Analysis

  • max time kernel
    3866851s
  • max time network
    36s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    21-05-2022 11:31

General

  • Target

    2809d7a532391989c31088230a768f4060873e99e6a98f8e8e0b2b3a5fc666e6.apk

  • Size

    223KB

  • MD5

    982f5bc28c524b250c2d462d25c647d4

  • SHA1

    ea6ef03acec7293d80907d13ee0cd6046c1cf7d1

  • SHA256

    2809d7a532391989c31088230a768f4060873e99e6a98f8e8e0b2b3a5fc666e6

  • SHA512

    126ee32d4c94c38891027555d75e525bb802fa5814bdf73e0abdd7553a5b0ff53f9e389f7af6700706817adea26671477b31415bd0fdab7b43ed422a2509af51

Score
5/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.system.wcrash
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:6183

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.system.wcrash/databases/packHelper.db
    Filesize

    72KB

    MD5

    58350a77c98519c14d366bd322c4653a

    SHA1

    09942090c958fb1e8c6e7a9f07bec4ad5faf9f64

    SHA256

    b66b0b41d39ffcbfd3f6a79c0d49de06d4edb4d0ad37f0c4a98f9b7b6db1eeed

    SHA512

    407aa4580a4f74c3c0daaf017dc049c096a122422973ff69cc9c08cdb4806097177a577bd336737331590f772b9d254515b761a10820b18d636fc36e299542bb

  • /data/user/0/com.system.wcrash/databases/packHelper.db-journal
    Filesize

    1KB

    MD5

    ff09378b61f827f7b6afa38f01da7616

    SHA1

    e259ccc22b1e73e58988cf8a8f34fd464a275710

    SHA256

    df6a403240a64df48176939b65697e1ee47f98dc7a68f19e4888546c331b3308

    SHA512

    59f15190da135c99ac9a98891fdc430079cdd22a28483f241a74e0dbe996f855fd84912f679ea441597e2ff8ee5f1c0da0412f770ff30431d00f1f94e694ce0e

  • /data/user/0/com.system.wcrash/databases/timeHelper.db
    Filesize

    72KB

    MD5

    247b1e98d90bb227eb566912233d0599

    SHA1

    c9d381c37e623a31988ad0cd41cac449627ff881

    SHA256

    c474ee06ca7dc62fc084aa380881e9da97f9bb2e706f990cf52be1130b0ec6f2

    SHA512

    795a76be4afa7467289192883f92d075f308a2fb6af20373c0b5a20c2b0170d2c1027ef88935f812dbfc3baedc6de1a74f8325e640fa5ccd3935718f4f5b1df1

  • /data/user/0/com.system.wcrash/databases/timeHelper.db-journal
    Filesize

    1KB

    MD5

    bdb708805e5c9edc02538b4d67d07234

    SHA1

    9d0a11102f035942389ef339a7cc3fcbeb2da119

    SHA256

    0f182be2d2320e572132b39fafa61670631bbacfa1e708d2d92417b1764105ad

    SHA512

    2a04efb49a317b7a216923af4dff456d843420ecfc5ac4c1e7bda74a8cce269bf6e912a75cc504c8c18716891a254c04692d75d005eb15c5cbae6f9e25ae7c4d

  • /storage/emulated/0/Android/data/com.system.wcrash/files/tjtj/log/data.txt
    Filesize

    76B

    MD5

    54b0ed58327fb4442b9970c01b648c5c

    SHA1

    62e50af21f5fc39d2388288b97b63460c33491b2

    SHA256

    194c1e448565b4ec67221a4cc8a5c7f12024863cd09969d469aca3ad984f2de2

    SHA512

    73ff597bd8b96fc7c8adec42f03ab9e4c3b6f5232edfc2aec0dff44ca07507ec47480f0d17957493c20f9e046111f6f90edf5b7b7c840410343727109b3701c2

  • /storage/emulated/0/ttan.ini
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e