Resubmissions

21/02/2024, 15:46

240221-s7mkzsah42 7

21/02/2024, 15:32

240221-sywsasaa2z 7

Analysis

  • max time kernel
    291s
  • max time network
    316s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    21/02/2024, 15:32

General

  • Target

    Keyless Authenticator_2.4.0_Apkpure.apk

  • Size

    172.2MB

  • MD5

    c5c594baa1e9a942015100462db972b2

  • SHA1

    4adb01eef5a1526a6ae6916a63305f0491a0be84

  • SHA256

    6c377ba1f6b11a5b8901c252554ceafd8dba72c959ce00335b904b29a61f13bf

  • SHA512

    8a281ea9b5a008c2e3d324efbce5b465093ff9698033eaa0a969b2dfaa753ffa8d6e8a42da0241b21e44fbd5d95b985c410ab7be403cda85ea269bbc30e7d156

  • SSDEEP

    1572864:9rOGPxROtOJgfsrEW/0rNwZqTvhME8Ye2U1LdZhRZsb3xSgbLr2:9/LC1faE7rNwZq9z7ej1LXO3a

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Checks the presence of a debugger
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • io.keyless.push
    1⤵
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4210

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/io.keyless.push/cache/datadog-d966308633c3883bc627e0dfb6f495b855692e4fcfd0e94f9d79edf2bb4d1062/logs-v2/1708530091011

          Filesize

          995B

          MD5

          12571ee8a2d70578ab7bb34425d884ea

          SHA1

          7b5349a698d2a047ca89cbca046d3f9390b0fb6c

          SHA256

          50b098c6da10a6318c96230da0783d047211a4374cbc69062e317a8009ceb7bc

          SHA512

          2dca6bb6e1f12315aa9a80e6bb7220c8c4ae5adf53c5b42919c29c97539a78d88b38aeef6a67dbd79f3c9d92750da4b59bbeab8883189775e2b9c5b6d1a849ae

        • /data/data/io.keyless.push/cache/datadog-d966308633c3883bc627e0dfb6f495b855692e4fcfd0e94f9d79edf2bb4d1062/ndk_crash_reports_v2/network_information

          Filesize

          70B

          MD5

          dd7f615ea0c0c7bb9b8791a755b2823c

          SHA1

          2c4b8c33b5dda89b8c911d9203bebf18243f79a4

          SHA256

          8012b1816e60f3713b66ec6a690951134d99381fcfa2d0da48d5d43974a8432f

          SHA512

          aee96d9bda954ddf113aeb9bd506ba27cba95d4fc9101ab1d2bed5f1b6662766662224e8c8f8628571e8e78e45376756acde319c550c96e470f468e919b507ee

        • /data/data/io.keyless.push/databases/com.google.android.datatransport.events

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/data/io.keyless.push/databases/com.google.android.datatransport.events-journal

          Filesize

          512B

          MD5

          5c3375106508c4f4267ab2d9834c25ba

          SHA1

          a09c930281b4d5d331b3967bf0189dcda583e28c

          SHA256

          6aff31f74fe3f65306169a7106eeb624eafa7a910fe9e2a91025bd7127755ddd

          SHA512

          67ae47a46e6241dad5f970590bac01a3ff02eb35a0703e54559bf20c9136055a7043c4e81ea33bff9c38ed3d9527b0ede5f3565a5aa53444d31d9a46cd7e683e

        • /data/data/io.keyless.push/databases/com.google.android.datatransport.events-wal

          Filesize

          16KB

          MD5

          44bc0bba2cf9f9e25f1e903371ca62a4

          SHA1

          9f1715563a989db32c500bac826c78c97478893d

          SHA256

          aece6884703db4488ff5c367708c2cca007ccf74bb67b172f6b09c498db719ac

          SHA512

          69faddab49f6c6eff9b6e71901b6a8a7dde392e69311f55f67fab4d6e8955ec42a946d3028e59fdd11ad4384a1c8bb3cb96793d8bf7d3f34702e9aa3e3d230b6

        • /data/data/io.keyless.push/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          7a2043914054b4eae86d9b2dcb8c4c33

          SHA1

          48863f399f8ebaa501c50cae866a08cb67fbe8a1

          SHA256

          b702430b3e19b4a9645c28036b559c5da58c5596841b91a18bd50d29dd81f167

          SHA512

          5ea4e3f6d0958513830e8fbe4b5ebab1ea9c07fa93490193f789c96429e41786794c5bb66b2c43924f807c95ef6ffe0a29b4def9e95a4e08c68fdd9388c0b091

        • /data/data/io.keyless.push/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          7011b9aa260ac5cad9400e407f0cc632

          SHA1

          ecc060619d2d89266dfd87110743ba10a90b321c

          SHA256

          6a1b60479069375cdab8042f5279d322896fe2c6f7645f20e9d4608cba8ebaf3

          SHA512

          f38e516a5b597104497139ad6d5c4a251bda51d8e1d8ed094f1f814464c903dea3dbf4b18765c4c482a5dc743a67da10fcd8ba76bb310e95df9f435fa803e05f

        • /data/data/io.keyless.push/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          a1591ed3f2b5a550711da43943cd21d7

          SHA1

          0141bd37606512ced867b7268ba898208f632050

          SHA256

          f7db0a6b2716c73e09db3bb62be11d19459f1565f53e143c9caf7c4c0b04271f

          SHA512

          bc4c655c6dbf064077c8efea59da22d1dadee8eeaf2378df9b442f029516cd68d6a9c8a7118b615b01e425cd980662a06f3cf1aaad92787d58ccd023773583be

        • /data/data/io.keyless.push/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          064c6432976ce2a39789920585176bff

          SHA1

          06545e355e035fc4dfc0fcffb6643e29801cd080

          SHA256

          b149b198b17b98d9d688823b8980816bd174fc812d4db06b042233f0190ebc3e

          SHA512

          0b58367e8e12f6b05bbd33f92cf97accd67a1f599b72082c46bf3f3056918a10d631424452e056f0a52cfcdc6dbb32430e6d1e5656274cf6d2a1dde3fd3702af

        • /data/data/io.keyless.push/databases/google_app_measurement_local.db

          Filesize

          16KB

          MD5

          44693692da738db6eb133cf0e4cde91b

          SHA1

          e6bda56494c325d8d37ad89552263ae85d9b0550

          SHA256

          8fe0ac9db76d4a2dcd3b3d54c0efedcd223e25aabf716506493d50e243a7a2d4

          SHA512

          b34ddfe1ae343b1b12f7029ae476a0ba8e1b4043ccb520afb412b3f71335ef679bf29723c9a5c00af7e922e9982d5b3af54b2ed779da8cb601f378e5b9d26be5

        • /data/data/io.keyless.push/databases/google_app_measurement_local.db-journal

          Filesize

          512B

          MD5

          abf7f86b3ab31fde9174e93a6f8d0fea

          SHA1

          b2959c43bb33c751b426d26bab6189832c851f38

          SHA256

          f7e890ea4aed8771186f365922e7d6842dc29d1c71694ff10ba34877f5ca0c98

          SHA512

          35b9e9fe8e13b1a197566b2a83aa092338f2bd6f856505904a5e9000aec7379b48ccf131ff5d53cfec192f9d12647dcc22c24c9647c035c2fb60de8a92671247

        • /data/data/io.keyless.push/databases/google_app_measurement_local.db-wal

          Filesize

          36KB

          MD5

          d4e77082b8e3bfe7010b260a95068c01

          SHA1

          93250d2db16ce37e8716f6fec42925831aecc34f

          SHA256

          a46c1dedb06b0cb76a2a9442738735290c1772f8f2f94f14163b0f184e051985

          SHA512

          5d16fcfb37c19402f9be54b653c55d0c2ed2d4d1863a20b1aa4cebe07c2a8a5e29424296e64ace58f6f04373cb8176a33be4bbdfe82c26192a4610c4a3354e2e

        • /data/data/io.keyless.push/databases/google_app_measurement_local.db-wal

          Filesize

          4KB

          MD5

          69c716e96f419216509cd3752bdfb42a

          SHA1

          250475fcdc26382af400c2daabd76e3122111b43

          SHA256

          bf8f3fe6d5ae15a231b16e5097d36956e466165135eb4276156838c182f55220

          SHA512

          0b4a26e5f4f970a722b0dc676fe100d242297c35a0b0f4febd3cebc1ffead59147ff35db3010a7ce27808306778776ae47d9f919dc879aafd5bcfdcadca2d0bd

        • /data/data/io.keyless.push/databases/google_app_measurement_local.db-wal

          Filesize

          4KB

          MD5

          38e8406f5d1eb7e4c64bc8f160239719

          SHA1

          deaf75166fc851cdb5d0232cad3026e4bdaff860

          SHA256

          13353bafa953fbce3eecf19d181d65210fca8941171c471c710325d9fa7ff02c

          SHA512

          06e6f4fb0245d37c0ef780b1ab8f1db9fe9bc4281e846ab8a3c523f3850b4925b9574e87068e1675200c29f3451c94d8594eaadf364829a0b1afd8203f75f4cd

        • /data/data/io.keyless.push/databases/google_app_measurement_local.db-wal

          Filesize

          4KB

          MD5

          ad6efd4600c3fedbe8f895c4d6e8f597

          SHA1

          9323bbfd07c0dc6e497adda3958a5576511fe48d

          SHA256

          3cf96e0694c6beda000d24e69651961928003617aa79d391919a0b2f2d4582b0

          SHA512

          95ef82d0545aae21bbb8d9d402b283f905443473572be4bfe63bf9faf024d0596185885a5414d04fcc18bc561dab46dadb85141c43251518ed7b329cb79c0773

        • /data/data/io.keyless.push/databases/google_app_measurement_local.db-wal

          Filesize

          4KB

          MD5

          4e9fe979569e37ac61a43d17d9e72e3a

          SHA1

          0904eabea6fef185cf51fc1c69e3adb0e71148b5

          SHA256

          3bdbe39763643e91b1b59b18ca17696cfef64d2f849c4b8777038a6409ec5534

          SHA512

          99e2e57a62f725e76e0ef54fb6919118060cb2293c6a883549407f0a3b0e535305805854133851b71574ae57d9ab839ae1e35f4e1027eaae6031085f1757935f

        • /data/data/io.keyless.push/databases/google_app_measurement_local.db-wal

          Filesize

          4KB

          MD5

          699e434945359cc7a596ee2b78853dc8

          SHA1

          cb34114f104c3c7f990c58a7fc73003fdf01c733

          SHA256

          bba47d9a503d8bf81166ae9ea9493380c15b5d62a1ffbfd1fb46abaea8cb3212

          SHA512

          0a34a89d7b9863c0e0c32cf098eeeb886835e167cde6b51b13968f8f9d20aef829013c867bcb7ae7a33b3770ccf1b6a2d7e2f7a4d82c624591a3d96e47cef99d

        • /data/data/io.keyless.push/files/.com.google.firebase.crashlytics.files.v2:io.keyless.push/com.crashlytics.settings.json

          Filesize

          711B

          MD5

          998e9d128c3ca5219591708aeec97957

          SHA1

          5735c98ccd4701b2a111a261a5b0e3192dc4ebee

          SHA256

          f647b6063be80f0920a5eb9e677e5c23c94c7d1dec4238a0ac3713b1e492a53c

          SHA512

          a19bd43b02a0c4762ce7c2115f8f0ffd509fc911984e7fb6621634682782f715922e8e380df99dc35fb8da7d4cc051217b831d228988a7a4a2f0e3c43495d2a5

        • /data/data/io.keyless.push/files/.com.google.firebase.crashlytics.files.v2:io.keyless.push/open-sessions/65D619A6011000011072F02037179B8C/report

          Filesize

          794B

          MD5

          ffba58f0c34660b7b52635e49f52756e

          SHA1

          9b5c85e355d8cd25630ef8ad12b6e936bfdfc573

          SHA256

          849dc5e79b053e0d9f00b89ab87cc4aace9e7dc30b3be1aa0427dfd1faeb57ea

          SHA512

          81e2259275d70e106d31d832becfe901b201eb3dc9939b94d3948381e42ed03f89112ff7402c55e3e82f839d4ab5ca79b1b3b5634642db8b20fb9be41d1cdb93

        • /data/data/io.keyless.push/files/.com.google.firebase.crashlytics.files.v2:io.keyless.push/open-sessions/65D619A6011000011072F02037179B8C/userlog

          Filesize

          88B

          MD5

          73fa0292c182324e4e9867118e486c28

          SHA1

          b8ef77172559348258d376b7f31bea9ed8bbee9c

          SHA256

          4be73d026213d3811451bf2b37a30e3263e88a42fc006e958b5031861ddf437e

          SHA512

          17ddb7706b85b1cb69ee2d0365c032fd413c6d9904525e726e2ddd9da9d06a3ec9a936ff7733dde8654eb74a4a8dcbb99d3f0a256ca6f3febc653cbcdcd19cbb

        • /data/data/io.keyless.push/files/.com.google.firebase.crashlytics.files.v2:io.keyless.push/open-sessions/65D619A6011000011072F02037179B8C/userlog.tmp

          Filesize

          16B

          MD5

          c33583fae4e0b61cde1c5b9227963237

          SHA1

          fe2ebe4d27469af1460f7e852031a04208ef629b

          SHA256

          35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

          SHA512

          fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

        • /data/data/io.keyless.push/files/PersistedInstallation3280105718588230260tmp

          Filesize

          567B

          MD5

          20ea847b9dbda99931a2421189f15f5f

          SHA1

          7af981e293408d1ea3c024b871cd5d7c9b3d36a6

          SHA256

          6110813ac780dcc51e409b7ea8930d0adb334ef8ad485af635d879fb30b8b516

          SHA512

          2ab738ce821c918f46eeb051023ff1b381e3aba8b80c68dc02e751a5e2d846d54c54517c1487cbc91c5b8e63f6c90d09a165147493ca28e7b93bc742e4850ad3

        • /data/data/io.keyless.push/files/datastore/firebase_session_settings.preferences_pb.tmp

          Filesize

          33B

          MD5

          35b51faac8b5af3886e70bb5a885dab1

          SHA1

          e6cb282da46cd4bf113e25c8573268578dcd11b6

          SHA256

          af5b3362ec35985974c6b73eeba53e5063861f2491252d61d8cd42168aa5ed6b

          SHA512

          6ad5e9766cc03a4436e1440b9e47c44da6c6440a3c94b1cc988f8c5680043cde6f7b7e02b2b4c71b25df4209c39ed099fb65fdde02a9f09464609a1abe6af8fa

        • /data/data/io.keyless.push/files/datastore/firebase_session_settings.preferences_pb.tmp

          Filesize

          75B

          MD5

          944e6a5a08cb971370c65c06061f0ab4

          SHA1

          84d47725cc29bf167b782c702575bce4bf2ecc5b

          SHA256

          ba8f4af0e35f93cc15649f4c51969f5279421fc12deeafaddec5e5c48aa58dab

          SHA512

          bdc404233927a6a99160492d0b3e2cf00776d51b33612b8c9ecba395747b3572cf1790269fb199915aafe84c546d30e3259833c9d00af8c412823396882ca783

        • /data/data/io.keyless.push/files/datastore/firebase_session_settings.preferences_pb.tmp

          Filesize

          121B

          MD5

          ffcbf87665a36fc21782400bd0537e79

          SHA1

          3dbfbdbfdcde953317b089f9a9fa0bbe50c698ee

          SHA256

          a21d3bf2cca0951e9e7b3fed43cafe9f89a4cf9d844c82279b260852d0ee473d

          SHA512

          7f98ac150c422eb4f1126d86501d0435817ceaa7eb5549e4d21a295d57be3d3fed4388cda782c084130c4ac8d57a4f225139a2e42e8a12b34cc1679140d16b57

        • /data/data/io.keyless.push/files/datastore/firebase_session_settings.preferences_pb.tmp

          Filesize

          163B

          MD5

          dcf7d6c1cfd5e7b56074e3001577c78b

          SHA1

          b8eba89aee9f6688ecda6675ef8ff4998da0b141

          SHA256

          ba0830617929c78abca9391c2059f89c78049911f502ef5525d39341e4da2b91

          SHA512

          42d75be824d69de23d2e8605d60c3608db20ed5c059f5b67c63ca2845484c67150aea88a3aae36aae12a4ea266fb6b469d09f765bbcd444350d836ab83f7695d

        • /data/data/io.keyless.push/files/datastore/firebase_session_settings.preferences_pb.tmp

          Filesize

          212B

          MD5

          e85a8bd42cdd362ec63502542eefa1e0

          SHA1

          4008f9424c2af404e127a04b2c0715105f666484

          SHA256

          bb364aefa95be4faf69f6e36d18f8c5eaba4172199f408d7ddc0fcebc019df48

          SHA512

          a1aef871c9b1ce377d33cf61251ea139189089f5c128dbb24d3b3b3238734109f8610b3bae8d48fbf9ebced81c70c10e25123f535e42c7cee88f81fad77f845c

        • /data/data/io.keyless.push/files/frc_1:129028017653:android:976309cb6a8598c61b64bc_firebase_defaults.json

          Filesize

          370B

          MD5

          78928105a8591f95947285283b49f6b1

          SHA1

          45d05f6a1844eb6ef6fe8604a026ab52e9f1a700

          SHA256

          874a2a8fa190cbadf21747b642b90b41a951d313e5afcfbba936d45f670512c4

          SHA512

          46fbe9d5d48bf98cb2c66006fa27b39f5ed63222cc60ac0d3b18fe3b7b43e4fc851938564e2d03c6ca3717511c109d0fffe6ec3fb089eb7a0844bee9aa35dc42

        • /data/data/io.keyless.push/files/profileInstalled

          Filesize

          24B

          MD5

          3f4a3aca757064472bc901fccb4fa1fc

          SHA1

          c27c2c99213c48bf5337c0574c284b72b8a60dac

          SHA256

          625f12d14dbcf0b5c29ddafa254d54da41c545524bbdd77b98f840230d8a522d

          SHA512

          a3aba7ef49aa2ef979ae818c076f078e72df00bec7d989c76cea230c645ae3552fad2d2e0ed2669a6c549633bff2a0e2aed2fc8e37498721f2295b1d6de34435

        • /data/data/io.keyless.push/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

          Filesize

          8B

          MD5

          91d629b7ff1376309adea90884d25f78

          SHA1

          734df5de83da9b16246d808f6412638550bbdd1b

          SHA256

          15c8fe935b51d85386969328aa582cf94ecf7172c65f8d73627505536fc4276d

          SHA512

          8f4607acf9b2277e45e6a4660a0a1ebbc54571eebd2a4bf540c080e1de80b9405ba75f8e3f6f46f86694fdbefaa4b3e2122c28f184069f89fc89433a1a06e488

        • /data/data/io.keyless.push/no_backup/androidx.work.workdb-journal

          Filesize

          512B

          MD5

          6ac4c28765e96bc70f9e37d3879c23d3

          SHA1

          7b8ec424fe621d59b4739569457a827ee7c4e3b5

          SHA256

          1b97364547d96327ef2d8f5408e4d482546d4b1cf32c47c5b5db71c5884353dc

          SHA512

          6b3247a8693bf5b20f111a200ae88f132d797dbbd2c85528e542669bbabc939030f73efcc33edbe81aec2ed328217df000383af94c91ab03a66ed6dbeb4f7c6f

        • /data/data/io.keyless.push/no_backup/androidx.work.workdb-shm

          Filesize

          28KB

          MD5

          cf845a781c107ec1346e849c9dd1b7e8

          SHA1

          b44ccc7f7d519352422e59ee8b0bdbac881768a7

          SHA256

          18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

          SHA512

          4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

        • /data/data/io.keyless.push/no_backup/androidx.work.workdb-wal

          Filesize

          16KB

          MD5

          cb0b429335eaba2cd4ae2812179f0bcc

          SHA1

          686f8b8afe6c5b99e6e2559312a3f2d3187aa750

          SHA256

          858fb7b5b1fba203fcfd89a203a3e170eb8bd02ee42284dffa0849662af7270a

          SHA512

          fdee6cfc59351d642ac08f2dc316e89cca47b2dffb45580605f0f9f358c264b660419ab2de347b7c38e48fdc46c754bb535168f55202f7cc5d0b3a119c2fb845

        • /data/data/io.keyless.push/no_backup/androidx.work.workdb-wal

          Filesize

          112KB

          MD5

          cc4354c4dce88ecabd6de58cbc34c240

          SHA1

          a134c05e54c7dbf83a47e12a4deb45031a7bc2b5

          SHA256

          ed42d0559192ad5ff229f46eb4471735d8da9c2ef71ed0307f23e47da3f4805f

          SHA512

          cf68d666c4d2e2b48d8329c5bd7d42323dfa963784f6946c0f63f85b606f519b5e904f4c9794aafcbdc0a3b59cd7306b52d60fc5ba60d45e868d578616c7c5d5

        • /data/data/io.keyless.push/no_backup/androidx.work.workdb-wal

          Filesize

          120KB

          MD5

          c3debd4ffa5e0159c914631a21ed7d01

          SHA1

          9c7f1b81bfa7d33b56de1dc54991104b008dcb52

          SHA256

          5d99ab454654255987a932646c1ecf78091b66726e98fcf7afe01ad357fa6268

          SHA512

          e3e7a78d97e7fc31627e8ee25c34b158a968128ae6fc62f0e18d642285385dc4e216de3d1e8e8c8765923759de542e22fe97768279bae6a47eb39b53550818bf

        • /data/misc/profiles/cur/0/io.keyless.push/primary.prof

          Filesize

          10KB

          MD5

          8d98b96a67c761fe71ab5c54dfd19eea

          SHA1

          8f35101b29b688880525763a08c84a44084de462

          SHA256

          be222eaffccecdf175906165a58efbd814c2496bbc3b3f3f49ecbc47acc11c65

          SHA512

          fa616c4377de32a7ba00c2782e400e5f3d50c472fe5968e87d8cef63daaa903d17283d68da9d04e1d8789ba9d7ee55f7239552f6c232e79ad47e06789c093e90

        • /data/misc/profiles/cur/0/io.keyless.push/primary.prof

          Filesize

          25B

          MD5

          b9d9e0f8902d129e1aeebff0ae7b725b

          SHA1

          cb0d2b4c9dd60a5c1fc6261fb581bcd3416fe781

          SHA256

          25a822139d06016af8be1296c0242b60e35074f94c713e03323636be1162ce91

          SHA512

          f158a9dc753e0cb41f71a98714ff02198c576bacdd792a6153fdaf6f9a7b52d8cfb6d09099a269d0c1b0d31e2ea5a307ea1db85115bdc6797887a6de36d597f6