Resubmissions

19/05/2026, 07:24

260519-h8cgasgy7z10

12/03/2024, 17:55

240312-whe2dsfc6w10

Analysis

  • max time kernel
    160s
  • max time network
    172s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240221-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
  • submitted
    12/03/2024, 17:55

General

  • Target
    c3fd36103f617324d4d2fa833989096c.apk
  • Size 4.9MB
  • Sample240312-whe2dsfc6w
  • SHA256 0cc18aa0a58ac84d39ea0d681caa378f0c85e39fff230b85239fec5960068870
  • MD5 SHA1 SHA512 SSDEEP

Malware Config

Signatures

  • SMSFactory

    SMSFactory is an Android SMS trojan malware first seen in Jun 2022.

  • Acquires the wake lock 2 IoCs
  • Reads information about phone network operator. 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.contextlogic.wish.hack
    1⤵
    • Acquires the wake lock
    PID:4434
  • com.contextlogic.wish.hack:Metrica
    1⤵
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4480

Network

        MITRE ATT&CK Mobile v15

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        OneSignal.db

        • Path /data/user/0/com.contextlogic.wish.hack/databases/OneSignal.db
        • Size 52KB
        • SHA256 802cb04095337d676e9516d13b9653adf3764637006c37162ac8df6f06f22417
        • MD5 SHA1 SHA512 SSDEEP

        OneSignal.db-journal

        • Path /data/user/0/com.contextlogic.wish.hack/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 e39296ff44a1144d224993f6240f6c4c5fc751a251290938170ad34066858592
        • MD5 SHA1 SHA512 SSDEEP

        OneSignal.db-journal

        • Path /data/user/0/com.contextlogic.wish.hack/databases/OneSignal.db-journal
        • Size 512B
        • SHA256 ea044a97e3b00692028460efdbd0c7680c8665f348771b51e4ed18f0b593140f
        • MD5 SHA1 SHA512

        OneSignal.db-journal

        • Path /data/user/0/com.contextlogic.wish.hack/databases/OneSignal.db-journal
        • Size 8KB
        • SHA256 f87411753f8c8bc0b08e3f1b59ae57b7265d8fdf6d136cd30c718d55581dd3d7
        • MD5 SHA1 SHA512 SSDEEP

        Mint-lastsavedfile

        • Path /data/user/0/com.contextlogic.wish.hack/files/Mint-lastsavedfile
        • Size 34B
        • SHA256 d99808b3340e610684c65a4413fba59af8b31d94027b1027b8ece5f3db4d9d8d
        • MD5 SHA1 SHA512

        MintSavedData-1-1710266124273.json

        • Path /data/user/0/com.contextlogic.wish.hack/files/MintSavedData-1-1710266124273.json
        • Size 668B
        • SHA256 fa822a8b47176e7ba14882d18b08ec623e1aa8ba5901adc375afd0b89d695c16
        • MD5 SHA1 SHA512

        androidx.work.workdb

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/androidx.work.workdb
        • Size 4KB
        • SHA256 9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
        • MD5 SHA1 SHA512

        androidx.work.workdb-journal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/androidx.work.workdb-journal
        • Size 512B
        • SHA256 e4a0aeb3ec51d7978a1277dd8ae327d27ff290786cf5770cb1c237b965e4b5c8
        • MD5 SHA1 SHA512

        androidx.work.workdb-wal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/androidx.work.workdb-wal
        • Size 12KB
        • SHA256 97aa1be45868de01ac76fd4e62830deaf5f58902a58060d0ac226f83c5c5f17e
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/androidx.work.workdb-wal
        • Size 116KB
        • SHA256 44f31f600b00b02d1090a76082bfede20d56253997fe8ce135e0142d428a561c
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/androidx.work.workdb-wal
        • Size 108KB
        • SHA256 aae8d957fc1485203963965672bbc068ea8bc0970b7a40b5941fb210d5bee26c
        • MD5 SHA1 SHA512 SSDEEP

        androidx.work.workdb-wal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/androidx.work.workdb-wal
        • Size 156KB
        • SHA256 6468b61a518740e878760d9d3706a73c9c679008972fe727ead88dd3b0b7f826
        • MD5 SHA1 SHA512 SSDEEP

        com.google.InstanceId.properties

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/com.google.InstanceId.properties
        • Size 2KB
        • SHA256 ee0359a1213ee1a803e1b57c4a26c3b4ea3b12a42f511e720200e776461c4d79
        • MD5 SHA1 SHA512

        db_metrica_com.contextlogic.wish.hack

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/db_metrica_com.contextlogic.wish.hack
        • Size 20KB
        • SHA256 2a859fe09536f260093b52e2314d6344c12d95727d6ea8480b12b2e099a8183c
        • MD5 SHA1 SHA512 SSDEEP

        db_metrica_com.contextlogic.wish.hack-journal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/db_metrica_com.contextlogic.wish.hack-journal
        • Size 512B
        • SHA256 a42cd6877e5b69c0a9935b6e25a608d371055dec17c4dd30ae8bc640aec60c3c
        • MD5 SHA1 SHA512

        db_metrica_com.contextlogic.wish.hack-journal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/db_metrica_com.contextlogic.wish.hack-journal
        • Size 108KB
        • SHA256 4c179d76098820a28f6be0fd198dcf1ced9485508904dd1c0aa2bf39bcd96b34
        • MD5 SHA1 SHA512 SSDEEP

        db_metrica_com.contextlogic.wish.hack-journal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/db_metrica_com.contextlogic.wish.hack-journal
        • Size 8KB
        • SHA256 42edf934bc7281f66d33bb119b82a65ffdb3a66ecc7b8c1274119c0213be2a46
        • MD5 SHA1 SHA512 SSDEEP

        db_metrica_com.contextlogic.wish.hack-journal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/db_metrica_com.contextlogic.wish.hack-journal
        • Size 12KB
        • SHA256 5f9928a6b7bd519a183890e0059a1610150b6df2971bbc3db8d59d12cfe15c75
        • MD5 SHA1 SHA512 SSDEEP

        db_metrica_com.contextlogic.wish.hack-journal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/db_metrica_com.contextlogic.wish.hack-journal
        • Size 12KB
        • SHA256 f430082ad81efdf462827728a5328505ce693da7721b01a9c6907b4e8b7ab569
        • MD5 SHA1 SHA512 SSDEEP

        db_metrica_com.contextlogic.wish.hack-journal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/db_metrica_com.contextlogic.wish.hack-journal
        • Size 12KB
        • SHA256 303f5ea95140943b9178f88b352cb4e930148b4be7af184ec75bab489c216471
        • MD5 SHA1 SHA512 SSDEEP

        db_metrica_com.contextlogic.wish.hack_20799a27-fa80-4b36-b2db-0f8141f24180

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/db_metrica_com.contextlogic.wish.hack_20799a27-fa80-4b36-b2db-0f8141f24180
        • Size 12KB
        • SHA256 d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e
        • MD5 SHA1 SHA512 SSDEEP

        db_metrica_com.contextlogic.wish.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/db_metrica_com.contextlogic.wish.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 512B
        • SHA256 0a92a0903a55faef1a95f0224bc47e48c9bdc746f2e07811be2dd4a6d566e2da
        • MD5 SHA1 SHA512

        db_metrica_com.contextlogic.wish.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/db_metrica_com.contextlogic.wish.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 8KB
        • SHA256 c960c9cf2370feb588be2a6aa6cb1089e6fe8705d46bbc27e340636c091f5fcc
        • MD5 SHA1 SHA512 SSDEEP

        db_metrica_com.contextlogic.wish.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/db_metrica_com.contextlogic.wish.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 25d473a0fe59e98370b1bc9cf2a8f321b3c23d77f87bc38808ef8c87bcadba07
        • MD5 SHA1 SHA512 SSDEEP

        db_metrica_com.contextlogic.wish.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/db_metrica_com.contextlogic.wish.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 8KB
        • SHA256 4f667434c93229945540a6ebf85a7b1dad413130715dd6b2776484df3c2225e8
        • MD5 SHA1 SHA512 SSDEEP

        db_metrica_com.contextlogic.wish.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/db_metrica_com.contextlogic.wish.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
        • Size 12KB
        • SHA256 f53f1f8ed3f7198e96d94de79fb7e0de94a9eb4d33f1f9904d44398e5dd3cf6e
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 4d515271e2abf55c2cd2030417d15487a33f50da949989820a5c90c3c1e0e84a
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 cf5dffb0782fd34f19936ecdfb8f7fc6cce350048b617627e09302790da759f0
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 d6d65421dac425ed42a96af8b94a1d708f6e23b556f0bc80011eb4970304b7f9
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/metrica_client_data.db
        • Size 20KB
        • SHA256 1e9edaca78a1696fa0495f32f97bf221ccb18a73351bb15292e6e2fb0f53110f
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db-journal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 a4522abbaf78193ba01d62b0c9df1e9b52712d4a039d7ecfa756200d63bf24d2
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db-journal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/metrica_client_data.db-journal
        • Size 512B
        • SHA256 32569f1edaa572a57129c6ec2c481c0e5bfb4c9afa55183159dfc99e32cbaf76
        • MD5 SHA1 SHA512

        metrica_client_data.db-journal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 55252d9b1023191f17faca9c299fbfd1d9df52f5d840c2b52b750a51a9e30c73
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db-journal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/metrica_client_data.db-journal
        • Size 8KB
        • SHA256 6904a595ba211b1f1a45dee35a6e0309bd46a5260bdd6945eb0d563f7847f709
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db-journal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/metrica_client_data.db-journal
        • Size 8KB
        • SHA256 e9821322605880148cc3ce4866b3f5374faea21f05968e307388482d747513fe
        • MD5 SHA1 SHA512 SSDEEP

        metrica_client_data.db-journal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/metrica_client_data.db-journal
        • Size 12KB
        • SHA256 809318890268050ae8a2769a7d1040353286e63b7223bd5b55b3d5969143bdfa
        • MD5 SHA1 SHA512 SSDEEP

        metrica_data.db

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/metrica_data.db
        • Size 44KB
        • SHA256 8e8334516259d776204d7a72709a8f1e894d0782fe209d351dffcd6140ce769e
        • MD5 SHA1 SHA512 SSDEEP

        metrica_data.db-journal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/metrica_data.db-journal
        • Size 8KB
        • SHA256 a2a26d2ab4dc3dd69ace0ff8e64f1b21090b899db1b0cb24ca34ee2d5bc71fff
        • MD5 SHA1 SHA512 SSDEEP

        metrica_data.db-journal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/metrica_data.db-journal
        • Size 20KB
        • SHA256 3a82251054ab6c75cbe83c906f07b92eaa57e9a55296865699074cfd20bdacdb
        • MD5 SHA1 SHA512 SSDEEP

        metrica_data.db-journal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/metrica_data.db-journal
        • Size 12KB
        • SHA256 ada2d35b462614e6fb71ebc64c4af970c80aba97c7510681aeed50868bf34ed2
        • MD5 SHA1 SHA512 SSDEEP

        metrica_data.db-journal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/metrica_data.db-journal
        • Size 12KB
        • SHA256 cb7031afdb612a745c956cb128b820e1778ad4650d726497c6e3472699fe1e0b
        • MD5 SHA1 SHA512 SSDEEP

        metrica_data.db-journal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/metrica_data.db-journal
        • Size 12KB
        • SHA256 7bf14ade3eee2e5c1bd1afaf13be1470134ba552fdd881319279a2885d89c319
        • MD5 SHA1 SHA512 SSDEEP

        metrica_data.db-journal

        • Path /data/user/0/com.contextlogic.wish.hack/no_backup/metrica_data.db-journal
        • Size 32KB
        • SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
        • MD5 SHA1 SHA512 SSDEEP