Analysis
-
max time kernel
290s -
max time network
315s -
platform
android_x64 -
resource
android-x64-arm64-20240221-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system -
submitted
21-02-2024 15:32
Static task
static1
Behavioral task
behavioral1
Sample
Keyless Authenticator_2.4.0_Apkpure.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral2
Sample
Keyless Authenticator_2.4.0_Apkpure.apk
Resource
android-x64-arm64-20240221-en
Behavioral task
behavioral3
Sample
Keyless Authenticator_2.4.0_Apkpure.apk
Resource
android-33-x64-arm64-20240221-en
Behavioral task
behavioral4
Sample
Keyless Authenticator_2.4.0_Apkpure.apk
Resource
android-x86-arm-20240221-en
General
-
Target
Keyless Authenticator_2.4.0_Apkpure.apk
-
Size
172.2MB
-
MD5
c5c594baa1e9a942015100462db972b2
-
SHA1
4adb01eef5a1526a6ae6916a63305f0491a0be84
-
SHA256
6c377ba1f6b11a5b8901c252554ceafd8dba72c959ce00335b904b29a61f13bf
-
SHA512
8a281ea9b5a008c2e3d324efbce5b465093ff9698033eaa0a969b2dfaa753ffa8d6e8a42da0241b21e44fbd5d95b985c410ab7be403cda85ea269bbc30e7d156
-
SSDEEP
1572864:9rOGPxROtOJgfsrEW/0rNwZqTvhME8Ye2U1LdZhRZsb3xSgbLr2:9/LC1faE7rNwZq9z7ej1LXO3a
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /system_ext/framework/androidx.window.sidecar.jar 4533 io.keyless.push /system_ext/framework/androidx.window.sidecar.jar 4533 io.keyless.push -
Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock io.keyless.push -
Checks the presence of a debugger
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal io.keyless.push
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/data/io.keyless.push/cache/datadog-d966308633c3883bc627e0dfb6f495b855692e4fcfd0e94f9d79edf2bb4d1062/logs-v2/1708530047595
Filesize996B
MD5b7d59d651481518bc2a6af0d1bd05c8e
SHA1d8d185d8054aa34ca8acd9580ffbb342102cacb4
SHA256501b610583e2800ad197526c3aa1ee25222e960c2b50bbd4adacd1b9f04748f1
SHA5126ea228bdffa2837c5231298ab7104eaf23dafea46f4e5d38ce39d7b0810dfb05b540ef6f0b36e1f7339920b50809eeeb650ed587dfdfb0446a576992976a9b6e
-
/data/data/io.keyless.push/cache/datadog-d966308633c3883bc627e0dfb6f495b855692e4fcfd0e94f9d79edf2bb4d1062/ndk_crash_reports_intermediary_v2/network_information
Filesize69B
MD5d0352d5b1ae43119b6599b679d21d72b
SHA1b25fb2edffa57d2646ff1435d29e27574b8ee020
SHA256e353f4279f12af86ca0e937740e13beb0639e35849759e7b4943db87c2c650d5
SHA512d527e81e6dc463b3b0a0a98b9caee893b4dbd221e836f0dc88219529b3baaf6b5841fc7d2dec3b1fcd57cfa9064921f972adf1cf55d0b15fc35a8c5963859d35
-
Filesize
56KB
MD5c9695ff08bbc2308d652056090174776
SHA19a601044bb86b46afbc2e510ec364b1c18683fef
SHA2565cf86372004ce99cba0bae97eb3c76d3ed7d92627ca3db3785f7bb040e472367
SHA512d4dbf0581164d0156bdd4cd13ee3e474a38e6d1e110439a1b8d535b48bf54184769eec9fe6c9fdcd71f5e1fda6dfd7ef645cd2ee940012b162bf58fe96830fa1
-
Filesize
512B
MD5d16b9d9d0a89836629d9363694e80c4f
SHA18e433484e20eecb71516a56f3966b16e3edd114f
SHA2566c26cc35a1470c65162576097f1920f4b31c56961e9e1f6279d38105fb3c1e8f
SHA51271ee6998c12c400c9a37ec6c2191ec6e408bee38f8b22b84f2f9770cee9a5cbc20dcd52ea2a190f2e882192ce445bb1bb813b672f8025e67762a8e681fd3819e
-
Filesize
8KB
MD50d79767d6b695f95ed5d30d01824af24
SHA178cde68df72453b3a69cf623d67e896533038ab9
SHA256793e68d5edf4b076635aaa19266d2a1d07cd3aa77d7d6dc213f21cc59e44c1e0
SHA512179f8c8eb74b558fcd3ce21a2b0004592ae382b54ce001160ac208d7450821f770ef04edac320c16602b2bb866f63c7701ded6ec8dcaac49da06d6a40ce24bf0
-
Filesize
8KB
MD5187f18fe3a5976f3b2b85c0bba41d557
SHA12d947ba6d9fc25faa3ce132862a8139feab2aedb
SHA256c2b2f25a8be0b3f48076ccf1f65ad3226c16bf9da90214f439cfc1429141e3e0
SHA512bf4edab36e6f37c20d804ba0617a07bb1421d89d7e2af3a68a60d4341cf31847cc933f28d436e418131fc8269b622142d42d91042d3f702b7fa1505b9d1e1f09
-
Filesize
16KB
MD5e69f4f2d472f3a3ce382d160082a4e09
SHA15cba3a4a59cb8824c0acd41850accba0e66603df
SHA25625936b28d1bbe4e60a47bfac592cf48f6c476e772b7ff7073b4a6c44ca091035
SHA512bc40f46d5deeefd5d4c41d66dfffcccd3b72db79de276520266032d6845cda6711327f7af5921698167ae97286ed1765d9d2a32435e6733bf4afa7efa5b04484
-
Filesize
16KB
MD5d7dac6f723dfef47717538f5fbdb409b
SHA1c83c90fb905224b89b83cd6b5c96e167496d48a5
SHA256286a59b91f0db6514c3516fd2cea0a2f6e3c0025a0b41911e7880a77567787c8
SHA512d054d6883c7d9db0fc1fbf79ac8db13aefd2676a683469e8275b9af80f90bdee0a3c7847959be23c6d75dd3c488ebf759b8f0cca44fdddedc1bf09e2a6c2a236
-
Filesize
16KB
MD5765f9fe0c20a45f15baed30f41b2455e
SHA11106f97afbe7d36b850aedae097320c93cc0d104
SHA2569915e5686a76849451918e6d8eacf4d3d6f231691c91c9ec1b9a5c32186548e8
SHA5128cc53fc44e1b59ff61f954585453a0ec49b09caa46dbb391c6efe03c1006757226beeedfb7301ea5eacd462b3553d52724bdd11071963d3c7c6a3704752bbf3e
-
Filesize
16KB
MD52fe5f354f8d5f4a85f13e645fb0a371c
SHA11442d91c26659a0a80dd83a517824db35479a481
SHA25646619a1fe6f7a1d49a29b2e9d310bfd2ccbcdec5e26f7ffbaa3afa83712cac78
SHA51252b9260b5b81b9de748cc9a84fc10bf5e4ec338ab27a615e46d830320b9b8054bc219fc89b455db0eb0fa577eb2701c7d7a5ab95681b7ab097f7ac461e41c820
-
Filesize
16KB
MD58be5efdc7668151fa11c01880831c9e5
SHA1d4b75ebde861bb81eea411c3c6a02e156d9c4622
SHA25680b32b00b5d4782580df4a9de389505b9a1a52d0f6b9a6375f10d5b10bf8d60d
SHA512ed96d9ee37dbb4f2b50fa39d9f10b6358b530e1b7f66c9d81132d5800e8a4c84687c56c414323897c15a1bb2de2b577322eb1bbd54388f2db4cc3d0628a41403
-
Filesize
16KB
MD5818548be1885386cc995f564f36a8e8e
SHA1008b0c602ed55b1122dadfb3a20db517d55c10b3
SHA256b4765a86f69c122307448d0c6e81cebd52ffbc59b0d19da42971e2857f773e6d
SHA51247840561a1eded73600b656576a7a9195bd1beddb79b08090b9e6bd9ab610de6cfb0a334310bfefe0b33ef157d420aaa17c6315fa2e689398da3328c4460a02f
-
Filesize
512B
MD520e9db3da8bf981d0d8c5e33e6dcc9ef
SHA18e82084f031dc6849626402a37c7da55badd3a3a
SHA25601c9d602b0d0f51e4fb7315dcd9ccd9a39d6064c2a437963d8201eaa856fec52
SHA512c58f64e33f29fb7dd8895383072240bbb733019db0ea786818390c698a2256458dcb0c51392c9b0f6440b08d24ae6b9c6233b28f70668caec3f94e226d9c1684
-
Filesize
8KB
MD5d56e4792a6d85bd0da38a4518237fe74
SHA12576157a158c2b802f6fd5ca00cc65b982520acd
SHA25634729a1c20a4b5c5751d663fb8b2b1ba2bb5e30132ebb36b21adf4b9f3b077c4
SHA512e5d865af7faffdb399cf4aec663eb2ba4a14c081a7cb8978880ef8db747db5f58a822be79d0e38ea2c6d8860272ccf11e1483097d4b42f1ac4fec1bbc7ebe661
-
Filesize
4KB
MD5558184ae4daac3f2817949f10fc9a6e0
SHA19939115ec7e2f9fa0a550a927b1da27fb2f9ab78
SHA2567fb237fbe3a0601e35e5894c1873646656505d4fa4ff02105ba0b09ef2d8c2b6
SHA512c3f9593dcc84ba638601f079316efb2f41d66cc8dde54f92fe8d12d42005a964568b02f28a8428a659177dc8b66a68bcf1d5c02f96250c26d958451bc84b9300
-
Filesize
8KB
MD530d4a9d011f0ff3a4a38e67f358f7c64
SHA1b3bd5f1a9fe43a0c49e7638053a671451d759b68
SHA2564ff5ea3541d96bf7202591a047519b00cfb0350a7538bcb4bbc22f205aee9ab1
SHA512bff8d43c84f8c83bfe0215606afc2ba41c8e439dd7a1c3092283012a379fa516d7c1f035015eb4d79bf3cd3a7b57c0b361fc5a8ab51aa4208e1f9442f6d0b74e
-
Filesize
8KB
MD57637a06ff6014d5ad3f0fc5102f0406f
SHA1bf7a21fd34e4285cde5a19a8ef3074859a146b48
SHA256931f1d1b1c2f98915e086a4fc5797f8b5e496af85205538bd0f0ce0568f32f61
SHA512790008568382d99d1f32a616017b68ce9bddd6d44d9293d42462ba5ccf775f0e43204147b0f26cc13debc1a4be05c62b8f378ea1cd14f96c7ca9f146693751a0
-
Filesize
8KB
MD5c3a8a6cacdbc45d5ffc602624c638f59
SHA123c9e8447d7f672092a14e496b3df9cd97bd8722
SHA256addc05a980411850a9979cdabb49979acddc17c71bb8ab3d89a294cc760b7d1c
SHA5122c56110729f8a193cd1c169c87c17714b06e2dbdf242d058f77f088f6d9279090a4a3356655eb343d7848a020442db7ea2e3dccee5c43de498b00ab6fd60cd4f
-
/data/data/io.keyless.push/files/.com.google.firebase.crashlytics.files.v2:io.keyless.push/com.crashlytics.settings.json
Filesize711B
MD51b9baf1be863defe8a4e3db70cfe099a
SHA142a4e21b10d869a5bf90e71b61c4e086e2fbc952
SHA256d30888564c29c9658df6409e938b963d4f391b486028b1bb9084c97dde110b18
SHA512598f9c2bd64f128fddaa90fcdd0f1484cdee934ebdd614072e61d0823ed92eebf5141f0dc17ed7d40810bd297fe4ffe3ed45456299a4ef1d52dec6305aa6ddfd
-
/data/data/io.keyless.push/files/.com.google.firebase.crashlytics.files.v2:io.keyless.push/open-sessions/65D6197B03E6000111B57162B381BD5E/report
Filesize795B
MD5e7790b52e6557288f14ace3e2c5219f2
SHA1ab15fdab372856ca1afdb7fcf95e25a0e0092028
SHA256607f95ca828cabc1691cef396d670e29e41d55595969044d40c3cfcd43f2c7fd
SHA512aa096ed6c8087923154a6fc69552674d5f26f6055438ae8992aa90912e4ed869b70de8c50ed0cfcc74bf42f7a0ce810e525ba6217761d81a663c4029207c9641
-
/data/data/io.keyless.push/files/.com.google.firebase.crashlytics.files.v2:io.keyless.push/open-sessions/65D6197B03E6000111B57162B381BD5E/userlog
Filesize190B
MD5f95ce86805e7e3fa5d461965ea244d0b
SHA1b55c25e48a9dd5217e5a47b72c3350bfd2a55102
SHA256d5e96d068bd2a6ad5088fd411141ea84bfdc2d7ebce0cee066a54334c6c9ba29
SHA512a8d443e71ffc8ccd0bc6b3b04a0b1d485c3682317d2332be46eabe6378963433b5c052785ff5115b6346eb54705908cc2c1344e14f99309005db80c2fa6a52b2
-
/data/data/io.keyless.push/files/.com.google.firebase.crashlytics.files.v2:io.keyless.push/open-sessions/65D6197B03E6000111B57162B381BD5E/userlog.tmp
Filesize16B
MD5c33583fae4e0b61cde1c5b9227963237
SHA1fe2ebe4d27469af1460f7e852031a04208ef629b
SHA25635c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc
SHA512fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e
-
Filesize
567B
MD5cd5be100ff5330611cb3c1f994691926
SHA166a893ee90b7a36c8e4da9a281b3db7a4f170f85
SHA256edc382404157f523dbf84383bd2769c0eec432a962a2a029ee577c487d805d91
SHA51274b9186dd3191ea6b1119a79ac21d06046c4a8b1673912fdcf2b7d2d5eb381119a98ecf3f296b51b787ca30c871969d50e6481a0aa3c7747a9f28461ff4872b6
-
Filesize
90B
MD5b3f8435f6db4ee78ce2a1a948cc09e13
SHA1209a29a44bacd636932c05e9cdbd7946be72e66c
SHA256bcc57c857f4f118bd7796d799c4b3d990b5f73a95192b3f7b427308121aa29ef
SHA51267e3d11ba1da028203c54aebf33c07138bc0ab889f25cb36da2c64cdaa0bf9ef2cf13f106a414ee2a9d845918161ac638016c298017dd7419cddbd5792640f41
-
Filesize
33B
MD535b51faac8b5af3886e70bb5a885dab1
SHA1e6cb282da46cd4bf113e25c8573268578dcd11b6
SHA256af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b
SHA5126ad5e9766cc03a4436e1440b9e47c44da6c6440a3c94b1cc988f8c5680043cde6f7b7e02b2b4c71b25df4209c39ed099fb65fdde02a9f09464609a1abe6af8fa
-
Filesize
75B
MD5944e6a5a08cb971370c65c06061f0ab4
SHA184d47725cc29bf167b782c702575bce4bf2ecc5b
SHA256ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab
SHA512bdc404233927a6a99160492d0b3e2cf00776d51b33612b8c9ecba395747b3572cf1790269fb199915aafe84c546d30e3259833c9d00af8c412823396882ca783
-
Filesize
121B
MD5ffcbf87665a36fc21782400bd0537e79
SHA13dbfbdbfdcde953317b089f9a9fa0bbe50c698ee
SHA256a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d
SHA5127f98ac150c422eb4f1126d86501d0435817ceaa7eb5549e4d21a295d57be3d3fed4388cda782c084130c4ac8d57a4f225139a2e42e8a12b34cc1679140d16b57
-
Filesize
163B
MD5dcf7d6c1cfd5e7b56074e3001577c78b
SHA1b8eba89aee9f6688ecda6675ef8ff4998da0b141
SHA256ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91
SHA51242d75be824d69de23d2e8605d60c3608db20ed5c059f5b67c63ca2845484c67150aea88a3aae36aae12a4ea266fb6b469d09f765bbcd444350d836ab83f7695d
-
Filesize
212B
MD55b7ab329dd8c5c4e19c14e12b83b3357
SHA1e22b6ddf344f933473fa2f68f08b6a8ac755c930
SHA2566e0795729527a45b90e2078951bcdd3d466eb15aef66fc294e15218ed85b868b
SHA512562c5f2c07dfe1ac7509deb1e80d59d2e428902ce081bc79642d5d8ad28e52a9c03f79ac8d368cbecd4ccba9ae7af6caacd8215acb51559a5402f141339a205d
-
/data/data/io.keyless.push/files/frc_1:129028017653:android:976309cb6a8598c61b64bc_firebase_defaults.json
Filesize370B
MD578928105a8591f95947285283b49f6b1
SHA145d05f6a1844eb6ef6fe8604a026ab52e9f1a700
SHA256874a2a8fa190cbadf21747b642b90b41a951d313e5afcfbba936d45f670512c4
SHA51246fbe9d5d48bf98cb2c66006fa27b39f5ed63222cc60ac0d3b18fe3b7b43e4fc851938564e2d03c6ca3717511c109d0fffe6ec3fb089eb7a0844bee9aa35dc42
-
Filesize
8B
MD5aa425380221adcb5c31853abd41bb6a0
SHA1d8fbb93582c505e8eb8f425ec70cc4257c74861c
SHA256f76ba480c41d93b94fcfd4661aa5518ed9134a17e86c2d771d2f42da03802a32
SHA51209772da08aa22d6be9337723647fd8def49b56c83a9ebc2112c42c5b5f2286145d70f1ed3d8b89c08b247ba85f4f10fff2805bd83c75ae420b85c30de92e6160
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD531cbe5eae0260624f017d69b25dd6eae
SHA15ba776d83022ea92e9e15f128f6a2f14ed07338c
SHA256df2884d284c54691a3ff2d19b3f89cdfcfdcf766cacd1a31ad6d09624f1beaf1
SHA512fa4c4829ef1be71f03127e20fa5becc547281df1b8b91861431096e8f22f2789100b33f244a372094e56a889f557a1a6d60b14350f3513886670092460c5491e
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
-
Filesize
16KB
MD5683b1563afa3a1f19d68a845c1f1c4bc
SHA15740d4ae99a076f7a205233499360023ddd7d600
SHA25618804a1fe63f5522247dd12c22566ae4664c24641aa5b20e7ca37d577f5de8d2
SHA5121c741ccaf8d028358b125837a2b7f9ee57011e61f25a7792c064191b413dd64e7d90796906ac54069b9012ea4d52ec34da69ba094362b0a80c03c8ec5da96e23
-
Filesize
112KB
MD57eb5db47ee6ef69cf877f709b89a70ff
SHA1e349adf1ff71e4c5eaf2f32647eba686a77d7e31
SHA256dd71b0c9b1fb427ffefafee61631edd0b92367e20220adf0b59c9ebc9e624414
SHA512a7f2647ffc443ad7524127e533d294c58d7a37c8b2b432a6158424c6add88f25eaba265b67cf523837f07a1edbc5b02de1e0eb388b1c4beb54d4e80000ed617c
-
Filesize
10KB
MD58d98b96a67c761fe71ab5c54dfd19eea
SHA18f35101b29b688880525763a08c84a44084de462
SHA256be222eaffccecdf175906165a58efbd814c2496bbc3b3f3f49ecbc47acc11c65
SHA512fa616c4377de32a7ba00c2782e400e5f3d50c472fe5968e87d8cef63daaa903d17283d68da9d04e1d8789ba9d7ee55f7239552f6c232e79ad47e06789c093e90
-
Filesize
25B
MD5b9d9e0f8902d129e1aeebff0ae7b725b
SHA1cb0d2b4c9dd60a5c1fc6261fb581bcd3416fe781
SHA25625a822139d06016af8be1296c0242b60e35074f94c713e03323636be1162ce91
SHA512f158a9dc753e0cb41f71a98714ff02198c576bacdd792a6153fdaf6f9a7b52d8cfb6d09099a269d0c1b0d31e2ea5a307ea1db85115bdc6797887a6de36d597f6
-
Filesize
6KB
MD53d02c2ae9e468fc1758c76b6a379447f
SHA190dca883167f5ab55df13e0fae0118e97e7e1708
SHA25639d27cddc5470fd2ae1308873bce5e6230052afd0aed58975e8814d1888b4003
SHA51283ff64d15f34a22e6393e63033fa6ba366b1d4d92accebf58db1f5b60754d9e6e469ec334a2c7052ea17db940332de15fac24cf07e89bbc858eb01139bf3fa60
-
Filesize
6KB
MD5ed91b7997a656ceacf962bfc9395251f
SHA1397364587d9c26bf81cd26c44718b1600728d6a9
SHA256b23e2d130c87912f5920dd6ea1d77860de699c304a02e9c7dd942d2a4f4c01d0
SHA5122bd7636aab930a40967bc30b5a1b81f48adb8dbf1915f734c77aaa2800b7d8a7797c5321c2e406bba2c5aee96f2abe520b0cc8660e71c882fc6e634f9bcb5dc2
-
Filesize
12KB
MD5bdf3529e80318eb14e53a5bf3720c10d
SHA125c9ace4b1af6e80ebb2572345972c56505969ba
SHA256bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b
SHA51248b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b