a50b4ef8dd98b9f3c7395fb23aab668c4c9eba0c8478ad2a254860c8c2b068f1

Analysis

max time kernel
3098239s
max time network
137s
platform
android_x64
resource
android-x64-arm64-20220621-en
submitted
01-07-2022 06:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

a50b4ef8dd98b9f3c7395fb23aab668c4c9eba0c8478ad2a254860c8c2b068f1.apk
Size

2.8MB
MD5

4a41bf13e73b7b2041e3b7f806e02e9c
SHA1

1007d6dc47ad8914dcac1dcde45c12cd651f0c74
SHA256

a50b4ef8dd98b9f3c7395fb23aab668c4c9eba0c8478ad2a254860c8c2b068f1
SHA512

23a309d8972380d347fcde435af45f2369b93962978435d2bdfa9ca0dbf8a2f3a46eccaf3221a856fdffb090b4d72b35cf350e154d66667eae2c9f3a5aaa6db3

Score

8^/10

banker ransomware

Malware Config

Signatures

Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps). 1 IoCs
banker

Processes:

com.anzhuo.shoujijiasuoaispgiqtpkkgtq

description ioc process

Framework service call android.content.pm.IPackageManager.getInstalledApplications com.anzhuo.shoujijiasuoaispgiqtpkkgtq
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.

Processes:

com.anzhuo.shoujijiasuoaispgiqtpkkgtq

ioc pid process

/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/cache/1582435991586.jar 5250 com.anzhuo.shoujijiasuoaispgiqtpkkgtq
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.anzhuo.shoujijiasuoaispgiqtpkkgtq

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.anzhuo.shoujijiasuoaispgiqtpkkgtq

description	ioc	process
Framework service call	android.content.pm.IPackageManager.getInstalledApplications	com.anzhuo.shoujijiasuoaispgiqtpkkgtq

ioc	pid	process
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/cache/1582435991586.jar	5250	com.anzhuo.shoujijiasuoaispgiqtpkkgtq

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.anzhuo.shoujijiasuoaispgiqtpkkgtq

com.anzhuo.shoujijiasuoaispgiqtpkkgtq
1⤵
- Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps).
- Loads dropped Dex/Jar
- Uses Crypto APIs (Might try to encrypt user data).
PID:5250

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/app_webview/.com.google.Chrome.IAkBUi

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/app_webview/Default/Cookies

Filesize
64KB

MD5
dfb2098ca7b3bf16d6f5f1e7d3839af5

SHA1
ebb7a8bc886062d77a4092bd306b77a0ce7a3e9d

SHA256
e4119d32577d7fc63b267cc23eb7a9bbfb12d238f23e08918c38838fe0181224

SHA512
fccec45399258eb98220b7f01b492a72b8b3d1254dec6e196e344d89a0376c6ee24534a31a6675c866d4a17256d3ac6823657eaf04e1d386757d0cbfc6597e50

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/app_webview/Default/Cookies-journal

Filesize
1KB

MD5
9efd7eceddced4b808bc069b04f1a56b

SHA1
7942492e96c2637a92ffeafd36653e0653a9fbee

SHA256
29739286125a6350fb99caf4b2d0e04b237fd2a46662ba83d10982d10c6c8a50

SHA512
98d1388f79ff33379277e26ca75bfc0f14983d99e9e1ab010a67da310b32bb6cd616f715fb91b072a4da0f32755cfd448df11c6d709b9f21c593ad9cf2985a99

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/app_webview/Default/GPUCache/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/app_webview/Default/GPUCache/index-dir/temp-index

Filesize
96B

MD5
2799e0e3635d702edf615ebd1e434c29

SHA1
e5275e63d08f02890ad939f148e344e734c00cf8

SHA256
a6251dab2d1ed685a5d851dc8140a4e65fb8bcf5a0363515e5f77b21eb28e16f

SHA512
ef50648c03e895df1c257c3b7a13845896718ccbe828acf9db8ade73015edb66306d34013a1c97d9d315bd3c8c21825bf35bf184a046b2834f8b35e0c520196b

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/app_webview/Default/Local Storage/leveldb/000001.dbtmp

Filesize
16B

MD5
46295cac801e5d4857d09837238a6394

SHA1
44e0fa1b517dbf802b18faf0785eeea6ac51594b

SHA256
0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443

SHA512
8969402593f927350e2ceb4b5bc2a277f3754697c1961e3d6237da322257fbab42909e1a742e22223447f3a4805f8d8ef525432a7c3515a549e984d3eff72b23

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/app_webview/Default/Local Storage/leveldb/000003.log

Filesize
764B

MD5
5ee578ba2713c25addfa9d86352efd21

SHA1
4c83fa986bd7d469aef7d0c4a84ea7027d67c1ee

SHA256
eddee9497d2c5444507555d539d777fdf5edd5128572cc4bc951d7bd3e79745e

SHA512
f61f7c5b536c052f65e51e43d459b8fe6ab6d481a7cb492c37edb4a0f25acfc368d9f658b1875b8e964d8284df677a616e59efff6e00b52eee8ae6d6fc87abdb

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/app_webview/Default/Local Storage/leveldb/LOCK

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/app_webview/Default/Local Storage/leveldb/LOG

Filesize
155B

MD5
c6a13a50ca95ed3756897751ba608a6f

SHA1
6b2f5868502a24f89c900d5c0bad1c0d50536bc0

SHA256
9296b9612f0f3b036235951ebc34f67d0324284f26e2ffcbb9768c974a97830d

SHA512
7bb0c7b7daeea7b014689194c59e769647b1d9937ee62bb72d091e50ea795bc5264c16f17bde1149293d7e48132e56874fce7af1eb188e5b311d11c6acb514ce

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/app_webview/Default/Local Storage/leveldb/MANIFEST-000001

Filesize
41B

MD5
5af87dfd673ba2115e2fcf5cfdb727ab

SHA1
d5b5bbf396dc291274584ef71f444f420b6056f1

SHA256
f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4

SHA512
de34583a7dbafe4dd0dc0601e8f6906b9bc6a00c56c9323561204f77abbc0dc9007c480ffe4092ff2f194d54616caf50aecbd4a1e9583cae0c76ad6dd7c2375b

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/app_webview/Default/Web Data

Filesize
120KB

MD5
a48cd9324b1f8754b07f00d863b840f3

SHA1
11c6614775b35a58f440971dfc87c8aaac6d6173

SHA256
8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

SHA512
35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/app_webview/Default/Web Data-journal

Filesize
2KB

MD5
976901d79fc9b84967530fd844e7913f

SHA1
89418847b2c96537a7f06dacf064ef17eb4439b3

SHA256
3448fde57c4bbfd6c066c25e03d8370960db1e820e6150caf2448cb1e9473007

SHA512
9b2a3f6d695027f6d254109781841a640284ca8c4f87677e8288ae8f9b53924d11a47a1d50422d795236b6dab066aa4b6d61ef86ca0ef8dbc1990edbe40bb259

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/app_webview/variations_seed_new

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/app_webview/variations_stamp

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/app_webview/webview_data.lock

Filesize
43B

MD5
bc8b5d0a49641e5ef994d9adf600f503

SHA1
736cb752963374c9ee2c9afe5ca42f7a8f06e777

SHA256
0174c524cecdbde45e656f95ed6ee277a0d6b0df7cfa6621daf450f999985950

SHA512
7d9ae48163b98c385205792502018d6999bc38f391354745c6e74a97d1081c9125a3a878330666208141335ffcad95f1ed0de8134d4a29fab715472aa2962235

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/cache/1582435991586.jar

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/cache/1582435991586.jar

Filesize
20KB

MD5
fde2ee00cbd121cfab5290b078aa3ceb

SHA1
e2b77d5320e155e413d040a8c20020962065b2f8

SHA256
2897b0812077c654a9b3fbb0b6303d5cde681eeba7ad9981de65716c7810d685

SHA512
a9326aff8e454a2b4ac09984ef2a65fddd4dc146b4c44d839035549bff8c9fdaae490326d0b018f76c1ca2e4fb25426d74f550ca0950982fba632a023af99a56

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/cache/WebView/Crashpad/settings.dat

Filesize
40B

MD5
b64fb13b4a81a2025d64d10f27e8fc99

SHA1
fb69c0ddd8b96c7a4452324ba4716a26f0a8b135

SHA256
d215b7354603cbc213bddb0df3e36006ea9d845ea367ae60c7e5ce3b7cded099

SHA512
8414a43b4d77bfb9b5f883233612dcfe1a5a09c7b75aa24ba8151bbe2d12679624c22f6e9d20ca66492e5e3ffb55a3703dd2b2bfee6c57604b22fe92c97a30a7

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/cache/WebView/Default/HTTP Cache/66373336c269a4b7_0

Filesize
10KB

MD5
380350b10dc34f4c2778551ef21a5d76

SHA1
f673a8038e0a33454da7124eb075871dfdf09db0

SHA256
73e1617af6adec16b1ba66fb897e2058c000019c2a4c98d809f8642b04a1b385

SHA512
ef685797cf3859154c1e42de6b40bba486853b80e469bc1a7cec3339fbc1729944a3264fd698d38d3929a8770b2286a876b6c3be932fda7ef709721162f82416

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/cache/WebView/Default/HTTP Cache/Code Cache/js/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index

Filesize
96B

MD5
b12e5c5f7e375f679518c54239aa9ada

SHA1
37abb89d9f2cc8612071bc401363298fa45e8413

SHA256
93b45da8f063a9356587f7a4d753cdabd1c53f727d6b3a5dc629853ba768f1f6

SHA512
9004040506414b11934857d5d032a7c771d315a77158b366882f5d607e2b76c970a6a9886bfdcb68463c9e25759fd72cc01812f414d65ef927477e5710bfb882

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index

Filesize
96B

MD5
f6e1d8d399219c2a5983d08a531ca326

SHA1
3030dfe46eda541e1aca6398ee0ef2709ee550d1

SHA256
bb0df5e05c67fda74981782e3208ee0fb1e7f6988f8af7be9581e62a82a5afbb

SHA512
50b11568481833a1f9c23d04f35a0d3d4158c87ec0c3166986d5b52744f7f77e30117c2dc332302c536619325f437093fd7425c67ba1f39eca6a5fb4dbd958d9

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/cache/WebView/Default/HTTP Cache/dfe6b2497a7513ba_0

Filesize
12KB

MD5
aba27ee7fbd16700c23332c9d9565418

SHA1
c4ffe795e16c7f19a25c273844b00bdc805cca6c

SHA256
a307c13d714e0b91a374d0dcf37baf16de1b2a750f70d6ccabf08f29d39e48a4

SHA512
b037d9dd4c50aca4f39a46f241e29bed6f7240775346455a417beff4a47b65b33502b574099a2d1bc0f5be9d453d0753c4fbaf737c17675e6e575f3a1d282662

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/cache/WebView/Default/HTTP Cache/f038e94cb33282ab_0

Filesize
243KB

MD5
e682bb8edbbe8856dc39241e152293cb

SHA1
250f30caf3b18efbd8488ffe835df968d67cdbd6

SHA256
0d80c3038a27e435f12681bbbd4dcba823fd147dba17d54ff8732c3965818194

SHA512
1418d22510077916f6a3f807ba2ecbbfd5434e2b3b48090e980005572cedea9325ff9a1d0149085c31c880b665805128bca6a29b004089dab4d00059e2877245

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/cache/WebView/Default/HTTP Cache/index

Filesize
48B

MD5
6d7d499960179766cd4261d12dacc411

SHA1
e6f8553b0015e12b23cc551afe98763f3b1c9bed

SHA256
c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

SHA512
6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/cache/WebView/Default/HTTP Cache/index-dir/temp-index

Filesize
144B

MD5
78d5ce854bbad58fb1d4b8a59efdc28d

SHA1
00d2439bd5f4acdcb7e78535d71f1003df28e8e9

SHA256
ee6ef381f2619ba464fb3e18d564e9a81550fcc94bac85ad255bb52c1b39b08b

SHA512
af00f731b43726091713946c4b5f0d177b1634565fddbf34327f0b39290cc0abfc6cbbce5a6af9336a2d73af297c1a8bf16268d0e6c628d58b3eab55c11ebb23

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/cache/WebView/Default/HTTP Cache/index-dir/temp-index

Filesize
240B

MD5
a9ad3275c0236882485a3047312efa77

SHA1
677d7f346132d0ff0bb62d4547eaf4afda081d17

SHA256
1f266fdf15d2132f971f05e4d4fddb9bc29b6e763af3c3298e9a3395d19ca7e6

SHA512
2ed8fab1f8f62bdc8f6602446f0f326562061e58052e93a7ac5d8d6f5c84cc4cf81080e3876b61f70b8e54f5ddd81d5124fd500ad1ee945cfd8f9e4e8815e604

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/cache/WebView/font_unique_name_table.pb

Filesize
57KB

MD5
f080fa2a56ab5479d58063e5ea871447

SHA1
4b3fd57a98916fa5784305b76ba30af26b5253d9

SHA256
0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

SHA512
8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/cache/oat/1582435991586.jar.cur.prof

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/shared_prefs/WebViewChromiumPrefs.xml

Filesize
127B

MD5
97ccd9a2b2063143df56b6937f961ca4

SHA1
5e78a91ae5df289ce83443cb7d5589dd3504fb5d

SHA256
248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

SHA512
86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/shared_prefs/admob.xml

Filesize
133B

MD5
3b71ff97779d8ebccf39db5af27f9bd2

SHA1
3a4f6e28f4965ee577d2ad19e03ac89c54956199

SHA256
fd8b84dcfcf14a0fac6a40dc62347452f324d6b259e3032c8663eb50927b92f8

SHA512
37d4042171dfb343f41695e933a4ff9acd3bea54369972212a517da977cc420670f8e4826fe771f0a52f1a41dcc3ae9a64cb61f4b433b75ae4370e1045d24497

Download Submit
/data/user/0/com.anzhuo.shoujijiasuoaispgiqtpkkgtq/shared_prefs/admob.xml

Filesize
438B

MD5
915c9cf2dd6f1b60b05c834e890bb40d

SHA1
957d9fa787f64cc3ecbd4bf13446f3050bf84ddf

SHA256
f0a3c43261ae78c089229fdb51b43efad48d5081970ca43c5ed387688ab2d4a9

SHA512
74abf0dc0aa16231dca134d5e8448408b93b1d493d238c9536c940b0e6997e823cf3b658595dc77bc50ff305c3a0063460bc598c87c89f1dfc51f0e219871875

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads