Analysis

  • max time kernel
    3s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240221-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
  • submitted
    26-03-2024 01:15

General

  • Target

    Application.apk

  • Size

    2.8MB

  • MD5

    d8e3b261db327682c9c0eb38d9fb7ab2

  • SHA1

    a0885a77dc4cd30d40fc76889353bdbccfa095d5

  • SHA256

    032f79ec96c2f6dc76216ef42e50fc0470298e4a3bc73c84de4e73f866cfae65

  • SHA512

    a373e66906b3ab26a0cdf297b2a5d2885498c4534a68783b46e51f2e5ba519b61d1fa475e0c8ea212e688ea5e65c5773443e9a41c78f4a21b0be4eeced3c1436

  • SSDEEP

    49152:pQkkpeXGvHxR8X9CPnjEOQRWX4QT9v9PTiN3lTjPqW290wNnEO+hGK8Pjt9nw9E7:6kkcX638injeRWIQB9PuT/k0YRWt8Bh7

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs

Processes

  • edward.org
    1⤵
    • Acquires the wake lock
    PID:4446

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/edward.org/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    73dde037d43818d6392e51665bee0446

    SHA1

    79d2b7aaad055aaa21aa371d61b05684c2164073

    SHA256

    d8aa44c8b932aa136e23d352f22689c2173c343125e0e7588bb111fb635b30be

    SHA512

    95c88a7ca75a3f60fc3715bcac6a0a0f67bcf8a3a9fde5482f15e8da321521faf184548fc7a31df3f6019c48214b97a683b9fd7d0d2b1bd5595e50fb5d80f4fe

  • /data/data/edward.org/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    1f722a29e0a553b7becdcde0ec62fa2b

    SHA1

    b5b16fa53e3a9d0bdced71604cf63eb85cddb77b

    SHA256

    a3432d1ba9ac802fee01e114fb6cf88c33086722c3f3483a359cd1f571283cb5

    SHA512

    a0c8ca7e28040744a777b3b487abf52814d6dfa16ab5b0bcd478e9bec5602719e6d12a870e89f4eeda1c5f8543e108e9f5a63c4c52f5f12b5551c0dd83f3537d

  • /data/data/edward.org/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    c859edd5fc27244ef9ec8cee0b92ed07

    SHA1

    f58c9bca2437e0e08a792014463f1314b9607ae7

    SHA256

    81b10345c5d0f7c2674ba58aa3c125aabc2b0d2652d0cd4cade60b7ad0ecc182

    SHA512

    46dbf95c1be7c76bb6bd0addce424152e22cf7dc7db58f6492460d602a0be32b710bce975aec8c6f73621bfc01f342286a100a3362a277bc15c1333ec6fb975b

  • /data/data/edward.org/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    0562830cccc26b683e7e3b5ba5cee53d

    SHA1

    f202c23f00b836699886893e7d578a733cc5cd7b

    SHA256

    4fc9332317cd773383d8d1a9486b9bfdc0e669f7b11375bd5c9e192549ea2bb7

    SHA512

    7877f0b863a16533a67672139535dc10e568846a2542e33f766f8d2592529152d67b0b00bfededb670464e8e436956ae685ff20ca8b09710651740e1c8605afc

  • /data/data/edward.org/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    92579ed8254a29262581e09f2f8c68cc

    SHA1

    f8e1a02a739bd5c6755944aa01dd7bd8d2ed342b

    SHA256

    e8d5d6c587d3a6b0f858ffed3306d97b6ad83e3b2899a009ff5eae0b2cee7bba

    SHA512

    38b69d1c9e6e83013ba7c6ff2c52d93314511a9d56b8f5e4c37beefb2d3b0a05f351295844ba05101166ad133831501e5bcff596c7546ebf1a68647cf5c29413

  • /data/data/edward.org/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    ce2a523b195fc8b54270d1be4f7a1a30

    SHA1

    19c30069777485b340c928329dac300495939f09

    SHA256

    65ea876592dfadf84bd16d0bba7d99b1026ccca17c7d353a12d01c22b25b3555

    SHA512

    ef80ffc6ddf8d630e804b406bf2e05aa4bbc7367f5728dbdda14d6d39b17be1ffd76ed2404bfe675fd882250ae1b3187007e193abc155b4dab0de1fb80f74d6c

  • /data/data/edward.org/files/PersistedInstallation7476016028555237929tmp

    Filesize

    90B

    MD5

    ad3190759e15676872da2f54b47037e6

    SHA1

    f179e8a47719cfb2248b82fb0b8088c3376913a2

    SHA256

    a4058eb06ca0d6fe3393c966f761d499d6ef114c0ce653acbe666991eef71a4c

    SHA512

    ac744a927016ea517ccffbd727dcb81a88c19d7c1666418b069172bc792a98a1d874030df248012774103ce3a7dcdc84c7947d1dedf3fcc68ad7d2c92c40a4a3

  • /data/data/edward.org/files/PersistedInstallation8422251142902610360tmp

    Filesize

    567B

    MD5

    0e550291476dd103879baf66e269a86f

    SHA1

    196d8c58f82ef1dd8c12138e0af86421e5820bb4

    SHA256

    0cad0d3cbd5e4bf91957103309e4f7412486d2ddf7ff505be9119ba90e989ae1

    SHA512

    d065d60a5f04e30f329bc5ad8949c9334155f2dae811b551e900027e396b30e5cc19f6175e2f8ea1888e70495f0cc33ee7dad30a25ce6eee4c0a7bb52808acbd