cbf737a0af39171fb82e2291b6c2a64145383b0c1c88e90793f56b4b247e5083

Analysis

max time kernel
2201664s
max time network
46s
platform
android_x64
resource
android-x64
submitted
15-10-2021 09:12

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

cbf737a0af39171fb82e2291b6c2a64145383b0c1c88e90793f56b4b247e5083.apk
Size

4.9MB
MD5

94e5c60da8b06a12bfc050b424397665
SHA1

65eaae6c95d51387a78364ce5fbc5b9c0e35cd0c
SHA256

cbf737a0af39171fb82e2291b6c2a64145383b0c1c88e90793f56b4b247e5083
SHA512

bb064c4a9c4a7c279d6ddc62b178daea7105ff6d5a627dbf1fa0d195a239685250bfd23623a0be7a1ba3ed9abf4517370c7339fe5da396fd520a02b3dfcc8157

Score

7^/10

obfuscation

Malware Config

Signatures

Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.

Processes:

com.qiyi.video

ioc pid process

/data/user/0/com.qiyi.video/joaghbfhbp/bkcvhhszbbhsbhG/base.apk.sljnmpo1.bxo 3632 com.qiyi.video
Requests enabling of the accessibility settings. 1 IoCs

Processes:

com.qiyi.video

description ioc process

Intent action android.settings.ACCESSIBILITY_SETTINGS com.qiyi.video
Uses reflection 1 IoCs
obfuscation

Processes:

com.qiyi.video

description pid process

Invokes method android.view.ViewGroup.makeOptionalFitsSystemWindows 3632 com.qiyi.video

ioc	pid	process
/data/user/0/com.qiyi.video/joaghbfhbp/bkcvhhszbbhsbhG/base.apk.sljnmpo1.bxo	3632	com.qiyi.video

description	ioc	process
Intent action	android.settings.ACCESSIBILITY_SETTINGS	com.qiyi.video

description	pid	process
Invokes method android.view.ViewGroup.makeOptionalFitsSystemWindows	3632	com.qiyi.video

com.qiyi.video
1⤵
- Loads dropped Dex/Jar
- Requests enabling of the accessibility settings.
- Uses reflection
PID:3632

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.qiyi.video/joaghbfhbp/bkcvhhszbbhsbhG/base.apk.sljnmpo1.bxo
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.qiyi.video/joaghbfhbp/bkcvhhszbbhsbhG/jYhsdbcz.fcla
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.qiyi.video/joaghbfhbp/bkcvhhszbbhsbhG/tmp-base.apk.sljnmpo5318964829229277019.bxo
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.qiyi.video/shared_prefs/Voicemail.xml
MD5
42aa7940b06924a4b261bbdb29bc0246

SHA1
8df37fb3972252d18f481715582472002a531a8d

SHA256
841dcb206bb6f9a3d29139ac533dca814e1064b7c84417d032343ded949a272e

SHA512
3fcb569acfead4452940e75225329cefa49214c08a4845a42d3c589e813ac4d1f3f37138bbf98913cb78e871d42ca0c56697d99cfea803858a5294e508bf96f0

Download Submit
/data/user/0/com.qiyi.video/shared_prefs/multidex.version.xml
MD5
9c5b2caba1aabc92c1d5072af6c7573e

SHA1
bb8f770a08b621610baa659f5666330bc77b1133

SHA256
d81c6bb6e0a340c873d5fa22f49031f137d38891fc304d701b3ae0764d0500dd

SHA512
4db0968631a537a56a027993e64adbb2146b6066af58a99dc96cf05e6d79c431a2405c448a7c7fbda2442624f983e3a8e1f8ac42e3f92245412d81542aba3bf8

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads