764d891373d83bdc2b5544a2f0509b346f878dba8148dde1b22ece89456221ec

Analysis

max time kernel
29s
max time network
49s
platform
android_x64
resource
android-x64-20240624-en
resource tags

androidarch:x64arch:x86image:android-x64-20240624-enlocale:en-usos:android-10-x64system
submitted
09-10-2024 08:04

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

764d891373d83bdc2b5544a2f0509b346f878dba8148dde1b22ece89456221ec.apk
Size

38.4MB
MD5

afff79347b50a535ea4673e10916e6c6
SHA1

e6ca43b7284d732a728e73191017ba4de2d5ce2f
SHA256

764d891373d83bdc2b5544a2f0509b346f878dba8148dde1b22ece89456221ec
SHA512

db930c2071202741850593e627b85367172adb369cf29dbec07a4f894c98d93a89cfb02fc0f721698535e9ac0fe5214db1d67b54d514898637ebd6be869f9ce2
SSDEEP

786432:q3cKjxgUIWeirHPMz95M+j3iTCTzOfZ+T83LPDeHnnmzsDvUHT2qbkUQIi:DQxg4yZ5Rwcc+oPDeHnnmzYevkF5

Score

8^/10

collection credential_access discovery evasion execution impact persistence

Malware Config

Signatures

Checks if the Android device is rooted. 1 TTPs 3 IoCs

evasion

System Information Discovery

T1426

ioc	Process
/system/xbin/su	ru.gosuslugi.auto
/sbin/su	ru.gosuslugi.auto:Metrica
/system/app/Superuser.apk	ru.gosuslugi.auto

Obtains sensitive information copied to the device clipboard 2 TTPs 2 IoCs

Application may abuse the framework's APIs to obtain sensitive information copied to the device clipboard.

collection credential_access impact

Clipboard Data

T1414

Transmitted Data Manipulation

T1641.001

description	ioc	Process
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	ru.gosuslugi.auto:Metrica
Framework service call	android.content.IClipboard.addPrimaryClipChangedListener	ru.gosuslugi.auto

Queries information about running processes on the device 1 TTPs 1 IoCs

Application may abuse the framework's APIs to collect information about running processes on the device.

discovery

Process Discovery

T1424

description	ioc	Process
Framework service call	android.app.IActivityManager.getRunningAppProcesses	ru.gosuslugi.auto

Acquires the wake lock 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	ru.gosuslugi.auto

Queries information about active data network 1 TTPs 2 IoCs

discovery

System Network Connections Discovery

T1421

description	ioc	Process
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	ru.gosuslugi.auto
Framework service call	android.net.IConnectivityManager.getActiveNetworkInfo	ru.gosuslugi.auto:Metrica

Queries the mobile country code (MCC) 1 TTPs 2 IoCs

discovery

System Network Configuration Discovery

T1422

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	ru.gosuslugi.auto:Metrica
Framework service call	com.android.internal.telephony.ITelephony.getNetworkCountryIsoForPhone	ru.gosuslugi.auto

Checks the presence of a debugger
evasion

Registers a broadcast receiver at runtime (usually for listening for system events) 1 TTPs 2 IoCs

persistence

Broadcast Receivers

T1624.001

description	ioc	Process
Framework service call	android.app.IActivityManager.registerReceiver	ru.gosuslugi.auto
Framework service call	android.app.IActivityManager.registerReceiver	ru.gosuslugi.auto:Metrica

Schedules tasks to execute at a specified time 1 TTPs 1 IoCs

Application may abuse the framework's APIs to perform task scheduling for initial or recurring execution of malicious code.

execution persistence

Scheduled Task/Job

T1603

description	ioc	Process
Framework service call	android.app.job.IJobScheduler.schedule	ru.gosuslugi.auto

Uses Crypto APIs (Might try to encrypt user data) 1 TTPs 2 IoCs

impact

Data Encrypted for Impact

T1471

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	ru.gosuslugi.auto
Framework API call	javax.crypto.Cipher.doFinal	ru.gosuslugi.auto:Metrica

Checks memory information 2 TTPs 2 IoCs

System Checks

T1633.001

System Information Discovery

T1426

description	ioc	Process
File opened for read	/proc/meminfo	ru.gosuslugi.auto
File opened for read	/proc/meminfo	ru.gosuslugi.auto:Metrica

ru.gosuslugi.auto
1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Queries information about running processes on the device
- Acquires the wake lock
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Schedules tasks to execute at a specified time
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:5073

ru.gosuslugi.auto:Metrica
1⤵
- Checks if the Android device is rooted.
- Obtains sensitive information copied to the device clipboard
- Queries information about active data network
- Queries the mobile country code (MCC)
- Registers a broadcast receiver at runtime (usually for listening for system events)
- Uses Crypto APIs (Might try to encrypt user data)
- Checks memory information
PID:5207

Network

MITRE ATT&CK Mobile v15

Initial Access

Execution

Scheduled Task/Job

T1603

Persistence

Event Triggered Execution

T1624

Broadcast Receivers

T1624.001

Scheduled Task/Job

T1603

Privilege Escalation

Defense Evasion

Virtualization/Sandbox Evasion

T1633

System Checks

T1633.001

Credential Access

Clipboard Data

T1414

Discovery

Process Discovery

T1424

System Information Discovery

T1426

System Network Configuration Discovery

T1422

System Network Connections Discovery

T1421

Lateral Movement

Collection

Clipboard Data

T1414

Command and Control

Exfiltration

Impact

Data Encrypted for Impact

T1471

Data Manipulation

T1641

Transmitted Data Manipulation

T1641.001

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/ru.gosuslugi.auto/app_webview_ru.gosuslugi.auto:Metrica/metrics_guid

Filesize
36B

MD5
b51b66a0dae62062b0bfdfa89d814746

SHA1
7dab2b92394d597a0134c47643b0c97f3fa06793

SHA256
5bf755fbf84e5711abd8c5aae8fabb9cfa3a664e336961dacec866159ff6693c

SHA512
d49a136df4dd02d0c5345562b8a22ad4209bc5955ff9026b50139a1999a411a5a2bd34b346b13575a8d8eda15df039edeedf562544007978a1ca8ef0f37afc78

