Analysis

  • max time kernel
    3767851s
  • max time network
    90s
  • platform
    android_x64
  • resource
    android-x64
  • submitted
    26-07-2021 02:08

General

  • Target

    肚脑虫apt样本.apk

  • Size

    2.3MB

  • MD5

    8c96d005c51c6d9d7112cf933065bc10

  • SHA1

    f59259e40aee6c1de5d81b5eec94ebbb2a3b6de0

  • SHA256

    a38cce6ee4ab232f259d98818fa1cd06d7784dac21d42fc41eac4ad26f5bd63e

  • SHA512

    7afb5b0b9bf4f8d289e521c1bbb000e4864e89e0d9daed3ff77c07a95ff857675347914cd3a3a8e697421f0de2a674d65879a5ec82050f520b1f01cfba3c787a

Score
3/10

Malware Config

Signatures

  • Uses reflection 4 IoCs

Processes

  • com.tencent.mm
    1⤵
    • Uses reflection
    PID:3610

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.tencent.mm/databases/Dname
    MD5

    e526514b58cec93b274f3e55f97490a0

    SHA1

    94abe13d47ef5b8b504891055617b8436ebbee51

    SHA256

    1792d7b89eaf52a9ded6a344eb212d304974c63cd4c19f0486fc894db0f0bf04

    SHA512

    797df8140363d701cc4c966ce139474d6fc1f8178e38d8466277be671add2994027bbc2398e21454a5d6c03ae6519fbd1d3b1d77d9b1fce5ca0c1e0b584fea36

  • /data/user/0/com.tencent.mm/databases/Dname-journal
    MD5

    346d62fef7fca82073c1a58458e4e01f

    SHA1

    1b584043572639940aa408bb0f3bd9f880d5ab3f

    SHA256

    6a83ef0171cea456f04d72384ebe43b9f875747f2da3a213b335b86ba437929d

    SHA512

    4cc25213d138bff2d5afbee9257a96b63b20736fc6c08065494ef6e2d5d6cb5885b645807fe4a3199a71cb14c74e45ec90e394d1358cf75afaad4697d778c0eb

  • /data/user/0/com.tencent.mm/databases/androidx.work.workdb
    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.tencent.mm/databases/androidx.work.workdb-journal
    MD5

    3cc8a2e6d7e15c190db20d5b0b2c5d9d

    SHA1

    9c2cf8c2e24243e9058052cb1c18770013a16135

    SHA256

    91bb55fa772e395497478199a9f6034988a62d595882c7965548fdf2448e0c9e

    SHA512

    7499baebbe92e65ba5a7f748a322a00d2781db374c14563e0a5d8fa02057f496355a3f544fd33db4d4aabce921eab2b0ebee625ffd6f54e3796bf7234cb9165a

  • /data/user/0/com.tencent.mm/databases/androidx.work.workdb-shm
    MD5

    22c44ab526e8230ed25ee2e8e3c5a097

    SHA1

    1e223503c4fc2f8709477a34ed4f1c070be06c18

    SHA256

    75f25efbeb8860ba480b4375315a990c7d9d9479412be52e559762623ca5dd53

    SHA512

    b6c44c41b8a68bebf7c551dbad7fe46fce3a7defecf5a760dd2e274584cf6c988876abe9a08d46de7c4eb25b18609b42a36957e9128cf5c05e8a82c797294dc0

  • /data/user/0/com.tencent.mm/databases/androidx.work.workdb-wal
    MD5

    a9ad080d6fcbb8957769a5a444f3602f

    SHA1

    1185071e8b7c21c0890598515334ae84fe6f83dd

    SHA256

    f672e4d9efba44dcdbd1ae08cfdb7c7bb8aa2e3b3a04901bae81e4494e857891

    SHA512

    2c6dd924372e20924cc1c08cd9d76fab73236e906b8336a75bc4af35755fe4cee1d54d0db71d4eda883522bcefd3cb9f155d3ba51a611fd7cbc90fb1b7dc1601

  • /data/user/0/com.tencent.mm/databases/com.google.android.datatransport.events
    MD5

    ad7bbdcce258ba21d0a07659a3849e3f

    SHA1

    887e17f38cf736cc82125092f6cadd5753184286

    SHA256

    a6417906596802ee2a80cd22ef848d832848a6f36f4e45d320e9b98633a5c456

    SHA512

    4519d5aec86a163c9c2c97d1cf9862cc9b421749c0d78c0f4ceee31c9fe07ac557e736d5b3f72942e2d5d44b578fc8a6789f2e7a3ec98ec2199fdc50dd3ac45d

  • /data/user/0/com.tencent.mm/databases/com.google.android.datatransport.events-journal
    MD5

    98eba0f01f0cc28d86dbec3ef7467124

    SHA1

    3414999d94a07e385b5c029e999be5af00e6406d

    SHA256

    8b5a65282b0e386b949ce8d063480a200311a9264a8aa2a9daf2550a1625202f

    SHA512

    607c44ba112018c6ca7ddcea3461df05b09b124b8f96c2634d91d3c4bb02c24542355912a65c25f70a904276a39cbb2eeaa7248820ce9ef15096227598e28cc0

  • /data/user/0/com.tencent.mm/files/CallLogs.txt
    MD5

    58e0494c51d30eb3494f7c9198986bb9

    SHA1

    cd0d4cc32346750408f7d4f5e78ec9a6e5b79a0d

    SHA256

    37517e5f3dc66819f61f5a7bb8ace1921282415f10551d2defa5c3eb0985b570

    SHA512

    b7a9336ed3a424b5d4d59d9b20d0bbc33217207b584db6b758fddb9a70b99e7c8c9f8387ef318a6b2039e62f09a3a2592bf5c76d6947a6ea1d107b924d7461f4

  • /data/user/0/com.tencent.mm/files/PersistedInstallation4480284476627069942tmp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.tencent.mm/files/PersistedInstallation7621480380075555864tmp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.tencent.mm/files/Tree.txt
    MD5

    e52efc3c334ecb7a480fb8d55ecfeb67

    SHA1

    dd8829e7ab9b5e9478aadd24a523575e121be949

    SHA256

    1aa15e5616a1cc67fa2b5a627e098331d3b14bf05e89ec7a9cbb375919c993f1

    SHA512

    b9f04894580c4f718795f6a2b2082ce78d0e24d31f8ae61ea210cca97b38a0ff4d945817d94f9f0e61b5f5a308f542797f26764e4d2ea99a368bf91cebb2b61c

  • /data/user/0/com.tencent.mm/files/accounts.txt
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.tencent.mm/files/bdmn.txt
    MD5

    47e9f54562ad04f1771ff1d13237ef9c

    SHA1

    0a454db3c91eac85c21bbba60c80139bbf2653e5

    SHA256

    db254578d5eaf00ae39c74ade8d065b1de70ac1a3e991cec480be56e9bc74e38

    SHA512

    b6cdc426808633e612e61adbe392b828fc52214d6408d56018f26bad4fd9ad623ea19d29b63024bbfdbfe2cb1d11386b9594785e4195cf539b359c65c0aa225d

  • /data/user/0/com.tencent.mm/files/generatefid.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.tencent.mm/files/netinfo.txt
    MD5

    a53395f162cbe1ff88456f77892c1985

    SHA1

    b11ec99944299d71361210c015f68b09da7cd228

    SHA256

    9bef8caa5af74527e050c202d899e2b18a855dbaee9cde162bdc8d6d6223a5fd

    SHA512

    79d4b51f04b4fc40a1810002b3acd6284810ce5d1585344498c4c635c03cf86cf9c9dfa84088941d0e1df9acaa98976fd456ce656461e911cb0962e83368f6a8

  • /data/user/0/com.tencent.mm/files/pdmn.txt
    MD5

    13f3cf8c531952d72e5847c4183e6910

    SHA1

    ac3e7b007d7ab0ba379faa8ab62d9da35c5444f4

    SHA256

    6d05621ab7cb7b4fb796ca2ffbe1a141e0d4319d3deb6a05322b9de85d69b923

    SHA512

    c2b37e4037631aaa4809e9a0dc82ad5ce7a04fa98a6b6de280d16181dc88de0b3e337a96a7aac19619ac65d68537dbe171b3857a72344a1a9d74bd3923460854

  • /data/user/0/com.tencent.mm/files/pkinfo.txt
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.tencent.mm/no_backup/com.google.android.gms.appid-no-backup
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.tencent.mm/shared_prefs/FirebaseAppHeartBeat.xml
    MD5

    75b347422ba872f51ad3bae75153d16a

    SHA1

    0230a260a20751c6ff7448c704dedc135d3b5292

    SHA256

    937af70355ade9bba8deb7a0ebcd0ad2a1f879f86936a73e7451cd5c310f7d00

    SHA512

    71003924e18ebd69391740f35f94fadd912427afe668966f18acecdb26eed1a641c5a37245d53b8860f11c5beb75c0b2220a47fe79bc0fd2f1e39bb978f5aef0

  • /data/user/0/com.tencent.mm/shared_prefs/FirebaseAppHeartBeat.xml
    MD5

    a152ece3bbb9ad113f6f1b5565eea468

    SHA1

    4fc6cb088d7282476f879df4f9f7b78445e2a322

    SHA256

    e0817ca9130926e85780887557b64ca755e595a85705d752da1ab0f215078c98

    SHA512

    43fe20ff01a66d16aa5a8ba363fdd740270a27bd623b718e4b9041a5a5d670cb054393e8a3f7a2ef54063b8c65ee46c6f00d569bb2170f6adf1e6f774da0c925

  • /data/user/0/com.tencent.mm/shared_prefs/FirebaseAppHeartBeat.xml
    MD5

    44ddf034793b9f43bb11e2db57a2028c

    SHA1

    8d44df1ebc64db86de3907e458ffcb0d13d7c39b

    SHA256

    39a5e6914ec457facc15ee4767e77b1eb3a9fddff25afd3f92713eb63f80e27f

    SHA512

    f65975189c93c8c67c1013c5209ae4219f40b4660247c41d7b561df12c4350db3677cfeaaf15421de53926d49e258e72ee97dbb4adea5badcd1e5aaee031626e

  • /data/user/0/com.tencent.mm/shared_prefs/com.google.android.gms.appid.xml
    MD5

    13afdd3b1bea85b202dbea5ff2812348

    SHA1

    294d7b093e9ce1d92a84e78871172317a742537f

    SHA256

    9b039c4057b563397cac0fcacaf7f3207ed825fe799d2fa51f1745595c709f44

    SHA512

    dfb0d2455ab9646cd051923eb7adb7b26bf8101b4957e9fc75d8231ccbbc095a47e69cf9c92b822b4de1370e27fb00fe7749887d53e9cb2c52c2216fedaf29e7

  • /data/user/0/com.tencent.mm/shared_prefs/com.tencent.mm_preferences.xml
    MD5

    dfce9d7cd0d267a8b0daf5a1e90a5d0c

    SHA1

    6678a68d0d77047ea89e961a131b545b339d7a34

    SHA256

    7f0063eab3034ac326bbf0eca58d90397b0a62e77d06a7f7bdeb2b8d2a496fd1

    SHA512

    58d977ce61af9c4462311e470e4e49bbcdc3b6acb4af5c417eba670707c959d0aaf222fb3e51a3d022a15ce551c1bc5d7dce1d2475fb2da746f477ecf666e01f

  • /data/user/0/com.tencent.mm/shared_prefs/com.tencent.mm_preferences.xml
    MD5

    1a7b5e49d6f40e30c570fb797084014a

    SHA1

    7bce0c5e9ffc6c274f5119c3628b537c693d3360

    SHA256

    c13c26649abe3e678635288825d7af45f4aceeac559c5c3bbd79422577092d5c

    SHA512

    110a7d8f49aae83da30af7d6d0c8c6423da9ed9d0f39903433bb61acb5387029db9b6b303529da9381102cf5d65ff9995e5fdb184b64d8323edd317d425077d6

  • /data/user/0/com.tencent.mm/shared_prefs/com.tencent.mm_preferences.xml
    MD5

    a4d408c1d66c7c0a8e62237d7794f625

    SHA1

    8c4092f0e04f0470bf5d9fcc7c304bf436ad4dd3

    SHA256

    673343e5eb83064dbf9877ae9a0b1d191f193ed4c19d58200b87ccebc9841958

    SHA512

    1dc7885c1bce3a76f8e879d77a4fe14201433946676972a65b968adeeef6ba3f00a238e0edda076cdda5851f86eca0622c5fe7daf74fb1ef0177f6f2dbc23005

  • /data/user/0/com.tencent.mm/shared_prefs/com.tencent.mm_preferences.xml
    MD5

    aaaa56437bfbdfe2ca9a05226437a02f

    SHA1

    fe73a064ccbb99e51f1ce12fa4c2a627df81a175

    SHA256

    8156747727e4cdcdb20e8fd551de0797cf189235b02469e76d1d958699572b4f

    SHA512

    853a5ac39b4e6d50183c8f14b9a2074022a6be54e0f549750b99813cd47ea57631436056e48c3e0308a4bc7251dc5a49266c24e10df743f1d4eb61eb1d1e6fb4

  • /data/user/0/com.tencent.mm/shared_prefs/com.tencent.mm_preferences.xml
    MD5

    1358437db436820522e3268514de122d

    SHA1

    0968e0ca10ad0b181ed55d24e198e64958e6495d

    SHA256

    599ab91d8245ce736c5cf7b509e215273160c7fa3ff11eec8c77753b651e28cc

    SHA512

    1374da3341cc7adc929bef17142306afc1a51708611af49535e20ed290a6a5babb9360d49d590988f00654cd98ad83afffd0cd2e9da82e03f1bf41b2293577a1

  • /data/user/0/com.tencent.mm/shared_prefs/com.tencent.mm_preferences.xml
    MD5

    580ba1366afb0465b7ccfaaecaad8798

    SHA1

    87d999a647d588d1d9587b6d1aff2727bbbefc05

    SHA256

    92faeff219aea2ebecaf5213c6a2428f34af3aeee8c055cd5e70cd53f31c0408

    SHA512

    52f5d6944ac3fc54379b7ba83172faa902e4251da175571dc9e6c72706f177ae70e6ad8c1b80bcc385756b88f01f886103745b587de58ece1789839bf872c29a

  • /data/user/0/com.tencent.mm/shared_prefs/com.tencent.mm_preferences.xml
    MD5

    a4fb79d1cb36055b6be0d57322143545

    SHA1

    07ada4cb85c4f2a5fc578e1c5257bb52548f6f96

    SHA256

    409ecf7c8042478725ba13da4c9ff54f67d7481819a5c71b16d7627debb12465

    SHA512

    4c3a2eac7af4d4bdcea653f59b4fcc7bfbd8521fab45cb2325db3a39bbcd448f8638d7a948ec3cd4207e66399c472b1fcc42578820897b4fc46ce297325cc440

  • /data/user/0/com.tencent.mm/shared_prefs/com.tencent.mm_preferences.xml
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.tencent.mm/shared_prefs/com.tencent.mm_preferences.xml
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.tencent.mm/shared_prefs/com.tencent.mm_preferences.xml
    MD5

    537158ea901503a80da5118522ccfda9

    SHA1

    af838322951c167ffa265f27b81dbf49d88b2f85

    SHA256

    612f92e8069c38ff5ba24adeda851bacb28668d348f2c7480358c05c7bc8bae4

    SHA512

    d57f25259f8aacf27bea05c60bb5d6115db95a818948ee2596fcd01261e4d3cb258252c1d8e73b6129ff0b973073baf9b19d53f47a147303f68f06d0335bf58b

  • /data/user/0/com.tencent.mm/shared_prefs/com.tencent.mm_preferences.xml
    MD5

    c327e387b6f80216b298ad2695bfe57a

    SHA1

    028a7d6b3d388c61dfcbab9588bcc5713f7f481d

    SHA256

    7b2957af952c1419480992953595727c93e52ead5f461455b00b7e86eebe1c67

    SHA512

    04e091e959920efa82a5820dfcfad345e05cf90af0c30dab60cc227273361da8e39db5b7ca5c36c51ca5ff2b740fda5c4cf2f43301d8dae5dcfd14b2a2434eea

  • /data/user/0/com.tencent.mm/shared_prefs/com.tencent.mm_preferences.xml
    MD5

    537158ea901503a80da5118522ccfda9

    SHA1

    af838322951c167ffa265f27b81dbf49d88b2f85

    SHA256

    612f92e8069c38ff5ba24adeda851bacb28668d348f2c7480358c05c7bc8bae4

    SHA512

    d57f25259f8aacf27bea05c60bb5d6115db95a818948ee2596fcd01261e4d3cb258252c1d8e73b6129ff0b973073baf9b19d53f47a147303f68f06d0335bf58b

  • /data/user/0/com.tencent.mm/shared_prefs/com.tencent.mm_preferences.xml
    MD5

    071b9db58ed3aa79aa356f4f53ce8e3e

    SHA1

    d6534809010ce2fbf6032d9ad46476d385ceec99

    SHA256

    9eb34af1da0ef3a26a8a6f96bbbe495686dfbe199ab7e0c6443b408349fcfabe

    SHA512

    42303deee2adc6a049e3d00524925df1ad1aae48e6ec81591963dbee693a2dc6c458a2ef47fa32946a42ebb614eb834c678e08fddf026a7869be026be39788c4

  • /data/user/0/com.tencent.mm/shared_prefs/com.tencent.mm_preferences.xml
    MD5

    537158ea901503a80da5118522ccfda9

    SHA1

    af838322951c167ffa265f27b81dbf49d88b2f85

    SHA256

    612f92e8069c38ff5ba24adeda851bacb28668d348f2c7480358c05c7bc8bae4

    SHA512

    d57f25259f8aacf27bea05c60bb5d6115db95a818948ee2596fcd01261e4d3cb258252c1d8e73b6129ff0b973073baf9b19d53f47a147303f68f06d0335bf58b