Analysis

  • max time kernel
    3763238s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    06-01-2024 19:43

General

  • Target

    470958a57379667d0903bad767405f1d.apk

  • Size

    10.2MB

  • MD5

    470958a57379667d0903bad767405f1d

  • SHA1

    4f6a0358b34bb1edcdcab8164ea108aecf7e5db5

  • SHA256

    8914ba0d58ade5723f2ee0ba5f46035ac420ae421360c2fd1fa823eec2dec7cc

  • SHA512

    e39946f93677e35e259a9e4354d7141f50312dbcd7c0f78edf052cd436e5e8555f63930467559b7874cbf7e458a4c82e772ea42693ccad3b77a06ebde1257673

  • SSDEEP

    196608:2+BHgPeOVfohqiTz6JKSf/i9R6aryFPFx2iGmvGe4B/OpwTn6n9YCdeq:2+BAPe2fOJTziswz4dOqTn6nLdeq

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Checks the presence of a debugger

Processes

  • ru.wall7Fon
    1⤵
    • Acquires the wake lock
    PID:5074

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/ru.wall7Fon/databases/evernote_jobs.db

    Filesize

    16KB

    MD5

    12627a2ec645c4a4bc50dba5903afd59

    SHA1

    504005c938517e61bcf68b65a055c2faba635c2e

    SHA256

    f177ffae9650eb4f407c2d9a510bb5a5abe1ece2fdfe24effc62478a1bfa5903

    SHA512

    7ff69589296e02383a217373399e75d8a82fa17146e4273f4c0eb630f096dd9f394a3324d60858b02f7e5cf177c82c6d966f5cbedb68ae6a98df7cc851b79cfd

  • /data/data/ru.wall7Fon/databases/evernote_jobs.db-journal

    Filesize

    512B

    MD5

    6c56f94cfb8dd176b2c23054b12c87db

    SHA1

    3d44319f72a208e644c1dfecf1838796563ab65a

    SHA256

    ca8fa901a75476d87d1e5a956b75cdb3a1a115fe1cc29b2f45b8f1e4dc397bb7

    SHA512

    853bb7637ed61e0d9653a788e37f0a4f45939a7c89ad32c3eca18b9d1de3c6796e172e1816df321059388018df3dbb8e0842d3c99249c3872cef3d616beb7325

  • /data/data/ru.wall7Fon/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    c4fec55bf58ff3c9fff727cdcbddc806

    SHA1

    7053254fb7478136e8d86785aad86678d3312c2d

    SHA256

    b8f75888433e288b88e281ea886e125b0b6b5c4b2114b4086f7b48fecdc2cfed

    SHA512

    0d9ce3a7db36ee7ad5ff33bfc6475813095d3e492964261527f14a95e8d915cd62120d32df64134ea9b7f8c4e4f8edf19175cd984849c7b5c40c0521dde3b93a

  • /data/data/ru.wall7Fon/databases/evernote_jobs.db-journal

    Filesize

    8KB

    MD5

    5069e8431a0f59b38cc36e2186819163

    SHA1

    0bca33dec8ce610aeb521861d04c816beefaff28

    SHA256

    c8b4ab0e24dcd64553d56d8c6c2ea02eada68ffd1bf823f669f8f72aa67e38c2

    SHA512

    e00a884d66b260bc8f7a655bee796dcd33ed2665ddfd331ea07f05debdf637fca08e7ba446bb3eef4a8e3dac40da85491046795ec74921c93a9cc898d9cb4bc8

  • /data/data/ru.wall7Fon/databases/google_analytics_v4.db-journal

    Filesize

    8KB

    MD5

    e0a7e73929ea9a1991cef102908a78df

    SHA1

    2d129d8c074f2a84c0a1529c43d9f6f4b5d4afd0

    SHA256

    f45de5cef5f7ae400d7282999fb1efbbb42c0c8f9d11c8d43aa27cd2fcc812e6

    SHA512

    11e92bb5ad4dbb4d590a98979b3da05c3aca311874e508f433ec96e6a37015f9dc80dbf521a3deef51c79bba7fc4f349dbd342236b8de893815e51301bdbfa06

  • /data/data/ru.wall7Fon/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    285ea665bcd7f009ec47d911490a47b5

    SHA1

    613457e53e181a2e1e74b5b6831509ef6c1fa565

    SHA256

    5fe0b9002486bf49c287b45debdf09442d6985ad97ec6ee7b28f84a0f814dc65

    SHA512

    2ac701c2b14aa0ad081fc6ee0c900b9dd7847e13ec0b35232a57c69e5de6f7a09ad162252c5c63151e07ce5cefa3824e4073e691b3cfdeb170aca7848d7373de

  • /data/data/ru.wall7Fon/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    7f4b6c7c0399a2e9e7985f744df302a1

    SHA1

    727a8afe25f5c272c05aaabb27e7d1d375c30e25

    SHA256

    57735afa9628f56f94b6bbd294e3bcec6e85b952a784fdebf213cdea0d745edb

    SHA512

    e96e7c98eb8bff1ccf34e70ceac1cd380739dc114a6a06592a4759b32162218d9b7353029784017f0598ab9061afc265e169d30fc8ab4650ec0a7fe5b2892fd3

  • /data/data/ru.wall7Fon/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    bbe688f571cb220c7e7380e6b376fcdb

    SHA1

    9b6e7e114f8f504af642da7bcbd9faa539ff219f

    SHA256

    d3141b2427a30aa76cd5bbe1c0e80101991070cfa2337901343d80b6663853b8

    SHA512

    1733a4e7a37e226f34261b1b6785c36259e49ce770b0f696568bb13d755bf670e1df6ed42e537ae6f5b5c58f7c9293bad14544ad700fe348f0ddabcda54a2c8d

  • /data/data/ru.wall7Fon/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    f1fd1c2a6a8fbbaa83f87f0edd4f4afb

    SHA1

    0297ff0b29a3dcfb581c35e0c932328f76cb2f68

    SHA256

    890036e3dcadf4241d706bef650ef9ee104354219281ff83d18ddc57531c92b0

    SHA512

    556c49584cc160e6941fcd0e78487e3cb3d65bfdbeb4414c569c94b55bec6090f70c196298b2c82a3c34bf21c5bb16846990abad038f23a2f3f085e26ae31bad

  • /data/data/ru.wall7Fon/databases/google_app_measurement_local.db

    Filesize

    4KB

    MD5

    0eac86cec40d64d2bc8a4bc006f79885

    SHA1

    a8520114b2babcb5dfac5964708d7b00b72033af

    SHA256

    d36953d23be3a6fd3cf6a651334814645cf55fc4fe1ed32502483c3da7333c73

    SHA512

    508bded2003396f261f2a8d0721bca093f6e2bb896a1c2bcff652cd670194c2b9bf6e6ce92127b49160bcca33661b000d484479af33500e698bb3e7f2b862caf

  • /data/data/ru.wall7Fon/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    c079d46440af2e60355ae5c03bde0a8d

    SHA1

    8e6b5fab5e12da48c7aeed54b98adbc1fffaa899

    SHA256

    2ceb50abea8cc07b386ecdeaa60c0427a1d70515db5ceb66ff1fb2f31febb8ae

    SHA512

    a0acf0823c73bc8b959d48491d7ce819fb6aa91ce393e5bbfe94d9d721f7d8ab7c7d987520599dcf0f956dac3a0fa866c016169b64e51cc79e965591db7fbde2

  • /data/data/ru.wall7Fon/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    23b3da442f49e7871b4f66c20ecd3b02

    SHA1

    0935eefb5d438d687abde6fbf029075744806415

    SHA256

    2ee208e7d256a177ba83d4f778860d42a1d784d0d99f2f65f2c983d3ad8f7c8c

    SHA512

    12947c2c58b44b6c4750a3e208edb0692a1c48025d1b72fe38b67ae145067368d84a23d94cdba809371dade1639feab1009d2d07913ea1242fc46e293fc0a9cd

  • /data/data/ru.wall7Fon/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6599AD9B003A-0001-13D2-3F63E89A8CB7SessionApp.cls_temp

    Filesize

    109B

    MD5

    7299017bab9ffea90bcd572ed9b53976

    SHA1

    7eab1f216c4dfe33cd88fc231b5a5aebeef6d645

    SHA256

    a9826359fc720ad0865f3c474dd7edf4263bae7ad9f5cc8bef5c61746daa66c8

    SHA512

    b88d762c34cf91e974fa5842f66f8238834698398bd2b913e8067757bceecb8ee0184103dcb2d0382c453fc236a307dd4d198a2fca8f8821f1590914ece199e5

  • /data/data/ru.wall7Fon/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6599AD9B003A-0001-13D2-3F63E89A8CB7SessionDevice.cls_temp

    Filesize

    131B

    MD5

    479e3faccb5f1dbf433df7bb8c0b86c7

    SHA1

    53675174cebd1515e6dd3c703a50f7101c6e37a8

    SHA256

    123e4bb4396f85afa5480e411c045c80890a5781746c9bf41bd0ce950d106a15

    SHA512

    e6934298157f34eca68893a69d8869f602755be86a772ae106c5ad415b7f6de4accff27780f72ea52d07b953faa35e99cc64d1d6f61a606f1e5ed3f8ab223582

  • /data/data/ru.wall7Fon/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/6599AD9B003A-0001-13D2-3F63E89A8CB7SessionOS.cls_temp

    Filesize

    15B

    MD5

    2566d27ce8c28d8961f082c375d7535e

    SHA1

    92fe585b1a2c9c523d2fa1f65ab5c1b6a1a6edaf

    SHA256

    5acdb54ddba2e264f6822fbdbc4e9b5158f57d43785c2f01d981956b18f7a90a

    SHA512

    1c70679bbd25a57f9ac02083d5af0fe72b1417cf3070a195497f03d6f492e87b1ed3f570de7ea7c814c995a1530e32610d9570f31a480648f4062e8d3287be8f

  • /data/data/ru.wall7Fon/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

    Filesize

    513B

    MD5

    5e9a6940d7d1049612225e1163cfcde4

    SHA1

    84118f2c271abe91ac71957020c4a7ffd463bd58

    SHA256

    7809c28934734b35c03213910ef3942e988f6534b2e17244323ca67758772fb9

    SHA512

    a985925b80eb98c990026c0a5360532123e7c5fc6f9daf444535b942ec39b535427fb228847772c5cc02f10adbc5c7bd1080ef847bebd6743bb100af5f426c4b

  • /data/data/ru.wall7Fon/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

    Filesize

    2KB

    MD5

    1540dc4eb4f8423cc2359096d7bfb8ce

    SHA1

    b851644830a8c1badef922d9bdcacde81b7da9f9

    SHA256

    bfe411f2ceeb6a0954755b4f8c7458c0054ba2f7ab7fc129d689f78143028d3a

    SHA512

    175330a2ec9ab9dc000eae2860feb92083575ad06492401ec49168010825ab55a8afec41d5f5c61f98933dbd8a2727bf19b298a96bc4be8d1690b0d65d879a74

  • /data/data/ru.wall7Fon/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/data/ru.wall7Fon/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_c7879098-9745-4ed7-88a1-036803017be7_1704570270235.tap

    Filesize

    395B

    MD5

    7af713dd307dbea734a8fa9312a49593

    SHA1

    de6383fe84e80853c02c61f1b5326cdc927aa12b

    SHA256

    7f33e36645e30c73ca8d15fd07911e513f344c22f263dae750fbb552fe3b5468

    SHA512

    1fc8bb53b340939450854104201cd0aac1b394918b26bbef93f10afd880dcd2d554617be4588c86896101ad7f72341d0ade1d9f16c3a107b9fe0035d53812486

  • /data/data/ru.wall7Fon/files/gaClientId

    Filesize

    36B

    MD5

    2503b54c733817b0511d56c01da470fa

    SHA1

    64c6fbddfc2f660fa6f6cc38cd63eef9b379efaf

    SHA256

    2ab6e5bb5d7a91798d72508cf553034938dd2b31f4830e02348ede3f5cdb73af

    SHA512

    287a2d5fd4d71a2dfd800d6b86c215be848c3a4a2f52995f961af73e83b7aa3cc6409b8ba7e38df3727a182a7d944ad15dbd21add3081fc05b4008609c767521

  • /data/data/ru.wall7Fon/files/gaClientIdData

    Filesize

    32B

    MD5

    2b042af7831595facdee5dbe6aba1f28

    SHA1

    b6f3e3dc693f5f267233f3b8b49ba3327d9d592d

    SHA256

    7bfc543282750e250d5c02ff15e3fc5d3acd74e9d6afc367866e8cd984e08335

    SHA512

    f8e31169a0b587374c3a3454dca077862e7e4ac0432199cacf41da96c003584ba37609177a1e5816dbb82738be7d25aa2225b5ca2beb5e3a7bf81a9586364e64