e0ab4557fcead70a50cc7f879d4568174ceb20a4a86de86a30c5cfb0f6e5e637

Analysis

max time kernel
3703938s
max time network
157s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
01/01/2024, 05:40

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3c084c39e9e61b1c9d13b073924019ca.apk
Size

5.0MB
MD5

3c084c39e9e61b1c9d13b073924019ca
SHA1

3531f86172cf83bcfad106eaa9ee113359927245
SHA256

e0ab4557fcead70a50cc7f879d4568174ceb20a4a86de86a30c5cfb0f6e5e637
SHA512

fa69856a532386725622369cff141e3f2a9d9cf307f6980c310a54713cd8b07fead1e46d441e325dfcd7e002b1eb6aacc3693fd30fac815bbd82caf240201e43
SSDEEP

98304:L3G//qv5p0ASraNHtxPzvK7l/9+0BqRuqjxpxMKasd0EXDSqf9XrP1ER5:L2//qv5yASreHtRziJcSguqjmKwETn7C

Score

6^/10

Malware Config

Signatures

Acquires the wake lock 2 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.sgn.pandapop.gp.hack:Metrica
Framework service call	android.os.IPowerManager.acquireWakeLock	com.sgn.pandapop.gp.hack

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.sgn.pandapop.gp.hack:Metrica

com.sgn.pandapop.gp.hack
1⤵
- Acquires the wake lock
PID:4210

com.sgn.pandapop.gp.hack:Metrica
1⤵
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:4249

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.sgn.pandapop.gp.hack/databases/OneSignal.db-journal

Filesize
512B

MD5
d292e11e2b1fb1134117b890e608ff71

SHA1
765c185c04be9d0e191f00593c86ee66177d0559

SHA256
47be2eac5a324ac815fbf600fdb9ab771bb37532fee7f79d39a67b3b2da2349c

SHA512
648ddd4acf5b5c386289486c054d52f7536a2afffacd29d4dd315f14bc9c227cdcf974656be7cdd9d735c13c173a5c87e23e665167d42f7f262fbbd61ccbee48

Download Submit
/data/data/com.sgn.pandapop.gp.hack/databases/OneSignal.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.sgn.pandapop.gp.hack/databases/OneSignal.db-wal

Filesize
64KB

MD5
3fdc79bfe46b241507e6307e7f18e831

SHA1
c4d8ad9756617d727354d42063e38c5b0260c6c0

SHA256
e77f974c9ce3f275d2525dd13a94234db7b45fc681d0613a53bce150ba3ccb6e

SHA512
79c62f3b9ede89ea6676893760187b73524a71d8cf226cc550509460b9ee3312c2da4ce77329754c7a1cf5a32e1611cb3a76b626338ac685801c3db2692ef560

Download Submit
/data/data/com.sgn.pandapop.gp.hack/files/Mint-lastsavedfile

Filesize
34B

MD5
e30f61911fc44c214950a093d69a0a22

SHA1
1bbee7d6755e5bc6d1493297e6f35c69c3ac8eda

SHA256
ae73b2dd63c897c94c033bba3b7fecbf3574246d2c95d52f77153a54feb03b4d

SHA512
982dd3312e7efe6f87e57622222767eb3621d0fa31d38454d55bf23495596b0881ee9cb82fc0059099623565a51ba719fe79b1abea6cbf5b53853fb2831a8ba0

Download Submit
/data/data/com.sgn.pandapop.gp.hack/files/MintSavedData-1-1704510859979.json

Filesize
666B

MD5
6e41655c5671fbdc0a3dcb6ae9765e13

SHA1
2adb22a4c3df30237436304396a7cbe23eeeb35f

SHA256
f0a9142d0f83b03dc84a08be6bfe2bd6aff9ba41d19a25329ee92459efb76c63

SHA512
9a310261a1dd7929b8a684edfc8ebab619db0d45f5ceba69837298fbe5ee74958805dd7f9f513412185b1e3e403ad9bbbe21498e055b169d01bc2451e22ec5bd

Download Submit
/data/data/com.sgn.pandapop.gp.hack/files/MintSavedData-1-1704510859979.json

Filesize
3KB

MD5
a4015f3d3c2e380396ff3d4f99e33359

SHA1
12655978f8d4cd33ef6a8ec7935a5d2cc85d2b47

SHA256
f61711400a9d6b15edb301d99b9e30e5443a90f494fba7e74413383cd2f60c65

SHA512
6b92519fe7833f6a412c124db5108c3706ee22eea980623596943455bc0f7054dd4a637cdfe1f4a26223274ee77926e09eada8ce520a6472a306f9b66e41b84f

Download Submit
/data/data/com.sgn.pandapop.gp.hack/files/crashCounter

Filesize
2B

MD5
b026324c6904b2a9cb4b88d6d61c81d1

SHA1
e5fa44f2b31c1fb553b6021e7360d07d5d91ff5e

SHA256
4355a46b19d348dc2f57c046f8ef63d4538ebb936000f3c9ee954a27460dd865

SHA512
3abb6677af34ac57c0ca5828fd94f9d886c26ce59a8ce60ecf6778079423dccff1d6f19cb655805d56098e6d38a1a710dee59523eed7511e5a9e4b8ccb3a4686

Download Submit
/data/data/com.sgn.pandapop.gp.hack/files/credentials.dat

Filesize
185KB

MD5
1411184688dcc3f27eb857c08fa8d049

SHA1
f33fa0e0af6330498c5fba56da9d98a53d928dfc

SHA256
401768e53b1706f7feaf390bc0c8a31d391d351bc7cdb4d24f5409b4063e3b70

SHA512
304490938aaa4b3a41de42058f96b9127d1ce7559b2481d8ce5b5c0571162b0db7f970e07e2fcd6c8006aefd9c0cadc4852707c2bab7ed94d4540a5e550b1761

Download Submit
/data/data/com.sgn.pandapop.gp.hack/files/lastCrashID

Filesize
33B

MD5
743168f4b98e9836a85299bd3a394293

SHA1
edc36b306a8ac731454bb901a601327ac1ff1d67

SHA256
95285d7c90069c19a86882857774f7d3e9082ccdac7dc4ed9225d5496a459d73

SHA512
8e5b0116753b86eca6bb651f5074a1e2e3a385fd6c536c1f737d4cc70b3715a43eff828e6da105130fed49903476e0ee4abe75388a6b88e7ad917d8e483e015f

Download Submit
/data/data/com.sgn.pandapop.gp.hack/no_backup/androidx.work.workdb-shm

Filesize
28KB

MD5
9816396573d75e64a7ddb46e71f32738

SHA1
f7e1803746be6c7d01a5784632a53a59e43a3b9b

SHA256
d680b337398d71f735371df75fdd299738cc2f9d2209de4d15012d0018e09b2f

SHA512
02eb153514c9be1d339e253d07f3374e0bb21cdd06665533ac46c1828b0a752f514b8141b8e123af8dd905637b33542f5ff1c414c27ef430dd0e3cc2a6e11a87

Download Submit
/data/data/com.sgn.pandapop.gp.hack/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
30e7f710d058da7d8915a4ab6d8910de

SHA1
3d21f04873f8d2db681bd4b31b5839f4f933e55a

SHA256
fc9f8683810e389c3c5b9be41220c4d8ad9b788a4460fb1d7de9a55cc857f0eb

SHA512
f20dbe76dc9015e932bd2c3999d013fe0a9f2fb979d38e92d9a738462b10e9ace1842c2e7fc7f370702511f9f53d6efaea5d391ba56b4c553848bb41aef2c4d5

Download Submit
/data/data/com.sgn.pandapop.gp.hack/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
974d57d326aa3702cddf74fa922221b6

SHA1
8bd78a4e6b54b52af3e97d7ae949ac0a9add6914

SHA256
ebcd464153de2b73a2ce9cb727d6d85751cddccb47affe6630d87c1e378f6266

SHA512
8b661359d58df8ba03c91bf29361dc6a7b21dd0ab7b2f5c11f8582dfb4caf4e3fac356355cae8e936ffdea7ab72eb117fdf690569607a9ae6b44274367d31d2a

Download Submit
/data/data/com.sgn.pandapop.gp.hack/no_backup/androidx.work.workdb-wal

Filesize
181KB

MD5
561ea6e20e7fc2abacf8939fdd57dff4

SHA1
dc7f0918d2bd2a1f67e541b72cdf59f82bf25274

SHA256
194352df061eaf5f2ec39cf94d209bba2b8ee9d8edba58eb2af1c97ecc41680d

SHA512
abcbfe4d1437f9bcfd64071ea43dd3cb582230b7bed5be08c31ef07fd356947ea30aa831f751d731aab1e04e4de930bd360c74b622d129bc690afc7f71c39cbc

Download Submit
/data/data/com.sgn.pandapop.gp.hack/no_backup/com.google.InstanceId.properties

Filesize
2KB

MD5
752042135c6dff9e31e390a581e83fdb

SHA1
04eab6c1e8b6cd8fc97299b82705bc6da9396420

SHA256
93fe4ed334fa5b7ada5cc58d02f11ea7b339fb8d4f3514c11f18228ccb4d1f3e

SHA512
318317815122d89bba744215716449093c732a487df80c2ffd1a1458c6226e0d024c9a73883b238014ee912dd84cea9959108fe1fb6cf34f3c768b03e278162a

Download Submit
/data/data/com.sgn.pandapop.gp.hack/no_backup/credentials.dat

Filesize
226B

MD5
6155d0b897f831b22ffd6bb1229a15d9

SHA1
4aa6f54736ac2be59c6adcf6f108bcd633b97ad0

SHA256
88ce29022d343ddd128738850d0b1f997c523f161febbdfd6163967732c73f26

SHA512
e1451d223a2b88b555b17c3e01a5bef8111787d74d4e998ac6c3c4a6a4e110ce4461dd89d9c4b1486b1a689129fb1b59f8d439642009126947760800d7ae53af

Download Submit
/data/data/com.sgn.pandapop.gp.hack/no_backup/db_metrica_com.sgn.pandapop.gp.hack-journal

Filesize
512B

MD5
ddb9bf8873856f8faa75808390ea7399

SHA1
75492f258339e1217fcde8e456f9d60964ef9ef5

SHA256
4d549aa14b7b3f19b442ae91caa65afc9a98d89f23d81705a13c2991b72e9b4e

SHA512
ed3c43fd5b26bb09a2ab5b10ea138205c47ecbf4baa21b83756889a64cda90a25467475d9c2801822bbce2a6c170bca2ab8d14f50b0e3263ec66f710f4269e03

Download Submit
/data/data/com.sgn.pandapop.gp.hack/no_backup/db_metrica_com.sgn.pandapop.gp.hack-wal

Filesize
92KB

MD5
a06201a175d4a3e5434e8b0230ab06db

SHA1
b752d7f4e4bf5f0c57f1e91e5fe6fc4050777cdf

SHA256
4209a07d1404d936f3f5145808bf8bfbe116c2d620fdb73e7f94f6be2bf5163d

SHA512
df266045b857c6efb1768d1fc9de7c0655697b1d5b87d33d1d7c2e0cbdbfd69da215581507c7284372c014a9191e0c852e73caf66ebce6164bed8d5750721a8b

Download Submit
/data/data/com.sgn.pandapop.gp.hack/no_backup/metrica_client_data.db

Filesize
20KB

MD5
f8245320fcb01da479b4c7c430a51e23

SHA1
084cbec91a5498754cf87d3adf4dcee59e8d3e4f

SHA256
65978cddc1520a1a27d60321cc4552647f59ef665f539022ed8b5270197e5e9a

SHA512
35717af08a2bec68f90f9cc53a3e21ecc9f27a3f51ad06b913940472573fab5f14c67431613ca29d62d2418e80de6e8d223c706541d75bb7c6f6395c7e78c77f

Download Submit
/data/data/com.sgn.pandapop.gp.hack/no_backup/metrica_client_data.db

Filesize
20KB

MD5
bc674b9822dc0f63d98be73a3a054190

SHA1
982b88416915dfaa63e14912fd013a22fb0824e7

SHA256
8fcb25b11f4c5a59afb448ccc116ea3268d84d1a862d7ff13832b08877c28891

SHA512
f05a125595ce6cad96875e5b06d65f04d904df976feeccaef7cb17b439047a278a6606fdb7aa9f203c8560ee8a2efd55b64feb2c1fd5df58dce01099315643a7

Download Submit
/data/data/com.sgn.pandapop.gp.hack/no_backup/metrica_client_data.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.sgn.pandapop.gp.hack/no_backup/metrica_client_data.db

Filesize
20KB

MD5
c9e81fc65fb9bf5e86235de6b712a292

SHA1
ddd90149baa965f4dab7eadff1329a16c762f204

SHA256
adeda9428c6d6f1313cfe0c183d003250ea4fcb04a52351451871c12184e4f11

SHA512
ecc90bf0fe4480788961c4888c99ca31b0f8d7dfe0be31da93895f79cfa485d0342dc440b17ff8fd484d15571909e78e414c56237edf8b2537d21cdc4bcb3150

Download Submit
/data/data/com.sgn.pandapop.gp.hack/no_backup/metrica_client_data.db

Filesize
20KB

MD5
b872f777bd72964ba2b120606451bc2c

SHA1
411f739e13bd604a17f5eebb7571d7eca00b777b

SHA256
f594eae0a31bfbd57ffd01abd1ba7f23950b9eea443c6e0893aa4f9dc69187b7

SHA512
dcfc2ff58c263f326879788fa94729873652aeb7caf75030183c55ee4bbb16aff6778d5d4f1714d74ec686a3fe4b8d5d3fe1c54b058809537b7e329129f06136

Download Submit
/data/data/com.sgn.pandapop.gp.hack/no_backup/metrica_client_data.db-journal

