Resubmissions

19/05/2026, 07:24

260519-h8cgasgy7z10

12/03/2024, 17:55

240312-whe2dsfc6w10

Analysis

  • max time kernel
    134s
  • max time network
    160s
  • platform
    android_x86
  • resource
    android-x86-arm-20240221-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
  • submitted
    12/03/2024, 17:55

General

  • Target
    c3fd36103f617324d4d2fa833989096c.apk
  • Size 4.9MB
  • Sample240312-whe2dsfc6w
  • SHA256 0cc18aa0a58ac84d39ea0d681caa378f0c85e39fff230b85239fec5960068870
  • MD5 SHA1 SHA512 SSDEEP
Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 2 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.contextlogic.wish.hack
    1⤵
    • Acquires the wake lock
    PID:4313
    • /system/bin/cat /proc/meminfo
      2⤵
        PID:4565
    • com.contextlogic.wish.hack:Metrica
      1⤵
      • Acquires the wake lock
      • Uses Crypto APIs (Might try to encrypt user data)
      PID:4348

    Network

          MITRE ATT&CK Mobile v15

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          OneSignal.db

          • Path /data/data/com.contextlogic.wish.hack/databases/OneSignal.db
          • Size 4KB
          • SHA256 0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
          • MD5 SHA1 SHA512

          OneSignal.db-journal

          • Path /data/data/com.contextlogic.wish.hack/databases/OneSignal.db-journal
          • Size 512B
          • SHA256 565e373678c21f34ccad615083c22730f379d64f25520af9550509c0b214e7bf
          • MD5 SHA1 SHA512

          OneSignal.db-wal

          • Path /data/data/com.contextlogic.wish.hack/databases/OneSignal.db-wal
          • Size 44KB
          • SHA256 b7cc0ee24aa38827a352e2b2cffb9968e943c844a3ede5df1f578e9e66d0da42
          • MD5 SHA1 SHA512 SSDEEP

          Mint-lastsavedfile

          • Path /data/data/com.contextlogic.wish.hack/files/Mint-lastsavedfile
          • Size 34B
          • SHA256 d8d89aa97b0c8d4b716eaea6715ba4f1c226bcd6b20c059a08220a5fb2ed8917
          • MD5 SHA1 SHA512

          MintSavedData-1-1710266125417.json

          • Path /data/data/com.contextlogic.wish.hack/files/MintSavedData-1-1710266125417.json
          • Size 3KB
          • SHA256 34595d03e1b80210f1c945d2d7489d5b16f303011d9ecec7dcfcb090b567507c
          • MD5 SHA1 SHA512

          crashCounter

          • Path /data/data/com.contextlogic.wish.hack/files/crashCounter
          • Size 2B
          • SHA256 4355a46b19d348dc2f57c046f8ef63d4538ebb936000f3c9ee954a27460dd865
          • MD5 SHA1 SHA512

          lastCrashID

          • Path /data/data/com.contextlogic.wish.hack/files/lastCrashID
          • Size 33B
          • SHA256 95285d7c90069c19a86882857774f7d3e9082ccdac7dc4ed9225d5496a459d73
          • MD5 SHA1 SHA512

          androidx.work.workdb

          • Path /data/data/com.contextlogic.wish.hack/no_backup/androidx.work.workdb
          • Size 4KB
          • SHA256 e27df07c3e3a64846100c74043256a38e61325c91b28443cbe1dc834a28d4b83
          • MD5 SHA1 SHA512

          androidx.work.workdb-journal

          • Path /data/data/com.contextlogic.wish.hack/no_backup/androidx.work.workdb-journal
          • Size 56KB
          • SHA256 b53566ac57aba87de1ccf52ced42df7dfa2d6d68fd48a00c72edcfacc6cdc5f6
          • MD5 SHA1 SHA512 SSDEEP

          androidx.work.workdb-wal

          • Path /data/data/com.contextlogic.wish.hack/no_backup/androidx.work.workdb-wal
          • Size 28KB
          • SHA256 b4e031ecb9477f0800e3e2fb493136c39d4385c6f91c474d551b31c21c0baa52
          • MD5 SHA1 SHA512 SSDEEP

          androidx.work.workdb-wal

          • Path /data/data/com.contextlogic.wish.hack/no_backup/androidx.work.workdb-wal
          • Size 108KB
          • SHA256 2cdacb45742d0581e02bb3c33886954550ea3b999f49f1edc8ff5046fcc4672c
          • MD5 SHA1 SHA512 SSDEEP

          androidx.work.workdb-wal

          • Path /data/data/com.contextlogic.wish.hack/no_backup/androidx.work.workdb-wal
          • Size 116KB
          • SHA256 941e3dbbad8a119a81126643024aca18783122602a052b6396774d9eab6e97fa
          • MD5 SHA1 SHA512 SSDEEP

          androidx.work.workdb-wal

          • Path /data/data/com.contextlogic.wish.hack/no_backup/androidx.work.workdb-wal
          • Size 188KB
          • SHA256 40254c3eaff6927a6ce70910da27919f2edc8be6c9ac1bd7f9df09128422bcdd
          • MD5 SHA1 SHA512 SSDEEP

          db_metrica_com.contextlogic.wish.hack-journal

          • Path /data/data/com.contextlogic.wish.hack/no_backup/db_metrica_com.contextlogic.wish.hack-journal
          • Size 108KB
          • SHA256 eb4c8e689f74e0bf9239fddfcb6f4e4ccce41ba1703d5a8ec5c88522b06ab3d1
          • MD5 SHA1 SHA512 SSDEEP

          db_metrica_com.contextlogic.wish.hack-shm

          • Path /data/data/com.contextlogic.wish.hack/no_backup/db_metrica_com.contextlogic.wish.hack-shm
          • Size 28KB
          • SHA256 d92b1b04554f78e4038b1b2c2f47c889c8a2272df08a1b02a5484ea93b9807b1
          • MD5 SHA1 SHA512 SSDEEP

          db_metrica_com.contextlogic.wish.hack-wal

          • Path /data/data/com.contextlogic.wish.hack/no_backup/db_metrica_com.contextlogic.wish.hack-wal
          • Size 16KB
          • SHA256 8f8666174b85e578ac5097a6302d2aeaa5ff33770ed6e884ab1ca15f04c0f6f7
          • MD5 SHA1 SHA512 SSDEEP

          db_metrica_com.contextlogic.wish.hack_20799a27-fa80-4b36-b2db-0f8141f24180

          • Path /data/data/com.contextlogic.wish.hack/no_backup/db_metrica_com.contextlogic.wish.hack_20799a27-fa80-4b36-b2db-0f8141f24180
          • Size 668B
          • SHA256 240fa99680ac4b9817c5f202715816597f83726e28cd90f6c45a868769a6fd62
          • MD5 SHA1 SHA512

          metrica_client_data.db

          • Path /data/data/com.contextlogic.wish.hack/no_backup/metrica_client_data.db
          • Size 20KB
          • SHA256 8fcb25b11f4c5a59afb448ccc116ea3268d84d1a862d7ff13832b08877c28891
          • MD5 SHA1 SHA512 SSDEEP

          metrica_client_data.db

          • Path /data/data/com.contextlogic.wish.hack/no_backup/metrica_client_data.db
          • Size 20KB
          • SHA256 001ea8b38280af72e70a8168524cfb2b07a711040948397d36fcace03b593716
          • MD5 SHA1 SHA512 SSDEEP

          metrica_client_data.db

          • Path /data/data/com.contextlogic.wish.hack/no_backup/metrica_client_data.db
          • Size 20KB
          • SHA256 c3d456e05f429ee6eab221de0a9150036484b4294ed4784b4ce144382ee95e5e
          • MD5 SHA1 SHA512 SSDEEP

          metrica_client_data.db

          • Path /data/data/com.contextlogic.wish.hack/no_backup/metrica_client_data.db
          • Size 20KB
          • SHA256 65978cddc1520a1a27d60321cc4552647f59ef665f539022ed8b5270197e5e9a
          • MD5 SHA1 SHA512 SSDEEP

          metrica_client_data.db

          • Path /data/data/com.contextlogic.wish.hack/no_backup/metrica_client_data.db
          • Size 20KB
          • SHA256 62eafa0fe191047857cbfdbd6909930487f2216d260b4be27fd52e3cff6086d3
          • MD5 SHA1 SHA512 SSDEEP

          metrica_client_data.db-journal

          • Path /data/data/com.contextlogic.wish.hack/no_backup/metrica_client_data.db-journal
          • Size 512B
          • SHA256 e61f156111b967f19a4a4d3903fd3924a48c8538f2d26809cbddddeec2045337
          • MD5 SHA1 SHA512

          metrica_client_data.db-shm

          • Path /data/data/com.contextlogic.wish.hack/no_backup/metrica_client_data.db-shm
          • Size 32KB
          • SHA256 4233968decef72b0d334880910afbaa3f33ec380688ff77a7052b4fc5924395f
          • MD5 SHA1 SHA512 SSDEEP

          metrica_client_data.db-shm

          • Path /data/data/com.contextlogic.wish.hack/no_backup/metrica_client_data.db-shm
          • Size 28KB
          • SHA256 18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7
          • MD5 SHA1 SHA512 SSDEEP

          metrica_client_data.db-wal

          • Path /data/data/com.contextlogic.wish.hack/no_backup/metrica_client_data.db-wal
          • Size 8KB
          • SHA256 12b6ba368e727b79920f1139853f8e8ec64c9761538370dad68cd0149dbd9052
          • MD5 SHA1 SHA512 SSDEEP

          metrica_client_data.db-wal

          • Path /data/data/com.contextlogic.wish.hack/no_backup/metrica_client_data.db-wal
          • Size 8KB
          • SHA256 574f13595886643ceada90db3f6f7932e96438cc38869c8380e7257bb17ad943
          • MD5 SHA1 SHA512 SSDEEP

          metrica_client_data.db-wal

          • Path /data/data/com.contextlogic.wish.hack/no_backup/metrica_client_data.db-wal
          • Size 32KB
          • SHA256 1a0e32e08b1114e9c19451ae37d457879a5a01aa0b86b73fcd58255590973083
          • MD5 SHA1 SHA512 SSDEEP

          metrica_client_data.db-wal

          • Path /data/data/com.contextlogic.wish.hack/no_backup/metrica_client_data.db-wal
          • Size 8KB
          • SHA256 ce3ecd063b17bffedb353e6af2e9f3a90db959749e3e8911360a359cf5a61227
          • MD5 SHA1 SHA512 SSDEEP

          metrica_client_data.db-wal

          • Path /data/data/com.contextlogic.wish.hack/no_backup/metrica_client_data.db-wal
          • Size 8KB
          • SHA256 b462bee5bf6899295718918620d9e9f594686c1ff46eab0a66434fe46421a983
          • MD5 SHA1 SHA512 SSDEEP

          metrica_data.db

          • Path /data/data/com.contextlogic.wish.hack/no_backup/metrica_data.db
          • Size 20KB
          • SHA256 62137d440010fde40907dba3bd095a5ae4a731369963e4acb5891ad826da3ee8
          • MD5 SHA1 SHA512 SSDEEP