2c28b815e18eeaae191f871f57d2f04ce6bc9974553684341433baf430034433 | Triage™

Analysis

max time kernel
129s
max time network
139s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
02/04/2024, 10:18

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
77bd99fc14c25843d7ce183443119b5d7a1f524c00f5a9e2dcccc22f8dae6042.apk
Size 2.6MB
Sample240402-mcdfyaef6z
SHA256 77bd99fc14c25843d7ce183443119b5d7a1f524c00f5a9e2dcccc22f8dae6042
MD5 40981142bcde486676e5eea7bcdfadbb
SHA1 b61860a7ef0ec87174b92c59c6b68265a32619c4
SHA512 584e8dbd93b9d89c29d3b7180f524a1d3077cad2fc10542db15f8a604290f475ddd2ddcbabbf5a406f048d224bcadd00348abfcce39f9885a569ef6e2a9ec090
SSDEEP 49152:J/G52p3JiUhiZu/Rtzr52jvAOpPK4Nc5hFV3MM0b9kpYgs6V/Dce7q5px671:Rvp5piZmpCvBpPKr3r8MIWpYMV/6pS
MD5 SHA1 SHA512 SSDEEP

Score

6^/10

discovery

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	Madsal.com

Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Madsal.com
1⤵
- Acquires the wake lock
PID:4262

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Network Configuration Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Replay Monitor

Loading Replay Monitor...

Downloads

1

Path /data/data/Madsal.com/cache/1
Size 35B
SHA256 a87e11a79ce9d5f80492712865012c67337fb60da0f1b668af8fec59646523ab
MD5 356f657f4fb985b265cdd0bf49ff86c9
SHA1 18fc997765c9745a4cc1e8d74f3af44384a2d8ea
SHA512 4c748f56fb334e4f04a8c8d5b0117ad49df89e5e89c974d9adc77c22448ca19e4cee0af0644d03cfa3005bfbc2556888ededf467cd1b05a0519d3e1347663be1
MD5 SHA1 SHA512

Submit Download

~test.test

Path /data/data/Madsal.com/cache/~test.test
Size 4B
SHA256 9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08
MD5 098f6bcd4621d373cade4e832627b4f6
SHA1 a94a8fe5ccb19ba61c4c0873d391e987982fbbd3
SHA512 ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db

Path /data/data/Madsal.com/databases/google_app_measurement_local.db
Size 16KB
SHA256 608113f9e22781b8b6bf6c051ffbe8e8ab7025ce2905084fff8c3a9a2f60f54d
MD5 43afd3ff8248a00c4191f0ba94678c3a
SHA1 6349c6fc56b21745818f61f35ede4936427f6b71
SHA512 731acfd91c6e0308d22a54eb5f15935bad1024ee54b5f055a93992efa39f7491b2aa65991b9e9149ec535118b994135cd8994b4df803620c261e82b7b13161fb
SSDEEP 3:qqb/NjghzY+/lzyliMlTXm/n/7wR2RzMlklKllgIn:LCM+/lulvl6vER2RQlrf
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/Madsal.com/databases/google_app_measurement_local.db
Size 16KB
SHA256 0137d420abd9d2afdd127952c7da60ddfd2adf0766cb3788347bc2f6c38be6b1
MD5 4a48d98f5101800cecc2d5f802581d5d
SHA1 86361e79587d23d096d5dfe49684a47f6a3a00a4
SHA512 0d8380f2227d5d793a66ce1010481220952241202c828fcd1d05d9f0c56fee68866eced0f8f788fecd8ffc2944a79b135a5577fb72eecf0362d27b599499807d
SSDEEP 6:r657AivWLapAK/lmPtqlrYclklJKWlr/Qlr2u83jCM+/lulvl6vER2RQlrf:r6NAiOLauK/6AUvkWlrIt8F+/0Fl6vC7
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/Madsal.com/databases/google_app_measurement_local.db
Size 16KB
SHA256 07161bb149670b3507b5f149f9439b112ad6cb543b49e2a425fe9922f73536eb
MD5 23aa259bce106e43e134a38f14667bf3
SHA1 712a0fc6d3ecddd778fcbd4b9fc6be06ab81856b
SHA512 fdfb9f00ab91f71419b0338aa8d6e829ab56dce3ba705f22fcfa7a7219ee98fb24cce9f8b010f78d405fa825f4bd5c90fc67caabd8de70ae01aa4f7652ea99d6
SSDEEP 12:Ghhv2x7Q8ll/84AiOLauK/6AUvkWlrIt8F+/0Fl6vC7:GbORpzKary5tvFlFH
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/Madsal.com/databases/google_app_measurement_local.db
Size 16KB
SHA256 a1721520c1f7260cbc39fda0824613085c4706328cf4ffd26a3f1e2e35400db3
MD5 208c341b57d52c27863375ab427f46b3
SHA1 8bdb5645314536272a81d62ab669523e3f1dcc81
SHA512 b3678d683a20c62522b538a66eb8100014c4c36a269de24dc9a3fce4e2008aff74b4fabb59346a43e8766742230192e64d2a8a7bc6665464800639e6659009ae
SSDEEP 12:aocG+/0Fl6bgn2hhv2x7Q8ll/84AiOLauK/6AUvkWlrIt8F+/0Fl6vC7:aoVlFOg2bORpzKary5tvFlFH
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db

