Analysis

  • max time kernel
    2818858s
  • max time network
    148s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    24-11-2022 02:17

General

  • Target

    9b31573a5295e7cf78cea8ce171e903fd2f9ed258241e9fad28761e4f271f5e7.apk

  • Size

    7.1MB

  • MD5

    4440da4583807d5b8023a1541df69cbc

  • SHA1

    8a2d81c5c3ce31f8a6371af88d5d7b013122ad42

  • SHA256

    9b31573a5295e7cf78cea8ce171e903fd2f9ed258241e9fad28761e4f271f5e7

  • SHA512

    22e327f2016248c1447401e1e679adcd3ceaa622adbc321260e919ef2daaa3a3f4b4c785a2348ab664449b47ab8d247c970b45e70c1ea066ffd1e794dbbe0897

  • SSDEEP

    196608:vKV9H/VOJvUYbgvaYtsSFqbp1NKIN+raLTRFvXWMU9PjJpgfdZzht3c1IW:vO9wtjgv83bTAIN+raLVtWM4jgfdZzhi

Malware Config

Signatures

  • Reads the content of SMS inbox messages. 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.tk.game.xmxx
    1⤵
    • Reads the content of SMS inbox messages.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4128

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.tk.game.xmxx/shared_prefs/APP_START_TIMER_INFO.xml
    Filesize

    117B

    MD5

    637b9a162000f73dfbef36299f765a2e

    SHA1

    766b8ec1479622da14612931eff233e762cb5d0a

    SHA256

    348a8435c64a7e97c467336ec3b4c18aa51ef6ca92853341e1bca420f5491218

    SHA512

    9ee1f7b876a22998bde5e3710705f7f153a80cab363872cfccafe20c4045153ac0dbc0336e2843b51caf8fdd947b06fa1f82da77fc0b6d07af622cfd0c87dc95

  • /storage/emulated/0/.twservice/com.tk.game.xmxx/download/jar/info
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /storage/emulated/0/.twservice/com.tk.game.xmxx/download/jar/libyhcore.so
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /storage/emulated/0/.twservice/com.tk.game.xmxx/download/jar/libyhcore2.so
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /storage/emulated/0/.twservice/com.tk.game.xmxx/download/jar/oapmvp_2000_1103.zip
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /storage/emulated/0/.twservice/com.tk.game.xmxx/download/jar/twcoredex-n.jar
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.iplugin_V4003.apk
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e