f8986a53d982d3ec645e396faf6da62684962f634807d975a8388a9918a4877f

Analysis

max time kernel
3824906s
max time network
156s
platform
android_x64
resource
android-x64-arm64-20220310-en
submitted
21-05-2022 00:10

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

f8986a53d982d3ec645e396faf6da62684962f634807d975a8388a9918a4877f.apk
Size

5.5MB
MD5

9c365c2b8078c47141e6598acf57b0e7
SHA1

7b1951dd7cfea69a7743f8ffc8dfb2066b9205b4
SHA256

f8986a53d982d3ec645e396faf6da62684962f634807d975a8388a9918a4877f
SHA512

92e4f55fee2e20390b3708ad83ac358e1d163f9abe5d0d1a7fe76fa5c047d5841032328583c92a1332ee9dedda9588e3f29ed36503452c3f455c2d898a6f9694

Score

8^/10

banker ransomware

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
banker

Processes:

com.yy.cc

description ioc process

Framework service call android.content.pm.IPackageManager.getInstalledApplications com.yy.cc
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.yy.cc

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.yy.cc

description	ioc	process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.yy.cc

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.yy.cc

com.yy.cc
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
- Uses Crypto APIs (Might try to encrypt user data).
PID:5842

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.yy.cc/databases/cc/cc.db
Filesize
104KB

MD5
94f8897e3ef8ba26fb89b4b04de6a2aa

SHA1
0e835d93e675050ac15fbcdc7af095465e34c6c7

SHA256
fb6a176599113247beb55bdb421bea79271596093cececf5f782bec51ba40884

SHA512
8dc55bb983011850f7e148019feb03e0701a09ddd6e359633256ec010c7b820d380fc41e72380ec6b6147fba33df1fb69fa76a529490997baf41412b9c871956

Download Submit
/data/data/com.yy.cc/databases/cc/cc.db-journal
Filesize
1KB

MD5
363394a3a85d0290342ba9c7e2b6d42f

SHA1
ee0b7a7ac78db8e137627a4835f9569229a9dbfb

SHA256
7cc441b64bf0cbd1d12d0a2258b81e7a5b1840a5584f79a862e8684f6dfeca4a

SHA512
49cf7293267544a2df89ee29e10457539508878d3bfae6079b7d5a5b324083ed0f3a13455741c8466e4a1b7837cb7778eeed547fb5532dbc143065c7bb10e940

Download Submit
/data/user/0/com.yy.cc/databases/com.yy.cc_6071box-db
Filesize
208KB

MD5
d548c88e2859a95028166fd348e8fcd6

SHA1
fb92f89620e089fd7f7ab27737edc52670f923b9

SHA256
e04e7f95f80406669adc14e6d28b6c18e4773f2bed0b1831c0d9b918700bf0a0

SHA512
68a81e674e41f5db9801cedea401884ccf2405b477f54be4a00caf349014fc75492f58cb8839d89d659a1ada6e36f42a535e8a9e65dce95d576ffac67094d057

Download Submit
/data/user/0/com.yy.cc/databases/com.yy.cc_6071box-db-journal
Filesize
1KB

MD5
cc970591ce2676f9f2ba472dbc896770

SHA1
ea79fe6796b250906bc29c5af7d54bdba92c94d2

SHA256
a079324df990ca9ecdd2ab21b1c2e637b2c745e5994753e4e93df5584ecdce58

SHA512
d5038311ad182091e90f0bffed48b64fea892bc1f16a50bbe48bea910b855fe5ec0d6e626870516c86e098a5ee26079864aace5115a31f25004f1c265d72e821

Download Submit
/data/user/0/com.yy.cc/files/.um/um_cache_1653092347424.env
Filesize
1KB

MD5
eecae1dd85167332fdba6c444cfa6423

SHA1
04269921e16321c8cd464940a19840ffa0ad0fe4

SHA256
ed01cf0b938b05403d32ed75ed5962208eb2ce18e64bce2c1bd75b7d2a66d81c

SHA512
039e9801e5c8b4a3609224ecc4eea6952c519c56f6bcfddb52e6160cd7b324c14cdc2ac55329d386211f0a93f1112c7454e083124ee8f175aa565bc06f30ba7a

Download Submit
/data/user/0/com.yy.cc/files/.umeng/exchangeIdentity.json
Filesize
162B

MD5
46fa85478a2a1c22cd7d383acd7a0472

SHA1
7b795fb698897365b87054ee683c2635cc95a7f1

SHA256
96db76f186cc7c77a7fe54160c5f0bcea5b4e29b0627c42473ea296a032b162a

SHA512
1b98cc65938c7e6f72e446789a9198079c7ad3c6e9c6aade91809a52ab6d059524aa18618c2e214d173e01ff00cd28ba3db7631ccde79be1c06db278e69a5adc

Download Submit
/data/user/0/com.yy.cc/files/jpush_stat_cache.json
Filesize
128B

MD5
3623c867a1c3e29f7c4c8bb5e6e73ea2

SHA1
5230049b06f2bbea072ff6ecba90c9c052966c1d

SHA256
4c63c3e4f6d7534154753834b65f3422c835120658066d1264d290e2246d3820

SHA512
e73f36ff749d9205a10872fd83b9e94df458eb982dae7ee9c3a3666e9b461d117daf6e544bad9bcbc64ebd9f5fd452b836f5834ab97436f7cdb6bc99042bfbe8

Download Submit
/data/user/0/com.yy.cc/files/mobclick_agent_cached_com.yy.cc117
Filesize
2KB

MD5
fa39938ed54bcc08610ccb2a0f3ecc45

SHA1
40a28edb2668bad79fa26c18bb87ed14669283a8

SHA256
e661885c0d6dbb75f98091fc2417d5fc43c08f596584f036e8903b49d5681bc7

SHA512
a72e2dc805a8f053f18fa128b96f5ba6d96dbcbfd212bc921a113f0c2ab660c99063d7f5fc53122d0a282775da52b9ad2ae7bc44e2de7841bcc81381b47e54ad

Download Submit
/data/user/0/com.yy.cc/files/umeng_it.cache
Filesize
433B

MD5
e8ac8bc6ba53c19c2902ae440fb73b71

SHA1
61409a2956ce132265eae3e9fc9a5247e3bc5ad0

SHA256
ee1cf2cc7e8b21dfd700c908da337a874100b8fcfdb94487c437f908633b650d

SHA512
2782fdb3704cc0a7a0afc049a75c3b2fbbd8e5141eaa5708689920c9b9001ac8078ddf8bcd15ee45694627efb922f49a41de31f0e84f920fdec596056a0f3ff9

Download Submit
/data/user/0/com.yy.cc/shared_prefs/umeng_general_config.xml
Filesize
102B

MD5
64e0aa25c24ddde3818479bfb53d4a90

SHA1
fc53938ebd1feb0a51e83699d75c3f771f703d09

SHA256
d5bba73256a5443c04a97e4bdf7aefc134a109c5bf2a0453c05e8a68213da999

SHA512
e52295f359e0286ce4beb19e2ffbe239ac3292cd0c8aaa2f23572a2680065be4998e5a1094bdec79df26a6a68e41434185255c59f1b0aa03ac242d1d89a4118e

Download Submit
/data/user/0/com.yy.cc/shared_prefs/umeng_general_config.xml
Filesize
142B

MD5
a07882c795d1d7479a32644ca0d74b08

SHA1
40f115480adbcf8b15abd2aa49c4d544f4c2ecb1

SHA256
24b7d538912897990703f4613fe6e0d57d18c3c2b95fea53c2dc1fb5db0857ba

SHA512
103deec509f50d0acbfdda96093fe57a011e12c72abbe44a224bb2878b5069e99f489af2b2e3427c6b9d975e1586533bdd76611edfb604204ed246376917bea7

Download Submit
/data/user/0/com.yy.cc/shared_prefs/umeng_general_config.xml
Filesize
142B

MD5
f0fbfb94632bd8c2dfce8378fe8e1549

SHA1
9833972d3a3b62fbbbe72f2ef537d7ba8cfc3322

SHA256
63978e128929af1403e013a5eb684b7aedf99593c202f4845991deab3fbf56b5

SHA512
83b82561f0667b8dff2223ec9810aa365dab7dd58803fbd5062ac45eeae8eedfa930bf21a36185d8384c31a0e7cea4bde8c140cc23f424a5ad63cfc4be773b87

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml
Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml
Filesize
111B

MD5
e17ff6755280e19f96e44e70f0a7f10d

SHA1
f4e7dd40b771cf021b819449b13e3c7c2fb35f93

SHA256
13e72bbf7d3aab51b38da60b3cc83e909f329e2a1725624d8c7418b77e2ac697

SHA512
99ecaf50d9e753fab9501cab82fa631a78e7b9c235ef67e56f50f61157a1a44a47dfd481cd53771d823a888abb22f7638752305ccd434fa4db777ec649ef2aee

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
222B

MD5
1e899aea135df6ac1f9f1f2cd518420d

SHA1
b94619f9c10cb935fdaae102b20d78a7b4acc380

SHA256
f9a6c3b50e417eebc86a424724130804f0588a72f0e1471292d0fb6084db8d36

SHA512
78a020c23f61352ec8bbab5f1dc37ab7de1e49506538ae1946350ac7e27591aa1ca68499aa41fe9b7f5b2e468aaab90ed242d164bc66c379ab134519f3403539

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
111B

MD5
d59e781e3773445140584cc14e9a959d

SHA1
f984db9904d653dbfaece70850d6fd9859c5dacb

SHA256
be66ce1f39a4d8e7ca9580057b2ee7110240622e7f0e207243b18d47ad14f528

SHA512
bbdb34c31aed7e28c2b48a1e596a0a62e62ef351a0bd87c82f264e0b37138e2773d2e9b982094d756f6fb2a5d0941efdfa91ad0359424f118f6b420f3694f44b

Download Submit
/storage/emulated/0/6071Box/goagal/5ac714da7be6d534dd74c84a097f98e0
Filesize
352B

MD5
5a6c8d789a9e7b66afe60d7e73ed81b8

SHA1
a6a7b3bad6cdb17260e366a550d6c90479681ddf

SHA256
31f991d1bef220f795bd14649c36194701122c8b586d83eb983d848d96ef45a3

SHA512
415f693cbe550b235375f3f77afdb91b3b138a1c6a4e076352b3c19534501d52ee3fbf922142a47eb5380f60c85698e86c0566485533ddb19b1fb382b9889667

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads