56ed584bfa3ca7c3aca476bf4aaeaf72d76d665d0f6908bc1a499abb5709cf54

Analysis

max time kernel
2570958s
max time network
157s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
23-12-2023 17:24

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

56ed584bfa3ca7c3aca476bf4aaeaf72d76d665d0f6908bc1a499abb5709cf54.apk
Size

20.0MB
MD5

19b4cbda67009cfd4fe1d1b691c01c63
SHA1

385c665dbf5e6598d63f9c2febaae82978d86fe3
SHA256

56ed584bfa3ca7c3aca476bf4aaeaf72d76d665d0f6908bc1a499abb5709cf54
SHA512

7dc622b503609a346538b902c386abfa19479a4f0b865bfcfb24f090ad434b611328a0f896deaf58c6628fc52401e11b99978e8e352c9bb22b21529a715d22be
SSDEEP

393216:L6vkiz56L8jqLUamqd3rPhaAWMNMv8gz8XpwhfeWEdv4tJRxJQ7i:L6c/RUPqRjhafMOvh8ZkMYNn

Score

6^/10

evasion

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.sfapps.power

Looks up external IP address via web service 1 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
4	api.ipify.org

Checks the presence of a debugger
evasion

com.sfapps.power
1⤵
- Acquires the wake lock
PID:4273

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.sfapps.power/databases/google_app_measurement_local.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.sfapps.power/databases/google_app_measurement_local.db

Filesize
16KB

MD5
2879fe7c30bb794af59020f843ff416e

SHA1
788a24c9dfbf9483c87ae1602f87570b8275ce78

SHA256
22e0ca13a977ae7558de764b49e881db3e54793330ed4d2a190fd687736b1695

SHA512
54f4f0a9e0be803401d54595759d6caf9379d666eed6464eb01178c8c908dc66de81df20844e9496d9042ada21238823ad506e53cd82c202a368d5f41320efaf

Download Submit
/data/data/com.sfapps.power/databases/google_app_measurement_local.db

Filesize
16KB

MD5
6801afb24ecb080b91f36693182b6554

SHA1
f554f7b1f42ff03d01e3e0e2d1a82c8f500c89cf

SHA256
423b7e6d259499b83cdd55639898ca5c8ed760426dd699e35d846c0439d834d8

SHA512
3ff8f53cd346862136a6d58c809a298341eb86b486035167b1bb7fe55c25654cdf2802dcf73d0839b39d1934749907b7c3682b988facf3a1467149cc94cb231a

Download Submit
/data/data/com.sfapps.power/databases/google_app_measurement_local.db

Filesize
16KB

MD5
198d82e8cfa32ccc6f5311a3255e68df

SHA1
99785a725dfc7d856a89f8c56f5f6e40d766447b

SHA256
b363a67566ce57571300a98a7d6f4589ecb0375aeb1865e29b05ea4ca838f0b4

SHA512
8dd99622ea950047efecab2c474e8c834b02ddf01fb4862d35efc4626708188fd6074dae3741f387972fcd5aebcf2a56efe18139e6537a7ec94232d0aaae088f

Download Submit
/data/data/com.sfapps.power/databases/google_app_measurement_local.db

Filesize
16KB

MD5
2a216711fadc4c85b4eeadd00cacc5d4

SHA1
d79c7557214e3d87ea28f11d3bd2285a9e4a1778

SHA256
c15579fc97acd379f9c69d0eec7ecb74adaf4e5714321fbbda64b0419f2fda3a

SHA512
93abb55d53f221d5ae9ffc699b26fc9bdf14a54488b99a04653151a164a44032182f808b798a81689d4e2e1e15435552d5552bb40476b0aa2078a7d2d8f5e7cc

Download Submit
/data/data/com.sfapps.power/databases/google_app_measurement_local.db

Filesize
16KB

MD5
ea0835cfa1b811d03298edac842492f3

SHA1
8b618fc9560fe75f5d44d1f8fa300603a66a48f2

SHA256
82565ae90a947e3300eb46c88a7ab202571b7cc7dc8f5ec36fc55f2aeb5eeec5

SHA512
8c6fe880f1be55848423c5c5e5bd2dde3c203f07b985885ea394943127b3e205f69a875d959f6f9577c5ac60f72d43121e3a90b7e47f69a6642ab91a277d745c

Download Submit
/data/data/com.sfapps.power/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
1f5b2aecd979ef710871fcca7dfd50f9

SHA1
096022ec9d190f4bfacd0861623974bdb046717e

SHA256
b8d4ad5ec3f154257e8404ca0af01e7400ad816edf2c900f8716b85e95624f5b

SHA512
124d22c5d7ad5faa2f0a349a3fc1c137b823af0b5fc631df189a354b6da87c0c0ce4c91c11d189d683ad1224bbebf05e1d39f9c55312b9dc1ce1de4c61c2fbdb

Download Submit
/data/data/com.sfapps.power/databases/google_app_measurement_local.db-wal

Filesize
20KB

MD5
6d0a11c7776b1b78cf078714067bbfa9

SHA1
49de28e3abd3d00dd941ec8adfcbdbcb917634e2

SHA256
7b334b7595efd295096ba891da6342222f9a352c49426e4fd56412d913e2f9da

SHA512
8ab25868d733f81d4f35c0a74b0c04c1dd98e4aee232283aeb493bd006fb87cfe567c19cba77e4f9ccd07d0f4db6e4eb938f921352e4aceaa0a805cde7448fe2

Download Submit
/data/data/com.sfapps.power/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
2e34f1857aff0a024e0ed27a66b72c54

SHA1
3f34096c02531c45d334653da831acb46a5dadca

SHA256
3445a47b6add30465aa6da55eb79e94d671538a8a9cd403fee66dc58aec7c25f

SHA512
e3536342f472c44ab5651e11cc99a6cebf71fcf18387e5165e9fd809227cfb0890cacd2b05fd5e1c33eb812729c77134aa2c272ebc640044004162eb2136851b

Download Submit
/data/data/com.sfapps.power/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
a51d196d5b9c86321ea3f53dd0d0a546

SHA1
93eaa5acf9cc9e9dd3c7992daceecd51fd7b7a87

SHA256
cbe5fc1296c658ef35d554bad4b8aa073bdb64aa6b8de196d6f87ffb6f543dad

SHA512
2be5b828548c8773678c079f85f6a7020b82f4606903e816c754221e1a614a579ce67cf7c25f7bfaf08daa7fb5aabe4f1db204381d651b442f33718860641bb4

Download Submit
/data/data/com.sfapps.power/databases/google_app_measurement_local.db-wal

Filesize
3KB

MD5
5e5754e3c6d437deebe323a9b5f64165

SHA1
146e05d5406cbffb3befa07717751ceb7746c8bc

SHA256
5aeca5c70d9d21d58097ea68497ca1e13a2717e1b36267869775bb01a7ed874c

SHA512
24f7579187e4cb3b10bc83d57726fa58720e5f57961f7be81ada17769f54092231b526d695f32525ae1e18e5fd86d26e1a2175ab63215c86a664d909478e53cc

Download Submit
/data/data/com.sfapps.power/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
9781827daf0d79162b2166f8ddf60578

SHA1
4406cc1f0bc3fff96e21b644bf6760390556e6d2

SHA256
946dcdf7351668487095a079e0db7067e202ef931b5cccb683e49075e5edfcae

SHA512
e6b6e17f0bfc904ce575c7105cfe2176f2ad330e567d8a82f9cc0561998a9c170ed345ef1019cb9c8881c511044f0cbb0a6c3cc5b5d3ab4d38171899a4f08ca0

Download Submit
/data/data/com.sfapps.power/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
e4159c60e3b924b9efa3995e753e5726

SHA1
b9232af3effa2125eb33c9ae6cfc607438513e7d

SHA256
8d505f0369b2409c9892cfb80ec3a9a7e8eb54f27cac1e73eac1b96c515e7952

SHA512
1e20a823335304594960cf8b9937572ba383eea40d2f24cc7208f3f0cb8839aa05a3962bd098d0a264c3db6192a13e79b907a9d7097819bddfdaea378c03e338

Download Submit
/data/data/com.sfapps.power/files/assets/injector/onContextReady.js

Filesize
11KB

MD5
7ccb316b87b58620cf58f80370115b30

SHA1
517944cc8169740bcd3e1fde64529b0a18b2914c

SHA256
5b279146e0e2423d18582147f7c8bf2185fa320f6f7c185d879818de776977bf

SHA512
1e47d6c29b46b04baab880b03ef330b54bf37f9510ef936228bfc8c85124bc4bf4dbca201b82fda20a005abd6c04b1b85f2217dfa5424c044d5c6db5e5360e56

Download Submit
/data/data/com.sfapps.power/files/assets/lib/a_prototypes.js

Filesize
2KB

MD5
761bbbb1f87d3e692c7e9cc6a8ea7bc2

SHA1
b20aba66d258246ee3fb6f44cf68db7b721d0de0

SHA256
518159669757651c8a3821d26601e04cd6f5632d79b6268322a7d5fa5274691d

SHA512
daec1242c3f25c91894c69cdb495c0fb452b3ff54552521c3a1b89b06f271b23fbe9b2079a606de2579ca832bf3a65ab7b85a9d26c3997027228893a009bfd2f

Download Submit
/data/data/com.sfapps.power/files/assets/lib/bridge_mapping.js

Filesize
1KB

MD5
3916ca2f7fd57b87dc07efd324c9d7f6

SHA1
ceceac514f9e43c4b4e211f36cfc43c7d4eb9d59

SHA256
dc959aab48bf26d3f89e58d1feb01e8f84d72daae594795d7679c8e0875b606e

SHA512
e51d4268fa7246df23ed878d53d54cda60704d127feb219fac88a746e7d78e9f67025d945f83264a922d1d39114cd84ab42e09f1a0fcedb2421deed7c08dd1e5

Download Submit
/data/data/com.sfapps.power/files/assets/lib/jquery-1.9.1-min-noConflict.js

Filesize
110KB

MD5
0a0ee9139a46328578b7bbcf535dc5ef

SHA1
021e0d5217ae405358cc2d1779ed7d50786d9d8d

SHA256
df612e17abcc8e73b094f65c9226f4a1d8c4ce2b3f05e6c2eab0c5a2c23ab37f

SHA512
0255ebba0ef723c7f03f732a6df65c35141ef88e6798a7643a52a36f746ff7276eadb912bbba7c1fa094d2bcf1de007d61f0b2a7561584a184b0c0170f97217d

Download Submit
/data/data/com.sfapps.power/files/assets/script/about.bookmarks.conf.json

Filesize
128B

MD5
266c626e8e718ec68aa4d76789a79e1e

SHA1
cbf7c9c87d097e7aa47454313ea25466da2dfeac

SHA256
345a06dfff72263a148b520d1fce0afcc33fab605700fc97afcf194f73453905

SHA512
b33fafbe8045ba9779ba700c7066c84dce8fbb8285e9e3fdc8304e5d620411f16f4148cafbaff878966229de72ff617d14880a75d0762c51f24b7b9463d2deea

Download Submit
/data/data/com.sfapps.power/files/assets/script/about.bookmarks_bookmarks.css

Filesize
2KB

MD5
e02b6f2a1242688ab8a37af04cc607af

SHA1
9cd2aafb134add8a343ac3555cff8a9506083470

SHA256
5a9223722ea54c69b8fa1e998a1c8ac635791540e7b96069738a1ea4513dab28

SHA512
de0dc24a4dff6cc2497d9d312555e8a7a6607cc229b3df26f1eb21aa24b8c2d4cbdcc1dffaf2ed382227dca515c28cbb4bc252ec9f6fedfc8673916c75aa8073

Download Submit
/data/data/com.sfapps.power/files/assets/script/about.bookmarks_bookmarks.js

Filesize
6KB

MD5
273c45aa933d5ed1b219e0f04ce77cda

SHA1
30ad17a55be8661398586b6bdbe520822d9c0f97

SHA256
da263f3ac590058ecd0d138703c3c3b19edcda5a43675058f0d7a5efc29035b3

SHA512
0fc309729a192b45f7f93308691bc70b5a4f0fb3341c7e529ef03c2aea579fa2d2fc6907c3ea61b936800e753d1d0510977cfe1ef8ab51d81aa89fe81d1c7afb

Download Submit
/data/data/com.sfapps.power/files/assets/script/desktop.facebook.com.conf.json

Filesize
120B

MD5
24a0fdbbc370452a8c5e0e5a2ece5ead

SHA1
b1c3f35075af88821a473927f2c03e1409aadeda

SHA256
9b73acb7a33c039c8978d1328d1a2485498a8d9bff4e0a70f01c2171409bc012

SHA512
f5b77b8168c45b6cc1b8af99ce6733c23e1713470f2ec2309c7b8062f8741cd111a520f1e55bf1b19b4cf43aa2aadcea8587330388105593724f1980c0edc4c8

Download Submit
/data/data/com.sfapps.power/files/assets/script/desktop.facebook.com_base.css

Filesize
1KB

MD5
b76b999611fc394af2ed2aa091380599

SHA1
9e689ac5cf18d76819c7049041a7d07a4661c953

SHA256
398c8e873388fa9e0edf25483e120d9613730f4ea055205d4a46502808740ed3

SHA512
b1f6dd887ce28516f6e333bd9729b5baa0670e25e85237c4c76fa748d9c102517d511e9e5c97a5807cd50420744af932d8c2e00dd946d7e2001f8cd949d46acc

Download Submit
/data/data/com.sfapps.power/files/assets/script/desktop.facebook.com_base.js

Filesize
317B

MD5
f2efd56959e91ccd60c7b8e7b0cbd242

SHA1
0471d2bbafb5ce6050068efd88793b4981159b56

SHA256
c1a9cb8a01ee2d4e184864e55487e470de11f90c940e57bfe09d9588d3f9a926

SHA512
4e6181359dcd8a45f6a6213acc00f3023778dda7858e44e7e663a86c0de053f56d10846837660785726f1ae671f42cf1e5900eea8f4e67daeea1ffd713e40e0f

Download Submit
/data/data/com.sfapps.power/files/assets/script/facebook.com.conf.json

Filesize
573B

MD5
ff75a0833eccf3460c92083216ae30d3

SHA1
8607a68618d6fd4897444bd40e8dd62785fe9674

SHA256
746c861c8074468a1c39d80c956f0ba40614af4c77b779e0f6b9153dfd137e48

SHA512
dcb576782a2c80ac434b0530bbd988058460deb979dded831fb1798a23a93e410eaae09270a2f3a811f3365842f57731f8da16294e139a40cae52fd1ae3fd403

Download Submit
/data/data/com.sfapps.power/files/assets/script/facebook.com_account.lib.js

Filesize
7KB

MD5
ff25bf17c6fbdfe9ffbbf508955ec756

SHA1
40f7a76ab76f2b0b6aa46558289a91ed60d3d9db

SHA256
cbefadf38ae46c62b6fc42f5de04f3657cf311c55d204b53be641cf8fb532512

SHA512
c2a130272dca28d31bf01d70d513a0bd8a992b8142442ce847e2393d993ff22772b92f56216a82c077d6e8f1ab2206cb21e53417862695d0b789cc5ce8afad9e

Download Submit
/data/data/com.sfapps.power/files/assets/script/facebook.com_amoledmode.css

Filesize
34KB

MD5
1cc89b9132c8d5923f24473c7eae0572

SHA1
ff0c76d7308e53a56cd0d55bc7858f67559c6170

SHA256
75eead840675f6eb20b7f90dfcddbb3b0911db38d6760f51b30868615d40de41

SHA512
8465b016c1c928510c0a230c6ea915b64a692c9258c5052cf02f2a7ba01866fdfb68f4660257ff16fa26ee26e22e9afc5473638cac1c1edb3a37a93059b99ea0

Download Submit
/data/data/com.sfapps.power/files/assets/script/facebook.com_article.lib.js

Filesize
15KB

MD5
35b56749f5e37575f67dc13cc47982d0

SHA1
66928f92b67703313db27c3f2cd5519b547cc1b3

SHA256
99bf8e0b01496f2074b2abca7fb4b188608829d7209657c9d63491cb4efc89f5

SHA512
223e35bfeb7591eacee9f30c99cd368af48a82f40a07580865a283d4ad6f1e41d2a1da958341e625bd5df52e67cad4de84c1a40bfd57b8b6c6f6d6a343b6fe46

Download Submit
/data/data/com.sfapps.power/files/assets/script/facebook.com_biggerfonts.css

Filesize
3KB

MD5
1f28c985e6fe4ba5f5e0658ec597314f

SHA1
9f293bf93cb9ed6495f725130f9ccdc18feef3a1

SHA256
f99bbf517a94eea852472c548ea2eef43e63b1abfd08acc4d5d83db1e9062283

SHA512
f2a1b6a10803a5da00c66e4901a15849e508052e4c23e372fe6edaa45101046c38723d993ac1fb1228c0b22003cf688a77dc2293c477d862c651849c5ebf10dd

Download Submit
/data/data/com.sfapps.power/files/assets/script/facebook.com_build_alt.css

Filesize
4KB

MD5
aa1e1aaef6ef999da895edc4123dc2b6

SHA1
f86189514fc9ecb4135db24bbcc48c544a80f806

SHA256
111a86aa29273789958c55d471a97399ed6b613d33402701c56d8c812e4150a8

SHA512
eb6f2612c10b941b86f5fc0e7ab2ddf9932289a8b844638867c168840a3d762a7860362f82c1cb7752ce5e47113b9a69f8212ba3fba81ec64ed91d3ebabd6693

Download Submit
/data/data/com.sfapps.power/files/assets/script/facebook.com_build_power.css

Filesize
2KB

MD5
e49c527788ec9a82f05da1a0e9479c5b

SHA1
706d971823737611799e18fc8648d24496071d18

SHA256
d6f5cf8c320bc221ac6218b79e176de47629b3f6a6d51b4cd477113a89453d72

SHA512
1e9332dc53fa9b572049d0cd547461b5480ddb07e75c238c12694ceea119d30761eb21b7d0b3e52d91ce9e99c7ac369a00871269a12e1f0ecf9b77d5f59aab50

Download Submit
/data/data/com.sfapps.power/files/assets/script/facebook.com_facebook.com.css

Filesize
35KB

MD5
f45a5c6913ecd28c13dc4aaae6c608fe

SHA1
e673e6ad7a3b2d56c6a346ffe5609d03d4dc2918

SHA256
81eb88f8960b6091508ef1c57464eb651bdee8c01eeda32285d98acd8b9f6fae

SHA512
cb327f04f182bfefeabb19419df95d06b58c85bdfd0630e803afa9ecdffb093095b3cc5f0e3a0fca8078742cb3c17e0d3391976da0cc9824824326c745906a24

Download Submit
/data/data/com.sfapps.power/files/default.realm

Filesize
24B

MD5
a6574431b943e0bf47642c666f3fbbe7

SHA1
79191cabd86accd903f27c523c95ef19933c64d1

SHA256
60692d3a39b5fa2c7ea60c7be7014c2069f7c0a3fedafa269addd8143ec15f6d

SHA512
c438e1cda3bce0de04a34e3f53f17f7cdd235e80c656c31e43a21b37e77dfd90de14c17a5c6719b84a14899ff41107a75790b35306c7ecb1674d6f60de9bbbef

Download Submit
/data/data/com.sfapps.power/files/default.realm.lock

Filesize
1KB

MD5
a65194ed3bebbf0025723d9cf0501dd2

SHA1
c49046ea64fef2048ec09427e9208617c7224cc7

SHA256
fd9d4474451dab9b7fd75ec1a8b263ae8a125b4a200e069d83e60f8e21fb9470

SHA512
53de43a422adbc2190ab9f720633112ddaba07f2abe190b7e2f02706a24c6d78680e6903dedee3c6a80b05192d894975f35ee620f01ae27f652b6cfca1892553

Download Submit
/data/data/com.sfapps.power/files/persisted_config

Filesize
1KB

MD5
43936074c0a8fa6e7494ebd673b5fd88

SHA1
518efa5ddb75ba3c75670ec87ff5ad2431ee1339

SHA256
a7eb618b1cb9214cf88b1e819d19869bb88884a0883ea7480d6eb2c37da5681c

SHA512
d7c9665751f956dc2d7cf15798c9d1d6f2e66879158e763998d2c2fe00a7e63d88a3d6a71e84687fec110b059defd271fa6dec49587efe1684936dedcb66a4e9

Download Submit
/data/data/com.sfapps.power/files/persisted_config

Filesize
3KB

MD5
1468b0a917bece9a83e76fcf2e237d58

SHA1
b0a41ec5ba0fbf72a8a83112265b5e08ebbdf025

SHA256
264d4dc1e0a70ad7faf9d12d9b53659d517e765ede41c324ae8832ee0dfb6f83

SHA512
caf1cc2f06f609509f687501275e8b1f2b214d1769ba0df88f0464fe0457d79bf636f03b351434bf4478bd3ab1f0cfac28bbec12106236567b9f15b68384a961

Download Submit
/data/data/com.sfapps.power/files/persisted_config

Filesize
3KB

MD5
481c37136ee47266af546b89718e57e4

SHA1
334c2b3c2c0af32e37a0fc8a8731ae32f881384b

SHA256
a07209b80ec931c1ce8b1ff7bcb7082e0b5d69c832da075da39250b2202ff807

SHA512
7a7daf167fc5fd87d04abeef9384a43164f34250eb3778bc0deaf344f02f39a343fd7b297589fa0ecd04c2752e16afd464686e953c3702672787646826db249d

Download Submit
/data/data/com.sfapps.power/no_backup/com.google.InstanceId.properties

Filesize
2KB

MD5
a2edd856b91589f61fed664162507dbd

SHA1
7cc66d0c4aba6ae69828245503c16a32e132f2d3

SHA256
302f2f1d601e189b1b0e0874de545680bba07c6bc5e4e5c54ce6fdb86ba6c39a

SHA512
23bfb8fe5f123e4b7bd5b6bae0f350257c11043a8bb9b383e965a4fa4e76213b07a998a25cfde37292e18338fc24d2e9bef98e32e21ac49c171c1928d8ef4c3a

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads