Analysis
- max time kernel
123s - max time network
136s - platform
android_x86 - resource
android-x86-arm-20240221-en - resource tags
androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system - submitted
01/03/2024, 22:01
Behavioral task
behavioral1
Sample
c58a38d94d287bcab50a61b55bd2a46fa344d42d23c42be3b9955f4f899f3860.apk
Resource
android-x86-arm-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
c58a38d94d287bcab50a61b55bd2a46fa344d42d23c42be3b9955f4f899f3860.apk
Resource
android-x64-20240221-en
1 signatures
150 seconds
Behavioral task
behavioral3
Sample
c58a38d94d287bcab50a61b55bd2a46fa344d42d23c42be3b9955f4f899f3860.apk
Resource
android-x64-arm64-20240221-en
1 signatures
150 seconds
General
- Target c58a38d94d287bcab50a61b55bd2a46fa344d42d23c42be3b9955f4f899f3860.apk
- Size 2.7MB
- Sample240301-1xjeksdh21
- SHA256 c58a38d94d287bcab50a61b55bd2a46fa344d42d23c42be3b9955f4f899f3860
- MD5 6161b9c2a6b36f54d9d7175c2b4cb81a
- SHA1 1bd043434662582d58192fa4bede85ba5422f65b
- SHA512 8370dadddeb7e1e5723c6bc7aad5b7e47dfa45231ee20dbd122670f550976bd2b5f6edc014fce63ed84fed03a35f0e433ab95517b6285d78feae1cf186c6161e
- SSDEEP 49152:i/BaVV2zkrbloMtqnHAJ0Mb+KZgtSqLSH8u3o9snt4CEXnsPb/ULiFl:4KVjrbS4qHWDut/Ls3o90t4hXsPQL8
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock vip.app.com
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/vip.app.com/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 cca88c80965d81464a60feb717180a7a3db7e6cc6b370c2a5a015ca45b236fe9
- MD5 b00863d7e2d9a492453847eb8be4726a
- SHA1 89734808f26f3338eda746b9f613bc5d58ce9b28
- SHA512 644542e56d2c21bc80f2142e7611e50e1c275730b727040fba4e84bbdaaa792e34be3ee4eb932748f21b6c0b8445e9670bf3eedfd77cadec69fa55a45b20fe5d
- SSDEEP 3:qqb/NjghzY+/lzyliMlTXmmgbCHAlleRzMlklKllgIn:LCM+/lulvl6mg2gleRQlrf
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/vip.app.com/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 299cd99dad442d529f0b5a2482f2f78c68d3c0c2da4a8a15ee53af721bac1bbe
- MD5 2784a883df77ea5a6a6f1d055ae50fa9
- SHA1 00c874f2a11f2a9d29aaebdf18eb3fbbf961279f
- SHA512 0cfdd4c59b0957647f88c95278d69a4044510868a61a8e6aa1d325d8fd9e9094b887d717c31be2b7e7c7733d3a932d63b7066fcc66acc0a5611d32f2b512a50c
- SSDEEP 6:rLP/gEhV71m/9blDqlrElvlLVQlr23jCM+/lulvl6mg2gleRQlrf:rr/gW49blqYFlCYV+/0Fl6Rfwi7
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/vip.app.com/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 9555d94fb9affd064b76b41e77de36416b3dc995b1a827fa21333f3f9def2a30
- MD5 57fc0208bdb2af8d3354e73531d8b99b
- SHA1 ee80046e9d85dab1a0acdc34c51c20c70af150b8
- SHA512 1c68333ffce56fe6852a6887e94e060b881c61e62bc90036be550d018fab111ad75bc60e7c9040c54c90005c6646879efe6256ad220fedc257a67543cdac80da
- SSDEEP 12:XFAiOLauK/6AUvkWlgL49blqYFlCYV+/0Fl6Rfwi7:XPKary5tK499FBVlF+
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/vip.app.com/databases/google_app_measurement_local.db
- Size 16KB
- SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
- MD5 7237409e0640cfab7bdbd429bf821a3b
- SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
- SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
- SSDEEP 6:l9FCls1ulO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TgEu9zmzrfRmBEyPbBvOwk3
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/vip.app.com/databases/google_app_measurement_local.db-journal
- Size 512B
- SHA256 8c51502e0910ea6f3cf5b6ee74bea492b7b37e18bae1984ce3c39692e8f76c07
- MD5 b919f2ff83a503f8854623369155047b
- SHA1 29c71f5b513c9987fdeae58380b156b55196ca0f
- SHA512 bf9124ddfc8420cc3e578f2119fdefc5a6d7e6a603481efbb25bdad326ad07d0098dc01d3334461eae732d7eb0c723bc975f815fe942b5d7473b358a9e058db0
- MD5 SHA1 SHA512
- Path /data/data/vip.app.com/databases/google_app_measurement_local.db-wal
- Size 4KB
- SHA256 53709cd114c6a47f0190f5582c93e6366d8539093238e48a3984a97ae88b7c8e
- MD5 d193b568b97c1e72dd75eabfbf7cedab
- SHA1 d26319eef86ae9a107fb54dcce4e0fbe8ab24f08
- SHA512 d11df6b626aa8e9084eb8d2eeea7bf9fd73a1c0a20e59f1385812d218c36825279d96cb1264a5c7c6e99f0d9d02a26b58dd63fab31d4e6735170262bb6a3a64f
- SSDEEP 6:Kclx+KQ7LuB/uCM+/lulvl6mg2gleRQlrf:KclXUx+/0Fl6Rfwi7
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/vip.app.com/databases/google_app_measurement_local.db-wal
- Size 4KB
- SHA256 d02d771d014e33065f689198efb5314b65d7cedb34b7b78e90b41387667dbaa9
- MD5 5310b266f213dbd124d71bfee1a470b5
- SHA1 e8d44779b8df5c34231bf5511f55315fa3e329cc
- SHA512 6be7adc4af631ea598dd841389b939aa254ecc218d527a0dfe7f298594734a65e68735a974e408fd71e275fd3b9c25b40ff86a28df9a0264e86a1c4d5337f56b
- SSDEEP 6:KGWkCuulwP/gEhV71m/9blDqlrElvlLVQlr23jCM+/lulvl6mg2gleRQlrf:KGWkCHW/gW49blqYFlCYV+/0Fl6Rfwi7
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/vip.app.com/databases/google_app_measurement_local.db-wal
- Size 4KB
- SHA256 45ea99d9ef2ba0260ec06328e95749942324d3ff5b97b462e9d264cf0eb6a283
- MD5 42cf6a51324bbe6ebc2200933b2a1ed9
- SHA1 98cf4dc75127714da3b3b5b35981553e982f9aca
- SHA512 6b8f8728a5ba1b67ff9cd1f8c704030cf8a176964b6310e2c59da11db133422cb330ac01f0cd3119fa0b5788dc9523ef709a9c19e3991109c4d0ffff12acf2b2
- SSDEEP 12:KSc5aOFAiOLauK/6AUvkWlgL49blqYFlCYV+/0Fl6Rfwi7:KSpOPKary5tK499FBVlF+
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/vip.app.com/databases/google_app_measurement_local.db-wal
- Size 36KB
- SHA256 a0e1088fe6d1da54f7ad15ce9934a7c06e89f54526a91277d6e0835d91e79467
- MD5 295cce75f30081ad11b00c0889bcbb9d
- SHA1 2f9984a26e448ddbd4e82c36afc2385a04f4ca9a
- SHA512 298903544138997437dccfbcf0212dda08d4857ae8313597d47f90a7dd15c77b1cf44224ac5cbdb4c7efb862c9a54143ab19e7a34ab522cad2e94082f4bf8b2e
- SSDEEP 24:KXhz5zyGSP/4gFXYEU8GqzDGSP/M4qpmzr0GSP/4gyo3:ahz5zNSP/4ghppGqz6SP/M4qArSP/4g1
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/vip.app.com/files/PersistedInstallation1426961263706545658tmp
- Size 569B
- SHA256 76b20cbd73c0aa1b928e0de9be92fc852698e3227b555e8cac1d527f161913ae
- MD5 8cec2e6de368ac109bb3e43c9849d27b
- SHA1 4f2af3f10565b5e318cd1f42704a4674134b989b
- SHA512 7e2fb679cbb64cccd85eceaed454956c54be01b447321ae9442d11e3307f02ed7d63beaede20986593d524ddad89253b031d938beddd38fcaac939548b16351b
- MD5 SHA1 SHA512
- Path /data/data/vip.app.com/files/PersistedInstallation654003411872274616tmp
- Size 90B
- SHA256 d75dd3f117455cbfe9c730a1b55cea72b1cf3573bf8468d4f4952fca825cd7e4
- MD5 9b1c441f8b78de23c7e44a228e3ced8a
- SHA1 66e072533e79724e75ed89d0bcb235ca1d38c460
- SHA512 dfd8734d6e814b85c86d45335b277be1816ca61cd6dfb545ad8d66a9f05c5adf38e18694da7d1c8a7155b98a1e5845ead4b1fc68ceb1404df123c2c8fd05c944
- MD5 SHA1 SHA512