Download Submit
/data/data/ru.gosuslugi.auto/cache/default.tink.new

Filesize
12KB

MD5
45b1e8ab9769a1ddb3492cdd00957e15

SHA1
b44373f82cf132aec975920c48f3f6fccb044a4a

SHA256
81d1d47be046c60e73eff5c51e5498a119d6811eca954672b9cc10e85c4607a6

SHA512
b72438b0fa3bb9aed5cce55bdec25602a5be4e5b0993aeacca074419160d0f24de2e019e2aedbc3a070bcfe5fa1f58939be4c37b7df3c5b7e584b5f958e1022c

Download Submit
/data/data/ru.gosuslugi.auto/cache/default.tink.new

Filesize
97B

MD5
53bfcf03179721713b8609a30b088ca4

SHA1
c489aaa0d1604a90964ce25274d429522b35ee7b

SHA256
1a7a4e29fdacf2745a90ad27804e6393e4a27783ba785e8b1950a5086a1727d2

SHA512
415a85900346308cbbc7e09422bf0fdba3bafbbd0c6ae11f3a2191d6dafafab85e30b53c3a558685b40b31f81f6bac3b6236b1bef1efb992b037dfe9c7a492bb

Download Submit
/data/data/ru.gosuslugi.auto/cache/mpgu/api_cache/journal.tmp

Filesize
203B

MD5
0725f0d365a6d7626ee7b2d1da33346d

SHA1
433d8c0c2122eaefe3d480dde24ad9a4ef82ecad

SHA256
5f4f0c96cc9ff0b80890b4a5442249d2a50cf144a585b5cd93a6a73292c3c70e

SHA512
a13477167dfd541806959c1c8ecab78051c620f0c71b209eae790006b963572d5a8f25c125a845d4338256a6354b561b8ee774a3875e7e7e7f127971b29df56b

Download Submit
/data/data/ru.gosuslugi.auto/cache/persistent.tink.new

Filesize
62B

MD5
60be80a9ebf1464a0d344199453c6697

SHA1
63a858a63cf439b51a246d610d770f4632e9d25c

SHA256
4565bb22de0048c17c5dc95a204fbebe97296099fbe609682254b9b3b55eb210

SHA512
6c8bc964072efcbb16303a036d0e82a473c93b8384d315a6e235960f3f378e3424789cbb9c77e735c9df998e6305abfd125b98dac8b7f536a633cb52a103c187

Download Submit
/data/data/ru.gosuslugi.auto/cache/sensitive.tink.new

Filesize
158B

MD5
48fb28278afe79a43704e5caf8f6b828

SHA1
7df6b6497cd061fbd289c47e148bc7c509334cfc

SHA256
f6e630d8a32f83461a47eb48209c107e81496bbcf9aa1a13d87723572a82f97a

SHA512
4681dc3e880d9722e48bdc3075b58a2228c3e03272de3bec348289dcd89bee0b802a3835981aa1df5b2ca2781339af2232ebbc503ec15f4bd3e65e203caf5e7c

Download Submit
/data/data/ru.gosuslugi.auto/cache/sensitive.tink.new

Filesize
8KB

MD5
d1ad3ff91dc794e8957291ef85a59c92

SHA1
ec734cea8fbe8e00f900f29fcc9d30ab403e0820

SHA256
1238d782c4f1e0bd08e113608f79b3916797fdd77e32c601f43c4a1dc27ed96a

SHA512
77b56c41930b2d481b904166042cbc7b96425df7fb01fca8879aea6f86d3d461a185b4933f88a5468172b73fa7146feeeddff4586efa2deb5e4340302ba97fb2

Download Submit
/data/data/ru.gosuslugi.auto/databases/com.google.android.datatransport.events

Filesize
56KB

MD5
7d9d8a77a72bc5064f0f2225e569d804

SHA1
90b112efc7f40813b79802a117921989c9cc5851

SHA256
8123dd97682f7dc50c29e9b109f3c6a1456ab27f8f1fbfd452e4ebdb3de6f87f

SHA512
396748eab3a7a3fa3dce4c4aea4682e0b4e65827450f4901eabe02e81b1248af4190891be8030da6b348e759aab1b695bf5a7c95fe8106e6bdd5971267449c19

Download Submit
/data/data/ru.gosuslugi.auto/databases/com.google.android.datatransport.events-journal

Filesize
56KB

MD5
dfea4f9a562d22c658ec695eca31ea04

SHA1
2e48be6baf86078d93f14fc38fe9f395c1c54261

SHA256
a01b4f35e09bbcdf9753512d4d3ac0b82c8e2f09e2176fa4a5c2523909795b2b

SHA512
8e0aab3c5f29a8737b4713b4a1622aa71b3574feabfb41a098f1326b80472c3fea053e759036c44df71aee1a8a1e9caf93f17a9eec88ab278062d7ed48907789

Download Submit
/data/data/ru.gosuslugi.auto/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
0a4ff74f31aa5b0e2678f59bad77c31c

SHA1
ecf1bb69873489856c8469ac52d632ce25c59c5c

SHA256
a6a211ae0526ea5730fe38201b11ebb86823464ab2219569fa1e41930ef40ce1

SHA512
f2608de99e0cb90572b471793f5472dcf9dcfe8eeeb640210fa70776704cb979f8ef96fe9f3ca6c487df9f97d1fea4587b6f703da61fc4c7a2350380f8e4d669

Download Submit
/data/data/ru.gosuslugi.auto/databases/com.google.android.datatransport.events-journal

Filesize
24KB

MD5
fbe18a18f4db0c4a590f141a38b528dc

SHA1
ea31843d857ea519f4b97cd10cc5a795b7ad4da8

SHA256
72c61632eac9d18580ab5943ee5747ef0041248e88f6f827c7a0921c9d9e03d8

SHA512
888953ceb713c71729a958b76c11e61a241e496ccebda1772432d8aa0cc55b891cd42a4149dfc83b8605d2f6f9df1b2b4ea779214666458c2550d4c66b97b48d

Download Submit
/data/data/ru.gosuslugi.auto/databases/com.google.android.datatransport.events-journal

Filesize
8KB

MD5
d3bdc73ff87e60cd8004d0fa6b109487

SHA1
6f78a2672d492df2086624e37afa05fb2d31308f

SHA256
7363ead079ac5a93dd971434365c15c844d35ea7f9b41bb5616164e42a9c561d

SHA512
b60e9507df149b2f111d20361dc44dd2e88fa0090b90b927664975240eeaf2cbe8cb2dda2f4b73864d881c4cd45fab27a202a69b0d5b89c20dd5fa3348fc22b7

Download Submit
/data/data/ru.gosuslugi.auto/databases/google_app_measurement_local.db

Filesize
16KB

MD5
9e24a8f94f18d72edb1de3d2d0f72b93

SHA1
caa97e72461773629b37ebcd7b643d6f22f8201a

SHA256
dc640f09b4568d6ffc549338feeb4c06a561b0ba8b06d7c1e45eaad83ec9cece

SHA512
47b54e3add17a495b3b66bf8ad2afbfdb1bb72a85e553dfc4cee9305dfd720ba79527429bebac44739b71da368d5402e4a638ce640f851f519f4194f5a8aac61

Download Submit
/data/data/ru.gosuslugi.auto/databases/google_app_measurement_local.db

Filesize
36KB

MD5
e6a11ac4138afe4c6bfc4ad47a71b0c4

SHA1
dfa71735d9a6951b97fe48e3acab247ed8602907

SHA256
a6fa977e2aa0b97b671d443f4d0dd7726bd443c654b26293d5a565d70affe737

SHA512
273badf2c55e266a12e9214f206d61732da8e3cd626c166dac9c73b857ffa9ef933e26937dde0c57608c3ca5199eb4dbf7882abc88de0b89c49ee301ac7f58c9

Download Submit
/data/data/ru.gosuslugi.auto/databases/google_app_measurement_local.db

Filesize
16KB

MD5
d422a14df1712ecea029e151a4f82e33

SHA1
72cb23adf354823ddebe08bbbbf2db1fe80e003b

SHA256
2e08b03175d1e828d250c98f7b5f5bca7ff58bf3c8ac6525c201aaddf82bab5d

SHA512
70f974846c185e074e353b6713a8716133c313a9b240dc44ae648e5954c70213f7d61aa567b589086c1c3b5ddb9be0bd9f0ce9f4b682a9ff95e857f27efc124b

Download Submit
/data/data/ru.gosuslugi.auto/databases/google_app_measurement_local.db

Filesize
16KB

MD5
f7efb8b366116b1af81994880f8bc6d9

SHA1
0108ea8043649db5b5a912aec68131849b1646b4

SHA256
c6353f8d30c04d1a12f97a4e2b632f9b9bd49bcf551e13eb607806f2072feb76

SHA512
9b20bb9a6365a6f744224d86ea222c685e7187c8db9ca3dd0ac119db6f630190352e64d6a79d512523488540b181fc90f88b88fdb6cf00f0e8f3f7155938b5c7

Download Submit
/data/data/ru.gosuslugi.auto/databases/google_app_measurement_local.db

Filesize
16KB

MD5
7040c2c5d7536dca8a5b3000c50018e2

SHA1
a7f742603e413e155592fdc77b490759899003e1

SHA256
a5ac880ad7b000db51ac12d626130a36116b8a903e9976669bf626575d708853

SHA512
0de61b185d235febb243b50d50f2911be9473975c3969349ea3c5405066a73eb679205d7ad46ab7d8fedfbf867e041256b464aea02dc7a234f22aa2acb3bae98

Download Submit
/data/data/ru.gosuslugi.auto/databases/google_app_measurement_local.db

Filesize
16KB

MD5
ef8b4f5ec857b1d7e38a551d09add193

SHA1
a687b6549322948c765e6ae5f701941c84a7934b

SHA256
0617c313f51a93c0a64ea2d61be5ca8522ac3366b7c8c28a5d8092cf7e0257d7

SHA512
24293c59eff6c7107a42144d9e42ff721ba9394a44b5ccd449377c2b737af7b5bc6ea243a4be2fb5bcf35f3f414ffb0720430311cc7289a52237958b0c3e4b8c

Download Submit
/data/data/ru.gosuslugi.auto/databases/google_app_measurement_local.db-journal

Filesize
512B

MD5
62ee844ab20a0fdfa37c1c6dea69c87e

SHA1
146b9f71c2aeb2c3c23570b57c25d8c83333eed3

SHA256
78e377910c2cf457e6b13bb9989b2f9a973fb633ce697289bac28ac65cbe60d7

SHA512
5b25c9fa2bf6197817c05564b613ae4985ae642dc174e8fbb8c424da40091b67c442ce00a165b4c0ffc85df6d47e1f6f60baeb1f981af10188125595adce1c31

Download Submit
/data/data/ru.gosuslugi.auto/databases/google_app_measurement_local.db-journal

Filesize
12KB

MD5
84a5fcc97fd2e902ec8ef320c85f2ae3

SHA1
f7014e57013d100f8564a4ff76ff4aeb0a3fabaa

SHA256
1118127fe7295894c9b888a33f308d3576ebdb12043a269081ad4770d3f4d7e5

SHA512
28f36b2ed0c21aaf495a861aa42915e8c8ecc4d8c6e81d09aeb3d8887dff62f34598ce89c31cb902f1b3919c33de9b1f1a66ecbffa656b06e44f3dadaccd0268

Download Submit
/data/data/ru.gosuslugi.auto/databases/google_app_measurement_local.db-journal

Filesize
4KB

MD5
8dce8c4d82081ca9fc7009dc250e9334

SHA1
8d65e8f7651d66076c80c1be9537abb283a93f89

SHA256
9bed5af352777d56d25304e0271bd00b45ffee09d9bffedd1a7a57a68ce6e900

SHA512
e5c1aae9ed7e8fa59f2ddb1314fce4cda0a7502e12bf484b564cc28679485dea422b731b1c25254553dc72173732799be1366def8e240269c35d82a3eb23b622

Download Submit
/data/data/ru.gosuslugi.auto/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
c538423688c4ed6c17427651854c82da

SHA1
4afbe99e28422ed76c16c91fd2348917d6046a08

SHA256
7a8cbfc1e9a4b46eaf642f6f190688da75096b7303f1d317d5e2766d226c8960

SHA512
4f313dddf634a3a16882c78573fdfb1fb3384b5dc5617587279c6d4504b42d7b6d05210e9f675c882cd9f3c2e7cba35f26ac7d224ab8e80976af5762f5d2869a

Download Submit
/data/data/ru.gosuslugi.auto/databases/google_app_measurement_local.db-journal

Filesize
20KB

MD5
7fa8384d37b87145fe418418a6e925ff

SHA1
16791666c113a6013cbc86b8227621a4c47b7172

SHA256
670f4d83548fb3ec9be9a0c8280a909a2716248289d353e9986eff4dba8a617a

SHA512
3f5f9c54f52245bd68492ee7bc6007f6b0aa508046cc4ec6cf232ed146939717a8957b434b725647866c1ea39cfb41117de63ef26fd74e9409193cf7c557b106

Download Submit
/data/data/ru.gosuslugi.auto/databases/google_app_measurement_local.db-journal

Filesize
8KB

MD5
df7d6188ee2fbba68e60096b8022adee

SHA1
8ef63bf4eba35cc60eaf0be3ccfafb884a9d6f3f

SHA256
fb544d455d8d664b8fcb51b4dbe7b205ddb0356f77ef995fa6a2b8dd45a50ac4

SHA512
e4deea0b1ec987ab46937ba6a193c35da8237d33469bbba1126fe1e7c3dd91e7154e636d07d558c881473d015c671a4c277531fb34cc525053b8465a665dd4ba

Download Submit
/data/data/ru.gosuslugi.auto/databases/health_check

Filesize
12KB

MD5
c6178a280f15e20d326aff4ff583e121

SHA1
9fc2a3a4528213f09782f1515c8f2f3c90d448c5

SHA256
680f119acc31af43f58764ee2fd7930859042f51c314b270e082cdc465b680e2

SHA512
60ca272b1e77b3128c471b299344b4b34f5b87fa0b88e48c95dd710cb235b2937bfc8bb3d4edad2e777b9a33c2f1aae76dc9156ff0bbf236ecda9ead43e0b9cd

Download Submit
/data/data/ru.gosuslugi.auto/databases/health_check-journal

Filesize
12KB

MD5
cb561c75250c608d9cede7f903b39c07

SHA1
ab16767d9deea5fad2999ff5579b46a2a57cfa6c

SHA256
2b053024d348a48f9a9e9ce344be2ae05bae06157baa358782550aec501c0103

SHA512
a18a35742b98b019dced6cd34fbd813330167f0220464449b80e35a01191da65bf961e215687ee81294b4b176b2aaf486daf8d45990b6239a22a1a02fbed50a5

Download Submit
/data/data/ru.gosuslugi.auto/databases/health_check-shm

Filesize
32KB

MD5
cef931d6d1989019c277ec20b68b34ba

SHA1
32daea1b94517c325f03b07ff5f3e456091a0e60

SHA256
718a30889104c361155309fa9aea22c26d21155de3ea21d952cf0aaee5d7fb71

SHA512
a35252a486a2232a77f84929f6b4b068826e6c3e0869a3fcc6f5f746ada9b283ad9c21dec1f5ff6cd09969b946c29441deb617c679de693f20214e8604347440

Download Submit
/data/data/ru.gosuslugi.auto/databases/health_check-wal

Filesize
16KB

MD5
5ee3279c10aa46c42307b080524dded3

SHA1
91fe5bc08cf5e891234df408a2d068cea9517f71

SHA256
497fd431c650fe0382cc89146c80c74400c28f31a71593bca979f2c557b9fa0b

SHA512
e78fc99be10a0e175552128af3c9cef57ff3adffb84dc988b1a952167f8d3799a0b525370d4401084b4067bb7c29ebc4591b773276017cbddba51b7850494909

Download Submit
/data/data/ru.gosuslugi.auto/databases/health_check-wal

Filesize
36KB

MD5
79ad068af0bd7c93a98caf876d353273

SHA1
03c4d6a0711980de458a6c126d2782e91cedeaf5

SHA256
8555175b64331e24f8eee67f3bb202487bb3ca0cde3f9cb0c0385050e51f0841

SHA512
4e73dfecb93269ff0acdd3f2adb4b5514b66108d2caf0d4b2012ceb5e8c181f1fb5ff41c9c456ef0a0d6f94bcaca589e79219d38d048bb2ba258782edca1f937

Download Submit
/data/data/ru.gosuslugi.auto/databases/offline.db

Filesize
4KB

MD5
0fe5b7c69a7312f1da65c6c5dee3c3fb

SHA1
856b6b7a6fa7ee6ae15db4b24cc6412ffdcca7a6

SHA256
398521a9102dfd5740396f7f563180f8dbfd4a1b8da87d9c9330758d8c746e2c

SHA512
3b4440f799dd300a8e5f3566b24d4917ba559fb444f97826f131968e7b297e4d488e9dd6859dd0b6d9c9ffbc20ab72751a66e9b369f858a192d9362a821e5fa0

Download Submit
/data/data/ru.gosuslugi.auto/databases/offline.db-journal

Filesize
8KB

MD5
97699ce823d37f01f0869989addd60c5

SHA1
5899c1cf587d746ea4ba602ae7a4840c4cb84956

SHA256
3f41753a3c2400bbd55d3e960b12ac7c559303136bb4a2a4dc46603d877f299d

SHA512
a47b5af3673fa9a3c1b0dc634f7dc38b8d7c216bc5f9aa3bc891aac2556d3218cd6323d005ddd821ba37f4abfefa94b84e7eeb98697773c2547aa591e3fe193a

Download Submit
/data/data/ru.gosuslugi.auto/databases/offline.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/ru.gosuslugi.auto/databases/offline.db-wal

