7b3bb845b187e0ffb2a38ff296c6bd7520503abc678071a0c9a79337e732b463

Analysis

max time kernel
179s
max time network
149s
platform
android_x64
resource
android-x64-20240603-en
resource tags

androidarch:x64arch:x86image:android-x64-20240603-enlocale:en-usos:android-10-x64system
submitted
04/06/2024, 03:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

8f8c7f9218b2383dac6ff46dda055294.apk
Size

4.3MB
MD5

8f8c7f9218b2383dac6ff46dda055294
SHA1

fd38bdd0d93769916e88dcfd23cbcd7f397f329b
SHA256

7b3bb845b187e0ffb2a38ff296c6bd7520503abc678071a0c9a79337e732b463
SHA512

c2072e8025b993d916d0ea511c53e7aaed31e48a3abb09c3b14b2eeb0e9c96bc3b70155716e2febad2499a4aca2342a809af05597debbb5e59b0e9ad90c07f06
SSDEEP

98304:XqnZCE17cr8bunuVST2G4TqO9ITbJmnp2KaK1+UqQUSZp4+sx4g:6nZR17crtnuqm9Iop2KC67P4+it

Score

8^/10

discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 2 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/app/Superuser.apk	com.restaumatic.easy_fit_catering:Metrica
/sbin/su	com.restaumatic.easy_fit_catering:Metrica

Queries information about running processes on the device 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.restaumatic.easy_fit_catering
Framework service call	android.app.IActivityManager.getRunningAppProcesses	com.restaumatic.easy_fit_catering:Metrica

Queries information about the current Wi-Fi connection 1 TTPs 2 IoCs

Application may abuse the framework's APIs to collect information about the current Wi-Fi connection.

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.restaumatic.easy_fit_catering:Metrica
Framework service call	android.net.wifi.IWifiManager.getConnectionInfo	com.restaumatic.easy_fit_catering

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 1 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	com.restaumatic.easy_fit_catering

Checks if the internet connection is available 1 TTPs 1 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	com.restaumatic.easy_fit_catering

Queries the unique device ID (IMEI, MEID, IMSI) 1 TTPs
discovery

System Network Configuration Discovery
T1422
Reads information about phone network operator. 1 TTPs
discovery

System Network Configuration Discovery
T1422

Schedules tasks to execute at a specified time 1 TTPs 2 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	com.restaumatic.easy_fit_catering
Framework service call	android.app.job.IJobScheduler.schedule	com.restaumatic.easy_fit_catering:Metrica

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.restaumatic.easy_fit_catering
Framework API call	javax.crypto.Cipher.doFinal	com.restaumatic.easy_fit_catering:Metrica

com.restaumatic.easy_fit_catering
1⤵
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Checks if the internet connection is available
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:5022

com.restaumatic.easy_fit_catering:Metrica
1⤵
- Checks if the Android device is rooted.
- Queries information about running processes on the device
- Queries information about the current Wi-Fi connection
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
PID:5080

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Credential Access

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.restaumatic.easy_fit_catering/files/ZPkFS.log

Filesize
12KB

MD5
ab2e8f115d3a752b33387fe974d422ef

SHA1
8a2bb5d9ad05e758c843355f6a61c6ecffe6322a

SHA256
c171d9d50a7d2b8898564ba3acd4b63bc244b557c68dbaa25a7d65af26a69627

SHA512
48bcefb552964e90d5eada30f6d7fe580797d2821bf67fb02ec4db83ec7e20984d8d16fda5799da06aff106d3804fe9920a2b548e8689afdd1b67a43c3450667

Download Submit
/data/data/com.restaumatic.easy_fit_catering/files/ZPkFS.log

Filesize
36KB

MD5
d3a7b9119212e5505ef0dc87691aeb11

SHA1
9149f9739fa660878310050ca97cc5dbb3303f4d

SHA256
34e0f41a9c862930e3d7ef5a2d2b6faeb815da50391d84b50e0c04b8ae706b56

SHA512
2e51249ad60c54910327aaa8283e7bedb447965925b94dd459e8d29c939cc8405ec1e2f75f333c6478b553804c364e9d318e1ed08210bcdd0a2a9c06644202a8

Download Submit
/data/data/com.restaumatic.easy_fit_catering/files/ZPkFS.log

Filesize
512B

MD5
9124786fcebf4e5da11fa3a3d6a5400a

SHA1
21fa7ec8ba28cf12cc6e989cac3f3faa772e653f

SHA256
b2292a73c9fe8df4b6d14ec8fade4ba87a78838ac604d51a7b2f921ad5e9cf85

SHA512
a761158f38b3e064577df2a0e1ae322959a766a6abdefdef7fb1842db65d667d5595470cc584e45651f00154a2cc091ab0bdbde9b2b393f9fb898ee527c6da93

Download Submit
/data/data/com.restaumatic.easy_fit_catering/no_backup/credentials.dat

Filesize
233B

MD5
156290cc96b8165e00284f9e74c72226

SHA1
0507ec0610868ab84b27e11ab221c82b3c7f49cb

SHA256
d0513e307b214e9517bc6051eeb68d167eee0f1c2a673571910ea32154e6d565

SHA512
59d6fc959b41f124ded255b33bfa3bb460d8573376488497d5558acd2bb0652fdb09e37820f58dde2622b9420448d0e5bbb07682f589950ef9ca615e262f4cae

Download Submit
/data/data/com.restaumatic.easy_fit_catering/no_backup/db_metrica_com.restaumatic.easy_fit_catering-journal

Filesize
12KB

MD5
bc950982f882886eb6cc02893fabc3c8

SHA1
53a99975779a4343c462d0cc0eee617dc2dff7c2

SHA256
1d7a4df8283e0ddfa3ade802aee1982089c63a8e6935d52a1870463b9f1601ca

SHA512
1294a59be0008e2b30119eeea40e2cdd33d7472ca4c4790bcaff2d45d2e48ba35c6f080c5d566ad9b33f9a377e4c65bf3c239155447b39fa89628208b690a6dd

Download Submit
/data/data/com.restaumatic.easy_fit_catering/no_backup/db_metrica_com.restaumatic.easy_fit_catering-journal

Filesize
20KB

MD5
3f39716c9163b0292cf3925585c824e5

SHA1
c0e3ba633fc8ba8f9eb7c75acf18febe597510ef

SHA256
b509d509f1e886ffbbaa3a109707a877aee8a2c9adeb890f0901d24fa323c3a3

SHA512
901f3df1ae11cb91ebea0a7774a05c0334fde189e3123c7624c905c92f29f315992503cc4b70be1cfa85bcd31827b0edb7b3dcc5d2d378e814c6ff79e57d1b01

Download Submit
/data/data/com.restaumatic.easy_fit_catering/no_backup/db_metrica_com.restaumatic.easy_fit_catering-journal

Filesize
20KB

MD5
4d9f178dd7bcb732ebfaa10444001dbd

SHA1
da0a70e91ba211589ff06185117a410889f9d162

SHA256
2b3776f123f49bd75b6c9f95397e30fe977a27ca4c3a28093221295eeafcaff4

SHA512
414073f0a08ef0574aa34424e566c83f0e6545ec4e2df8c54a44b65322621db81e94311c21d36a3888e767ddd3eff91796375d72bd5b50cb6478a503b7ae85ab

Download Submit
/data/data/com.restaumatic.easy_fit_catering/no_backup/db_metrica_com.restaumatic.easy_fit_catering-journal

Filesize
8KB

MD5
6924a0b36839aad73c03793eda5a2164

SHA1
c394a80505b3eec03ec2eb7be974c1485f6d4e4a

SHA256
67ab30cae027e06b55e1492e89f9d2eaad20a06e3a93f39a037fc470e3c3cb77

SHA512
a95666003178748e6cdc5ad6746c111ac0f84236eaa987355f96c9cc37a527ca2759db50b0817eb453045d9ca3cf1c2e66aabfa2b753c0b6611177587ca70be3

Download Submit
/data/data/com.restaumatic.easy_fit_catering/no_backup/db_metrica_com.restaumatic.easy_fit_catering-journal

Filesize
12KB

MD5
3c8c68959261972c49aeb24021fd37a4

SHA1
6605e8a3b4f9114c41d3fb35b2da9f691c42485a

SHA256
210b9383acc248a573a16595c365f605121eceb1ef0908565b52c542d21cf898

SHA512
acabac034aed892fbcec8236487398fe87f3d07736febb811b53fc8e4b09d4a672127eaced531c63a2fa8bea95813a4bcaed67009e1196170d6f851a9d8a5c17

Download Submit
/data/data/com.restaumatic.easy_fit_catering/no_backup/db_metrica_com.restaumatic.easy_fit_catering_20799a27-fa80-4b36-b2db-0f8141f24180

Filesize
36KB

MD5
294109301b0f3b7b6e7e4085e3a82bbf

SHA1
42da5aea4e0f8a6f6b4e6bf9572a98c8d43d3545

SHA256
572e13a6df9d0bac81d0c58b04d378f7ea30cfd6328ed07305ebd8f4ffd772ec

SHA512
88bd2923bd9a01b1ae069a48142d7976e017beb9e891634ff8ac5d9feb8b9a6c9277c2a785d3f7e1cb3af4fed922e63bb852ec72f158c12d23953e35c089389a

Download Submit
/data/data/com.restaumatic.easy_fit_catering/no_backup/db_metrica_com.restaumatic.easy_fit_catering_20799a27-fa80-4b36-b2db-0f8141f24180-journal

Filesize
512B

MD5
6355677836d8f04af865c26a586e23f2

SHA1
e8d6949365982f00b399c3c593a7faf9c9ecbe93

SHA256
efa094e2ae7d06bfac0befe97e1a6729e327c658171e9ec39d9da5f0e9161def

SHA512
082064564307d9be9443c4d4d15370a3408c079985b1eca995cf201fdec7e16dcf95940952fcb9b683bfc4fb2fb64778fa5537329182446c5536cd03c6cf0409

Download Submit
/data/data/com.restaumatic.easy_fit_catering/no_backup/db_metrica_com.restaumatic.easy_fit_catering_20799a27-fa80-4b36-b2db-0f8141f24180-journal

Filesize
8KB

MD5
baec534b3e13996b2a48ca6b3732f936

SHA1
e0edd7b630d5cd4a9fc8dd1f5db778c215939c5d

SHA256
e14b4c5907754c53bbfc083ca0d270111397e6788c284a8ac9a48c0b17438603

SHA512
211ba5cb3eaa12d796e93de8f8ad5942a141f377c66f32bba5a5ec6f579bd0c49dc26463cbd9e01153c474bf4196a867227bea73427b939b26e15f51e0b97868

Download Submit
/data/data/com.restaumatic.easy_fit_catering/no_backup/db_metrica_com.restaumatic.easy_fit_catering_20799a27-fa80-4b36-b2db-0f8141f24180-journal

Filesize
8KB

MD5
c89634493af238d836784940ce7ca465

SHA1
d1636df5b2d09442431b3bf0628c6a3d7063985a

SHA256
c7a87176bb0addc80fb1eee6bd523db1edf2e8e1158edebf93215ef52841c2e6

SHA512
245d3755bed764cde65957df53dbebb379682ab310a566dd1cbe53dbafbe4ef86ecc46c18029ea7c01cefa67fe2f3316139ab7317d6006b571313ae7b9492145

Download Submit
/data/data/com.restaumatic.easy_fit_catering/no_backup/db_metrica_com.restaumatic.easy_fit_catering_20799a27-fa80-4b36-b2db-0f8141f24180-journal

Filesize
12KB

MD5
89236634d32e85561ca11bd74573e004

SHA1
75f9b32b7bb100c6b316586c6a9c3f4fca0e49e6

SHA256
78eb31c8b153a55a6bdf23b9c923e363ab58a7d8bbbeb481036aab749b8ad829

SHA512
ce2b8c1325ce87b173ff0a2080489e1388eea4801abf2130a648804a3b476953eed35922c3656030b06f01b10168426145d510c024be112dbe67e1b051c16ee9

Download Submit
/data/data/com.restaumatic.easy_fit_catering/no_backup/db_metrica_com.restaumatic.easy_fit_catering_20799a27-fa80-4b36-b2db-0f8141f24180-journal

Filesize
8KB

MD5
6046b3bbfb25a3856ecb18992c77ea7e

SHA1
3f9ac7ba57944190def4c97fc247449c95180113

SHA256
ab925392452b7e2ec2ca80bdbef1f23e9a769301c95ae62bf14f326f57191927

SHA512
e1ea22a594ca3c3f91e1b6519d7121fd6c7c08620ac58c165287d98e0782157c089dfb0162674fb8d50cdd65a1850b3112c19c215f3ae7f3769eff09f88aee04

Download Submit
/data/data/com.restaumatic.easy_fit_catering/no_backup/db_metrica_com.restaumatic.easy_fit_catering_20799a27-fa80-4b36-b2db-0f8141f24180-journal

Filesize
12KB

MD5
2a3bc5e2abcc4105d30ee9005bcdd354

SHA1
e65bad343e49dd4226f149491498def37292a4c5

SHA256
75bb35955b47329c8e8fd365da07bff89f821ce37ef17ab11798711ea55de8af

SHA512
d6f664c24967dd8e5cd9151f4047142534ad5a0cb92e5d822b813264dc6e92df24178d395b7457bdca63c4d96184610591c1b1645371a8ec8de15781e55d5294

Download Submit
/data/data/com.restaumatic.easy_fit_catering/no_backup/metrica_client_data.db

Filesize
20KB

MD5
2452004c75b5b6c4daf7190b316b6bf9

SHA1
ae9691a7e14580f9a80409759bf00816c762abd4

SHA256
73674f1f9f3b73e54b42df344e2082fd7779812cf1a984efd3cd8b270fa59768

SHA512
9fe3f0c0600fafeceded15d948350a121a8b9845e8f746067d02f727c684e208ebe51b2e994b1509b7d508f4dffc9082ebd557dc7899790760ee4714d62d9705

Download Submit
/data/data/com.restaumatic.easy_fit_catering/no_backup/metrica_client_data.db

Filesize
20KB

MD5
4d568d8e1ca26406d951600801711527

SHA1
4bf2026b45908ce7935655b31c38a15e57ff1c5b

SHA256
96a1ac1c5a60d6241f0385a5cef2a18c9602d749897a626db35019753253ec46

SHA512
0223eade94d0fe7b36273eb1ecf051fa5c5152a044c72a224f4ca46046d6b44074eda0d7fde878efe61322571ed246154948ebdfa089c3a9093f777fdaa85c86

Download Submit
/data/data/com.restaumatic.easy_fit_catering/no_backup/metrica_client_data.db

Filesize
20KB

MD5
8f2f38f927d5078801dd3387bcbacd1b

SHA1
545f5e752fa65a2585aeb469ff73e488fe4fc397

SHA256
76fbb5acdbc47116be3f5567aaed233b580ecef7247f4f7236fe9c74464ebe05

SHA512
58847fb6c6da44cd2f42248f02643fa8a2672e94c318c61cdd87bb79cda67702d5bd3c602b3d6fa06968e365b358f5c54445fe5828d59104e82fb520d8db1b4b

Download Submit
/data/data/com.restaumatic.easy_fit_catering/no_backup/metrica_client_data.db-journal

Filesize
8KB

MD5
f85145081bcb39bcce25556ee46e5645

SHA1
3f53d8a8e3fde245214d95351c45e6b962e818bb

SHA256
6f66fcbe1c18ee35155a16e69d0f533961e2b468904f844d676f6011083390e2

SHA512
b5c646a1194c2c34806491a7cac796cdd102b9938dbf976b07c9a165dca21bc81d90507628fdd978979468fceefa3f93b253e743dbb0c2f6cd021cecf2a31b84

Download Submit
/data/data/com.restaumatic.easy_fit_catering/no_backup/metrica_client_data.db-journal

Filesize
12KB

MD5
0a945d54fb77472713fa6f1e16ff1889

SHA1
e49a7f775816bd6184d1369096ce470db0950d75

SHA256
31505357054aa848caa8e2e28a1b0533a5d0125500840fe99f733a815586996c

SHA512
2c1e61beff52a2fa358350bb6b1b13e606b6cfee62229b0cc578801ad6af53f3060c0591379a346fbda44f9a9f1dcd48ddc786d88bca367bb2482504e24e372d

Download Submit
/data/data/com.restaumatic.easy_fit_catering/no_backup/metrica_client_data.db-journal

Filesize
8KB

MD5
819ffdbc60d362e756445d7c11d73b11

SHA1
feceef1641031fc844f453c6d6520bf8157ea1b9

SHA256
71602a64aa75ddb3a689089dc57be570131dc075f43358fdb4ed38ad7761de5f

SHA512
2e78cc377ae59288c54edbb7070b726aa709ac5ccd8ff4a3ea9d11806322a89a32079d34d98fe9e7688632321abd7c8805af31bec8114f26c353bd99ef3f261a

Download Submit
/data/data/com.restaumatic.easy_fit_catering/no_backup/metrica_client_data.db-journal

Filesize
12KB

MD5
5d0c933c690edd32a50484d287d28e18

SHA1
2201e7c13ebe7bb980771e33086151ab9f366f91

SHA256
ae4aeab18a028aee00c05a151ec69c57f66433ebbb0f7467db18acc67f88807f

SHA512
56e769a7530b6584243ce86d4c303717d51f1a36a42707679f67ef78f991e85ef3af99ff8dd13829e4f24b55af3ad16ba6cdfaf647ba52d4f84138bf556aaa52

Download Submit
/data/data/com.restaumatic.easy_fit_catering/no_backup/metrica_client_data.db-journal

Filesize
20KB

MD5
ac605f3c7f40b1a56c8424b5c3642eef

SHA1
114458c715299d89170d65df9d2e5ecb43881e36

SHA256
2bd0094e8d5b4f756160067bd4f37637b4ebb280cdd62a7bbcec6a991f45aa72

SHA512
89aeaf67407b234557923050b48dbc3a858e7fcbad166f860b7a263a4a15a1327ef0bce3c8cf30df1e127531751eef2a1074e5e082740525eb98831efd742967

Download Submit
/data/data/com.restaumatic.easy_fit_catering/no_backup/metrica_data.db

Filesize
44KB

MD5
2343e23abe35ed6c76cfaab3c15cc0ea

SHA1
2af6e46aca03198768f6901fdb73e73d0a3a3e46

SHA256
e6dd6d9f34ace65a11e2b88b81afe0e19581dabfb4503e6f1549f5c5852924f7

SHA512
adee455d5bab599089e5b2e8d53a6472830eb3bffdd332245e922e02c60ee96c04782aad3faccc82d7566f85c7694823f51f3aabc56e539896663273e1b3ee65

Download Submit
/data/data/com.restaumatic.easy_fit_catering/no_backup/metrica_data.db-journal

Filesize
512B

MD5
5cb168727cb3e5776dc79cf3e55c89b7

SHA1
ce5c6622bb1ac9d1372d308a9884955359f01629

SHA256
ba2488d91a5e958d533f0a23852f7dd7418a383419f4922106d1b8786961ba07

SHA512
1add48013ba72485336740adebc1a560b17d07fa7a5808940bcb433d74cb5406b0c78768e9fd0fe834f14a5353f568e5271e8233a10e4b21ad8bb858dc4f63bb

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads