Analysis

  • max time kernel
    179s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-arm64-20240514-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20240514-enlocale:en-usos:android-11-x64system
  • submitted
    24/05/2024, 11:52

General

  • Target

    Swan.apk

  • Size

    5.4MB

  • MD5

    75fa67db2cd5e7c88b886fdfac2695d8

  • SHA1

    3164e5e4f46cb28c88c2aca8c4d4067cfdbaa7a0

  • SHA256

    697ad48f24bc6c7e77f694a3e304e0c770d9fd4ada51950401f659d2b14ef730

  • SHA512

    75e1a54a597d84e67a709f2ae99d44903c69851c4fcac3350363b6be07303626bc60a6939eaabd07072ffc6ede59084866ac63ddafe0fdd2736c7e2e3f257175

  • SSDEEP

    98304:+eKtWXsRA0zD75JqMK1NamV18Z6ff/rSLKf9GJkFjnRbCQcDnCmH4:fKssrznqMYMmVaZ6fnrSLO9GJkhnRbhD

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Checks if the internet connection is available 1 TTPs 1 IoCs

Processes

  • com.my_fleet.firebasetest
    1⤵
    • Acquires the wake lock
    • Checks if the internet connection is available
    PID:4629

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.my_fleet.firebasetest/databases/app.db

    Filesize

    24KB

    MD5

    05778fb3a2b280b9528a2d95581e41cc

    SHA1

    161fae593b14abfbcd9c0d53af2aadbb025d2063

    SHA256

    f2fc8ad4c7007664f9994771b953262b034524e3bbcea06803c2cb27060882d9

    SHA512

    8f6978eb1d49e01b9f1a4be6730efd658db831d475929b84795d27da3a2b81bb5f8153c0ea1e0534180593eecb437d2cc18e2d49d63411d36dfa8b7969163555

  • /data/user/0/com.my_fleet.firebasetest/databases/app.db-journal

    Filesize

    512B

    MD5

    84d1265f97ccf710a310a5baa6ba3e6d

    SHA1

    e71c58a8374deb3cdc2304f48cd7e7ea67edc654

    SHA256

    acf1a68351ef1b7c925307b5c321f3212ccf2c8e0e7917ba99a805dc0d2587c8

    SHA512

    e024a04f0fe05abe9876ce960def96f00cf38049382595f53040d2597dd1a6659cc45cf71a6750d2e7f58bbf82aa5d7b903005dd4cd13a546e75104c2c0b4588

  • /data/user/0/com.my_fleet.firebasetest/databases/app.db-journal

    Filesize

    8KB

    MD5

    4c6cfb501653315289524c701e11c64b

    SHA1

    f8d659573c158faa83deb9cd751a581b13633514

    SHA256

    d94c6c88929b1cf4f34e0d6f4d5af5018dca16e9320b0f29a2571e6f097a57ce

    SHA512

    46e2b121236f81defb56f552a3a25c87bc357fd4cb0aa597bbfaa91684f74a546636cd37260c9ed5f11fa1d97cc2aa0ab52d1fe041f8b7faf88560f20db7f055

  • /data/user/0/com.my_fleet.firebasetest/databases/app.db-journal

    Filesize

    8KB

    MD5

    580d4af39ddd2a55d7d9ccba2385fb23

    SHA1

    6bbab22a96b8bc931d799e8aa55490baffbd7b0c

    SHA256

    ab0788557f7626a80821eebb62bb4f243e0ff36b9d963d083e0e34bb2ba79de8

    SHA512

    51516a665c63148cb0ca9a4a566c63f4a099376f8a6916b1d1ae5a803275acae6d7d67de9a10aac4e6f4cbc3ff40c59313ee67887e3f681024cb51d7400d42ae

  • /data/user/0/com.my_fleet.firebasetest/databases/google_app_measurement.db

    Filesize

    108KB

    MD5

    978214bd21ddf1ca2b402293607fdf37

    SHA1

    649f4229509e2faeb380121a7f4002261b33c3fc

    SHA256

    77f8771975e7adee9a128d8bc92571ac41992dca154d6879c8bae9ab17cd5e28

    SHA512

    b49602a9cd985dfefa5f19dfdc5828a7ec3c945d2c60e79c12cfe18e877c0c591b54cba029918d8ac15cdb6378d9c3ecf324f6fc22e84e0f0fce679370ae61bf

  • /data/user/0/com.my_fleet.firebasetest/databases/google_app_measurement.db-journal

    Filesize

    512B

    MD5

    482f9f20fe33e7480496338235b47fbd

    SHA1

    8932fe2e0377758c7991188eedaa8d72c697db75

    SHA256

    2a2a891e66292c1424dbc448d352cda8a7c4456536cd42c65376e51b32898524

    SHA512

    9b624c5389b200fc928b876d9e39506824ceb7460d0977b2be417552d9c668fdbfff93919ff7a854d1c70898ae2761d41f1756a68e2cb8f64864d9daf8b53795

  • /data/user/0/com.my_fleet.firebasetest/databases/google_app_measurement.db-journal

    Filesize

    8KB

    MD5

    a519f00bc6ea3c8015c2f477ac593fe9

    SHA1

    5a0bdb651ea2c43ced35baa764eaed6792a381c8

    SHA256

    1c8b3ed1669aeb686c42191a4292eaf4ef174aa53ab172897b6ecd7be315a80c

    SHA512

    6b97af5f68a55a546516a43ab101bcd303d7c01ef12b1ed47c54cf69d87c8f652d2f4a29f374c47b89b9ba1d6f36df240261a4901f978db6aa004e1ee68fd47b

  • /data/user/0/com.my_fleet.firebasetest/databases/google_app_measurement.db-journal

    Filesize

    4KB

    MD5

    1e00a0db11ef023082e4e8904a3f25ee

    SHA1

    da1df196f88465fa2e2eda2751e0693a018a507c

    SHA256

    7dd2571f7629eebea1d7a360b64101c4d9ec0e6cf8e77d8ac1bf367f88342caf

    SHA512

    d3039fe04dfcdb67d874f928aa8feef22e25a5c1c94d1c79209ee09343c29ff00e851ab5de6ab085df14dc82bc8a94bde71dfbaf71ed4c0b98e2f286d9a495b6

  • /data/user/0/com.my_fleet.firebasetest/databases/google_app_measurement.db-journal

    Filesize

    8KB

    MD5

    3318b6d789cea1ea095891d052246acd

    SHA1

    1a0024f808cb5f6fd136f27948dad1ad03004c4c

    SHA256

    a4f3b0192380906d89652aa582f2b1c3d7af990974abb2c824734ae03006d185

    SHA512

    220e1693d27619b2367da91be66c12d3263f8bf98417719394353b34dbcd222a176b6118bc01f27b0132c9118e18702e0af869aa0dfebd3e90925c0ed03e5168

  • /data/user/0/com.my_fleet.firebasetest/databases/google_app_measurement.db-journal

    Filesize

    4KB

    MD5

    fe0306a896d978ce8951712f5f86d27b

    SHA1

    2a2cd083015fbaaad1732bd39630de9c34d305ba

    SHA256

    4f9ce0ce5667c90fea59920a1ca24be5ee1601f65722843f60e3cae4c512852a

    SHA512

    09895ecc57bae434781f1b1572d923f2277de05db4a19c85ac4dee064727d9b3e4c6502c1b7843d43c0c7c5e20fedbf3c3237799d306d0ace652a407ce334402

  • /data/user/0/com.my_fleet.firebasetest/databases/google_app_measurement.db-journal

    Filesize

    12KB

    MD5

    d2727383a5484790f82b31204de7e72c

    SHA1

    6a5cfc5991897b8880926f9fe2fcf7c754bbad06

    SHA256

    ae44fb5ff113908a101f55872db1ca4aa961766bcac52e846df9cfd816b35d62

    SHA512

    6761e40f0c404dd2a863e779ce7e728c873a8e7ec2915092a2e799a4b042a46879038fbbcab856f1818c118b0966445640df4c2e7f6c0590d6f1f31315be1eed

  • /data/user/0/com.my_fleet.firebasetest/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    f70554f12f8f6f6c9144b56d74f15bfe

    SHA1

    9385f5ce9f807e852df4f7361ea84c847892fac3

    SHA256

    6698af765db87fa382cb9e9d64371d79bb8c2b6dd9813270854de0869ea888b1

    SHA512

    cbe8675ff02e704b9ce5a2e91fc726ba8924280520b09d182b06195eeb44e168e77a3faaf6df409e2337f7c4250ea3f7ea138f2fd85ea8c8ec9d983533862483

  • /data/user/0/com.my_fleet.firebasetest/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    45ddc075a0707f19c1c0e0fe4a746327

    SHA1

    89ea3c3a9d62509f16b9b5b38a6bec2f53f527e5

    SHA256

    9f9da7882e6b8d110bb73856507689a6d9a72499e5e976194bbc9cd8951c77d7

    SHA512

    6f6c5a907cf0c997fe21646baf85f5a17440c845719532d6a33be3ff77db3a265f9b4c059653d316d8be2e18e5954b458a31079e1b3fdd9cefc9197d8ea3bed2

  • /data/user/0/com.my_fleet.firebasetest/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    1007808aec4e24540702637787053ed8

    SHA1

    ea9514cd872cafb1632737dc3edc61f80657cb6d

    SHA256

    cdcb16906d3009562513668183b19a6aa8ad2beb48d5be709e0350447dad0762

    SHA512

    612d8e5c8b7561a859aa863e93fd3932fb9317736264f145f884cfe5bd3b7031cfdfa2e749d05af043c56e63743e900fb80af295ab5e1637c396865bfb98ee90

  • /data/user/0/com.my_fleet.firebasetest/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    3b5010f9dbf68a2851365b397afc1f18

    SHA1

    178f993ddc5bcc402a344a2072c46e060689bed1

    SHA256

    357c94e707bf95ee0eae41aa692fd2363bb2dfe6c2668f17e957996d86797cce

    SHA512

    805c4c6b1606c5362473d84b05d005126cd3870c8e04ccf877023f300cac7e766089cbe88e51d7f4cb2492df7e8db10c5e95d7297692d09ac975d07532fdbab0

  • /data/user/0/com.my_fleet.firebasetest/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    9b71485d075ac766e0778af8ede43d8a

    SHA1

    a59f4b5d0615ce8bab1952639ee807ea1f8ba53b

    SHA256

    e3965a79035afb167860612c686b5f15620b126ff90905aa898b9b87c6efb069

    SHA512

    1a7e84beba26ea07a752f0895e6b0b8a405585216c659440c0e7163a82f5b2fce84958b0bfcc61c611c1858ff392626c3b5f35cead29348414b9da8aac8bdc26

  • /data/user/0/com.my_fleet.firebasetest/databases/google_app_measurement_local.db

    Filesize

    16KB

    MD5

    7be5e57795f2fbc3f1e2487b4833d260

    SHA1

    eb81718be0ef89167a8de0251e492ba2278b5540

    SHA256

    482988630a9f68e7cda2f8e9b7347e4519e433c000ddc036b0234a85db1bbec9

    SHA512

    63aecba8fa31402f9731ef7f5499be25625093d2504ac8f738f0aa063244b14e8fc0c3fc958fb60beaf2d984f0f37755225f4e3e491e77229970afc059069b74

  • /data/user/0/com.my_fleet.firebasetest/databases/google_app_measurement_local.db-journal

    Filesize

    512B

    MD5

    e71bd4a6a787f404a6381e97f72cdf7b

    SHA1

    ea50eb56478bc70f511c6d72732ff89260678064

    SHA256

    fb394febefccb8b6d621f1a7d6008e6f4eeb60c5867b374f80445f61a12eafb6

    SHA512

    fcb4c1b9213c9409f64325637e968f42c3d0f11869d4713cef697f7e2cb221cefbe7b2dcefbdbd35824a5117efd66dadcb0a77f01d99b20493cb5bd661fbc10b

  • /data/user/0/com.my_fleet.firebasetest/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    8e209abd91950ef0bda927059516a3eb

    SHA1

    ed86c3166b8f6f80bf5e98436c65925ec66dee83

    SHA256

    ca1ea8c8e2bfc0c3397baddb22be73b6718df3be80c7204f158d9af2ab244b1e

    SHA512

    644ad560ec809f3265a90068a2278164523ff82c088d0d242c3e42775b0f5b67ff24ab7be887464a41ca196715e31f4795082c2c7615466da7004bc6b5157f44

  • /data/user/0/com.my_fleet.firebasetest/databases/google_app_measurement_local.db-journal

    Filesize

    4KB

    MD5

    ea5aa35d3f75b1c46726b7591ad261ea

    SHA1

    8503e94851ced4937eb7ed7de511bccc422a6114

    SHA256

    c820f47a36d87367427362a9973fd8dd906e70e042956c09337cc23fcea46ccf

    SHA512

    ec0a3af1e45559c5aeb4e0a20ce864a6f95084f74b3c3180cbe9529b27c577f078db5b2ceeb2d3286c9351578c6e11ee7f67d3834e062459ed59cff86c7dbcf7

  • /data/user/0/com.my_fleet.firebasetest/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    206676d06d5dfc154fe4eea2485be2dd

    SHA1

    0c68e0cbd744cc15345a6aff67cb5bff29fc82d3

    SHA256

    d88c7d03f1163d02a5e7636587aca3ea3b2d37d02c57ebbe5e71de56968fecb5

    SHA512

    39c1566b1cddd90db36e76bca3306063ab9e63845f095aa1b51429f77d3501edbbf5bf4b5c721bd5ea8770a68606df8c0a6caaa626c31cb57cf41742183180de

  • /data/user/0/com.my_fleet.firebasetest/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    bde2f2fc2a53ce2c8ab3d82619c52605

    SHA1

    8bd103507ccf271293d13d7ef8649bec730dc3a0

    SHA256

    0f237aa88cc0c03a03cad8a353eac74d6ee3a15d48d60127c5e08f4ef049987f

    SHA512

    e1f0724bdc209994549b83cac4426352729ecc3825b01a0726e039f6506f2218f2c0f61b7348907a1b9668b12320b088f91f1776f7a14aad80e09fb7573ec49f

  • /data/user/0/com.my_fleet.firebasetest/databases/google_app_measurement_local.db-journal

    Filesize

    8KB

    MD5

    0f2f39144af2b2b3b964b89166ee55ac

    SHA1

    6260c3ddb1d8005f867d0678bef260752009e28c

    SHA256

    10e8330800565d56c529abe3d777f56d00370ed58f22824968bb2c847b74c753

    SHA512

    600dde594c82429ae9c9f1bcc6edcbb4c018694443251a3194f637ffdce0c7883f85972fe248bddfcfa2ae4b319d9dff8152fe6671265ba135ebef997b880ce7

  • /data/user/0/com.my_fleet.firebasetest/databases/swan-7ad89.firebaseio.com_default

    Filesize

    36KB

    MD5

    c3510a2f358d17c2cdde5ec5a99a5385

    SHA1

    033cbedccade6a83e2f1f7ac15842cf39d599e81

    SHA256

    113ba571f8894691766061803e8d9269b671b6fcf06f8f353ad2ec01ba1dad14

    SHA512

    4e06694f48818a1861616896f9cbe35705abc960950d8c6f3ff72acfcc2a53ef740d53ff03395910c640b3c69c69354804f1a982a0b6477a1aa4c21a3577a2da

  • /data/user/0/com.my_fleet.firebasetest/databases/swan-7ad89.firebaseio.com_default-journal

    Filesize

    512B

    MD5

    c7c8565e47bbeaefca8d056683d445c1

    SHA1

    af1679fec08e8f1eb7f70da209770dd50bc49c36

    SHA256

    bfde8072f8a9a7554466b470fd146ffcdf70440406eafcb99ea6b4b55a0de815

    SHA512

    d789cecaff800d587c04742c89100a82de83233589fb2979badb84189d20a8e104b61c1d828d614a7f6ea8342cbf55b6857df719c9451cde8b52b6f27a0fd6b8

  • /data/user/0/com.my_fleet.firebasetest/databases/swan-7ad89.firebaseio.com_default-journal

    Filesize

    8KB

    MD5

    8859365b6bfde4acf8ce37aea18b5d00

    SHA1

    77d65e5aacbc049b9493a17f371ad29f7767bbcc

    SHA256

    b6cc6c103b08af464ec74fc7a7efdf56936f9af55aae55b8d9fa21a476f0cbf6

    SHA512

    91ba51e005bb7e6a82fb327ec0dffae0009e0a70512fb928ef6ad47aa6f8cf905b6fbba17a048e0ba55832469761b0115f6832bf93f3b86a08ec9f928e8cebb9

  • /data/user/0/com.my_fleet.firebasetest/databases/swan-7ad89.firebaseio.com_default-journal

    Filesize

    8KB

    MD5

    2a4bb2f9d1c8b297a74b069f05285441

    SHA1

    a092194e76af75a9330f774a00444367e2296699

    SHA256

    a1fca3fb54236a78bae0a95c0bfbff5b51041d67f5f14ea2f2723772cda1bcd5

    SHA512

    0d9f72e89e611dd68c21c8fdbac1df805c3981e5be8849156ff3aee6793c519f17ac3a35d8e3186b3c6eedf5141696a01a3e57d517290a17c5da676d8eb593e5

  • /data/user/0/com.my_fleet.firebasetest/databases/swan-7ad89.firebaseio.com_default-journal

    Filesize

    12KB

    MD5

    74124b3abfbab7fdc47526e870345b01

    SHA1

    78ab61b82a33186ba1eeb78512ad27fb47f141d6

    SHA256

    e5c7836d25668379ad762df85d736a885951edf42a03f2a6896c116289867c31

    SHA512

    90983dcfe13ef0a5f4537041aed445b77e411eb3c572be6815a3aa2599a833d16910ea6347376f993befd989a1854c1dd1cd3868115d946995db28d0083317eb

  • /data/user/0/com.my_fleet.firebasetest/files/persisted_config

    Filesize

    1KB

    MD5

    b61d565874135ce67e5ad43f69b20772

    SHA1

    448633678a6442272f9847413c8ed790790cc2df

    SHA256

    2cbabd5efb69b0be78055e841a38e17b7ab48a98e702724c2e521fd9e7b92aeb

    SHA512

    375c1cf04c3e69dcb3690ab54bd4a221df549636edd42e59d2f1fec031b15be4caaf02737460135f8e5a989c9b062861f323ff970b494179499dd1ba475798c7

  • /data/user/0/com.my_fleet.firebasetest/files/persisted_config

    Filesize

    3KB

    MD5

    d9b49e0b0878fcba10e80ef96519a955

    SHA1

    be7eaee347c24b7a7ecbe89ae367328c6bc4de2e

    SHA256

    5b694efa9ead6df4e32607482272da9340fd8c268577599cbe81a203be182761

    SHA512

    e44eb1913eb90e6b534da2e2af6baf951f54c26b3f218be24b433c702efe2652fc76744deda8dde27bfe23d6d4553f328093a6e7e5cfa2cd4b7bf78e708b1f51

  • /data/user/0/com.my_fleet.firebasetest/files/persisted_config

    Filesize

    3KB

    MD5

    8fcfa98f8c77510ac61f699f0e781f5b

    SHA1

    9e89a2ad0cd0a5edd6cf10f58158d957b992d3f4

    SHA256

    befc40604f698dc72de04daf03574f542eff68bafff84249de19999f07bb4542

    SHA512

    b839e6b10b7696f0a1fdb02983aac179fdcdaf971a73f3e8a6284e16f94e8096b3cfd7ecbc94a9ed061fa80a9bccb99313a301bf7f00503f69d7f330112efcf7

  • /data/user/0/com.my_fleet.firebasetest/no_backup/com.google.InstanceId.properties

    Filesize

    2KB

    MD5

    a0186a5659f6ffc8229f92da5cbc7517

    SHA1

    42df6beb86e61dea94478ddda073ec63f40777d8

    SHA256

    0cf951dd23bc0afcfecb93bd98a977e61d032077d62953b09cab11605faba358

    SHA512

    ed2d7d046aedde121bffec1b475240c11a39e875a326a4bb07149deb7aa9ff48766ca8994a9ad40488845d952544daadfe8e1237f9a25fb0e849c7480b144ea6