Resubmissions

12-02-2024 18:10

240212-wsetdace29 10

12-02-2024 14:39

240212-r1lvfagc31 10

Analysis

  • max time kernel
    6s
  • max time network
    138s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    12-02-2024 14:39

General

  • Target

    05af9c502cb16d13c1d320ad8a41e7f815c75fe135cf81984f1174ef87e109fb.apk

  • Size

    2.6MB

  • MD5

    81030a53e5a8d69b2513437220d23e42

  • SHA1

    e707cc3d153ff19bd8145cc54d56810478ecb4e7

  • SHA256

    05af9c502cb16d13c1d320ad8a41e7f815c75fe135cf81984f1174ef87e109fb

  • SHA512

    4e104e878f07e207dca48bb10870d819e6ce8dfde6d8b0cd7639e6e9cf3d2a382b6db58366720099ea61f344e684444b7d1e10d9d5f0cea2c0c45ae5b14c7d1e

  • SSDEEP

    49152:x/6EtQ4Wa45A6Uso4wAsz/7QfA8yHTc58IhIZLo2UBd204PzckPctG6G6u:Z6lnT26Usbsz/7QA8KcbIVxC4rckEtGl

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.

Processes

  • vip.app.com
    1⤵
    • Acquires the wake lock
    PID:4254
    • ping -c 2 -W 10 -v google.com
      2⤵
        PID:4371

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/vip.app.com/cache/~test.test

      Filesize

      4B

      MD5

      098f6bcd4621d373cade4e832627b4f6

      SHA1

      a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

      SHA256

      9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

      SHA512

      ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

    • /data/data/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      fa45058f84a0085f3e6d37a31a4e752e

      SHA1

      0b532060d92fcb4fbb4c458dbb545556edc0c510

      SHA256

      5e7ad0324611b11b5fa8fcffff4a8481549d6f7e6cee89e91950154e62dc8578

      SHA512

      dd3d5d9c08f7c5d25c944b3b8b368e6cda12b04c892675f2d57e05855a222b6609b93fa5077aa3d3c83dc3c219380f19d7df5321ba189ec2bb0387aabe0443b9

    • /data/data/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      691173201d47d61f54b52124150125c1

      SHA1

      38086d7bb76a3f170296ebf8c06b45b0a37d3b44

      SHA256

      f11e101473c24ed0a50c9b713f7b6b4fe18c398a2ac86e5306da8fb0ab6df1d2

      SHA512

      d682d022b0d4f34016ced18bb7df55c5c90194b3d7173a98bea7e62c0056371f93eaa5fef0414b1ba70a5cd60359ee23c59f33b17084962cc8a6ded0765dc8ce

    • /data/data/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      6fd3fc915c3bdc266fe99e2220e69ba8

      SHA1

      7d5e8524f934e8b1e36d6905cf9494f5d4b7a03e

      SHA256

      aab7171f5f3d141b1d568de048af0d620816a8cb6c134621a7fea93a762a6207

      SHA512

      b3bd4ca3381cb096c29c3b797ae534dd95b3a522217e444b402fa305066169570c0ea217ccb1377eb33b5d647b49eecbc0262b4e82579b124db09fe8f54014d8

    • /data/data/vip.app.com/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      7237409e0640cfab7bdbd429bf821a3b

      SHA1

      4c3da934842f8d4835dfe2a9c275a300e5123309

      SHA256

      5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

      SHA512

      c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

    • /data/data/vip.app.com/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      3d6029898c6d3dfd9b368488bbf83fb3

      SHA1

      3a6978cebea658b35f7285f53b959108b012294e

      SHA256

      3fc19fe2485c2316ea342dda460bfe25806a584c47499e931eb337a4d85460ab

      SHA512

      d1f8991e829fb446a16fd73398112a2061cdc26667aec835e86bf3bfb3e5f85ffbd456ee0297211cf705bc2452994a673adba078bcde650850991b04736a7959

    • /data/data/vip.app.com/databases/google_app_measurement_local.db-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /data/data/vip.app.com/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      d333bc2a6d0d0fc81981d3a926fcf09b

      SHA1

      0f20d7a43913fd69e271a9fc942b9891214d92b1

      SHA256

      24033c95b108a25a349475dff2f6ebfdced670e2f21e05a99fc51097ded800b7

      SHA512

      b86ec3a433bcae2d1f91e0e5f20aa22f91018663d219d9e6b2d0202f195392a19b21baae7cdeb5422a0f02e8c3b1e89632831f5010d8b480c0272f46bc6e8923

    • /data/data/vip.app.com/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      fa0c9c7d51a32f4e09dad208c830b71a

      SHA1

      02991ec160e2fc0441b9cf58e20df65917c99490

      SHA256

      8dff58de66878695ec8d37e7ed7e460846f9a850d205563de80cdf72911969ef

      SHA512

      55adde84b1331c7acf90bd12c851dd4cd5b08498585a38c1dfdcd66b622b567181d6dd0d7eab0d2bbac0dbe69cebf75acb1270756ca04de3b30a3fdc505bbcd9

    • /data/data/vip.app.com/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      ce72cdb5e07518a042aa3e58059e9e8e

      SHA1

      646df560ae737b10edbca36002630cf697352bbd

      SHA256

      6961ffd04f0ce73dd45c0946440ef841e21c48a0f262a09d017b1b2ebf4774e5

      SHA512

      a7c8e944d4ae871112310fae3bb9de28a6fcbd6d5a6ab44779c13ece3cf623de24dcaf7bcc005c753b7c6aa5a1687ffeb459b7aff2fa39f36ad6a46af76e64f0

    • /data/data/vip.app.com/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      0b752f6f1a41d3cf329cf59490956f17

      SHA1

      88dd1791567123f070131f70503efc3a112ff0d5

      SHA256

      7b0d526e44e45ad57bcd385eaf35b4216869186978d86243dab6be1395470e29

      SHA512

      7e8a7fc68d5727dbb78295f5e601432bac312df7a10a97f8c52afb89b11e4d003684d67cc43023aaa55bb3ac8225f72b7ede6743c917493d8f407924435242a1

    • /data/data/vip.app.com/databases/google_app_measurement_local.db-wal

      Filesize

      36KB

      MD5

      1e5d8f2c559b2244a43b0025a821f5b4

      SHA1

      8e670c26c4dd5dd2ee44f0f11b8129f4bc16dcde

      SHA256

      15d86a55fdee92dee9ed42431aaa52facf2294055ff1ceac9408f4e4d7c87657

      SHA512

      3a0f5d4e577f7e480a8a2580c6f240b39f4894a9d18e371dd649201e9dfa19e727468647fe5ee8bf37be979b9f7c11d4e54dd49955d1c709533ac84d3d835247

    • /data/data/vip.app.com/files/PersistedInstallation6015729052574246664tmp

      Filesize

      90B

      MD5

      43bf33efd100d959ad2f6d6448163010

      SHA1

      da39097be57856f7faee10ba888e40c7eda4f5bb

      SHA256

      ce43ced503521c361f0ab8eb3716b09023b45e7348cfb4f04ac618b8cef6635b

      SHA512

      47789364779439bf7442a1ece57d6fe3626f9d0ce529cc0d4d4163605d269a3c4cc548e7737134684f859552dfd50fae53e8daa16615771cfbfd0607092c4fda

    • /data/data/vip.app.com/files/PersistedInstallation8925866755060504697tmp

      Filesize

      570B

      MD5

      be20ea3099252e1f0990a4e26104e79c

      SHA1

      c9d8649327a47eeee257381aaeb756f0f549abed

      SHA256

      c2a6acdf2d2d58e13365de45cb5e99b952dc55602b94db63113051494f2bdf91

      SHA512

      fdc00e0cf5eebb96c92ece107f74c5fc6f97a511e0fbd9233ff5daf4fb44e85abe43fb30a7ba3bb3cf25da8ef6168330eaeff7f11dde9113d7e76ace875b7f94

    • /data/data/vip.app.com/files/starter.txt

      Filesize

      4B

      MD5

      b326b5062b2f0e69046810717534cb09

      SHA1

      5ffe533b830f08a0326348a9160afafc8ada44db

      SHA256

      b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b

      SHA512

      9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de