Analysis

  • max time kernel
    3817050s
  • max time network
    103s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    20-05-2022 22:07

General

  • Target

    01384b3e8053abea8bb66600d3b85c838324d64d7752a7b947afe925de8a880d.apk

  • Size

    16.6MB

  • MD5

    ef59ca38054edd7eb136ec992f2f25c8

  • SHA1

    e8ac38bcf2375042cf1598a788618579ac4f4f92

  • SHA256

    01384b3e8053abea8bb66600d3b85c838324d64d7752a7b947afe925de8a880d

  • SHA512

    427f9bc6f210522870f6fde44c86b8105478f5ad1d958b566f201f0fcd93e7ff01b6f2c0d155510d4663c5b64d446e6e5918a68ed28a2a03bcccb103afadb65c

Score
5/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • zifu.payment.useyourwallet.zifu
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5154
    • /system/bin/sh -c getprop
      2⤵
        PID:5276
      • getprop
        2⤵
          PID:5276
        • /system/bin/sh -c type su
          2⤵
            PID:5336

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/zifu.payment.useyourwallet.zifu/app_bugly/sys_log_1653084482827931.txt

          MD5

          d41d8cd98f00b204e9800998ecf8427e

          SHA1

          da39a3ee5e6b4b0d3255bfef95601890afd80709

          SHA256

          e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

          SHA512

          cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

        • /data/user/0/zifu.payment.useyourwallet.zifu/app_crashrecord/1004

          Filesize

          240B

          MD5

          c5cce376e1cc8587eeb1d1b64d90aeac

          SHA1

          4be17f7c21d4b7f7e0584f7c06f7fba3c08d38fb

          SHA256

          02f1f2db2dc6be665119a3746b96250459029f09520739849c762e5c6c2ac035

          SHA512

          8c6d2986f5f17df9fb852a37df39b455fc1ce9b5b20f1216d30c60c70265808c9c2a19a9681cf8dd8e6ed3cfb45a9514eafb1ef1f33f3864e852fbb65b0b29ae

        • /data/user/0/zifu.payment.useyourwallet.zifu/databases/bugly_db_

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/user/0/zifu.payment.useyourwallet.zifu/databases/bugly_db_-journal

          Filesize

          524B

          MD5

          79ba0e8535bf6a6deac1fbac0158ea29

          SHA1

          3dc75c5f9d9e57f7f8ace2a283a5d7c12da7df5a

          SHA256

          11e1c905dedc12f545ae0e8442f4a5974a236d5ba23d6aadab4a960452d740af

          SHA512

          d7aa8b8434b2357b6141c1e3f2d8bf9e712ec3b31860a206a434c9948822b61137186ee70135e95abf299a14628c2106b2a3fc2aac4220195588c1d84e322658

        • /data/user/0/zifu.payment.useyourwallet.zifu/databases/bugly_db_-shm

          Filesize

          8B

          MD5

          7dea362b3fac8e00956a4952a3d4f474

          SHA1

          05fe405753166f125559e7c9ac558654f107c7e9

          SHA256

          af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

          SHA512

          1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

        • /data/user/0/zifu.payment.useyourwallet.zifu/databases/bugly_db_-wal

          Filesize

          104KB

          MD5

          b6d53ac83407e5ac4f8f95bb857cf9b9

          SHA1

          369139dbba798b91811f3f6776782f61fda0c40d

          SHA256

          51aa595ea3299fb826818c4f90cf6fbcaa7ca99e8186251197a76da90a92e3dd

          SHA512

          395958bacd54ed6f2e0f91825c8715639988fc6939e30f4eb15a389284b52f5c3ead812938c3b51e5ccc921f9279e70bf8dd9a56fffdf4af33aa51d2ad36562f

        • /data/user/0/zifu.payment.useyourwallet.zifu/files/local_crash_lock

          MD5

          d41d8cd98f00b204e9800998ecf8427e

          SHA1

          da39a3ee5e6b4b0d3255bfef95601890afd80709

          SHA256

          e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

          SHA512

          cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

        • /data/user/0/zifu.payment.useyourwallet.zifu/files/native_record_lock

          MD5

          d41d8cd98f00b204e9800998ecf8427e

          SHA1

          da39a3ee5e6b4b0d3255bfef95601890afd80709

          SHA256

          e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

          SHA512

          cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

        • /data/user/0/zifu.payment.useyourwallet.zifu/files/security_info

          MD5

          d41d8cd98f00b204e9800998ecf8427e

          SHA1

          da39a3ee5e6b4b0d3255bfef95601890afd80709

          SHA256

          e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

          SHA512

          cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

        • /data/user/0/zifu.payment.useyourwallet.zifu/shared_prefs/crashrecord.xml

          Filesize

          143B

          MD5

          ce43cdcc1c8f59fb4d6d891f89da9e2d

          SHA1

          daacc7c92ebbbbdbc6cbba4c915bf05bf61f755b

          SHA256

          5b234a332fb8e7d8785bfa8e3e133d23aac6f3248f6f2b1dfdc4e139f7b9efba

          SHA512

          fe2289c88e457c7c34304839a97a9c8758278d153d7ccf7dbfc96e64b483ac96d217bda10ac34eb52b8cc893b3eeb90e67658e2363e00e73b82b326b95401f54