Analysis

  • max time kernel
    2179597s
  • max time network
    17s
  • platform
    android_x86
  • resource
    android-x86-arm-20220621-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220621-enlocale:en-usos:android-9-x86system
  • submitted
    09-08-2022 09:22

General

  • Target

    xiaoshuo.apk

  • Size

    4.6MB

  • MD5

    7569c1c694f071ad4bdeb278e2ea991e

  • SHA1

    0df5afa0dee6abfdb204aeabf596db4409701a2b

  • SHA256

    d3ad32efd8faaf4849785c2e0de7a09d4bbead49eda270c4ab668643f9f3b9d6

  • SHA512

    2a2dc867665f2832526104e767187b9ad49a261cce6f23423fe40c50bd165d5126809af03b4708be1fbc3208c35684e1b1a4c684665e6b416b04cb907f0912c3

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.reading.ykyuedu
    1⤵
      PID:4745

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.reading.ykyuedu/databases/hreader_db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/com.reading.ykyuedu/databases/hreader_db-journal

      Filesize

      524B

      MD5

      8193046c66ae76d0e3a8797eb333ac26

      SHA1

      1f988e8121089bcdc53f5afad9f2c44e4406e0be

      SHA256

      4fffc747a1c1d050bdae2136fd4b01963b4a62025892d23596a16d4004987f94

      SHA512

      c724335ead296cd8396855cc2375619f1c8b84ee9d0f89cf3fb9b05aeb998fa927765232c48424d5e128d69178a9b26a2e0fc3b15000c9d6753654c52ca3422d

    • /data/user/0/com.reading.ykyuedu/databases/hreader_db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.reading.ykyuedu/databases/hreader_db-wal

      Filesize

      44KB

      MD5

      2edcde979d6c3c29d70d0fec7a87c1b2

      SHA1

      8d52f6e32df581069440255021d28735cdcf19be

      SHA256

      e53b970c70f64ebe431debfe2390a19587077fe0be85e01611805cfcaa8ed984

      SHA512

      793a2db70b0e7038e3787f952147501b32b0d3df9ec549c4a19242ae24236e33354b2fc58682e7945ab7cfa2fd981d6160e6e38dade6eb70f00c6e3f2c32f249

    • /data/user/0/com.reading.ykyuedu/databases/okgo.db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/com.reading.ykyuedu/databases/okgo.db-journal

      Filesize

      524B

      MD5

      0fbc0dd2c7d577517ffe53c4e7ecbf13

      SHA1

      5c969f24657b0901603fc55b402c22ff2b646c36

      SHA256

      c3406f9c12f4dfd5dac416084d5606a08a54d1007312a470c1b614c49d06d904

      SHA512

      a0e1f5831b967f9d7ab8fb5393b166df9a81db98ba943f34723daef66d1b2773ff11bbefd8ef6980e1c943e256f330efdbbd6060fb0e777a35e773aaa8512565

    • /data/user/0/com.reading.ykyuedu/databases/okgo.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.reading.ykyuedu/databases/okgo.db-wal

      Filesize

      56KB

      MD5

      79b823228137c6c37f54c006ce0f5605

      SHA1

      027a8334aba35f1dae74d662bcb9d03be8b33dd3

      SHA256

      f5587df8aaec0f9fda4d09c16036cf17849fdd60339ab3cb4d8b8769499f4b23

      SHA512

      9ecd7a5b044ce445558c20ec35bce2305e8c9965651d32541e483a4d6592d3a5668bf12c7294e47aecb7eb8c4feb82913b811cf9bccccd54551a522c1f791f21

    • /data/user/0/com.reading.ykyuedu/shared_prefs/TD_app_pefercen_profile.xml

      Filesize

      144B

      MD5

      54fb87a143a447667d7e23922fa6daa8

      SHA1

      0a26266281d031a0213ddd00458fe0ca291e2e33

      SHA256

      ad5d02a839b501cedf495d06a2d3d0adec02dd47498e7a4fb4e56681c5eeab03

      SHA512

      3142473758a3a580b7e6f92a95400471eb7d1ade2ec4f4757451f68ec22d8eca4c0aa275d55f1a60838047b54784b38653d43944f608d88838e5e707ff39c49b

    • /data/user/0/com.reading.ykyuedu/shared_prefs/TD_app_pefercen_profile.xml

      Filesize

      195B

      MD5

      db8a7ae6e873b9d4c5c2bc7c69e30b81

      SHA1

      b0e2eb7b2148f4b472b882ea2dd84239126db4d3

      SHA256

      3b071d7bbec5bbab9f5b6591b86d8f2610c9d4512155d358bf44088db20c2941

      SHA512

      9082550657e1c151f576a6cd13e0f428688c287b65f2b62dac0f168922d4c7ac4ccf81cf41d3e1f365e826d7b3ef77a065e3d1ac311efb07daf177b3ee9373f2

    • /storage/emulated/0/yk/.hpay_device_id

      Filesize

      32B

      MD5

      dc8a1e18647788862efe46682e63556c

      SHA1

      d2e1441ce4ae47c0591f54f5840234140e7077dd

      SHA256

      565f11c2601468f53175bb4386af24665159571379673bcca7e7c538e502884b

      SHA512

      8642ab780de9f3a4fe569ef7e475d067351a49789cdd803f79336bd0d182ccb32169b94da2f3d393f7f005c66e598f2bce68da407f3be9a4000dd2a4367ab28d