57fb9daf70417c3cbe390ac44979437c33802a049f7ab2d0e9b69f53763028c5

Analysis

max time kernel
47s
max time network
131s
platform
android_x86
resource
android-x86-arm-20240221-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20240221-enlocale:en-usos:android-9-x86system
submitted
10/04/2024, 07:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

57fb9daf70417c3cbe390ac44979437c33802a049f7ab2d0e9b69f53763028c5.apk
Size

8.3MB
MD5

3cdf8346c4f57780dbc404567150cfe9
SHA1

a610a05d6087bc1493e505fd4c1e4ef4b29697e3
SHA256

57fb9daf70417c3cbe390ac44979437c33802a049f7ab2d0e9b69f53763028c5
SHA512

3b21905eac8499a0303e5885d18da17bfc202dc0d50b0551b164c93e7672e9627e5cc663937d7567fdb21cdab0609b5b4a4c08941607314647a74bf995932974
SSDEEP

196608:qrKdDXTIfPSKoFVKGrkhfrNx32LC0MZUGwOZCv:qCDD0lqV9Kj732LCHhwO4v

Score

6^/10

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.alied.santafi

Looks up external IP address via web service 2 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
10	api.ipify.org
11	api.ipify.org

com.alied.santafi
1⤵
- Acquires the wake lock
PID:4224

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.alied.santafi/databases/Cfrjkgtfgluhr

Filesize
36KB

MD5
209d9e50a1416a9ba3713d72aea809a9

SHA1
0333be462f469198f268f232b5616ac4d97d6cb8

SHA256
5eb96258a9c6ea87d6067878651bb59c3a51be218127cd3f640b0774536c40f8

SHA512
d6bf1999891998c99da8954e63491cad626e8c2ff203f2f2459f6a1bbf14c6ee607dd96266bbc8dbba8c27808bd0fa4133c8ee36db8c4fd1aa93020ba2b7901b

Download Submit
/data/data/com.alied.santafi/databases/Cfrjkgtfgluhr

Filesize
16KB

MD5
ff3cb7df43c6dbf0d082315b0bf68ff7

SHA1
5bfb627ed03b79da6d5e1cf791aabacb5daac825

SHA256
b959115e4d1b5b0674a3acbeeda223131f2adfdaead63b76858551b00acb3c91

SHA512
567b989236c962bddcde824a531f18171e351654f40aa38807e638f19844431e56ac9528551cc6bed58d0c5b966564458da02a86e72860b87984e40ba08eba79

Download Submit
/data/data/com.alied.santafi/databases/Cfrjkgtfgluhr

Filesize
16KB

MD5
0582eb34c8576f3b0abdec445e8b3b30

SHA1
22814aa8e827921854c14e10ff0ee0cac8041b13

SHA256
f2d07fc1f8f4ff023530e4653542e39ff898f2a648df167811099f64d14ed2da

SHA512
6f88ca1b9b16aa92c50b32d85aed0f1d62c043135a898290faaef512e2127ffa0b782ec37ec6f26d96275cff50b36a6f03e9b48e553e81bb35f45242c6a8497a

Download Submit
/data/data/com.alied.santafi/databases/Cfrjkgtfgluhr

Filesize
16KB

MD5
c20a7992a72d6863c07204e1fa1e72f0

SHA1
dc00430a6000a0e6150d4c837c750792b279b25d

SHA256
f17525de157cf198b71e43b53286feff4d1638e8fb48db61369be1302e23d116

SHA512
6ba45c9580e68ad08e365f1e83a5c7461af55eb31bcd0de0480ce2e318b41942ff73d82d958624ddb279a72305a174fea01ab10d17d055d290442949a6f8aad0

Download Submit
/data/data/com.alied.santafi/databases/Cfrjkgtfgluhr

Filesize
16KB

MD5
62b121170798adf8a5d89e4c7d7b9193

SHA1
be33ae3c95018f87add3e08e7dcc957d67d021cc

SHA256
b9a07f1b8521889d884355183207308e9b824dd6e071ff3ee7548fbdff0da52b

SHA512
aee08f18f81bb68c65f480ee4e193c50a816e4bdba84d969b2e35737359fc578d708177fbe704e55608a7d83b0e94393c002d6cd61aa49470e4d5811ba6ec1e5

Download Submit
/data/data/com.alied.santafi/databases/Cfrjkgtfgluhr

Filesize
16KB

MD5
c706b946de7feea954a9e2c66492b23c

SHA1
3783c5f3919a76f9ebb46555b54308e68a66bf5b

SHA256
3f72534be76bd5b405e36a21cccb81fac09c295efc7e41772ba645cf5a99e65e

SHA512
6adbef74e47c2d4cccecb268c67d9fca8b77d25014689f1a9635032c524a38dafdd206b054dc04b5ffcc4284bc1de3981908278c212d87d861fd275f179fccf7

Download Submit
/data/data/com.alied.santafi/databases/Cfrjkgtfgluhr-journal

Filesize
512B

MD5
2708dd94035bd1cfa7f0d70cbe983816

SHA1
5bd55cd9949673233c52a18a796aa5f420fd51b4

SHA256
00b423365e06b15a4662829d450258a5b67c7ab6285fb125d3d8ed5b2bf08bb7

SHA512
3b4105d2f441eeebae1593a6f9d51065b00b5b9ed0d4e29463197a8ad4631e545e6414fae607df4aa9a02c368d227f517c203f1ed719da77ff94ed697815e84e

Download Submit
/data/data/com.alied.santafi/databases/Cfrjkgtfgluhr-wal

Filesize
52KB

MD5
5d9bdb33985d999c5babbab2aca54633

SHA1
eaa01b7f0becb30402dad6fabb470927b1f3efd6

SHA256
524fc719a2ed4fb78047db969da737c255294b09c12edc09ebfc556ff3e8b524

SHA512
87e95ac0840b4f856dec01b4300791f8a8055febb9b7813c1366f460c8307a5004b593a24d38da7f9cf376b3c238646b3afd5562db5eed7cee566b9ebdf0b114

Download Submit
/data/data/com.alied.santafi/databases/Cfrjkgtfgluhr-wal

Filesize
4KB

MD5
08c2fada1f68dfd8bcfbfe15fd266f75

SHA1
84fbbbc20989fa0c2c7430fed624c8bb4cf26aa5

SHA256
71aee5e063a211c8ddfda92f40a7eb608634e04dea4d1fa2eb96f4f00b266358

SHA512
b0465b61aa30264e1675db06783f59d278c091ebc9be618793092c7ab4665f3d3134129c39950cfa08e3441f341bb4aaa738cfc933e05e6bec6f93552e39e2cc

Download Submit
/data/data/com.alied.santafi/databases/Cfrjkgtfgluhr-wal

Filesize
4KB

MD5
feb19b5a15fbfefa56baceeedd219347

SHA1
f50e99eb66642edb042333d23520dfaf6e43e963

SHA256
d35ece1f77d9992732ecab51cce3320ddbdbc92fa6ae40e175279b80d39f0f32

SHA512
c0a77ee28e9990f34cdadd04962b5e08c85356454496db6d9504f444bb50f9bda85d6c86487d7e93e276d3212154d6282f13a201656aa29423b73ae3ef5f4f35

Download Submit
/data/data/com.alied.santafi/databases/Cfrjkgtfgluhr-wal

Filesize
4KB

MD5
21c6353515f3789efb8df88e195c45dc

SHA1
7f97963437df0e7bb7ea15f2cd29e77547a277fb

SHA256
93c4cdcdfb8a5632c864716b05b198589d315bf5041eaa979bdb502c24edc5d3

SHA512
daf4c5c8ff3a39951f29673c60c7d159b25852acadcb1724a68f749b096a988fb2061d788b98f143eab7aeb3a6a75658e3525988b3b7ce9460639ff2af78b5fe

Download Submit
/data/data/com.alied.santafi/databases/Cfrjkgtfgluhr-wal

Filesize
4KB

MD5
7ef0b067e16a362cd50c33db5dba9bc1

SHA1
d8ef14caa29577f1ae15423a64ff67d38157ec9b

SHA256
1e1b12767880baf59d9f517126afc4a2235689395d2b85b82398f3c28b1979db

SHA512
2b64e2f4fe895e42dcd21a2e0102b254ee2fdf8599c7f343117090e2e1ae47f64151bb8576fce81bf1b57675f44d1b680f92bf540e03a6b40aad7b13eafaf825

Download Submit
/data/data/com.alied.santafi/databases/Cfrjkgtfgluhr-wal

Filesize
8KB

MD5
84ed71ee7d6ccb2f4b63d834b68d8a82

SHA1
163f2227a94caa926d02f0e384721c5c71260866

SHA256
b399ff550384b0849f222269303c6a9fd4394c83c4911e792d65a081a0ab1a5c

SHA512
be148bb5c99368b966bb0ec6de86f1678e649a2f04e8160b67e22298770a23eb2762939db68bd36f785c142d8969045991ef279205ec9a9629957b79e85ef120

Download Submit
/data/data/com.alied.santafi/databases/com.google.android.datatransport.events

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.alied.santafi/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
a949f6bfa50819826fee258fe01efc7d

SHA1
4fb46966b31e5446591b398a5e4f7fa16b082dce

SHA256
f33bbe3494e9ead38c054b9073d5e419ccb4fe36bfb44096ff4933ba5583101e

SHA512
0a2956c6609e96f275e6b0c0d13dc81eb0c50eef53dddab1bb58bb62db8063056d88cd7a71831c8e36899461d121bad8766c2e6e22a0286575f547924444e645

Download Submit
/data/data/com.alied.santafi/databases/com.google.android.datatransport.events-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/com.alied.santafi/databases/com.google.android.datatransport.events-wal

Filesize
52KB

MD5
5838fc87be4a74aad26e091857ef6431

SHA1
a6fbd044c9522e0e0336df9fbee5f74af63e0431

SHA256
3e7608f988186e9c4ed5d54ab2e248e908982605616c9dd7cf8816a3198b02d1

SHA512
772e6f19f7ff6bf1414083136d8e1521f0844992ff3c5d94234ac82b99a4790715aaf057e87a7dfe518eb182e6277b9337d5e3554f974573557239c790f6c9a2

Download Submit
/data/data/com.alied.santafi/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7237409e0640cfab7bdbd429bf821a3b

SHA1
4c3da934842f8d4835dfe2a9c275a300e5123309

SHA256
5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

SHA512
c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

Download Submit
/data/data/com.alied.santafi/databases/google_app_measurement_local.db

Filesize
16KB

MD5
8e35714f255d04050be2114cc58a41f3

SHA1
a1a996f7a744dddb9a336650e07d91c47b71dd7b

SHA256
b971e7750db3036aa0e14845391c10baf03c6722b81a8b6331dcff56a99534bb

SHA512
7ad53c286ec3c542393bd90a121f9fc1605928275f43bd7a8f696382c8d88219514a3171dc7756a9e5faa83810fae8a8f538cddc475a61129e42b1bec0649707

Download Submit
/data/data/com.alied.santafi/databases/google_app_measurement_local.db

Filesize
16KB

MD5
9b3c2948da7476d57798ced7cbbfaa7f

SHA1
5472087bf3a2c9156aaac334f7ad59dd7bd1ee29

SHA256
23a599abab510b676e0e05b41f0544fcf571103e85b5ed4e3ca278d8fe82e7b8

SHA512
f0990f91c78a0b5ccdb42ec7b570cb93dc621c5aef597753a43af59e7ee079e2aa32943839d40c1558008385acbaccb3d25559430dcfbceb12419f5efcceede6

Download Submit
/data/data/com.alied.santafi/databases/google_app_measurement_local.db

Filesize
16KB

MD5
b7a829c1a374d5a84500d6fdefd2c53c

SHA1
5bdb3d8e03e6d54ab06583b0e955ebe6e7d61d57

SHA256
117c0030b4996a3ddf0d4c5ed6d97212ffbc3fffaac4c8593c786184d0e03d21

SHA512
527bd8500c94bea05a91883f68b25526b2ffa7df57e272e103e12323d0d0b58f072bedce4cf96602c04ab7d1455acb6e2fe30efcca83102073d9a997fd73b255

Download Submit
/data/data/com.alied.santafi/databases/google_app_measurement_local.db

Filesize
16KB

MD5
8e68f42788d161ea7a3fba9c402ed7d9

SHA1
eb6a96abd9fd297378046c27795aee703e6c236f

SHA256
9016ded5d53d7ccc4036b5f74f0f3ac44cd0d6e7feb5455c2f402ac5791993ec

SHA512
b9e1241daa6ef7670e5218c053f73b7f1d3e73954a4a614cea83d7e75bb5f17355c69d8a7b46d5520c645edfbea969fb32283a656f3062f1026ce42cacb9d95c

Download Submit
/data/data/com.alied.santafi/databases/google_app_measurement_local.db

Filesize
16KB

MD5
44693692da738db6eb133cf0e4cde91b

SHA1
e6bda56494c325d8d37ad89552263ae85d9b0550

SHA256
8fe0ac9db76d4a2dcd3b3d54c0efedcd223e25aabf716506493d50e243a7a2d4

SHA512
b34ddfe1ae343b1b12f7029ae476a0ba8e1b4043ccb520afb412b3f71335ef679bf29723c9a5c00af7e922e9982d5b3af54b2ed779da8cb601f378e5b9d26be5

Download Submit
/data/data/com.alied.santafi/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
53d48d46151ddce48a89edcf61880ceb

SHA1
4371f2c451fbefe5e8ba22915a9c49294075ec48

SHA256
e99564cdb913aab3be0210e8696075cb20b9c31e8c06ed20e99b4eb5e171421f

SHA512
9ea1e2d295380df2f00c3b52ad6f1db23a63380ebbb24bd94ca48e5c1d4e5650d2b2f254b0517a9e91d0b22baa3b14523c16a5814b4ebdf9ae1f8ecf88af7668

Download Submit
/data/data/com.alied.santafi/databases/google_app_measurement_local.db-wal

Filesize
36KB

MD5
81668910991ce9b8f37a37e93eb4b4d6

SHA1
03d9726e175856632476b4566c777f57a6716856

SHA256
83be5fcf175e43941bf64947e0ff16eb90463a5376bebfc81aa2eb41e92d7080

SHA512
2477fa836a0606af6857459ca0c59b32b29e5798f93f860ec74451abaee779ea7d3a25bfe8694fc84c2fe8334b68f09f94ed198508f3865821e14d3261e841ee

Download Submit
/data/data/com.alied.santafi/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
c32737434ba60200cf07aa53aec9cf48

SHA1
dd210ba2a484fea83c2b02c7afc857dea6a63cee

SHA256
b2d290d1acb6e571157c82c42596f39d7916cf276a898b54287a7da6604273d5

SHA512
2d44f931d2fa3c2ab1ed2cf2ec5e7fdf882752075bbea0d8c018c0f7b4071b16f12006334377692ff8e1b6a858c661d9cbd23b65535e841c6d85ace45dda455b

Download Submit
/data/data/com.alied.santafi/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
8c70711bd5d6a45a369a54a74a70cadf

SHA1
ed916a78c2d11ebe13985f1184cc8d5e5f1b514f

SHA256
c759c956eeb36bf639f06e31f7070ca307bf57a3985fbf594dcd73fe4a632c9a

SHA512
93633faeaa5319856294565a31481b362c7dfdec353700c7a3da117a985d325ec9dc6cd758d304d091d9c02bfafd7f1e256bc466560e71006694a5fdf89496ad

Download Submit
/data/data/com.alied.santafi/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
fe1a373186f7a902afa2160e6056aa32

SHA1
b9f7449d8aed00fa9064a66634cad74ff11fa6df

SHA256
cbeb4e09a59c4b08e142cc7089f5ce6dad1c58182b285818376fc059b6285993

SHA512
cb40a4a8caeef23605200a4613631ab56dd72552fe6e318f900bb75e6c18c6c2be35c2b9dc5bf1a6a0d62d041689d9ef11c0b0a5291040114023c30d9c1deca0

Download Submit
/data/data/com.alied.santafi/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
291b9a3bf1b608616a3952540886f676

SHA1
bdb56dc1af54c7b18e0d2c4e86cddb335af4ae44

SHA256
b7acf166af45ed97fe096baf31870ed36fdd980594c91fe9f740a662f230edd6

SHA512
31ac44a6f96d626e694d47a6acf11e55779225bed2a0bf34a3986b8cc003e2a9c36574e5387e295dee7118d650de3c1d1c0505c03e9f67edb72723f94afa5674

Download Submit
/data/data/com.alied.santafi/databases/google_app_measurement_local.db-wal

Filesize
4KB

MD5
37f4d02651ea8825e8f1d6629d11936a

SHA1
8069d310dfe8e1b4187f54411ebbf09f04ca44f7

SHA256
788eb918c99d4a9f74c26755ae3e49561327102856891b2afb7aa1a488f6dbe9

SHA512
86de1a24f7b40b5bae6f94640d8d9524214ba7101ebc08f3f2599feb93d3e540489dade64535176fc8bda0d8e9d1a49428d309e20ea8fb98df2ce2d60d46d5a9

Download Submit
/data/data/com.alied.santafi/files/PersistedInstallation5196384934692189615tmp

Filesize
90B

MD5
009a8e50da0f7e9cf08f4f8b2fe83075

SHA1
f69dbdee1b605e5db0f6991fb7c34b644416487d

SHA256
3f901258655adbb97ef6a9c934d7dd03a53faab2dddca03352dfa9e568a55ddd

SHA512
51372895a4c7b0dba962a4a72f14759df06f362bc67ca8731855fe8f9083402dffccc884beb21fadd46504727695c54b6aaf986948de062cc628bf27c997a85f

Download Submit
/data/data/com.alied.santafi/files/PersistedInstallation6829568253913960485tmp

Filesize
573B

MD5
8231198eadc21890a20d10e50441ce4e

SHA1
68749a8d543c9ead6a67ae2d658ff0474602ed7f

SHA256
3b720124b0ad76cac65c7bcb315e743e6687dad8ddde3c60a189e6d0fd5ac3e8

SHA512
5538312c54714f6810d1e4d6e7433d7c30010e9b97ee2fdb38dccfe49500c1b9952d1d951f7a3bb78c130cbb6444ec564316ad58229553c5d62c4c09968587b0

Download Submit
/data/data/com.alied.santafi/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
8c77760a63e9ec19ed4eeaf3ba009bf6

SHA1
9ee0b45a91fc059c06c7716d177f85390290a7aa

SHA256
600bfc3997066093e7ee32b19a8267de3ac34c6f06fe0b644b3e4d44f13297a5

SHA512
397e61400289f49dc72340841fe7d95dbbb98cd66152e6ac1e9df30628e078202a1dadd598c7be7dac057e32f9f0c8d1cd981c7e21bcf6ed340f238dc304cebf

Download Submit
/data/data/com.alied.santafi/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
169d06fab43def1c08b031646a992037

SHA1
73159208b1793d7210e8ed59b4e5288b13452245

SHA256
c996bedf985502d78434767886721102924357c8d4688b54e12522a37f7aa4bf

SHA512
e47cc27b5d94c8ad624956960b7d2b43f0ffcea0ac8190865dc699c960abbca75b72528aaa296b36e956a27ccc0e91861b1edfaf6cd7b474b0cd30b04771b335

Download Submit
/data/data/com.alied.santafi/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
20beff03d9560a0f617124dce783f05a

SHA1
2d958d4d9a68a301051797c1ca487017b76e2188

SHA256
cadbafa544b40613ac7b477bbe8c5f419feb62857bafae4a5b82e678cc2369ea

SHA512
a38465dd359390b375121d53146789c3927df52f56e6b4e323bcaf0b64553c8115522999825134d55ae05649aae6a057b68cc7caa2acc430e82f500dc3ebdfb9

Download Submit
/storage/emulated/0/Android/.exendablle.all/info

Filesize
46B

MD5
809e444dd831662784f0e21043971f9b

SHA1
749faa12dea3b21dafd6b40da457b7da03df49c7

SHA256
a73311cbbb7524ccea2f6f10eab805c340417b2fd336d99ddc4e4bc155cadea0

SHA512
bcf0e899765feda5c2daa5c1f7cf717fa703f58d1fcd03b9816dca171351ef2bfd5316a18d0863461844c6bff75862e84f0e6e97b19c3eafd621fc8177ec0ac2

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads