Analysis

  • max time kernel
    2697531s
  • max time network
    156s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    22-11-2022 19:50

General

  • Target

    939c09b07112a24c63ed7f968210524ec27acdad7d9250e9a17ae2285aeb4fc9.apk

  • Size

    417KB

  • MD5

    6c4025d2ec2f14e23d5ef951252f2399

  • SHA1

    3e15a75c8ccf2ff391714e38d6f9ffc32ffb60ec

  • SHA256

    939c09b07112a24c63ed7f968210524ec27acdad7d9250e9a17ae2285aeb4fc9

  • SHA512

    37da448fbecc54cffde488ad9464862a22d205614113642998df4a2312714eb6637425c74c3cff31e282c24a721c5765f718432bc1b651e96ec178f6cdd80f99

  • SSDEEP

    6144:cbFqLJGSQpYGZ4/9yD6n0CfERu53i/RpK72K5pGN4WbGOLvog7sd:cqVxJGZ4kqiSeplK5sZbFcgo

Score
5/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.c101410942377
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4026
    • cat /sys/class/net/wlan0/address
      2⤵
        PID:4118
    • .FSer
      1⤵
        PID:4081
        • su
          2⤵
            PID:4141

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.c101410942377/sf

          Filesize

          13KB

          MD5

          8ea09e6f768071f0a6e21b3283d49d52

          SHA1

          6ff3677e6f95f2e42cd8d6b7ac9676fddc8ec5b0

          SHA256

          e4970cd64e60ba5588367df7eb47e4e09570541547ff75d61fb8931e91918ec4

          SHA512

          0a13520f05e0d71d44de76b800609558dc17590ce362ca32c1b7986ddfc1e504df5a12f67918050f3b4fe67a10c5ab10936630861a6c7161f43767236bcda960

        • /data/user/0/com.c101410942377/databases/cone.db

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/user/0/com.c101410942377/databases/cone.db-journal

          Filesize

          524B

          MD5

          105b63d628a87426e653d9906be50b55

          SHA1

          cd67ca65beeb9b20c34beca5afd24c313e45aba2

          SHA256

          9df49847a41fd19284b807af10db3e0aa176b59262a71cbdd2f41514290bd6bd

          SHA512

          ed3ab1d5ca4865bcfc2bdbae3f87746c8d67b28d72a0258510d4aafc0cc1a81314fa911750d58b0dc8e9bbb1f3161ced6efe06902bb3978753cf9cacb89179a9

        • /data/user/0/com.c101410942377/databases/cone.db-shm

          Filesize

          8B

          MD5

          7dea362b3fac8e00956a4952a3d4f474

          SHA1

          05fe405753166f125559e7c9ac558654f107c7e9

          SHA256

          af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

          SHA512

          1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

        • /data/user/0/com.c101410942377/databases/cone.db-wal

          Filesize

          48KB

          MD5

          f172e5973b5c45cb25ac96538eaf0d3f

          SHA1

          741a3044621fa22db5c49aa5dd32429a8b492700

          SHA256

          bf04c03a942c7d13bef85a9ad82f5de9194214a651a84953a630b2158043c52b

          SHA512

          20a9302013f84784094047cb9390bdbaa35fabd5e02aae79f7394c6e8cc72d5b4893bc51926b44d3fe731dede96e2a47430ca693cfd51b7bfebbe381139f4cc6

        • /data/user/0/com.c101410942377/files/b1/main/aknfile_standalone_ptl.dat

          Filesize

          11KB

          MD5

          4febc2e3518c02a4f8dc05f0a074fb0d

          SHA1

          ddb7ef213a5e41b17c670f2e2d0ebd3bda803934

          SHA256

          6800856ab842a2804632c2bad73334c3e79687fd7cd19c41d476515e47ce8885

          SHA512

          a2959af443d5ce75662d408757d923b83b3eb2715fe4d8725d8ab2e387f2a7c5a6fef55d958723dcd30a41f621163262c92d1bfd9df3e5e4435b58ca3265c4a7

        • /data/user/0/com.c101410942377/files/b1/yong.dat

          MD5

          d41d8cd98f00b204e9800998ecf8427e

          SHA1

          da39a3ee5e6b4b0d3255bfef95601890afd80709

          SHA256

          e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

          SHA512

          cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

        • /data/user/0/com.c101410942377/files/vs_filter.txt

          Filesize

          3B

          MD5

          3cec07e9ba5f5bb252d13f5f431e4bbb

          SHA1

          b4ef7df17d3dc74720cd2a8fe98a173f9576d007

          SHA256

          396f804443825586c1283a27fdcadf74abb82008bcd9b260a30912a26563f27d

          SHA512

          eb450a8f41e99fbb1afc8105850d3e20e87a7414786eda76a661cf780fe248ffd478921aeae70bfceecd9a8d8e0590d404a5113eb52c8ae0d768cc28443a1f2c

        • /data/user/0/com.c101410942377/files/vs_num.txt

          Filesize

          17B

          MD5

          18bf50d52786fec2b741b2932dd992ef

          SHA1

          75d4f497a6327509ff8fa4ec5868603aaf986e8e

          SHA256

          25bf39ee18b237e201bc0416aea80ebd74b920427bedf77bdd6127ba225cdd05

          SHA512

          ea8cbf6b01d9e989506aefab3ae1b8ba86fd9c61babf1aaaf9305605e8fd263c9e178dba37b89391e05594cf26e0c979ef19cb00c72449ce1eeb1a6348592d6a

        • /data/user/0/com.c101410942377/files/vs_ver.txt

          MD5

          d41d8cd98f00b204e9800998ecf8427e

          SHA1

          da39a3ee5e6b4b0d3255bfef95601890afd80709

          SHA256

          e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

          SHA512

          cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

        • /data/user/0/com.c101410942377/shared_prefs/C_UPDATE_DICT.xml

          Filesize

          118B

          MD5

          5971978486607a591470c8e1dbb59c94

          SHA1

          ae12339d4caf99120ea09a8be074388914a3ed2b

          SHA256

          f278940670bbab7795faafdade478371350d16b60c73fd27464bdfc1dfc8b7a7

          SHA512

          26af7225644dffaee834a9285acb8cb3cb64978085836d30bdd57eafba5452f94a3ebf70cdf0cb73d171ea113e3f871ee9b0950f885ecf1438fadaf2e59aa06b

        • /data/user/0/com.c101410942377/shared_prefs/com.c101410942377_preferences.xml

          Filesize

          113B

          MD5

          a0612884123fb56858071ab03c71d4fb

          SHA1

          7911eae1bde7a340d281cdc0a714ac029c229cfc

          SHA256

          d08de94137035d241fe64d9040fa90064c193dbdc15d7ea30fa41c4308d4297f

          SHA512

          b11f2ea07460f773051870c59335d5ee1613dd0eb3f65e3abe59e93e5446e177c0e1af831ca1b5f5a7f79e23c51cba3f8f1eb0a228115d0f0f13d2c73b5d8407

        • /data/user/0/com.c101410942377/shared_prefs/com.c101410942377_preferences.xml

          Filesize

          157B

          MD5

          3b7a3f99d8db374f20a7426eb92c848a

          SHA1

          525da2e8d5ecc2893e386824a3f2b131325ff246

          SHA256

          fe0c7a4d5c9fce82e74280ed2ba69fc88552a568777d005fa8eb46d4cf684e08

          SHA512

          cb8f496f078c4e5b435b15de7262b947009cd40f551da2d63c1088e0fd700c0a53d9a2cebbb926ee573c09d16ca774bf0fed6b7e810171d6236efcb5fafa46e8

        • /data/user/0/com.c101410942377/shared_prefs/com.c101410942377_preferences.xml

          Filesize

          209B

          MD5

          2b96e1dc263d0648b6ec47bc4d821873

          SHA1

          34cc9e78eb8ffd9d5d41d1f50f43ee1c96cf27c3

          SHA256

          dc6b57a37df22c75f619fb1fca0ae8adf82666eb59f92748c5b856f521c81267

          SHA512

          936e205335de896a0fc27ad5660d906857ce1f1e0479a21f67220574d032dadc13b7eb80cf51da45fc43e5b8770bb265d2ee8828447ce3a7f43630eeac3c4a29

        • /data/user/0/com.c101410942377/shared_prefs/com.c101410942377_preferences.xml

          Filesize

          261B

          MD5

          b636b15707a0d5a0f744b9d3d46c6f1f

          SHA1

          f8bf032b18314f13c27d519b8eb5db00271fad34

          SHA256

          cbb569e4c8e766fd08e38c56d7a251ebc6f84ce511ca4fab9302cdab5758b6c9

          SHA512

          7487fdbc0610abe324dbe16793ed7c9abb432a3b774446003a5e3b48171cd7bc35062c434d2dff2281f6d12d1384b76830ba1302c0b31e113faa806ed00f10a1

        • /data/user/0/com.c101410942377/shared_prefs/com.c101410942377_preferences.xml

          Filesize

          314B

          MD5

          a08abb37ff24717714f70e5b701f7396

          SHA1

          35af719781f29359f39b9ec43ae87228a0a5c658

          SHA256

          bb09b9a03c17afd5f38c157a438319730a0f0270a97d8f7434bab8f4bf2d741a

          SHA512

          01bc9a1a19b80cf6fde9bfb6221cc2d84fdd26374902080b1a776be4a3f370a79e3c0bc1daa0f5c3a16351dad6d0956564c137897ebbd4cc4bf0b1aaf3e74fbf