31dda31e3b3c1b526c55a354910129db5e8835082ce3c2e4fde92484843ce74c

Analysis

max time kernel
3861496s
max time network
160s
platform
android_x64
resource
android-x64-arm64-20220310-en
submitted
21-05-2022 10:27

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

31dda31e3b3c1b526c55a354910129db5e8835082ce3c2e4fde92484843ce74c.apk
Size

5.5MB
MD5

f3be2d24e26ee283122bbe59579962a8
SHA1

040318870cc542189eb50bef3158b2be3d459d01
SHA256

31dda31e3b3c1b526c55a354910129db5e8835082ce3c2e4fde92484843ce74c
SHA512

60dc88da4f73928d2355980690676bf8c947dacae15b3582bfa2affd37490eeb66e6e5e572f36893c08f8e6c8f94d3f38e47cf12ae4eea9f73da55983dd25a86

Score

8^/10

banker ransomware

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
banker

Processes:

com.yy.cc

description ioc process

Framework service call android.content.pm.IPackageManager.getInstalledApplications com.yy.cc
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.yy.cc

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.yy.cc

description	ioc	process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.yy.cc

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.yy.cc

com.yy.cc
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
- Uses Crypto APIs (Might try to encrypt user data).
PID:5743

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.yy.cc/databases/cc/cc.db
Filesize
104KB

MD5
94f8897e3ef8ba26fb89b4b04de6a2aa

SHA1
0e835d93e675050ac15fbcdc7af095465e34c6c7

SHA256
fb6a176599113247beb55bdb421bea79271596093cececf5f782bec51ba40884

SHA512
8dc55bb983011850f7e148019feb03e0701a09ddd6e359633256ec010c7b820d380fc41e72380ec6b6147fba33df1fb69fa76a529490997baf41412b9c871956

Download Submit
/data/data/com.yy.cc/databases/cc/cc.db-journal
Filesize
1KB

MD5
1143c359fd8c09b60882c4a724c9ddae

SHA1
9173632b3000b5dbbc8ae48c053ed4f6b729bea9

SHA256
708d4db6891180658ea826a198470e770d99b39a50a48da8ff9439ad5591a37e

SHA512
7281fc6630e80148d5d37da76b8a83142b0836af0811dfd047d8285e80b5d083b43adfc0dd5f5a06704906b4fc71746d30fddc2d73a908e109234abbd2efe46d

Download Submit
/data/user/0/com.yy.cc/databases/com.yy.cc_6071box-db
Filesize
208KB

MD5
d548c88e2859a95028166fd348e8fcd6

SHA1
fb92f89620e089fd7f7ab27737edc52670f923b9

SHA256
e04e7f95f80406669adc14e6d28b6c18e4773f2bed0b1831c0d9b918700bf0a0

SHA512
68a81e674e41f5db9801cedea401884ccf2405b477f54be4a00caf349014fc75492f58cb8839d89d659a1ada6e36f42a535e8a9e65dce95d576ffac67094d057

Download Submit
/data/user/0/com.yy.cc/databases/com.yy.cc_6071box-db-journal
Filesize
1KB

MD5
26f377a288fda85433195388c9afe925

SHA1
215ee6a1e631b8ccbf88fa871ea88d745da279f1

SHA256
3c0d76fb64220704327669d28d5da2296ea759b47982534f07b8b956a00b020a

SHA512
984292fa46f3642f73d902ce293733453a8161630eb447bdbb34ca318fd4c02504b44f61419088586d8f93020504e6b0cba3c301f319015e51566bcc78ed2522

Download Submit
/data/user/0/com.yy.cc/files/.um/um_cache_1653128937849.env
Filesize
1KB

MD5
945e5777f1f2379ad4b89975500a5551

SHA1
355d32ced6e0bc678c025ae720466745aae00aec

SHA256
a654e7a2032d9c3edec9050caa7b39dcce704ab2600dacad1b48d35960f4e0ed

SHA512
967422fff3482253706e6e781abadaddb8c8062ebfdb08c342e519f9f121d4e50185317b68e619d1812c27d443d411529c6f43459bf046d6ecd2bb1c3e761808

Download Submit
/data/user/0/com.yy.cc/files/.umeng/exchangeIdentity.json
Filesize
162B

MD5
8606ec9e29fa5fa21d6e39d14601119b

SHA1
62fe3c750a3f7fb5188094d33d0e45a58deb3977

SHA256
ff9e11bab31ba8b20eea188b00aa11db4763a92227d1b9477d554d826ae8389c

SHA512
b2c677f0967ce47b1ab057fdc37211c499bad3d4e2ffe3d0a4a50b566482c81001ae489bcc6073ab127b42eec5762de66987e5836c06bb22f4476fb40095aed8

Download Submit
/data/user/0/com.yy.cc/files/jpush_stat_cache.json
Filesize
128B

MD5
a22a8fff593afaa83705d6fc18676098

SHA1
6288d099f783b72fcae99565de71a55a4c210651

SHA256
8c252fbe8b0436db775515ac71b281f980e8404decb4eb56a870e9a80f52db89

SHA512
79e4eeda7a50504551fb37ea7966b95f26a04a4858a6469070a75c4ef582e3f9bc08de8796cd9031d46625d623304f8c6ad9bdbe821657e9ecadefbf5f4343f6

Download Submit
/data/user/0/com.yy.cc/files/mobclick_agent_cached_com.yy.cc117
Filesize
2KB

MD5
1ce51362a4512b7f8e247af4858aa64b

SHA1
039df211891a8c9f7ff9c70fa860fdda0d44ebf2

SHA256
ce3774f5fb9e03def5d79b0455e7e08e0170fb12874424d10f51800238dd70f3

SHA512
ba9e8089764cb4e2321274c1f8cc08d17b7d0d8a29cb23aef0084ddf9609c01a17aea8ec85f9bb8e18a9b78b76bf9efb99eb1a62c21f2ec62291aba5afbb1ba8

Download Submit
/data/user/0/com.yy.cc/files/umeng_it.cache
Filesize
433B

MD5
44446a1390c73966099afd54e7e85889

SHA1
7e485a3921fe1986d97d5e3583a1badfbbf9daaf

SHA256
47f2ad1e7a8da121c1d1fa6f97119d87a5fde9e486a1357d40b4ff3085e79b16

SHA512
ff83f09d9f8cbf972d6af6220f734dda3c4d7dea143b7dee2ac8fca6a936a0040157c90bc198662235768c4b6ef3e7ec73a5acd6395ecc5365580306f614c26c

Download Submit
/data/user/0/com.yy.cc/shared_prefs/umeng_general_config.xml
Filesize
102B

MD5
64e0aa25c24ddde3818479bfb53d4a90

SHA1
fc53938ebd1feb0a51e83699d75c3f771f703d09

SHA256
d5bba73256a5443c04a97e4bdf7aefc134a109c5bf2a0453c05e8a68213da999

SHA512
e52295f359e0286ce4beb19e2ffbe239ac3292cd0c8aaa2f23572a2680065be4998e5a1094bdec79df26a6a68e41434185255c59f1b0aa03ac242d1d89a4118e

Download Submit
/data/user/0/com.yy.cc/shared_prefs/umeng_general_config.xml
Filesize
142B

MD5
a07882c795d1d7479a32644ca0d74b08

SHA1
40f115480adbcf8b15abd2aa49c4d544f4c2ecb1

SHA256
24b7d538912897990703f4613fe6e0d57d18c3c2b95fea53c2dc1fb5db0857ba

SHA512
103deec509f50d0acbfdda96093fe57a011e12c72abbe44a224bb2878b5069e99f489af2b2e3427c6b9d975e1586533bdd76611edfb604204ed246376917bea7

Download Submit
/data/user/0/com.yy.cc/shared_prefs/umeng_general_config.xml
Filesize
142B

MD5
f0fbfb94632bd8c2dfce8378fe8e1549

SHA1
9833972d3a3b62fbbbe72f2ef537d7ba8cfc3322

SHA256
63978e128929af1403e013a5eb684b7aedf99593c202f4845991deab3fbf56b5

SHA512
83b82561f0667b8dff2223ec9810aa365dab7dd58803fbd5062ac45eeae8eedfa930bf21a36185d8384c31a0e7cea4bde8c140cc23f424a5ad63cfc4be773b87

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml
Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml
Filesize
111B

MD5
fb04429bd9a6744385ca8cdb629282bb

SHA1
398a44061ca5df26dce0cc9d09f44bb8cb32b1ea

SHA256
77382c067359b4b08a27de88e029fed446470474af3891a2dfd301c4b824fc38

SHA512
bcf70548b6ae2f9defe63ceb0d90d926526e1092ac583f11e7b1896433c7595cbc875b26f165f30efc47e66f9df15f453e98f05407955d2edec6c8ff45b52bae

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
222B

MD5
0fcf7d0bb9a6c601a64681be14faa710

SHA1
cb6903b6aaec744762bae82690ab4ad4b14386f6

SHA256
c59560f16edc9c92ea3507c1d4aea0d01d195e968cf4881143243db97a0adfba

SHA512
6a69e406d4724c63982a77ef02b730598c3f2074279300188adfdca54bb104bbb71bbe2040a8607e28f733174360f717f15730ce6154ee907e17eef60309d608

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml
Filesize
111B

MD5
2683176e6267e3c8388a71f29073303a

SHA1
493a437005436d33fa850270b5f4ba0d339ad5ca

SHA256
c5f3bcb7f398479438e7bd2952496dde82ea01646e72bc93c6e2ea8ff9742946

SHA512
0c503c7847d6cfd61c398a4df3d02b734b88092d01efa99adea5d7f486c66545a82b0eae24c531fccd770e55d900d16d17a19ddf65e4f6d1679a16712b9c7c4e

Download Submit
/storage/emulated/0/6071Box/goagal/5ac714da7be6d534dd74c84a097f98e0
Filesize
352B

MD5
7b4620c92f4af9984707458992903377

SHA1
7f1d1e7e384851d6223076afb146eae0e00dab49

SHA256
40fb1417d0c62ab13df895ed863b4f4520522380d4dd7f83fce6777fc8bb6516

SHA512
e48c06ded16651270a4d793b4dd1eb3841b5ff670c1fe67cf1867afb55135c190301d53b48bca506881209d5b9a07d95f46c6312b94eea6cdf3014077b11ad0b

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads