Analysis

  • max time kernel
    46s
  • max time network
    169s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20240229-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20240229-enlocale:en-usos:android-13-x64system
  • submitted
    07/03/2024, 07:14

General

  • Target

    anilabx-release-3.12.45-arm64-v8a.apk

  • Size

    35.2MB

  • MD5

    177222ea2b0c0c40c66a031b6ec08547

  • SHA1

    eb72b82068db972a6af57b765cb16e56a9a6533b

  • SHA256

    0d275b3374cf6f255214e86df933cfd57d1f8c77559fccfd3adf82ab2997bad9

  • SHA512

    202a3cce31333dd3ab2a08169edee285ce7a5018d8a9b6ae895a93d90306882dc7c9527d65163c9270b852cb8e439d0338680d82f402fb6c23a44a077683667a

  • SSDEEP

    786432:Ph85Lqdg6355nGvNOxUy+bNkHbhfG0Jz2CV5yDQuWii5:PhoQp5nGV8+BkHbhV2LLi5

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Checks the presence of a debugger
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.crazyxacker.apps.anilabx3
    1⤵
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4335
  • com.crazyxacker.apps.anilabx3:configService
    1⤵
      PID:4437

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/anilabx.db-journal

            Filesize

            512B

            MD5

            7bd821da3bca718820942f17cb321296

            SHA1

            1040a6176f11bceffeec5b1f6373bfaa33620b7e

            SHA256

            b3ec64cc72b05d7cecd035f3410f1e3c3617983bd9069b7117ffc0d181d4571f

            SHA512

            defeb7a55c4ee6283cf074b711108fcd49544aff981944e7bb7ba2b14ce234c13b9f0e29dd37f9fd7a68019fa9935e64ea66fa80ec5c8122b42e25cad8c0e099

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/anilabx.db-journal

            Filesize

            8KB

            MD5

            1c81fc0afab6bd1456388e13db9d142a

            SHA1

            00e080d2f0749b4e55f67c7a4f251a84e7c9f9e7

            SHA256

            36c33d9854bdc04a3ff721ccae9478bb0a23f08bcb4842526364a124a368b9e6

            SHA512

            d344aee24ea96925a5120a72afba0e99b51381c2201ef75d6251b72def9780b905576a7d6d30a1ad6b85ad40c72c5eb4dd68cd5a77bfee8ae8fefd38f05dded0

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/anilabx.db-journal

            Filesize

            8KB

            MD5

            7b8b0341ae1d1455f46d8501c5992b98

            SHA1

            7e81a97d815f8f5d4cd83c4f4f954d5ee76ca4cc

            SHA256

            b43c5b268bdc338ea40261a2a77cb52a13a468ddf04141d7a2363c5754c91fe4

            SHA512

            2ebdcf8f42cd73bee56befb112287aabaf2a2ef9c1a995b01ec13a560d8e39e5a30a9c918715cb7135c571122c3218904491d941c72c936f686fec69bc1168fb

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/com.google.android.datatransport.events

            Filesize

            12KB

            MD5

            edb655088d1ed9f33f9d0d499b7a3ef5

            SHA1

            565c4f4e43179dbfc285cd6331dc8ac75a901af8

            SHA256

            bb9e45aad35b43e895393e7a66e4ead6a5f728f90b7627e3c741d391bf65d4f9

            SHA512

            98cbf923880de82921c38973fbc6d711dc39884428d1eb4ead33658a5a7f163734e5121823d5b043ca44554d19c5b6f966674ac7291513944a94cec97d5be599

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/com.google.android.datatransport.events-journal

            Filesize

            512B

            MD5

            a69e3f3931ae64fa38967a56e4085a6c

            SHA1

            012036c40a4dab8f8cd4f93ae3a31fbc198e8a25

            SHA256

            5595304c6e412f6cc29f0de5c066d9e6e432f674c4d038de2ec5c7dbeaebe685

            SHA512

            e8fdb4b9283469aed2d2a3df8907d601316e153155cfe72e42cf430a58669fcf479ad1a6219cd6a6158cc4284b28e8a37373f17886420a8b70c91de774564702

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/com.google.android.datatransport.events-journal

            Filesize

            8KB

            MD5

            7cc878b0f7cb080fb234144b18b4af7e

            SHA1

            798a5c4cfd9ee75f230acadeb74434eb9cea5e48

            SHA256

            4c4b6f2731844f6c6d735661831f3d19707dd5ca150a48b03c931293b3b4818d

            SHA512

            e99f0c042cc628688c068c4927f387cf27aba41523fb6cb1f52aef13d1c61475a4ae726f903aae456e350aaa902f5f2838f4c32e364229bda780caff20678792

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/com.google.android.datatransport.events-journal

            Filesize

            8KB

            MD5

            7b092a8c24d81b9333fd6d0d653d4706

            SHA1

            bfff5e89f7294e9a1024e81bd8a066e2394b4a06

            SHA256

            867ca06264c27b83a106af4a7d146f5df39a4ccfda9edd2a531cd31ece1f976a

            SHA512

            bcf9124088230494fc40262596e5c8097fdaaa33a0645071fb6693c235741b708afa08f201278840ebab88fa8a3b7ab2848670c48f7da8876cc84226d9edba57

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/config.db

            Filesize

            20KB

            MD5

            f317d11a634a1592e5e9c0d6045e4dc2

            SHA1

            d429c338db38b5069e76069c0c08696c86b07861

            SHA256

            20004f95304022d9b2563ffff4e7accd18693c278002c9f9ce3af6a907aae01e

            SHA512

            b573b7374104ff44b00397a392e26122dc9261e536d09cbdc9ebfbe552f449048d1970d183c4683a21d301cc62534ab4349a717f10969dcc8973b914ce58bae9

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/config.db-journal

            Filesize

            512B

            MD5

            251f3d12ddce08c08d93f9b6b6b836c4

            SHA1

            51fd90f00530dd72a0c3028d7018630219865077

            SHA256

            872d34136ee656c8e595206ddda73002b1f7bdf2d5e23f91a28977bdfdbfebad

            SHA512

            e395eed15a5d1a8a29b20964470c764d9fb8214915c8656c59ef45f03bfb0b90f78af128c87f29b046e1296ec05eb14f4f8ae961a12a1ca44ee2cd853ebc4443

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/config.db-journal

            Filesize

            40KB

            MD5

            3eb97688262abc6700a6c7db4a8e59b2

            SHA1

            2b3770d39ad60929efe5f9fab7f4ac8277017541

            SHA256

            8a1a49c2871418e9f287c83af60aef3870e20b885cffa3313b5c96979cc6ae03

            SHA512

            57cc3e927453e93e064ebb70237ea1edca27e7762e29f0930a2f13b338cb7dbf31de5796f795610d45fae60ff1f8229e08bd92880b720dd07a58ae05ab943ff8

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/config.db-journal

            Filesize

            8KB

            MD5

            7e08b226407d2b17457c70d4139a2ff8

            SHA1

            f29d608958d7df20aa4f0188a14932ba2ffedbff

            SHA256

            2a9d4815fdba63f2cb8a44b1d8248c0ea433f3caa1ae90a46070704a301f811f

            SHA512

            c69b7a332d351e269ea5f6d110beced5a9619461d26a99bc1c642106dc08ec5658039f18c068de0bbc113efed9b9a45967eacf3d3bede200f19c72940af1ae66

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/config.db-journal

            Filesize

            4KB

            MD5

            9f7ce35c9fa9c000655eb51bbcb4ba88

            SHA1

            6955f473cd163f731583a14ee67ec47072e4274a

            SHA256

            aaf8ec46af0937c7378d83a852866ea74e9fd1bc03f6a3a463ede014581cb314

            SHA512

            6655514089aa3b2d63769b3ffc9a49ce83ed9bb427f5ffa58c3d41df1861ef2445870212628ad10f7e25f1f2dd15dea29d423c943d26538f1801a2199702db4c

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/evernote_jobs.db

            Filesize

            12KB

            MD5

            d89acee9fbf356695093f2724f643ac8

            SHA1

            22d2f857dfd38f9df961569715333e53fe64ee36

            SHA256

            4e1313b40c676cdc9653aecd74da0f6212f5d84ef960e1e8bc249811bdeb5783

            SHA512

            66448f754e7932dfeb98d20cddef9fe318b3a3aff17c2c47d065db78c5f830208febed67faf30a41977bc62cbd5c7a6e8205da054ff296843a75ca1b463f420d

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/evernote_jobs.db-journal

            Filesize

            512B

            MD5

            065cb31b98d44eda84e7e672c852b8a0

            SHA1

            b5a4582fc59b8b878df7ba2c52e15ea7de365310

            SHA256

            53c949dce1f8b7f2eead1c69580db1009518e3429ad0bc0e2e9295a7080ded97

            SHA512

            589ae325d6ff12ce5974bd6815acf07e690bd2686e63ab1140751528ab4c8dc0ccc6d2f6ce47d5ac726bf075ae975c8514fe0dfb858a615b62359d18194e3b70

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/evernote_jobs.db-journal

            Filesize

            8KB

            MD5

            77138f6b7fa51666320dda91143bf1f6

            SHA1

            daf8c4d4d751bfa9a26dbf8f2195e86bc7581adf

            SHA256

            5fc1147d4ffc81ea99c80f4c1100816cf993a23412035807437c957c2e4c3b86

            SHA512

            34f90bf2e572f8abf5ba4be5c86c0bff3ac03bd517092747cc185260d3c92b9c9d1760f77287208207f7e19c5c3dfcab195e8bd9eac46170861fb3609c18aae2

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/evernote_jobs.db-journal

            Filesize

            8KB

            MD5

            9b80186d9710ac0241e7bd2bf9422a0c

            SHA1

            bf7b60675b05f56abbbdb7e21dcfabf1579acb8c

            SHA256

            5a57b831c67e219fe98e52501e6994e7850358b4c03a98c497c4e7f9936110cf

            SHA512

            550d727807cac1e37b74b71a10decdd8f0f021d5389d58099d332e37e2c3803ab54e8eaf9acfc8d3277b985a277db663872cfd95e523973fa432fa28bc8ec317

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/evernote_jobs.db-journal

            Filesize

            8KB

            MD5

            42edb69c92a50f820b990413a159d8b1

            SHA1

            e63dfbf4c6999e3d9485453b5e40d93b95b99307

            SHA256

            3f4b951573b08f929a7a84def0082eac721ce7033b7db74403731a398cd3b279

            SHA512

            fb4f9fc395de328e8275a2ac23004a38af26e206a8d838bd86a09ecb989527f6fbbf778216053bc621fbb071d36cceadf4de1593892a1dace26b929be6583cbd

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/evernote_jobs.db-journal

            Filesize

            8KB

            MD5

            c6ea3173ebe4ef0fee6f91c8136a676e

            SHA1

            c8954e3094ff6ae7fcf6d21aad5d26af23e7d701

            SHA256

            352180aac77308c32c2167bbe1b1f6f73311cfe97fded119ab00810627b7a04e

            SHA512

            1d47cf7bdeb00aada71a17d216f70439279e477bd742ae9833ddcaddbaf94dac2d8256a197788f2c82c86398050a15092c7c8a3be1be33990f44d8aa27788fab

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            d6fa404baa513e2d24f0548ebe0a15bb

            SHA1

            3b4e24b3fdea6b04dac6fc17a45e96df6206a810

            SHA256

            f2ba3a71a078d7727a4cc38bc93a1734b9037666d191b494e6f7e81f8fdf5e60

            SHA512

            8c4cc32174875ecc18b18267b0fab712e5cd27b0d05b4c2da565202ba3fafec0f75ff96cc6348945915bfe45961a3bfbf81a3192e5bca5a6ca36ace51a6e5274

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            0020fdad92c994f30da6cf7a5f0fc882

            SHA1

            ea146e03a583810e18cb8f5eeda1c06c43ef6e60

            SHA256

            1c733a0582b2afd02438a00b9b7736e7a873abc359e9cc2656310a57e88f1092

            SHA512

            548880a77b2d569af82ce6e8d731ac528120de0e8f6b48dc35e647865919033c3098285c26285704a277b79c7a705c9d7fd99eea33d8f85b53fb001dc92f2468

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            db712c6182fbc78d8354279f26434448

            SHA1

            cf5282f4099f82a85b2535ededae7e2968d59245

            SHA256

            25653e6b811c1ce0926f5ed2cad5c81c3bd037c69bfffe3f99d94a3238bd4c94

            SHA512

            ffd9f40bb03cc7203ff1169f7fe990711c711acacc85651f6dc0dd4d505b5ef4f641f2b8aa16a92b6441615c7d36f61be57afa9555bbe58c1339ed0aa8283fcb

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/google_app_measurement_local.db

            Filesize

            16KB

            MD5

            e502a1b3095d98091fdd7fb487398def

            SHA1

            fb85e5648a3fe7504b8f7100fbf23189fb760ba4

            SHA256

            81015d7bc61747176a75f8db28be2c6e137c9630c0b32daee7d7ff7a661ba6c6

            SHA512

            a65edbb602c19bd3215ce23fa42570b6fd98b490664308477f3c575488739ba0f89e7dad80cc08dd2947c0f0035f6ca1513f37079c70ff1d8eb26b2bfdb20f21

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/google_app_measurement_local.db-journal

            Filesize

            512B

            MD5

            bb09b093fe96915546467b4c24b652a0

            SHA1

            515a2d7db84716521647145582a21eb08d054922

            SHA256

            e696c00d073266763fea1fc53b057a8123feacfddad5fc1d4d01b15498ea8465

            SHA512

            e1ebf20774c79be1b2b7391c442c8909458e2bfdc770e3f3e6a1c25cfc79194b133ee8b3fc6fc5f96efe8725e6a498fa14acd35b4bbf582d38606e43742a39c7

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            5b5e40edcb770ea78a2c5ad0af4144b8

            SHA1

            3ae68694be962a6a7216f3b617a16af865f1c456

            SHA256

            e8ea4e4bc27d1534434e6ea2686bc31bb9ec059a53a940b24cb8c20ea5b19866

            SHA512

            cc3038ea9750de65333279cde5b7d5139011f60d638ebd758212c33105d5ce6ae52d4dd08f5a77786babd4d47cab28ca5cd4c396b193aa0876b2dab55cdeb782

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/google_app_measurement_local.db-journal

            Filesize

            4KB

            MD5

            facf8f08fd60462be395331dbefd4b02

            SHA1

            178e87140ea026400fc643973329906b5909f2fe

            SHA256

            405f13c2dca765ef8a0685caa0917ad0fd9c3a00fa8d955650038e085d02517d

            SHA512

            7427757d3210e236b70e8863421810f969862e88d96194a093195f0559befeb95997857711aba0ece468710559ecc733149ee03aff66953f752fcafdf6ef1dd3

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            d76e139951a88b2f1ec953418c44edd5

            SHA1

            1469e154d0700214f719d046877eb3dc50e07e42

            SHA256

            7cb71488510dddaf51fa12871e192e04c6bbf2759bb78735821e12b4f30145fc

            SHA512

            1fd5080917e34db674303ecac0f7ef530ade2f315c03840501f8f24e311ee7c8732cfc358bdfc4e1a4b2b3b8d6bdee0c760378d4c245da7874799adeb2fa9ade

          • /data/user/0/com.crazyxacker.apps.anilabx3/databases/google_app_measurement_local.db-journal

            Filesize

            8KB

            MD5

            d85619f58e739f9f40c46fb3d68500f7

            SHA1

            9254a6fe7f237716983d569aec5d4ef383bbecae

            SHA256

            7f3e89df208a53c7121db7b4bca74ce36fb079393ffa3120e684af536eb053f1

            SHA512

            1eb5294442a1af36c039aff441dae98fa0a0b9a9e2425127e430864fe10dc975b09e10c957c72c1e618a9d4cf1124da6fcf40353e0abfbf3e3abb4f419f70e1b

          • /data/user/0/com.crazyxacker.apps.anilabx3/files/.com.google.firebase.crashlytics/65E969950254-0001-10EF-42B3942A9F3DBeginSession.cls_temp

            Filesize

            75B

            MD5

            3c04a6a1fcb7f597d2aa616619bc93d2

            SHA1

            b6b86f3cda69cbe56d613449ee48f1f171f08c46

            SHA256

            aa683416fb9d68a6f8450a82dde4b7cd065a40201d14da2a3cc54a47669c4f4d

            SHA512

            80d30da8513f4680f04cde10b0a9db40ad7baa12b0567b2bbfe4af1827480ccf0ddde497977f29c2ce4f58638e08df54b25dd60f103951d9b6a39d1bc2077f20

          • /data/user/0/com.crazyxacker.apps.anilabx3/files/.com.google.firebase.crashlytics/65E969950254-0001-10EF-42B3942A9F3DSessionApp.cls_temp

            Filesize

            83B

            MD5

            e4eb3a0343c8bb3d42561296f78cf94f

            SHA1

            906fcb59779e8fe29740742bb44e6f83fdbc054c

            SHA256

            17162289868ff5cdcbd85c7db1082e1513525c0d65108ea65f8fee4565abb165

            SHA512

            b6b4e49a4bc1f016e58aba2e52b48623e0b299190dcdc488a0fe886aaecaa5318630975f0a4bd4820385beafb435cd079d24969967b1ba26f7232fb8626af539

          • /data/user/0/com.crazyxacker.apps.anilabx3/files/.com.google.firebase.crashlytics/65E969950254-0001-10EF-42B3942A9F3DSessionDevice.cls_temp

            Filesize

            48B

            MD5

            3ec036504cfcd969b7c3004efe049466

            SHA1

            3ce7f8a22dfaca2d8fb5da10fab68a4fa6bdec5a

            SHA256

            af668c9da3917789787b5c37bc20f9b7f4935d15220d0192c3484f438201d750

            SHA512

            ec06ca03144aba12ee5c245f12ddcd4588c7b3a7bcab5369fb09b27d2111391b344bc5a336d456185b9f363c405034e7c1add7fd268170ea6493dde7fa90261b

          • /data/user/0/com.crazyxacker.apps.anilabx3/files/.com.google.firebase.crashlytics/65E969950254-0001-10EF-42B3942A9F3DSessionOS.cls_temp

            Filesize

            15B

            MD5

            f8b3ebea29c91d82f009e5a9c6d11060

            SHA1

            99d88c4b39d9143084e777b93d9692a59a3d087d

            SHA256

            b7869422f5dcf3f24ae91560cec05ebb39852ed45baf3a31176f9b90de87aafe

            SHA512

            6f89bfe6bc1c0a68bca73ef92c53e1a308fd63f2228a25a6e34d117fc5cd253209eed56fe08f51d5643343a152acfdbfbb1c5dcea224e2750aed46074af369de

          • /data/user/0/com.crazyxacker.apps.anilabx3/files/.com.google.firebase.crashlytics/report-persistence/sessions/65E969950254000110EF42B3942A9F3D/report

            Filesize

            760B

            MD5

            62eef44c44d9740e62ed75817eb9e869

            SHA1

            5bf3232c1ab8b297158fb0d067b01911f770ba4c

            SHA256

            f5187da175b008e9592ca332cc4ba079c3a59aed86c0b4e47a97965a1ace9e72

            SHA512

            6b47a589e0ecd5199c353ce7523bbf5ab0f849ce90cf0ae54057e899b8cba2734ba98a908f3657f48cda693563bb9b8679844ec5cb8c662e474bd3aeebf1ec05

          • /data/user/0/com.crazyxacker.apps.anilabx3/files/PersistedInstallation5928543423241281556tmp

            Filesize

            566B

            MD5

            44a8fea1f2940e15678ebaa08a352c4d

            SHA1

            c04a83985c975c11ad35ec62e7ecdd1ee9e69fcd

            SHA256

            d16f4bd4a8b4175b72f82c6fe0c028ad5a40a444548ba1eeee899b0ff131c385

            SHA512

            0b283838239ded7a4d9791e15cb17f0620d6e2fab10b37629cf8f72560fc3b492fcd074ab63c0df5be1185002c9d20c84180090708deb92624b3769003955bee

          • /data/user/0/com.crazyxacker.apps.anilabx3/files/PersistedInstallation8460403026424327149tmp

            Filesize

            90B

            MD5

            0023a388ec4a6c6c3fd0f746a42d8f5f

            SHA1

            e555db6817722ed3500033071082532bc7c6dbee

            SHA256

            2e6b567d5bfd80d641061522cc07f246164a19967db26d00eecc071bf9a7b5be

            SHA512

            573992355b64fdaf8a4cef0705152f05eab166fc088c6fb37acc3c346442d7a628fe5e1d581a1fe9f1869b9ed012b0b42c5ce73d4617ca75b8e70d77df4480c4