Analysis

  • max time kernel
    9s
  • max time network
    151s
  • platform
    android_x64
  • resource
    android-x64-20240514-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20240514-enlocale:en-usos:android-10-x64system
  • submitted
    22-05-2024 12:09

General

  • Target

    APSaler-3.3.0.apk

  • Size

    2.0MB

  • MD5

    67f9634db7a9a7a488f186f030c4b299

  • SHA1

    ea646bf04f2787e39e341899dbc2e51d4a0f25cd

  • SHA256

    73583025ee089ffb129211c089205cbfe3be7f7931e09cd52fe341a6faab1e9c

  • SHA512

    8411c6f27871c01a39879f9e1cd9025883f4d560ef6d18c2935ac4a20fa2c22968c042109aca4ad4afdae2ff51e4e42762e14fa8dd01677a2969d7ba74d50120

  • SSDEEP

    49152:xDAx98bKEUNYH6xDCDLdqHrDA6QNdKCEimrJxsg6NSUuyLUHmcnhJcXNqv96GoR1:9Ax98bJUKH6xDCDRqHrDA9NdKCGrJxSf

Score
6/10

Malware Config

Signatures

  • Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
  • Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 1 IoCs

Processes

  • com.ap.ap_saler
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5097

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /storage/emulated/0/AP-Saler/etc/registration.key.txt
    Filesize

    56B

    MD5

    f1825c3675792568faca0b753fbd9efe

    SHA1

    617cd34702dffdb307e1532edea19f5fa02fda59

    SHA256

    ae8bd2bc284876ca7dce61c0a6d5c416dd3b3b96f0bd0b83c88fa97595183b02

    SHA512

    c47599e6bec4f878856282fcc25d7a373775f030cbb2ea1f893e74a17066ef4d9f2c525e9b574197c45964bbcf0845c606b07a01e426461edb5aaea6c479ba1c

  • /storage/emulated/0/AP-Saler/var/APSALER.db3
    Filesize

    312KB

    MD5

    d4c6847225573594a1100ea912e214c0

    SHA1

    e76c263fd14680fb9039fe368fa2b0e09b12c280

    SHA256

    81ded896d27f90148a80c5cf7f2f79ad321beaa37a03fabaad04d335b811d749

    SHA512

    de4d356722f6d1d69a21fbe72e36ad88eea914f914163c1fba563349010e7b81af8aacc1c1abcecd20535b32f188923ccfbb2b24a0c4973b8219e11beb37b62d

  • /storage/emulated/0/AP-Saler/var/APSALER.db3-journal
    Filesize

    512B

    MD5

    a1db24e627f717856784b4d1746c6d4a

    SHA1

    cd8b151f00de23e1eef3840a4425dde4077f5c68

    SHA256

    a3846bced29c45bec360b521ead0da580f86645c6642a55f3e88290d3c9d2f45

    SHA512

    0ef72b26a4874e80d304dfb1241ed95eacdc18b934af443311f9833a7edc4554b6eb9bae0ef5b15f69eb62c6616aba20f9ec92e94f7c83ead75c6c595fd31307

  • /storage/emulated/0/AP-Saler/var/APSALER.db3-journal
    Filesize

    8KB

    MD5

    2116de53fc8a55d4c300f24f71ca1a97

    SHA1

    9a2b84c27f4d2cafb1b1c610ab3941f7859cb66c

    SHA256

    3eded358fcd8a62e3288868c8cb1949992ec29521faad382753c8835f153902b

    SHA512

    346d2e8da85fa79f8c759028a4b7183044035b88a080b19c902153388e00c04a5da828fa1dabcf113dc6285db8acb482cb6f60beccdd96b5eee1538fc1dab2fe

  • /storage/emulated/0/AP-Saler/var/APSALER.db3-journal
    Filesize

    8KB

    MD5

    7be8f75094975ee40ae5ec5b5afff737

    SHA1

    9337302cccf1c6c9f0222c5e9cfbc3d0e72fddbb

    SHA256

    54a5e5db7265e87a293e33270fdaa72b312cd4c592af1346bfe9013c5921560b

    SHA512

    d71bd15b89641ae7be4e9ba9ad82afe5b423ab8c2b969bf864ec63e7aac3f35ccac5761ccda7361c7ebf6ba5d19c064e00fc2b6642d258f1a6ba0c7d9932f347