Analysis

  • max time kernel
    2819182s
  • max time network
    132s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    24-11-2022 02:19

General

  • Target

    f039b3cabc8466c304f36b013c94389a728f0b7d15a9fab4c71f1a7248e309e6.apk

  • Size

    809KB

  • MD5

    b5910a432d2b866e1028f31874edb32f

  • SHA1

    0ceeb0a29ac4b24e1efdd0f57acfc64388cf5ac1

  • SHA256

    f039b3cabc8466c304f36b013c94389a728f0b7d15a9fab4c71f1a7248e309e6

  • SHA512

    c8193fc0a63ff7a86c8cb5fb5ca0ff176c60a26a542b7779625f563034649805faef2bb86e9d825b422ae36f2c922d6a2f7dda173ba5484c99970e17e3d03a2c

  • SSDEEP

    24576:i1N2wx4SfQ/zdL9RQq0nN+TzsIiXY3eRDpPagWl5OczfjfAd:E2NSfKMNGs3XYwDl0Gcz7i

Score
5/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • langthing.nend
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4062
    • logcat ActivityManager:I *:S
      2⤵
        PID:4160

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/langthing.nend/files/unhi.db

      Filesize

      9KB

      MD5

      0cd66991881ae706b8c2e20c4a1efd61

      SHA1

      d2209f801097fe686210ce061ffd5c69ceec04ba

      SHA256

      89d35f98b3a3577180471e2167110dce1e69b0eb9da932e291cbd2c52f3dc9e0

      SHA512

      e829d86874ff24f0555d1d7d81c9ec57a26bbd02b23998304afe7a913eece876c010e21cf4d9d5908341edf403dca2983b10a8ceb9e20349df76f8853a7e1b9b

    • /data/user/0/langthing.nend/files/unhi.db-journal

      Filesize

      1KB

      MD5

      a5442c87e6a7e3d76efe18303e423a49

      SHA1

      e64fb235a64c58be129387bd20b679974258ab48

      SHA256

      902795097fcc840bc958888254da2200d95eaf8ddcb2f2a2e0c4b2efca383b2e

      SHA512

      e56523f5158c5e30ced33a0966b02ed64f39697bcef309db7882bc9edd72ed1ac09af349a7c6b3c2a87cc7f983cc26271659ae678d9983cba382b68ab9a50553

    • /data/user/0/langthing.nend/files/unhi.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/langthing.nend/files/unhi.db-wal

      Filesize

      1KB

      MD5

      f06a72b936c395025ab2b36aac16ce03

      SHA1

      d226c8cbd9266e6e3f87fc989f261e9aa2ebb83b

      SHA256

      df3cfee32551d1b5366d67ba80b087c4fcc6f312c4de1f9008f8fb5f43782a32

      SHA512

      bf064d0b7bb324c35c4ccefc450cdfaec51a838d1b05af4a9a1a12b0edafe5cc71b67ec93e15db84d407e1ed2be4460018ea299aad1b993af98eda3bde4f8b83