Analysis

  • max time kernel
    3067481s
  • max time network
    16s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    23-03-2022 12:51

General

  • Target

    cfgp.apk

  • Size

    17.3MB

  • MD5

    e08f2abc3c9e634625fa36a0584f8223

  • SHA1

    f64f7fb1af9684777c20a1a2df639800d179e259

  • SHA256

    859b374472ab1c7857a121b1a5c87fe5b8ad5fc983cc6b3cf96c890f55a92e6d

  • SHA512

    0603516f7abf09a54ec4d399aa63490390caf1aef2e727633fbd5b13cb2db4bd3d474725a55c439795c2691606d99641e82536e73d28e47c6c6dc65d95a66095

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.yqmpkzrgsdi
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5090

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.yqmpkzrgsdi/app_crash/crash_dump.log

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.yqmpkzrgsdi/app_webview/variations_seed_new

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.yqmpkzrgsdi/app_webview/variations_stamp

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.yqmpkzrgsdi/app_webview/webview_data.lock

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.yqmpkzrgsdi/cache/cache/weex/libs/weexjsb/armeabi-v7a/libweexjsb.so

    MD5

    7628e2d9516f46d07f47636f323b1186

    SHA1

    1cc64d0e9b4ae930ed8d46904b01f99feb6e09cf

    SHA256

    13f588ee6494cc79d11c1ad39c50689d228bd054ed1da52f084b0feb708e14a0

    SHA512

    f56bfbc93b119ab9aa656af00757c2d46afb01234b91644d6b020bc2ccf3ae68f88e6df8757963f8af8c29325364b97252fcc27debca20cce88eec2adbab4eea

  • /data/user/0/com.yqmpkzrgsdi/files/.DC4278477faeb9.txt

    MD5

    b144f6f3e0f20fdd7b321f7dc36c356d

    SHA1

    de6181a3ff02607e17606819002a0818446901de

    SHA256

    ba1a4bbada9628d9299464e1d66144f1090862d10e0e2e01f3098398403853f5

    SHA512

    59ed9f07306ae00dc977af310002c3fd053dd07d17975c63a49e01b57249209de0fe43e4357d7de019a1f90d7c4cfc33218d9e5bf1f9cfccc84435aa098e72cb

  • /data/user/0/com.yqmpkzrgsdi/lib-main/dso_deps

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.yqmpkzrgsdi/lib-main/dso_lock

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.yqmpkzrgsdi/lib-main/dso_manifest

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.yqmpkzrgsdi/lib-main/dso_state

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.yqmpkzrgsdi/shared_prefs/WebViewChromiumPrefs.xml

    MD5

    21223e9184445fe043476484cd8cb1f9

    SHA1

    2b4813f849121d60ba35eb0889080668bb62c778

    SHA256

    bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

    SHA512

    be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

  • /data/user/0/com.yqmpkzrgsdi/shared_prefs/weex_default_settings.xml

    MD5

    8630c0060bf6343dea72667f181dfb4f

    SHA1

    11699fe28eb709f79a2c3209c84a9af8d3a41e4c

    SHA256

    ca65fa530caf2fa981625f32560e8b5a6a55f018d89bdafd16987dcbbe3ace57

    SHA512

    198061d27d2342b4e25adad2524b5fd00bb6c8c9b9496424dfd598c0e27d8486c5f899595060170fc6197d2ad6df10eb3e47db2deda723527f186ee8ffd8027d

  • /storage/emulated/0/.DC4278477faeb9.txt

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e