Analysis

  • max time kernel
    3824898s
  • max time network
    160s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    21-05-2022 00:10

General

  • Target

    f8986a53d982d3ec645e396faf6da62684962f634807d975a8388a9918a4877f.apk

  • Size

    5.5MB

  • MD5

    9c365c2b8078c47141e6598acf57b0e7

  • SHA1

    7b1951dd7cfea69a7743f8ffc8dfb2066b9205b4

  • SHA256

    f8986a53d982d3ec645e396faf6da62684962f634807d975a8388a9918a4877f

  • SHA512

    92e4f55fee2e20390b3708ad83ac358e1d163f9abe5d0d1a7fe76fa5c047d5841032328583c92a1332ee9dedda9588e3f29ed36503452c3f455c2d898a6f9694

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.yy.cc
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:6218

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.yy.cc/databases/cc/cc.db
    Filesize

    104KB

    MD5

    5976811be1933ec96b6d5f7f4a7bffad

    SHA1

    e7353b30abbf4590b44003e907d8fa7a4994a9f0

    SHA256

    f234171aba76a2d9af36bac17e36d5bfe4c73ce2f46364c1b250c6ba5047c41d

    SHA512

    589fccea11f07a20fe20a257160911cf6fb05dfa51b5234ef36be575b683d6c39e730426a56a8bb27544758b184d22a170c92f0ec24c94d0a44c89944508d832

  • /data/data/com.yy.cc/databases/cc/cc.db-journal
    Filesize

    1KB

    MD5

    d52724facfa07d33308bd00322f91a65

    SHA1

    3386db1d88b998349c8b2c9d2d03d6b670bc484d

    SHA256

    116f7160d8b0fa2035f1a2c27aad879d63b0a11484368696f58caf20f308c07f

    SHA512

    160b0ddd6d3278445872da7fc3e2df2b032e5064ccb3b73b2eab0da9f739dbd1003bd19ded4d43763a719602b7d8ba4e663cca312e585eb84d58d155d1f18dcb

  • /data/user/0/com.yy.cc/databases/com.yy.cc_6071box-db
    Filesize

    176KB

    MD5

    9b9ede3e8e3892ceb50b4f8b73a7d3de

    SHA1

    01557cb7a39a0f58db87bad57aa9ddc13929ca86

    SHA256

    a12b80e39e634c3cbff0124ab84802899b318f47809956935a238578367881ce

    SHA512

    208cec8e6502fd3e7f988cfa1da5635c2c4bbee59a34a1f658580b3ec738e54f995d0be00dd443230f43ff4f7c88e7363ef5b9e80071a011702834e936df8bc2

  • /data/user/0/com.yy.cc/databases/com.yy.cc_6071box-db-journal
    Filesize

    1KB

    MD5

    9f3ea3c3186ec66200ca95bcdeff9b43

    SHA1

    f7e09b7ee4b325cef379468ac705d3aab35e0d7d

    SHA256

    824b394ea07738083937290006e26032e8f2b90fad2e52a917d69d5050544f50

    SHA512

    3b9d8cddcf3ef1c56f0b24a73df1357bdba1544cf6b4f0dd337c3854749b66e8eacba651d63699c7177a6a471b638dc3660693e5dea4af5f103e0fd09aa8071e

  • /data/user/0/com.yy.cc/files/.um/um_cache_1653092305646.env
    Filesize

    1KB

    MD5

    8029fd4a2526f565aebeb80aab83eaea

    SHA1

    6552045bd1a8569bb8aeab7a8b4976086fd9207d

    SHA256

    ea2dff891fb75cb2b888b4bc5e040b8a225593acf1e63a94996e74793d980137

    SHA512

    83e4ee81b1fbb13c3e67889192971506fd60f65235543934f1c743f8d78d2b000eddf95794d5457a173ed750a1471689a6905b58881b3cd039f4605007b59e26

  • /data/user/0/com.yy.cc/files/.umeng/exchangeIdentity.json
    Filesize

    162B

    MD5

    4018f8f9a500f6a6c3922fa9f3d2843c

    SHA1

    bd3c4858fdf5e7cf68552e5550ca6aeaebcdd42a

    SHA256

    d08e736d087d912a7df23cb9847e0f7998b95d14bb70ec42eb06b8eef2cef73a

    SHA512

    706bafdc9474aa4de07e48c131f264fdb8dd38253392676866a2d5ac6cfcfcbdde093fe92d4a7baa50c69b1c7c809cc82fd9fa4bdecf72b10946cdbf2085c5db

  • /data/user/0/com.yy.cc/files/jpush_stat_cache.json
    Filesize

    130B

    MD5

    22ff6d6fc53cdec8d664eced5516820a

    SHA1

    b91247dc0989a35e12d118e4a70e1f5335d98aa7

    SHA256

    b1ff7db5b5ea5c9bda2942ac4952144b3fe3e2b7d8769971d6ea4dcde0a5a036

    SHA512

    8ba6a2fc86b9f55b68859eec1a2641783eb4af9523e6d220e4d50ab6f659a18f409bf80742ea67a28c056b7a22485ee17e8a9cec94d8eb9506a2c7312a8617a1

  • /data/user/0/com.yy.cc/files/mobclick_agent_cached_com.yy.cc117
    Filesize

    2KB

    MD5

    5ecf6faa3ca32f48aa54106f9fab73bc

    SHA1

    d6a01dd0ffd528e8f2afa364d0069aa6fefbc097

    SHA256

    9a4179767bcc5896cd48a27cd85a1248cfa0b16b4415f963ca5f3efba9ec3ce1

    SHA512

    926d60f772ce563c3b39f6ab83a6812029009facd81f13f2ce2d6733dfc534ad56201ec5cc289c7640da683b6f723f174386d9fa836e3eb7a31ae52af7c427a7

  • /data/user/0/com.yy.cc/files/umeng_it.cache
    Filesize

    435B

    MD5

    473d11612100c0b5f77f95a370b2e29d

    SHA1

    d883148dcf220952b9a667ca45a2ccb879e8590c

    SHA256

    8aae993793d28acb6d1e0df75fab740968ef2d7c4d19cb8798d589a3933f74ac

    SHA512

    7d6054a867f0704dedbb304b3dcfa84b93918e3018579f3b16d7eb7d36e85d06b80ecdd802c4d967eb14725ce13a0880d468e42078d58e66b5804691b09e202e

  • /data/user/0/com.yy.cc/shared_prefs/umeng_general_config.xml
    Filesize

    102B

    MD5

    64e0aa25c24ddde3818479bfb53d4a90

    SHA1

    fc53938ebd1feb0a51e83699d75c3f771f703d09

    SHA256

    d5bba73256a5443c04a97e4bdf7aefc134a109c5bf2a0453c05e8a68213da999

    SHA512

    e52295f359e0286ce4beb19e2ffbe239ac3292cd0c8aaa2f23572a2680065be4998e5a1094bdec79df26a6a68e41434185255c59f1b0aa03ac242d1d89a4118e

  • /data/user/0/com.yy.cc/shared_prefs/umeng_general_config.xml
    Filesize

    142B

    MD5

    a07882c795d1d7479a32644ca0d74b08

    SHA1

    40f115480adbcf8b15abd2aa49c4d544f4c2ecb1

    SHA256

    24b7d538912897990703f4613fe6e0d57d18c3c2b95fea53c2dc1fb5db0857ba

    SHA512

    103deec509f50d0acbfdda96093fe57a011e12c72abbe44a224bb2878b5069e99f489af2b2e3427c6b9d975e1586533bdd76611edfb604204ed246376917bea7

  • /data/user/0/com.yy.cc/shared_prefs/umeng_general_config.xml
    Filesize

    142B

    MD5

    f0fbfb94632bd8c2dfce8378fe8e1549

    SHA1

    9833972d3a3b62fbbbe72f2ef537d7ba8cfc3322

    SHA256

    63978e128929af1403e013a5eb684b7aedf99593c202f4845991deab3fbf56b5

    SHA512

    83b82561f0667b8dff2223ec9810aa365dab7dd58803fbd5062ac45eeae8eedfa930bf21a36185d8384c31a0e7cea4bde8c140cc23f424a5ad63cfc4be773b87

  • /storage/emulated/0/.DataStorage/ContextData.xml
    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /storage/emulated/0/.DataStorage/ContextData.xml
    Filesize

    111B

    MD5

    3c28adaec14e7475cd10fb96eb3b84d2

    SHA1

    9270816cbf140e3f7616cd4f13eeea206078b5a0

    SHA256

    cf126d53e1e63bda29749bc11455bc10e363ed49a360f44b0d99a89bda9e4554

    SHA512

    05aca9ccc459c2fb64961eec55aa2c634a5b70fda68d295bfd0aa905f03ce8655ada9889db161d6bb3cf249e49d004c68fd7c0f4ee46a63ae0422f124d7ad35a

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
    Filesize

    222B

    MD5

    ed894b27ab895cdbca9d037580acec34

    SHA1

    3682f9e7e5f1533ee4e329b3bcc40e937b50e464

    SHA256

    54be7199918bb1bacd16d2c016c9fbc613b04283015a182b37b9a0939706e574

    SHA512

    1207c3359025695370136a9bb2b4e701540d67c7092052e52faa6c86e838986caa46d52599f9653fc170b940a70e2555fb3d0731e3051452e08c8a1c5adf7aef

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
    Filesize

    111B

    MD5

    8f4124087f822e291503ad16208856fc

    SHA1

    7f78e74d70a387f6e6f9a7e440e590471a9f5d95

    SHA256

    2fea11bc4ef6c0efe069c0445e58900714092e92eaba0b89dad53a5345483e60

    SHA512

    d58db23b83bd4fb6f1b7366946fe752e63ed505cf52383959fa841e390b1254580b4535c2fbbed536515f2cfc6995d774c9c3be772894fdebacbdb9e7e56f3f4

  • /storage/emulated/0/6071Box/goagal/5ac714da7be6d534dd74c84a097f98e0
    Filesize

    352B

    MD5

    5a6c8d789a9e7b66afe60d7e73ed81b8

    SHA1

    a6a7b3bad6cdb17260e366a550d6c90479681ddf

    SHA256

    31f991d1bef220f795bd14649c36194701122c8b586d83eb983d848d96ef45a3

    SHA512

    415f693cbe550b235375f3f77afdb91b3b138a1c6a4e076352b3c19534501d52ee3fbf922142a47eb5380f60c85698e86c0566485533ddb19b1fb382b9889667