82e7ad84e72270d7ebd9c97789b53b220e8591ded8db4d51c25a5f03fd87fa7c

Analysis

max time kernel
2740326s
max time network
130s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
23/12/2023, 19:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

82e7ad84e72270d7ebd9c97789b53b220e8591ded8db4d51c25a5f03fd87fa7c.apk
Size

16.9MB
MD5

941500db3cfa8c870cef92b2eb223f26
SHA1

7bfa8f5a5b55e914560cef9ed27b7d9a6ed5947c
SHA256

82e7ad84e72270d7ebd9c97789b53b220e8591ded8db4d51c25a5f03fd87fa7c
SHA512

097afbc29a963ca09900008594eb14fc56b79dece7c9d41e3dbcd9ea9d19fbc386317d139350eac04e977a1af159236d43d66b18bdcb028746f0b2b7f26f4112
SSDEEP

393216:GP9QjalFHjHjD+dyugD+MwFrhknjmRVfLrba2TE5jE7C8II:GrDHD3+dtwqSjmbDrbtTB

Score

7^/10

evasion

Malware Config

Signatures

Loads dropped Dex/Jar 2 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.kyriakosalexandrou.coinmarketcap/cache/1582435991586.jar	4421	/system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.kyriakosalexandrou.coinmarketcap/cache/1582435991586.jar --output-vdex-fd=123 --oat-fd=124 --oat-location=/data/user/0/com.kyriakosalexandrou.coinmarketcap/cache/oat/x86/1582435991586.odex --compiler-filter=quicken --class-loader-context=&
/data/user/0/com.kyriakosalexandrou.coinmarketcap/cache/1582435991586.jar	4277	com.kyriakosalexandrou.coinmarketcap

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.kyriakosalexandrou.coinmarketcap

Checks the presence of a debugger
evasion

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.kyriakosalexandrou.coinmarketcap

com.kyriakosalexandrou.coinmarketcap
1⤵
- Loads dropped Dex/Jar
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:4277
- /system/bin/dex2oat --instruction-set=x86 --instruction-set-features=ssse3,-sse4.1,-sse4.2,-avx,-avx2,-popcnt --runtime-arg -Xhidden-api-checks --runtime-arg -Xrelocate --boot-image=/system/framework/boot.art --runtime-arg -Xms64m --runtime-arg -Xmx512m --instruction-set-variant=x86 --instruction-set-features=default --inline-max-code-units=0 --compact-dex-level=none --dex-file=/data/user/0/com.kyriakosalexandrou.coinmarketcap/cache/1582435991586.jar --output-vdex-fd=123 --oat-fd=124 --oat-location=/data/user/0/com.kyriakosalexandrou.coinmarketcap/cache/oat/x86/1582435991586.odex --compiler-filter=quicken --class-loader-context=&
  2⤵
  - Loads dropped Dex/Jar
  PID:4421

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.kyriakosalexandrou.coinmarketcap/cache/1582435991586.jar

Filesize
9KB

MD5
e8e0527a01aefdb89afd2c508f131da1

SHA1
f1103e6b260c657ceb3d95f1b023af3fda8b133a

SHA256
f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce

SHA512
fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/databases/crash_reports-journal

Filesize
512B

MD5
bd488a0f6786ae9eb2374b80d2ff2b42

SHA1
941275d73b1eb14f73d7ab2475cfeb2a716820af

SHA256
658e50346cf8f1c005382688af8d6eae740550eb681e356415a98f1b8c6db01e

SHA512
ae66c3a80338313ec1a307574411fc5569d5ab18bae1a2bdc7a9ce20332c4741cb44ec591e89c540606212bc4e34708098d6495b68d487c841ac52cf9fb6e70d

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/databases/crash_reports-wal

Filesize
16KB

MD5
775c1d71aff553e5778d64b1bbf02523

SHA1
fc5cac5b9822ec1eba6818e3f1580969b4f16244

SHA256
30cb910e98b1d652f7a8dc335209e9400b72c4e6d66faaa9161071201bc6198c

SHA512
f8925fe39c0f1fdc3eb130f65fbea23098c67eeaa76948ef6989498556d46590a7e4bda71b39b14b2de0f5ef7789540f500ed74f5418c1afc4723419b660d73c

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/databases/google_analytics_v4.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/databases/google_analytics_v4.db-journal

Filesize
512B

MD5
42b28eb2872d45577d186c8138caefa4

SHA1
51f64f34dad7de200558447e94addef119a10b1e

SHA256
499f5c71bcc27f1c5e0365290fb3d272ebe7e36d38c5451a322d4ee3bc4d9db2

SHA512
009f257d634c5601cb1b0908088292c6f0019f0250d3fe0113fb88b8e4fc437a81f9f260d2ee30029eacb8a82b47a890b278e839e40092a7fd2f9be3fb65b40c

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/databases/google_analytics_v4.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/databases/google_analytics_v4.db-wal

Filesize
36KB

MD5
0069d713e1db3c33b5ecf665ae112aed

SHA1
3400e5835e3ea9a5807d084613a6b0b4c5ee7ad2

SHA256
87aadf591958ccfc957455e678211ab1a717b8e26fea0e942d9fbf8ff52441bd

SHA512
19bc117370bea11ab76844045ed5df0aa82aa9ac25c88c11a6fe35585993701ba213faee77fd19e8dbc41f488c1eb0cb2f6d23d56ea0794aa80484d00b28b6cf

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/databases/google_app_measurement_local.db

Filesize
16KB

MD5
489e9d431786fcbaf7acc42af61a1180

SHA1
ae852e233ff792d4cafafbd86b90d5a2331b19b2

SHA256
9017353b5fb78188d4f1c40de3de3112fa7e63027569b7b271d39f48a3169851

SHA512
641535fcf3520eb5d50cf2fa0c5c90e038d211c647c1fd3406942c007a8b41313ca7fce87d092660a047f32e15742f24aef20d0cf1af08163db38add584cbe6c

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/databases/google_app_measurement_local.db

Filesize
16KB

MD5
6b63b92f6d4ec960961ab1deba76d015

SHA1
bf6ffccf76f70b897c1a6cb46d129418190f509d

SHA256
a16377ad9b4b59218937f24a93699b9a7cc2409814ad71504ffb45c59fc699c9

SHA512
43e6e2290c76065c77021b625e5f31d41df9f98b2efec0db7e363c7b34bbbeccff92699465c899a34400ddd1195d67f580e4f0eb92479defdaebe4ea24fd9e21

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/databases/google_app_measurement_local.db

Filesize
16KB

MD5
89501c3161d5302a16cce9674fe1882d

SHA1
b2df9d6ba4315fe9deae0a46a0d334870a6cb6c0

SHA256
ee5591e27b8cd18bd6c84ad59d204bd0e2f63d755effe3437b553fc295cabadc

SHA512
4365f6a925a45d7c4426a9501b6c8f947e4c90c87f7d70f750d01cf023a7ac417ed0c527f53094d93fce40e8b341e577728289adb37cdfe82787d1a07a8eae09

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
c8bc17bdf740a4e6820c933287ba1b22

SHA1
c1b71707ef7c5bc5bad1eb9a1ad619e69edbed5f

SHA256
1ce675220fdbf2951d2f2139020ed56782d1fbe894b4fc8374ba2fd6eda86792

SHA512
8325dead2474a2516c65bcbc624d3940a89499f5cda50cbb43af3f5c26446bd28e9fb558cee3fd9bcaa9b0bcec7de983ee5bc5a4ba01084e8fe58be764f0d407

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
35a02c5d70fbda23caf0138a46758b81

SHA1
8c3ce13bfb23554b0eaa7876c99848f2036da474

SHA256
42b544487c62411d113db85d8bba62c43bc9aad51d050bf9859363c9cbf346bc

SHA512
d91f878ff5f84a40131cc698946f6e607e7bd0122937efe36c623a0f475adb7d7d9440652713ceca031052bb4b175ae92106a0191d9d96a6e0b10caee632feb8

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
9644ab729bf4a4e67df0e0ee33ace95f

SHA1
12533a45a3c1f173d7a2294f5aa786c5488c1ba0

SHA256
f6b8a677f19c06a05ccca419d7dc93c46a50f60a199dc47abc212d14611ec374

SHA512
812b057a91da5f8b86d94d04e754b4ae17ae7dae1d8feb234f20f194aad5f7b70e401e17b5f7ff210823a816fdbd74e161a072d4855e7a881f64cb6700bbe73d

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
80e7d52f38010f425e2e7518a348a3df

SHA1
88cea54cc08d4d065737aff1b5a2060512e8dfec

SHA256
996f6438618a1b398d4aa3989ebeddafcdaf3881f183c38d7428e4ae79773128

SHA512
41b4c313e91c413b132ed396c90604d2635a0eda403b42f188dab9adbb5a686fa07a550fb914b03314e00abe127c0d3903a34c456d2a8af5ae98afc99894a62a

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
93b4a704e2bf2d293a8cd86745dc393e

SHA1
463029874331554ba106b12e468f6b9d7a2fe255

SHA256
0410a3f528c68a2a725487f31edb85af6c90b5212f8b047d16fffd6e3e50a23f

SHA512
3027d1f7287058234e44d85f4b8405e3c66c10728cb4c930033082a714f92c47974a21d3ea4c9c66f39458ae5544c9f68c83e5804a2fd12e707d50b183e5b7cc

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/658A11C30090-0001-10B5-7827DDF93930BeginSession.cls_temp

Filesize
79B

MD5
b112dc3fe10ca49feb824840df673469

SHA1
9dac0e4649c993e8e87efed57f81d225af001d22

SHA256
104bff7f7215b6eb0cf02ffeacff867445da4dd80a18dcfa206ccc2aca299965

SHA512
583e2e7e10bdf0d1e24c1d1bed362f6520aa727d23338ecf9d84b820e58a74d8b56e59a04f9d64242d5295165c4d0c6440dba173abe38909dbfbe71f7133b114

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/658A11C30090-0001-10B5-7827DDF93930SessionApp.cls_temp

Filesize
135B

MD5
98086f4e471521fdfb057f6a7008a684

SHA1
4b93fcba5f24f8d4c46e1930b65c6d260abb542c

SHA256
0ffdcc9b10729bdca99458392742537a748ec8ecf2456e18dfd2e680fd2575cd

SHA512
83f4b5d0cdd09ad19543855f7f31f7b12a2d4ac8917376a94d13c8c09c7547feca1bbc7b94e7be12141b73a20d16c57eb5153b5e9f92c5a4fd12d5a7b84d72c5

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/658A11C30090-0001-10B5-7827DDF93930SessionDevice.cls_temp

Filesize
131B

MD5
dda78caeba9a0b321f6a7b75803288be

SHA1
6caa20bf23b6d872a273547e5e635367bd8e22d3

SHA256
fe9e5da51eda2559e2bd883d20cb41fb5870d097d839c2e05744cfb92e9b7cf2

SHA512
9062ecf40ea5b0c0ad2afaeea1c8b5c46624252b8131652badf78d4063bd1eced8c1c5025bceb894446c7302592b07717992222796cea02c2e3dfb183ee94474

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/658A11C30090-0001-10B5-7827DDF93930SessionOS.cls_temp

Filesize
14B

MD5
9b3d4522944ce6396563812bfdb92fa9

SHA1
6d2a6133c8f01938a48ccc77ef86ad8ca335c020

SHA256
d32805d685a3f50caa7f1c0bd7c8804c4d937a866513289f60e3184f7a591ed9

SHA512
091d87643712530bf9006135db42a5a50742bb5ca3026bcc5f2c1c17bf4fd984a8938d29263b0abde3d15cac196d2230902534e200b0b79485e3a1bd97d95727

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

Filesize
537B

MD5
b56627561ce169434ccef50e02cc96ff

SHA1
4efb2925e90217b4b74afc022023fa3e8f19cfe2

SHA256
c1ae6db636e3e62a1420943f54632b72c39cf87e885a787eafdf8318042c7532

SHA512
dc735c6bb50de0c971c974a3df364defb867b223715708a689af33f1f367b134ae3bfc3c5d220707e11f72ea88067ecdd12fd7ae102e095418609aecb08cad12

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

Filesize
1KB

MD5
75981ff583843ac3ca99b53a8ff16956

SHA1
4423f74021351a10a10061bbead60a2f3e3e79c7

SHA256
fd803e7279377d2833d632ab7184d634a682e7e7382ef855c6195fb13320db35

SHA512
486235ee7b5a0ec727589ee3980c3b9e9ac6281ba6f133308b344928bce67ca9fa5944aa1340e1065ce8a67256a6512dba3e55b37419bbe50b030388cc10f22a

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

Filesize
16B

MD5
c33583fae4e0b61cde1c5b9227963237

SHA1
fe2ebe4d27469af1460f7e852031a04208ef629b

SHA256
35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

SHA512
fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_727f5add-c31e-4054-abd8-e0764eefd966_1703547335992.tap

Filesize
412B

MD5
e577102e618031160eda86a6e02d23f0

SHA1
7afff37334bfb6e1e5ac3af419ed7e4204bc7425

SHA256
6ebdf30c6c9c8303e6773453caf9d0c0f2e0d618d34869c1d03f21afb3edaeca

SHA512
3a8d71be84cc2365eca09fa863bec0acb7fe23840eb08c5e225952f721b0dad440a6b8c6034274a96707318e19343561507e1b9d432074c1b18855df3916d7e7

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/files/gaClientId

Filesize
36B

MD5
2d2c04c754e5f4788204dbfba9313e06

SHA1
1a3b8dd29476670732f64addc1e777ea4a883a89

SHA256
cd395703a40213830f0cee8e74ce08c1433322017791c91f429d4c2d041d766f

SHA512
617d87c8dd3cc6341daecbb42fd1c6aeff5c10702b3ae7e8abddc309de649a6a98b67d2fd4acf4e9b24a8e2b566f93ae5ba0ea743e5dca0b32d43a310787ca1a

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/files/gaClientIdData

Filesize
32B

MD5
02ef2301aca7d2214f2411441c9687b9

SHA1
8e6eceea9e55a85ba0685960632bb20297044911

SHA256
526b9f02baa9fa60182c0ebbe424969872e92c9ce45acd674a810835f8129170

SHA512
fa6e7795876f50d854d1e7ead82941c7d65ac5b988899bdf7d3d31b436311d08514b051e2777470dade10227476c7b531f000f3182d60ed0f36306222f68cd3f

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/files/persisted_config

Filesize
852B

MD5
a520566edc7c3b8da05952e8f35f8b6f

SHA1
48716184847209f15674d047b614d5c2c6e5b77a

SHA256
4efd426cefa82827f3fb09d452ea05eb71a06a2c2a7a3433c01875a727091164

SHA512
11e3733630ba6d50147571b5392e62a2a10331135458029edfc48e5404d8b43dc5e63a89b8b5bb6f86d740882d41c4daf05385b7a35df162df833da1b1d2f75e

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/files/persisted_config

Filesize
25KB

MD5
ef667552c119dbed9ff9e946e3f1a66f

SHA1
5bfe7d75d7e25e4c55f653dc9a23b39dc7e5542a

SHA256
0ec1ea4ccbac5d193b69f62ec5c57dbb7632189367d2fbb2bd8eeb4808d50662

SHA512
147aecc29a47afb75af3346e262995e3b25dee8103f08d535ad29b38b40ae2c353c9e87f7ab0500b503a2455371f648069522eeb125c78602e02bb90e1c8ea46

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/files/persisted_config

Filesize
25KB

MD5
87d02728d9ab162e06682f49513ff570

SHA1
e5d5b0b2fefd919a0c7b1bbba920476428426fe8

SHA256
28149485a60d2ead5250ece8e1cab16dceddb9c1fe2ab082e526a0f4bd5b8f2b

SHA512
a0de1881d0e59b71e90724b0de7ff2f99fad422679115d6713418f470b412b2ea53fcc80fd4f0c6360843c5b299b6d2f64e97c21d17305b237cdc9557e8ebfad

Download Submit
/data/data/com.kyriakosalexandrou.coinmarketcap/no_backup/com.google.InstanceId.properties

Filesize
2KB

MD5
e8ca4414eec1776f8cb76b0f0e7d2f1a

SHA1
dd5d32a4b0593a073e81458d96f85a642cc1a1da

SHA256
451d56662451998195cabad3f8a57325d9dd187f83e658599686c4196b602b29

SHA512
7bda2c7a1c34b3394fdfb0ce0bbb28e13e163123fe740085478496860be3e52c6d5a29119bd6132601458cbea8906a5da3c818b54e9a4a73c20cc65f737b32c0

Download Submit
/data/user/0/com.kyriakosalexandrou.coinmarketcap/cache/1582435991586.jar

Filesize
20KB

MD5
2048eb6124a452540ee51dae4145aadf

SHA1
d05005b2cd7fe4cd652b0d7fd1bdac2c19d51451

SHA256
105c54b6fe3f25350e92187467761598e4c21d62b1091b77d091f65f3bd98864

SHA512
bb6cb3853dd2a5d0701e20607d4e153ae201268dd2e5e2d06cc2df208b3b4dc50132a4ab428251b1644d2399fcc717662438d082ff14203387bab8794109d44d

Download Submit
/data/user/0/com.kyriakosalexandrou.coinmarketcap/cache/1582435991586.jar

Filesize
20KB

MD5
fde2ee00cbd121cfab5290b078aa3ceb

SHA1
e2b77d5320e155e413d040a8c20020962065b2f8

SHA256
2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685

SHA512
a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

Download Submit