9d673ca9275d08db0069644de30143e3587acac259c83ed01f50bc87614df4fb

Analysis

max time kernel
3449885s
max time network
129s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
29/12/2023, 19:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0119830eabf33b481914eba75070ad1f.apk
Size

4.9MB
MD5

0119830eabf33b481914eba75070ad1f
SHA1

c028ed75796947c5ca1685963cc30d6491c18436
SHA256

9d673ca9275d08db0069644de30143e3587acac259c83ed01f50bc87614df4fb
SHA512

6a53ad89f039067896fa7070e767fd3badd51aab667532d64ca98cfc53dce61ab5ce77c87f402249feef187d2b5883857d9b1083912b4724abc9f1703fd9f0ae
SSDEEP

98304:YeczuS3mhSn/LsW01urvv2G7aTppUlT7lotPdxjTI8taHU4jXeFrgSqfD0T3aaBv:YtdzYW01ur337lkjPaHVeF0p0raaBco

Score

6^/10

Malware Config

Signatures

Acquires the wake lock 2 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	me.pou.app.hack:Metrica
Framework service call	android.os.IPowerManager.acquireWakeLock	me.pou.app.hack

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	me.pou.app.hack
Framework API call	javax.crypto.Cipher.doFinal	me.pou.app.hack:Metrica

me.pou.app.hack
1⤵
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:4243

me.pou.app.hack:Metrica
1⤵
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:4283

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/me.pou.app.hack/databases/OneSignal.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/me.pou.app.hack/databases/OneSignal.db-journal

Filesize
512B

MD5
ae614ed7f20b1cd11316287c07c5905e

SHA1
9191660f0df079f91c177fdff480c9515953ae61

SHA256
ece6e3de6dd627398d700b49915175f63294f2b38ad715c16fdd7d4f48332355

SHA512
6338c9e7b7cf163db716705e8425fe395fb5031eea7a535b078ee4bbfba9617f68a469a286c4f068bc02919c81730c456c6388011299d87520bc41a77a9ebed1

Download Submit
/data/data/me.pou.app.hack/databases/OneSignal.db-wal

Filesize
16KB

MD5
d33e12f87ea17934bc0006977b298b5f

SHA1
1d03b222fd8647be3085af435ad3c771453567c8

SHA256
977f919544d370ba0b97c94fb0ae1b9305e784990feb485758e97b0144139bf1

SHA512
db9ea90459b911246fe1689e85f0e0fc45249109cf0907ca358916f8adddfb6d77df21e4e181c24ac2c0e3c62c7ed1c78d5e4bd04da34be0b87cac185768c2e2

Download Submit
/data/data/me.pou.app.hack/files/Mint-lastsavedfile

Filesize
229KB

MD5
ed80b7ea07fe9be05a4382010dfe9a36

SHA1
6c749e440e457d02d7d8d58cb4a8b564fc466b8c

SHA256
ea6a20f72714a4cf2dc52bbef0d9b23f5578218659b25e89bad3faedf0422204

SHA512
0e61794c11176908ba57e0e3f402f1a2b0762544309dedb48667c7bd2f828d4350cb33b28ec662be258ee94f5875f0636ff6ea15d0beab76deba96b8fb1bb372

Download Submit
/data/data/me.pou.app.hack/files/MintSavedData-1-1704256840370.json

Filesize
657B

MD5
e2d663a94d4e929b6d6ef7f8a8dd15af

SHA1
59a0f1ff5cd20aedee20123bc7c64d22e5bab7d8

SHA256
c4dcbbbba410ed8713f2f7302bb8bdcf04c1ac02b9a64554803a976bd897de77

SHA512
e66ce898578fc1ca6142900842963baae775278edd8db8df1d8a843bebfabbd28e499e5e8c8bf1cdef2306e519adcefc8ff290c96cbb7bd678898867b98364a7

Download Submit
/data/data/me.pou.app.hack/files/crashCounter

Filesize
2B

MD5
b026324c6904b2a9cb4b88d6d61c81d1

SHA1
e5fa44f2b31c1fb553b6021e7360d07d5d91ff5e

SHA256
4355a46b19d348dc2f57c046f8ef63d4538ebb936000f3c9ee954a27460dd865

SHA512
3abb6677af34ac57c0ca5828fd94f9d886c26ce59a8ce60ecf6778079423dccff1d6f19cb655805d56098e6d38a1a710dee59523eed7511e5a9e4b8ccb3a4686

Download Submit
/data/data/me.pou.app.hack/no_backup/androidx.work.workdb

Filesize
96KB

MD5
e0f89eca4fd39fc0cb9afaa016397ee0

SHA1
2fba44ceb5a6831647cabe0e22c2157c86cd0798

SHA256
d7654a45e98bf13a58df5f50fbdca55f6d193e06d0f119e1dd42746b4a55908c

SHA512
f15854bfe61b7c7c0add1726d948e176dc01d2ae75901ff86746cb379a6df3daf6eca920aeaf988670323d1a2697ddd64e8132519a48f9b3636a0e67fc592982

Download Submit
/data/data/me.pou.app.hack/no_backup/androidx.work.workdb

Filesize
4KB

MD5
ca2acea74777b9fad4690fce413dc6d1

SHA1
35c51cc9a6328f895bddadb26d852c1516e9ffa6

SHA256
dbcd156a296ac15650834c3eeb2c5599633889df6b444bd924ee7fb3b46b18b7

SHA512
469a761c298be8dc1fbf6acdf59328e52bb55d1a26866d8e0cad99d5a0435ff0a7a40242e338e76b4f7cf0c64ff8370b5125ecd8da0bf9dc25cbb4d63cf118b7

Download Submit
/data/data/me.pou.app.hack/no_backup/androidx.work.workdb-journal

Filesize
56KB

MD5
ff9e0f291c840c3cea61a5c9d8f5d288

SHA1
bae74063bf5f96c1ed70235564148673f1f7bb4f

SHA256
72ab5d186adc17b11f1e43b3d68fbc0ac381405ec16bd44755f93e57c8c8945a

SHA512
1062bef6002db13fe894113e5aec71bd19bf159eff8855cb4731d2ec9a146c17bb44e6e839e9a5ef87c22c1c98b3f1b7c3e9eccc6deaec05fb235e43f32d5579

Download Submit
/data/data/me.pou.app.hack/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
7fbad269f233ce07cabe6e2895cad715

SHA1
48b493e14f259ac470d4514a8d5ca61051e9c5f6

SHA256
0ff300111dc57a728490ea45b5f1c891fa071f3f57ccef3244e6a7bd808d1ac7

SHA512
9495f2c3559d257b81a6eb4ad200e7414f8ebe2774bd9906a9b9220a2ceb4b4cca0009a59e5556055e02f641d7a08a2c2e96759d951db61000352ba4ab6c45ae

Download Submit
/data/data/me.pou.app.hack/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
1dd78edaef4b0b048262cea1d3186e56

SHA1
a1343e6665548afc3a4021823c6d1b5f1cf120df

SHA256
d6ad75481f934466895c164b19395e0e3fb4a6ea8bb3e4cc87086ac4ac85e5b0

SHA512
ee0bc90dcd7b813ca1f1533315f4499a58313f6bf3f5d1d782f477531ad55c2b71ca0670b2a1bf2b9807749ad979bc0e196e261b08479875adb53d1319739f14

Download Submit
/data/data/me.pou.app.hack/no_backup/androidx.work.workdb-wal

Filesize
116KB

MD5
cc92605efbb7b67d7aabc5450442a7d8

SHA1
4818079a78a0502370a5ab860da2c30a35db5650

SHA256
0ec8b8c6850091392984353a073b27648986b41e032909b71c8c158b84149fe7

SHA512
4aaaefc68467f44ad948ad545cfd973cf88664d21451086eeaba305b8dad2cb98b7629778ff61df720d4d07d984526a00dc06afafbf6b0d4cb9abfeb289664f3

Download Submit
/data/data/me.pou.app.hack/no_backup/androidx.work.workdb-wal

Filesize
156KB

MD5
b9d7e3588d1bfd97eb1113adce985ea5

SHA1
dd76b4843553435d380a11b6151aa811a68c728a

SHA256
ed2c0c6a081dfdc7e148eb1e831259c4b52d04dfb113ba678177e7fadab7b4eb

SHA512
6fb828821dce642d3dc0d9e6262d5339801bc4928f886d6e25429f96625209203258f51253702987a41916e742b1875a934ac49fd6beafe87ff9f3c7e523ab93

Download Submit
/data/data/me.pou.app.hack/no_backup/androidx.work.workdb-wal

Filesize
193KB

MD5
f56939fdbd3631f761854e9ea2443a6d

SHA1
a11b61583466fafdae5e4a8e81193ad74a9a618c

SHA256
2cb17f0903c8c342232d5ea8cc89a60798212f496c170ae874be0b03f239282d

SHA512
ec70fd549f9b546063e53bcfc8bc40fb30a39a1172004569567d2c3c4e97a9cfe51b55f4762fd8eeea1b2851c30f7cad37f31fb269e25c22f46a03d0fa4a9924

Download Submit
/data/data/me.pou.app.hack/no_backup/com.google.InstanceId.properties

Filesize
2KB

MD5
0f205fc43b6f74746fcf1ca5b5a24f32

SHA1
3d907e474fd07239db19d104527fb38a1d775fb4

SHA256
454a515ad0e48373a40c88cedfa67146adbce030b984aed417444c886bd4b289

SHA512
c7fddcc356bd9037573fa7a8064be0eea472b76a8b27a1abe0aea1adaa70a4f61db548c019617edfceb782c650e7405ad981f1d64e0fc13db46cf1b8e0240612

Download Submit
/data/data/me.pou.app.hack/no_backup/credentials.dat

Filesize
226B

MD5
b2ddb455038eadd44983e9484ef0a1e3

SHA1
430c12549bf4e2fe4636d2f23bf7f0476453693b

SHA256
6ac7251e1aa4d7ef983ba6c43fba854ae40e79f0294d528a22c095070a48296f

SHA512
f713243814fb3eb84fe8ea4290abc87626681b9ce36e0525965014e8e8f513cf57fb1ec396796bb560f5173b767f75320e48a963819a08e9178da486791d8c1f

Download Submit
/data/data/me.pou.app.hack/no_backup/db_metrica_me.pou.app.hack-journal

Filesize
164KB

MD5
e40f4d335c7f8f01f7b064e49a2c3e24

SHA1
d65c8b0a8e6703757df60341d0b6ab1ffe1e00c2

SHA256
39d13826d1c30a5fd65904eced46a2b2056a4a41e63b0910fed6e174693b74b5

SHA512
ea6a83d7e79b7d54bb93b157cfecd8dd7bb20fdc2e8dc5eb643ef82d7c2b413361b50e0c5dc0ee793f6b3b66e667ddbf4a2b16ffea7079c0dce4d0b87fa7836e

Download Submit
/data/data/me.pou.app.hack/no_backup/db_metrica_me.pou.app.hack-wal

Filesize
48KB

MD5
0dd9311285ace7ccc4daad2fcf79cace

SHA1
269d09111274414cc1fc1596c35dede173c4b5a4

SHA256
366fb080bd601317440e6104a8e220d69d37b1e79f83b06ff29a63c778704a1a

SHA512
d8c9eec7764d5737bcd9a60207795103cdadbfed1b6ea6c75fe5f87d0b87c5a588ac5ecb5fd6f23f0e79395bf80622e1a7f556b3c1abd3beb3f6f8d0f0baaf62

Download Submit
/data/data/me.pou.app.hack/no_backup/db_metrica_me.pou.app.hack_20799a27-fa80-4b36-b2db-0f8141f24180

Filesize
32KB

MD5
1c4274aa7a9a5cac8c6d1df71e4588c6

SHA1
abaecd685e01cc68801292e3dc7085654a22feba

SHA256
3f6cd5f480ae69859b7841450f3d032c528ba385ebf9f371b9c8fdc6eb4231be

SHA512
1adb95935798607bd36cedcd183924d3068f50097d017b278da7caee7771532b61ec3606f6189b6dec8426eb038fe40be75079ce35894b1a8e0d1d815261150c

Download Submit
/data/data/me.pou.app.hack/no_backup/db_metrica_me.pou.app.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

Filesize
108KB

MD5
efecd02fd4fb6b4e66deb4f4d8f459d6

SHA1
2626fadbfb837f56783f29d1024a105ef185a61b

SHA256
7dc177a12590420e8aca7bafdea0474cfb59d7edbfd8237c80eab4a826c90168

SHA512
423758e848bcc459a0718975a4b943e5040f988aa0e565e3493a78f85c6b4553294b59841a038ea8f083e8a7fc421f8fce883aae2d4a9a8037cd1951e3ca9404

Download Submit
/data/data/me.pou.app.hack/no_backup/db_metrica_me.pou.app.hack_20799a27-fa80-4b36-b2db-0f8141f24180-wal

Filesize
48KB

MD5
63d79a4ff4ad076d942e9c5c5334e4fd

SHA1
0c61faa3a3dfb5b96b3390916c46100ea328db26

SHA256
bfc92b78dadd2dcbf6a8adfd6aacc53a11b84200860432154bdf04a35f753773

SHA512
95b7aecf4c79f9f4dbaba52dd3f623677391c62c1d9e268050f5a87f23dfaf60cd68ed7e8fd0bc17e15b4c00d08f45adec162ec18f10081397929a00bc27544f

Download Submit
/data/data/me.pou.app.hack/no_backup/metrica_client_data.db

Filesize
20KB

MD5
5ae1dae9eb36649faeb07a94ca96e7f8

SHA1
9056cb35b999726d6576ef6ced55ca9228cb97c3

SHA256
62eafa0fe191047857cbfdbd6909930487f2216d260b4be27fd52e3cff6086d3

SHA512
e33d2cec8122673da3c8ffc788bf2984eac878f7dada265485d960a886ebfb00e17b12a30b546c959bc04c62a31d5646fda748df693e0bdafbb974abbbe77c1a

Download Submit
/data/data/me.pou.app.hack/no_backup/metrica_client_data.db

Filesize
20KB

MD5
adb7b33eac8f43c27d36c8d9a939a3b6

SHA1
73ff5abeffbb10c20260081292432bfdfe608dbf

SHA256
62137d440010fde40907dba3bd095a5ae4a731369963e4acb5891ad826da3ee8

SHA512
e878b502cadf41df3a5c106a79a94d4d1d1a8d044abf3ac425a5142ca3eb5ad7f306ae25c32fc87443c0723a7e114d2930e3d3ae62f89c5972dd9d7984b20149

Download Submit
/data/data/me.pou.app.hack/no_backup/metrica_client_data.db

Filesize
20KB

MD5
ac26a375d5d673c2a7b39bbe42efacaa

SHA1
a7384db83f153cce2cdd67a97a20df068f6ecd67

SHA256
001ea8b38280af72e70a8168524cfb2b07a711040948397d36fcace03b593716

SHA512
45e1842b55ebab067e53fb3c6ab880c0a652a951f26c1cae5363f429207db5f1aa56c821e89973612b73f9c0d186561221b6129db22e447ccd421b40342dd6bf

Download Submit
/data/data/me.pou.app.hack/no_backup/metrica_client_data.db

Filesize
20KB

MD5
5e2610e83f82a5737cec1fb1713a64fd

SHA1
c9486322e4af8e34b6fd0e58a91de780c7e497a6

SHA256
db9ac99518c5f1e0b077894e1b91467fac69aaf0cefd6917ef557735dbd1a0f8

SHA512
c0602b588dd42fc9a153a235e1ba0fc2e3580d4734991133f200f05b301e669deb4165a744def3414d85cea3f31276b29aa47c56ba6a9bd852ad3edd65f10843

Download Submit
/data/data/me.pou.app.hack/no_backup/metrica_client_data.db

Filesize
20KB

MD5
284043fcd26c0606551ccf97d6044d27

SHA1
84dad475e12a0d0a1b8165ea61b23311b065feb9

SHA256
91256acb41e96af8f0d8a73c852f1491095a01f89b9c4f39a8fc957e518371e1

SHA512
5a56402861347adc3e05d36160ff97caf64829b35b5ace25dace076105561048fc73b945f1e5f1be905cccf40a0865cbcdc6f30886183fd7d9f6bcdb8287d374

Download Submit
/data/data/me.pou.app.hack/no_backup/metrica_client_data.db

Filesize
64KB

MD5
0361b375fc335f843840f29271da456e

SHA1
6ffa2201219cee541726c72c168ff3977780eb66

SHA256
132ff805a5e7eb0ed3b357dff130c5bd604f934030a11320cc5226eafbf50521

SHA512
fd4e6f679d45c099af31c225db1382a4b32d268cab9f5228d5b46fcddd002bfc4251d5faccc23a0a167abb6bbe0b7bb7f6e70fe60d68a33ab590a1a7af2b1f1c

Download Submit
/data/data/me.pou.app.hack/no_backup/metrica_client_data.db-journal

Filesize
512B

MD5
cbf594c20a65759cc23f0e5cd4cc6370

SHA1
5dafa4fb5cafbe76230a1b5ce66f8160bf1f62a9

SHA256
53c66e86bfa57650f7c1c4a9238e0f9f53ec6ca00c09bcd8774b4ba5925279ad

SHA512
523071ec4ce3bb15714814d47e410f46485e42f5976a53616aac45b9b94845afae4a9c130089c331cc56f965a5ab65736bcdeb230a08fe2415c27863fb7761c1

Download Submit
/data/data/me.pou.app.hack/no_backup/metrica_client_data.db-shm

Filesize
32KB

MD5
685ae9bc06280fcd8a9e4f035664162c

SHA1
329545395aac3ff1292844685114c5634196b24b

SHA256
eb986ddb9a975bc2a64a1d32b8dc7395ca9d324531abf0ddbc10eb69b6ea8e61

SHA512
b96094ae2746e62678965a7245ff28f7186717d005cf64f89d8b5b31f4406e77587ede0ab6101c30cfe201ec714dd0c3a09c9b6ae8a07a7707c9490a8dc6ee03

Download Submit
/data/data/me.pou.app.hack/no_backup/metrica_client_data.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/me.pou.app.hack/no_backup/metrica_client_data.db-wal

Filesize
8KB

MD5
715134e3a700d7bc9939ed5a936ac53e

SHA1
302dcca19735524e6736fff6834f0dd55c6eb320

SHA256
dd1513473082f835db1f47ceb5e2a6164d8387aac7626067b3b593bd74b5005c

SHA512
0c9e136d36d713a0259b63e884046b5fbc521dd2d40afafed719f2e3160bf8770ca06f69c9983976c3d14a74f9dd41acdcae15e06435707f19c3c6b064c8b3b5

Download Submit
/data/data/me.pou.app.hack/no_backup/metrica_client_data.db-wal

Filesize
8KB

MD5
6e297900d5eeca513924597377186062

SHA1
1dc0459d952eced1d86b09fd241e8c28866774d9

SHA256
f073ff1e62f6b7581a29410bcce22a8f9363436fd9834011ee1cd6385a649d70

SHA512
082a9e4b395dd725da7c495202929272b02dba1c029ef6e962fb99271175c20f078b8126a31e73daccaf15cff43b6ede48630eafd5df992156d892a86f84e585

Download Submit
/data/data/me.pou.app.hack/no_backup/metrica_client_data.db-wal

Filesize
32KB

MD5
972597fe84cc17516cffb4c0d9e1abad

SHA1
452ab1c06d4761be50137915f06e34a64a6c2e30

SHA256
c0d20aebd907c60e77e4900ad3a3aa27944793530a140d0f2765e78272568a50

SHA512
179d0c74506c6057280b738526c23117e08b47c1715f4d07113a8f60b5a875d2cd1bbb3ea2be6bb501471bfe79809ec02cc62e7337c2ec7cbc6c7ce2dd2d7560

Download Submit
/data/data/me.pou.app.hack/no_backup/metrica_client_data.db-wal

Filesize
8KB

MD5
98bbe1043f3aa759a1f9f74d3e782c37

SHA1
256060bc19ecb1abd020013310a6e330d2417292

SHA256
d6a96584a34a61f3e2b8b0a2c86bc455bb6b7af2cd0259e9b8c9c39edf3992e6

SHA512
1ab65c01817688d9d6bd4fc44f4faab0007d3cda611c8070ea4616b0ae8e05fb235b2a1c62fe95bc518fa93a5685d712ac357c2a6d389d54d385d1436608b6a6

Download Submit
/data/data/me.pou.app.hack/no_backup/metrica_client_data.db-wal

Filesize
8KB

MD5
f5cd2cc45dbf880927bc6f1dccd15cdb

SHA1
79fa5f30b892b30558cc2710c9881205c3fb5a94

SHA256
04ae6d12d9b1876e2adb87c6db91b859522a383a618c00ecc0f61e238f1eb827

SHA512
8153bec417773fa638eb057597b700aaaeac3d7af10cbe7c22a847dd3d796c2d9e370a179df9dca5c3acccd327c3d7a1b15b001769ce6f446aafb0aa2b4786c9

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads