57fb9daf70417c3cbe390ac44979437c33802a049f7ab2d0e9b69f53763028c5

Analysis

max time kernel
48s
max time network
143s
platform
android_x64
resource
android-x64-arm64-20240221-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240221-enlocale:en-usos:android-11-x64system
submitted
10/04/2024, 07:33

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

57fb9daf70417c3cbe390ac44979437c33802a049f7ab2d0e9b69f53763028c5.apk
Size

8.3MB
MD5

3cdf8346c4f57780dbc404567150cfe9
SHA1

a610a05d6087bc1493e505fd4c1e4ef4b29697e3
SHA256

57fb9daf70417c3cbe390ac44979437c33802a049f7ab2d0e9b69f53763028c5
SHA512

3b21905eac8499a0303e5885d18da17bfc202dc0d50b0551b164c93e7672e9627e5cc663937d7567fdb21cdab0609b5b4a4c08941607314647a74bf995932974
SSDEEP

196608:qrKdDXTIfPSKoFVKGrkhfrNx32LC0MZUGwOZCv:qCDD0lqV9Kj732LCHhwO4v

Score

6^/10

Malware Config

Signatures

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.alied.santafi

Looks up external IP address via web service 2 IoCs

Uses a legitimate IP lookup service to find the infected system's external IP.

flow	ioc
31	api.ipify.org
32	api.ipify.org

com.alied.santafi
1⤵
- Acquires the wake lock
PID:4362

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.alied.santafi/databases/Cfrjkgtfgluhr

Filesize
36KB

MD5
7bbd2742115c02802912816fe14f84a3

SHA1
0c78d561ef6cf63e608e29c801d3a9085737301e

SHA256
451eedd0b0efdd7aa0b803531fcf2ee6f0da586fded4e85fc5406ae23c4cd120

SHA512
4d4e9d20bedfe64616fe1a61ffcc70fa6da4820c190c1580a8b5d0eaaf3df3107358832952856f5baa9ea7e06230fbe1d61d23afc348867544fd72a94814eca4

Download Submit
/data/user/0/com.alied.santafi/databases/Cfrjkgtfgluhr

Filesize
16KB

MD5
7a5622c022b4b20ec0e34168d9977abb

SHA1
61e389d4a4b6699042299167289cb5e9591650df

SHA256
a6123f3fad3c09611f3ec373672cef5928149a80d3c46fedda3a12db7f901be8

SHA512
ef59ab2d6de91fec2e0c02e7d1bd6a2ae2dbedc8674272a574cdb1ff58c39909e09e423ee53364fa261c928b388ead86a4858fa9c9fe93f8a8f818213289dbe9

Download Submit
/data/user/0/com.alied.santafi/databases/Cfrjkgtfgluhr

Filesize
16KB

MD5
187a303140714ccc7fdf2b3b90cbf7ed

SHA1
56bf84a048144267ffa737745d49dc37c58c8f10

SHA256
6c5f96b9f17b2159608c39206d743dbb463b595e7a427717ba9494b5f20f00ad

SHA512
e434f9b7bf8a714ba8155ea6e097f0b930e4adf9bed6f8bf3eedf939d5f1046cb9e60a2ea544b6ba93ad98e7b242b6ec70e1c0b4ba70ca5dd18e45fd52615051

Download Submit
/data/user/0/com.alied.santafi/databases/Cfrjkgtfgluhr

Filesize
16KB

MD5
80f72124ad3fb4a08a1dcb2d2e930dd9

SHA1
27e67cecd000bca927b80e8f08fc219fa9b35162

SHA256
dcade32bf1254c4fb54be2a22aa15ee6486663695e32ce6460348f2a475573c0

SHA512
1c927d176a4019684664a8e7b0e4aed841659ea7e527c83c79e361e834118a9c1b80a497c91160d1428eb0463a7befeee36d8ef9ed79ddf650d334d0aadc5323

Download Submit
/data/user/0/com.alied.santafi/databases/Cfrjkgtfgluhr

Filesize
16KB

MD5
798b8e82457c9e1fdee6238239dd5823

SHA1
6ef6648f3e849cffbfb5b3ff2bb24114305f6829

SHA256
a03d5eaeffe8e4af70ce2d4d318568072159e1dc4c2aae432ea3a5cfeea458f4

SHA512
e29d92278c7162d70c25caed6a4291fe6a967be58d0952e56a1c52602014adc725633810af1eda81682974e835962617e9eb170cfbe15da16ee7a78336c4b58a

