Analysis

  • max time kernel
    4187143s
  • max time network
    144s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    11/01/2024, 17:27

General

  • Target

    5421eb375ae6f6eaf46a813dd04bea2e.apk

  • Size

    11.2MB

  • MD5

    5421eb375ae6f6eaf46a813dd04bea2e

  • SHA1

    5ee7199183658684245f36b3c71a7f32770d7f80

  • SHA256

    41b6264ef66041f6e59654d10773908be3946a4e81b043554fddf9123bb0a9db

  • SHA512

    724fe2800e9e1e23d6044bf1ab2e98f0cf30409f9596b866caac423f435c091266c3f6ce3d28cf4e86c4b6dcec4e8dc6b40c815c6171b8c7f30c114a0af8a395

  • SSDEEP

    196608:PlaQe494ZCvwrORsnHq+lFJAh0n15AdlSPI47WZyvll81aWcU7W:PlaQV9BsHqs160PI4yAvllHP

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.fineapptech.owl
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4473
  • com.fineapptech.owl:remote
    1⤵
      PID:4768

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.fineapptech.owl/cache/1582435991586.jar

            Filesize

            9KB

            MD5

            e8e0527a01aefdb89afd2c508f131da1

            SHA1

            f1103e6b260c657ceb3d95f1b023af3fda8b133a

            SHA256

            f809447486f89fcaa74f87e06d126d103d37eb2b3157e88f2c06d989b2c284ce

            SHA512

            fb53683a83f1068d0f94567b156e6a8910c45b1b5f33db919f7e0b9c55eab28507a235ef76d44d5b549599ea3b54dbc00496a633339d276a80f395da938d6d34

          • /data/data/com.fineapptech.owl/cache/oat/1582435991586.jar.cur.prof

            Filesize

            94B

            MD5

            3d3b6e0493c8da15bc934cabb39db5f7

            SHA1

            b4e39c942bb206d512fb2bbce89d24f1c0f83d35

            SHA256

            c1160b9a0c5f61959002204a43a77c89641965b01b2232d374fe009dca6d2967

            SHA512

            0966c9430d829c9a7861a526ae1cbbfbb81b1a20360cb389131b1dd361a4852e6aca662e20404ae060660b1c1624c6118f56eb8834d03f4ef8e3d5fec0812a39

          • /data/data/com.fineapptech.owl/cache/volley/-711510240-2071804368

            Filesize

            2KB

            MD5

            f77efe6e2ac6aabcfa96f9a72f273b80

            SHA1

            23a861ed4e5f964dc698e85e2e78d4014ca5d093

            SHA256

            ea82632b352623f42617ba2a6c914bdd8347340c3f55711587f74ca6c8267877

            SHA512

            ac01d8b622a2f33dc8e21998906117345988e0abe9bc64766b1a67b475d0429864a51d430b83eab6708916b36f73ee034019e7f9879ae04832a6db9808312673

          • /data/data/com.fineapptech.owl/databases/owl_dbdb_applift

            Filesize

            4KB

            MD5

            f2b4b0190b9f384ca885f0c8c9b14700

            SHA1

            934ff2646757b5b6e7f20f6a0aa76c7f995d9361

            SHA256

            0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

            SHA512

            ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          • /data/data/com.fineapptech.owl/databases/owl_dbdb_applift-journal

            Filesize

            512B

            MD5

            3725788cb8fcf7c0c40404d8f9db988f

            SHA1

            9eab5a665dac37b681d1e7645e8730a607d32945

            SHA256

            b1b047bd98e38c5c720ab1cdb07e5421699c67559c0d050d3bb0c243c3252497

            SHA512

            088ab1d71036529f0fea2e950bedd0d95f311c7cb750c50b5505952a64fac2779accdaf19edf3e4096d0adfc7ff18dc4c88e3e3aaa737b0a2fd4bf960799e162

          • /data/data/com.fineapptech.owl/databases/owl_dbdb_applift-wal

            Filesize

            36KB

            MD5

            11a633f45d88268708eeb79b960599bf

            SHA1

            34389af0d4c904c7e98cf0b228e91eb508c86a18

            SHA256

            64ba1edd5370e80a45bf395d9f7f5c733fd3a86ecde4accbadfa0c3781426359

            SHA512

            a158f8cf0d523f00e0807e822b997ae4e3129247dda750390323af979b274b097edc476c26a2f66e4f86a8f4ec3765fbb343b361a2883d9388a54337d3f12f85

          • /data/data/com.fineapptech.owl/files/.FlurrySenderIndex.info.AnalyticsData_3GHRPCJ5Y7X5YFSJM9F6_171

            Filesize

            42B

            MD5

            ad58f401545e7096a14103f4b260659b

            SHA1

            506ac2d82b84056cf074c5a2404857c9edb0988f

            SHA256

            2a8d17bad9f0deb635260e0e4b6559ae9e69c83d5d5ed0de8eef76e2f383191d

            SHA512

            bf73e06fb88597107c88a0c5ed09f07fa497ec959b830020aa803f81159f09d96759dd65551625311abad560d861025bf028a791a705da6290cd911d543e7e77

          • /data/data/com.fineapptech.owl/files/.FlurrySenderIndex.info.AnalyticsMain

            Filesize

            44B

            MD5

            715e3bcd6f58b8d7a34bcc60de113c84

            SHA1

            659591af3787839047d7a38863e19f4570756dcf

            SHA256

            1bdc95c5c6d8bdec84d97727493c4f5baf035908fb5e23b101d1a44540d89ce2

            SHA512

            f6f6be77b34f7925d8cb669602e531c68c987e8864365e7b6a1211c19f22ac0852783cf5dc4536649791dbd415b6db1df1498eb40085b949f9e5ab5b182afa1f

