Analysis
-
max time kernel
160s -
max time network
172s -
platform
android_x64 -
resource
android-x64-arm64-20240221-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system -
submitted
12/03/2024, 17:55
Behavioral task
behavioral1
Sample
c3fd36103f617324d4d2fa833989096c.apk
Resource
android-x86-arm-20240221-en
Behavioral task
behavioral2
Sample
c3fd36103f617324d4d2fa833989096c.apk
Resource
android-x64-20240221-en
Behavioral task
behavioral3
Sample
c3fd36103f617324d4d2fa833989096c.apk
Resource
android-x64-arm64-20240221-en
General
-
Target
c3fd36103f617324d4d2fa833989096c.apk
-
Size
4.9MB
-
MD5
c3fd36103f617324d4d2fa833989096c
-
SHA1
f12b9d0c224e0130e33af012b883c6405bb32503
-
SHA256
0cc18aa0a58ac84d39ea0d681caa378f0c85e39fff230b85239fec5960068870
-
SHA512
8d4b97982f18c67d90f074c518ea496ce2ba3add85529903108acfe266de02c9aa4c93b93e1fbba99a08658a78fb788450760a2d9c7983e65ed9a9eb195ea00e
-
SSDEEP
98304:U7pojb8O89LBkmUVyt1CXzTAy6ndf8GDLPGNw9PSqflLO0iX:U7pTO89K/VOCXfm98GPuq5PS0iX
Malware Config
Signatures
-
SMSFactory
SMSFactory is an Android SMS trojan malware first seen in Jun 2022.
-
Acquires the wake lock 2 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.contextlogic.wish.hack:Metrica Framework service call android.os.IPowerManager.acquireWakeLock com.contextlogic.wish.hack -
Reads information about phone network operator. 1 TTPs
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.contextlogic.wish.hack:Metrica
Processes
Network
MITRE ATT&CK Mobile v15
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
52KB
MD5212a337771ab5b18e82e4d1b7acdea35
SHA1092a996b96b0dc7006669f4a3dadc94357b25013
SHA256802cb04095337d676e9516d13b9653adf3764637006c37162ac8df6f06f22417
SHA512988f85500157d0359ae7f442dd42eaf0c7e991069cdc20f4783a0b208938f84e1c8b5cb8680df3dca525661b518bcde4626239a3a2bb8e41ec72ebc62ae88915
-
Filesize
8KB
MD54d0e3c865a2acd63035be72dca336a0d
SHA144a623e30ddc83d41b8cdbabe74731544af2b565
SHA256e39296ff44a1144d224993f6240f6c4c5fc751a251290938170ad34066858592
SHA51211344dbe215560f58fce56d65e85d8f3a635bbf93cf151575b8e5dd97c6cd46b39fac43b4159a4db444812ad457c705c4b479a77503552ee5db23b884446dc8b
-
Filesize
512B
MD56bb2b12472409ff957aaeb09ca969304
SHA12c552c411c2ee462ccfb7987e58643de99450f6e
SHA256ea044a97e3b00692028460efdbd0c7680c8665f348771b51e4ed18f0b593140f
SHA512c90dcaeb1b25562225e74afa20d79f0f8ed0bd299212a96e7346f510391551d2d667a20b2555a606935288bb56489d167e85e0f00bd62029d3609cfbaafd6c99
-
Filesize
8KB
MD50aa3b612cdd359e30a9fddf2f96973da
SHA17da3c5966a97f6aea09520a1e2fcd332af520416
SHA256f87411753f8c8bc0b08e3f1b59ae57b7265d8fdf6d136cd30c718d55581dd3d7
SHA5123ad0bf4ba6b0a93d5b0a4666932cd6dac56d3259d121dfece9fbb051fb1ba0b145b7a34795724f10d214bae07493be4d13db4bfa2a37f134c633c0f1bbf13788
-
Filesize
34B
MD514c7fd768dcba0d01fe04e82faa80732
SHA1303161bb39b4549e98a4682f50b4135885007be6
SHA256d99808b3340e610684c65a4413fba59af8b31d94027b1027b8ece5f3db4d9d8d
SHA5129b3056c1ccc9cd31fb5aadfe7ef02981f2275456bf84442f0cbdc76e42d80983c75d84f159324da1940537a35b254267668361a79de327271e132bd8a3fcdeed
-
Filesize
668B
MD5a2969bc205bf1cb5b19f9338e5b9e994
SHA1aa96c8b7c41d24787719937a99cbfcff4c6dd805
SHA256fa822a8b47176e7ba14882d18b08ec623e1aa8ba5901adc375afd0b89d695c16
SHA5126b376f1f29742376f1cf321866c368274e10d2a8c805f12c5a5ac881b9ee76a9c4a7cd094e9a6b1c3663555ef200e7cc9867e813aff193a4a9601ca9da95f89a
-
Filesize
4KB
MD57e858c4054eb00fcddc653a04e5cd1c6
SHA12e056bf31a8d78df136f02a62afeeca77f4faccf
SHA2569010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad
SHA512d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb
-
Filesize
512B
MD5b4e8ce9c6fa99c7773bd81ba4e8870f2
SHA1cacfa36fa89c2e1383c666812d6ae53e95e1ab7a
SHA256e4a0aeb3ec51d7978a1277dd8ae327d27ff290786cf5770cb1c237b965e4b5c8
SHA51258c6aee2d97267b1627a6c9e0b0082dd3b47b6a2d1ac0174684c14347accd8f678b4b62652b581e96c01a398c9cf2431f7de68f46bf4f686b1d39b5e3a46e034
-
Filesize
12KB
MD51cae7134408940a69c18ff1b78a0225a
SHA1428b39bee49fe13470ca998c7895ad0d6e45c99a
SHA25697aa1be45868de01ac76fd4e62830deaf5f58902a58060d0ac226f83c5c5f17e
SHA51212c154f1de1cdb2bf100393c0a72d344e09199ad5ec778c2bddf50dbf63e74096de4c95751a680dd85cfa7c689c30ba93b655f596e2f27c05728d69ce2c6ecbe
-
Filesize
116KB
MD533cbac3c96444f280240f9b902fc57bc
SHA1fbc6450232f395a0941eb349e475bc4a919fbc76
SHA25644f31f600b00b02d1090a76082bfede20d56253997fe8ce135e0142d428a561c
SHA512d22c42ce15cb8d24a030fe13a5cb24e0893171a22bbb603da2e5a8ec5f55d5f28359c2f813d93d72dfe2458299ca1be94a09617f0bb9f840bbfd375addbe69f2
-
Filesize
108KB
MD549707d0ee54f35800a11daa2d7e890a6
SHA1e757b39ab3cc5f113ba1321b8af5ba21c277d7b2
SHA256aae8d957fc1485203963965672bbc068ea8bc0970b7a40b5941fb210d5bee26c
SHA5121b65a9a1d0cd9fbada6923fd835836adfdc4af8ea0b579afe0e5198a4e710242003039a69f35197e4a53b5d3079c46c1dbc7c142427dcb6b99a0b67681a93302
-
Filesize
156KB
MD5bea468a9b0ada9371bc4be5a4c3e5a33
SHA19d81b2589fd7ffc426e6e1df4e77d870c6057c3a
SHA2566468b61a518740e878760d9d3706a73c9c679008972fe727ead88dd3b0b7f826
SHA51216f64364c698e33055fb7972e94972ebce4af9269912697ac22ce4fe3f2f7d28a15313d1d841996e44d5e3f536d671614d2d764d5dc5b66315ff5cf45d6c651d
-
Filesize
2KB
MD5f16a7c1ab81a1002cacde1afc6e8b008
SHA1804c89ec36f8269b1192c53e14d90afac72c8a53
SHA256ee0359a1213ee1a803e1b57c4a26c3b4ea3b12a42f511e720200e776461c4d79
SHA512adbb4ff463dd8129c56a70db51e939f8bce49d51a6b389cb454c070ac38d549f0384af0fe4cfc5a6e11d93bb1fea12152d26e389cf8ca6433422b7c96664ae0f
-
Filesize
20KB
MD5fee7442e526aa824aea67ff9cd69b389
SHA1e42582ec16efe41602f4228025e5c0b2d5bed716
SHA2562a859fe09536f260093b52e2314d6344c12d95727d6ea8480b12b2e099a8183c
SHA51292f1ccc0dd05125df92f2c7fad1cef96134193a66e369fdffc54ac9b67276e69c1d1595e5bb05c4cb7805133b2669701c6aba6686335ea577679a86d91a4b65f
-
Filesize
512B
MD540d68f239ce9a711a2d34dea2bf42777
SHA1dfda6baf190eb5a455929c95af7c6a5862c1471a
SHA256a42cd6877e5b69c0a9935b6e25a608d371055dec17c4dd30ae8bc640aec60c3c
SHA512eddda5872c7bd6bb89e9768be78eb27490cebf4bfe4eb1d4cf955316f053983323a2704f521381e19f04b910994615b303b93c35194c983da0a5a5906b3b568a
-
Filesize
108KB
MD565a162a2e104053fa8876751d5d16721
SHA1bb4386f7ca39c4fd21ef68bf6e184375e8964686
SHA2564c179d76098820a28f6be0fd198dcf1ced9485508904dd1c0aa2bf39bcd96b34
SHA512f29a22a492ef92bec7b5018347d3c5ffc3953b470a0a865879953f5bf88984fe29034987f2e750c4c70c6ede92f72638cd87be92778717650806cd6c24e032d8
-
Filesize
8KB
MD5a84e722526851e777d0f5573e91e7b38
SHA1c4fef2692c4b933395ffdb0c6428c0ed12d9cb70
SHA25642edf934bc7281f66d33bb119b82a65ffdb3a66ecc7b8c1274119c0213be2a46
SHA512b1e9ffae8b072582d0e6f5fd3146188785b5216cce427b83c425fe5a2cbf2709a9926fc2b88640af577ea7272fc9d4002c89acab0f0cc73f66734b96789c5a5d
-
Filesize
12KB
MD571956bd7ae040996bbfa4591ea3fadb2
SHA10fa4bcb22c55bc0e35626782d94f35ad58f8b545
SHA2565f9928a6b7bd519a183890e0059a1610150b6df2971bbc3db8d59d12cfe15c75
SHA51275a1536b6047602acc426f8098879947120ff545e813656827bd130e68f05a50a5cf471d4e4a09c6ae089b85a187fddcf6b86395bac5b78a25ba953a23452f75
-
Filesize
12KB
MD5ccf5ee702fa84df59461625cbdcc20b8
SHA1b613335e7377efb36be915e0ecdf97224a14b148
SHA256f430082ad81efdf462827728a5328505ce693da7721b01a9c6907b4e8b7ab569
SHA5127576e4b8d0a12341c8cba20f3f647c5cd9c0ea7588b9821d87d2c2e20fed73a5157114577e99f8a56f2bda6015562c4418901e5d936e989056fd26f8ed50c187
-
Filesize
12KB
MD52189b9a1068003b0b7806a479337a51d
SHA15391b7457245dc3953fb6d79c6984202802ca92a
SHA256303f5ea95140943b9178f88b352cb4e930148b4be7af184ec75bab489c216471
SHA5123e0746b70d5e64a943f35935fea51ce8a04cd5b40250cca38f92fa662447d6ea2323120a3c8db05ab6fcb9eae824d119052cca26766cc8f40f36439870bd789a
-
/data/user/0/com.contextlogic.wish.hack/no_backup/db_metrica_com.contextlogic.wish.hack_20799a27-fa80-4b36-b2db-0f8141f24180
Filesize12KB
MD5171aedf968e17a2744d2585715606cb9
SHA1bbeddeb3b89fcf809619c35b4a318a80e7d5b029
SHA256d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e
SHA51278a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b
-
/data/user/0/com.contextlogic.wish.hack/no_backup/db_metrica_com.contextlogic.wish.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize512B
MD573cb19b4e9b2f099612e9a8350558838
SHA1c7de11b6d8963bf4b8aaacd127a2209367bd5105
SHA2560a92a0903a55faef1a95f0224bc47e48c9bdc746f2e07811be2dd4a6d566e2da
SHA512e05fd9636698a7968f784ff375e6792ffabfbc271da043be3d28f69275b422f2de3875e7a177b9376740b88cb3960cf6828a960a2b6437c5e9b6ea9f9ffb94a9
-
/data/user/0/com.contextlogic.wish.hack/no_backup/db_metrica_com.contextlogic.wish.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize8KB
MD53c8df80ee40834ccaafb2ce7342b0eb4
SHA1710c6fb5819183b41caf8f937fb4632af5332b54
SHA256c960c9cf2370feb588be2a6aa6cb1089e6fe8705d46bbc27e340636c091f5fcc
SHA512f8a6049c2ddab40dec9a0f78793cc4b0ad3048015d96f2bf23e55f44872179740b2221a07ce3a79d0ca2fb49324090dc3171716311aa30b1860424c6932e4cfd
-
/data/user/0/com.contextlogic.wish.hack/no_backup/db_metrica_com.contextlogic.wish.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD5b9b012b9f69d9f94ccd64bdd7ee5ff20
SHA1f036a0862c51994f28da8af5a643d740e8c5cf40
SHA25625d473a0fe59e98370b1bc9cf2a8f321b3c23d77f87bc38808ef8c87bcadba07
SHA512a977593247241b2f213529aa7edb6b9038bf71b8be9190dcdd4da4ff2b187e7e19291f2b30df32668433be6f70535c33ae39065318e8d3a50459b9aa2af4732b
-
/data/user/0/com.contextlogic.wish.hack/no_backup/db_metrica_com.contextlogic.wish.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize8KB
MD5da92c76fc504d84a054d445a0d0792bb
SHA1c4f5d381d53be1cf9788f302a7d55f1fe87171bf
SHA2564f667434c93229945540a6ebf85a7b1dad413130715dd6b2776484df3c2225e8
SHA512504e853f77cd0645b4ee659cc138a5f73526795b3e8546311a57a20f154b19148e1af39f8ad9d378b73c198b2bed18d2dcf7cfeb3aa561911454d6afbec7c86b
-
/data/user/0/com.contextlogic.wish.hack/no_backup/db_metrica_com.contextlogic.wish.hack_20799a27-fa80-4b36-b2db-0f8141f24180-journal
Filesize12KB
MD53cf304554a26d145f11671437a7bd4a1
SHA11fe9618cc1b8a4c0b1344dc20fbcc44e7952123f
SHA256f53f1f8ed3f7198e96d94de79fb7e0de94a9eb4d33f1f9904d44398e5dd3cf6e
SHA512b83f35a1e5f8e7a09c19db17259069f1efc99bc6b1cd04a1e14661a52feb895ec8935c74042e67c0da524d5249e4cc6432bfb89650baefa0d39eb73ee4151104
-
Filesize
20KB
MD5a078edaa5f09e0a53efb8969cf02d600
SHA12f3babdba06d801da0864d192712e2f17f53f3fb
SHA2564d515271e2abf55c2cd2030417d15487a33f50da949989820a5c90c3c1e0e84a
SHA51238e41e897e5928e25e69e9d909b0a0e7770279b418b4451067ebcd1a0ffd9fc72d5884a03d623533ec13582aeb84f7cc954a231c11f0483360b3cfe5f875df5a
-
Filesize
20KB
MD50e14fd9d72fd0046d99dcde79cdf95c7
SHA1077e1fb6695233ede6a679712cc8d669d9582620
SHA256cf5dffb0782fd34f19936ecdfb8f7fc6cce350048b617627e09302790da759f0
SHA51287b8f8e5350b707ec5d28c080a3860e49029f104dec9419781ca74819464c2eab115df470d68af59f1b2eb9a1db99503de13e2f2e3e021c1b977be4adc14a92f
-
Filesize
20KB
MD5fc318483a677c71a725dbbe6e9516df9
SHA18ac3af9cbfb464e53b709028d1f64a4d019bb2f4
SHA256d6d65421dac425ed42a96af8b94a1d708f6e23b556f0bc80011eb4970304b7f9
SHA5120e3a0d7629cbfdcaa59e415c4ba982355f249b9595d234c0de6fda993c65c121435c442945766017cd78533fbd059d7edfe2eda0185ec6e4d076499536a63140
-
Filesize
20KB
MD5959e343788cecb21545511659f598932
SHA12068132fd25c455171863867d07c8c1ad9824d68
SHA2561e9edaca78a1696fa0495f32f97bf221ccb18a73351bb15292e6e2fb0f53110f
SHA512bd4bc85a2fa3dc78de9098d18d1d6ed6e7a8c26ae47d6c02baf973bfe959ed9f85cf9ba1cad5693b14ab2713586b6bb5b6603ec7af622e9647bf8c41bff56a92
-
Filesize
12KB
MD5eae8afd44fc51ac44f26d89723a72532
SHA157eeb6dab9ce33b284a8d1ef1ac31cf573f2a35b
SHA256a4522abbaf78193ba01d62b0c9df1e9b52712d4a039d7ecfa756200d63bf24d2
SHA5129c1cc8dbef325a187c906dcf8d6dad5d585b9b76affb029724e7c4e9b8e7c5399e85b8752e24c5dcf17d4af2df7f14fb1278da3938ba731c01cf2e85a2ab7e91
-
Filesize
512B
MD56d30d2ecb68668842e1e506911d79b65
SHA1b58db22318058d35da140d32d4ac64fd184645ea
SHA25632569f1edaa572a57129c6ec2c481c0e5bfb4c9afa55183159dfc99e32cbaf76
SHA512309df354c64d48e36c315a372f7d7c7eb836696b3414dbbf5a700f4d1eb357e8fa37c8f50f097cf411f8ba540b45cc2762993630d884e8eb8ca428ea6c9f8e9b
-
Filesize
12KB
MD5db384b17e81a4162acfb9ff4d9480b27
SHA10a7536920988b429d4b0886ac23807dcba4c5ab5
SHA25655252d9b1023191f17faca9c299fbfd1d9df52f5d840c2b52b750a51a9e30c73
SHA512e086eb1fe94d695ed9a3894ed07ae6a4d03a261c2636a80e2ae825726002bdee28e30c1cebe7363ed59a1c182ff9aae9581f376579109ba058b86b5de56cefa3
-
Filesize
8KB
MD58956652cbbac8f54b9976cf6033fb3cc
SHA1a3b7944dffb6b4aa402545ce6202646354eeac58
SHA2566904a595ba211b1f1a45dee35a6e0309bd46a5260bdd6945eb0d563f7847f709
SHA512c04e885ce46ec02db858ba9e1f1c63ad67b5d38bf885b6c59caf9b3ea830d570b705f3b9109d69231d7097bb6b1cd57ddcf04a9e6e194a094aaa510a6d53fda0
-
Filesize
8KB
MD527e1809fb6aed1c16860413846e81ce2
SHA135836863b50be8e3c5f233065bc3409f83ef5198
SHA256e9821322605880148cc3ce4866b3f5374faea21f05968e307388482d747513fe
SHA512c4b353c7080e809bd31a9f3214b3f4ca51f00b66093fcfa7735829c4855a1460a785c01fd31db9435d9d4409867974b77ba7db9922a9d44678e4c0cf29a924a7
-
Filesize
12KB
MD5141a20662aa21f62190749331379347b
SHA14481a4be394c8c267d7860fa17a58650418f2fe5
SHA256809318890268050ae8a2769a7d1040353286e63b7223bd5b55b3d5969143bdfa
SHA512b480d69ade8f157b0b841cec73a2f4893f1662a9ab6da639340c64f8702976f4d8b8dcbe2068bb99ac53eea777e7cc58ea4b271c94e0378acba1e116fb441051
-
Filesize
44KB
MD534122fb7d521754ee069a8c18a41ac32
SHA1ec910db45466d77c943b03fc8ddb5573d3a8803e
SHA2568e8334516259d776204d7a72709a8f1e894d0782fe209d351dffcd6140ce769e
SHA512dcdd03814f67e21788ae01ddd6b04d658fff3f76ecd4aa7f0fa25c486cae80c5f1dcb391cd3b1e311bd3466fbc20cc717446fbde00467fd8177a182b4ec5379f
-
Filesize
8KB
MD540ec1db69163a4cea3e20d6bef34ddea
SHA14f64121c101147b2dcd7346dceeab104a61cbd82
SHA256a2a26d2ab4dc3dd69ace0ff8e64f1b21090b899db1b0cb24ca34ee2d5bc71fff
SHA512a11d21571f39306f9bcb6c44817d5acf4d89d729f402ea8cca307c848f59717dd24538cc22dc959cee9616d80a13dcae14444285a6e6cae85e8d968575193128
-
Filesize
20KB
MD583b90bd57d5c34f9a9acedb4fff17d31
SHA17f7b56a1ea9ff4d9db4898ea869fbb51bfa2affc
SHA2563a82251054ab6c75cbe83c906f07b92eaa57e9a55296865699074cfd20bdacdb
SHA5122a2e04e7f104d7088fff0bafd94a7d9113aa5024f1f6a3e373be00b67dba008bf2ee4dba71cb6ff6ed5e2532e856b0867ab56468747bd814aa553fcf68bf6c93
-
Filesize
12KB
MD58508aa6440aaca18b0dfd211017fdb40
SHA16c88adec6a9c1317fa8aed8107fe865aa7ded545
SHA256ada2d35b462614e6fb71ebc64c4af970c80aba97c7510681aeed50868bf34ed2
SHA51202dec2a9138fe885540d0c3b007dc33b38f67f534171f169b68ac548718ee7013b4f82c4acc07eb5649fef10268552cc59613bcd3a914774917925c39a5475f0
-
Filesize
12KB
MD5eb87d64de88f979fac60006b13adf1c2
SHA175e0be17ef9c1259f21eaa847e18dc0cd582a6b7
SHA256cb7031afdb612a745c956cb128b820e1778ad4650d726497c6e3472699fe1e0b
SHA5120251c23846fd9f3eebf5a74316b6960ac059aa7567ce9cb7ad2185ed67d31647d8587f74df613f3a9f7803ad373e197a249a6352e7b9432c5021b20d015e60df
-
Filesize
12KB
MD54342d923506dba7ce71f30b8ebd90fff
SHA176d7c836d9290f900fb2bdaa64c3396d56a55895
SHA2567bf14ade3eee2e5c1bd1afaf13be1470134ba552fdd881319279a2885d89c319
SHA512a164fa4d13aa50c130aaf2a75f0589489044132d6aa1d08a316f07b3838e811b7d1acfd595ad8ca8fc81fda5c6872221bf04ec43229cbd0457ff144b3e4dcc3c
-
Filesize
32KB
MD5bb7df04e1b0a2570657527a7e108ae23
SHA15188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA256c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
SHA512768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012