Analysis

  • max time kernel
    51s
  • max time network
    139s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    19-02-2024 19:28

General

  • Target

    uptodown-com.activision.callofduty.warzone.apk

  • Size

    6.2MB

  • MD5

    3b918bcf21219ce96b3cd598259d58ec

  • SHA1

    ab852bb514cba45c4311af83d2b51627e87649b0

  • SHA256

    bd40c5bde39838fc593aee6560706c38178bc6765408cc88e676e942ba78df6c

  • SHA512

    3dc5aa1b20aa529be64c3d5715b1dbdecde400265a509ab9c34f4eded51491c5acacfb06e5c7b52077e67546a46111d9e1ab7e05e82526290bd83887de29b4db

  • SSDEEP

    98304:xzrMdaF3kRVY0rPGcnvTllA3GzfakGjOgCciqTnrXr/lPi:xzq/3GOTllAHE0/lPi

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
  • Acquires the wake lock 1 IoCs
  • Checks the presence of a debugger

Processes

  • com.uptodown
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    • Acquires the wake lock
    PID:4212

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.uptodown/databases/Uptodown.db

    Filesize

    80KB

    MD5

    03f4ced02bfdce94d9a61b34d0b5c531

    SHA1

    6f7c3d09e2ce0690bfb035019e0bf7df299da196

    SHA256

    ea9da9e54a3afef9c192b802959705b36168e51a20da3a58827afa12f703d68a

    SHA512

    be9bd7c260168d092f0534e4eee79f03c482d9474933f85e17d333b67f2738f02ded347d7a1b18a4c1403033ffeb739830d58474816eb2980b31c20ecc03b2e1

  • /data/data/com.uptodown/databases/Uptodown.db-journal

    Filesize

    512B

    MD5

    5fec1a1a73424daa7d8178bf28c70e1a

    SHA1

    01bedfff18b0f3d64de3eb7f2ff3365e7f82816b

    SHA256

    136e4d03a972a09cb11dbb17cf37e5a1318eba26db83704d958a8dbf7e324e8d

    SHA512

    cf577486f48979d7bc1137255f4c744106077080109802554e4ee9a3470a830d923067775dea3170d856f38d277d7ce15d87f9a20cc9b92d59a1390f257f104f

  • /data/data/com.uptodown/databases/Uptodown.db-wal

    Filesize

    16KB

    MD5

    a897ad5d84fd7bd8676c37e254f432fe

    SHA1

    ba247fc0bd7aea14b0405373ae35f85119eace23

    SHA256

    db034a36b9f2a5103987746ad4e4089ec860dcbfdd02a7c56ffd50b7c640bd12

    SHA512

    79995d212b8352f7772ce1be036fa731f36136e776d6e639528a745f82d07c73f1b771b7640857aee8ae3306eefcdb559cec991e4f3fc9a4a75fd3ae15118951

  • /data/data/com.uptodown/databases/Uptodown.db-wal

    Filesize

    8KB

    MD5

    9e9ddac94f33724b0fa9de3bde98ae3e

    SHA1

    52d1682387829c5bc5a8be239a32674a42bd4530

    SHA256

    13e924a886670595e774989bb354f1d87945ad688389ec5343a54e59c8ccc665

    SHA512

    6ae0799ba348884fde50b79ae54294d6317d62ddf371e30a92ace00dba0aab846a04b920686292c809dbc0f92db3a1296ebfd0e982bef349b12e67d2574d5794

  • /data/data/com.uptodown/databases/com.google.android.datatransport.events

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.uptodown/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    3e8ff43832557d552c6ba8527cb48dc9

    SHA1

    0988d7f8eab43906d71d5e7a89e4ad4f312f890c

    SHA256

    0ee793d8c2caf4bbb95d7f1fe9cd55b5053cc880f3f87692ba12be2f2adb9dfc

    SHA512

    df7c5086519a4a389706707ea1db62b90b47567be17099132fa90264875ec63e3d784f3c821dbff8bb3d3caa0c15b1b8f9df5828e6b77cb58fdfeb62a051cc33

  • /data/data/com.uptodown/databases/com.google.android.datatransport.events-wal

    Filesize

    16KB

    MD5

    1348afd3d2786cde112f9f0c9c1ab94e

    SHA1

    a55b8cdf4c11e755567cb0e303b1ec440e52c1b6

    SHA256

    092bc2e6b19162d27d4be6eaaa0c60e4ede4a5fe1bb3c695be53a9b00aedb1c9

    SHA512

    529462a6610e6428e6a6aa13708e0e9c9e3d06cf1759d43cf91708303f27f448c84b67043c3be530f9df9205ba464098fa00800b2646f8e41dc896c70b36da89

  • /data/data/com.uptodown/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    7237409e0640cfab7bdbd429bf821a3b

    SHA1

    4c3da934842f8d4835dfe2a9c275a300e5123309

    SHA256

    5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

    SHA512

    c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

  • /data/data/com.uptodown/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    fdd5c44085c13c038019ba7d574001f8

    SHA1

    41a8729d333d1f6ccdce4f5eaba6d585d0dcffe5

    SHA256

    8380dae9344f8e8e01efaaba326fe649133f155ab92ca7f045c8655ca0a2521d

    SHA512

    70b9ccfbb2c75980ac39c2d86d5dc42927c444ba4e2f6eb30a1bfe5b8fa4919c1767f3bcce4ea3b1e15561ed85e2e8dfc7673e2c012896f21721a5923656f8f7

  • /data/data/com.uptodown/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    6598a90cffdde2e01d0a08c3803e47af

    SHA1

    2f954f317c9222945b8af128b84c76dd8cfbf816

    SHA256

    305bf69eb340151afe7f504f076bd1e3df4c8125ee0a5416a54249df3b28959b

    SHA512

    42b2f145063842b7b7eac4da710b48d73c57959c987954fd0a08de75158da3394d985b066428024809d2db25377d7fc1c1b3c085da6f8206505b3a72ee6bf938

  • /data/data/com.uptodown/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    650158a803f5b8c456ab66dfb76bc0df

    SHA1

    48df38b7a5e596f56ff72351a55bf94a46db6426

    SHA256

    01e445f17e8e88503088c1a52d59dae59adde55ef252acdb4fcc15a0bb6b108f

    SHA512

    a9f487b336a7e2ad60c527cd13f48d9402dc6da4421a587fa00494d6b70c7400e0083e9839c57c38bad39bc483630be701e44597d676bc709fe059f3f74db109

  • /data/data/com.uptodown/databases/google_app_measurement_local.db-wal

    Filesize

    36KB

    MD5

    9b1b550fb53d58d35741fde0fab66b7c

    SHA1

    9e8ab2fa61ed19f0b5361fb3157b0795c7d01137

    SHA256

    9be658ab90f126c5ae63bf89895d72678827608c4a4900b32b270eebed19a680

    SHA512

    27239c6f1402192ef85bfd749c72d6380600c98940a8f5a23201cc9b6b94398821d325476b0fdd5d505a18fd75a9ec7a2d26cd8162a7a48091492800c96e549e

  • /data/data/com.uptodown/databases/google_app_measurement_local.db-wal

    Filesize

    4KB

    MD5

    9867291fd02c9cd4202af9c17a5dd156

    SHA1

    136f65f544a1937ee14e0a8923cf5e137a5284dd

    SHA256

    8ab9414d443695cd3b02bcdff36456af898466b3caa7a1a4f594ca10be3171ff

    SHA512

    caf5bfff3ad387d6840ac1b3dc36dadbbc74a32f70216c1eca6174988b84a0a04f4508b012b60ce883c959e5ddc5119adb24cea2f524f304e55c69c348507337

  • /data/data/com.uptodown/databases/google_app_measurement_local.db-wal

    Filesize

    8KB

    MD5

    cd4952ac65ac7a5806c549e42b3dbcef

    SHA1

    5dab5e0aacecd0399e3f00c0a08168f2dd184f43

    SHA256

    c37a928b28d64c8f104fd16ddebaeeb063585cca191a8b9d3b808bdf51db6ff0

    SHA512

    437860384a4de93f1448ff1bd28588abf813f4e42babae62649f0f4c5c022852abb20d8ad1280e7469dfae34e48e765c1097714408c7d6b7eccb5ba253ed2aaa

  • /data/data/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/com.crashlytics.settings.json

    Filesize

    708B

    MD5

    2772d9e156ba7e6c6d3ce20d01ea4771

    SHA1

    59eb8515909eab58b200d004d0d7f77e362063cc

    SHA256

    51dbdc6161d00c52712c738024bc827e857e11577c6f912a23a9f63d412f5f7a

    SHA512

    d459d8e578f45caf4f4ade6a14e817b652e5f744a216343bcde1a0bf084515e7669d8832ef5c7a2abba0adb3998448e6740f2e4a3d9c1bd6372f6deb28aa95aa

  • /data/data/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/open-sessions/65D3AC2100900001107425AF4C194CE3/report

    Filesize

    785B

    MD5

    a331d83d4a1be37e2481d29a35a102db

    SHA1

    1dd7358bdfcedf17ad02196d9c73faf1d48e9820

    SHA256

    bf424abcedda1795114603c7994b144152508b26b69bec4457d058c7b9bd0812

    SHA512

    4f648803992cc62cafb5c70f95b543da6b819956c9158de39d8c70c7907e032be542bbb271be0e7ca1771629bd9fa8bec9b8e386bddb39a3ac4052b9cd162d44

  • /data/data/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/open-sessions/65D3AC2100900001107425AF4C194CE3/userlog

    Filesize

    89B

    MD5

    b6b0b7cf258584d1303c7b73d06ecf31

    SHA1

    e1e4cf736a8fa863549f0a44169ec23d17892168

    SHA256

    69210b3ca74ceb62ea7aed252ef6a605c354e0bb8a037d2fbac000201360e42a

    SHA512

    d85a7d7694f931a734e99d9faf20d1b072e5a47793c7137948bbe27568a5960db1a4fc3a8ac866e0c97632bd7e414d8b13f6188825fb8fc8e64dedbea5d65558

  • /data/data/com.uptodown/files/.com.google.firebase.crashlytics.files.v2:com.uptodown/open-sessions/65D3AC2100900001107425AF4C194CE3/userlog.tmp

    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/data/com.uptodown/files/PersistedInstallation7272415221886546618tmp

    Filesize

    90B

    MD5

    a61e5a137c04367d3478c609554b28ea

    SHA1

    b14413093b3f51ae60dee99a595b632eb3b5e53d

    SHA256

    9c94666db02c331a84164bdc6a896b54956198b8c3efea4d6aaebe0ea7409bcd

    SHA512

    aba369ec32efaaf25ff53a2a8d0a751dd651f4f2ea20bfca83d35e13f77d571580a30f2fad7df8fd52b7928bab3fb18abbbae2918381e2647bcf04575107c8b9

  • /data/data/com.uptodown/files/PersistedInstallation7359209656021907230tmp

    Filesize

    567B

    MD5

    e4a6a30a1350af4afec086a3ced201a3

    SHA1

    31e19b78df4260bfe424abb17b72f1c3a0bd06f5

    SHA256

    ba573d4ac9ff0898a219251f135467f06a66245929cf8f2347380c9b9bc8c5cc

    SHA512

    7f6f71dfdd9275ef7bd84b52f8f35c44b349669d80ef21999b94a622cb2d62faea36788a33be1fefb047c97b6668f21dd6b4f733ef47fc6fe46f6d21d0c90de6

  • /data/data/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    33B

    MD5

    35b51faac8b5af3886e70bb5a885dab1

    SHA1

    e6cb282da46cd4bf113e25c8573268578dcd11b6

    SHA256

    af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b

    SHA512

    6ad5e9766cc03a4436e1440b9e47c44da6c6440a3c94b1cc988f8c5680043cde6f7b7e02b2b4c71b25df4209c39ed099fb65fdde02a9f09464609a1abe6af8fa

  • /data/data/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    75B

    MD5

    944e6a5a08cb971370c65c06061f0ab4

    SHA1

    84d47725cc29bf167b782c702575bce4bf2ecc5b

    SHA256

    ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab

    SHA512

    bdc404233927a6a99160492d0b3e2cf00776d51b33612b8c9ecba395747b3572cf1790269fb199915aafe84c546d30e3259833c9d00af8c412823396882ca783

  • /data/data/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    121B

    MD5

    ffcbf87665a36fc21782400bd0537e79

    SHA1

    3dbfbdbfdcde953317b089f9a9fa0bbe50c698ee

    SHA256

    a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d

    SHA512

    7f98ac150c422eb4f1126d86501d0435817ceaa7eb5549e4d21a295d57be3d3fed4388cda782c084130c4ac8d57a4f225139a2e42e8a12b34cc1679140d16b57

  • /data/data/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    163B

    MD5

    dcf7d6c1cfd5e7b56074e3001577c78b

    SHA1

    b8eba89aee9f6688ecda6675ef8ff4998da0b141

    SHA256

    ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91

    SHA512

    42d75be824d69de23d2e8605d60c3608db20ed5c059f5b67c63ca2845484c67150aea88a3aae36aae12a4ea266fb6b469d09f765bbcd444350d836ab83f7695d

  • /data/data/com.uptodown/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    212B

    MD5

    83df24ed31d62e7cd75fde377f6607b6

    SHA1

    83b814a1d20a50c4c9084a571a16e04d45b6e6bd

    SHA256

    9663629b9057124f6f4c2675dbcfb778b05477773d4900d4b83a7583a5f4abf7

    SHA512

    6173900ca197cfd86dc762efc9a5e7648d4f2ff0bd20cbc3c0144f4f0d43b931f179e78e553aff54ab0b206900bd53c268034f1f3682dfa5244856b00520e2d5

  • /data/data/com.uptodown/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    0d59f14612052c46682d93bae34088bb

    SHA1

    fba82fe67fe33e53d204fcc511c391aca6a06335

    SHA256

    13759a76b4746fec2ff07cfb7cd4237bf5633f1b44080d71f346e7646f191d7e

    SHA512

    28a6d43d1c74d9d6208a2811cb0626ca498588d499c47023b56560985acec8be09784cd8ddaff0b0dfd7eef24e032ebd318a66d9d1bd62349861532cb556ce94

  • /data/data/com.uptodown/no_backup/androidx.work.workdb-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.uptodown/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    667bc2702bb41ff1dc79e39b05ff9822

    SHA1

    3a9e678da9068123fb0fdd947beed635a90ea157

    SHA256

    644a4fe7f38c6c775f4ae2dbe634187ffd9b66ab81cc975ee3878632e131783e

    SHA512

    8304170b9dbd9b759eddbcc05096f08f3510f52c505faa38c14c6aa4c6503e58537a7c5aacd21d8bb94132b1a45bad4de32882455182b01d5dec41bb8ac8ba78

  • /data/data/com.uptodown/no_backup/androidx.work.workdb-wal

    Filesize

    177KB

    MD5

    70dd7d7670f1563c4426c13c476aa9f1

    SHA1

    ebe626e976aeb47bf3332b0266a5103ac2d5c5fd

    SHA256

    fd026db8b8af4e94ed87440d5959027e4948add05e1b31814be0713b493489da

    SHA512

    32ad4f39f7c136934cb0b7f87ae8cc481722e764b38fb44270c6957c5799f5523854cc6e40f2c6622e5db6204acedb1ec7b7d4ef0686073b8b850762cb9acd37