Analysis

  • max time kernel
    3056161s
  • max time network
    140s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220621-en
  • submitted
    30-06-2022 19:15

General

  • Target

    3f92160dd4df40f4e3e5d790c0d0c476bd71b6f5089ee1b3dd692f778a9a5999.apk

  • Size

    737KB

  • MD5

    29424787bf939e29dc4666e708bc7ace

  • SHA1

    9481c7af84028d694496a195a3ebc1964a97b18a

  • SHA256

    3f92160dd4df40f4e3e5d790c0d0c476bd71b6f5089ee1b3dd692f778a9a5999

  • SHA512

    081611641cf606b50671c1cae8391fe7de5dd9214e2c3f89cd2655ee2b0e6ec4ceda416ce2faee7b28692550f0c810d29f0c793e0a189fb29b04753c1178b046

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

Processes

  • com.duomi.duomiFM_signaure
    1⤵
    • Requests cell location
    PID:4428

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.duomi.duomiFM_signaure/databases/signaureduomifmandroid.db

    Filesize

    88KB

    MD5

    b1dbcdbde27c961a1b666781a20dc4fc

    SHA1

    696e5bd5033bbc61cc482bb2d408b89c08793e0a

    SHA256

    99ba41af79532ce81592aac707d9ed16802dfd74d184bee2d24b24442da8fdf1

    SHA512

    afaf34d215a653e1bd2f9eb4d448d2db6da44ccc611e8232bcfb8d9dd266c23c1280672c097d120dd46b2ed5d223e6a7803b77c2254391ab1ee825bc4b0a2ab9

  • /data/user/0/com.duomi.duomiFM_signaure/databases/signaureduomifmandroid.db-journal

    Filesize

    1KB

    MD5

    b34412bd4e59290c89ebb14ba6b93cd0

    SHA1

    6a4d5dd4ff9dcd93333b7c8b9382d1a673963bdb

    SHA256

    4cfcf81b2e2f6e730ebe8679c9e51a83fca3217eaaf93c980ffae1d459b0aaed

    SHA512

    296decc120fb6c95ee373e4a04558c0e2f58cdb9e00bee2f570a87083025799fea6dd889a6bef144546de6d0664aee42b61bafc5d4a4753d5cb27335c70de445