Path /data/data/Madsal.com/databases/google_app_measurement_local.db
Size 16KB
SHA256 5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa
MD5 7237409e0640cfab7bdbd429bf821a3b
SHA1 4c3da934842f8d4835dfe2a9c275a300e5123309
SHA512 c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f
SSDEEP 6:l9FCls1ulO0yAgLusi2JLnrcERX4PBX4ogLugMBX4suuK0DqiOwvs3:TgEu9zmzrfRmBEyPbBvOwk3
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-journal

Path /data/data/Madsal.com/databases/google_app_measurement_local.db-journal
Size 512B
SHA256 5cae5b876c4fa8f287b5ae4c287e13a3b0ed9dcfc2afa37574902ac83353a81c
MD5 9725856742f995ca52e2e7c47a57d745
SHA1 a8741b3b3545e9d8c00aac9e12289c70fbccee5e
SHA512 607d0686a9604c67a85ef4f7f5e5bf6318b26e235210f334bfcf1e8d3e848ea65681f2c043d0a96a7de0d5e93219a3dab788e9d01ddccc81462bcbeacd8de6e5
MD5 SHA1 SHA512

Submit Download

google_app_measurement_local.db-shm

Path /data/data/Madsal.com/databases/google_app_measurement_local.db-shm
Size 32KB
SHA256 c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479
MD5 bb7df04e1b0a2570657527a7e108ae23
SHA1 5188431849b4613152fd7bdba6a3ff0a4fd6424b
SHA512 768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012
SSDEEP 3::
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-wal

Path /data/data/Madsal.com/databases/google_app_measurement_local.db-wal
Size 4KB
SHA256 708504dbf41c2d438561f1245bca0a551260bc205d50ff49e983b5bd1ed35e13
MD5 8273c0f1af5093a66cd225475a0b7b7b
SHA1 65ea04bd9295b8349b79773b8ab338f5e65229a3
SHA512 c491f38956cd2b6e92ce5c45bb30fed955f31bd33b71b32927e57c730a2bc099ef351bb154a47d1e0b30b08ca46e832e9c03aeb780aa96bf3d1ba73b3d55701f
SSDEEP 3:OlH/l9yADgpIp9H9VVTJqb/NjghzY+/lzyliMlTXm/n/7wR2RzMlklKllgIn:KxDsIZlYCM+/lulvl6vER2RQlrf
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-wal

Path /data/data/Madsal.com/databases/google_app_measurement_local.db-wal
Size 4KB
SHA256 db63b35eed9fb3878377bfef8daa9f42e780577d9c6f21b025f42ab53d0d4df8
MD5 49db0273c9af00460f6e8449f2f05865
SHA1 fb99d93d4b79800b510494ab2ecec8cbafb3dc3a
SHA512 f7b3606d38f4ddd667e82adc3b20efd224642ce4add32f52e089af973bd703dc41a4baf79f6272c395de94c17bc0c7a974b1257713bd82b5d76eefb27112bc50
SSDEEP 12:KWdG9+SFNAiOLauK/6AUvkWlrIt8F+/0Fl6vC7:KWAKary5tvFlFH
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-wal

Path /data/data/Madsal.com/databases/google_app_measurement_local.db-wal
Size 4KB
SHA256 8b0d4709317a2e701800081226f405b03bbfb997366a861ad523ad40528b7da2
MD5 e3e1587f49bc2c6c3450430265a832d0
SHA1 1519766413aacba52ae4a1e723521aa01ee6d3f5
SHA512 7597531091136e4a8ba5120d2421ab97db36857f6b81b0173a7481c5d1d3b0fba67f2191bf773b96628f4b601fd63c0506eb12b9bfefa0e82ad5a92af3691733
SSDEEP 12:KzUkL9hhv2x7Q8ll/84AiOLauK/6AUvkWlrIt8F+/0Fl6vC7:KzDL9bORpzKary5tvFlFH
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-wal

Path /data/data/Madsal.com/databases/google_app_measurement_local.db-wal
Size 4KB
SHA256 fa5f6a9cd1f38789c69fb628a1748b2265f7ffd95d5bb46331af09e608f84fc6
MD5 7740464622bc665f1f657df829147788
SHA1 c0032dd0a49a428213376a1678cfd2a86090c3b4
SHA512 4596eef45754cb3de68f06ed27254d6e3e40b91601570dbe890668421507a2e48dd007be66f4d8d152e4e1d1f6def53e2064f00b2350155a78884067692e84af
SSDEEP 12:Kg6ZjahcG+/0Fl6bgn2hhv2x7Q8ll/84AiOLauK/6AUvkWlrIt8F+/0Fl6vC7:KfZjahVlFOg2bORpzKary5tvFlFH
MD5 SHA1 SHA512 SSDEEP

Submit Download

google_app_measurement_local.db-wal

Path /data/data/Madsal.com/databases/google_app_measurement_local.db-wal
Size 36KB
SHA256 4abdae0893fa8b5fc01fd2ec56f34148519862a1151dd25f12f63ce44fde65ef
MD5 a8b9dd6b0c565350effb60aeeca2ae1f
SHA1 256158fa31b571417024712bfdf4b905a6500cc6
SHA512 aba85d0217fc3f77dd5392192e451351a4f613cd3c286996a5e113250372511b0febaaef339bee64a1b2c339569ac9744caae2cbc88eb55224c2336c2bb93cd6
SSDEEP 24:KJzyGSP/Nk8B7E3zDGSP/Dqqpmzr0GSP/G4t2R3:QzNSP/Nu3z6SP/uqArSP/G4t2V
MD5 SHA1 SHA512 SSDEEP

Submit Download

MrAventer25413652.txt

Path /data/data/Madsal.com/files/MrAventer25413652.txt
Size 21B
SHA256 481a2a8e5761a29c6939f2bf541ca7f06c1c8d671612b5a7dad02bb889051df3
MD5 0c1e3840fbec04cddaaa9ede4033f2f2
SHA1 82b7f73ef5d71cfefc1645b528ed20a2aed07df2
SHA512 bec4bf1b315544e5d9862d476ee3e85a89803fcdb471833cb4bf04f31bbf4276fa02aeb6f9da36ef4c68de824e676a506c46ca45fe72a834a1451382e0ebba5b
MD5 SHA1 SHA512

Submit Download

PersistedInstallation1573412168957387895tmp

Path /data/data/Madsal.com/files/PersistedInstallation1573412168957387895tmp
Size 569B
SHA256 5537c0c7877145e050c00ee7d9fbb2a476b2140a4c28de417a125a561aa2c66f
MD5 3a926bbc1016f19e5e76f6a2f385fc98
SHA1 774d123883a2317ddcc0ce487c0b6d822066598b
SHA512 31ba0db2158892e90dde19ac2197dc6dffcd325bfd0cc5291f86d291295706f6e1caa168669c9d1bcaff1f36421341495869dd70831c470aa8ff72ddb7e8e245
MD5 SHA1 SHA512

Submit Download

PersistedInstallation7963138342202539025tmp

Path /data/data/Madsal.com/files/PersistedInstallation7963138342202539025tmp
Size 90B
SHA256 390be59bfb099f8aa3de7b0823913cdf42d95474fa3340b25a37a37fd4cf8a3b
MD5 201d348041da5ea3565409a06add1218
SHA1 d69350219285f17283c331e70d2ebaf881c0dded
SHA512 a84aac7d229557be40d660253343afd524f1ba0a77ca70b02e50cb06eadb84ffe7b2b32af6e5e52a22443142d78041378ba1b10fdf857101aa79bfa72cd033e4
MD5 SHA1 SHA512

Submit Download