69a48ad899f1945314033fb9ca5bb3c697e84cfd4b9522e1a199d5093f835157

Analysis

max time kernel
2806495s
max time network
133s
platform
android_x86
resource
android-x86-arm-20220823-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
submitted
23-11-2022 23:14

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

69a48ad899f1945314033fb9ca5bb3c697e84cfd4b9522e1a199d5093f835157.apk
Size

2.3MB
MD5

f478a61280f8cca082bb1c190a4b2349
SHA1

6b640b4780bc8d37898378b2d501df2af53ae0d5
SHA256

69a48ad899f1945314033fb9ca5bb3c697e84cfd4b9522e1a199d5093f835157
SHA512

2014e00e3ffe27d8f62d9c37f54269a111f124dc7ba46a798673ce33de4ba56fcaf7d92a557315f57b33bae59c9f8866e590005c4d9ba590f4e99442ce8081af
SSDEEP

49152:bGAak2ux5ZgtUpWEHylmfhe5gSvDNQVs4hBMUt6tOdq/se:bdakPTg2MEnfkDqxh/t6Udq/se

Score

7^/10

infostealer ransomware

Malware Config

Signatures

Reads the content of SMS inbox messages. 1 IoCs
infostealer

Processes:

kkk.kk.sy.www

description ioc process

URI accessed for read content://sms/inbox kkk.kk.sy.www
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

kkk.kk.sy.www

description ioc process

Framework API call javax.crypto.Cipher.doFinal kkk.kk.sy.www

description	ioc	process
URI accessed for read	content://sms/inbox	kkk.kk.sy.www

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	kkk.kk.sy.www

kkk.kk.sy.www
1⤵
- Reads the content of SMS inbox messages.
- Uses Crypto APIs (Might try to encrypt user data).
PID:4096

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/kkk.kk.sy.www/databases/app_download_record
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/user/0/kkk.kk.sy.www/databases/app_download_record-journal
Filesize
524B

MD5
ec2dd2ad7a1125af2bae0ec996997793

SHA1
b48152648e272e780acf44d3136a2ad5d91c4fe1

SHA256
5702b8eb0a97c01d36dba1ecc767f7f3010e69e67a8c3b1d4ff8e28c2b1ee735

SHA512
15c63c69bd4904150aec637eca688b1284f590357eb075270b8b8674154b0f144f3f5d4ab9dd5773d0074aac3215ec8afbcec2b843d18aaa27e78a8b7c8178c5

Download Submit
/data/user/0/kkk.kk.sy.www/databases/app_download_record-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/kkk.kk.sy.www/databases/app_download_record-wal
Filesize
36KB

MD5
7ff3c9db48af4b4d504c878069749580

SHA1
7aba0320c3e6188a513da38091bb07589905d230

SHA256
55a36fc460e6d0e1a4d7ce8c8a1cb4ad9647dd4c572023e77406f4723ece132e

SHA512
0b62eca9f14d12773158b9660f733820886bd55c304a9e151a5951918ca1a3e995e1bd9a1017674178c06e8c110305d9be9e837aed439565314d36de2d1bc68b

Download Submit
/data/user/0/kkk.kk.sy.www/databases/sy_pay_record
Filesize
40KB

MD5
f33e40dc44dddf9886c560576fe30a70

SHA1
58df836a00a47eba37ba479a7aee95bcf404b2b5

SHA256
4438043ecb3f2ce4c482f5312042c439437aeb896181069dd6e8966f40bd3de2

SHA512
af1162e2b3802bbc9e4bfc43bfd1258bb40b49a601e361076c58f7dbc8f7e8b5d4e3003183dffba1c00810ac34a59fa595d8908ef9b2652578522b8c014327d9

Download Submit
/data/user/0/kkk.kk.sy.www/databases/sy_pay_record-journal
Filesize
524B

MD5
42774de714fe926760da1538b7479a6b

SHA1
eb1a936aa968ebddb3db1a9ce4b7bbcb9faf727c

SHA256
0e91fb7cd1f09624a2185b837dbfd96d1283a5fe0e0974bea6eb0cbae34df46b

SHA512
c6f508d03388a0daada9bb21e2141b5422822e82958b153f5373efee4210ecfb5f6c2c5c94cfebc1207f9083b796b960ff910a6b9143eca44603b57d47ce83bf

Download Submit
/data/user/0/kkk.kk.sy.www/databases/sy_pay_record-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/kkk.kk.sy.www/databases/sy_pay_record-wal
Filesize
48KB

MD5
5749c4b4a81e3135a4d48e4de93c8e29

SHA1
03c03babcf323c22698640b32224fbd51fb4ee1c

SHA256
02aa7143d07f2789bfca714cef3082c09d7b81793960e6bb3ed428d3e7639f13

SHA512
1f29b62a502302c5a9ad9bb92358c021f065eaf87b8a423cf30a778b2e9147c21c4cfd960d202a79666f7f98e5171879a6bf65f85b6e881ffb7df351fbb9a758

Download Submit
/data/user/0/kkk.kk.sy.www/databases/video_record
Filesize
88KB

MD5
fc845a680461d6872021ef8db2bf8711

SHA1
a12c09241708e4367e125a324cc8cde42a87e9ff

SHA256
76600f5583e24d6d239f3c4043edb0e0b3e1f1983df263503567b5743d18e570

SHA512
b73cfecc51fd7e5b5309b05992a118d0dbabe94a65413a9574b87586b098360cd92c9200e267a7853c88a6f5e92fd59a9242fc093236c060002e175602004fdb

Download Submit
/data/user/0/kkk.kk.sy.www/databases/video_record-journal
Filesize
524B

MD5
be63e25da9caddbbd177595dc779b014

SHA1
f725548751f363c37d9eb2eb6d722ee582e8b26e

SHA256
a40f083a09b9e5af4dcdc9480c16989699c11999ed3703f7a67373e5badde2e6

SHA512
c0f7afa27ad8b8806e7fe49bd5826d51f145c8a5b13f9951fe44ae8e0516d9d3e7b9c8461a97091bad4d8f0c2fbf9cea145055750facc1d4bb12ae5267854d2b

Download Submit
/data/user/0/kkk.kk.sy.www/databases/video_record-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/kkk.kk.sy.www/databases/video_record-wal
Filesize
96KB

MD5
6d25fb45c3c04452b0a1854c58d4daed

SHA1
e81a2737c408791420be6051f46049b7853c5f00

SHA256
b5a98aff7348b7918ef41737b2ff70fc1224d1732edf0fca8edde7c60d3167ca

SHA512
97390debd4003293235ae1813a64a8c524c8365fa5b512d2875df4ebf8ede00bb88e982d74aff6eeecbcc6f5025698a96ef2b19ca5113f15b6d5448b065aaee1

Download Submit
/data/user/0/kkk.kk.sy.www/shared_prefs/APP_START_TIMER_INFO.xml
Filesize
117B

MD5
f11a884854226849e51af0d96ff1673d

SHA1
80bc42873f70764ed700a8d6efaea67c0fbac443

SHA256
ed9c714193f9a615f651305a7c2870a147431fc9323ed1c794fd87e83ec8ea65

SHA512
b4abc15838770a1c572bb5cfd25b0b8d2214831d8b7940bc21880fb6450365be1d98a18e775c265ff2f0bc22fe5520aa830a7d3930d9b9137dd31ef1b9b3c2ce

Download Submit
/data/user/0/kkk.kk.sy.www/shared_prefs/r.times.xml
Filesize
101B

MD5
e1ef566249ba7c829ebda3149f605e76

SHA1
505f2a0c7c6a3375f586ce4a2135c1f954bd85b4

SHA256
072eca118e60a7a559d36431f0492232d1ed8753c0654c95910b9180bdbb66ab

SHA512
5c836ada1dac78f358354876635e58890a9ad2152842ae4190b362a549d23b0a8913168529a948202120bb9883544d901eded1f28739e899c35bdccbd53e8e35

Download Submit
/storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.opplugin_V2014.apk
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/syAdAssets/AdPlan6.apk
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads