Analysis

  • max time kernel
    2633204s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 18:23

General

  • Target

    65dc204714bcf038b69d967fab8d70aa6b4e0f6efb87671fb9d1b94514144eab.apk

  • Size

    7.3MB

  • MD5

    25a9da012bd49b232038b440dcb7155f

  • SHA1

    e545520dfedf622926f2f6ea27f4203d01bf03e2

  • SHA256

    65dc204714bcf038b69d967fab8d70aa6b4e0f6efb87671fb9d1b94514144eab

  • SHA512

    dc998e4b12f6594aed88e3df72158605ec7f0ed58d424138a291b3e2621e5040f85542806f020c057fa9c65b60add01d5e4d5ce4f66eb72fa2923d4dbc86487e

  • SSDEEP

    196608:QfzXouAWoKNm6m1YTUCH59kzjMVfhK1J7LqZ2LME2:SXjQ6m6T9ZiMVfhgJ7CJv

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Checks the presence of a debugger
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs

Processes

  • com.vidangel
    1⤵
    • Acquires the wake lock
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:4249

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.vidangel/databases/google_app_measurement_local.db

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/data/com.vidangel/databases/google_app_measurement_local.db-journal

          Filesize

          512B

          MD5

          4355b936cced926c989816e1cb27571b

          SHA1

          b05b3adf77d08d864b8daffaa5a923edf097b0eb

          SHA256

          41a5119b56f3f781ad374b1d77520ea7b1a3c9d5a0053bd5a1b28c843c9410cf

          SHA512

          325f89458473e6e8e16b3afb7d6f6ffea77b83bcb8ff436b9c960f55d62ca7158abca0dbd18b18597a858f41645b7f82688974c2eb498a27afd5da2a165d67e7

        • /data/data/com.vidangel/databases/google_app_measurement_local.db-wal

          Filesize

          20KB

          MD5

          a5d6b9c60551506bf41a7bada2c100b4

          SHA1

          3c1ea04f13637376f92a6493af2285b265e60f6d

          SHA256

          e250a79eddafd8e2f91ce55828d2ec15150c49ca5b231ff2ee4982c4e7fc0b97

          SHA512

          bdd930e7cb7ed2245924c54207878357d5fc454f2d18c51890ea20d4251c41f43feccb00fef23cc7c32128502f6f1448dee28cb44fdde9691999ab276cf2db17

        • /data/data/com.vidangel/databases/google_app_measurement_local.db-wal

          Filesize

          4KB

          MD5

          8f9d6ea73cd8d93da7e65ae7b5d7e9ea

          SHA1

          24750a2e94204d2495a92fe76ba9c71933072f56

          SHA256

          3158cf033934a8e0ec0c66cb28a760c5f6f9b4870cab7e65efe765d0d8f40982

          SHA512

          fe3d1a285b025d40b4d1232822ac8bbd6537940af1208cfe49ecb7ab28abff8f0b85112c78d7c09f9e51ff766d2c35801b3bdaae27c7e31fc1cbf9fa76499d43

        • /data/data/com.vidangel/databases/mixpanel

          Filesize

          28KB

          MD5

          6e9ca29e3c044d736eeb7992ea018163

          SHA1

          8b59b1a5ba0d52c9e6215dacb19fa77ce97646d6

          SHA256

          56b3be3809729739a3615b3c018c21ec0e977e53e531f42524ce6577360a34b3

          SHA512

          9cc6bcf45b76359372fe1d2f67a5fe2ff90e8cb42070f1c547b398f9555a8dd278fd4d374d3aa1a3d52433d1e23d56e992fcbfb93fb59af6c012878b5f9b7bc9

        • /data/data/com.vidangel/databases/mixpanel

          Filesize

          28KB

          MD5

          c3db527cd1f616aa2994f315a11ed7d8

          SHA1

          4b346b3ea6396301119e9441469feb1a8112323a

          SHA256

          cead145121adf043450199025d9c1abe5fd5a4199fc9c228ec7082d644609c4b

          SHA512

          d703abf4bccc60dcd3063ffadbc7f8b606084b885b3f23769469e6c9921c5e4251226a4d6acfad7f1ca67ca6289ad9da51355c219d460bbf3cd1cac932b3d1cc

        • /data/data/com.vidangel/databases/mixpanel-journal

          Filesize

          512B

          MD5

          5d89c245ec9f6025983c66fae2fbf999

          SHA1

          dfa92bf45c1d6b0f7bfd9da57ec7bcdd07a950e4

          SHA256

          8818c7c40a8948dcd35f2400ab04d4e7252f722bbf9588196024ebef178a138d

          SHA512

          68479916e821990bef09e2aea2ccfdf54fb2244d087e246126c4135febe96c5a0d43fb04ffbc3e50e1835da087cb657d575c17bbef36bdc70a9c129ddf2668d9

        • /data/data/com.vidangel/databases/mixpanel-shm

          Filesize

          28KB

          MD5

          cf845a781c107ec1346e849c9dd1b7e8

          SHA1

          b44ccc7f7d519352422e59ee8b0bdbac881768a7

          SHA256

          18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

          SHA512

          4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

        • /data/data/com.vidangel/databases/mixpanel-wal

          Filesize

          12KB

          MD5

          96ae58e4fec58d23510419a6f7f53010

          SHA1

          a7d803442bc779085f14efb2c1ddbbd58e330280

          SHA256

          b235aa4c41612e9f02b05337f7b75a71ac926c68ffff12a0018fd6bf310274f3

          SHA512

          fc574d7cf00a9570af140b121c7a4ba748caee4d37b9ed1a689863bed9128a16b1d73fd005247e366c7125642053b83d78fc84b9256df556e6f9126c1481aa24

        • /data/data/com.vidangel/databases/mixpanel-wal

          Filesize

          40KB

          MD5

          30ed932d0e3ae9432aca4ddab17472d8

          SHA1

          81bef29a30b40b3b277e0987102cf725c4a07035

          SHA256

          e8ae3e6aabf1b79d937fca9370cd99b7acd7575e13a48b093db99663c0db3527

          SHA512

          0baf7fed6f06069d2952791f973b9d7c4cbe7b4b5033b8d7721188985a105de441e4232ca751b77274f0dda4c79ee880805b9eb2dbbf0911d313bed313d360f5

        • /data/data/com.vidangel/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65886F3E0232-0001-1099-D45ED09EBC5BBeginSession.cls_temp

          Filesize

          79B

          MD5

          397ff9489abe05066bc30b84c2ea5c98

          SHA1

          ab8ea013a2ece40a4b1b04274248eeec24bd4706

          SHA256

          a2bdc14c2d6171729c2be2d436dfb720d5c52d80a4b3e2841706376992c6cccf

          SHA512

          5add8cfc6e55f06117a684031ee321dd38810cc1cc927aab53b233b6f2591eca9282badd8a06361bf1d99476896ff06a79699a4f7d0bb46e9efe112ada52eec6

        • /data/data/com.vidangel/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65886F3E0232-0001-1099-D45ED09EBC5BSessionApp.cls_temp

          Filesize

          113B

          MD5

          7cd0cfc9fc4d48309aed11179bf31456

          SHA1

          af4500c289aa772b744848ebc17c1366023d9435

          SHA256

          4d3d5e332478648c0d551da062604e01987dbd6391a5104c000282cd2055009b

          SHA512

          579fd0ed57c379bbef291cf7613814f800148aea97bcea851c515c87d60d16d2b21454b8566763558fc5763930f7fcfb7b5a8fd493699ce461a669dfeb8ad98b

        • /data/data/com.vidangel/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65886F3E0232-0001-1099-D45ED09EBC5BSessionDevice.cls_temp

          Filesize

          131B

          MD5

          a0c4558a61c8d8b812de7a91cc54dcdd

          SHA1

          d5c8f803182dd9551f2421abeb012b2660ff852c

          SHA256

          bf15cc0aa5adc7f427a1a27001053b413fd6772801ddb92a4c65293a0a22abde

          SHA512

          11fc044af259e99fbbd3d15d4c1e5c118f4193309ca995b76503e83b75848289578c4da9b05224f1ca8b647e39f69d6e5b4e1ba75042380348aae91f6c76fc3a

        • /data/data/com.vidangel/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65886F3E0232-0001-1099-D45ED09EBC5BSessionOS.cls_temp

          Filesize

          14B

          MD5

          9b3d4522944ce6396563812bfdb92fa9

          SHA1

          6d2a6133c8f01938a48ccc77ef86ad8ca335c020

          SHA256

          d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9

          SHA512

          091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

        • /data/data/com.vidangel/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

          Filesize

          516B

          MD5

          de41da1eb869bed0c30ecbb3003fa231

          SHA1

          14b5e833fcaf4ffb53024bb7f6942f5c8ef8ed1f

          SHA256

          6b44f37b1e62185973c0b559254e8e2da0c0d667bf1184787e5c1ec70f51704b

          SHA512

          d8fffeb27215782d1ff6a32c168dd895388b86d7c6c973106c8830e1e91d14142c3710cfe353e27579a86debdefbd05aa9f5977cf4e621c1963e8aed85b79896

        • /data/data/com.vidangel/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

          Filesize

          1KB

          MD5

          7188456eaa41724879875e1e9541be1a

          SHA1

          23f402641f3bf2ae0e713b546dfb36d9d5a76668

          SHA256

          281e9973b21fe5b120bd55739d104d6530b8a53399bcc0f2c4fb480e6d254696

          SHA512

          a4233a8695bc49969779eb9ae8cb85f6dd922d5035f484ffa758b7777a49f0e59ebd5b513c803b5f9d844702dd9308a4c88b37ae03981ecfeb2ebdf969e67a7e

        • /data/data/com.vidangel/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

          Filesize

          16B

          MD5

          c33583fae4e0b61cde1c5b9227963237

          SHA1

          fe2ebe4d27469af1460f7e852031a04208ef629b

          SHA256

          35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

          SHA512

          fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

        • /data/data/com.vidangel/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_5e9d33b8-ccdf-4ed1-a8f3-9a4dbbd86c61_1703440192840.tap

          Filesize

          397B

          MD5

          65a81b92fbb049e8c2804718bfdb8922

          SHA1

          7f54d5c4d4895f7f1968a57b82c8f75a4247264d

          SHA256

          8e872ed971f100bf45336b47580e00935e399006b533e28ca9b0d228d17969ac

          SHA512

          c84421b1d0f8e04f76c398de8a0ef28ba408516995a311c662da04a13a4b1e3fa7f6aec296561c61474b5cea741f328b0f18a9814e73d0ab4b7ad0d671239a51