Analysis

  • max time kernel
    5s
  • max time network
    146s
  • platform
    android_x64
  • resource
    android-x64-20240221-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240221-enlocale:en-usos:android-10-x64system
  • submitted
    16-04-2024 09:49

General

  • Target

    Mad-rat.apk

  • Size

    1.9MB

  • MD5

    fc1717dcb2b85501d6af3f2c15f681fb

  • SHA1

    5295f93df913e307bfe451bdf5c795bd5ef291b7

  • SHA256

    8b1660cc87654e10f3809b0eed81c25382b94c7962da1d896614d5ef113e5e80

  • SHA512

    dadb9d60e58bc49a381b9f0eed999918ddb966da9f90ec33cc7a4f566dfa01422fa987add83b0d88bd54500fe15dcf02c6c18d99c4f7064100719e37d74357b1

  • SSDEEP

    49152:r/TbgckgdPw3kv+GDCjoOXHO5NQEVhD0UYrjPt3Y:zHgckgVw3XG+EZ5NQEV90FY

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs

Processes

  • Mad1sal.com
    1⤵
    • Acquires the wake lock
    PID:5054

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/Mad1sal.com/cache/~test.test

    Filesize

    4B

    MD5

    098f6bcd4621d373cade4e832627b4f6

    SHA1

    a94a8fe5ccb19ba61c4c0873d391e987982fbbd3

    SHA256

    9f86d081884c7d659a2feaa0c55ad015a3bf4f1b2b0b822cd15d6c15b0f00a08

    SHA512

    ee26b0dd4af7e749aa1a8ee3c10ae9923f618980772e473f8819a5d4940e0db27ac185f8a0e1d5f84f88bc887fd67b143732c304cc5fa9ad8e6f57f50028a8ff

  • /data/data/Mad1sal.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    3acc25c342045bb8a025523c9dadfd58

    SHA1

    ac6173d336e695254db40fe7f46f5a4f18b4c7f3

    SHA256

    04da59b52cc67d33de7775e4221665966d26226b3c26a2fabdcfe2204263a61a

    SHA512

    f2c837ce78cb6ddc4397f3fb7227cc15850f625a5d4df6500e430bca9df12bae5f9e3ae35713aafa30ae13a0af396730dc14f826411a1d1cb1e7476cd0e2ede4

  • /data/data/Mad1sal.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    11ca45125530dd3f0c8de4bba920fc42

    SHA1

    11352f104efca152f7239de8444e09dc7ed53c80

    SHA256

    2ba434716c22da506333bca39047bf2df743e57886648e958f5129cbea8b355d

    SHA512

    9fb95f25b78f7bb5dc41d81717f0ff36a3f4a60d2aadff583dad95be5a63a251e22be1ef3850fc3db5138dd92b51d808901ac72ee1a36e0e46dd299396dd1602

  • /data/data/Mad1sal.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    79cc765177142ddddbe168c0454f3fb2

    SHA1

    b8d4e231d92ae26c2080993fab2cfc95023438ab

    SHA256

    4ce6853a6604c16596749b04727e55e330669de7145ac67eb83ca4559c2eba96

    SHA512

    a56d49d879d865b9f09e54a1061d99cce83eb536c07d8e3a579b82ccc9511e1639fec707e0dbe6c09caa38adc6030452f6897d5e3b40049d1cb45208a8a43984

  • /data/data/Mad1sal.com/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    eb52a90bb70b76e946b62f50b6f7fb85

    SHA1

    42d767b5d1faa7dcef4cb4e1432a5f47ec2e9ee0

    SHA256

    48472f593a3e9cf9e91ee5f7d66dd9ff291bfb247eb6b46778c710fc24e8d3c4

    SHA512

    b356c858cadd14b6ecddf134f1c494c0107a1d36be9387984fc53dcb00e6779d944f058f4ac99d0fc2fe3a427cd1c2921c6fc38ecad53909fc4b5b6f04459b5c

  • /data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    1857e6ebe22fe2abd6bf8045d0b26d16

    SHA1

    03c57284fae0d2852255a35aa067852f5bc69081

    SHA256

    5939bde21b095ed4ed5a917db6402e29ec2a0cd8b1564303e3f93846aa0d3899

    SHA512

    225c07f8e99bf076f239b61902292376e8436b5299a51af21b08979b823a34609005a84c45b01bfe2357b7d85ccefbd65f386423d86522d01273cad4e1e293ec

  • /data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    f397f397d6634c9cddb693fbd2d7cf19

    SHA1

    07f856ef6db5cabb81fe92e9da87abef5bdb4897

    SHA256

    28a6d381ef5c9a67a0c65928cc52abc26053f81bd415b9c35bd74817ba25a66f

    SHA512

    49d8dfde2c045e0ae66c0a2609e5cfeb282a3794b464842818372d5b5cd0e9c545d773517918205a89ba2ab63c38404588c6be19b4362b657036514b8a4a8e56

  • /data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    32510c21a1d7249485c8f0f0bf906701

    SHA1

    b59ff2795048a7e0528df13f969eb1819bc03a2d

    SHA256

    38828934f3bb5c51a4b6d576e904e2bcaa51add8a3c29487ad9998f2b4cb0747

    SHA512

    5779ff3a2fa409621f8666bea818573b93df8b75d72fffa4cf3f658c9128b5ce0b59d22782d5f87fa0b30ef1defcf847b71a5356068c022d1c7b16ee5ba89aa7

  • /data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    1916feac633a2da67564dac4292ef2a0

    SHA1

    ef4c604c35878e68cc5793815889dda9047ea5b0

    SHA256

    9a214a3e96d937d16b7bf4e0c7cc493e3f23bfd6ac7896920bd779817b4210df

    SHA512

    cd0252bfd0277fd249dae59b9737bde7a0b1fd4f177b46e35d5381dcb760e1b7bd9fad057b4ca862463b4a6795c866dea114a3c41f906b7c534412912a7eed42

  • /data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    91e69b3da64957ba57c6e53aaceddfad

    SHA1

    de45906548196cb08cced0cc23f6d4c717b9a50a

    SHA256

    a32e586af6138a71ad9d8f878ba700795641457bedd4984001c7ed8f8d590be7

    SHA512

    d1e4d4cd0f82c99b276726f8e30fbe5fa0738407816a83efd4f08fb80706d72076a2a0827a8129ff2ca8d76447a7ec5051fc210678bca3265ece2f2f815b0964

  • /data/data/Mad1sal.com/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    8d86677e3147a76c9ee5267effee7a41

    SHA1

    54d2943454941647c4f7a8c76a1dc1f48b10065b

    SHA256

    7853291a925314393c04a415a7c00718cdc1243152019f660fc5dbd16028134f

    SHA512

    5e2f9640caaf33d17962093c4c07991d9cd6ee9de1c79b03731a585d7a32f4d88f1b4f0c07bccca67b2dd4fe91f689eb1a16665f35228a182793fb376be3b713

  • /data/data/Mad1sal.com/files/PersistedInstallation3479907061871936511tmp

    Filesize

    90B

    MD5

    995e162f7336fed9f2609c20e23540d4

    SHA1

    4d49eaa8ecf23eadd2e3fbd57ae25875d72267e2

    SHA256

    b69f929aac37b2e4612078fb8c140e27692e56b152b75896bfcf029c30377eb4

    SHA512

    581840365055c8d7150b45178779bb6c755c5d8f2d20328f38b4041acd53e14ec2a3689e1cf5ad574312a42757f6c3e843107097e35610bca1f66050d3801059

  • /data/data/Mad1sal.com/files/PersistedInstallation4107024692136650433tmp

    Filesize

    568B

    MD5

    e6d1b2d4e973356cb5a52004610ce1eb

    SHA1

    1979a5a1e9b4f60b6e9b7e224a0094822cc526b9

    SHA256

    c1d83a9951a3b27bd09b3566e31f06f336148783d279b7ddd4318fcbdb2af5ec

    SHA512

    01ad027c2179c6bbb959600d12277523a60470168ec4e3d2590b489da5e824e7d1ddc348f90b5c9a99aca7f5d9cd4711cd8dd16af65a42404bfceb07c0e04317