/image_manager_disk_cache/434367b503124ab1679cd7f9a1b7de41c144c94c0479fd6416021dcf6278e279.0.tmp

    Filesize

    28KB

    MD5

    240526cf125ba21f55090abdeeec6133

    SHA1

    c6b5d0f4eb6f9e84648125659142bb9fbc62c729

    SHA256

    49cb32091e8fae2626e3db01a790bd9a19d8b409a3d02cf6cac93017266e067d

    SHA512

    a0da1343eda840058e3fea7593b2b234f287e2695c3ee1dedc8ce26c5901c89aad724081192afe76c598df91323935eb1b9be628bc64c50f329c4a6914177eee

  • /data/user/0/com.kardashian/cache/image_manager_disk_cache/journal

    Filesize

    179B

    MD5

    ad0d516e1c515c5fe8d97b6007425c2e

    SHA1

    b3d31236bb33fe2666cd884cd50d2d8e0ee3982e

    SHA256

    44e7ac585fe0d143290582a7520a1dc9bc333d2ca6fc7bb0429d0485fd8af256

    SHA512

    224927fce36888c6d69bf3a39e01b47a09ecbb2def49829664d2daf67c4bb3b8cababa0158e3e86fc692076157cb22e8194782f5cf1dd5ce0b99e7412402f51e

  • /data/user/0/com.kardashian/cache/image_manager_disk_cache/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

  • /data/user/0/com.kardashian/databases/RKStorage

    Filesize

    20KB

    MD5

    3ddc5b2a7d44d9c06e094caa8d5e327d

    SHA1

    56e0ea45f4e0f5faa10eb0f0c3a85fa25a3f762c

    SHA256

    704233dafba4656ab33283b8f1952ad2b2ce981f2bf829242922f863b1e4dee2

    SHA512

    384a847e8ca16deaff15c83fd8991eed83250e8e9144ca380ae85c6462e059b2db63142e9b6cbba31003321ebabfa2e9c978f2490098b0cb798a4f38b3d8b76b

  • /data/user/0/com.kardashian/databases/RKStorage-journal

    Filesize

    512B

    MD5

    c894b0a4c247bcafbe8eef7c22fcc839

    SHA1

    1c7afeddaaa4b2c72a9f570f49a580758abde617

    SHA256

    a0a4968b0d64a4fe3c46119426e6541fedeafa3a63cdc7b170ec17020a7a4eab

    SHA512

    10278ce724bd46241bd3cdca7cb14ebbce93fcaf5478a62a1f0019f63c299cd3aafc0f16f32bc77f0099dc7060cda6f8d32a5020c2e9f34f43098958ec6ec8e4

  • /data/user/0/com.kardashian/databases/RKStorage-journal

    Filesize

    8KB

    MD5

    46d4dc9bcef864305e109a3190f9f283

    SHA1

    878ef9765e4f2936cbb93844eda76cca75369c17

    SHA256

    9b7097c9238337be9cea26e39d93585d1814048a09b3eeec9c8b02dc0cf98c98

    SHA512

    0ed96c3e154f98280bd5f71a62d5d9ad0f94722881f890e7543a05b10249049c2395d9e564c24708a9934cb82ba426c3c71a6b75e99aea7b3250da68280db1d7

  • /data/user/0/com.kardashian/databases/RKStorage-journal

    Filesize

    8KB

    MD5

    40919bf369978a4a793f98f1986761be

    SHA1

    e9a55e9fcd239148045c08b0576e9e3913d43d2d

    SHA256

    4cc94c9951f93da27e5de08fede3c5835d668ff2ed515b20fc8585e5df03d8c1

    SHA512

    2814329960cf3b647e68982cf063e6d8132b00b778655fa34aaec2e3e1a060962c5c105c045eac0aba72b6922cfafd3e9ef55bf2272038a2f8cca597eb9030b7

  • /data/user/0/com.kardashian/databases/ua.db

    Filesize

    12KB

    MD5

    171aedf968e17a2744d2585715606cb9

    SHA1

    bbeddeb3b89fcf809619c35b4a318a80e7d5b029

    SHA256

    d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e

    SHA512

    78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

  • /data/user/0/com.kardashian/databases/ua.db

    Filesize

    24KB

    MD5

    42357b81b5721ebc03950012cc1ff5bb

    SHA1

    862a5a131d389b4e008dedde14a9a0cd0ff6531a

    SHA256

    3c6d5c4e46c3cedee010393d31fdebc9d89f5febeedf67e0a3f46b1acc3f404e

    SHA512

    dddf56f5305b979ace5ec42564e0fea29d7a929631bc35cbae2784d6b9766e60d64a9672bdddd13496b5fc3b12af9adbf52a96511ecf02b3de802186682fa4ae

  • /data/user/0/com.kardashian/databases/ua.db

    Filesize

    36KB

    MD5

    df222041777b6cf18f3aafa453570ec4

    SHA1

    9629659fc7e9d09f949dad92330dbc1d950cd2de

    SHA256

    fdc56a5c4c560fca6cd3b1640ee99ae38539c6e9b7e93a1aeeac93cc2d78a7aa

    SHA512

    ab41854a6c329de6450e746f44dcb81e47edbb61ee173f546308d80efa5af66286beae805040b33ae5c0e18e7e07d17bd4fa8102f4c5b66f4c6cb0168d5e8f96

  • /data/user/0/com.kardashian/databases/ua.db

    Filesize

    36KB

    MD5

    c94d76017bf51697c3cda8c23e39412d

    SHA1

    ce530917a7472d764b75a63e483d3110aac322fb

    SHA256

    74f4cfb9f8f44426dc61809a5f7368af418efe48b35c1ca49ef718b626d53bcb

    SHA512

    15e9585d9dd649b0aa2f521cf93d058181243d16d2bda9a2672dc329da6d9867baf5ee681887c8c92078382f7f76413101b1314bbad3b3d115906ab9806c3719

  • /data/user/0/com.kardashian/databases/ua.db

    Filesize

    36KB

    MD5

    65658e5e342965e3cbefec99927ffdcf

    SHA1

    3463dc1da1354da3b6eb05ba33319b6108e3201e

    SHA256

    b59d24fc6ec7ab5a278851c9038b6beb616e733bf845cec7f8ecfe116c416451

    SHA512

    c439a439e1e27973bd8cba13434ddfa1bd3a435bd7bfb7a6d131961e9b81c61d9490149fafdd37c9577534658656adf4da72c22fa51103fdc6dd6a9bd8ba4733

  • /data/user/0/com.kardashian/databases/ua.db-journal

    Filesize

    512B

    MD5

    2ac3cd6af0524738116f9ef17d50e257

    SHA1

    f070fcc2a002850adf1fe687d90b637d016baa79

    SHA256

    c9da704dc545b3710ae7332d1924d7c331cf832dca79467195097d034440e5f6

    SHA512

    d14df2875068340fb35d96e2ff3bc7c7c16e1b278518a72fa603bb042e96b4fbe9afa8e48d4632deb58c7a8b30e1d31bb8365a65ad0e827cca17b910db6c404c

  • /data/user/0/com.kardashian/databases/ua.db-journal

    Filesize

    8KB

    MD5

    d24535218e40712b0d77de5919dfedd4

    SHA1

    5ef0e606c3801e6d8cfed0dc79675f3e46bf3379

    SHA256

    19ca0c5f6bbd4bf4b9e56513512c24a2096edc421053780f5d26b672a26318d1

    SHA512

    bac7cbf401cf6821407e98aa317c5993a40056e58cdbb7faafc807acf33478487a01ef99458febb91c82d0525493f4819418bd5325ed9bc18c1f7e8a007ccb9e

  • /data/user/0/com.kardashian/databases/ua.db-journal

    Filesize

    8KB

    MD5

    71bdce9e9809be63977bdf7a4d9bbef8

    SHA1

    a3c53d23430496c654495023de8abf633af92305

    SHA256

    063b3f9f963bffd0ab7490bedcdea65dde303fc686c5777f2e9800fa653a183d

    SHA512

    fc24aa34f00eafda3ff995436eda2b7563f75949144ed89b6d8c4fe183509ff10489698d295d2e07d12cf62a5b8219ef65a7f8307ab33d230667a40cd2b680f0

  • /data/user/0/com.kardashian/databases/ua.db-journal

    Filesize

    16KB

    MD5

    c540490522652bd1992eeb3e412c940a

    SHA1

    533412f80e777d1bf34e7815a332a249acaaea11

    SHA256

    f198709705da68604c3441ac8ceda0517b30ff367975740d641f61cb1dc0707c

    SHA512

    63d4ae1578cc1951da8baa29a6cffccc424b4bf9d9343c88dd9a77ae3686a200ff6c12f19171e70fdaceec54e7ceb574e30fb4b7a52f5ed96dc5ab5443c8e1d5

  • /data/user/0/com.kardashian/databases/ua.db-journal

    Filesize

    12KB

    MD5

    9437650517db44c9a86d131acf20c9fe

    SHA1

    e4f01fd76e5cb964265e86aefcba3ff9c779e026

    SHA256

    0f6810be521370cf92513011c98020ee60505e8ab28cd35121c2f4bc5b1fe085

    SHA512

    60eac348c04a2fa0b28c6734cd746ff034f6f83a6884ece529ae63189e24b0d5f8f0029043f8a4fff951d83c42d4796612c04edd0dae48b8ac6ba3cedab66c39

  • /data/user/0/com.kardashian/databases/ua.db-journal

    Filesize

    12KB

    MD5

    5720799ad11bc4046c3d26eda9d6bec3

    SHA1

    d25ec328373c4dfc448a6d3f7d578de40a5f5e4c

    SHA256

    ba7381a1b57ccfd3c56040b14f75e2eb0924b419331244d5ff5bdee4ca9b6667

    SHA512

    b87ef2cf29e81da3db80f3137a93eb463f16f706b15c9c5353f6522b24061cdc7745109858d1157268989153dbf3d287bb2d765f12cbd9c5cc947f1625b8be37

  • /data/user/0/com.kardashian/files/.envelope/a==7.5.4&&1.0_1703420953047_envelope.log

    Filesize

    1KB

    MD5

    bd7fa776e5b51ffeabfa6eaece8d38f1

    SHA1

    13293ab110c70170690bb232ddfde46ad9d118f6

    SHA256

    21ca9d79160b9ebd1473ee7207e9b678ea9418f3c70815d51232f65393dbf494

    SHA512

    5adfa7702ad4448721485ae3508d73562869a3e015f56e07a8aa55e93b082398336009a6279ce6d554bf745c3e4c1ba5582990f0851fac50dbdf35738f9adb5c

  • /data/user/0/com.kardashian/files/.envelope/d==7.5.4&&1.0_1703420954091_envelope.log

    Filesize

    1KB

    MD5

    ca582e96a85f401954061510db019cf9

    SHA1

    8937e8151b9609930536b72e21596fc9e7312223

    SHA256

    4305577b0a9a87d1254605a78e395cd85d89a4921123ff3a9ae8743073c8d606

    SHA512

    15e31bbc463e7cb35ef2bac6b51f286e76a8476bc081aaabe8680286c31541c11d3abe6a9a18b78c7b28cba4f994f8bddb048b14666fd69da8d7964868b15e5f

  • /data/user/0/com.kardashian/files/.envelope/i==1.2.0&&1.0_1703420949580_envelope.log

    Filesize

    2KB

    MD5

    b7fb8396fefb81bbe184f7ecae6e8e82

    SHA1

    576ee94be90646be613c21a5afd9e2c54afb0744

    SHA256

    b19837fe14208152ba25f9aced0f1bf496aa8e2cd7cae153ac32a30e2e601993

    SHA512

    ad50bbeb2d33602376b090ccc7086a1fe470e942f29b1c236af3604e3314a80423f1ec4266bc5b2aa14c57700e10cfe38094287a0e28f2c23c09e69c164a9a01