Filesize
16KB

MD5
1577e8e86be45246e23947254749ea25

SHA1
30ea4ff121feccf669ac6c4e285b9f17b135b626

SHA256
7c433ddc911dbdc27de7f59f1d9e0d3ed6b6f32123654517a5a560fe059e8849

SHA512
be8dd388b5dd2efd07c18be9d12a9c7a001ea4c4bf25d55c2404de73eb98c5adf63ef820e00ce38f006fc7ea5fb9653cf0eb35b5cbaabc189af82470ff8d4b84

Download Submit
/data/data/ru.gosuslugi.auto/databases/offline.db-wal

Filesize
128KB

MD5
29500941df25cf06d155cef1ff900aed

SHA1
e14068048558f4499355ccea2385735ccd4850be

SHA256
f4a083a3d26769e027672fb4e265c748491851e4707c23073bb10021e0fafeab

SHA512
784defe43e820ff4380242f3febc29f857b1c78d3f1959b492afd80c6d9803e41dba5ba5a42b02801a954947f50e237404ed5ec50dc8ec0fac135204d8865534

Download Submit
/data/data/ru.gosuslugi.auto/files/.com.google.firebase.crashlytics.files.v2:ru.gosuslugi.auto/open-sessions/6706395002A6000113D1A774F5CBC549/report

Filesize
809B

MD5
a539e8f0f69c9472043cc80e3cbfe881

SHA1
cb843a7f7e944f3bbf0be6cb47dc5c00537d3f21

SHA256
b4e1d2fb2bd8bd87565f5f9d48e719e714213cd1204c50c63f4e9c877977e2df

SHA512
45cb51046ac9f48d64d52c225a85fa1f31cd264af2368d1504359c6336146ad4b64bfa3626eb77330b73cd420cb2569b3010302241d409cbb009cc2a87632c38

Download Submit
/data/data/ru.gosuslugi.auto/files/.com.google.firebase.crashlytics.files.v2:ru.gosuslugi.auto/open-sessions/6706395002A6000113D1A774F5CBC549/userlog

Filesize
727B

MD5
c230182a434649df8b1adf80937e5123

SHA1
d2d7e5f64091e2a1e658ab4a5326ca906698c87f

SHA256
0da7a6cdbcb4a75508b8f6255ad38e9f04af01bc04747c7bcd762c1b72199a97

SHA512
891f5f69c358b2b51f90c6add4732f2a814600a21f2be529352d53ab6c4fe1679e2c2c7ce754d4c234b82af41657d1e3a13bce27a268693bdf85326a5557b64b

Download Submit
/data/data/ru.gosuslugi.auto/files/.com.google.firebase.crashlytics.files.v2:ru.gosuslugi.auto/open-sessions/6706395002A6000113D1A774F5CBC549/userlog.tmp

Filesize
12KB

MD5
4d9199eb1865c126bee620ac6d899763

SHA1
37099be377efc5af30987d1722bfa93e963643a6

SHA256
240466d22a26e5ece591f03f16c3326f41f1cb0209dac72f40d7aec7ac426675

SHA512
d8c21a7f24e721f5aff60b443196bda71481b9b781ef7b1b0a2606b7df3fa0f56640c4d396c25741bc0db58e52df25065d7c12ed32fb28f4d81e355b21b0c7a3

Download Submit
/data/data/ru.gosuslugi.auto/files/PersistedInstallation6863396501063215837tmp

Filesize
90B

MD5
61588d10f3fca83fee792b51bec617f1

SHA1
eed129753c94fce053cf561dfdeaaef5621178ed

SHA256
431d5c89e6563bc9116f89e3de087045cb0f94d0798a6452d6493540b73d9e83

SHA512
d0b06ea6af61b486a90aebd18efd127918d501eaf69a634461a58134a937e54dd91cb15f9284009cb7eac1cab654f57de0e564f09a8238504bfbe18c7c7769c9

Download Submit
/data/data/ru.gosuslugi.auto/files/datastore/autoDataStore.preferences_pb.tmp

Filesize
194B

MD5
b78ebf14f4ed059347c93ac289342dcf

SHA1
9d97033043b9bceafee02a102fa1cfd8d93a1808

SHA256
f4f48d3733f9fc8a2ba6d6948552d56bf704afb4442d01f3a698977a77a82814

SHA512
ffc5056731599d2b97f240ea1e502256a8f045d7b46bdf859024ff500b0443e53646cf9d3dd63ed0ea1e182692237a76d665ad6eacd5f5a843ccdfb28718d53a

Download Submit
/data/data/ru.gosuslugi.auto/files/datastore/default_encrypted.preferences_pb.tmp

Filesize
12KB

MD5
773d282a2963e823272b4752ef20bb6a

SHA1
dddb72c4e1f906296b31d46b7fa1cb34a2b56a03

SHA256
71bcc8077838087cedb72c567ad6f299217f106047dde5b6a027e9ff4d89aea5

SHA512
541954425c60bd34c07e3686cfe1f8061022053278b799100d9b40a4df29b477eca1ceb4d8c4d5afb71145eb913190683b81bd913e42c5cd88b314d49f3a83d1

Download Submit
/data/data/ru.gosuslugi.auto/files/datastore/default_encrypted.preferences_pb.tmp

Filesize
64B

MD5
a11daa1c0c7aaa52aa2ab974efeef2ac

SHA1
b766b6f75443649a9eeb70967c43f5ef74db4ae9

SHA256
bd9cb9bf043168100e91c178eed612f46a52899f32601dc074660d7576181165

SHA512
bfd2b80b106630895e5ad8c23c7bb990bf8112bc78eebc9d674726299a56bc61052a9a04869d4fa2b3ee8c5c67723db7e32d1eaa0e20a82ef10d788583062d8e

Download Submit
/data/data/ru.gosuslugi.auto/files/datastore/firebase_session_cnUuZ29zdXNsdWdpLmF1dG8=_data.preferences_pb.tmp

Filesize
50B

MD5
54076a7352ee16dfe602c856170d1d43

SHA1
9351204b5c92912298dbb89a18f5a5e3c753fa0f

SHA256
3e30abf5f671514f30fa91b45b4fc4adeddf8997ee1b3c90f2e62effc60d2462

SHA512
86595dc5635f8c311727347e15fdd104d51c88f4d46f3ca91a90ddd92d9b202c682afec3e9bf57cf375ed4c0b0340c744e9b6b729185041b4303ae2e24e77729

Download Submit
/data/data/ru.gosuslugi.auto/files/datastore/persistent_encrypted.preferences_pb.tmp

Filesize
32B

MD5
63832cdd6e7703856e61ab770a81108b

SHA1
f2ae71edda5e718d902bbaa4b1366586e5078a2a

SHA256
53941197913c568dedacbea6e9f49e75409f729461947cf4a84545a123237c48

SHA512
7510157259e098cd8a08681011a7ad95c49149ddba415f497a7ac4154dec0bcf218763944720357a09b42937715bf693d19272f676705b4094e39a3ba02e6603

Download Submit
/data/data/ru.gosuslugi.auto/files/datastore/sensitive_encrypted.preferences_pb.tmp

Filesize
20KB

MD5
3c6a4ba8e8defffb1c112f2a4179c33f

SHA1
68076a33e843e0e2bb052fe7305609b78abf4d36

SHA256
a7217489cbefa5127fde141a5575120ecc8f552290f2153b28b58da0dd53167d

SHA512
acc2e2913e25f620e305776bd5f2586efd0eb53c7356cbeb82adcfa00694b66c32a184f642003c87ef2719afc5e4f94ca2612f00beedbf4789667f43e6581647

Download Submit
/data/data/ru.gosuslugi.auto/files/datastore/sensitive_encrypted.preferences_pb.tmp

Filesize
8KB

MD5
bb94523aa42eacf223971bbd03814a76

SHA1
8eb402fd0fb0fbce5dbcd52c178c49f825a43e37

SHA256
a16761a4d8aff63003ce864dcc169f56dfa49df70a496a0849d965216e268c76

SHA512
5c5b8ca3e79f3fe8359f73caa046a647f366269f39ab78cdce9bce2e39e7ba697a5989dc4b7d32a0986937686190c724e3f804230fdbf60dd68792b59b8bb395

Download Submit
/data/data/ru.gosuslugi.auto/files/profileInstalled

Filesize
24B

MD5
520e8dab2295c982d14aaef2bb1f7c94

SHA1
08add89300f7c5cb99e232cbfc2978d766426460

SHA256
2846456a632064c14ce13798902e13f77015c5fa7a841abbb87cf09edbbc575b

SHA512
f9e042fa6b512a27b8d2dc20b90263e0bb7e73ede9d23dbec4c87389e5e568a4da921f37726afd2ba7cc18c03ac4b153e010b66dd673eb1266017de83b849896

Download Submit
/data/data/ru.gosuslugi.auto/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
0eca52f0ffc118a6999e87a62ad75778

SHA1
4850970c25f5cbcc2978093e804900569d44aec7

SHA256
625cbe1a01f452c049c8725efc676c0c8228afb907566ba24a7be9579e16f3d6

SHA512
65a089135ec8231ad2531610c9ed77f3960719940a82070cb82a1047361ff6be5319338c34e3e0e02db62d616bfeeaf525be9d9f1cb559fd95c91b61d92afe81

Download Submit
/data/data/ru.gosuslugi.auto/no_backup/androidx.work.workdb

Filesize
4KB

MD5
4e4f4107bcbbce48a158760d7655bebd

SHA1
b5f7b0c54439d692c2617d273611ba57a4354251

SHA256
9eabb3528c32730a22b765fbcd8c748c2eaecc2b34bb7e6654ebc1b7ae7e51c7

SHA512
e1b8acb3d2250c2eef61951647995f73708480a0f7d32dbf1432ba7c37830186e00f1db4faa3618c63b5cfc492c090624991b82b28f4183d91de781161c66c51

Download Submit
/data/data/ru.gosuslugi.auto/no_backup/androidx.work.workdb-journal

Filesize
36KB

MD5
b8aa50338f5f5b5a3785eb41e83baaa2

SHA1
585707fb0f538edc43905d161984991ac37dfcb2

SHA256
15887128f0a191ec5be2d0080eb993de042fbef7ed315dc099ffc86b953f924c

SHA512
43fc2574bd335cc8e8d09f997c9f9826e6fa7ed15bc84d36dfe4a3bc06415016e034f9ec7b91e7e5f2b717663446498b447d8fbc8cfd9b08a5bb90f7200b4108

Download Submit
/data/data/ru.gosuslugi.auto/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
629d4db01dee98b6dc6b6c298fe7bc02

SHA1
93f84323d1313ec1350f3272737bb1c5915c0615

SHA256
b6670f02fe332f94b2baf57e9887c640dffa7d41248bfaa945763755bf847e9c

SHA512
76265c5c9dbd855c5620cc9a19a4a719cf58cdf60b1d61738f008e49f67c846a6030adf70d09c61fb4289546a94d4e56cc6982abc8365fe60fec16282969216a

Download Submit
/data/data/ru.gosuslugi.auto/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
a869afa02d215d4bb22e07de624ee993

SHA1
e46a6009e26084b3e7ed24a0a9ccfc63242ad8cf

SHA256
641dd5fccccd9d746debd6d573c6b4074d9487c4753f014e5d27ac16cc66e625

SHA512
8a00ff539b80285329194afd0c3eccf6d674c4bbdc42f29771f3307598dbf312e4111a344834dea4494406e3ed03434fe75a3c27f77f3c1f84afc2f4f1be5ce0

Download Submit
/data/data/ru.gosuslugi.auto/no_backup/androidx.work.workdb-wal

Filesize
116KB

MD5
6897a59a64fd668eef7e1ecff4dc9036

SHA1
2c322e13822bf9505ab3a04f76a521913ad66898

SHA256
909e11510f8fe7e076b96c2fe80c8cfe685ca36fd2b3c4a2a84cf151440de65c

SHA512
b166ccadcbe440f159cfaaa1274e9237d31fd78cf813031be9c10fb8b5253a3c431a9bd2da8d97dc30bffb8399bcfa87e3694030ab4894427e491c6ba785cbb7

Download Submit
/data/data/ru.gosuslugi.auto/no_backup/androidx.work.workdb-wal

Filesize
124KB

MD5
60816dcc84e5851fcb3162dfb7923681

SHA1
b87ae140fe62c0418c59d88e2df970c6f7f9620e

SHA256
dc25194af4379d1452c0b64eae2c84a3dbecabfee721d491e4bc7f45f85fe331

SHA512
dfec4036a879dd154bf7dfbda9f0482c961f6ef49385b455cfd31378f96d3471e27d6494f11831836565aab79ed55856c01311ceba16ad21613bb4fa0b194fc8

Download Submit
/data/data/ru.gosuslugi.auto/no_backup/appmetrica_vital_eebb8cb9-e37b-45b1-bb2f-22c440f25baf.dat

Filesize
203B

MD5
d695a98db8727ad01e14c893ed23d9d9

SHA1
f9f3cb1721bcb2fa3a16bac53e7864ffb6da571e

SHA256
f742078483b05d44e34a0a4cf6ecd0fa49a3fcb9732084300fdc76151d600cbe

SHA512
2281c2d3f7f426753c9b633473a315ee9d03b853bff009a7bfbfbb85fbbcd07156c971c5144eb0872e10819d51ca0cc14f79811d913596ed8ada5e713fc1b442

Download Submit
/data/data/ru.gosuslugi.auto/no_backup/cache-mpgu/api_cache.config

Filesize
160B

MD5
2a234dab85cbad5de0c4143c01f52110

SHA1
52fcd7cf8e8af2b6497b23e361f4b4e1ab97b853

SHA256
7b2edf8a0227d035cc1de5788c8e58efbca949eed15123170ba925d3098a2619

SHA512
787d166a181df3aea381496c1d808af6fb0d3b91e1c2d8e720234b448f42eb3e056c3e6eec6fdd4282722e80ce522d363449418f07a7bbd0a6797867a166ec28

Download Submit
/data/data/ru.gosuslugi.auto/no_backup/cache-mpgu/toggles.config

Filesize
512B

MD5
ee4813e57851dfb5fc41aac5027e5cbd

SHA1
a5a703934e8df904a6d758e32ff77f44216dc79f

SHA256
09e0eb37e7271f22c280dd0b6ffc9551ef171f069248c06716515dd98dc1dcc9

SHA512
e267d12434bf5d597e3ddac4a395bc8b2e3e8c49450415c111cf2e9dfb644d238e4fb8d1ce0e8ea8b80ece818830fa0acd9ed3a55c19a10d429815cd9fa898a3

Download Submit
/data/data/ru.gosuslugi.auto/no_backup/metrica_aip.db

Filesize
20KB

MD5
e34f26a94b8ba1114969b36f5e1039d9

SHA1
6490c26a819dca304c070b82608ed8b3fb60a597

SHA256
78e0fb9bc375cfa519175b66771e52dd89d8b4c9bc1e0aaeb100f4844c79bdd7

SHA512
6543a9ad992fd6753105a9e0f062039d17f8a7d8246263b714960997fc619f611208727e7a2adc5f71c504c6b1c48f41c1b8e1de5583c85fcf21eb7536888eb4

Download Submit
/data/data/ru.gosuslugi.auto/no_backup/metrica_aip.db-journal

Filesize
8KB

MD5
f5c587520b672be4b970fbe503fbdb6b

SHA1
23c7312a7165e01428ed89830450f5463cc25854

SHA256
bbcf41ee9aca37e031aa27e2cb3ab9793b48632666b36245cb789cb91899e199

SHA512
5bc72dd15de5e3ce72e3f9b59735dc0f95f8dc777576a5e0fa055ceef5a720a9ee492bb9128aac6dca98036cbee34d1ae30396d773d52d222776b83ea7e3e11b

Download Submit
/data/data/ru.gosuslugi.auto/no_backup/metrica_client_data.db

Filesize
44KB

MD5
9f076189fc155932d6ca1aa8bfac9bc7

SHA1
10a7590d3e120ce079ea6b95b41dac81981d4033

SHA256
6d3b2bbf218ad4bf15c63d65501e30c2ff22d4569df177d09b1f2cbb5ee33f29

SHA512
3045cc2216b9624d67e3c6e7413391ab327cf02531078ce1a7a0a84ef6a2be2da980fb0688f88cab62a019d75aa5ea87b32b12a7607661a2fe3249ea1f1cbe73

Download Submit
/data/data/ru.gosuslugi.auto/no_backup/metrica_client_data.db

Filesize
20KB

MD5
4c452623eaf1ef33dc5fd58750b412b6

SHA1
cf905f42332a25b6a0e166a7302d3262da74a57e

SHA256
35e2392630500568e383572cfaa9751dcd18dd3cc25572ae514cec67c3c93308

SHA512
0a0ebc79673c76e0f690db920494bac3b44ea89adde02cebb6200947872f8557abf8fd001b24d23f8833b3130f90ecefafc0fbcf5b834b399ae27d8edcfc2597

Download Submit
/data/data/ru.gosuslugi.auto/no_backup/metrica_client_data.db

Filesize
20KB

MD5
6628e46cfc042adb876a2953398f2e81

SHA1
edc43d099e8a419cbf68c843ff6bcfdce51b6297

SHA256
3d620d83907ced60be35894316c358a9a6919640fc93c10ab402da22d139ea6c

SHA512
ba06f5a73cac95d9650b6956a04bf22b6af1a9b221cb9efc52f2751e9c9c172eb6235c017a23ff32ff85e5e1419cda6cfb396f6acff4d6ed3eedb25cb99a9f0f

Download Submit
/data/data/ru.gosuslugi.auto/no_backup/metrica_client_data.db

Filesize
20KB

MD5
83850691fd3f7befc6db37a6febdc6f8

SHA1
3ab5d6977d49c816fbc54152a3a9a3f9745fbc5d

SHA256
1693f57bc8afcb8ec27dfd5fa7b508a6c2637f0d174b5a7f07d4a0e96249a010

SHA512
9ba98adc646b6e47e0ebd2d0a47eda78ae9068e1597aa3d9bbe368d21f7a704be8ab567a96165ca9174d71f65bf564c2e2eeeb14878aa74cd5de2ec7d6606a90

Download Submit
/data/data/ru.gosuslugi.auto/no_backup/metrica_client_data.db

Filesize
20KB

MD5
0d97b2b9e15d48bd4eb0f7b13b147290

SHA1
e57a39d635a7c8767b7f9e26806f3e5c593c19f5

SHA256
2274a2c5c6c3e968e598b977a67271a87236b5d6364a6ba0aa41499ac470d434

SHA512
054c48749c1dd18ce9134d4f5d4554a4fec033fe3be0dc81da50e0cacaee1106a974d34042aff74396b515bf4280f3f02effbe15184fd48a6b4eabf59d0f55c7

Download Submit
/data/data/ru.gosuslugi.auto/no_backup/metrica_client_data.db

Filesize
20KB

MD5
1e0aebae72bc2b04585a3a05bc4f25b9

SHA1
3e1a4efc26c16d9996f6848820c54276141a59e6

SHA256
dc372d6f876b5c5e7c3edbef0cf3150c78cc24db1b6db27e8d59e0c2389b5e0a

SHA512
9bb8ede1fc217bdb660966fe31b57d6c455b1b7a0e8f9d4c46bd022b020aec82ab371cb891c4b2755f3f74d7cc91ea912da2f9a46eb8e8bf03007afcc08b5adf

Download Submit
/data/data/ru.gosuslugi.auto/no_backup/metrica_client_data.db-journal

Filesize
8KB

MD5
0d41f3f412a6d7670d1d63fe422b70ce

SHA1
15528b144defdef76ca7f72bb9519076d820c892

SHA256
70d6950c5c30122a0b36ea040085422447b3c719da3c6abffd66542913c04800

SHA512
4022665b459690c4e7505a998347b94522b2ec06bddcc2435dacc0da5cf108451d3fb4089de241d9155397ab7e332bf0312462ba9295e2894955e06666fdad3d

Download Submit
/data/data/ru.gosuslugi.auto/no_backup/metrica_client_data.db-journal

Filesize
8KB

MD5
e88e7d154df61979c97f1c9e8c44aeeb

SHA1
ce53c0731c373084594ca483c47fcb8242b61d04

SHA256
cd2496fccd9759b1dc32933b441413bc76115090fd4dc1ecfae49eb83f2c27ec

SHA512
0e43457312b4ba26547b319cca309c45906d4b14fe8ab5e2e3dcaf079430fa88388b1f873668749a6c9e6c41b904ba430f8ac9ae0117fe737e2703cfe8e46412

Download Submit
/data/data/ru.gosuslugi.auto/no_backup/metrica_client_data.db-journal

Filesize
8KB

MD5
7d24066f0a2016a82d6f9d39a80207d9

SHA1
e2720ae9d3556b550154c2f37236f9e204354d5d

SHA256
702caf4a12585f324b579a132ed81b365b4354b89df27189895ca4a19e17264a

SHA512
293dd143fc956234a1dc1a6a1309aad154b9e5483fc0e9face99fe5510a7f63ca68ec66dd1d9ba00eed21299483ffd804c8bc0e73e2c6325124d05022a0573df

Download Submit
/data/data/ru.gosuslugi.auto/no_backup/metrica_client_data.db-journal

Filesize
12KB

MD5
e2809203e557d6fb848bbe278a82be21

SHA1
21ae5872b9dc9b4088dad06b4080c6b691de261a

SHA256
af5683313f089a6f6c1f8766d634a81c73d47e349047b7de33a3d81153e8f49c

SHA512
e19f6ce56762a5da3f24ccbc9b6171fb0014cfb237e923d2660ebeb9292664f98e25aa578e4a095fd4077114a4c7df2d132fd30ff1767c719f6710ca3bf345b5

Download Submit
/data/data/ru.gosuslugi.auto/no_backup/metrica_client_data.db-journal

Filesize
12KB

MD5
630fcba3d926a3819829aa33cb20a678

SHA1
f7436249a20dfc2beebd37e87d893f5e57c32ea7

SHA256
db1709fa58880d220bb0e90b1e317e204f43a3a9bea327dcd75fb97c7b0a09dd

SHA512
b7d4ad7bb33e3d2e72446f4844373dfe83c02105ebf207b03d0a7767e0d986e6b70293b44520e619c637d2da7be517df9c1d65d54cedab2c7eb4776017f6cad7

Download Submit
/data/data/ru.gosuslugi.auto/no_backup/metrica_client_data.db-journal

Filesize
12KB

MD5
0efe089270d52dbfc7f82e7313b43258

SHA1
4b7378e14ea3a44025615905c97d21d200badf66

SHA256
8e68bd432b183ac75262229375a3fcf324c17c9cb54b8005b49e526d1d3796b5

SHA512
d69c12a90bf3a77daf1ae9917b64f7a42394503cb26482b4e564e592668f304ac507903b66b937b1176802fb7f1b59cf75e6e1169056b49b0bedfd882bce542b

Download Submit
/data/data/ru.gosuslugi.auto/no_backup/uuid.dat

Filesize
12KB

MD5
4395ccaca1edb861b6ba7b2c5f698ade

SHA1
224ced4f31d6c0339d68b71145a5e39f489b782b

SHA256
9d34b8e8f9311b7ccd4450876496d0bbb2e921fe6fe7733d965949b442b78b7b

SHA512
acd5dd257e553611fa744bc4492a24392f18ffdbe33b48056be1443d4735670ed2836d629cdbdd3aa12e70a9d4822e29a55267b260e199764eae0ee2f5ee9b50

Download Submit
/data/misc/profiles/cur/0/ru.gosuslugi.auto/primary.prof

Filesize
13KB

MD5
6b5b4ffde95c372eedce74d13c2ff107

SHA1
cce81a0c7a648a702e3751c0ee0381b313f2d4a6

SHA256
eaa6abe06f17233926cfce94996a975d7411aca173dda8f0999683bc6536a7fa

SHA512
c9d602095dbea17533c1e2dc67cbe3737ce5da21017bdffd0e82c4d5105368b2e82ce6bc29dbea51ca6c3547e05ea2c4b64a87a3a87bf4bdc0ea7b0b327339fa

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Mobile v15

Replay Monitor

Loading Replay Monitor...

Downloads