Filesize
512B

MD5
c6f12a3d5c68a1924eaf52e96b64ff67

SHA1
da3f1b5d32a41d7c8a2a533fb2ccf4b32cc400fb

SHA256
50afa8bf1e1a674f704260204bf8db2295ed8ef286732d3a44e2237861a52bc2

SHA512
5c098a3423fea6054552f8aa92ab69377e00183cd665675b5597ad59629d68342bd6958be272f1384694cdf3d10ba1eab15e2caf88b4da467904f350cac69576

Download Submit
/data/data/com.sgn.pandapop.gp.hack/no_backup/metrica_client_data.db-shm

Filesize
32KB

MD5
0d8fce69a7421298c92cefa2952d14ef

SHA1
9aed05b0036e291274fc64b476f779e783ad123a

SHA256
6abe54fcebf20afd937e878902964244cf6e6f72f9f784108e696257f8528d22

SHA512
a9a262497091d344ce5d62827c21befaa2b67d1db691c064e447081f20ee3e2b44de3b21b9cca444a03bdfa8f3e2a3c56140b6191bd96e9f6584608b0480aa89

Download Submit
/data/data/com.sgn.pandapop.gp.hack/no_backup/metrica_client_data.db-wal

Filesize
8KB

MD5
551b1f9c7f86a1fae1f66e9fc53e2103

SHA1
4238520b6a73cb9c3bd344b1b6f33195d159c056

SHA256
a8e21027c0000dd0ebdaf3557561993a2e1f9b7257bd19e90d27ee9cb9e48b8f

SHA512
aa92ed9730305350c7105226a1fb0d465e1e044087b47268d31315b6abcfc7af4ccbab0070190f64b5781c18a955c9371b0410cc232a3d66226946d48d4b1a72

Download Submit
/data/data/com.sgn.pandapop.gp.hack/no_backup/metrica_client_data.db-wal

Filesize
8KB

MD5
731e54595a3e304a07375ff5ecb0384f

SHA1
e324b0a2aae728818afac46ac2981d371c9d506c

SHA256
27ff79940e8dacddb555f0ac92b026d66dc5186ee3e91c4be41c179cd9f8bab3

SHA512
c07e7ed36f9d07b86953ff90448a35fde17722d689cfbc99cd8f893b1674e78eb5501c9ea2bafffde67fc2b549bb4ebc3a12a233d0dad20d9655ba85410ddc37

Download Submit
/data/data/com.sgn.pandapop.gp.hack/no_backup/metrica_client_data.db-wal

Filesize
8KB

MD5
e723a65894006dd80e30299518840a51

SHA1
2b2159ef4aba65f7bd61bd79896929e831ce4981

SHA256
969a31f850261ab0b8e3baeaee3455354d205a56cba051a1f1122c2fbd858ab3

SHA512
55966a7a29fc94aab1fde3fc1f8a771f7d5afb369622c37e5a07bc0b8e8513df919b33403293fe78ad439f2568e63c884b032b37c02697bba9d57e61298e5e53

Download Submit
/data/data/com.sgn.pandapop.gp.hack/no_backup/metrica_client_data.db-wal

Filesize
4KB

MD5
3e96456027a2b5eeef908df76b579fdc

SHA1
c2bf88820991a81a4991f6299ef23f528b108f9f

SHA256
6784f6b293f6ddb6383e93c1f6092af53091ac5ebcd8031d604c269153a79692

SHA512
5e75e88fbf8a3047280304643e8c4abc91a1c2605a640dc5c2055f425f0853ed488e1072e1e016894ec95212f934c4fc666b4b449b0f358c544ec5feb6aa5009

Download Submit
/data/data/com.sgn.pandapop.gp.hack/no_backup/metrica_client_data.db-wal

Filesize
32KB

MD5
4effa7ff930b7eac15e009fb5305aabf

SHA1
9fbd746f7aa8ce2da7d97de52b8b515f6aa632d6

SHA256
3a739b1643c92173c5e112f30a8aa858c3ff6e448d3df7ddf5fd43c2ff880a32

SHA512
eb05bd9d282c728a87afe8ce204103f0eeeb2016bd5e6bdb5d8f8e81577c75e0718243f410d6c10d30185f89c25074cd393921dadc593433f488c745618b50b0

Download Submit
/data/data/com.sgn.pandapop.gp.hack/no_backup/metrica_client_data.db-wal

Filesize
8KB

MD5
29012cfb00db4bd7c8b455ba3d55be48

SHA1
9fc76def60b54125da4ef33e31f994947ecf36ef

SHA256
44f471cad6ea685366e7f1c37764ec535289e7fa7badade023f460a57f07d5c7

SHA512
15eac5cc15a42d6fa1b585baa2e015628fd01408b92c704911ea40f3c345bff565983cc9d5e3e75670b43c9cceaf302ac870083e050bb9b5e671d66d443b21bb

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads