Analysis

  • max time kernel
    16s
  • max time network
    131s
  • platform
    android_x86
  • resource
    android-x86-arm-20240624-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20240624-enlocale:en-usos:android-9-x86system
  • submitted
    06-08-2024 08:53

General

  • Target

    f65bc95d577560ba71f654849ada703217b430f5e8f72a98766a5150d01c1b9f.apk

  • Size

    47.1MB

  • MD5

    4c0c48e81db8a6d04b0a2f68b2a45726

  • SHA1

    623ce25033a0dbedc713541000b7f9a270984abe

  • SHA256

    f65bc95d577560ba71f654849ada703217b430f5e8f72a98766a5150d01c1b9f

  • SHA512

    4f56fb4de87a2d1af0bb93d3c330ad36bdccaa2d1584ed782a1801c246ef6ddf089131a82a12d649cc0fe9d60ba57fbbd4a511cb3c6b1d264dda04b1e12701b1

  • SSDEEP

    786432:HHUUXXPJ1I7mcxAYiWwfNvOQ3Vhu0TIJHOerY4bd3NEC8p9IGs+mYTVP6+Vr3PHO:UUXXPmmi4DfN93O08dlr1bgPp9DsWToF

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Queries information about active data network 1 TTPs 1 IoCs

Processes

  • com.pokemod.app.public
    1⤵
    • Acquires the wake lock
    • Queries information about active data network
    PID:4265
    • su
      2⤵
        PID:4301

    Network

    MITRE ATT&CK Mobile v15

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.pokemod.app.public/databases/com.google.android.datatransport.events

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.pokemod.app.public/databases/com.google.android.datatransport.events-journal

      Filesize

      512B

      MD5

      1cb9b6e12b9da8049abcc0ab56e0285a

      SHA1

      fd657a7a388901118259522b0f194ff15e7654d1

      SHA256

      fbe7c34e1bbf406c262f82254d4cad8d4fef0fe653a6924fc277c70f8cbdf462

      SHA512

      12e8f19aeed885ba535a410296ef25baf92099c6e88010cd0a333b410104e644fdeacf5134a0677604035bda94ed9993a384bb1190fd7a2ff0542e9b1f4431a6

    • /data/data/com.pokemod.app.public/databases/com.google.android.datatransport.events-shm

      Filesize

      32KB

      MD5

      bb7df04e1b0a2570657527a7e108ae23

      SHA1

      5188431849b4613152fd7bdba6a3ff0a4fd6424b

      SHA256

      c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

      SHA512

      768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

    • /data/data/com.pokemod.app.public/databases/com.google.android.datatransport.events-wal

      Filesize

      52KB

      MD5

      b9e5a6d29a7cda49fe37c20e92b91959

      SHA1

      e952f19e8f740c423fe279abb89b22d9c0e40f24

      SHA256

      48d22a7daed6149d77f63112d985dbe71592b5f8b5868c144008408cb1ad2cf2

      SHA512

      47eb2a542ee17611b72695eec6e0eb6e470e7befc9657c699fd99a537d79944b91417607ec550861072129b0ade3f758ce47c0140739922a74fa97828e5cee5b

    • /data/data/com.pokemod.app.public/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      6849b0aa86c37ca34807a0e03698c96e

      SHA1

      0ea6a398a1efdb2b892917ba777aa34a29a731fc

      SHA256

      7c2f6061b31f0ec3e0d38b7944b60b3a1753064a4b834cbe2f84096c6274837b

      SHA512

      35a5b1ce57c17337028ebcabe86e25c276755c978d49bee04267bcee7a8919214b3bde29defafb2cf15f8ea325eeaa9b3480fa2b3db84b1f66e13c75fb84ad1e

    • /data/data/com.pokemod.app.public/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      1f7bffdb08e4e4fc1a46c354f8c7d4f9

      SHA1

      b81de8f614b98011844a17cfacba5aaccd217f93

      SHA256

      20638a591ba0b6ad3f020726bd73168225240d2f7ea517751fd53bd848f36e05

      SHA512

      12434c4a29988db77a3870b1348960c06032d0e8af02a8ee4e4086de78171121baa8c3d30abf30b9d48afb7cb396102d34a9236e67ca23d4e376a9781a20da20

    • /data/data/com.pokemod.app.public/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      84e0407981de9f03d0cf25010a400381

      SHA1

      8b80d463810a7c542e0ece6cbfc0f20d1bce47cb

      SHA256

      f25bd41efb66535f9706950e59708d76261299c96fd6589ead37133fd7e7e84b

      SHA512

      7457a24f84a4409e06ba8d08f7af1b6fbbb82077e93f181ac0d53af0981e2ddc82cb092985b0f1d27f1f6fb40cf7a2aed5aa21fedc1f5509c9e0a281e2215588

    • /data/data/com.pokemod.app.public/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      83320cee2100e34cb0723cb5375ae26a

      SHA1

      8802a50bc46a1f058141f27c0c079ba6b7c5993b

      SHA256

      f88e1234645318f1d081325eb0346920d724de6db4b42249cfd68dc71ac75792

      SHA512

      324db7cb460582d1f95be01a2c85f6b3af4264f9e0e63f43b097a141608f1ef4ec9238267ddb231dca935910b51ceb1e2900a9edca2fa455a203f94c0463f385

    • /data/data/com.pokemod.app.public/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      44693692da738db6eb133cf0e4cde91b

      SHA1

      e6bda56494c325d8d37ad89552263ae85d9b0550

      SHA256

      8fe0ac9db76d4a2dcd3b3d54c0efedcd223e25aabf716506493d50e243a7a2d4

      SHA512

      b34ddfe1ae343b1b12f7029ae476a0ba8e1b4043ccb520afb412b3f71335ef679bf29723c9a5c00af7e922e9982d5b3af54b2ed779da8cb601f378e5b9d26be5

    • /data/data/com.pokemod.app.public/databases/google_app_measurement_local.db

      Filesize

      16KB

      MD5

      7237409e0640cfab7bdbd429bf821a3b

      SHA1

      4c3da934842f8d4835dfe2a9c275a300e5123309

      SHA256

      5c8e1b63d187efafe1e09bfadd83fd360176d689b57b5a0cc40e6854c12449fa

      SHA512

      c8afaf6a8ee43ce3601feff417bfaec563c01bcff0aae24577054034112b2020967f25b0b1a919c3c9e5e81d62a21a87e908b782c4d5cb8bba8ac259108e9c1f

    • /data/data/com.pokemod.app.public/databases/google_app_measurement_local.db-journal

      Filesize

      512B

      MD5

      65b9366df1898feec3d2ae91a3e6aaae

      SHA1

      4892c05620387f9373d3d7dc9f468925301b99c0

      SHA256

      eec1c7dfb41db0382afaa30c55b8ddd786993396a631989f66d24027e2035b7e

      SHA512

      04b682cc2a9404e14b2a4eabf484ddf73fae966697669cc9d73711e5dab290f09cd24063cbf74e873575cd03c05d65f041e22619b1de4a0981e653783d56de90

    • /data/data/com.pokemod.app.public/databases/google_app_measurement_local.db-wal

      Filesize

      36KB

      MD5

      3ff5768887d95c6d564560725688b89b

      SHA1

      37881ee8acfbc642e87885850cc9d3672769634e

      SHA256

      f254946f41cd15eeafe7c268ffa75eda988a6ecf629e938f09c4a683e5dc1574

      SHA512

      33557f8540a794df31ac3267097b18a32b02ddb24719f1fd23e971efa22f6a1666567a07970117ace928593a6a2f4b689471a154f2ff65660931aadafb231a78

    • /data/data/com.pokemod.app.public/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      5949a215853767d8e369cb4fd636fdbe

      SHA1

      07a306135607d550095cd128d8b442908044f80a

      SHA256

      0feb9746466b5aa833bd19ae75baae1095482e7a0a032e730816c0931783013a

      SHA512

      edc377462eef633b9484144be11599f59d14f5d24d1c360daae09ca99f7057e9e0095ffdcd16fc085dc641b26c16c71509054f496f5579f691f0e1ed99ee553a

    • /data/data/com.pokemod.app.public/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      72a118934e443a218f2124e3a9ce1067

      SHA1

      1a6362906702e14b7a2f2bfe979add23f8f62ffc

      SHA256

      aaecb7c873def9545dcbe698c5e821cf1cf0d0caaebf630e4884e08c8bc3b871

      SHA512

      6f6abacef05978dd2ed9870548494ba18cd008e8b36202aea75d87480d07d79925b7359df80a223632b8b6065ba23fc072dfc0e2a6584f282ef8f00cb262201c

    • /data/data/com.pokemod.app.public/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      35eddaad123ea65500b5e8e776e91eaa

      SHA1

      d72154aed6ba93989e0e795f7930f88ea8423ee5

      SHA256

      0a1bd2f1dd5061e60c146636cc660e7d77ad8c21ec33a4d01853080e9a1d6d3f

      SHA512

      2a20e410f42d447efd1910e6ade2514caad4e2e3f0c4b40f4ee8d7959aa947ba046e03f685650ae52a3615875a8be76d54083c793ccb9d6de5004b143357748d

    • /data/data/com.pokemod.app.public/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      7ce38b79cbbba665901d3c5b489e731f

      SHA1

      9ba8daf32f33edc06188f077c3cb5e937a6bac78

      SHA256

      3b4d4193d7c5cceb0ffae2cd02bd474d0144be542f172e8441e870041e805506

      SHA512

      0709d695dbea3ef52b92c93cb452f9fa06355d08b0b5542bd51b4636c0d2822a12a3b615209273b9c8f243e3514d991945c527a5ffddfea9a2d4d3f878151566

    • /data/data/com.pokemod.app.public/databases/google_app_measurement_local.db-wal

      Filesize

      4KB

      MD5

      526c4ba969046229ae2e66a89d4b42d9

      SHA1

      61c01572f7c339b441d453a2d3aa169a82ea9369

      SHA256

      c92ae474958b5a30afd965c1968bfa751eb7716da3e5614d77e57b4965aa03b9

      SHA512

      422bd8d26ab3a60669a07e8a909f729180fae22d41adb0a8523799db91ce9dfbdc6bc45f167b8084c92958e9a8757639045125f88f7cd954ea7acc4f98bff9cb

    • /data/data/com.pokemod.app.public/files/PersistedInstallation7333164411987575367tmp

      Filesize

      90B

      MD5

      d2f6840e7f068d13b8e93b99800cf1ac

      SHA1

      20ef7d4f5ce39f0a692c76e0221d69ff53cd7d91

      SHA256

      91d3677a06e994595ec1464222143edc8b30b2024213200fdcbd9a1c4b17c2b8

      SHA512

      0420013263786e7b673b6b8f5ca125a6da925cf6de894d675ec58372e73fc7a568d52279753aac6981f08b8152b5037ba3340f83baf6e0c3b6d5ed9c11bce0fb

    • /data/data/com.pokemod.app.public/files/PersistedInstallation7391961509772411174tmp

      Filesize

      570B

      MD5

      5ce170183368bbcee887c5848084b095

      SHA1

      8703cb971aa3f933102b5cfe47b5eae4511a2544

      SHA256

      849ace0f13641a7828230247f0074b9b55a4fd2c1476dbee79b81531eb8b4d94

      SHA512

      ba5d932a10bb0e7d695c5be58b6b5a773b2752f1e0036f18c0823eb832b2e0aa43658ce7f3d5a874fbcbc88d21c70e6679b56f8b45bb68796bd69590c5e13716