Resubmissions

12-02-2024 18:10

240212-wsetdace29 10

12-02-2024 14:39

240212-r1lvfagc31 10

Analysis

  • max time kernel
    22s
  • max time network
    47s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20231215-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20231215-enlocale:en-usos:android-13-x64system
  • submitted
    12-02-2024 18:10

General

  • Target

    05af9c502cb16d13c1d320ad8a41e7f815c75fe135cf81984f1174ef87e109fb.apk

  • Size

    2.6MB

  • MD5

    81030a53e5a8d69b2513437220d23e42

  • SHA1

    e707cc3d153ff19bd8145cc54d56810478ecb4e7

  • SHA256

    05af9c502cb16d13c1d320ad8a41e7f815c75fe135cf81984f1174ef87e109fb

  • SHA512

    4e104e878f07e207dca48bb10870d819e6ce8dfde6d8b0cd7639e6e9cf3d2a382b6db58366720099ea61f344e684444b7d1e10d9d5f0cea2c0c45ae5b14c7d1e

  • SSDEEP

    49152:x/6EtQ4Wa45A6Uso4wAsz/7QfA8yHTc58IhIZLo2UBd204PzckPctG6G6u:Z6lnT26Usbsz/7QA8KcbIVxC4rckEtGl

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.

Processes

  • vip.app.com
    1⤵
    • Acquires the wake lock
    PID:4313

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/vip.app.com/cache/~test.test

    Filesize

    4B

    MD5

    098f6bcd4621d373cade4e832627b4f6

    SHA1

    a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

    SHA256

    9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

    SHA512

    ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

  • /data/user/0/vip.app.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    1d6e450cb53fbb453958d0cc315b1685

    SHA1

    34e3f5619ea05960a5699a3276bf26ee0189bbbc

    SHA256

    8eb7512a86b54d2395d610a3086980d8f9d78a659c5d752a4b2e9d422fac422b

    SHA512

    ca39df8a9add7f971cfc9c07e96371523a8e2c961ecd9aafb8603b5e8232b14e90e4631d3988750f3251dd1a6fe7dc83b84e88a20633bed5fa22fe32d497a601

  • /data/user/0/vip.app.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    2113b66c1bff7a6608cd61392cce930d

    SHA1

    94be13bc46ff6e8644e5691dccdd45fa8a844c19

    SHA256

    d8f6ff48055336ba77b942d9da44b58d31ff3ac01508126be8f2b2f7755f963c

    SHA512

    1415f4a8997feb8c6c864bfeda91515d53c461c801734030d9b9093d3126db69bde8104654b2fe600f0521047c0ea0c1d2ff8dc6b9a8e5b0cb44239936cdeb88

  • /data/user/0/vip.app.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    31996abefd0572062e37614eec2258f1

    SHA1

    1e7da808f46423152fc7b4fb75720470fbfb83e6

    SHA256

    51a3ebf87c7db3934008043e8a3dec309107b5eaed0adf85552ce38ae424c40a

    SHA512

    b0ecd91843e6eb8079e2397ea836d5d47fb980d624f037b57dbc3080f7f874ee59fa08606a1ca148c5ed835d3ae260109080d2f45f5009f883752f5d2a784965

  • /data/user/0/vip.app.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    5319647bdb122f2b2a83f07f9a9f0fe7

    SHA1

    e263b04f41ab6816f07446c967b007de3c7c0f49

    SHA256

    3a2676f2a3bf09976966f12961cfe43059aa14efd4f10c0aed99d37f688220ca

    SHA512

    c7a2324e8f33e28aa2c5fb9060920b0ecfbe0d6c0f6814a446f2065262096ecdd1b6b4c7e20b7fae25337e3734d41696ce9df45ce97bba381af62f5e92d58b6a

  • /data/user/0/vip.app.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    cd24794ae76d88e05638a9d55c295545

    SHA1

    58cbba29ab4d9883e7d67f32cb2c9f532cec8504

    SHA256

    21ff8c6046f098773cbfe4dd509bcbcfdb72381d37eb096f5bef1d956a5a02ae

    SHA512

    d76cd71543b2fff655877d257271665108fbed3782316b4381a98104e0b88bf39dc34d098403a2138972829502da478feea0ee2d5427cf447bc1fed63708714f

  • /data/user/0/vip.app.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    62ad4a05cbdca7f47b3206b7dbda487f

    SHA1

    4f4044cef7b7b1e5c6184ed9025267fc92bf0cd3

    SHA256

    18b909096c7c61d51ab076ae8e562effb0d4ada28e2a4ecd0e6b88ef58f6b2a6

    SHA512

    0936531ed1b2b356a247123200739a43cfc765469ab47a424dcd6e3d1176092a212b0a28591d07f8c2d0cc9d2e0eeddfcea8dde314c2f9343783c61075b071a6

  • /data/user/0/vip.app.com/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    7cfdb319b64410dbbd8810c698aaa63e

    SHA1

    f3f45c1163285e18dc58780c7df42a6ea4ead182

    SHA256

    ff196f1e9fa73d0221fc6310c74edbd9564caf10920983e650ea07728e5e968e

    SHA512

    32a3610a4352d9550cbcfba26676ef3e8ebf970129942b18d5a1e452b2cda54552fb9e9662a7b094b07936f3273a45ba85cc75a11f709a8dc523b8a303e4edfd

  • /data/user/0/vip.app.com/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    3df237216b6552f0b11dc2711ada6dff

    SHA1

    ae2f1b08864ac3fc98924f50aeb0f267ad80b3c4

    SHA256

    1e0fbdb0687e629026827d221c6e2529ff537dbd280e89f3f65fe944d9d50c38

    SHA512

    0987f78d3cf9e837414707ecfa300ba46c411eb815d7091caeb6d77096e1928cfef1c254442ed22b047a3e19fed8f223d722840a87d4b3c1adca7876626b9f37

  • /data/user/0/vip.app.com/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    2054cb135e4255d07baf7615ca91d29f

    SHA1

    f8630f5a26317aa47535101d9e3dcaced348858d

    SHA256

    cfc8992cd8dff43956e7613e44ea730a37ae098190c3a2e08ef98154d42a89ed

    SHA512

    ddc173140b4d465898ce6eebf5651c71a3e8c3af778e9ed181120e0dccb89a00f314da8ff8d1b32df0b90228ac497ea14ad28560d751ec50a916a1cf3bd0e639

  • /data/user/0/vip.app.com/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    1866c6b80036ca25c0b3dec28eb4f37d

    SHA1

    247b2ba1d84a61ef2128ab6fcd599427c878bf58

    SHA256

    5c06103b95f7dc35dd4eb90105bec849e87503aabd4f4cf9469e68b86cca00dc

    SHA512

    36e09d0a40598c528b54d0417fec002cfa8220d77215d45b7734b4fe45b51c8e9a39f12e4fe6deb7e457ec5898f8148000b6ee78251092c6061cb77e96536a76

  • /data/user/0/vip.app.com/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    bf880eac3487951a95a5179456c982c2

    SHA1

    a3dd0ec9a33b863c418d70e54f8f782632428bdb

    SHA256

    235eb92cd2428d39c97fb5eb27043ffe8d6418dbd2273dd23ee34a6705db674c

    SHA512

    da62ab7cc53a52dee7dd7bc29525ee81a455fdaa15f44e7ed0c69bd02e051ab355e4886b2662fce073423c5ca4a54b79c3e971c27bcd5073a907e1798756c19f

  • /data/user/0/vip.app.com/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    1df3223994c14a8c7a53309ceefa1a65

    SHA1

    b1e406fe01f2ac49cec386224060e96564451b07

    SHA256

    770249ccfba31066e4136d49a3193ab99fb3d2c6b7005e3028847d95fbd13a0f

    SHA512

    f8cba3fc276f9e18dab8b0c39754db0538764de4644313f7ff77a905d4d636c407d8c546fbd1cdd5a5a7a45d7cf2026b4372189ccdbadabd8b60ac0a37c4a05e

  • /data/user/0/vip.app.com/files/PersistedInstallation4154473291835313304tmp

    Filesize

    90B

    MD5

    6c142780f5f8463ffffae60c551979e7

    SHA1

    eb5d2864dab4cb69fd4135572f9776e050c5cd6c

    SHA256

    6c687fae4b907878594e9a4592e2e836c7ab8e38130c4ed8f40ab40455a101e9

    SHA512

    8f804463790d84ed24ce38218010c71c5a0d30992c8107b27ad3401ed3e2ed5bb75f0066d1aef2072bf2813f4be5729e02853ed772792f266e076ba1c7e894ab

  • /data/user/0/vip.app.com/files/PersistedInstallation8489331856684144323tmp

    Filesize

    570B

    MD5

    2f629c7ddba73ba11c50216bd52f0af1

    SHA1

    6465543e9cab2d8d7147047d81c98eebb523cfe9

    SHA256

    5ae5aff10649447963fb3464f6c60d2444e239c2e719122121d2604b9cf1d485

    SHA512

    b49a4e453aa1b0110b0ecc77a84f649f4f83df9ff875196938ad683f654f59c51e150bd1856e84fde3471822ef8f25ca3fe0e894f2b7ac29c18db286b8820d3c

  • /data/user/0/vip.app.com/files/starter.txt

    Filesize

    4B

    MD5

    b326b5062b2f0e69046810717534cb09

    SHA1

    5ffe533b830f08a0326348a9160afafc8ada44db

    SHA256

    b5bea41b6c623f7c09f1bf24dcae58ebab3c0cdd90ad966bc43a45b44867e12b

    SHA512

    9120cd5faef07a08e971ff024a3fcbea1e3a6b44142a6d82ca28c6c42e4f852595bcf53d81d776f10541045abdb7c37950629415d0dc66c8d86c64a5606d32de