Resubmissions

12-02-2024 18:10

240212-wsetdace29 10

12-02-2024 14:39

240212-r1lvfagc31 10

Analysis

  • max time kernel
    123s
  • max time network
    133s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    12-02-2024 14:39

General

  • Target

    05af9c502cb16d13c1d320ad8a41e7f815c75fe135cf81984f1174ef87e109fb.apk

  • Size

    2.6MB

  • MD5

    81030a53e5a8d69b2513437220d23e42

  • SHA1

    e707cc3d153ff19bd8145cc54d56810478ecb4e7

  • SHA256

    05af9c502cb16d13c1d320ad8a41e7f815c75fe135cf81984f1174ef87e109fb

  • SHA512

    4e104e878f07e207dca48bb10870d819e6ce8dfde6d8b0cd7639e6e9cf3d2a382b6db58366720099ea61f344e684444b7d1e10d9d5f0cea2c0c45ae5b14c7d1e

  • SSDEEP

    49152:x/6EtQ4Wa45A6Uso4wAsz/7QfA8yHTc58IhIZLo2UBd204PzckPctG6G6u:Z6lnT26Usbsz/7QA8KcbIVxC4rckEtGl

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.

Processes

  • vip.app.com
    1⤵
    • Acquires the wake lock
    PID:4497

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/vip.app.com/cache/~test.test

    Filesize

    4B

    MD5

    098f6bcd4621d373cade4e832627b4f6

    SHA1

    a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

    SHA256

    9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

    SHA512

    ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

  • /data/user/0/vip.app.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    9ee82831eb85976c87abe792b5c9c751

    SHA1

    fc6276815ccd68bbdf9366221c54bbcd65968e9b

    SHA256

    06ada210449f95271ec274d67c2b1f6b2192a693f81313068c37066b4e1345fd

    SHA512

    1941b49a5da65aca914d85cc1dfcd6e67ca8126cb16e25b549cb3e480edb5d34ddfacd22d04d99a677508b6e823b4786db3d0b04ac5da1f577202611d83f5a3f

  • /data/user/0/vip.app.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    459c390ca97565f6fe222d83277be970

    SHA1

    8a31f1687ab7323698d2c1863a493dfc7e929964

    SHA256

    4eeb63ee191b64be8e53fb137db2c5ff62392c14b196941f67e85163dac2fa8b

    SHA512

    ea206ba8a0eac194922e1ce34f24dd58bc8e838ba1c54ff691d61d289ba7413b361375f5deae72616532668fec17a90447027e29ba3f9f67012464b59d2597c3

  • /data/user/0/vip.app.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    52550fca5a1d61fe4ef063b26891d4a6

    SHA1

    9e73dae293bdc9eeb0b696d69b8a2e988ee82c76

    SHA256

    bae0d818805c1fe013a11940f6fd357e609a685f58e7ca7ba415305f53967ba8

    SHA512

    8ffd4d727c7926c83e39a61cfee02ad3086978b18139c21e9390b3922dc48524abcc3e68ad48739988dcb04bc0021bb7a387b9ea0e55ac58dcfffcc85cfd5841

  • /data/user/0/vip.app.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    5da34cbf2057a9389b2f9666855a1bb2

    SHA1

    9ba8205666d5b3fc6c5e31094b8342e5ce37c5ed

    SHA256

    14d599f9207623c6808af3ad44fd94377f635f8aa1ee85a3b01bf70a5ba30203

    SHA512

    e02af99f4a5a3c6f06dc0a0d3d03191c60321d297083d009d46fc56c9da11c7bb40c97f5382bc39abf5c30dfe4da025b376c9dbe092b526a4ecfcdeeeb72b601

  • /data/user/0/vip.app.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    de82e2c94d2718988804b035a46d17b1

    SHA1

    705f5ff19093ad209f2a666085d6ccaed3bf58a4

    SHA256

    29110e626f8f49171d14a819b34492d094120f21ed7a963007fe95439d771d39

    SHA512

    68f5f88e638e76cb5036dad6b320896f1735f64067ace152e0baea81e9ea0d153559f53bd5c608b397281369dafd14c5f5965f92f567dc89db157414a699023e

  • /data/user/0/vip.app.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d9cf75fdd1c2292d986f6c3d5d60f2c8

    SHA1

    07ecb1d3a26d952ae5fecf54f36699ab498510b1

    SHA256

    2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

    SHA512

    442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

  • /data/user/0/vip.app.com/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    84828df80d4eb13fc4b3284ac0fc0dfc

    SHA1

    c771964af9144c5f136f443bade5f66a37f5a051

    SHA256

    66cdffcc82b23515dd3671294edd939ab444d6dd308dcc729d3e4ddcf59d7dcc

    SHA512

    b54de0869c27c1d9785202df367a055818ea29c82076adeae6d85a6f44447b73653c0493239cba07e1bd92071cb9a9cb246a418660d6e02f089d60daf16deab0

  • /data/user/0/vip.app.com/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    92dd3a812d94d691309dda1d9c5506e3

    SHA1

    356fba04d4c94d2c0c3c2919c9249cdfc82ccfd6

    SHA256

    9ed193e6b09ed121e2f97cd993f18560d0007953b0c3d5a3b135964b90810742

    SHA512

    3b55020e128411c45fd4a924d3cffee7f8de976c1770c845a4c22868e83c6106e0d0c363725a04a1574a84404271bf68f777a1af95c7a6b696bc46191d0a4f83

  • /data/user/0/vip.app.com/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    d2fb52ac417137053af0f98fd6474807

    SHA1

    a05dde33ef3c4c0d10819277f1c9c3c7a6adb525

    SHA256

    0a14bbe8d9616d7e5a24c76d18e421c48e8fecdbb3837f472708c3f0f66c396e

    SHA512

    3ba8ffd47ba9d79b0ee88529268abcc0c6d2bd5f08a141b53604d5df77d555c3abc63347348fec39a1a4aba65f470519db010decf12aa10e41577d8f12507a00

  • /data/user/0/vip.app.com/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    4ba360806f5d30707ead200dcf902d52

    SHA1

    101257ee03db57db3e94df57a0b864cf6363bea7

    SHA256

    da8336aeb64a4ff20402cde5271ce2e6ec440c0d3d529a6e5ecabd4fca82a8bc

    SHA512

    d811f2b0b54cb1b72b941a0d652c38a4b0faa1fce678f05f881bf0fb9557dbcd1d97651467fdec1202ca34240eb98683d60ee3e81bc2b95f8c285f3cbceb813d

  • /data/user/0/vip.app.com/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    914615097bf9d43df3a755260c583407

    SHA1

    dfc8cb2c799f17087fa489f4da7b5484824b7479

    SHA256

    8e5c1413886d7fc4b21e7f3eff68c726df6303db20dc9ba34c4fefa301d97d8d

    SHA512

    def10bc9c9f8c2a11396cb174602af9287168b1d7e840f0685b0537764a56b793735f72c97e5757e6a3b1c30cb39c9685d82bd14b5088637f307864afdbf0f09

  • /data/user/0/vip.app.com/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    20ecb6eed9106a930334935c3a8ff821

    SHA1

    f76da72ced379207e580cb89f80c2a21cb0df3fc

    SHA256

    b339538789ee634dbd61180995c72d1738bbf872cbe25b2cd32b7f41cec20c48

    SHA512

    39a87673c05b26cf1b744429a8cb632082d71f949e5a672e580f85a48b8f57ebfff43616e456e971fe9f4900e7da719461fc3bf9696193bfede23fff6b4ff792

  • /data/user/0/vip.app.com/files/PersistedInstallation2140921485259696374tmp

    Filesize

    567B

    MD5

    772d7b7b0421b6c2d1b157189756e37b

    SHA1

    86e9d2b4c31615e4d4f5b6c1f36e3031eb72aab9

    SHA256

    5f88a3ec5fb790d75140609e1f3909fda6879b6e333b2243773cfdbe94bf2d0c

    SHA512

    b9e20ae3eb732f3e5fb273e9faae96b44538692a0e4b2a233d98aa053efe19819caf06cebf598ef9e3948d93a3fe13421bb90343c878aef0be8e3e3ca114105a

  • /data/user/0/vip.app.com/files/PersistedInstallation8968652040902531415tmp

    Filesize

    90B

    MD5

    2eb348d2671098fda71d8623a5a04a1e

    SHA1

    97d615b744fa56b80cad2d5b74b321a11c17bf14

    SHA256

    cd5414aebc4acac3b48800058c74d9e4cf9a25d3d979bb17fa74cff3b2efdfd4

    SHA512

    df45441df26ef26295ffaf4239755108041eac1b677c81f30bed69c527d58cbb8a2b1a8b369d9125cf9c1e1f2d19aae6310e72f2abb27e8123a3b5221453bda7

  • /data/user/0/vip.app.com/files/starter.txt

    Filesize

    4B

    MD5

    b326b5062b2f0e69046810717534cb09

    SHA1

    5ffe533b830f08a0326348a9160afafc8ada44db

    SHA256

    b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b

    SHA512

    9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de