Download Submit
/data/user/0/com.alied.santafi/databases/Cfrjkgtfgluhr

Filesize
16KB

MD5
3521c10c6c512010231c0e2195adf108

SHA1
87bcc84a64d605e7b9de79011cde4e3339c97f12

SHA256
ab94ce092b733062730d1b5584c40f858c0834128b90c18dc1cdf7418560fff9

SHA512
f71139562d32c16dc23f5d377f05bcc112523cf2789cc107b5c180f991bac5f9dcb74f5034c7552d63d175e3cf885ff625cc42355490364b76f1fefa2121ab9e

Download Submit
/data/user/0/com.alied.santafi/databases/Cfrjkgtfgluhr-journal

Filesize
512B

MD5
268f5ee7d9bc387e0467db87873bb0ab

SHA1
cb399d794a3c2080e5a8f71106992ef099593ebd

SHA256
bdcbe221e45b2e94174f2d420f71882f376503f96c0c01cf047df2f05fe45f4d

SHA512
72f316841b137c07e4dda482e8d7f8149fa8cb72b9d7f0a177424c6c3dbb5c94333d8a272508ad6035f587bab9a9ba166b83310a603543d796d1aada43f65b43

Download Submit
/data/user/0/com.alied.santafi/databases/Cfrjkgtfgluhr-journal

Filesize
8KB

MD5
44e433fbdad4f8ec28b36725c8a48242

SHA1
e06bb2c287c59df59f7ac4841ae0f140e8975b2d

SHA256
89e849ddabd4d34e60fb25f6f593702286d7c2fd3c77a98e0fa5c99cd021262f

SHA512
95246fb1137913613d9c036ac208c08d3b4f4e8a6bc49f0c2a8b7978cf9467e2a6a86f64c5800b1f8c802913d5bd727290926f7230b584e046beed0b6dba2a05

Download Submit
/data/user/0/com.alied.santafi/databases/Cfrjkgtfgluhr-journal

Filesize
8KB

MD5
44574ccc49f670ee33359fa9c2b489f8

SHA1
bc7d2b2458786b996168125aa7f89d1d1133b163

SHA256
32efafcd2a4fd331f1146e994b02014dd860c2d37cc0a6033f7016ec1f3139f7

SHA512
9cb2fa64df121174679fd290d9e0041fb49de101fbfbccba806180a3ef7c9379d27a3bed329b1789f3e6cbd19b8db8021367ae041de94491d2aff3aa43fd8ef6

Download Submit
/data/user/0/com.alied.santafi/databases/Cfrjkgtfgluhr-journal

Filesize
8KB

MD5
8fd7e29c9cec1ca89c568c7120eaa3f9

SHA1
b1e918ebdf62e67d31eb67b895f539ae9a55449e

SHA256
80e58cb928672496efd0c0ad4c6f3879015ef1c1b2d6a667195f10a58273876c

SHA512
1d68b4d3bca692108478fa5a16aec8fb8cd2f5c7336d7c6ffbacce884c8d9820fd85a571b400f575618bcf33ca930ff051cdbcdfa1cca78e3610b8e3432a0e2f

Download Submit
/data/user/0/com.alied.santafi/databases/Cfrjkgtfgluhr-journal

Filesize
8KB

MD5
b4c62c922b4895e2878ca0312a63b183

SHA1
cace284592814558bbb49bd3c393623067389d80

SHA256
cfde8855928c8e960256d3e3c149cd6fb8bf119dd54022e753d3bdd914ec78fc

SHA512
fed379054238e309f9860cbb43239b5d44315cbb185f1ed9a9f884ddf9b331576b5da74b85601839ca9cb55fae1e51db193f994f42272c5de170734f719c1d4b

Download Submit
/data/user/0/com.alied.santafi/databases/Cfrjkgtfgluhr-journal

Filesize
8KB

MD5
801b005cb07a33d350eba585723917be

SHA1
1b1b9e402c69ee52b809129841e70e90490e6525

SHA256
328c8b81274343ed5a179e25c3d33714d87c45980480bce62dd0f2b0639354af

SHA512
754516a1344f7869c03d9e543c8fd106f524348d2e89e3f1177506bb9aa26d8fa9d18218326372f4ee7709b6d7fe4c6f2b2ff05209ae84e21bc0449be0bc97d4

Download Submit
/data/user/0/com.alied.santafi/databases/com.google.android.datatransport.events

Filesize
40KB

MD5
1cf3f63c021d755a21623e6d0e86dbc6

SHA1
e40e0f1faa61abcca7ba3394c54c92ff7334b49b

SHA256
100c67650ba652d547d8a1128edc550a8e95541a1d9268a199d1b924294d0895

SHA512
38d72e14f3513ffd26989cbda3df46ed3dd6e731bdfae56440eff6b64760cc13f91014281c9add61e018fe3529e49c63a6892ca22479515816c768b546244466

Download Submit
/data/user/0/com.alied.santafi/databases/com.google.android.datatransport.events-journal

Filesize
512B

MD5
412a405681962de8071b81b43b1b5706

SHA1
3e75151cd0e53f96a20072794b67da422ccd064d

SHA256
14312a79c6d15fd2bed4749a987452963290460ae20aa5b1fc295ed6a02b8dd3

SHA512
3c01e4eb261622ca8b320878c0b46647c7477a014b2b75e899dd4ed142640db268d0f08bd8be519fcc5bb17c13ad621a17a3652717ca2f7b6f462cbef61a15e7

Download Submit
/data/user/0/com.alied.santafi/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
79252e3c97afeaa81b86012c6758a56a

SHA1
1bcce577eade84037ea16d4302897e16e5c7fa61

SHA256
9613861ed3c31b0bd0a8824707017b144908e12e490895f28a9bbf6b66470f2e

SHA512
b9b5e049915aa7e473f7575f0549c2e4d035184f00d938061f671f4d4596606cc55989b917361c272fdd8d69174128aa1238dc86800277ef0fba512b56fe06c3

Download Submit
/data/user/0/com.alied.santafi/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
cc0e25ee84c6ccd3ee2e48e580bd2e69

SHA1
f0fd112592626707ab19f7f15c364d92e0883fb0

SHA256
2e66fa52981dc7ad503ebdb53be50669d43dbb99012af97e72edb788aea9e64b

SHA512
7457c51c62c0188e5690496308c4dc16fa635ea3706aa4c7fdbf358c902d52e6bbdeb36031837d3166c725b50c0c33e900b23cd6304b1c4168c84239af970c28

Download Submit
/data/user/0/com.alied.santafi/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d9cf75fdd1c2292d986f6c3d5d60f2c8

SHA1
07ecb1d3a26d952ae5fecf54f36699ab498510b1

SHA256
2d227e9b7a044c8e10294f6a831fb92d81ea9582381796d87f35bd268e37538a

SHA512
442c96e4b4c79b8d1c64dd3a6d6088ae1dace441e78d830dfb3190ee1c0fafebc606fb432071b4a1ad1a4ba9b68c7877b0bce520ccc88708feaf82bbc474e0cb

Download Submit
/data/user/0/com.alied.santafi/databases/google_app_measurement_local.db

Filesize
16KB

MD5
33006abaa0b838db3832272a5194d174

SHA1
aff70f57aa4ee8c9fb60bde01a55582429429393

SHA256
3ca7ec56d3eb01ba8801574cf221aaae24551e2e8863d309987ae49da6a482a6

SHA512
d5376c7bbf6001dacffabb5087f0b000035418c8d58e459db2103a6ce31fea2c6c116773638f3f63a7875f0746545ca425cda593513b848d7a816a4026dd65dc

Download Submit
/data/user/0/com.alied.santafi/databases/google_app_measurement_local.db

Filesize
16KB

MD5
fb7d9363b0de377c9ec5f67e8a54060d

SHA1
a48568e31d808fa8031f3362cd72189e985cdd4c

SHA256
7ff45954002312290723bb1215348155be75f053c0156e677a3a7a90449db7e7

SHA512
91a6a28591694e6ec1c54a5fe1a531f7c75cd76c9bef39ccdf51b226a8bc673fab5bc47efadc63eb6ed8eb3dc3f74d65af85fc8e86178f1d94ba0475b5a092b0

Download Submit
/data/user/0/com.alied.santafi/databases/google_app_measurement_local.db

Filesize
16KB

MD5
780c762d2eadc27071c33533afa7b7fa

SHA1
b26cea939e53befe023a0e7981b4d15d4f5cdd49

SHA256
15cc6863d8ab761d2806bb143b633d51417f83c676b83d78b0471c41739db750

SHA512
668eaede15f601828af95a1adf6d0b92686c0cf7005b1e1507c3bf4a3657e0453d0ad186542475ccf49f3a155a4926e67acf358f6d9ebf94e9735ff6899717a5

Download Submit
/data/user/0/com.alied.santafi/databases/google_app_measurement_local.db

Filesize
16KB

MD5
05385e517a2651e83a90cbc8672e7b90

SHA1
f1b2ba387c4d88d0e50764abb09f259cd577c863

SHA256
63ab7bb8722614cb61fed581d84df1cd499a7a5dac5d5c95e0602ac77a224790

SHA512
582c93428a81b1e5e7a3cd9fe953d74bf50c7b8eda2417cf483d0c77c91c0d419f3d68564b577af4d9a528b0156c13afa1ebdf29e8536a2dbadc70748df5bc4e

Download Submit
/data/user/0/com.alied.santafi/databases/google_app_measurement_local.db

Filesize
16KB

MD5
818548be1885386cc995f564f36a8e8e

SHA1
008b0c602ed55b1122dadfb3a20db517d55c10b3

SHA256
b4765a86f69c122307448d0c6e81cebd52ffbc59b0d19da42971e2857f773e6d

SHA512
47840561a1eded73600b656576a7a9195bd1beddb79b08090b9e6bd9ab610de6cfb0a334310bfefe0b33ef157d420aaa17c6315fa2e689398da3328c4460a02f

Download Submit
/data/user/0/com.alied.santafi/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
8a822dd32db5fb5f3f3ca2600a76eb4a

SHA1
e238333f3c6d558b83e02a3298fedf0b42696e13

SHA256
e64d2dbfef37340d333400bb9d6a3a7e7dbaa130b96e1bd092661fc1ed16e0f8

SHA512
71c7f34729f1074ab95f1a1224cea2b835bdaa6a981f611e6d5dcc2a4de2d621de2872dfa84d68958ff4bf308a47ff7a46d9b327419058bee7b6d47aa8c35208

Download Submit
/data/user/0/com.alied.santafi/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
068d02dbc9433543ab46945031691740

SHA1
c6f776b8965d7b6d671e433f5840a5fa65370499

SHA256
eb02dd065af98cce50531c6717244d6919a9088b72c886e0826faa28b07e4ee2

SHA512
2f461b63c560a06b6f48a11d2999bf17f2b0af72d06081f57ddd2b057615b54c45f3114a86a0cec76e7a58cc7cdda4c3c7a5376bf9be50b547f5d0fd7e8467e3

Download Submit
/data/user/0/com.alied.santafi/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
df6050df3795d15fca9880a04836bb95

SHA1
4f126581bd3a73a3c5fad304fa9e95cadb0196a0

SHA256
495becf0f170230687abfb6de5580fdbfef60cf8ca355d0d1edd77bfadd9054f

SHA512
5a42da8b34411ba3c2b59a3480521a3b5810c15a90b53b3996036468068d961798be37e9dcac5054f8c8a64d2f2955e6e75ad9cabd80161d34f5beaa3fdf3f72

Download Submit
/data/user/0/com.alied.santafi/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
dfaa39ff0ad4c5e2857921f20da9ae6d

SHA1
c654ec2e3c8aa1cb80aa1516eb551b0800251759

SHA256
19e6c8460d2ab4d37cc697696ae9bb936b1de14b1570052341e0f88e8c37d45a

SHA512
51688a364222c2c91072ccbc97e847ee4a35db0680756a59a02658a97de46db289dc177c83df1e0c30d40cba6fa6e1c8ff1afbdbc2918f23c7c9fa9af217c33b

Download Submit
/data/user/0/com.alied.santafi/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
08b2017cfa56446796bd0d2c2cd12696

SHA1
f4ddff034925b2d448a8d6604b52e7cfe675d005

SHA256
23919645a8aa0395b34f85c1232b461d12b959754a093d5c541648d1122ef2b8

SHA512
39fac2e101f0be031486472abdebeea100202eb1fd27e5d16130192f6ec65494f984db9ef84955180c77cacc2e6964899eae0e685bdadfddd7911b14efc0556c

Download Submit
/data/user/0/com.alied.santafi/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
25b4b2cb64bead6dd7c1521f6085f630

SHA1
06f6b8eaf2a599bc1ed57d8884f518f7e16d2a58

SHA256
be9381a187b51443f6ca15db6da77fc8dc7a368df9b6c07d29445f462ec453ff

SHA512
28089f4918b81dc2f57a18af196a2f035bb55d93028833364401e3858d8b4bb4371eb379a7780abe935c6fb727d3e709637f3fe0ae7f7bf4986c2500c1b679f6

Download Submit
/data/user/0/com.alied.santafi/files/PersistedInstallation1326585801292118517tmp

Filesize
573B

MD5
155ab40c53053ae574f19bf540a33b5e

SHA1
7764584401e0448cbeb66b4e2d77b740041a3d23

SHA256
e33c8a342d1001585378d9bb3a9f9b84594a153c6505e116b3970f38c927c27b

SHA512
53f3dcfb5633a76de76321b06594215ace169ec024399b33a5c71a9122fdf2a4a7dea0dca5e4eeb6069b83ef0989bad1036c31f26ea1a2402e3e43deed03ac9b

Download Submit
/data/user/0/com.alied.santafi/files/PersistedInstallation5407902876622071220tmp

Filesize
90B

MD5
0ce85f4890ee6b07ebe5758fbb2b8766

SHA1
ce76eeb43982041f27e3b8e687d5da680363c9f9

SHA256
d1e8584db06b78e77610dcdedc32b38c3f79eedc9e2d8adff3772782f84b7013

SHA512
82330cba30112abb75f722d6474bd3928ee821c3cae4f573aef53c992cffa932b77f3e638cc6ecc5ce65598b60c657f23542497a74fbc52537f9a591ce5b1409

Download Submit
/data/user/0/com.alied.santafi/no_backup/androidx.work.workdb

Filesize
4KB

MD5
7e858c4054eb00fcddc653a04e5cd1c6

SHA1
2e056bf31a8d78df136f02a62afeeca77f4faccf

SHA256
9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

SHA512
d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

Download Submit
/data/user/0/com.alied.santafi/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
011722aab8241a6429997b8970f7b975

SHA1
e3fb467c116e46d90d21f246a46ca6613059294d

SHA256
a49833c22b1c6c16b165d773034f2a1796a1fdc5eb0e1d52a54bb62917f1253c

SHA512
207ae27ff733e5a34608af7a51912ff7cbec5df28f4fb0118e7ae69e5d4bf6419bd8518aa9e2ae29a09d9f1a2e354d6b56481b354db2dd7ca7c03567020da35a

Download Submit
/data/user/0/com.alied.santafi/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/user/0/com.alied.santafi/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
89d75ed5ce2fd75b702a518892fd46f2

SHA1
76785c78a48c41bcf05eb859b28fe24fbb954f41

SHA256
07b66efe75ada97581e6132fd0dcd7d9f50c3fed9d7bc8f74c33d887134a9771

SHA512
0477d43f359a2351a4841a0127d768c8f2a79914be972e0726c08a9be9864f05e8900121a6fb759a3d44fa243f77facf5667321177c336b1fca314548898fbd5

Download Submit
/data/user/0/com.alied.santafi/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
04fda337d03a1416199f6037cb365e87

SHA1
78cbbc87b2304f97e6a8dcabea9473e2ca5fe8aa

SHA256
aca95254533778e38f01d05fbe21607cc663d7adbeefbe5b10b9e0392245e863

SHA512
fea4f5e9e4c523617dc1bcc8add0ebe0d2d6ee81cca337bf491d621b0030db4defc0f8071c19f80a09388134fb67daec0f7e338bf038c09d97e250823bfa8d6b

Download Submit
/storage/emulated/0/android/.exendablle.all/info

Filesize
46B

MD5
422928eee1e3b810671e123f94102f0a

SHA1
0c335f86457f76e12de6239213ac6fcfefdb10c6

SHA256
07339326c65fc8180bc4f6b9d31db5ead6f1d0ed944d13271a6227fd84c8564d

SHA512
a9c50ffa5af4d76fcf2614220f031b517258716f030d48e2348c993dc6291f0736c0d638cf878c9b9aef0587d8a0f1610b55171b46400a99d93c5ddfd3590270

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads