Analysis

  • max time kernel
    3931330s
  • max time network
    133s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20231215-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20231215-enlocale:en-usos:android-13-x64system
  • submitted
    08/01/2024, 18:25

General

  • Target

    4c250e0106b22b1b767120882e061174.apk

  • Size

    18.1MB

  • MD5

    4c250e0106b22b1b767120882e061174

  • SHA1

    2755621e4704be1d6d47a888cd3c83db8ca99637

  • SHA256

    4ef2f8f31eb8629cb91378dd625cc3dd7624a5aa2a46be606a288cd6bfba1270

  • SHA512

    10685e051dba95ff52aac7706e1b6911ba36df566e2f853acf4bdf1376680c6c7cc9b00cad457b0c94b25877ef2457510faa3d5ad836f61ad3ae09472f71f602

  • SSDEEP

    393216:bGOw0yRkFGDSKBLcq+n6vb0m1qkvS/N5+E5:bGEjFGDnNF+6vb0YqkvuN9

Score
5/10

Malware Config

Signatures

  • Checks the presence of a debugger
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • cm.aptoide.pt
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4315

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/cm.aptoide.pt/databases/aptoide.db

          Filesize

          12KB

          MD5

          edb655088d1ed9f33f9d0d499b7a3ef5

          SHA1

          565c4f4e43179dbfc285cd6331dc8ac75a901af8

          SHA256

          bb9e45aad35b43e895393e7a66e4ead6a5f728f90b7627e3c741d391bf65d4f9

          SHA512

          98cbf923880de82921c38973fbc6d711dc39884428d1eb4ead33658a5a7f163734e5121823d5b043ca44554d19c5b6f966674ac7291513944a94cec97d5be599

        • /data/user/0/cm.aptoide.pt/databases/aptoide.db-journal

          Filesize

          8KB

          MD5

          0f23ae4da0e236a0d356840e67470e41

          SHA1

          8d748b1017161cd3b19338a1f88d50c79dd0a850

          SHA256

          ef04168286d94ac92ed2e3c0a1dbc94b8370a711dd3df399c5b6838f207c6471

          SHA512

          b45fd47400aaf8a10aa1eff4069802cc67d5b93126815b153f6f7cda25c3f611f5eb6809e3babd67e5d1e351d71f0abe7094d5c3170622cb73b2744373df067b

        • /data/user/0/cm.aptoide.pt/databases/aptoide.db-journal

          Filesize

          512B

          MD5

          8f72ffb9787ffb7d858b265a225c5b28

          SHA1

          e1c221786e37a2cabcdb7d0755849d7e5fdcf3e4

          SHA256

          589d48b46781bd8046aa68c8608d774c684136eaf6283bb21b4f2654b1274b8d

          SHA512

          6b72a7fb031d2b543603a381b6c9344c05f312715d32e9f432fe55ccf09d0260fe746ad040030f4c2395972b8a2063f3cc5f69a8b7820230ee4b1de5151cd280

        • /data/user/0/cm.aptoide.pt/databases/aptoide.db-journal

          Filesize

          512B

          MD5

          b9579d22b2d77b190180a010ed12afd2

          SHA1

          cc9641effe1bc2aa4864267fbdffcdddc8b6e94f

          SHA256

          43dac4f5d910f772dee1fcd15a81314e069a7014f3ee39246bc47f08922759a7

          SHA512

          42185f73c699a4332f99711d87cb964c50d48798a8b4ac9ba0500c27592199568f7253945971b306420c027bb1f4bb2389d0fec62e5ddf503d26abdee0680090

        • /data/user/0/cm.aptoide.pt/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/659C3E4802B8-0001-10DB-1FA30F39B30DBeginSession.cls_temp

          Filesize

          79B

          MD5

          e6d662da0032d611b4ecb1ca9dd4baf7

          SHA1

          5f73ba36c7b8ec6d68f61910d9d64f070bf92b13

          SHA256

          fd501807e64c94705272473e6b0a727d13605c9a69b4fe426cee6066c2f1a78b

          SHA512

          cf72e76fa8bb86d18fe4326f3899c8eadab285c72177c20f7074ef29fff153b375e97195688e39c6eeb74c1d046ee44ef3af1c623a1678f41633ec4a0eb9b25f

        • /data/user/0/cm.aptoide.pt/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/659C3E4802B8-0001-10DB-1FA30F39B30DSessionApp.cls_temp

