Analysis

  • max time kernel
    3817680s
  • max time network
    118s
  • platform
    android_x86
  • resource
    android-x86-arm-20220310-en
  • submitted
    20-05-2022 21:16

General

  • Target

    dc9114712502a948243698e9d4d3024646855219c04ebf4754c355095e731f15.apk

  • Size

    1.4MB

  • MD5

    82e3301629c53a0d4c3d961e79875c8e

  • SHA1

    c15676998a6e01c140c18184a8ce56a2fe5fd79b

  • SHA256

    dc9114712502a948243698e9d4d3024646855219c04ebf4754c355095e731f15

  • SHA512

    594adf3aee2db05e50f2c7f1be1c65189ea34f77265e1c599643e537f211a4987306cfd50ef6d882ea1bfb4115faf5f5dddad8acb2f397539835ab9310d48310

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs

Processes

  • com.my114.my11403789213586wap
    1⤵
    • Removes a system notification.
    PID:5158
  • com.my114.my11403789213586wap:remote
    1⤵
      PID:5413

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.my114.my11403789213586wap/app_webview/Cookies

      Filesize

      64KB

      MD5

      cb7543c4df600f2af58097cce0e334ba

      SHA1

      83cc92f38c27fdb4fa519b1ce2f37912f24af1f0

      SHA256

      64c022ae708f94ffde986e105d88f708884de325720bfb9925c4160a6d417233

      SHA512

      ad51cad0472327bd68aa2d791341cfafed58971752352537bb603ed18b15a3f9185e9150983a28ecd09606e8dcaef6d1c9d93213dd246ef7720f39842eb3d980

    • /data/user/0/com.my114.my11403789213586wap/app_webview/Cookies-journal

      Filesize

      1KB

      MD5

      b24a71a7e05389fd18f126ec76065428

      SHA1

      4e9bc9140cb9e9242833cf9ba98cc351e3d69900

      SHA256

      184c582220a93cd146314fcd9c4326756f83cceabb2ea8f4ec3a403667d38ff8

      SHA512

      5fc24e731405f7879a187a96d1530e3c5a675f5433377b15fe64d1359364f316e2ecbf58bcd97b79ecb256b187b2993dc97a754953bad0d9b205c3e961e88200

    • /data/user/0/com.my114.my11403789213586wap/app_webview/GPUCache/index

      Filesize

      20B

      MD5

      93027d42b314432c4216e6cfca48b384

      SHA1

      43448dd8102979c3926828182579691945eedd4e

      SHA256

      3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

      SHA512

      a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

    • /data/user/0/com.my114.my11403789213586wap/app_webview/GPUCache/index-dir/temp-index

      Filesize

      48B

      MD5

      fce186f3b4d73ff7a04f30eabf74affb

      SHA1

      bed65d9d6862e5b7e49b19602ff4d64029c3623e

      SHA256

      78305d0394d56cab1171ab30ce3276fc0ccc5b7508d6ebca12932faf90e6883f

      SHA512

      ddbc89dfe8c29706dbd278e8eb8bd93bbb21e6a43960bb81e27cb97120e937af647230484da61c4d86a18215e6ac9abeeb9295b22a657a0bd8229afcc662f615

    • /data/user/0/com.my114.my11403789213586wap/app_webview/Web Data

      Filesize

      104KB

      MD5

      dc79f9ce5f3ab5270b33e61119dfc959

      SHA1

      1844bf222a5144b513dcf2fb50a18c011701c647

      SHA256

      47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

      SHA512

      18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

    • /data/user/0/com.my114.my11403789213586wap/app_webview/Web Data-journal

      Filesize

      1KB

      MD5

      3f94971573b17466adbb005f4cdb0baa

      SHA1

      275c64d84691752a9d05586e67bcb56d83e2f7da

      SHA256

      df777b192cda910de8b2e6009d5c58af4c0e66bf17011ab1de1966eb4967bd94

      SHA512

      395882ab27bb405fddc500b838ad00172228226f0a135e7a478126d5142f2ff7e0d5f91c498a7836917cdb126a9154bcd95d63aae03b7a4e06e20ef38880e9fc

    • /data/user/0/com.my114.my11403789213586wap/app_webview/metrics_guid

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.my114.my11403789213586wap/app_webview/metrics_guid

      Filesize

      36B

      MD5

      29e54fd432a9e1c866169e1ca9b5216b

      SHA1

      1afab84d9a67ab29218a18bea7954ac3fa52ba5e

      SHA256

      a5e0860c0c79a3204ba8ac31f9186c06feed609dc16fa8bca8aac1215e632f4e

      SHA512

      d49d0be4a03fc31c7c2f30965a1f08e0179198c6ccaa8fe67d40d8bbeb52f7d6578032e70501d50c0f374bb9fb1a3d5d8a6b37306ffcb1c4c17180c0356761a1

    • /data/user/0/com.my114.my11403789213586wap/app_webview/variations_seed_new

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.my114.my11403789213586wap/app_webview/variations_stamp

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.my114.my11403789213586wap/app_webview/webview_data.lock

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.my114.my11403789213586wap/cache/org.chromium.android_webview/1267ad28d37c71c4_0

      Filesize

      322B

      MD5

      15b2f14f75fe0c02e6b5e41205df054a

      SHA1

      74bf9cecf252509facf4b7cf49a322ce28ba1e5b

      SHA256

      d83b02b7cedbf1dbcfa35eaefe7a888bc010b8b237f50d72cbd77360ff1c2ccf

      SHA512

      d50e1aa492e85416b2d4f64e00dab9e75541939b5b2704371dfd29c9b8424f6390e66250555b9c9d9ff5e608f03328f4f915c8cf01b790745c098751e73a933b

    • /data/user/0/com.my114.my11403789213586wap/cache/org.chromium.android_webview/909b1edbc04ab26b_0

      Filesize

      6KB

      MD5

      b5a0cb65da50cfc4783303a6961a1534

      SHA1

      2c12435dcc0e955c45f52b98006de99176fc0c81

      SHA256

      cc2987732262dce9c66a1300379aca282fcab3cb17b672ce782c091df9ecb775

      SHA512

      4111d792ee04a08aece4b1b9bbd6d2f99c4e48d92b6842914cdd69ba6841d7eff94234ff151baf78b08c153a4c326192378b9688ea06f4d870ac6ae166cdea8d

    • /data/user/0/com.my114.my11403789213586wap/cache/org.chromium.android_webview/index

      Filesize

      20B

      MD5

      93027d42b314432c4216e6cfca48b384

      SHA1

      43448dd8102979c3926828182579691945eedd4e

      SHA256

      3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

      SHA512

      a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

    • /data/user/0/com.my114.my11403789213586wap/cache/org.chromium.android_webview/index-dir/temp-index

      Filesize

      48B

      MD5

      6f8b2cd78abc1054002b4951952e8db1

      SHA1

      49e6c0f31bbff3600402b10bddcd7d96165a4d18

      SHA256

      28b6ab6f2bfff2d23a09bb891c046d6feacbe9e122bb97e8ac361f8f28a92026

      SHA512

      74aff84b0b3df6f267f0117f78ef7cc730569465180d03d8f826f402dca7344bfc219df0c2dfada76c287a841951cb7404f4115ec56996ce336cc38c740b2cc8

    • /data/user/0/com.my114.my11403789213586wap/cache/org.chromium.android_webview/index-dir/temp-index

      Filesize

      96B

      MD5

      ae56ebb39e6b7a3c350559fe0a9493a9

      SHA1

      8d670242e7353fd09f86f47dcf0573e3957894bb

      SHA256

      52c5bba65425b6e09019b9535069f6b87111a6827e8937008e1c1b86108fb475

      SHA512

      418dcdf25b857595c2b415963e86e07e85a9c87cd9da7413d4f181f2c625d7ae68f47cdc4f9a83aa26e858c8018316936b928a5f31505c8f59b4d26bd5db4ef7

    • /data/user/0/com.my114.my11403789213586wap/shared_prefs/WebViewChromiumPrefs.xml

      Filesize

      127B

      MD5

      21223e9184445fe043476484cd8cb1f9

      SHA1

      2b4813f849121d60ba35eb0889080668bb62c778

      SHA256

      bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

      SHA512

      be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

    • /storage/emulated/0/baidu/tempdata/con.dat

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /storage/emulated/0/baidu/tempdata/glb.dat

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /storage/emulated/0/baidu/tempdata/ls.db

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /storage/emulated/0/baidu/tempdata/ls.db-journal

      Filesize

      524B

      MD5

      7c877e470430376c3c3536353332dcc0

      SHA1

      7c8ec6fcbb9a23061bf5253ffa022efe513ead01

      SHA256

      cb265a4a1004d90a865188357d5a7bf5f94f912d48741ef7f91a7247b57d79b7

      SHA512

      cdd218a886df42c9c7c7e9c22b05f163a356c6b119d1d1932a556662a908fb38a03327ff1f18d73b9e7483f76afdaec011c02adcd0d68e6ce439ba7dd9716a0a

    • /storage/emulated/0/baidu/tempdata/ls.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /storage/emulated/0/baidu/tempdata/ls.db-wal

      Filesize

      32KB

      MD5

      aa6f024934fef5cbd8a265a5c9f09ad3

      SHA1

      e38963b541eab9681dfda0c29f7a212b68f5596b

      SHA256

      b6dbe7eb7a9cfca9a6994933bd0ee1bf02afc8e820db9de858fb8ff82df21654

      SHA512

      905507cb8f3a408e5b1d4e5dc57b55e53afc26fa3f7d7983085a64e5cd1bfcb56891b274d3ba24c501c4a10d8125c12e4d305c462c0dc32b12b62b92527ad138