Analysis

  • max time kernel
    2771697s
  • max time network
    148s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    23-11-2022 15:30

General

  • Target

    d147b59fd4b6ce97ae18add1d7bd16fda13306d017b01af5efe80692b2f11a69.apk

  • Size

    4.4MB

  • MD5

    94053d3221d734edde05730158c47bd1

  • SHA1

    7645a5ae7f4ec4f1e1845706e0122b9783df766b

  • SHA256

    d147b59fd4b6ce97ae18add1d7bd16fda13306d017b01af5efe80692b2f11a69

  • SHA512

    f4d144a5c3fad6192b2d906485f16db9263096067fc7cf5c689b14f4104b900caa9a89159627dac2acb6a89fbc469316507b541860d60367d8a15e889c66ecd1

  • SSDEEP

    98304:B+07Zw3bQwh1zGJGFCIU9oe0OZk05lt17VqKSGdhd78UIVtojblberJP9CMafwCE:B+aZw3bFPYgCIUOe0OFz1xSqlxjpboVR

Score
7/10

Malware Config

Signatures

  • Checks Android system properties for emulator presence. 2 IoCs
  • Reads information about phone network operator.

Processes

  • com.shuame.mobile
    1⤵
    • Checks Android system properties for emulator presence.
    PID:4142
    • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
      2⤵
        PID:4191
      • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
        2⤵
          PID:4222
        • /system/bin/sh
          2⤵
            PID:4318
            • cat /proc/mounts
              3⤵
                PID:4336
            • /system/bin/sh
              2⤵
                PID:4436
                • /system/bin/ndk_translation_program_runner_binfmt_misc /data/user/0/com.shuame.mobile/busybox /data/user/0/com.shuame.mobile/busybox cat /proc/mounts
                  3⤵
                    PID:4456

              Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • /data/user/0/com.shuame.mobile/busybox

                Filesize

                1.0MB

                MD5

                bc6c1234f315b50a7883cbc9f8041a22

                SHA1

                f57c5db795dfb323c157bad2517199ffe3c9f135

                SHA256

                f765c41eae0a56c67574ee191371fe95de287d5edb3e527d465fd973c351b4cf

                SHA512

                71a645ca0f0322fe657328f7352614c55cc4f42583337129d15cf23987f460ecec927b31869b287dd4137bdbf6bb25cc7cb6780095c7712bf1f19c41061ad01c

              • /data/user/0/com.shuame.mobile/databases/stat.db

                Filesize

                4KB

                MD5

                f2b4b0190b9f384ca885f0c8c9b14700

                SHA1

                934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                SHA256

                0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                SHA512

                ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

              • /data/user/0/com.shuame.mobile/databases/stat.db-journal

                Filesize

                524B

                MD5

                db7f87455f0ae9573feb131a3d49cd55

                SHA1

                4f22f5d24d114795938ebbedb7d5041dfe2b1b58

                SHA256

                be999cc32986c33dd7e507c96e27c112e0a666ab57f532f4c404645983a413f7

                SHA512

                7e765806cae73b5c8f09544963fb8a542cd75d97d67f3e3d83067cd46189636b5af606d86f1bce46477ded26502b69a8964c170a0c2cd41e9de8d9df129cf7ec

              • /data/user/0/com.shuame.mobile/databases/stat.db-shm

                Filesize

                8B

                MD5

                7dea362b3fac8e00956a4952a3d4f474

                SHA1

                05fe405753166f125559e7c9ac558654f107c7e9

                SHA256

                af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                SHA512

                1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

              • /data/user/0/com.shuame.mobile/databases/stat.db-wal

                Filesize

                48KB

                MD5

                a7d6bf04fec5f1508db0438d68e9a402

                SHA1

                9a953c934435c74177667628c25c433001fa6d5f

                SHA256

                841e2bb23e44181c927e25da4500c0074deced030268dd50a8b09ae34e1835bb

                SHA512

                f9fb075301c4b6b39d0e40370874820eecfcd14466bc514feca209b5e32861d963c96c7cefd6cba069c9d546574f8a06bfc56af1a0ef9c42b6c9e4bd6b44ac7d

              • /data/user/0/com.shuame.mobile/databases/tencent_analysis.db

                Filesize

                4KB

                MD5

                f2b4b0190b9f384ca885f0c8c9b14700

                SHA1

                934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                SHA256

                0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                SHA512

                ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

              • /data/user/0/com.shuame.mobile/databases/tencent_analysis.db-journal

                Filesize

                524B

                MD5

                0355e2c3155caba78112fa84baf7ae40

                SHA1

                4865ff7157e65aff14c023efad021a798dbf1d26

                SHA256

                bad038badc209462946af041850ef564d0ad1a9bf80c1b5cd3ffec23845335b2

                SHA512

                37ca1a21fbafc46c76e05080f7157810d768d9946bb9f02cd0a2a0eeee03e2eaa2bb65ade0ba1b3729fae4cc2ceae6ed7560d2bc329284b900c632f17b84cb9a

              • /data/user/0/com.shuame.mobile/databases/tencent_analysis.db-shm

                Filesize

                8B

                MD5

                7dea362b3fac8e00956a4952a3d4f474

                SHA1

                05fe405753166f125559e7c9ac558654f107c7e9

                SHA256

                af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                SHA512

                1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

              • /data/user/0/com.shuame.mobile/databases/tencent_analysis.db-wal

                Filesize

                60KB

                MD5

                3c87455afe26c939517d4359a0fd8559

                SHA1

                a86eee3118e50aad254530a10bb11200be2d3728

                SHA256

                6e41de68f2ef1d522dbfb319f61029477c77cc64876628a47bd7b07097376680

                SHA512

                c86acb1b0f4345fd79192654391f7f60996eb310798108ecc86e512e8ee4541441104f125aea0b775f0e77b53d2feba9d83413e39c71aca71cd7e1c7c89bbd92

              • /data/user/0/com.shuame.mobile/flash_image

                Filesize

                13KB

                MD5

                792db2b47220d90341d7d09d0622b65d

                SHA1

                79b5d05da94a6aed08cd14b09b1fcdc2d5a0eb78

                SHA256

                518401c54e879df123a8b89445359a2536896329e773149aadc629bb15c98312

                SHA512

                afecc5037227deb1bcb470a2b852173a16ec567462c3cb43a225f8dc0a2f122312d75609993fe0c88dd28c3ccdc42875f9f04a3072cd10dcbf78ed386aab20fb

              • /data/user/0/com.shuame.mobile/shared_prefs/com.shuame.mobile_preferences.xml

                Filesize

                162B

                MD5

                76f16d26df9ad01f9541ac66a575db33

                SHA1

                22c1135ffde1c66f8173a87ba31335cddc1abda4

                SHA256

                63bd80c127e70a2f0b09150949fc7d66ff81e37bd4b7b7d0d8eca940deb9d87f

                SHA512

                90cf84e8ab73e272990d1ac4d6ed9cde3e23fdc412cfba3e97f383e71ad7a07ef9d17f47dcb2bbe4ce29217e6f6bda2fcd854d35e74aa6940c4d3263a12b152e

              • /data/user/0/com.shuame.mobile/shared_prefs/com.shuame.mobile_preferences.xml

                Filesize

                229B

                MD5

                11c45307b43f7607d9e60f89b9d5baa2

                SHA1

                167b3eacc91e00f49328c104968a42926234f7f2

                SHA256

                126c92300a035b80acf7405866be23f85814590e2db14238d3e842d9666a72f7

                SHA512

                b533b5916e906544e12e7a4f1b0701b8168dd68e5b5f3ce48154e704f46e71f40b1c107eae03004d8c371ea412e424ac63570a1e12bf77b7f4e32af8484c3f1a

              • /data/user/0/com.shuame.mobile/shared_prefs/com.shuame.mobile_preferences.xml

                Filesize

                294B

                MD5

                986e35d2918ff970da3718927bb9c857

                SHA1

                1bfc5e2c34509b98ece786a5448660a48b89be8e

                SHA256

                f5b8f51cfae21d04ffe263d87317bd6c867ce72a4adeb8dbfa85a15a9077bde9

                SHA512

                cca2aee263039a32e8e1e4066d9a42488d5f5f67b0c65fa3f011ac57f75c82393401a9ad71593f0293a1a57e02c4efbdaf12c86c2b0bd4618bcac29b528a1716

              • /data/user/0/com.shuame.mobile/shared_prefs/com.shuame.mobile_preferences.xml

                Filesize

                346B

                MD5

                394d238090c6bb7ff7922333b7538246

                SHA1

                3129692f9065fa334539eabde8f05a0d10ba8415

                SHA256

                808df1a9f68960792932134630fc82f718036a200a7f4ca4f01da0b8ad7c7fa2

                SHA512

                cdf0379d7ed22d97f47e89e5ba0d08bc2ffd9b4bf3871e293d03c473139e3bbcfa9ae0e74793ba709fef872557593e74935414da2f94e53f8a090c9f28ad7829

              • /data/user/0/com.shuame.mobile/shared_prefs/com.shuame.mobile_preferences.xml

                Filesize

                391B

                MD5

                c8033f4ac9ce09b05cad642ee7901662

                SHA1

                6f4a9982bc7dbceea79c73cc4db9cc18870c55cd

                SHA256

                ecd886ad0720d6e99ae3e72d2fcf57443a0ff5b02b52d0c77dad377ac7994459

                SHA512

                c7c3e9876ad09a870b350057f0a6574ecac87b63aa5bb0f052429cc550397156b3f9be64071673208cfa565fc8fa1c3bb13697e3113d58143d86c5b70c22c7b7

              • /data/user/0/com.shuame.mobile/shared_prefs/com.shuame.mobile_preferences.xml

                Filesize

                455B

                MD5

                075f120c2b13083ff424a36fd811953e

                SHA1

                d2fb7a8faf939d71ce3751d72d676b2f9dac86c6

                SHA256

                f19a5ce81ff008037e486639d04cf52834308a44f34da93ce562015a4a45c3c3

                SHA512

                36479c7646284fa7dd01134d1e0e280c2c74d29979197463eb49809b891c00b982a77f85b8147d456939a6f9b7d5ac37541f81c7d0ecb35a422da406ed37af08

              • /data/user/0/com.shuame.mobile/zip

                Filesize

                129KB

                MD5

                ef95d9a98eca231b99f0dd39d1363bf8

                SHA1

                5e8bd4ed31a1f5452d9fa7b81588fb9bd59fae77

                SHA256

                74f1952394d99de0a2411ce20b6b88840693774487635b05f4029249d1d1bbb8

                SHA512

                dcb584ae4310c8f822e980dcced729814052e4b714885ed832604622f362b681bce1112e96f57aa49405bd9bbb5522da4d575395a632fca29e7bf3f6176c2bf7

              • /storage/emulated/0/.sdid

                MD5

                d41d8cd98f00b204e9800998ecf8427e

                SHA1

                da39a3ee5e6b4b0d3255bfef95601890afd80709

                SHA256

                e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

                SHA512

                cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e