Analysis

  • max time kernel
    3861483s
  • max time network
    57s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    21-05-2022 10:27

General

  • Target

    31dda31e3b3c1b526c55a354910129db5e8835082ce3c2e4fde92484843ce74c.apk

  • Size

    5.5MB

  • MD5

    f3be2d24e26ee283122bbe59579962a8

  • SHA1

    040318870cc542189eb50bef3158b2be3d459d01

  • SHA256

    31dda31e3b3c1b526c55a354910129db5e8835082ce3c2e4fde92484843ce74c

  • SHA512

    60dc88da4f73928d2355980690676bf8c947dacae15b3582bfa2affd37490eeb66e6e5e572f36893c08f8e6c8f94d3f38e47cf12ae4eea9f73da55983dd25a86

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.yy.cc
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:6018

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.yy.cc/databases/cc/cc.db
    Filesize

    104KB

    MD5

    5976811be1933ec96b6d5f7f4a7bffad

    SHA1

    e7353b30abbf4590b44003e907d8fa7a4994a9f0

    SHA256

    f234171aba76a2d9af36bac17e36d5bfe4c73ce2f46364c1b250c6ba5047c41d

    SHA512

    589fccea11f07a20fe20a257160911cf6fb05dfa51b5234ef36be575b683d6c39e730426a56a8bb27544758b184d22a170c92f0ec24c94d0a44c89944508d832

  • /data/data/com.yy.cc/databases/cc/cc.db-journal
    Filesize

    1KB

    MD5

    54db2dc7ff846a6cce58c5c654fed6b6

    SHA1

    aac0a7f94cd71ba1da43986989a10fccfbeb9130

    SHA256

    d1a504d9f5054ef4a609c55c0f8cf50c0f62fd55e03058924cdd86feadded1bd

    SHA512

    87b0cbd617e13052414ec36468f9f130d2fae618190784153f3a35ed42c6314b89343008b48ad9bc3a43816b6574cf4e11c9fd1f5477860254cb3feb3c7c0697

  • /data/user/0/com.yy.cc/databases/com.yy.cc_6071box-db
    Filesize

    208KB

    MD5

    a0e8ed5de50c459cda8169e7c6c82f7f

    SHA1

    fb25b13eb6a8481f95b895320420ad90d681de39

    SHA256

    6f030b49d6e9fd6e804aa8a8ddf5c75eb1cb9e0bf63dd94d4b783480339bb268

    SHA512

    96e66aee59b27586d89db4a446cf5fc8713b25b10a2ae6276b12412223358c2836c266538f3ca0d312f4e1e1a8bada7fde8d4b15b8e8573c9198dfbbe700bd66

  • /data/user/0/com.yy.cc/databases/com.yy.cc_6071box-db-journal
    Filesize

    1KB

    MD5

    ac50d7171e6338c9ebe827cafc3d2d08

    SHA1

    55c372029b306f34998ca3ecbccce1298aef0d5a

    SHA256

    e0c9adddf637d36e187eed3c0fce6073112883b5b1f368c37c8f7dc91156bd79

    SHA512

    d5e237454550eb8cb9e8ae5327b603a84aa6fa25a3d330f48b9a25df0df8cfb8c6fb5c6b7f8e497c8a8416fd684a3f1ce707dad54e165f9c2fafc7602b1f6f34

  • /data/user/0/com.yy.cc/files/.umeng/exchangeIdentity.json
    Filesize

    162B

    MD5

    41528d8d54086db28562f48583187097

    SHA1

    e0265fea1b6a99c7e0f6bb9a154474201dcb6d0d

    SHA256

    9f77269a55ebb4c7455245a4ea907eb81eda0839f4beda5cff69509b3f5f72cd

    SHA512

    c1dd0cbea8f1ec20f8f7e27844a96f7c3fa6cd7cf8dc2e5c2a1d13ba91f3a74114bd8dc8e69576649827a76ed8c417d36f9a91d35595515ca0a86757d75ada73

  • /data/user/0/com.yy.cc/files/jpush_stat_cache.json
    Filesize

    130B

    MD5

    0957e7ab39e0d6bd36480fe74c675566

    SHA1

    925efa5e628bacca5c1b79f1f2e7ca04bf0246e1

    SHA256

    8ef66c1cb6f0dc9782bb3da884889fbbf7745238aa68a8957498a48303ac7eed

    SHA512

    3695972942768f3bf4f24446ffa98a2333b9e5c51585a7695ac43e5a856f3cf7d122b7499b6a48d0c019ae2a6249d2141a569562fa0cc1a1c60de739a2b598de

  • /data/user/0/com.yy.cc/files/umeng_it.cache
    Filesize

    435B

    MD5

    8d5a532a17be98135b37336b8b2ac2d8

    SHA1

    895ec1c6a8d575f6ad70036c292b2ca3af3380bd

    SHA256

    028670fa394718ddca5d1dddc53be9ba0eb1213dd04b0cc2606bb6613ed1846f

    SHA512

    98f36cc480dc3df3b980d47925e8aa37d491574155d95e93a2182ec2cc0cdd49de04ad743577b443eb45e9246e305436d7411be56c8e9517a715d957cf2082f7

  • /data/user/0/com.yy.cc/shared_prefs/umeng_general_config.xml
    Filesize

    102B

    MD5

    64e0aa25c24ddde3818479bfb53d4a90

    SHA1

    fc53938ebd1feb0a51e83699d75c3f771f703d09

    SHA256

    d5bba73256a5443c04a97e4bdf7aefc134a109c5bf2a0453c05e8a68213da999

    SHA512

    e52295f359e0286ce4beb19e2ffbe239ac3292cd0c8aaa2f23572a2680065be4998e5a1094bdec79df26a6a68e41434185255c59f1b0aa03ac242d1d89a4118e

  • /data/user/0/com.yy.cc/shared_prefs/umeng_general_config.xml
    Filesize

    142B

    MD5

    a07882c795d1d7479a32644ca0d74b08

    SHA1

    40f115480adbcf8b15abd2aa49c4d544f4c2ecb1

    SHA256

    24b7d538912897990703f4613fe6e0d57d18c3c2b95fea53c2dc1fb5db0857ba

    SHA512

    103deec509f50d0acbfdda96093fe57a011e12c72abbe44a224bb2878b5069e99f489af2b2e3427c6b9d975e1586533bdd76611edfb604204ed246376917bea7

  • /data/user/0/com.yy.cc/shared_prefs/umeng_general_config.xml
    Filesize

    142B

    MD5

    f0fbfb94632bd8c2dfce8378fe8e1549

    SHA1

    9833972d3a3b62fbbbe72f2ef537d7ba8cfc3322

    SHA256

    63978e128929af1403e013a5eb684b7aedf99593c202f4845991deab3fbf56b5

    SHA512

    83b82561f0667b8dff2223ec9810aa365dab7dd58803fbd5062ac45eeae8eedfa930bf21a36185d8384c31a0e7cea4bde8c140cc23f424a5ad63cfc4be773b87

  • /storage/emulated/0/.DataStorage/ContextData.xml
    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /storage/emulated/0/.DataStorage/ContextData.xml
    Filesize

    111B

    MD5

    09aacb494df90c25f3be0b062ac4994d

    SHA1

    96d09131f8836880a032ecb033509ffdf9d84d9f

    SHA256

    c0cfb91d1c35b52b4294f67fe72e2a275e2a41c443430e6f4377ce70c82bc5bb

    SHA512

    cbfcd54fd56568fc1867a249ffc5bdd4d81eb400175cd16d5608ff552ef6352aea8aa279fb3c8f49bedafa4882242edd01afaf5b443e49b41a5ae17177a65088

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
    Filesize

    222B

    MD5

    f173c1b7fa5a6b697414559aa76670e7

    SHA1

    298504657c21211deb598b371d52d644c63b9881

    SHA256

    b8c9bece769f956bb8a825dfad32cbd2a08db4c719059dda03bdcb48e9cc2ce5

    SHA512

    f4e024a623abb97e43e6dd62cd9f57f6ebc8342777256760b4ecc11c9ebf566620497d73191ce1b11618d8416df5c4c953d928636471e26f560834889c7e99a3

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
    Filesize

    111B

    MD5

    d213c11d4c2bbf7cc1eb861dcd374a0c

    SHA1

    eb190da676db788bc9c238ea3d51bc9a2f3fd7e9

    SHA256

    20295ab131072bee39399ed1c5e1334f165d054cfb5aae57571ab380bf3919f3

    SHA512

    1e4b8a7ed18fa7840cf91fe3c35460ff0b64cd4ae71566f7a5a61b5ead71d3ac8fdc95f4e493a9e10d542198e5a1e6acce0e6b87966f892167a7f786778a90a1

  • /storage/emulated/0/6071Box/goagal/5ac714da7be6d534dd74c84a097f98e0
    Filesize

    352B

    MD5

    7b4620c92f4af9984707458992903377

    SHA1

    7f1d1e7e384851d6223076afb146eae0e00dab49

    SHA256

    40fb1417d0c62ab13df895ed863b4f4520522380d4dd7f83fce6777fc8bb6516

    SHA512

    e48c06ded16651270a4d793b4dd1eb3841b5ff670c1fe67cf1867afb55135c190301d53b48bca506881209d5b9a07d95f46c6312b94eea6cdf3014077b11ad0b