Analysis

  • max time kernel
    3056138s
  • max time network
    128s
  • platform
    android_x86
  • resource
    android-x86-arm-20220621-en
  • submitted
    30-06-2022 19:15

General

  • Target

    3f92160dd4df40f4e3e5d790c0d0c476bd71b6f5089ee1b3dd692f778a9a5999.apk

  • Size

    737KB

  • MD5

    29424787bf939e29dc4666e708bc7ace

  • SHA1

    9481c7af84028d694496a195a3ebc1964a97b18a

  • SHA256

    3f92160dd4df40f4e3e5d790c0d0c476bd71b6f5089ee1b3dd692f778a9a5999

  • SHA512

    081611641cf606b50671c1cae8391fe7de5dd9214e2c3f89cd2655ee2b0e6ec4ceda416ce2faee7b28692550f0c810d29f0c793e0a189fb29b04753c1178b046

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

Processes

  • com.duomi.duomiFM_signaure
    1⤵
    • Requests cell location
    PID:4247

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.duomi.duomiFM_signaure/databases/signaureduomifmandroid.db
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.duomi.duomiFM_signaure/databases/signaureduomifmandroid.db-journal
    Filesize

    524B

    MD5

    59ed48aab0da3025e1713b6bdbeae519

    SHA1

    aebce2f7d669caa16903ef7443b80696356dd6f9

    SHA256

    f55d239c43edca5bbdd7cb4188f9d08cb31261cbc88b64a0fadbf8d79d96a089

    SHA512

    3fa68e5c49b3276eefcb87f56aae9650dba59c507bd8b6236f91d2a3a446fe3bb72709b491966dedb7927fb6a51fcca09f4f1b45cee3c0cf7223db66e1b5ace1

  • /data/user/0/com.duomi.duomiFM_signaure/databases/signaureduomifmandroid.db-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.duomi.duomiFM_signaure/databases/signaureduomifmandroid.db-wal
    Filesize

    40KB

    MD5

    aa188ba9b722771e961314c1d334004d

    SHA1

    65c2205056c580c8205f61c71b766d39f308f800

    SHA256

    fc047c8eb28104932b89a4e2dc4c87b5a4300d27e52e70b6d1229ae29dc8df2e

    SHA512

    52d6f8ce8643ec3d0614f5bb34547449b07f2c3fd77fcc8bcbeaebf9bfac6090dc4cd5ca2d12f440cc8546934b84da7057eb05d1af4bc01d6dc83db658c80b43