Analysis

  • max time kernel
    3056970s
  • max time network
    159s
  • platform
    android_x64
  • resource
    android-x64-20220621-en
  • submitted
    30-06-2022 19:19

General

  • Target

    137ee16e3d8a1ec0840d148be31544d73ea39115c2cb758085e811b1ff42cf18.apk

  • Size

    19.9MB

  • MD5

    51ab3bab5f3995e250d36874598bab12

  • SHA1

    f07ecff0ffad9877cf63d36b6726e68b0ae68da8

  • SHA256

    137ee16e3d8a1ec0840d148be31544d73ea39115c2cb758085e811b1ff42cf18

  • SHA512

    8c84bf57ff721b0035927347f4a556a6c2e0d5164465d8747558acb66bad568f23962a5ecc335ac53e8f9b8c1e51fdcb339fe7f8b2b987aa4b368a66e113a040

Score
7/10

Malware Config

Signatures

  • Checks Android system properties for emulator presence. 1 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.e8game.fjxddw
    1⤵
    • Checks Android system properties for emulator presence.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:5957
    • getprop ro.build.version.emui
      2⤵
        PID:6347
      • getprop ro.build.version.emui
        2⤵
          PID:6420
        • getprop ro.build.version.emui
          2⤵
            PID:6525

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/com.e8game.fjxddw/app_webview_com.e8game.fjxddw/.com.google.Chrome.5rRH65
          MD5

          d41d8cd98f00b204e9800998ecf8427e

          SHA1

          da39a3ee5e6b4b0d3255bfef95601890afd80709

          SHA256

          e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

          SHA512

          cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

        • /data/user/0/com.e8game.fjxddw/app_webview_com.e8game.fjxddw/GPUCache/index
          Filesize

          48B

          MD5

          6d7d499960179766cd4261d12dacc411

          SHA1

          e6f8553b0015e12b23cc551afe98763f3b1c9bed

          SHA256

          c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

          SHA512

          6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

        • /data/user/0/com.e8game.fjxddw/app_webview_com.e8game.fjxddw/GPUCache/index-dir/temp-index
          Filesize

          96B

          MD5

          0ca39ed6e617193c373d80c6594e71a1

          SHA1

          32aeb9229a032ec9cc58ccfe2189223298eb65ba

          SHA256

          5af42e01964c345bd5a017cc0c64149e602759def35fc59a729307569819fd1f

          SHA512

          86ef483936764b4538fa12936f614b80c5dd560acfe4194d1b2b3dc8030c642ee456788495ffd0646cb77a04b8d38dbbed9b245e946387eae41bc4da1ae2fbbb

        • /data/user/0/com.e8game.fjxddw/app_webview_com.e8game.fjxddw/Web Data
          Filesize

          112KB

          MD5

          b663831f8cc130493476d94f2d7a5330

          SHA1

          043a1956ab8e40821d67043f8a9110a8eb36fb93

          SHA256

          c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

          SHA512

          e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

        • /data/user/0/com.e8game.fjxddw/app_webview_com.e8game.fjxddw/Web Data-journal
          Filesize

          1KB

          MD5

          28fe0f8121b3a5d82dcffe249919286b

          SHA1

          ef7171636fc1b239640ad5cc2dca24b26c76709a

          SHA256

          38b739bdf19cdf72297e239d0e13a8750a61c68ea40c055f89b54b0cd5888141

          SHA512

          c17c6ed9a60af2b137c2f95209682614d1df5c3493d682b5674ac78d89c21ac90811412ea57748917315a798450088a4bb1015b70aca7a9b08a6c73126aae471

        • /data/user/0/com.e8game.fjxddw/app_webview_com.e8game.fjxddw/metrics_guid
          MD5

          d41d8cd98f00b204e9800998ecf8427e

          SHA1

          da39a3ee5e6b4b0d3255bfef95601890afd80709

          SHA256

          e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

          SHA512

          cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

        • /data/user/0/com.e8game.fjxddw/app_webview_com.e8game.fjxddw/metrics_guid
          Filesize

          36B

          MD5

          8c298efea29343f5267e1c80f202b34e

          SHA1

          3696a8e7edc6a7aab8c96c880a4e5ab88e35bf07

          SHA256

          ab7cdd27f2c4f17c6b4d5cc69af30dfcc37754deb48cfcee4b635e7440325bd7

          SHA512

          30408dc580c49cae1a4bdcbc9f9df0040c1c2b0a392450662beb4a0e187796c610e01bc18de8d2121913a948c8108b5cfb7c57d28ccbe0a8d58bbabf50acbdf1

        • /data/user/0/com.e8game.fjxddw/app_webview_com.e8game.fjxddw/variations_seed_new
          MD5

          d41d8cd98f00b204e9800998ecf8427e

          SHA1

          da39a3ee5e6b4b0d3255bfef95601890afd80709

          SHA256

          e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

          SHA512

          cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

        • /data/user/0/com.e8game.fjxddw/app_webview_com.e8game.fjxddw/variations_stamp
          MD5

          d41d8cd98f00b204e9800998ecf8427e

          SHA1

          da39a3ee5e6b4b0d3255bfef95601890afd80709

          SHA256

          e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

          SHA512

          cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

        • /data/user/0/com.e8game.fjxddw/app_webview_com.e8game.fjxddw/webview_data.lock
          MD5

          d41d8cd98f00b204e9800998ecf8427e

          SHA1

          da39a3ee5e6b4b0d3255bfef95601890afd80709

          SHA256

          e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

          SHA512

          cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

        • /data/user/0/com.e8game.fjxddw/cache/VAdNetSdk/reqQueue/-1135038580-754662270
          Filesize

          1KB

          MD5

          ec4e83540cfd8de25906aa77fc254e2f

          SHA1

          f29500fc55e6f7f8e8073ea034630d40f1089114

          SHA256

          c5c3dc0e26763cb96c0f4e68bde2606aac526e6e5615d93376ceec5d0718dace

          SHA512

          4e0fbf4b97ab94d8f7833e0409908409589babca20668559785ef39503e86038cfa9bdb10a86548de837fb7dc8058fe3e2fcbed80dbed33b286d3f5a081ce396

        • /data/user/0/com.e8game.fjxddw/cache/webview_com.e8game.fjxddw/org.chromium.android_webview/Code Cache/js/index
          Filesize

          48B

          MD5

          6d7d499960179766cd4261d12dacc411

          SHA1

          e6f8553b0015e12b23cc551afe98763f3b1c9bed

          SHA256

          c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

          SHA512

          6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

        • /data/user/0/com.e8game.fjxddw/cache/webview_com.e8game.fjxddw/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
          Filesize

          96B

          MD5

          b838d6eef7a497fccdc9fac0ce2676aa

          SHA1

          c8f2ea9592f58577bc72f0e07a24ec250bde4603

          SHA256

          01d926c07df238123a3fc60da872ad27684eaeeaca7e4eaabc0f739f1901d754

          SHA512

          e59b7b0c99c8f1cfe59f572e9817110c35b85281d1b10f1fb1a690eccaa570b6d472401e0535e16135a54cdbae3e6fb9bb972dafd5c067ba63c9224f9a4a0acc

        • /data/user/0/com.e8game.fjxddw/databases/bd_embed_tea_agent.db
          Filesize

          232KB

          MD5

          bf0e44ef4784982c4cd9f3e85ff9cbfa

          SHA1

          46f0a33ed53ebb9d8d20a88faa35b1665b671094

          SHA256

          ff491152ba02478acfed033a552fa83514b56da82950cf74fd3e22acf5dbcad9

          SHA512

          2b2fdb3dd158e096bf637450ef5978aa78a6c9072ab7b43047ceeec9493c5ef8c2b1a0b1c2772c9ae265040ccf61a0d6b83c098d4661d7ceb9b2c9eb4ef58d40

        • /data/user/0/com.e8game.fjxddw/databases/bd_embed_tea_agent.db-journal
          Filesize

          1KB

          MD5

          8851a1bb3147ee71c534696899fd8850

          SHA1

          dcc2ded05aa6a18a0572d00913aaf0540fa9ad33

          SHA256

          4b6c4e9645241595c4c58dde50d50bcbc93e37e2cc855e2f30d12babd22a0996

          SHA512

          e91081697c19cc686f5161f6fd7831d2f11ed03248b39495e8ab4b373cd9a9d96a5b150257e3bbf1c63e5264725d6c55aaec907df088644177b805e5312f90b4

        • /data/user/0/com.e8game.fjxddw/databases/bytedance_downloader.db
          Filesize

          72KB

          MD5

          e42db159e36ea63533b19672eece9359

          SHA1

          e1b5088160d61951ec9150db5561b615c64b9542

          SHA256

          c3b6cf45a88116f09cb15b565bf367a31b6988c5e4601585cb09966779615f8e

          SHA512

          c530975c4b845a67a838f4e9d0cec0eeae4ce1e4df0c6e7c5e77452829c714a30759d80da65930707166f6f378137f13188531267b8cc0331cf2c2a32077dcda

        • /data/user/0/com.e8game.fjxddw/databases/bytedance_downloader.db-journal
          Filesize

          1KB

          MD5

          42eaf20e8e3694055bb78a2f8665d2f6

          SHA1

          6b31e98fc0f9fbf577aefce78d96ea6945dd6992

          SHA256

          606c8e0f7dbdfa1ee98b96a8f4b660bf03854e1f33542daad30f912747be7530

          SHA512

          ba0be025181038cb3803224fe735c433562e9520ff6b9d09cb3867e71f3446a8a5ac913cd3e90429621d1fa44e2dfc854dcb4b06f0119572f480df01c1d0daff

        • /data/user/0/com.e8game.fjxddw/databases/npth_log.db
          Filesize

          72KB

          MD5

          ae78e7d2a50a11cef494ba2b07c78bbb

          SHA1

          cf33a31927379821e351e337c7b1ce0c408bca67

          SHA256

          be152950c735106a91c2864110972fafd0d1f96983b37aeae05a5a57c8ba0ad4

          SHA512

          dc9d16cd449b5e746a7060f3891e6a21204475d1adbac30354f4d2d00a4bdc2c0f394566e76c24af1974538a97fa19bdaf1161d6fee108efdc4e26484b12e87c

        • /data/user/0/com.e8game.fjxddw/databases/npth_log.db-journal
          Filesize

          1KB

          MD5

          5c2e0fa95c69214ccfbf680a8baa47e5

          SHA1

          5dc4cb9b7ec20f42b17018d498e82f5aa56c1d76

          SHA256

          11ec599672b689c1fee2dff3c07c06b5b2ff915fbedc4f67c2d4ce8061a8a415

          SHA512

          b07d11e864a30695039fa1bb3db097f0c7ccf186dcf80ede1ba6e3a49b4a5c261354c9f75f4ec26e11dafeaa92b3be3a3a190ca9de1a51921477db6f26c6d844

        • /data/user/0/com.e8game.fjxddw/databases/ttopensdk.db
          Filesize

          384KB

          MD5

          2100361f178878ae1c9781d05b93eeed

          SHA1

          18ff7d187b7fd9c8c9b33afec3cc87d82583588f

          SHA256

          a0a59edfeae19d8ea78991c7e20ee289a260beb6f2a2316808795ceeb9943ac6

          SHA512

          c2dd6e889dab4529f3c7eff3aeef1e66c8118b3238bc2d6b8f0471e24e232c205cfae80d1abdf0f2b47a7ef5f5a9b2b73a08fab0a3dc3f6883ffbaba1b9a5588

        • /data/user/0/com.e8game.fjxddw/databases/ttopensdk.db-journal
          Filesize

          1KB

          MD5

          b58c90361129854788730bb41f7059d2

          SHA1

          391f706eb1992040c2e17901352834070b11bd1e

          SHA256

          0687e15ab5cb5677cad95729192088b2f24a295402b35a8018c16b696be401f2

          SHA512

          f1ccb344a9d001651f6b8147535c4bbf1b9c872aec8b7c6f92e958b904565d6b74f3531cb9093a8f5b62734ece19949e15d25f98d936bf7e3fa95882d5ccddc0

        • /data/user/0/com.e8game.fjxddw/shared_prefs/WebViewChromiumPrefs.xml
          Filesize

          127B

          MD5

          6ef709b8536878951e87c29a1518fc2b

          SHA1

          24376c70b00152501b3d98df61fa7db435339172

          SHA256

          10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

          SHA512

          96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9

        • /data/user/0/com.e8game.fjxddw/shared_prefs/adCache.xml
          Filesize

          157B

          MD5

          e2316a6e3f3e7d844d16dbc9a49edbd3

          SHA1

          50db2f650b93168e644d622ab4e5a4fb0de5a1af

          SHA256

          cfb351cac010832a0f61f7cc80ef68aa5be15d3abf06b8c0833ae8101758eed6

          SHA512

          6ad494934f27592771bc8bb93d62a7a63d4fa2108dab45b364c4081b7ac09f6865e8849665bf6e58d3fd7ee364ebbcb155327ddddfa610ea083756d29257eb11

        • /data/user/0/com.e8game.fjxddw/shared_prefs/ccgo.xml
          Filesize

          140B

          MD5

          309eef94f2841ddf2da83295eebbe99d

          SHA1

          b0d6492ebc47c22579fdb9fabd922c2bb6651007

          SHA256

          0a1947d4021d2b3b4dfffe5f2ea2d949a72054e6125b52cf4d70399d09842ebc

          SHA512

          5ef4b4e860225c99014829d4fb209e2dc1a295cfd01ecd1ae3c0d0d8766facdbe9b91b439e97c15a448c186e7bcd2cccfbc0d93ba1e0eac37358a5dca979ea87

        • /data/user/0/com.e8game.fjxddw/shared_prefs/embed_applog_stats.xml
          Filesize

          140B

          MD5

          831b5328bfc66ac9cde1bbc074580d1d

          SHA1

          be143bb1740befd6fa9e4c246c237d8d594e9f43

          SHA256

          f72e5d64812a9ad28838571db98ddc81d19c82c0c93ae65df714af47c2a7240e

          SHA512

          000d1517a8f92ee421af1c8a212cbd958660b2dd912e5447a66bcbd7673cb849e54a7cc325b067ddf692eddbd7b1f7422b2064ac99006bf46f433c3552e15838

        • /data/user/0/com.e8game.fjxddw/shared_prefs/embed_applog_stats.xml
          Filesize

          295B

          MD5

          14292a4ceb53fd709cf012e7d5c1f9c8

          SHA1

          bc3a4443a96e7f3c3e33d7cd582b12875b36ef0e

          SHA256

          46087210b2d3dd31376c506bbebea275c0cf140a03e48c87f70a40396235ef82

          SHA512

          50b0cc884e5cc5ecbf314ad5cefd6c7aa37b4074ef81e172bdf258b763c8afc9cef42a546e67b1aca99d2bb460ecea35e11be53d867b0a3accbcc1b5e1fb8734

        • /data/user/0/com.e8game.fjxddw/shared_prefs/embed_applog_stats.xml
          Filesize

          516B

          MD5

          5e67b0d48e98342635a3b27297776d6d

          SHA1

          fa0920152b21ecf913c4b479efd5e1af2baf7e35

          SHA256

          c0a2a3df980243aeffa74a50f979fbdabc3cfb134e27475aa12f9c8d36efa481

          SHA512

          9c2a72170d1b81f46ed0bdcd074b61153bac80633a4a5fae17dcf3534188946a3572988c7a5749c297c7e363dd06683a56b7a86c06b1c843e108d200d800ff16

        • /data/user/0/com.e8game.fjxddw/shared_prefs/embed_header_custom.xml
          Filesize

          206B

          MD5

          275b1c60eb475b71f22cfde0d2bc84ec

          SHA1

          37481282ee610ec253d36c10199c8d6a959733f9

          SHA256

          b49ceef824c6ce856a332f30dcfd5dcea09be16dafe60da355a336ad05c0709c

          SHA512

          ddc504a9f952fbff1882cb289bf9451893020afd2eb00693a0b78761247644d5580b94149e648d34bf9d917c6ee113fe9d8d565b0e9e465690761bdd4d65f300

        • /data/user/0/com.e8game.fjxddw/shared_prefs/marsprefile.xml
          Filesize

          155B

          MD5

          91ebdf783e83afcb6bb253b617ae2763

          SHA1

          28d9747e138c0d7fb783dff279dea5baf9b844f1

          SHA256

          37373be83b11bb91112d85d4a4c2dbc4884b94303cfbd6a98b985ab61d4941ef

          SHA512

          567405c42c30f7db4a22a9035e2005a885ee4b6a4481f282a26c2764f39e25dda326bcad5967d910ecd8a16f0cd639fd20258010b9fa7136f3f1954f7d55f7f1

        • /data/user/0/com.e8game.fjxddw/shared_prefs/npth.xml
          Filesize

          125B

          MD5

          dfc2f365656a8d22d561c4387207737e

          SHA1

          41645c09d051e1c6afc125924b9d536625477217

          SHA256

          a699b5eda28d8fe0883191cc1b3e3756bc1587f71be035208bd68a0389a0990c

          SHA512

          55f6c88e381b56f044f400cca3c09f5850133eb3e24a5246a5b449e352d8056a624109ec449b91447918e0990d633efd5aae558adca04dea9feac1473c2c8287

        • /data/user/0/com.e8game.fjxddw/shared_prefs/snssdk_openudid.xml
          Filesize

          146B

          MD5

          f2c1fb07c0905bed51820e72b8d49434

          SHA1

          fdc7178dd0daa9ad9dcb2928542832adb757d954

          SHA256

          a47ec76bf4fcbd34eaca9bc9ffbd72c99eb0a9c9770b3ba957a93ccebdb1054b

          SHA512

          aef0c91d9a5215d182382b19d86d55d478ed12841e9d2d483fb7f54bd7965d32aef9061c97bb7d48f81ab7abd6d7bdf5fbe6e4044f02c3e125a09c74a40ca2b6

        • /data/user/0/com.e8game.fjxddw/shared_prefs/ttopenadsdk.xml
          Filesize

          140B

          MD5

          5d67820587422988c0cd98c312733d34

          SHA1

          f8e2009ded0fd900a48d88346a5538510bd926c4

          SHA256

          2a2c432a379487aadf073c9326c9874a4fa9766e52364bfec7be3951bc6570e2

          SHA512

          3fa36dcf607fb285af9adc4cdd52410fc4afd315aa05cbafbf081dbaa3b44deaed73846170eaa1c3e5b2823ec0226cff8d406ed70157227b38e70415405871d8

        • /storage/emulated/0/Android/data/com.e8game.fjxddw/cache/tt_tmpl_pkg/template/1e07acb6d8b9620e612fec7b7be86627.tmp
          Filesize

          136KB

          MD5

          2dfa639f7e0b8cdcb0a5f3ade482dc7a

          SHA1

          f4ca967d50297e3eb8d0ab57190a53c4d3a4e70f

          SHA256

          fc2c3ce71a6681bea8e5222a7d9da781087d9e01aec78e87db97a8c6fc2b77d7

          SHA512

          1546a87c349d43e52fd8a14558f110486a4f84d00a1ade0a05c58abd8223d2346ec4119b67659243bb9f94ee666f7aecff9a80789d48522da7df0f854f023c2f

        • /storage/emulated/0/Android/data/com.e8game.fjxddw/cache/tt_tmpl_pkg/template/8cb729c2940d761d4630393258c0f4d8.tmp
          Filesize

          120KB

          MD5

          d111a3c5eb3db2adf3bf27f8d57a1d85

          SHA1

          cf572243056bc9fff0b72ff083903dd28b5fbd4f

          SHA256

          76b0f3bdc127552053da82a428ec71a58c062b940c8e506693543b2e2ac1521e

          SHA512

          b2ab592b3f9735b7501a08253bc6bb0b958358ba438814affec56f8461749900539b4a0f86ddf221bd06f693779878fb00f39573686df19500b4714212f269bd

        • /storage/emulated/0/Android/data/com.e8game.fjxddw/cache/tt_tmpl_pkg/template/f0b8f85798d95c154451630d8d0e91d5.tmp
          Filesize

          1.1MB

          MD5

          b63918c54618c19899f846724c7923c0

          SHA1

          77f208f5d044c308c34f8134f2e201de3506e968

          SHA256

          3700d2d689161c73313fe4e973167579b6ac80bc775712abbf7a1caabe1e3065

          SHA512

          0318548720a4ae7da4c354799b15d1a6147bd17df10dce4e30c60a2524b02bb1e644e815b8183725c945138e2b760068c15ecbb8aeb80c3d11176853a204307e

        • /storage/emulated/0/Android/data/com.snssdk.api/cache/clientudid.dat
          Filesize

          36B

          MD5

          3e47fdb62605ca4fa2a77ee0e02df020

          SHA1

          de795dff58779629be082b0e891862830f8b0f83

          SHA256

          c4eda0d49c5a35209832a5eeb23c5bd5e2ceea0994c87f322bc0309b72e5d199

          SHA512

          ec4a206877a1514d3f2d9ccc9f621a88ee2a79684633c9c4a69bd5eb63d2fed940fc7f7eb5fdf3c2bdddc5cd556b9fb2e9c47406de50fb3dabf007244afcee8e