9b31573a5295e7cf78cea8ce171e903fd2f9ed258241e9fad28761e4f271f5e7

Analysis

max time kernel
2818858s
max time network
148s
platform
android_x86
resource
android-x86-arm-20220823-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
submitted
24-11-2022 02:17

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

9b31573a5295e7cf78cea8ce171e903fd2f9ed258241e9fad28761e4f271f5e7.apk
Size

7.1MB
MD5

4440da4583807d5b8023a1541df69cbc
SHA1

8a2d81c5c3ce31f8a6371af88d5d7b013122ad42
SHA256

9b31573a5295e7cf78cea8ce171e903fd2f9ed258241e9fad28761e4f271f5e7
SHA512

22e327f2016248c1447401e1e679adcd3ceaa622adbc321260e919ef2daaa3a3f4b4c785a2348ab664449b47ab8d247c970b45e70c1ea066ffd1e794dbbe0897
SSDEEP

196608:vKV9H/VOJvUYbgvaYtsSFqbp1NKIN+raLTRFvXWMU9PjJpgfdZzht3c1IW:vO9wtjgv83bTAIN+raLVtWM4jgfdZzhi

Score

7^/10

infostealer ransomware

Malware Config

Signatures

Reads the content of SMS inbox messages. 1 IoCs
infostealer

Processes:

com.tk.game.xmxx

description ioc process

URI accessed for read content://sms/inbox com.tk.game.xmxx
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.tk.game.xmxx

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.tk.game.xmxx

description	ioc	process
URI accessed for read	content://sms/inbox	com.tk.game.xmxx

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.tk.game.xmxx

com.tk.game.xmxx
1⤵
- Reads the content of SMS inbox messages.
- Uses Crypto APIs (Might try to encrypt user data).
PID:4128

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.tk.game.xmxx/shared_prefs/APP_START_TIMER_INFO.xml

Filesize
117B

MD5
637b9a162000f73dfbef36299f765a2e

SHA1
766b8ec1479622da14612931eff233e762cb5d0a

SHA256
348a8435c64a7e97c467336ec3b4c18aa51ef6ca92853341e1bca420f5491218

SHA512
9ee1f7b876a22998bde5e3710705f7f153a80cab363872cfccafe20c4045153ac0dbc0336e2843b51caf8fdd947b06fa1f82da77fc0b6d07af622cfd0c87dc95

Download Submit
/storage/emulated/0/.twservice/com.tk.game.xmxx/download/jar/info

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/.twservice/com.tk.game.xmxx/download/jar/libyhcore.so

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/.twservice/com.tk.game.xmxx/download/jar/libyhcore2.so

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/.twservice/com.tk.game.xmxx/download/jar/oapmvp_2000_1103.zip

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/.twservice/com.tk.game.xmxx/download/jar/twcoredex-n.jar

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.iplugin_V4003.apk

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads