Overview

overview

8

Static

static

7

c5e9aee5c0...b6.apk

android-9-x86

8

c5e9aee5c0...b6.apk

android-10-x64

6

Analysis

  • max time kernel
    589784s
  • max time network
    154s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    29/10/2022, 06:05

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    c5e9aee5c084939d3426e828b673de2f11af900c324928d9f8825af329e78fb6.apk

  • Size

    1.1MB

  • MD5

    2101ca4eb3de71ddaa2d7b1a02291be5

  • SHA1

    c3480fbf36b15cacf693a36418ac1707ad465bce

  • SHA256

    c5e9aee5c084939d3426e828b673de2f11af900c324928d9f8825af329e78fb6

  • SHA512

    fb8a210b7aa79d00c6f73a6f65f50d804b91914d700a28d8b6e364ad6a0fedf7dcc35d7c0c55e8f8a473ea4c7c9478920a95bc44cc7a6db67fb973987ba7b837

  • SSDEEP

    24576:KW2O0K4/zHYTbNReVO61DYALeXFTNBuSkjazX7qRRqQ+9bfC:KZKI4TbNR1ALcBuSkjaL72RV+9bfC

Score
8/10
evasioninfostealerransomware

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Reads the content of SMS inbox messages. 1 IoCs
    infostealer
  • Reads information about phone network operator.
  • Removes a system notification. 1 IoCs
    evasion
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
    ransomware

Processes

  • com.qihoo.app.bangzi
    1⤵
    • Requests cell location
    • Reads the content of SMS inbox messages.
    • Removes a system notification.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4097

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/com.qihoo.app.bangzi/app_webview/Cookies
          Filesize

          64KB

          MD5

          cb7543c4df600f2af58097cce0e334ba

          SHA1

          83cc92f38c27fdb4fa519b1ce2f37912f24af1f0

          SHA256

          64c022ae708f94ffde986e105d88f708884de325720bfb9925c4160a6d417233

          SHA512

          ad51cad0472327bd68aa2d791341cfafed58971752352537bb603ed18b15a3f9185e9150983a28ecd09606e8dcaef6d1c9d93213dd246ef7720f39842eb3d980

          Download Submit

        • /data/user/0/com.qihoo.app.bangzi/app_webview/Cookies-journal
          Filesize

          1KB

          MD5

          1bc24d8d2537bf6c9a195e737f65dc7d

          SHA1

          b7d328e3a5d10d88b5e3b258a86378c057156d9a

          SHA256

          9825cdd87e008c929b7052c1f6231737059a99dedc70167a08fbf6ba6adab989

          SHA512

          25abf3daa724ee073c2a4f431fd906b6602ef786ae563e9b6a9df42613eaeba7269351184ef32c435f9a26ad464331ac595e67e36a1ce2b4c77fceb42cbb2381

          Download Submit

        • /data/user/0/com.qihoo.app.bangzi/app_webview/GPUCache/index
          Filesize

          20B

          MD5

          93027d42b314432c4216e6cfca48b384

          SHA1

          43448dd8102979c3926828182579691945eedd4e

          SHA256

          3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

          SHA512

          a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

          Download Submit

        • /data/user/0/com.qihoo.app.bangzi/app_webview/GPUCache/index-dir/temp-index
          Filesize

          48B

          MD5

          ed9b00d6bc487353da7d124e4e2675eb

          SHA1

          9ac4913b050792c2f108cea53496231486c89d13

          SHA256

          6b42f01c6dd28aaabedbe80208f3e1758ca92a9ad690467a18106c2bf8bffe6d

          SHA512

          da8920a2ba82b972676c755169e0bd018e322e9da5d4509d39ba67b5e2fb69c846e4d4886b9b02429b107a0d0bf2314e8b7eb8a12516625408b9944487d1356a

          Download Submit

        • /data/user/0/com.qihoo.app.bangzi/app_webview/Web Data
          Filesize

          104KB

          MD5

          dc79f9ce5f3ab5270b33e61119dfc959

          SHA1

          1844bf222a5144b513dcf2fb50a18c011701c647

          SHA256

          47e65f4de08deabfd52ecdb8b0a29c61c482188b92c36182e2112ca0a8f4ff65

          SHA512

          18b8894a7f35df516f423bbdebf1e05ce09eaf4345b139e59e603cadb81f8d1fa20f793438c28e8fd9a64e64f0684223d90ce6f10d3f93cb0c781049a8cff03e

          Download Submit

        • /data/user/0/com.qihoo.app.bangzi/app_webview/Web Data-journal
          Filesize

          1KB

          MD5

          90ae904646f6b64a8d05da13dac4a47f

          SHA1

          0718d64a4b4dca868c5e857f77c2bea89dbe0f2a

          SHA256

          38dc77b2efa9dfd51a38a47d65907cb1b10562f79721ddb7d325163489332a74

          SHA512

          0a9dde9a96760b9b1eb936f37e6a19a2b15b44e6c988ed57d39a81f32e1ec6c4aef4cf33405e6aedd0ce33f73908b8e61d9308dde4df90f07ac2cca39887b43e

          Download Submit

        • /data/user/0/com.qihoo.app.bangzi/app_webview/metrics_guid
          Filesize

          36B

          MD5

          3830e87b0b63eb27696a0ae8e3a54ed6

          SHA1

          ade4f17f8c0160b24641920196b6848594651df6

          SHA256

          6e945841b8d56006bfcf124c2c0260343e63615d54d7b9333683fe0053711bc4

          SHA512

          37fd46b22ec691601b0dc179436c850369f85d6dd6891ecfac0e59205c1e4900bc76651bb90375480ff85543d73868aaf2753d47340f65b81427b805531219a7

          Download Submit

        • /data/user/0/com.qihoo.app.bangzi/cache/org.chromium.android_webview/cc692f94b316072d_0
          Filesize

          189B

          MD5

          7e6e34ba1b7109e1453e06fba79659c8

          SHA1

          2123d11499dd9e02de96884028dd5c1007122086

          SHA256

          85c79e6f2f6ed6c35ec68012376ef324030b2658a6024005adf04cefff387129

          SHA512

          b8c9356f676d4be56e58c50d8b92c7cbafc5076a483af42cd541c233e0190b4e22043073d9f25f16ecfdd9ba60b578c23e93a581f8cfcdbcfdcc7300482bbc10

          Download Submit

        • /data/user/0/com.qihoo.app.bangzi/cache/org.chromium.android_webview/cc692f94b316072d_0
          Filesize

          189B

          MD5

          7e6e34ba1b7109e1453e06fba79659c8

          SHA1

          2123d11499dd9e02de96884028dd5c1007122086

          SHA256

          85c79e6f2f6ed6c35ec68012376ef324030b2658a6024005adf04cefff387129

          SHA512

          b8c9356f676d4be56e58c50d8b92c7cbafc5076a483af42cd541c233e0190b4e22043073d9f25f16ecfdd9ba60b578c23e93a581f8cfcdbcfdcc7300482bbc10

          Download Submit

        • /data/user/0/com.qihoo.app.bangzi/cache/org.chromium.android_webview/cc692f94b316072d_0
          Filesize

          117B

          MD5

          897028928b35ede46e6049811d0a736d

          SHA1

          dcf10c6e512c41ea13a417a29b6c2c6ccea818e4

          SHA256

          14bd94b2c723bf0ca974f3b7d58c7b384cff441e0b48d0af794d68f352add9aa

          SHA512

          adf21cf3701e4cfe330ca3f2335e29cda76d6f08a338805d013cfdd018149ec256b7ad251955d0c3a168627b84d434d3558fef2a7fc19220a8cae8ef92eb9009

          Download Submit

        • /data/user/0/com.qihoo.app.bangzi/cache/org.chromium.android_webview/index
          Filesize

          20B

          MD5

          93027d42b314432c4216e6cfca48b384

          SHA1

          43448dd8102979c3926828182579691945eedd4e

          SHA256

          3cda72e67c62e52a342309c44f2cb3b6c1019c7b11822e2f628e48e254e2b41c

          SHA512

          a52d13cf7f5be196d1e2f135b8a010f80558c5d35e90e7792441d1c976517d55cf1c9587949db69ebef294cc6ef79529a65e7d779964793016efecacd152f70e

          Download Submit

        • /data/user/0/com.qihoo.app.bangzi/cache/org.chromium.android_webview/index-dir/temp-index
          Filesize

          72B

          MD5

          bbe267cc5babec1a1d4bce0972c48290

          SHA1

          dc3cb7964bd70c83d97842f347d743ef6e665bff

          SHA256

          893a41abbf4ea705d0a10aec0060e74777012267c52085b83bc200b04328c4b1

          SHA512

          ca71f37b7f160cda6bba239f4d37c0820eeba2bf03c270962f5ef70322744395566184f5f0e0cbc5467476dba5e2faabdd281ed04b5a9585d911f079eaba70dc

          Download Submit

        • /data/user/0/com.qihoo.app.bangzi/databases/hy.db
          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          Download Submit

        • /data/user/0/com.qihoo.app.bangzi/databases/hy.db-journal
          Filesize

          524B

          MD5

          bafec61b07c9995257352f5d95676863

          SHA1

          7abc31db2bf777623f06bc7f6b02b47760b6ef5a

          SHA256

          b94dc0bfed49c032f8153bf81ed7ed5d113bfa5779b17e1f89b4e69f646615c8

          SHA512

          c181efc92ca9b18994ec7506f6ec270671e22c1f2a27514a48b81744d8df598834f25f702ff5db8102dcdb0515ff927a0326e2c87cb467d469eb50446d2e0f4e

