Analysis

  • max time kernel
    2712260s
  • max time network
    156s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    22-11-2022 23:24

General

  • Target

    22ecdbfdb6be92901c243252739f0c1611d1d94b409efc45b81ccf4efd044aa8.apk

  • Size

    7.1MB

  • MD5

    0e3576ad845efb5c6a94115e4cf7fde5

  • SHA1

    e1536419d219ae85e6a4624f77219362e1dcf995

  • SHA256

    22ecdbfdb6be92901c243252739f0c1611d1d94b409efc45b81ccf4efd044aa8

  • SHA512

    921d49c7dcde4a8b8103f37364b0280328db4da470dca7b821563c4da4d1fd072b7044d178e44e6aed1665acfc946a0e55c0bd258bc9bdd633bc0855ce9cb0ab

  • SSDEEP

    196608:sJTUrZUia5WxWcgUHBgNaxyZ8gYWwyZ7AOVBSk:sJTSa5WxWcgpIwZ8gYWbR/VBSk

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.icloud.game.wrzjh
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4864

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.icloud.game.wrzjh/files/act0

    Filesize

    148B

    MD5

    c87df51215ca24cac26367d7351cbefd

    SHA1

    42bf0d2b1f2eeb76f058442ca20a92e8ac2af63d

    SHA256

    aaaef3b663875ff7352a183a904f419c1a8a54456ff04e8983364413d11bf536

    SHA512

    dc2dd95811059533ea3731d5fd713d2689dcec45d10af840eb4d68f3de89d6570f009191ef7fd7014f8b18e506bdc74bc4a10cb41cc9ab631d6ace4522fe1e6d

  • /data/user/0/com.icloud.game.wrzjh/files/act4

    Filesize

    315B

    MD5

    4b6242709438525761c81092474e1daf

    SHA1

    a7dc604f2f2065ed25a9045fdbc3a75e4410d024

    SHA256

    422e0a33b4e697b48cec9bb55735eb74911edb3da83344fefe064dc1da3eda72

    SHA512

    9e6357024cf506a8baf838ce26d229c910a9d5173dffd4f0b57c5a57935ab97db06c4c698e85524e408d80b9890212ce2c80e05016a52794deb81f31ccad8c6a

  • /data/user/0/com.icloud.game.wrzjh/files/evn2

    Filesize

    199B

    MD5

    775553d5ac878e164ded64446c1eabd9

    SHA1

    ab5de0972d6c27f6223818094d668897be3c6832

    SHA256

    dd66d5fd61de5b4994c2841f9a478aed2340283019b67f9320393677f206f54b

    SHA512

    91e9c4fe38772d2a15aab171655dedc89f758d30e417185dafa19729cc3a25ca7cd8671ad61fd3336826b8f9398e39896aa75ac812db4e8da3823dea4bfb051b

  • /data/user/0/com.icloud.game.wrzjh/files/evn3

    Filesize

    129B

    MD5

    c91cb510ef958d627c0b0b9206a63528

    SHA1

    40858c5032ef9a76274ca190728304c5f296b8dc

    SHA256

    b1b85fadf4db9c3fdfd0bc2a6283ca1c6cf592a7b88aa37d571088adad3bf3e9

    SHA512

    44da2de64f42921dfdd4d97e6946e183559cbe7feabaa79af8345f5ace311507d9f47d950c070eb12fe7e2843cbdf9645f41d879eb64badcb6b7eb91edc061bd

  • /data/user/0/com.icloud.game.wrzjh/files/sys1

    Filesize

    508B

    MD5

    1c2a2aaa758a0c7ee9129da633adb4e6

    SHA1

    b92a81537c645005df3d8bd609cf127e190129bb

    SHA256

    34987fe252da12d36de358712f251cde696a618e723c7982adb27023696e6f58

    SHA512

    9094f75f31a76a343662bf088e55b5b69e7fccd10ce2a992b85fd4589feb2a1a349920f7ea9a2d22818b586c867493987cdeb473a91d5398005b1ac9ed3da888

  • /data/user/0/com.icloud.game.wrzjh/shared_prefs/APP_START_TIMER_INFO.xml

    Filesize

    117B

    MD5

    e8f859d68bff0b4205aeea7ed04275f0

    SHA1

    85bb757690784d8aca74210d7b09518a9a2fff8b

    SHA256

    f688c865e9236dfc7c7225fe660851818c14b5d62f9aa43326c4a7b89fb0dbcf

    SHA512

    bea379f6625478cef09806d701c7872b3d09bd9d0494d3764ddb7711e196da3f6eee953efb3c82c018323dec0ce997c8d9aff24bbe9b9cdfede1f6d8f2f34f0a

  • /storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.opplugin_V2009.apk

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /storage/emulated/0/wrzjh/com.icloud.game.wrzjh/zhajinhua/log.txt

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e