e2db34355df77e3c95e291a1374e4ba6a75d0da471ab9f929b9ef3424f824421

Resubmissions

31/07/2026, 15:56

260731-tdpc6awala6

27/07/2026, 09:56

260727-lyfbzszxew7

27/07/2026, 08:23

260727-kabs8ayfrb7

27/03/2022, 18:12

220327-wtbs4sbce98

Analysis

max time kernel
3432373s
max time network
66s
platform
android_x64
resource
android-x64-arm64-20220310-en
submitted
27/03/2022, 18:12

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
e2db34355df77e3c95e291a1374e4ba6a75d0da471ab9f929b9ef3424f824421.apk
Size 4.9MB
Sample220327-wtbs4sbce9
SHA256 e2db34355df77e3c95e291a1374e4ba6a75d0da471ab9f929b9ef3424f824421
MD5 d18b8944f0dd42192d6569c2c7fa8eca
SHA1 737b9ecbbd625711764bee70806c79b873c63710
SHA512 133e6074e4b1b4b27c3d4ba6c1184d51c50b019495509b10c9ee96237e6a253f6eec9edb9e3989afad63967f5bf5c8da580e1b98ba3af3c3e948e8c65b2b2e8c
MD5 SHA1 SHA512

Score

8^/10

Malware Config

Signatures

Makes use of the framework's Accessibility service. 3 IoCs

description	ioc	Process
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByViewId	com.qq.reader
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfosByText	com.qq.reader
Framework service call	android.accessibilityservice.IAccessibilityServiceConnection.findAccessibilityNodeInfoByAccessibilityId	com.qq.reader

Acquires the wake lock. 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.qq.reader

Loads dropped Dex/Jar 1 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/data/user/0/com.qq.reader/hgyGj8yg9i/ygjptI8gfagUg9j/base.apk.gpGjpjG1.I8I	5736	com.qq.reader

com.qq.reader
1⤵
- Makes use of the framework's Accessibility service.
- Acquires the wake lock.
- Loads dropped Dex/Jar
PID:5736

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

base.apk.gpGjpjG1.I8I

Path /data/user/0/com.qq.reader/hgyGj8yg9i/ygjptI8gfagUg9j/base.apk.gpGjpjG1.I8I
Size 1.0MB
SHA256 0af59c77852dbaaa18d7cf78f199ce3b71f0c736ebf94cd5478c5eef1e7aaf9b
MD5 fb11b5a880943f034639f55d43208d83
SHA1 947813744105d35e165432803e46dcbe3fd75fee
SHA512 8c2ea223e165055794a3fc1b048d8e72db4eb5fd693e0685f12ac7518589d92ccf33651ca522d6117ad13d06175c3d80fc2efb2e9e22c4a28ece6a3c2c898c79
MD5 SHA1 SHA512

Download

multidex.version.xml

Path /data/user/0/com.qq.reader/shared_prefs/multidex.version.xml
Size 306B
SHA256 b3cb9f733848cc8d364e57def7ccb78ed46296f0bd80c1eda4c12bc8ed734937
MD5 4b725521195e7b26fee370d6d486082d
SHA1 4a65b1ee6ceb3e31cf474d567566b4148ac254f2
SHA512 b270831e009b76b90f2fc48855818634c18226b3af8533528d32b4dfac40113862d4af88ba07e8138311bf00ba3068d6d9a019efea610d1c7b083bfad77af448
MD5 SHA1 SHA512

Submit Download