Resubmissions

12-02-2024 18:10

240212-wsetdace29 10

12-02-2024 14:39

240212-r1lvfagc31 10

Analysis

  • max time kernel
    5s
  • max time network
    149s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    12-02-2024 14:39

General

  • Target

    05af9c502cb16d13c1d320ad8a41e7f815c75fe135cf81984f1174ef87e109fb.apk

  • Size

    2.6MB

  • MD5

    81030a53e5a8d69b2513437220d23e42

  • SHA1

    e707cc3d153ff19bd8145cc54d56810478ecb4e7

  • SHA256

    05af9c502cb16d13c1d320ad8a41e7f815c75fe135cf81984f1174ef87e109fb

  • SHA512

    4e104e878f07e207dca48bb10870d819e6ce8dfde6d8b0cd7639e6e9cf3d2a382b6db58366720099ea61f344e684444b7d1e10d9d5f0cea2c0c45ae5b14c7d1e

  • SSDEEP

    49152:x/6EtQ4Wa45A6Uso4wAsz/7QfA8yHTc58IhIZLo2UBd204PzckPctG6G6u:Z6lnT26Usbsz/7QA8KcbIVxC4rckEtGl

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs

Processes

  • vip.app.com
    1⤵
    • Acquires the wake lock
    PID:5077

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/vip.app.com/cache/~test.test

    Filesize

    4B

    MD5

    098f6bcd4621d373cade4e832627b4f6

    SHA1

    a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

    SHA256

    9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

    SHA512

    ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

  • /data/data/vip.app.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    438ca60adf2032803a3d75014ee910a2

    SHA1

    25d27cbc357e8294aeeba4895603d2bf73852cd7

    SHA256

    55f115f39ade991168fc6935aaf84bd0f016191303d425208ce8fae74114a37f

    SHA512

    11038044e328d171ee2be19e5e39a607af1845df060cbf7e8efdae5bc12d01364838959397edad0e2e7e996731440096128750b84d4c86f91d907b91add1550a

  • /data/data/vip.app.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    9e99e98e18cf603a1a811ff2b5d0b632

    SHA1

    750d019decd8349d20c70fbf663cbf7bf99b89b4

    SHA256

    b150e2eb3223f307471184f8df8cd58f7c98800f4a09ee3b72d24a3e50fd2a4a

    SHA512

    fdb47b2ebba97c32d5c10dc0a8d1a4ae89ad9fee0dc14582fc1e762c64d41998e27350511b357d5b5458166b23495130d1cd1b97d477065a232174e863a810b1

  • /data/data/vip.app.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    3e725e75f74feb8052ef9cee173ad75d

    SHA1

    50a4a8fe75f8040a00068cbba00f9134fc3e3fad

    SHA256

    98e33b61c817958d19baa9a21b6669fdd1a81b03f855228b415c03ca0541e82f

    SHA512

    0e669ad7dbb1ac3da32bbcd0c5b5f9a77fda947d773e320ae75e146053697ddfaf083a0aec61f076e42070f3d66b0f2b6e3fa993f286d9a1f693c563d175a0e2

  • /data/data/vip.app.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    eb52a90bb70b76e946b62f50b6f7fb85

    SHA1

    42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

    SHA256

    48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

    SHA512

    b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

  • /data/data/vip.app.com/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    ed4d12ac05eee41174ad52afc8e3e4c5

    SHA1

    add2c662b9e43626cf12772c5cd6da8ba11673fc

    SHA256

    337c4af6509af08911e0cd36f9c9e14ed6b2e3b1e91e9852648edc8d56c786ee

    SHA512

    728f598933f7149d1d5759f4c0d6f4cd55d2cbbe483f67fa7fb2b587b6091aa9c1f39c0c94c091a9e0d7c2b9147ccecdf479c3dde8c751d38b5d1d23dfd08716

  • /data/data/vip.app.com/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    a5fdb40963ca24bf6fea41c9119e52cc

    SHA1

    f082ebbbfe6259e0554dee061f05cba741b0cd86

    SHA256

    c11413c1a0ff30a75c8564f1912adb0e3704f14dd7444f63a9b0ffe90fefd32c

    SHA512

    2747b647d4359164b2233f754ab4679e16ef68f1d1180d36ecf5a9370abbdb9d0dd83f086970957a8480037f868e26896966982bd622d4ccc9a58b404345aba0

  • /data/data/vip.app.com/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    b4304d60897bd4d914eb110cf4b107eb

    SHA1

    c9b8776a01a7d8ef56d3166ca0e7622bf9790db7

    SHA256

    9a78e42ee38fa98e64d1183f2d2f6ab9a7452739af21564f9e2e5ca2db411fa6

    SHA512

    754ecbd12f24c772e2c40c2490630e6a1eb2e22c24f0a0e9ef0b9f92c25e16e5f67d56820ef5e01f1813230dba89b18b2175eabebc02d6e13d3f87e739dbd013

  • /data/data/vip.app.com/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    b4bce47eecddc74bcadde32dd7bfcec8

    SHA1

    5b7c8e4bc06ba52f57ae8287ff61805426f2857f

    SHA256

    7d2078a58df4ef5101d4d4ea4fc440c13494303747d175a51355edc0c283ab11

    SHA512

    95add39f8930e8e194689df3704348eaa935e9780b384327993850e522ce8c9d57cb1c459f7c8f57ea0a70730bcff28b38cb5b364c3b2fa5d9265e5b16d2602b

  • /data/data/vip.app.com/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    e15e5604d744211ae6a252fb5506a356

    SHA1

    d0536f4a6d8336362927bd70a4b7510403c4d94b

    SHA256

    9690d73766ad549ce91ed3f5089a05f18f06c5fbbab47a0f3ce230e45a175606

    SHA512

    8e27c162bcc5735f63fc3ec55217d9fbd69c0ea37ef43348cb75a556b2224b736418b41605c9467f146cac63f0aa78d397f4eedc3244da1e99fb0ff89dfd19ab

  • /data/data/vip.app.com/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    06ae9079a9a249d6501ef6acaaaf3ffc

    SHA1

    a85718ed351b7dcb14333739b03c9f6e81e49f2c

    SHA256

    24ff725702123cdbd0bd62c39de724588347dab6fe5b99cee9b02d45e7cfc643

    SHA512

    18b78a94a63e5e2e6009485ded3de29cb133e7f25975e6cbfd7ab7ff11b274b79460963f2871131eadff5e4cb19b9e5087c3c7162ce43a0deacbe35cf087bcf4

  • /data/data/vip.app.com/files/PersistedInstallation3914019987182571921tmp

    Filesize

    568B

    MD5

    b9e22c8be8e524532b450ccfb713b401

    SHA1

    9572a7041a72b1501dbe3ae147270f4b0511e0b8

    SHA256

    bdfd0f6fb58347a5da58c4eaa210902ba4ce8cb8d98958aa3c62a8a423592435

    SHA512

    77297a7800c04ac9b62e3a7fcdd5b56df02f981cb728feec48eb6fa369d668ac7dd52c5fd14adca45e00e40a6bce1413c6cb5ea7b5c0c7ffc01ca95117c51039

  • /data/data/vip.app.com/files/PersistedInstallation5501806544552216156tmp

    Filesize

    90B

    MD5

    1ef9f2defde013c69e86305f1c458839

    SHA1

    cd0bcd9953bb8bd3d076d1c90e51a33631dbe561

    SHA256

    af468d062d39edc52554bab6b97d85670c2dbe5c1c645ede596e6947c66fe95a

    SHA512

    eeeeeb99dc8df28327f9269de919f17d6a5fc758e98c947004d1ba94538fe69fba029fc6b1403f9246b6c8ac6a8400438e6f4cefda43261460e30f78af971e59

  • /data/data/vip.app.com/files/starter.txt

    Filesize

    4B

    MD5

    b326b5062b2f0e69046810717534cb09

    SHA1

    5ffe533b830f08a0326348a9160afafc8ada44db

    SHA256

    b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b

    SHA512

    9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de