          Download Submit

        • /data/user/0/com.qihoo.app.bangzi/databases/hy.db-shm
          Filesize

          8B

          MD5

          7dea362b3fac8e00956a4952a3d4f474

          SHA1

          05fe405753166f125559e7c9ac558654f107c7e9

          SHA256

          af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

          SHA512

          1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

          Download Submit

        • /data/user/0/com.qihoo.app.bangzi/databases/hy.db-wal
          Filesize

          124KB

          MD5

          d13fb1549ae7ab20cc1897836ada7d3f

          SHA1

          90477bd167dd7670a4c3c6262787746031c162a4

          SHA256

          3e2b22819383d0cd34fa6088994ce9d8c79e7211be8844ea821b4f9c587a89d6

          SHA512

          bea3f1b8409982d9d4a82a72c96b4a286edb273bbb7f097ba8ab55538d3d5b28ac4b8ffa19a74d0c5d7fc9bc5412301a826962c8053a32b952bc7798cbc0d185

          Download Submit

        • /data/user/0/com.qihoo.app.bangzi/files/.imprint
          Filesize

          902B

          MD5

          c450b31d00102bd9aed87ba87c40df1f

          SHA1

          2e7fe97162a0f9a17202942867cb27057cc1bca1

          SHA256

          6a2e1fca411914ea948db0742c1cc70fd8edc0eb7b804b44379dc52d8eae3834

          SHA512

          ef8c0be85652751f3b5dc3534cd1e74ef024b8d57255cc5968d4f2333447a2196c37c20fd068a7f393310aac9010e07a73f5a8dd132acac70b907d1ea89970f6

          Download Submit

        • /data/user/0/com.qihoo.app.bangzi/files/__local_last_session.json
          Filesize

          131B

          MD5

          1d856b1a890107d67fdbc19a649d6081

          SHA1

          d19781b701e6b035086109cf9eb0e1ef139a85a7

          SHA256

          7b60120fd2bc1573c7ea3cec070c29d320db5260c113d2d6dbf5d5eb23a23ad6

          SHA512

          308590459cd7f22e21a39d009b2ea948aeaaa14de4437e835da1acde7d363751a4c60ece14a7f810539864623c88f5b15a07f101927037a6d26ee95e48250320

          Download Submit

        • /data/user/0/com.qihoo.app.bangzi/files/mobclick_agent_cached_com.qihoo.app.bangzi2
          Filesize

          1KB

          MD5

          c0453df9cede6b446da324be7ed3c139

          SHA1

          de1f40c17d9bd3f13f7269777fd9b8acd9188a12

          SHA256

          a26423922f86053a0eb0ca1dfecd6559882f9075b7091000bddee02a6b79ca4c

          SHA512

          8815b70de1c63560b2f7966de2b60b217129412408f54ecf2e02eda41885cd26698e833eba6612d9680e44095aa87e7f11e9e48dac4b96a0df874e98556b2b40

          Download Submit

        • /data/user/0/com.qihoo.app.bangzi/files/umeng_it.cache
          Filesize

          310B

          MD5

          3fa9ae2cd9997f3222cfd043ed3e670a

          SHA1

          5c7d273fc80794fc1470397a23f06c1a1f0126c0

          SHA256

          0a9090295b502694c23521683102f2c6dcf251ffd16e02c76a64e3492b51c345

          SHA512

          150aad30fbfe97cc1053687cd009d1bd10a163ed3b8f0330bbc54800220f617a3327fcfd85eede60d03529a8f26c54f815cb51984c246a92b7102fa98a0fc7d2

          Download Submit

        • /data/user/0/com.qihoo.app.bangzi/shared_prefs/WebViewChromiumPrefs.xml
          Filesize

          127B

          MD5

          21223e9184445fe043476484cd8cb1f9

          SHA1

          2b4813f849121d60ba35eb0889080668bb62c778

          SHA256

          bb61b7c087c2ae2de93a7740ff75707342940557146366e92b840284cd9446af

          SHA512

          be21408de0cc643650e5d9ab9057a8f9de88e37fbdc6417cfeba160402ec4cd14fccbc82cbbfd941ecfc0bb3d4056ee61ac199efdc99d647d53e65818835fd48

          Download Submit

        • /data/user/0/com.qihoo.app.bangzi/shared_prefs/mobclick_agent_online_setting_com.qihoo.app.bangzi.xml
          Filesize

          124B

          MD5

          a200fdf3c1db6acb28fb37b7a6efa9aa

          SHA1

          373bc8631a9f52d58a685264cf9000105ca7930b

          SHA256

          1c460147e5322a20724ce8347ca5d43757fbeea00c08e3501df86aa55cfdeea0

          SHA512

          e19ecaaa76ec3894d535622c751f979b3e18ed4ffdf237eec2312de3f352f800d8b32f468ab5ef457cfec99d6ca9d3e6501d34fe9bf078a8b39493280003b546

          Download Submit

        • /storage/emulated/0/baidu/.cuid
          Filesize

          89B

          MD5

          dc71687cb8f098278505516c42865fc9

          SHA1

          b0d1a8e368c0447e22d90c69299046e907d770d7

          SHA256

          8d741eddcf3977b90983d8b9570685bec108b6647464586b4a11b2a464180619

          SHA512

          8cd6472731bff838dfc338f89b58cee9d8a3dfc450826df4c071193044dfb95e94612c711c17367db4c1570756f94934372ee3c042ceea251eee1a3e5e94b320

          Download Submit