Analysis
- max time kernel
3s - max time network
145s - platform
android_x64 - resource
android-x64-20231215-en - resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system - submitted
04/02/2024, 01:21
Behavioral task
behavioral1
Sample
0ed8987b07a4d017db6a475ff327eb6d9c6004ec5155a72635d3a4202a28839a.apk
Resource
android-x86-arm-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
0ed8987b07a4d017db6a475ff327eb6d9c6004ec5155a72635d3a4202a28839a.apk
Resource
android-x64-20231215-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
0ed8987b07a4d017db6a475ff327eb6d9c6004ec5155a72635d3a4202a28839a.apk
Resource
android-x64-arm64-20231215-en
1 signatures
150 seconds
General
- Target 0ed8987b07a4d017db6a475ff327eb6d9c6004ec5155a72635d3a4202a28839a.apk
- Size 2.8MB
- Sample240204-bq1ylsebb3
- SHA256 0ed8987b07a4d017db6a475ff327eb6d9c6004ec5155a72635d3a4202a28839a
- MD5 6b75d656c4bc46679e85fe0b2515951b
- SHA1 d795ea1715152ce0381476725766ec76db4974c7
- SHA512 e98e942ba8214891c4afbeb626c5fd3fcce22ce7b14570d249a0e34487f7173a6a44437f1e8d45b39abed43fab36200f78d8de5f417b348c91cc2b87b71d8b4c
- SSDEEP 49152:Q/odkkEeXP9acJSg2a41GOh7/ZS6yu3pXJY9cLyy0F8S/0KkuB/W8FIet9H9Ck8E:+0kkFXFZEg2/l7xlJY+Py8SDYeH0DI/
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock edward.org
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/edward.org/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 c1ccc325c2699ed7f556cf171566317f706a911c4d02b1644a2a7908b93da58b
- MD5 188c0542bc062e48b614e5ca8c1081af
- SHA1 0eb9b89a5c92957cd1fe748cc063b32853339774
- SHA512 62a67f2c56bc3b40d49c80094f160d355a8f67130e1924109426e0481008bc2cd11a9e2675a901abd03cad1e7fe0028031e20d826437edcf35b6f86e2499c2b4
- SSDEEP 6:l9bNFluls1EhlO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOw:TL8EEh9zmzrfRmBEyPbBvOw
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/edward.org/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 c429bbf9e3ee70c9f5326458a2fd6609f3fb2a7a6816c871e4f5b2372938e99e
- MD5 e60c7663ffec5999ba171d1ff56f594e
- SHA1 df69d05b1bce9a2e3cd4af16e3ffdcf4a5c8a016
- SHA512 da6e9cdb0906735eb0fe4198e0487e3ca51bc025d40d4425ca75cf82e87167e256faa11ce1564b2e605262f33ac88ded68a577e33da6c5b49aca1e1a9280e4d8
- SSDEEP 3:krcl7lHNll2Nll:krQ
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/edward.org/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 754c3fa988d4ad85b38abd37359a54f598e5beb0458b976bae78a88ed524c66b
- MD5 8790605475d634120121edb49dc6aaef
- SHA1 2c426d1ce16bbc3fd829ed030a6f139f8dc21a7a
- SHA512 b71d5b1903b3316241a310271f4980b292bde9db2fdfc530827771bb9e18fa9ec683dfb4f802ab37f969715408b9a79cb2517ab07e8aa4083c28e3157ab82440
- MD5 SHA1 SHA512
- Path /data/data/edward.org/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 69d52945fd6f0bafd41a373cf5b729888fca97f3267ed635e06732de26ad37a1
- MD5 425f1f5ca04e3ee2d7948e913036428a
- SHA1 84c9a6b4d3fa07ff6b6e24e3f66f75643bdfde86
- SHA512 e37bd1741d0dee5da2fe130437113c777fa46391d6759ad165b48719391e19799f3e8462d5d0453296fb3b4d5dd57bc389d33ef41f85f2fb91bc9b8486a727c4
- SSDEEP 6:7+/l9tOn11Rg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuK8tn:7+tsqLiuWdwRmBEyPbv
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/edward.org/databases/google_app_measurement_local.db-journal
- Size 4KB
- SHA256 8c77488dbba8537c8cf571eb3822f39a356ddc8ecd1b72ca4225b1c67deab7f7
- MD5 cd3f666bdea632db3f4103c238f40447
- SHA1 5125e182529bf7201866a9b5787cb63d5db04dda
- SHA512 4606698a4c3b0a3818461ce92968059b800bf9e3f3315c503c303d786bda6a8c5d7fe53460ae0ecff024facc61bee761571dca445e52f522216a3b1fa5852f5a
- SSDEEP 6:7+/lgHPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKn:7+tgvqLJdTRmBEyPbc
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/edward.org/databases/google_app_measurement_local.db-journal
- Size 8KB
- SHA256 f861c597d9db3024e105b5e78b979615fe622bd766bb1b941f5b1092a74c6111
- MD5 8277b095f64f31e462d5d89cf864a2a0
- SHA1 2d25cb7a297e8d7aa570fd52db699ade1fe7823b
- SHA512 e1c0570838b2ebb99e98f168a3d628a9a8123602b49b2eef9a3ef497b860d9b108763d70017e23a12f2718e786906842f812c7298cae85c7c0401951006c6f58
- SSDEEP 6:7+/l9XlgPg9bNFlqhO1IlOERX4PBX4ogLugMBX4suuKSlM/H:7+tpl4qLmqCRmBEyPbDsH
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/edward.org/files/PersistedInstallation3376980533734834494tmp
- Size 90B
- SHA256 3b302fa24e3dea135f0abacfcaf82e5c5035921d70a70a43c41eec35c312f579
- MD5 cc7938985ce53de39cb99bf09a2d8f8d
- SHA1 965628edd134640499845df2f775ccb0e5df251c
- SHA512 ee62d7010a952cc2e550f1908d25dd3f169c013b3a3dd72352cfaf1a1b78e08cfc7e92a37c2415bd67a5e2273882d11d1e5c4c232c24758f76f92e929b6df7d8
- MD5 SHA1 SHA512