Analysis

  • max time kernel
    3824655s
  • max time network
    111s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    20-05-2022 23:01

General

  • Target

    88cdfb93a359f98061398d7bab3f586e818cbd1625ed3853a3e7e8eaf8fd1159.apk

  • Size

    1.6MB

  • MD5

    db370ed1be89c2a04d4237f8c7645f2b

  • SHA1

    d106dac265258d544d839d64b77cfbf866210461

  • SHA256

    88cdfb93a359f98061398d7bab3f586e818cbd1625ed3853a3e7e8eaf8fd1159

  • SHA512

    af6ffa8ec23e389d849e9c602eb6f630ead30070354872e2ca4d635cbf0da64578a4b94965e4885317cfd83a25a7d55371ea3db60df9d24d9e140f425f178175

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.my114.my114xianglongrhy7630wap
    1⤵
    • Removes a system notification.
    PID:5258
  • com.my114.my114xianglongrhy7630wap:remote
    1⤵
      PID:5648

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.my114.my114xianglongrhy7630wap/app_webview/Cookies
      Filesize

      64KB

      MD5

      cb7543c4df600f2af58097cce0e334ba

      SHA1

      83cc92f38c27fdb4fa519b1ce2f37912f24af1f0

      SHA256

      64c022ae708f94ffde986e105d88f708884de325720bfb9925c4160a6d417233

      SHA512

      ad51cad0472327bd68aa2d791341cfafed58971752352537bb603ed18b15a3f9185e9150983a28ecd09606e8dcaef6d1c9d93213dd246ef7720f39842eb3d980

    • /data/user/0/com.my114.my114xianglongrhy7630wap/app_webview/Cookies-journal
      Filesize

      1KB

      MD5

      6d04dc18a3a367d88bf8a7f570985eed

      SHA1

      25ea85e1d86207f9fd253edbe69a7ef6fc5eca28

      SHA256

      6e452cde9a8186923af8fe7d563edbe5bb3ad386c733403eb63d99358aba0cb5

      SHA512

      6ee6684cb71beee1de10106f1ba94a4fc855b3b5c9cb5fc6f556d6da32eeda7a8f8ed106ab8b8c94886d0c10b699896a34fac0cfb6a9d83604f406677920cd6d

    • /data/user/0/com.my114.my114xianglongrhy7630wap/app_webview/GPUCache/index
      Filesize

      20B

      MD5

      93027d42b314432c4216e6cfca48b384

      SHA1

      43448dd8102979c3926828182579691945eedd4e

      SHA256

      3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

      SHA512

      a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

    • /data/user/0/com.my114.my114xianglongrhy7630wap/app_webview/GPUCache/index-dir/temp-index
      Filesize

      48B

      MD5

      f12426e910588711335d45540ca75f79

      SHA1

      bcae808fd58263d13be05e256e075b4172bf5845

      SHA256

      f26b4571d94ca92dcbd1c2a4a04779e6bc4e840dc52ea0e6596a33bdfa939c2e

      SHA512

      38e20a1e78b8f218aa43ca0a261b7a2519ae49af1f76621416623e913a4e4a06e3d3713e8ecfb932780f6ee9fe82910bad2241935cd0c7dee1e568a69b85b5a2

    • /data/user/0/com.my114.my114xianglongrhy7630wap/app_webview/Web Data
      Filesize

      104KB

      MD5

      dc79f9ce5f3ab5270b33e61119dfc959

      SHA1

      1844bf222a5144b513dcf2fb50a18c011701c647

      SHA256

      47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

      SHA512

      18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

    • /data/user/0/com.my114.my114xianglongrhy7630wap/app_webview/Web Data-journal
      Filesize

      1KB

      MD5

      65a0dc1faa12b8eda2adacfd6caeab54

      SHA1

      a4b4046714c9611d2f262212100b9f63b6902433

      SHA256

      14cd66f859cfdc35ff35556cf918827feabb3b02f5059679c756393132579ab7

      SHA512

      b9f5482b9c11be9a1abdab719526b7c05ad2be89033aed76698cb525db40ba7926417fcc9c21b3ecb7b7a9a0e3a987cda8326a8365e1bafbac8b568804518aea

    • /data/user/0/com.my114.my114xianglongrhy7630wap/app_webview/metrics_guid
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.my114.my114xianglongrhy7630wap/app_webview/metrics_guid
      Filesize

      36B

      MD5

      402b609f937275690c87c0c28c8fcede

      SHA1

      47a21ba32efaf6773bec3a762434a20eb3ba061b

      SHA256

      408e4890ed6f83b8f26f09508fdb6e5b34090da3fa8d45d67ed01a4abdeddc8d

      SHA512

      c363d31b3e3092016a5dd615439bf4cde22650cde28bd17369a679524abac18f584d3f7d0dee87840116fdb64c60d997c3eb047dfe5be5413109203367d74247

    • /data/user/0/com.my114.my114xianglongrhy7630wap/app_webview/variations_seed_new
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.my114.my114xianglongrhy7630wap/app_webview/variations_stamp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.my114.my114xianglongrhy7630wap/app_webview/webview_data.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.my114.my114xianglongrhy7630wap/cache/org.chromium.android_webview/9c2d9f9648bf7b35_0
      Filesize

      136B

      MD5

      7ed9372c5ea03324b3b1dfb4e611caa6

      SHA1

      8e7e50cceeab1c8f21ca4b9ff840942cdedc309b

      SHA256

      8d001fc12c86e1eb2d631961a6854e957cde336ce211add616b7d81a03abaf53

      SHA512

      d8ed12fa481f042d1551c58886be68d76e15ddc79a16d3ea680dc4e891c874f11b13f4b997d73eae6a5119a0b50dc27e0a9831645e235dd056a46786e461372a

    • /data/user/0/com.my114.my114xianglongrhy7630wap/cache/org.chromium.android_webview/index
      Filesize

      20B

      MD5

      93027d42b314432c4216e6cfca48b384

      SHA1

      43448dd8102979c3926828182579691945eedd4e

      SHA256

      3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

      SHA512

      a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

    • /data/user/0/com.my114.my114xianglongrhy7630wap/cache/org.chromium.android_webview/index-dir/temp-index
      Filesize

      72B

      MD5

      ee359b2aae00cb897d5da3eea950607c

      SHA1

      7a45a26c3b81ad3a98ed16fe22e4c413984445fc

      SHA256

      3f02d7f401caa9ef6426ccdd36e8f2e7a7e9a9aecb9d0f577250308f952f715e

      SHA512

      3fbd8a60749870bb2fc0c5ff192728f5731ef22358c895f15bb7dbe61d484ddd182cd71173534a93857af90737e1e9665f3dd7840256710f34f8bce5d1c907d1

    • /data/user/0/com.my114.my114xianglongrhy7630wap/cache/org.chromium.android_webview/index-dir/temp-index
      Filesize

      48B

      MD5

      556d241cac7f61885229ab1d99fcaa18

      SHA1

      ed7e13cc8e6fac2cbc40f71bf26e15aec2036667

      SHA256

      d01636836e2708903bf74121da843dbe202e3947735e7a9bb2f73deaeef86425

      SHA512

      3d5533b95dc6b4941bc9077b4a73bc7559006284dd9daa15331b358f62dbcac796e15ebefa3a82c9a348c7a4d09efd41950e7a6a81900ed4fb12ebddbc88a6c8

    • /data/user/0/com.my114.my114xianglongrhy7630wap/shared_prefs/WebViewChromiumPrefs.xml
      Filesize

      127B

      MD5

      21223e9184445fe043476484cd8cb1f9

      SHA1

      2b4813f849121d60ba35eb0889080668bb62c778

      SHA256

      bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

      SHA512

      be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

    • /storage/emulated/0/baidu/tempdata/con.dat
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /storage/emulated/0/baidu/tempdata/glb.dat
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /storage/emulated/0/baidu/tempdata/ls.db
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /storage/emulated/0/baidu/tempdata/ls.db-journal
      Filesize

      524B

      MD5

      e443b133bc49c9dd2fd83b5ca614eb1d

      SHA1

      388b131fca4a187440fd9e238084918fa8cf782a

      SHA256

      1ec7c4544613feaba581365e0397aa5a1942c5adff347097c69cf386f8896009

      SHA512

      5590f67ae527da76d82928b7c3f6d9199a124efaa98c9676e5b7ae3d24606948a8256eb34c16be67ce9c74c6535fde215fc4736d95c2f4745ecaa8b4d387061e

    • /storage/emulated/0/baidu/tempdata/ls.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /storage/emulated/0/baidu/tempdata/ls.db-wal
      Filesize

      32KB

      MD5

      672b79e95d3ff52df0b5bdf83c0ab484

      SHA1

      28928def3f07195273a7d2d06882397c319b5533

      SHA256

      4d0848b4114d625d40d4773b47bd30ea5d6d28b2e6b2eebc6d0cd27e0e4b5596

      SHA512

      6c286cc47bead963cda6ee2750fb4af81fab7934929a1a4cb920f68c536de5be2627d021d77e6f77a46ab8e7ab46b7fbae263de77b2d3a401bcbec2863cb40a6