          Filesize

          112B

          MD5

          9a705ad52bd1d5f10754d3f364192145

          SHA1

          b43fb0e4eb63ebec4c89e219c277c2ce13124dd4

          SHA256

          523ff587b59a78edb3176b9c24700cddd654f9840f65995478caa6deba328dc6

          SHA512

          38234cd71480347ce0debc7e6af5c8af2fc627f43fe60c19978d9bc502a4d85a7c0538cdcca42b1067446a5248a5f8f2e73f5f15cfdb48e38a4a129186f1bf59

        • /data/user/0/cm.aptoide.pt/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/659C3E4802B8-0001-10DB-1FA30F39B30DSessionDevice.cls_temp

          Filesize

          131B

          MD5

          ff0fde1de45d61e2bb44d3400d3afd1d

          SHA1

          1ed09b7513f3fc0641c93e6e20a61ecf3b0227fc

          SHA256

          2967b0302c78b601c37c6531a20db0c51efacacb6a26c368f1c4b8078b31c3a9

          SHA512

          4b53283f4fb71d9992be1e6d4ecfb6b6b3e1cd11b0d9c263838b6aec829fb3bec2a55b63b7c7b1be786e64228133fc725c12268771495c4fa39305136460548f

        • /data/user/0/cm.aptoide.pt/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/659C3E4802B8-0001-10DB-1FA30F39B30DSessionEvent0000000000.cls_temp

          Filesize

          5KB

          MD5

          f06c4aa7398b6c02537806b8756154d5

          SHA1

          2e84dd1fb8edcf37b4b6957cca333529f12e43a6

          SHA256

          d85cf5d78c7358f8d9d547456275156f769677d074c6eb42d4403092e39085ea

          SHA512

          22a58482c21f1d4f5e5c062d5f7b77c290f366ecea30866a4423c5c73dd9b4d221c2e936d1211b53e0d313df20049cfd99e9115264ca7ed9d051eee5f87232b7

        • /data/user/0/cm.aptoide.pt/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/659C3E4802B8-0001-10DB-1FA30F39B30DSessionOS.cls_temp

          Filesize

          15B

          MD5

          f8b3ebea29c91d82f009e5a9c6d11060

          SHA1

          99d88c4b39d9143084e777b93d9692a59a3d087d

          SHA256

          b7869422f5dcf3f24ae91560cec05ebb39852ed45baf3a31176f9b90de87aafe

          SHA512

          6f89bfe6bc1c0a68bca73ef92c53e1a308fd63f2228a25a6e34d117fc5cd253209eed56fe08f51d5643343a152acfdbfbb1c5dcea224e2750aed46074af369de

        • /data/user/0/cm.aptoide.pt/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/659C3E4802B8-0001-10DB-1FA30F39B30Dkeys.meta

          Filesize

          107B

          MD5

          9b6e13fe518dc72811515cee03535b2c

          SHA1

          2c6e60f91d5076ae5bd7b4c7a4c31ade814b3189

          SHA256

          37bd77db285f476f635cd7019869903bc99e295e3507b8fa75021f6946eef7e0

          SHA512

          d9d5961bffecb4933ab35d91fade519a08b249d8e8ee7d08299f78ac76f38e1ef8d46cbc796e3ed1c78a90efa34ad9c8fb144a3a486c76b12c5276e933c92e61

        • /data/user/0/cm.aptoide.pt/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/659C3E4802B8-0001-10DB-1FA30F39B30Dkeys.meta

          Filesize

          107B

          MD5

          fa6657fe24376eb1bae95f924f655c07

          SHA1

          b53707542b7b02a054cad76a6be37412699e3ddc

          SHA256

          dc25ed3b50213c09c1f57fbe4a88ca19fd55dc1be056c929517507dbf5cab80a

          SHA512

          3dcfb698feaf0b1ebce66410be6d056fa9ea608b7698a80add5f12a598513b75b1c180618cf35391106ee2c44d52626674aab7eebc5aca69670d1127eff2e8fe

        • /data/user/0/cm.aptoide.pt/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

          Filesize

          517B

          MD5

          c26af894894dcd5b7b7ee24ce67c7432

          SHA1

          4558f8726bffad66238ede47ae752d2e0ae15e39

          SHA256

          60706ef7a312b274aa06b5f84a96f8c28fadbafb1975e5bce47ec515e1239f1d

          SHA512

          f202fd788f1b680d39e79c06f2d5f11eb76b6e4142eff2078a3bffe8b8e6680d8f1b4d8634ad22696eca60b06de5340028df0ae354ce2659ef17358e02b8b24a

        • /data/user/0/cm.aptoide.pt/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

          Filesize

          1KB

          MD5

          87d13f69b36df80da7a79562b07a2ed4

          SHA1

          bc1f6a51982b9155d8027020bc36adefc4f32955

          SHA256

          16cb3f7f37179015ad8839e5e10ff4e673b1cbefa503b01ab06dcec6942b45d5

          SHA512

          3caded662196724c79f45b1bae1d6a3082f04c1e58916af430f6d48b590061af68c1d24e57c7096fe5f6aae8d34991329f4f23fcb5cf889f731970cf02f6803d

        • /data/user/0/cm.aptoide.pt/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

          Filesize

          16B

          MD5

          c33583fae4e0b61cde1c5b9227963237

          SHA1

          fe2ebe4d27469af1460f7e852031a04208ef629b

          SHA256

          35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

          SHA512

          fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

        • /data/user/0/cm.aptoide.pt/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_d62751a4-cdd7-4fd9-8da2-e6e7c8d1a483_1704738378124.tap

          Filesize

          396B

          MD5

          b3f428a09634fd7333bf8c11acc7c42c

          SHA1

          863fc11d7cf1d798285a4469fb16119f7c8c5469

          SHA256

          33c87ba17914345ee49349eb5a8063b7660f43ec89e2c25e20aa1fceb7191eb4

          SHA512

          8ecf3380051443f3a1fa4ab0d542f0e89f462de3c9e4a3d6da83d82c8a4efc2cc367b472fa6cd6077033f80d7da17e5c11fc28c5e0d52705342f2d743e41669c

        • /data/user/0/cm.aptoide.pt/files/.YFlurrySenderIndex.info.AnalyticsData_X89WPPSKWQB2FT6B8F3X_229

          Filesize

          88B

          MD5

          6ca28811a87cc81b59acae33774536d0

          SHA1

          6a0a96a7909c16d7ee7ec0967445b8bf79986d02

          SHA256

          f797e858f8a8c5a91bf8d8431653b01b78457bba7c3d0cd0edc14b9dfa938a72

          SHA512

          3057536dd3286f5c5defab2063918c461baa12747a52a3bd468025c9cedfc5a75e98a2f492a11c3759cda94308c47636f9e5b9aff671c4ed8c95d0996ddd3949

        • /data/user/0/cm.aptoide.pt/files/.YFlurrySenderIndex.info.AnalyticsMain

          Filesize

          72B

          MD5

          9178aeba7a4106d6fa76a9381b292fbc

          SHA1

          5726c7ee8f69b92f216b4fe4eaa2beadfac2af85

          SHA256

          8c06b6e6defbf1adaf5546095cb1bdef5cb40a6285c342649c64fc6042ee8800

          SHA512

          d7fb2df502d891a8b8015810363f2df6fbb3ef4b32ccb07eefa278ba45ba324288a0a16db33edee95fcacb637b69586526663478edfa810eb205ee9f5b4d1878

        • /data/user/0/cm.aptoide.pt/files/.yflurrydatasenderblock.d359c9b2-a1c3-4627-aab3-e0dc31b4a54e

          Filesize

          292B

          MD5

          bf058a714c94ee73e55675a2af403d82

          SHA1

          3d459b0bcf856e458fb6d654e37b7e103e8ac854

          SHA256

          2e62d1705d3600a48a11e9cce8aef1c55dc2a3786e2d83382fbe4e7e7abf1101

          SHA512

          81bfe7e007c9ffc956294bab2a1b7fb4b9b022a1c5ba2ff5391e845b80fa7d3e09b92c35a59f54eefac1dedf6884f9fd0f540f53c47a21a19e603962cb854aa6

        • /data/user/0/cm.aptoide.pt/files/aptoide.realm.db

          Filesize

          24B

          MD5

          a6574431b943e0bf47642c666f3fbbe7

          SHA1

          79191cabd86accd903f27c523c95ef19933c64d1

          SHA256

          60692d3a39b5fa2c7ea60c7be7014c2069f7c0a3fedafa269addd8143ec15f6d

          SHA512

          c438e1cda3bce0de04a34e3f53f17f7cdd235e80c656c31e43a21b37e77dfd90de14c17a5c6719b84a14899ff41107a75790b35306c7ecb1674d6f60de9bbbef

        • /data/user/0/cm.aptoide.pt/files/aptoide.realm.db.lock

          Filesize

          1KB

          MD5

          ecd770cd2b14c7658695c3efd2765c02

          SHA1

          efcc9b5ecee065b4e92da097a9630c8234ad0711

          SHA256

          24526b19e09cb6b2c91ea4ed6b268eee380ae950de0c99ef50f691f101407668

          SHA512

          016e2f1e3f5d0c18d57cbf7539e1e870043d02e6f4fd599ee53d73025e9506738ef04b8a507d5133a3eddc3e1b72a2c080b8e349f29361e6f6d477156668b801