Analysis

  • max time kernel
    3767621s
  • max time network
    180s
  • platform
    android_x64
  • resource
    android-x64-arm64
  • submitted
    26-07-2021 02:06

General

  • Target

    肚脑虫apt样本.apk

  • Size

    2.3MB

  • MD5

    8c96d005c51c6d9d7112cf933065bc10

  • SHA1

    f59259e40aee6c1de5d81b5eec94ebbb2a3b6de0

  • SHA256

    a38cce6ee4ab232f259d98818fa1cd06d7784dac21d42fc41eac4ad26f5bd63e

  • SHA512

    7afb5b0b9bf4f8d289e521c1bbb000e4864e89e0d9daed3ff77c07a95ff857675347914cd3a3a8e697421f0de2a674d65879a5ec82050f520b1f01cfba3c787a

Score
3/10

Malware Config

Signatures

  • Uses reflection 1 IoCs

Processes

  • com.tencent.mm
    1⤵
    • Uses reflection
    PID:4175

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.tencent.mm/databases/Dname
    MD5

    63e5909f623fcad697d51635cae832bd

    SHA1

    461e049677a19d0ac3f2963777923c848773f2d2

    SHA256

    aa599a9ce27e6b27f874d70ae423d8c9b79f1ca75c6d5c8351bc5c35e11c53e4

    SHA512

    c67fea31e2012c1161b8206eeafa641f1ef64789f7bbebb954a8cb28b898d744560f7eff6d2aba7d2ddd0c35c47fe2ea0c220fd4dc91694bbfd26e85e28a6911

  • /data/user/0/com.tencent.mm/databases/Dname-journal
    MD5

    f367d866386974375ad5829ff5693cfe

    SHA1

    e44884fff2b765939c9bf7d869f8a5c6778251a9

    SHA256

    61e5b5fad3289306c292a93f808345798d1e150f7668372b86d60bd1242deace

    SHA512

    ac2edbfd07156c841fe66cc4b45b059feabac40d99f9df715db4fb7f60a9d4ed00363f426ccbd7c8ef4484468ff7329f4549379fadaf8d21d75fbdb2d2e7430e

  • /data/user/0/com.tencent.mm/databases/androidx.work.workdb
    MD5

    7e858c4054eb00fcddc653a04e5cd1c6

    SHA1

    2e056bf31a8d78df136f02a62afeeca77f4faccf

    SHA256

    9010186c5c083155a45673017d1e31c2a178e63cc15a57bbffde4d1956a23dad

    SHA512

    d0c7a120940c8e637d5566ef179d01eff88a2c2650afda69ad2a46aad76533eaace192028bba3d60407b4e34a950e7560f95d9f9b8eebe361ef62897d88b30cb

  • /data/user/0/com.tencent.mm/databases/androidx.work.workdb-journal
    MD5

    5532a576d40f768d1236600ec6b9b363

    SHA1

    1d1ced3f1ef99ce0ea2cda0c8e870dd78b4b7f86

    SHA256

    7d0ac25f07c37f22baefc17f3161b23ac938fe7c64a2b43d2e8147309ffe5b76

    SHA512

    cc369decdcc829d396e308a2a275305e3f3759a9e0495d16abc3c6b8fcdc2373256a6afaabc9db2b0bc28e076801341eee35752a268480eebea4da2e390757da

  • /data/user/0/com.tencent.mm/databases/androidx.work.workdb-shm
    MD5

    c98902673eef519501a732866b041591

    SHA1

    dcf99a8dc6c0ad27b38b5b75819c5eeef21a810a

    SHA256

    7972551947b576b772c0df6ca69e7c4716d879f7bdcb95758445b8fdd91535e8

    SHA512

    4e9bd09fc1889afde69c602cf1afa705934f23a1c768422bf2a0b73947fe3d67963b25f39e29c1f08452208488b4a7933e7c12bc3bacf03ed3f6e5374fd0d290

  • /data/user/0/com.tencent.mm/databases/androidx.work.workdb-wal
    MD5

    ccffa97a41a7f12e05ba0965866134f7

    SHA1

    81a0b97f162bf86354f55406fdf5060ee3b8faf7

    SHA256

    35bb4c69f45cdbcb54124e046fad5670c35f9db0c2c7be2c66bf8d6ccd3f8ebc

    SHA512

    f5ed5f71718895c3919599bc4c267c59d92033acb9d7b79d8805c564275e7ba10ed019bab373983310ec3bdff9992e3cff68ef9ae033e76b7f7457c74ab36635

  • /data/user/0/com.tencent.mm/databases/com.google.android.datatransport.events
    MD5

    7daa8bf70cba1177c0aaa35143f5ff54

    SHA1

    4ddb8e3e373296808fd5a3832a454ea9c0c60b0a

    SHA256

    f02ded6053bd0f124da16cdf40849fb201797ddfac5536ab36e1feceb21564a3

    SHA512

    7178eae8e99b2f8b571bd333a3c6916bd088c96dc2c6d5b074ac388e58a345de6a82daceb39994019cbdc5c2d4065912eb0c52787ec50d9e1f746ba92bcee22f

  • /data/user/0/com.tencent.mm/databases/com.google.android.datatransport.events-journal
    MD5

    0ffc242042019f5d765e81feea625abe

    SHA1

    7e2fc45640e0500e885d8637578d053391df970c

    SHA256

    6c2b24fe45e253296dd8e563317bc9922ccfb1f763a51040a9dae378857bbd84

    SHA512

    767a00ce454fdf80e9acc08bcc56ca4b7cf6ffbcc2b5cdfa451abdd8e5b0557168b67a6d3e8e2d29de9cf1f34027978ebd1ace226b47b5ee5a207c12ff7e81cb

  • /data/user/0/com.tencent.mm/files/PersistedInstallation2886368518134644962tmp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.tencent.mm/files/PersistedInstallation5355047439361279614tmp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.tencent.mm/files/accounts.txt
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.tencent.mm/files/bdmn.txt
    MD5

    47e9f54562ad04f1771ff1d13237ef9c

    SHA1

    0a454db3c91eac85c21bbba60c80139bbf2653e5

    SHA256

    db254578d5eaf00ae39c74ade8d065b1de70ac1a3e991cec480be56e9bc74e38

    SHA512

    b6cdc426808633e612e61adbe392b828fc52214d6408d56018f26bad4fd9ad623ea19d29b63024bbfdbfe2cb1d11386b9594785e4195cf539b359c65c0aa225d

  • /data/user/0/com.tencent.mm/files/generatefid.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.tencent.mm/files/pdmn.txt
    MD5

    13f3cf8c531952d72e5847c4183e6910

    SHA1

    ac3e7b007d7ab0ba379faa8ab62d9da35c5444f4

    SHA256

    6d05621ab7cb7b4fb796ca2ffbe1a141e0d4319d3deb6a05322b9de85d69b923

    SHA512

    c2b37e4037631aaa4809e9a0dc82ad5ce7a04fa98a6b6de280d16181dc88de0b3e337a96a7aac19619ac65d68537dbe171b3857a72344a1a9d74bd3923460854

  • /data/user/0/com.tencent.mm/no_backup/com.google.android.gms.appid-no-backup
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.tencent.mm/shared_prefs/FirebaseAppHeartBeat.xml
    MD5

    50655a8d3db1cb07b2cc82f9a256d7cb

    SHA1

    392c6a8bdda0e46fe5c8f7cf67529d9e76b7f16e

    SHA256

    f6176dd0b93b93120ce0999f90d3286cbfc3a4b5562c1f0ad362ce722a0e5c39

    SHA512

    80acf21ebae4948165690e9d7ec03f60c8c4acbfed2053b1df4f690bf03aff4d5212278aab8a37a0325adaf52d98a6b1c0725ddc0f5451c2746de6ff623d8867

  • /data/user/0/com.tencent.mm/shared_prefs/FirebaseAppHeartBeat.xml
    MD5

    50655a8d3db1cb07b2cc82f9a256d7cb

    SHA1

    392c6a8bdda0e46fe5c8f7cf67529d9e76b7f16e

    SHA256

    f6176dd0b93b93120ce0999f90d3286cbfc3a4b5562c1f0ad362ce722a0e5c39

    SHA512

    80acf21ebae4948165690e9d7ec03f60c8c4acbfed2053b1df4f690bf03aff4d5212278aab8a37a0325adaf52d98a6b1c0725ddc0f5451c2746de6ff623d8867

  • /data/user/0/com.tencent.mm/shared_prefs/FirebaseAppHeartBeat.xml
    MD5

    50655a8d3db1cb07b2cc82f9a256d7cb

    SHA1

    392c6a8bdda0e46fe5c8f7cf67529d9e76b7f16e

    SHA256

    f6176dd0b93b93120ce0999f90d3286cbfc3a4b5562c1f0ad362ce722a0e5c39

    SHA512

    80acf21ebae4948165690e9d7ec03f60c8c4acbfed2053b1df4f690bf03aff4d5212278aab8a37a0325adaf52d98a6b1c0725ddc0f5451c2746de6ff623d8867

  • /data/user/0/com.tencent.mm/shared_prefs/com.google.android.gms.appid.xml
    MD5

    f65253389b3ecab760109398592c9064

    SHA1

    1a05981ea136d88efd7760ca5d6c882aa056e174

    SHA256

    fc48f82da2d663448f8f026142c319feff67569b2ae2af532d248af7fb7cfd50

    SHA512

    c9e1579fe6da24b7478c1791588c105845a0ce6c38010e4736e1016ba027100f10492355d569080ac85768c5984cc43ef6a2429b5514912cb935d22d42be97fd

  • /data/user/0/com.tencent.mm/shared_prefs/com.google.android.gms.appid.xml
    MD5

    249d51eba8bc021e84d0b0ce7ba90db2

    SHA1

    28b94cb764938e759e1ebd73c5903c3660854c1e

    SHA256

    f07b8b5e8543714e94e46c1336f1705ba6893da650af513d3ef40ae78508a563

    SHA512

    1670c30bc601b2282b4c7e8aea7b96f7ccf8e7ddaec810bad48eef93d1745347083a21055efafabf7a31dca00edcf10db80c424e1788d1e773050f83965f639c

  • /data/user/0/com.tencent.mm/shared_prefs/com.tencent.mm_preferences.xml
    MD5

    dfce9d7cd0d267a8b0daf5a1e90a5d0c

    SHA1

    6678a68d0d77047ea89e961a131b545b339d7a34

    SHA256

    7f0063eab3034ac326bbf0eca58d90397b0a62e77d06a7f7bdeb2b8d2a496fd1

    SHA512

    58d977ce61af9c4462311e470e4e49bbcdc3b6acb4af5c417eba670707c959d0aaf222fb3e51a3d022a15ce551c1bc5d7dce1d2475fb2da746f477ecf666e01f

  • /data/user/0/com.tencent.mm/shared_prefs/com.tencent.mm_preferences.xml
    MD5

    1a7b5e49d6f40e30c570fb797084014a

    SHA1

    7bce0c5e9ffc6c274f5119c3628b537c693d3360

    SHA256

    c13c26649abe3e678635288825d7af45f4aceeac559c5c3bbd79422577092d5c

    SHA512

    110a7d8f49aae83da30af7d6d0c8c6423da9ed9d0f39903433bb61acb5387029db9b6b303529da9381102cf5d65ff9995e5fdb184b64d8323edd317d425077d6

  • /data/user/0/com.tencent.mm/shared_prefs/com.tencent.mm_preferences.xml
    MD5

    a4d408c1d66c7c0a8e62237d7794f625

    SHA1

    8c4092f0e04f0470bf5d9fcc7c304bf436ad4dd3

    SHA256

    673343e5eb83064dbf9877ae9a0b1d191f193ed4c19d58200b87ccebc9841958

    SHA512

    1dc7885c1bce3a76f8e879d77a4fe14201433946676972a65b968adeeef6ba3f00a238e0edda076cdda5851f86eca0622c5fe7daf74fb1ef0177f6f2dbc23005

  • /data/user/0/com.tencent.mm/shared_prefs/com.tencent.mm_preferences.xml
    MD5

    aaaa56437bfbdfe2ca9a05226437a02f

    SHA1

    fe73a064ccbb99e51f1ce12fa4c2a627df81a175

    SHA256

    8156747727e4cdcdb20e8fd551de0797cf189235b02469e76d1d958699572b4f

    SHA512

    853a5ac39b4e6d50183c8f14b9a2074022a6be54e0f549750b99813cd47ea57631436056e48c3e0308a4bc7251dc5a49266c24e10df743f1d4eb61eb1d1e6fb4