Analysis

  • max time kernel
    2679036s
  • max time network
    164s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 19:09

General

  • Target

    72e3db55d13923516c874ad8e27a30b8e06a964ca7a70443c56234f09b39094f.apk

  • Size

    16.0MB

  • MD5

    8a7297ba912a6ced9ebd71688eadbf30

  • SHA1

    1f5295813d8da9579d8e05cef4b858f21b601a1e

  • SHA256

    72e3db55d13923516c874ad8e27a30b8e06a964ca7a70443c56234f09b39094f

  • SHA512

    5a4df8d18df1238587c77a5a0170771bdea1b0f454bb0c4534cf27c3979a2cb63660175bb7772f5bde98982457d1149e7e2490ed8e7b7cad80494802a0ce5ba2

  • SSDEEP

    393216:yf0YUtNuYwbvbaSafQ0Wejue+95sweOsjIYPah:y9GNujbDaS4WeaeI5sqCo

Score
7/10

Malware Config

Signatures

  • Checks known Qemu pipes. 2 IoCs

    Checks for known pipes used by the Android emulator to communicate with the host.

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Acquires the wake lock 1 IoCs
  • Checks the presence of a debugger

Processes

  • com.apkpure.aegon
    1⤵
    • Checks known Qemu pipes.
    • Loads dropped Dex/Jar
    • Acquires the wake lock
    PID:4261
  • com.apkpure.aegon:accessibility
    1⤵
      PID:4464

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.apkpure.aegon/databases/StartApp-d6864f2502af7851-journal

      Filesize

      512B

      MD5

      58cd51270278521f69373aa20603180a

      SHA1

      91be380d01aaac9fa3d213233c683212b2d93bc0

      SHA256

      1e3f4dc2e720317f803a41911514817e11d5dee75e053a9e57968ce480eeec79

      SHA512

      95f38a76aae9452f61bde65bdcdfca53ff25c6c24ec04dd666795e851234d8bbf646e13f9e46ba962ed56370bbcc6aa7703cd9e125d2fb96d76e67f381761cd8

    • /data/data/com.apkpure.aegon/databases/StartApp-d6864f2502af7851-wal

      Filesize

      28KB

      MD5

      478587e81aefd848ce0c50fca6ca50d5

      SHA1

      4de4cf4c3890a884101b01ef7b7f323b49ceb1a2

      SHA256

      d56cddbc2d738fb8985a57a406120240a3f8cc8ac688225501df3801bc8e10be

      SHA512

      4ffbc687b02c6f3b53b48178f1ce5f9cc0fd015e5302fc9c7a78fcc49f6c05ce0a30d83e188caf525ded41e8637c5a22b48e776ef1e9a3969241e538b1667fe1

    • /data/data/com.apkpure.aegon/databases/com.google.android.datatransport.events

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.apkpure.aegon/databases/com.google.android.datatransport.events-journal

      Filesize

      512B

      MD5

      1a6a35c1082399ae3654f675e1702ee6

      SHA1

      d58f8c1aeb60e5abc2266cd930abe224a6a24e7f

      SHA256

      18c2f08c43558aa3a3d7ac4f3e2ed1b3d8026f4bd013792bc611cf4bf1e1b9de

      SHA512

      fa05815e605c35244a439c9a73f0a43a7478ea8c7573eda5cfb4be195975a9a28680fd42a5416dc452522dcf2e46ca3216e8a886eb186af890514b66bfba9ce7

    • /data/data/com.apkpure.aegon/databases/com.google.android.datatransport.events-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /data/data/com.apkpure.aegon/databases/com.google.android.datatransport.events-wal

      Filesize

      52KB

      MD5

      3085b2c97793bfc163e38729aad96b9c

      SHA1

      d836f863913fa00d6a2c791046662d052c197b3e

      SHA256

      9e3ce095791517439828b911a660a7e0e826cc4891b5e52d720563f40c383ed1

      SHA512

      42e7c5e92ec6fcaaa9582ba1a2d4416acc01cf9ea8816cfd35c3ec8209851bfea8d56142635ed358eea1bd73e6823d00ed0728212131d546cf7eb37938ba80f3

    • /data/data/com.apkpure.aegon/databases/downloads.db-journal

      Filesize

      52KB

      MD5

      32225051cfd082a4e22ef80ad20c954c

      SHA1

      3a0ca111783464e6b348008c14391e612bde4b3b

      SHA256

      ed9e90d3d671158515f3abbf82681f45aef70597fbeb38eb5fd10ee0e5c62dcb

      SHA512

      65380569be8d4ea16ae43bbd402f374d6d11a851c54f48c0f44825c207b16a8eff4ec47534906b5239d6990b788b43ec98aaefffacf9c4ae8d8e090d92a8abeb

    • /data/data/com.apkpure.aegon/databases/downloads.db-shm

      Filesize

      28KB

      MD5

      c5404d10fb3761b90c32c871544758c8

      SHA1

      02c71ecfe066f18d16859cdb0ad85546793ed5a9

      SHA256

      28314cc5e655ac807b6511baed654e6f12bb22540f28516230b87b9ce552f9ef

      SHA512

      e91fea3685abf46fffeae79a48ed51f33667ec681c53dcfaf1bfa1c085161de213e3adcb4e306249ee37806b8a49a86e99ec1ce467ce17e533efb597c519a892

    • /data/data/com.apkpure.aegon/databases/downloads.db-wal

      Filesize

      16KB

      MD5

      00ffe9f431c871e2e4a3faba2b4358a3

      SHA1

      fbb4d4838efa414b7b29d6e06fab1fec5130db9d

      SHA256

      9dc3df902d46f16951e7e63e7ce16a623a2ffcfc54e05702ace55c436d88f25b

      SHA512

      70e4cdb03994fffd809d11b9ad7af45482cef4a03b390e0db6af6b4f9e881787493d387a40c3bcf1b26203b87f40e7a90d972beb3a2595cd6a4d3a8677b136f9

    • /data/data/com.apkpure.aegon/databases/google_analytics_v4.db-journal

      Filesize

      4KB

      MD5

      90cd3c381278347f2d22dbf6f0415a9a

      SHA1

      208fbf81c80f87120a895e5e6534144e33d73ca3

      SHA256

      528b7c896181983fd5e7d159b84b63cf50f0936167a8c606ea1b421d269626ab

      SHA512

      986978e9f411a31eab565b34c2a81fc68471ba6f79403a15bdd166da298c94193da7932f963ed2d65214c9589e2a4039c73598679035187fe63f43a8683c1468

    • /data/data/com.apkpure.aegon/databases/google_analytics_v4.db-wal

      Filesize

      52KB

      MD5

      076891b8e8d089808eea5557125203a4

      SHA1

      0ddb5b3a8bda2738d5d644d491966f292fd9fa26

      SHA256

      40293cb532e48555213ed0b4e25e7c2a2252d11a98c5af7e9a883b580ba39171

      SHA512

      f0b28fef7cc4d081f8222c0db6049c000a8a423059985499db6482b800891389b932d767de74637fe3152172373b654d4f317a4e66bd33fec2b5c264e789c785

    • /data/data/com.apkpure.aegon/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      a8d9e7edf0a3a364afae27ffdb7826f4

      SHA1

      e8fb027a8245d8b75192233142450c1effdd34bf

      SHA256

      6029e19c0b0ace8f009b198c6a5ad330839a2cebb49e203c7a6df58b6a7d9f02

      SHA512

      3cd330a16832de8ed6bcb14cc1cf791b951dc5445b7faa6cefc23995d2292166187ab9e0ed51f4a317c38dbd21294c3171da6ad7e1d334e3bcf654b695207601

    • /data/data/com.apkpure.aegon/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      8fe31fae269d23533496f187c5bf2281

      SHA1

      a4db01a223e63e5d76108c13e458b809995fb2eb

      SHA256

      cb636a67da0f668b367262b99c7781bb4fe16d8fb8134e546f8ad427134aa764

      SHA512

      db1a9495ee27a0bf52694f0cf898c7ce2e4deeeb3ea4accb9e909b83e2c0773567dfc7481570df4d44761f62c48f15af4fad941419a03e9ad4a11ed5a26d3ad3

    • /data/data/com.apkpure.aegon/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      3d6246f071558372769df616977c5c44

      SHA1

      168bf604ca5436edd41caca715159b647af6e098

      SHA256

      27337ef4ff123d43f3b1a217e86df05b9b968e4cdfa8486cda6321cb64f8d2bb

      SHA512

      ee5b38c6d7725ee166ba62b46eaf4d595d40b581d4e4a4b8a7fbc9d4a2691cb7524afc3216feb5fea812c516b42eafb6c5269b47749a61f529ee37e478fbd0f7

    • /data/data/com.apkpure.aegon/databases/google_app_measurement_local.db-wal

      Filesize

      20KB

      MD5

      edd8e32b118492dc43126a511760a42f

      SHA1

      004766716f0c075213ff7da4559b2e196edd375e

      SHA256

      ed2e8ff27cc85e21753411497e5fb9821ba5e75381428e009e99bc366fde6678

      SHA512

      fa0f79019a70bc18a185604405bef3b8816625b651ccf625cf57d73c4109b0d911751a3bdc469dc1758424cf847a4d8c585d5418df796be4a9749a5e2790adee

    • /data/data/com.apkpure.aegon/files/.com.google.firebase.crashlytics/6589226E03D9-0001-10A5-CCC6148B4DAEBeginSession.cls_temp

      Filesize

      75B

      MD5

      b05df679ef948056404f662f0a7630e2

      SHA1

      2e6dd758f2af8ef80bd0b6c23fa3dcb6183f4abe

      SHA256

      59f719a369eafba9233a902079b086473b2bbddaeada3a3e4251583ec349efa8

      SHA512

      6c2a8c104192ef66959807f5b93652c4815c573dfdd673c4405ce4a7b2742a79d5f827ee16ddf8edf8ada426c1ab7912aa43278ae638e9f54f4ed74c0e242731

    • /data/data/com.apkpure.aegon/files/.com.google.firebase.crashlytics/6589226E03D9-0001-10A5-CCC6148B4DAESessionApp.cls_temp

      Filesize

      75B

      MD5

      359c4f0c747c406d105af615a790c96c

      SHA1

      726b0c435b5d93b0f0feac24628dd2c84ead674c

      SHA256

      c2fa9ef97b5efe4864185027e4a0a7f30e79888ae16945b296bff38dfb2b3259

      SHA512

      7923fdd30333616797092cb2d5b1e62f8802bc35c29c60ac6560ac66e70c44f625c3b54d2a89a97c0e6296ed8ae0aeb0eed5510dc4a4d5305c195abe810498b3

    • /data/data/com.apkpure.aegon/files/.com.google.firebase.crashlytics/6589226E03D9-0001-10A5-CCC6148B4DAESessionDevice.cls_temp

      Filesize

      48B

      MD5

      589e59397b14726aecc2a17b191cc00e

      SHA1

      aa5a32c16f0eeb2ab31a19e8344ed97c4d38784d

      SHA256

      30dc4b56dfa459b8766b1086514b3ee340e64589949f1382a813b22f19ae5d28

      SHA512

      83c156354683f8790d5d5df40cb1e3034bf06d08ca916ca15555f43a4399797f48b803b74928fdefa6ea6ad7dc221b3449ddc6146538c9355116691b7b481b62

    • /data/data/com.apkpure.aegon/files/.com.google.firebase.crashlytics/6589226E03D9-0001-10A5-CCC6148B4DAESessionOS.cls_temp

      Filesize

      14B

      MD5

      9b3d4522944ce6396563812bfdb92fa9

      SHA1

      6d2a6133c8f01938a48ccc77ef86ad8ca335c020

      SHA256

      d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9

      SHA512

      091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

    • /data/data/com.apkpure.aegon/files/.com.google.firebase.crashlytics/report-persistence/sessions/6589226E03D9000110A5CCC6148B4DAE/report

      Filesize

      748B

      MD5

      f3e739391817b2a5ad9e49fd8b9e4ece

      SHA1

      9173d44ec53d162df9f863e13fd469f538af2c04

      SHA256

      c06d7864d35cf517b054d512162cd767fbed263e0b4278424492d573e730ab6d

      SHA512

      92a8f5211828900e6cebe4a755248208ece26bbd830224e27034db3bc651124980a9e025ed12b4541575b5023c1df618aff1cd1fbdb3461005689bd64e764c41

    • /data/data/com.apkpure.aegon/files/PersistedInstallation275253545549015700tmp

      Filesize

      90B

      MD5

      043b2dad21aba8fffe820f8168dd40cc

      SHA1

      4b95d288a62d31ac70cc6767dcec661505da2cef

      SHA256

      2ae71161614a5a885faf551d66a36f61456fafb6f21eb5eb18e556fb5d8905b3

      SHA512

      241aa16f2f411607250b0122b5f14f698ac15a883ccf31b1d252c725fed9ba3965a08a7d086ebb07b536cc282420983b0bc6b1c745aa742af7a8b4a3af7a4052

    • /data/data/com.apkpure.aegon/files/PersistedInstallation5385480091459360706tmp

      Filesize

      562B

      MD5

      7b68a1e7b60ed985e061ea8601202c8e

      SHA1

      a3b9dfc5308b1e46310b2597b3750740044e9928

      SHA256

      9c1b35def09a4abfb3f9c9b18dbf2761ad01ca71a81a78889561cb93550f58f3

      SHA512

      e1b35d59dfffdb9ddb62e594d768d98a3aeb814965cdb3c333626359764a1280e5da9903d1bb1f7d3fea6118f054a5c50a19ad5f23ad83aa63dc1df5ae7626fd

    • /data/data/com.apkpure.aegon/files/com.apkpure.aegon_c/commainw2c6c7m5i6an9.

      Filesize

      34KB

      MD5

      6112e8d2c991b471d090faea252a53af

      SHA1

      ccf8624ac3236068bf15a46d3f1335ac7b43992d

      SHA256

      771f57cf94d39e45775756d6b9e1f5db47be9abe2d9c735a7fcc8a1c9c4319ed

      SHA512

      416f1290a6162acd6962be40fdbcd4347e5b5e9deeae74f994c399cddaa0e78e40351e8ea7021c2338804beb8d3e4731f5c113357491a6dc355d397b5a3ad762

    • /data/user/0/com.apkpure.aegon/files/com.apkpure.aegon_c/commainw2c6c7m5i6an9.

      Filesize

      78KB

      MD5

      31e49ac1902b415e6716bc3fb048f381

      SHA1

      49e5d0883a1ff5147eadc0d8ec46299358ebffcc

      SHA256

      ed2d91e9d6429ebf0371a98f2faecdc755b766faa4e70b6fd9746853c9b69234

      SHA512

      b26c4d314da292dbb5f1869f1f49ee7b70d004826ac2301d6e9879af9d286295b67de39da805eec71de597c8214c0b11ad3b79cf4be9d46468904e40860c8afa