Analysis

  • max time kernel
    3871882s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-x64-20220310-en
  • submitted
    21-05-2022 13:10

General

  • Target

    cfe4a7f4949a3cba620766e4910f6c9a410522fa9b9f356dc213bbc13e6f230a.apk

  • Size

    681KB

  • MD5

    a1e84ec5bdae4495cb0bd5020bf5867f

  • SHA1

    9db400469e205cab8da55a416305b3eed012fff6

  • SHA256

    cfe4a7f4949a3cba620766e4910f6c9a410522fa9b9f356dc213bbc13e6f230a

  • SHA512

    966d2e493f5db399dbb9d831e7cbdb98e322878fca436bb4aae12a69de3e4cb65b7f52344648e8e2b9c2e7f7fdbea0f503e0375d8cbeb87c4b6fbba5f5aae314

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.evilsunflower.xiaoxiaole
    1⤵
      PID:6301

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.evilsunflower.xiaoxiaole/app_webview/.com.google.Chrome.fKC01P
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.evilsunflower.xiaoxiaole/app_webview/Web Data
      Filesize

      112KB

      MD5

      b663831f8cc130493476d94f2d7a5330

      SHA1

      043a1956ab8e40821d67043f8a9110a8eb36fb93

      SHA256

      c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

      SHA512

      e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

    • /data/user/0/com.evilsunflower.xiaoxiaole/app_webview/Web Data-journal
      Filesize

      1KB

      MD5

      67b9bcf750cb17bfcb96acfd0e9634ba

      SHA1

      918c41905973b76a59141621da5e517741cd5057

      SHA256

      d7a9c1a75ed3f2da080611b929be9762b4744aeae1b6c234872e7df02588a651

      SHA512

      af093ca34765fab355319ab9072b039d2628600ab5d8907f1970cc6d1cf9f9c60d64ce27da85df9223dcc7741e12641019acd571da5b559b02121b70d9ba9013

    • /data/user/0/com.evilsunflower.xiaoxiaole/app_webview/metrics_guid
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.evilsunflower.xiaoxiaole/app_webview/metrics_guid
      Filesize

      36B

      MD5

      aa8d3a86db31aa8e0d37909d3d802e58

      SHA1

      7f30b08427dd0225aeffd55429ebb4b9ba6fabce

      SHA256

      66b8ac55f2cfab227174a0dd418479b6b11fb91a5bbfa268240442f8fe18ee57

      SHA512

      af1e1ed75ef7f530f910a968bcab4cbbe048af8c3a1f732a6ee5d6ed0c283fa38184c48765c37a8127bd85d5328de64597b2ee4a7a6543213bf2f92efde67812

    • /data/user/0/com.evilsunflower.xiaoxiaole/app_webview/variations_seed_new
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.evilsunflower.xiaoxiaole/app_webview/variations_stamp
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.evilsunflower.xiaoxiaole/app_webview/webview_data.lock
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.evilsunflower.xiaoxiaole/cache/WebView/Crashpad/settings.dat
      Filesize

      40B

      MD5

      d403cd3b11545132b0c4cd8b774d724c

      SHA1

      0551192c54d6f8c818f7c7e5a66fd77a7872abad

      SHA256

      2bf4a1d44b8771659ca0711acd01f3a1f38bd0ce71e9eb27361afd58d6f39d36

      SHA512

      71b0f1c767408b2225707859b8c2fd128698094d3463c143af5e9c2245b637bbdddf09c437abec3694e44b5892e19960996d46caf1abc442bb3555a46e01acec

    • /data/user/0/com.evilsunflower.xiaoxiaole/cache/org.chromium.android_webview/Code Cache/js/index
      Filesize

      48B

      MD5

      6d7d499960179766cd4261d12dacc411

      SHA1

      e6f8553b0015e12b23cc551afe98763f3b1c9bed

      SHA256

      c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

      SHA512

      6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

    • /data/user/0/com.evilsunflower.xiaoxiaole/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
      Filesize

      96B

      MD5

      d970c80673af14ca4f2981ae797f7775

      SHA1

      4a975abd7637ecca09970cbb032ccd45f02fc7a0

      SHA256

      54795cfb88aac58cc5530133369f61c149df0e32f40a800521524fdd02d2905f

      SHA512

      19cbf4a711cd05d84c9031a1bc61439e14604de5e55ad3a2769dc49afcd154d32352083761d8c96da9549fd30268b354c11245074c04ef8f04f47680a116f0eb

    • /data/user/0/com.evilsunflower.xiaoxiaole/shared_prefs/WebViewChromiumPrefs.xml
      Filesize

      127B

      MD5

      6ef709b8536878951e87c29a1518fc2b

      SHA1

      24376c70b00152501b3d98df61fa7db435339172

      SHA256

      10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

      SHA512

      96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9

    • /sdcard/tappuzzle/BestResults_0
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e