  • /data/user/0/com.kardashian/files/.imprint

    Filesize

    416B

    MD5

    c633cb78e24fe5b48ab1b2a144a5dad7

    SHA1

    4911c5499f8bc8f2649a62d7b4aea1e8000e82a8

    SHA256

    bca821cb67ea3ea0f8734a0ba28323a9fcaf0087056d66f3bcd114ca16720804

    SHA512

    75e16fedb068ae1e2351d5a00eb2d2ba08161df4f6758fb6a7bb77307cdb71123793c689f9329328417d7870babcbbfb7a01a0a5264d2634e5d5f1ac5ab15bbb

  • /data/user/0/com.kardashian/files/.imprint

    Filesize

    926B

    MD5

    3926f20c3e48d9f1b20271f1c7b2457f

    SHA1

    03a1bea792be4efdb63a44d1864106ded3cb33ca

    SHA256

    2367bdf0232dbcc31ba0fea71149526372ae6433faf38b598697aa1a16eac36e

    SHA512

    1822954fc0b91420be5016392466de696c9b47075b35efc639e32d02d1e61be686a967b69620a3c366aabbe769c5aa0526f91ef14a90e40466af3870ee651393

  • /data/user/0/com.kardashian/files/.imprint

    Filesize

    926B

    MD5

    2dc665bc7ad7f84404b70ad065725948

    SHA1

    0f2b7cf91441bdd67b74bb36c4082aceb93c41d7

    SHA256

    6508dabe07c8509a526a9831ed217ae3e17f3a70c2123a35220a93da6cc275c1

    SHA512

    6acce3346408497b6a4ddef27566be9420c618a453cb709a6b5abf641777d6d0c4d6a59e8ddf58d6d03ea70a18dc04144b6a24be4a90a8f40a55829e1133affc

  • /data/user/0/com.kardashian/files/.umeng/exchangeIdentity.json

    Filesize

    162B

    MD5

    87b7250ea640c264d6e540d5f0463676

    SHA1

    77f81c6973ae2b94d9a7fdc739d76c328a5cf8a2

    SHA256

    851e3b9a39cfe9f7b3305cbc67e89bf2d8ac2970e350c9fff4d91c7f42adf092

    SHA512

    58546fff63a738d2459061ed37d28cd841df1ad3712faaff23cecd13863f6958b995ebcd7079df0b6606fe7856f222050e2c366b255e89d5a65ae22b0fdd85a0

  • /data/user/0/com.kardashian/files/.umeng/exchangeIdentity.json

    Filesize

    206B

    MD5

    a726208f31f625a407f48844f9079fe6

    SHA1

    5b2623a29b67ea8aa377b004d63c0f7149184fb5

    SHA256

    175df49a2d801f04482e5ed6034c081c00292baa513cbe14d1f979e4b99ecdd1

    SHA512

    afc7f955eb1fb4b8d5e3ec893fd37c9b49c504ab345c317e21b784cbee433a72230e5e6345b53ebd3511ac8b805fe6fcb73cf0c67ad0360cf708b4c57a4ffbc3

  • /data/user/0/com.kardashian/files/exid.dat

    Filesize

    57B

    MD5

    73da1dc504db9e23bfa07a8d8298bb9e

    SHA1

    2a4488704c5cd7bff89a32d231ae051697d22103

    SHA256

    07f00d40f9307751c8829d311362df255cdd3f547503b5aed1c200de8e400e67

    SHA512

    182cf271c4572b4fa5c7800b7eba5862a019fabdb40cddd41fea8b44673a40c2d935771c008e26b115224e6b34d79ab65c9011e696df7793a6fc818275fb9fea

  • /data/user/0/com.kardashian/files/exid.dat

    Filesize

    99B

    MD5

    2cfb4a5995e3c4018b8c32eb270a5427

    SHA1

    c9979ca2be3f5c4050417b9a185e2f461b43fe96

    SHA256

    68a62a998d20c6e5026e8c6debbc64958cf1cbcda0420dbdebc97fad75cc1688

    SHA512

    aa8bcac9e12d219dbb3fe47151b5ceb591da993897e94d01fcfbe45cecbe6ba25eb3e0293175ccfd83a941c97f8d2dee91da734f593806a668c94704193bd3fd

  • /data/user/0/com.kardashian/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzAzNDIwOTQ2Nzg4

    Filesize

    1KB

    MD5

    5d62360c3f5f08226a56df1d0a7a738b

    SHA1

    6479a439619e341f1d25145c7f93fa24701b9096

    SHA256

    1061b5595db2adb58febd84c15ab24c1a6dadbdedfca5c0faffbeae626d0fbc6

    SHA512

    89cfd474f79db3de7ce30100f8836be9ad2f8bf6e3dcf4bdd4ea965b299a8090bd72b892eecb6c499b61675330654fbf0b19a6d925961d07a9281caf08af6150

  • /data/user/0/com.kardashian/files/umeng_it.cache

    Filesize

    350B

    MD5

    56cc4488bf0a0605047adeeeba394f68

    SHA1

    f0317fccc3fadb1e0f4ac725f7c359b3b0808b78

    SHA256

    63bce1d67c2bd58f39af4acf70a00c0b57763c05c41c6b86e6c79f2595342ad0

    SHA512

    fe57cce1d0e787896a24a28023254d9e0fbab184a4b4901275bf6f125cd28f57b3b36b5adb0f8533f43b0de46bc1b3934e839e3984bf4d13d6dbce96e49b6451

  • /data/user/0/com.kardashian/files/umeng_it.cache

    Filesize

    178B

    MD5

    9ec1afc461d9ec0e0b2566627fe60f79

    SHA1

    728d9239efb145569d065efc647259e688f1e4e4

    SHA256

    367492bf57a8be817c2cd8a352902deb8cf6c2f6ada7450c67d2a3f6fef3f430

    SHA512

    fff4840db7f4f7d4a4657b58d31235ef488277c8dc389f087ebafcc59e1f8776212f3ce21f3eba905325875e3a27bb491a4e77874062e78fa021fe0774dda0c3

  • /data/user/0/com.kardashian/lib-main/dso_deps

    Filesize

    380B

    MD5

    c1d051f4ddf7f05dfd6ef87964586a53

    SHA1

    d6e3df7e0842075ea6e5b4df706bba3b115be564

    SHA256

    15bac30710141d7c1d774e1addd4794c0b1219f014794f95f435c6ee44473dc1

    SHA512

    9cc0a322c0eab14876c744fd17705cf0b19f428e8322d4581cba157a24d711d6118f2fc32655c35d53c8d3cc556ffcf228ab3a81fe2e3f6d8364170c6a4af804

  • /data/user/0/com.kardashian/lib-main/dso_manifest

    Filesize

    5B

    MD5

    c06857e9ea338f3f3a24bb78f8fbdf6f

    SHA1

    c5a0a2529d2deb60fec041b4fbd722a2ebe31702

    SHA256

    957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

    SHA512

    29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

  • /data/user/0/com.kardashian/lib-main/dso_state

    Filesize

    1B

    MD5

    93b885adfe0da089cdf634904fd59f71

    SHA1

    5ba93c9db0cff93f52b521d7420e43f6eda2784f

    SHA256

    6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

    SHA512

    b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

  • /data/user/0/com.kardashian/lib-main/dso_state

    Filesize

    1B

    MD5

    55a54008ad1ba589aa210d2629c1df41

    SHA1

    bf8b4530d8d246dd74ac53a13471bba17941dff7

    SHA256

    4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

    SHA512

    7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

  • /data/user/0/com.kardashian/no_backup/com.google.InstanceId.properties

    Filesize

    2KB

    MD5

    0249c73b97b7786049e269e7bdf99997

    SHA1

    2ffd8ce8eff5c09b65537bfce6c5356a77e5c7cf

    SHA256

    6ae741c8539739c840aca6c82d9743b5e937d875121626317a0252a98b6c23c5

    SHA512

    fd0df2272e0617ef725b7511c9bcd4b8d78b0a07fcf25fd01d710598ef7663a6ac8198a93cc17da1c69c25acf568ca39072b5bc2d9f934f3619117b59e787530