          • /data/data/com.fineapptech.owl/files/.flurryagent.7792c297

            Filesize

            58B

            MD5

            d36bd9a11114b3550318989b18187d8b

            SHA1

            09356463bd3ed1fdaf70be80c90c5dea2225b774

            SHA256

            d220825d3b7d634eae03aa8609a9cd023b47f4b41dba1aa5853c5f5aeb0d18de

            SHA512

            7b46933626d329ed85813f42c0763bf5722dd82b3ae5bbca59daf7ac404824a74ab80e5efec3562d6c4a09de30f9e3413f1958e0f36137fd8ee3c0e269b78bb4

          • /data/data/com.fineapptech.owl/files/.flurrydatasenderblock.c908c305-8dbf-4a5d-bb77-eac4c94a5be7

            Filesize

            328B

            MD5

            5aae67ac5b43892086a0c6858c9272dd

            SHA1

            f7b02ee30edc5a2a9469c28fe30638c22e3552d2

            SHA256

            d3f46fff39c18e62454db795371ee0ee41e1bc5f24d05b0290288a066a0a9cc3

            SHA512

            207acfcb5d00c9560a5cdd6202ebe1dc6dd99be8e6bb595991752c96195c77d1d7223f0390c6d4f41ad64ad093be79aa66b163d7c8ae8a966d61be7fab2a0909

          • /data/data/com.fineapptech.owl/files/db/owldb.sqlite

            Filesize

            24KB

            MD5

            576842f5893f4c9778fb982e3dc80348

            SHA1

            13e56c7454e392c8b04f48a2d35db57a78fd935c

            SHA256

            fe6b11d6ec6e03dee013cfe8bb9a41303ab8903cc4fd8b0aee30c8db106605a2

            SHA512

            af96facea960179708a618a26f339c78a053b22091b2b1485c9a43674ac2b7465f3d9d63f82018d5b883ceaea3fdadf4e7414480822548b58707a597f4082f43

          • /data/data/com.fineapptech.owl/files/db/owldb.sqlite-journal

            Filesize

            512B

            MD5

            449a26d4226cc469ae657d4e44dcbe08

            SHA1

            e118bfd45ae95e61ad8b24932a6480bc053b32d1

            SHA256

            d5699aa1f3ac0ecd8aaa5766d47cd30f0142497310c9cec0cdeb52b036de3bc2

            SHA512

            22c6d0d7fba32c5a10c166a1099f6d0aae3d035fc550fdf7249e03f2f15963e66fdf010604df54cabd2db9823ba8fc22b146a463113062ca18b53733b1dbb561

          • /data/data/com.fineapptech.owl/files/db/owldb.sqlite-shm

            Filesize

            28KB

            MD5

            cf845a781c107ec1346e849c9dd1b7e8

            SHA1

            b44ccc7f7d519352422e59ee8b0bdbac881768a7

            SHA256

            18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

            SHA512

            4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

          • /data/data/com.fineapptech.owl/files/db/owldb.sqlite-wal

            Filesize

            48KB

            MD5

            7d817cfca09dca813e6e171a3264a882

            SHA1

            882c42826ac8e9a24e6c6964653da73defb6623e

            SHA256

            9cca69aca5bb1d2a11bc9d7097401ced0d38042b4ac15ce0393c8560068b992f

            SHA512

            f6f7a35d4cc41df0a100d0d9db863846a3ff3c119983aebb716555ec9ec97dcacc60e304a9296d226479eeb86164ab5a64de989d1548777bac224ac973ec0fdf

          • /data/data/com.fineapptech.owl/files/db/owldb.sqlite-wal

            Filesize

            56KB

            MD5

            babceb90cd89956264b361650fdae91a

            SHA1

            5b894cefa960d8b7413d541e2266e2980097c24b

            SHA256

            a559bd99b6be1118b0e10038ba3cf4512da1a3177b594ad89e1af1d62380b7e3

            SHA512

            fda07c655c827088db5fcdf8668135e2071c67b348ce5f040713517c337ba585ddca60e973d5d06e5b133b41dcc4154a0ca29a27f936c6be081932056c64ccde

          • /data/data/com.fineapptech.owl/files/db/owldb.sqlite-wal

            Filesize

            88KB

            MD5

            7ef2ef945ae0e007c25486da0b29cede

            SHA1

            c5d650721637dfb31595a0b5522c2694d90930ed

            SHA256

            3e0479acb481f975f31fd8d5d3e6cead2565bb4da1803b0540f326bac0b17a3c

            SHA512

            b4044ed04857665410d6d03f69d3b4e2d7c26071ea0003b11210ba2fd39c5414228356b585f5924d7de8c9370feb5855eabf2503203c41dfb603bd2b52e82ae7

          • /data/data/com.fineapptech.owl/files/db/owldb.sqlite-wal

            Filesize

            12KB

            MD5

            2c47245cc299a2acfa28c346419e14ab

            SHA1

            df8a4e56713f76dd2f091dc082a6cd1600aee2f3

            SHA256

            63c1d601468a3afc5144b3826761a0dcbd5a514ed6f3e516ed449c406bdec588

            SHA512

            f2d6e8e9fb224e99cd54125f6da7ee1965cd5008ab925906596d34ad9f7e3695ff9f673344caa144784bcd6e88f5f72c74dfcd1e9fe8535cfb57362ddb385783

          • /data/user/0/com.fineapptech.owl/cache/1582435991586.jar

            Filesize

            20KB

            MD5

            fde2ee00cbd121cfab5290b078aa3ceb

            SHA1

            e2b77d5320e155e413d040a8c20020962065b2f8

            SHA256

            2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685

            SHA512

            a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56