Analysis

  • max time kernel
    4s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240221-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
  • submitted
    02/04/2024, 13:13

General

  • Target

    05ff22637856bb0edd57cb710afa0d6f944c977fd1045dbd78ea3fb634fa8fb0.apk

  • Size

    3.7MB

  • MD5

    2692680a7b8c65d4c840de1c8f40788a

  • SHA1

    588313f53c98ed371da721a815387d0b557b628d

  • SHA256

    05ff22637856bb0edd57cb710afa0d6f944c977fd1045dbd78ea3fb634fa8fb0

  • SHA512

    d448d59f15fee5e916f50710aea129ca5d16b63f118a7c2c7f6d58fa105e38d80d729b55c1c1ff82362396cbd42ef487f76bb2cb2031a94d6e0b908f7c39e71f

  • SSDEEP

    98304:SZZTSHh5MkkFXIMt5A5qWfpLCrcy+sK3yAPax8vkt11uI6:SZZTSHMZYSW5XWJOyuu8K1y

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs

Processes

  • edward.org
    1⤵
    • Acquires the wake lock
    PID:4464

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/edward.org/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    d9cf75fdd1c2292d986f6c3d5d60f2c8

    SHA1

    07ecb1d3a26d952ae5fecf54f36699ab498510b1

    SHA256

    2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

    SHA512

    442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

  • /data/data/edward.org/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    9e2d0d9d058aa4cece719096cb93b55e

    SHA1

    8ed110c2e0b2e5323222f66447bd5aba765a2efa

    SHA256

    a78d01234df6886d9d29b7e9c4d7cd8e986ebc30af1f0a57ce994298fc665b40

    SHA512

    3b87be21d42f2f6b105781153a5c4c45eecacc6eeb084ab4ed7f4b10da949e6205b36a3079f3e04a62f3b014ce313080eb6ad76d7def310cc3fae96e5812f425

  • /data/data/edward.org/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    4994ccaef1988955c40196a897d259e6

    SHA1

    b450a0777a1f4d82fadca2c384163f1b37cad9cb

    SHA256

    3d7a3b90cf74129347eff726e568536f6b85064e1af7ec908a2db357027517dd

    SHA512

    4b521c93a858c09b3e96c7fa6a9f5574a45a80be2c4d41d3ab7293b63220d87de3236d309836f180c6d5298cb85a1d62957b1b33b517317e73c375374e6e9db2

  • /data/data/edward.org/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    b65c574da9a56596048c9b238a5fea83

    SHA1

    118ff0ca5f8b185b5a848b8c3ce4c6ec5c850b75

    SHA256

    f5145a256f56a81c599effa6ab05901aba246127e5b604cebe55c62401c4d8b9

    SHA512

    8c835e2fbe4efa7cc02953e2cc08dc960e22133f32946683f4a15867a6d81822e6c036b317cd3126d6bfdcfefa3afc424325008bf2a440aa6dfe7e4715344d6d

  • /data/data/edward.org/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    a50854009f909714e9b7bf7dbec3eb25

    SHA1

    8be3a95b6936b1a933680933131b5028cf5cd782

    SHA256

    917569d66ff80009acf1c33dd4c940eba06e8f03d9c46b30dea635ece4452792

    SHA512

    315edfa10cfeada47f90916a35db237f6f63e0ff6fc1186a31e758c9a3726e222201f9aad2a52a5327f514aac6349b7a682ef90654ee545856c54752ec5b607c

  • /data/data/edward.org/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    6465b842a2b54336c104e46eb41c5029

    SHA1

    93043343a63b4604ee7853374bdcc6961513f8bd

    SHA256

    95f7c3435d7ef4464148f2e7ce33cf03d8fd3fde53579ccae00a4f764335958f

    SHA512

    c44f520e59c12c1c108a1af6922119dfd1da64a94b0899df82956952b162bbb1b4fdf0668b146b3552d762d156376c2f2ddf438adfc18a471e1832aef8df5835

  • /data/data/edward.org/files/PersistedInstallation2887645168116282715tmp

    Filesize

    90B

    MD5

    5db0ccdd1bafab18abf25338e8c21445

    SHA1

    257640dbdc38721c7c4372c14d0ecbb288734a90

    SHA256

    3bc399598863dcfc82dadfbd9ad9e489ae860ffbebb8d8ecdabf0a3ce920c1b9

    SHA512

    9942ea863fcac37a47133a54a7680a3291a5eed8da363195704ef1b1b0632f3aa12d580c299a6ffc014e6cd53c6250d94bcc3810afeab2f19c08d62df722302d

  • /data/data/edward.org/files/PersistedInstallation3267748294168898941tmp

    Filesize

    563B

    MD5

    5fbaa01f00bbf0b85611ee6c04a69200

    SHA1

    a0b0fdba36b6e090218b46e45ea89d20eec97eeb

    SHA256

    20292e0cc9e5cddd1e0eb6135f03428c271806bde3c60bfce5f74a43f5756e08

    SHA512

    f64fbf5c1071b6b3d7dbe6c51f0be5cbfed9db878b99a32c61ccb0d03e6731f2bfd1c6cbed2451e9c06a3db8be7bb30d7ff5084c8df3759d13cb26b8a0cfcecc