Analysis

  • max time kernel
    2808747s
  • max time network
    149s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    23/11/2022, 22:49

General

  • Target

    b0f93b06270e4be96bbdbc5590a4a61813c6e0f158b3c42634ee39d7c2a77a76.apk

  • Size

    1.6MB

  • MD5

    9785fead25b633185970f93dc2b9b4ab

  • SHA1

    649e84a425e58ea5509f34f5963985f579a9c2a7

  • SHA256

    b0f93b06270e4be96bbdbc5590a4a61813c6e0f158b3c42634ee39d7c2a77a76

  • SHA512

    c79e617a970f0be992d2d2bcab3454da8a107e421602c3333b72d0dd36a5c0d7f3886b831c2e7dec1db217fde3ca6a3d7538a72a8a8392da3c9338982eb50f9c

  • SSDEEP

    49152:XT39KeYkgPmPGhbetphvh5kGaGPXB0BRHPyjyRISD:XT3YeYkoKGhyvhvh5kGaGPXaRquRISD

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.yunlan.unlock.huazhuanghe.m
    1⤵
      PID:4725

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/user/0/com.yunlan.unlock.huazhuanghe.m/databases/yl_paylist.db

            Filesize

            32KB

            MD5

            79d42a4887112d30c2b179e4c1451f9a

            SHA1

            b0a03ca456a3309f3d1093909b30bf8bdf1248a0

            SHA256

            032a574665dcdb880e317e7ccd54fd5cb5c0ca5989ac9af137804cb13d212ca1

            SHA512

            7193b47f9432fa13e95184f1fd5d3ce2059de85f6c0f39228118a21193ce0227d3abebcc068835377665fc68a96117c8e740ac46029317021580c951f96ae031

          • /data/user/0/com.yunlan.unlock.huazhuanghe.m/databases/yl_paylist.db-journal

            Filesize

            524B

            MD5

            a4fb80c58d9d322cbc0f15051094d3f7

            SHA1

            544dcc98d1a52c2c924257763e8334e35e5b7096

            SHA256

            1adf16f3c1941fe4350f3101c1effa07bc968bf5810e098e39f50448ed5f13b9

            SHA512

            b116cd2a62b69c51bd6c058eb771df98cd4a094398ce362f31f8f9ea892c3d85221cc7c301c48566d6a9856439987fa62728b2c45fe42948036ceb5261f5802e

          • /data/user/0/com.yunlan.unlock.huazhuanghe.m/shared_prefs/APP_START_TIMER_INFO.xml

            Filesize

            117B

            MD5

            e25f565f8fcf788d98b509708928d649

            SHA1

            f509b0d0376ba6038a510738387c1d4415dbf43b

            SHA256

            077c24ff16a6b22791c6e1f44b8b09dbfd07f8be167feef5f1642bccb7e03e9c

            SHA512

            f3ed69a8e5ae4bbf4ed40e35c7251580e4fef5906e4f39dd0154769bb1fbccdfbf1135a1106247d99d413a937098b4941663bddea5d60bdcb41fd1ddab007b9a

          • /data/user/0/com.yunlan.unlock.huazhuanghe.m/shared_prefs/mobclick_agent_header_com.yunlan.unlock.huazhuanghe.m.xml

            Filesize

            111B

            MD5

            f658104ad633591308b9667338612904

            SHA1

            f80c09676ccad42cdaa2619420b16ec0165716bc

            SHA256

            447514140d3e530acf4a2b09ba8f810246c39c55b146ba6f33f541aa7daad024

            SHA512

            baa2e67bb7aa0a303a4181b93110e752c72da65387948a04ec164362e90ab41045ea03b022d28c1bd7bdbdbfbdb2bc8e1b1ed7d0f0944fb7ef4b4f377cd12c27