Resubmissions

21-02-2024 15:46

240221-s7mkzsah42 7

21-02-2024 15:32

240221-sywsasaa2z 7

Analysis

  • max time kernel
    290s
  • max time network
    318s
  • platform
    android_x64
  • resource
    android-x64-20240221-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
  • submitted
    21-02-2024 15:32

General

  • Target

    Keyless Authenticator_2.4.0_Apkpure.apk

  • Size

    172.2MB

  • MD5

    c5c594baa1e9a942015100462db972b2

  • SHA1

    4adb01eef5a1526a6ae6916a63305f0491a0be84

  • SHA256

    6c377ba1f6b11a5b8901c252554ceafd8dba72c959ce00335b904b29a61f13bf

  • SHA512

    8a281ea9b5a008c2e3d324efbce5b465093ff9698033eaa0a969b2dfaa753ffa8d6e8a42da0241b21e44fbd5d95b985c410ab7be403cda85ea269bbc30e7d156

  • SSDEEP

    1572864:9rOGPxROtOJgfsrEW/0rNwZqTvhME8Ye2U1LdZhRZsb3xSgbLr2:9/LC1faE7rNwZq9z7ej1LXO3a

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Checks the presence of a debugger
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • io.keyless.push
    1⤵
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5134

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/io.keyless.push/cache/datadog-d966308633c3883bc627e0dfb6f495b855692e4fcfd0e94f9d79edf2bb4d1062/logs-v2/1708530007609

    Filesize

    997B

    MD5

    8a9208d049ec72effc735a3190e0b813

    SHA1

    d9e60b2ac7271af9a0931c7efdc4be7bcd160b9a

    SHA256

    269c42a6f35994f65ab92a6b08100d4cd570ff5c0e5ba7234ea441aa71b87fdf

    SHA512

    b4b1e119b805037e1d8a07ade28c86a6966cc285569a217cab07dd02a9bc60dd38ee534fd4591d0fe88981379d800bf631fb1b45d75a7b7d881a364f40e22319

  • /data/data/io.keyless.push/cache/datadog-d966308633c3883bc627e0dfb6f495b855692e4fcfd0e94f9d79edf2bb4d1062/ndk_crash_reports_intermediary_v2/network_information

    Filesize

    70B

    MD5

    dd7f615ea0c0c7bb9b8791a755b2823c

    SHA1

    2c4b8c33b5dda89b8c911d9203bebf18243f79a4

    SHA256

    8012b1816e60f3713b66ec6a690951134d99381fcfa2d0da48d5d43974a8432f

    SHA512

    aee96d9bda954ddf113aeb9bd506ba27cba95d4fc9101ab1d2bed5f1b6662766662224e8c8f8628571e8e78e45376756acde319c550c96e470f468e919b507ee

  • /data/data/io.keyless.push/databases/com.google.android.datatransport.events

    Filesize

    12KB

    MD5

    163b0e3f017becbc89b9d7f330b78f09

    SHA1

    1ef9cd8ac8655190468d0ccece0a4738634ab0f9

    SHA256

    cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36

    SHA512

    6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd

  • /data/data/io.keyless.push/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    d273d048c92cd6e62d2db7cda0732302

    SHA1

    f52d3574bbc54f44e7fc1f789321c3b79ea05a8d

    SHA256

    9bfd2e99b3ca7e58f56ad649fe17bfbad868afbb0621c6f74eabf3f80113a32d

    SHA512

    de46622d5bd8df66eff2616215f838d8f16f59850fcb60f3a5cdb6f814918425839ac291b53b939ca59b08365a81e006289803c241057d0c3926baabcb42f518

  • /data/data/io.keyless.push/databases/com.google.android.datatransport.events-journal

    Filesize

    512B

    MD5

    d2ee8e11c09996a3aa83a95830c7dec7

    SHA1

    7d6ad9449d1d4ef9da79a3b03a40d87d424e9e02

    SHA256

    833bba8f0278f65f6617cd988bcf7cbf954748605b01e014214e241b3f2d7900

    SHA512

    599ed771d431c1d8f6f574bf9fd9e3e299f320b61181e0c62ca156b9f7e691a0c6767ce69695efa8439074331e305c7df619579b0c4d9e8d76edf4d3d1673d98

  • /data/data/io.keyless.push/databases/com.google.android.datatransport.events-journal

    Filesize

    8KB

    MD5

    191456ebd27fa7bd81d87e8157433d7a

    SHA1

    fe99e447c2c0ec1a72ce3f843e4f318650063a54

    SHA256

    a55c20ef8ad38a1be1fdbeec1d25095f38bed7917dda98598aea8478497c40c1

    SHA512

    33720ef8f8fb71d86868ac566975a8a8704f86d5ecc5dcc8c20ff7a80013432e04973456fdc73c4c66adf0329127315793b4feae07dcc8cd117c3af121b1db9b

  • /data/data/io.keyless.push/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    936ad77d5d43c564d7c6a106e63906ef

    SHA1

    cd79ef5b1d7864171258d8fa2bfde9e029129bcd

    SHA256

    3809e7f2797ca0c3e907eaa7efa0cc4c729f452d24707eee9d0edfa7761a947a

    SHA512

    5919c52a8fa95a08c98077b16fd45128a8d45cad103805a98c0af1af4099d25335c1b76b06d594020530fff5c21c9dda9d6c74750c9ff7a5ce4a9a14427f063b

  • /data/data/io.keyless.push/databases/google_app_measurement_local.db

    Filesize

    4KB

    MD5

    2ab94643bebb9a883a947fb0017ca6bc

    SHA1

    f6c4dea0f960902fba081721cffa6fbc77109466

    SHA256

    1d40a7a8588b7718e301d32a773f38ae7b09c7f623f03d157184f25c29bc7b3e

    SHA512

    4529248608e31f265faa7591a583fcdf989f1c02feb3530656af9643177e8483f4756f6835c2dc2e9f698fdc1b73d2b63384ab731bfff0814a25dfef5a708d94

  • /data/data/io.keyless.push/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    f061be115f1e3daae04943b4bf78f391

    SHA1

    bc542cb62d9be3a28e8334382da24f5e32c28d1f

    SHA256

    cf36b0ba47e698bc201599acddd344095bdea58c4152da2d3bbdde984b893490

    SHA512

    94b7d5862bcc127575ccf51bba8a078d3191af23454e4dde2e653c3bc5f2c0ff2b255c66c71f24506edb415f93da3232aeda8662fd0369e5b69394f039fed45a

  • /data/data/io.keyless.push/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    078145492cf9fbda7be8dd1b775e2401

    SHA1

    4f6f5c4de40504ed51d18db18096a571d3f3ecf1

    SHA256

    ba84cb77e1d1209b74d21b43583ec1abfcb5542faa7965f1df3ed2bc46cdc25a

    SHA512

    25eacd2e718f7ae4a2400fc46600b76b9ad9c0e70c56e25f99f85ccbf044916d21b28bdaeb8d23612fce5b5bd0db6aa930e0d5ff27fad061d8865acc5679f004

  • /data/data/io.keyless.push/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    b92353c5b62eddbccca9cf9ee22d0a8b

    SHA1

    fd1c1cbfa786d734f8895d37816c042bbb20d445

    SHA256

    fe1c253d77d8134ac1bc7ccad1bee8bc7d0357ce9a439daa08e48513313969a5

    SHA512

    872b5d2bc5232c6c984c5fcd2edfc5d0a54284d89bc48f4e32402eef4715df47cf716d8c6c83f57a35d842e09fbd5b7bc5827d4643f833b9a2c30f453fe466a3

  • /data/data/io.keyless.push/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    a47334d0bd1cb350d36cd1f5fe913d6b

    SHA1

    6f09962b0312f1f07991789e1ea99e5a05419fe5

    SHA256

    f2e2c8da17914462c8387b1ff73af286906f51657734fb9e71e70e56bf271833

    SHA512

    bad176422b8ce7b6ba18b8c0621a92a41faa95ed41713fff1ee8ec3f6209c32417d9f11d4a815225e9a0fcf92d2bfbb324e15b3b66e0368e06a7f75a9e732762

  • /data/data/io.keyless.push/files/.com.google.firebase.crashlytics.files.v2:io.keyless.push/com.crashlytics.settings.json

    Filesize

    711B

    MD5

    277f257c05d5bda1d4e0b9b3c790fb96

    SHA1

    1a999f23306ffdf0612aa674282fcb589ca416a0

    SHA256

    56cba833a9c9e14af480b8c3c16d40c7491253c1813da26c9166faee16a14c9f

    SHA512

    c17bff5415aa9a1f903a7ea166afc053ca5308f4b35b4271819e3fb0b82fc4b29f7aa8ca064b744c5b88ca72f57cf816fe50cc97a8bf34ea53b7c24c29a687f3

  • /data/data/io.keyless.push/files/.com.google.firebase.crashlytics.files.v2:io.keyless.push/open-sessions/65D61953024E0001140EEB196804BA0C/report

    Filesize

    795B

    MD5

    a82c4dc0207549d7258072c03d01d9cd

    SHA1

    95ceff07ef96a019ece2e1f68b67d5f44c7163e7

    SHA256

    fd12d9898d0e6baca2e99c478888969a5fe0e354c2ad4d4f142f6191065c7fac

    SHA512

    413a90026f67a33fdb35a6b795d2d0ea04946ea294968b7025aeaceb8a38a4cc199997d94e2ffda024b0ebc94a63275f5a0f344a2f9dc9cfcdca8045bd29ab70

  • /data/data/io.keyless.push/files/PersistedInstallation1451913398885731612tmp

    Filesize

    90B

    MD5

    d06a569a51f84c0b82ece25a5ddc4df5

    SHA1

    573e54f3f970edd0856f32e15a3c56eb5f6d9e6e

    SHA256

    512987657055a1beabcad7e1c94ebffa3b76790d9a71d1ea96dd983c82b3b1fc

    SHA512

    2f060abd19d03c8dcc58134b38fa25ab6581164ea93c4f05f78c53461b8c41e88628ca227190b74d64f4e594cf09459b7ec599ad4c8d69cc00b4177301cec4fe

  • /data/data/io.keyless.push/files/PersistedInstallation3050827305653838618tmp

    Filesize

    570B

    MD5

    9cedfb08f75bb3e4a0533ec95a0ee36b

    SHA1

    3915557ce3b919d162d0833a4e2a73a788b5e27d

    SHA256

    ce27a58122ced2d8929065509f886d98b3dd0f5e2b41575fc15aaff47bc134e9

    SHA512

    8c0e267ba39f435e97688d7df50c87a7e650a9cf8c33d41fa45e609d7b6670a27cb45e6e7aed75fe2e3454c61b68c4c3b40fd769caac56cc85cf35429b7d1839

  • /data/data/io.keyless.push/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    33B

    MD5

    35b51faac8b5af3886e70bb5a885dab1

    SHA1

    e6cb282da46cd4bf113e25c8573268578dcd11b6

    SHA256

    af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b

    SHA512

    6ad5e9766cc03a4436e1440b9e47c44da6c6440a3c94b1cc988f8c5680043cde6f7b7e02b2b4c71b25df4209c39ed099fb65fdde02a9f09464609a1abe6af8fa

  • /data/data/io.keyless.push/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    75B

    MD5

    944e6a5a08cb971370c65c06061f0ab4

    SHA1

    84d47725cc29bf167b782c702575bce4bf2ecc5b

    SHA256

    ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab

    SHA512

    bdc404233927a6a99160492d0b3e2cf00776d51b33612b8c9ecba395747b3572cf1790269fb199915aafe84c546d30e3259833c9d00af8c412823396882ca783

  • /data/data/io.keyless.push/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    121B

    MD5

    ffcbf87665a36fc21782400bd0537e79

    SHA1

    3dbfbdbfdcde953317b089f9a9fa0bbe50c698ee

    SHA256

    a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d

    SHA512

    7f98ac150c422eb4f1126d86501d0435817ceaa7eb5549e4d21a295d57be3d3fed4388cda782c084130c4ac8d57a4f225139a2e42e8a12b34cc1679140d16b57

  • /data/data/io.keyless.push/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    163B

    MD5

    dcf7d6c1cfd5e7b56074e3001577c78b

    SHA1

    b8eba89aee9f6688ecda6675ef8ff4998da0b141

    SHA256

    ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91

    SHA512

    42d75be824d69de23d2e8605d60c3608db20ed5c059f5b67c63ca2845484c67150aea88a3aae36aae12a4ea266fb6b469d09f765bbcd444350d836ab83f7695d

  • /data/data/io.keyless.push/files/datastore/firebase_session_settings.preferences_pb.tmp

    Filesize

    212B

    MD5

    d9777527d9f1dd91ac3c43487b45b3c8

    SHA1

    2ee7e23dfb3c36d6107a45b92e94b2d9851da663

    SHA256

    e22c17d49f67ae2c7b70d26962adab37c61e99a9c21199f4d58b8f0a65724383

    SHA512

    f215a4c01ddf34f1cfe1e0daefd84107627560408a102a316f5f33e7bdc33e53147c0fa57aebd176e7b984f87a31beaf4b1300a4d204576cbbed4f12ba621616

  • /data/data/io.keyless.push/files/frc_1:129028017653:android:976309cb6a8598c61b64bc_firebase_defaults.json

    Filesize

    370B

    MD5

    78928105a8591f95947285283b49f6b1

    SHA1

    45d05f6a1844eb6ef6fe8604a026ab52e9f1a700

    SHA256

    874a2a8fa190cbadf21747b642b90b41a951d313e5afcfbba936d45f670512c4

    SHA512

    46fbe9d5d48bf98cb2c66006fa27b39f5ed63222cc60ac0d3b18fe3b7b43e4fc851938564e2d03c6ca3717511c109d0fffe6ec3fb089eb7a0844bee9aa35dc42

  • /data/data/io.keyless.push/no_backup/androidx.work.workdb

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/io.keyless.push/no_backup/androidx.work.workdb-journal

    Filesize

    512B

    MD5

    d797f61dff1a30964e3f6ca0cb1b8699

    SHA1

    fcaeb29a980866ba8b8db03e9de2cb4cd0555f14

    SHA256

    2260e8af375b51cadf48d3eae4dc70244f51565acd36ea032871d453ad1dc514

    SHA512

    8a1987ddc9a6077adb468d8a6ac844befec8a60ad83cbd7a8ad961324114fe0d52810bc1f470f97c6d6b193beaafbc12b861d750ab373901a6ad81707dde2d47

  • /data/data/io.keyless.push/no_backup/androidx.work.workdb-shm

    Filesize

    20KB

    MD5

    daa100df6e6711906b61c9ab5aa16032

    SHA1

    963ff6c2d517d188014d2ef3682c4797888e6d26

    SHA256

    cc61635da46b2c9974335ea37e0b5fd660a5c8a42a89b271fa7ec2ac4b8b26f6

    SHA512

    548faee346d6c5700bb37d3d44b593e3c343ca7dc6b564f6d3dc7bd5463fbb925765d9c6ea3065bf19f3ccf7b2e1cb5c34c908057c60b62be866d2566c0b9393

  • /data/data/io.keyless.push/no_backup/androidx.work.workdb-wal

    Filesize

    16KB

    MD5

    e0aba219fd79b76ba984509dbb0cba9e

    SHA1

    1ff8846f8b2ba217128065892e4c55cd6ba5942d

    SHA256

    6708b56d2ccd98e042472f4718751bf868c183f9b002b6f2de5d234d6871c746

    SHA512

    d702a0062e5f008cc003b3d9c76f4f74899e4387053af5b15e26df0a844e24fd86742311909d97d909f2cde08cab4b3b91747d1604310b04a85d34cef6133e76

  • /data/data/io.keyless.push/no_backup/androidx.work.workdb-wal

    Filesize

    35KB

    MD5

    648914e4b0cccc76c1ee5976b98a6360

    SHA1

    439b24ca4a2dc6d418a18eb7a09f08af51b5c139

    SHA256

    68ae3dd75a3769163668f7156fd32ecfa9855b1021199d2bde9c0b167361a3d4

    SHA512

    4aabee3f1cdbad107f2e7acf05cf143a169705e81d9971196d2914395df7d2574ad076b8a4527eef7b28ff32dedf038c7d82b8c9c9cef723cef5ef270d9ec4ea

  • /data/data/io.keyless.push/no_backup/androidx.work.workdb-wal

    Filesize

    120KB

    MD5

    cec2e1364aa59d822cec44867bfafd2a

    SHA1

    67bd2df19d78d52aebc5e0f039fe17076255e074

    SHA256

    1648c650ee66d8580d698fa916c79737919080f3fdc496fd3cb23d526f0a8c66

    SHA512

    1b0146e57295c0750c2b5166ba410ddf8f1fa4fc780e5702b055980b0fe69ceec579a3b624bb03c379c218943ba84353088dd55a3511e091a3a51a5052cfd82f

  • /data/misc/profiles/cur/0/io.keyless.push/primary.prof

    Filesize

    7KB

    MD5

    db0c6cf9e3b4cefaaa3acc094b10c2d5

    SHA1

    d946dcb1ecdd95407783f2ec68b7f8b7c4b11748

    SHA256

    a314d1fd3b6012b9bcb60c4304926210924bb7461e239520dbcee7cdd1b061a0

    SHA512

    0d0e722b0fba56cff2b6ca35d59cee8b46bcce623c307f06c8c862cb5da4fca933b8304bf157a109f6aa4994bb23eb236aae886743eac8d01ac078826bd3c8ff

  • /data/misc/profiles/cur/0/io.keyless.push/primary.prof

    Filesize

    25B

    MD5

    b9d9e0f8902d129e1aeebff0ae7b725b

    SHA1

    cb0d2b4c9dd60a5c1fc6261fb581bcd3416fe781

    SHA256

    25a822139d06016af8be1296c0242b60e35074f94c713e03323636be1162ce91

    SHA512

    f158a9dc753e0cb41f71a98714ff02198c576bacdd792a6153fdaf6f9a7b52d8cfb6d09099a269d0c1b0d31e2ea5a307ea1db85115bdc6797887a6de36d597f6