Analysis

  • max time kernel
    2823419s
  • max time network
    158s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    24-11-2022 02:54

General

  • Target

    87f18a92e26b515c2450b9a45ae9d251d2cdb47699ec2b00df9e10f18c2f1ed4.apk

  • Size

    280KB

  • MD5

    5cca3182a9aff68524f28f14e1e4e4a9

  • SHA1

    f166194b28392cf61df314150011d85dc74a1629

  • SHA256

    87f18a92e26b515c2450b9a45ae9d251d2cdb47699ec2b00df9e10f18c2f1ed4

  • SHA512

    4ce452362d620cd73e2654947cdbcf851168c8234292b8b537a3a77b2561735eed05be7d0bd7177ad1d6b6a9319e0a2783adfb570a9b92d8980fb40e64a117b7

  • SSDEEP

    6144:aL4iJT3d4jN3ya285p2PI2asxoJg1kZG36JqioVef96kvG51:h84jNLf2Q2asxoerqJP36j51

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.c101416904030
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4078
  • com.c101416904030:service
    1⤵
      PID:4204

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.c101416904030/databases/downloadProvider.db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/com.c101416904030/databases/downloadProvider.db-journal

      Filesize

      524B

      MD5

      7c835d4abf1147dc84ad6bc369a1ebbb

      SHA1

      0b3889ebb0676c523a588a1a0f29392bdd2205dc

      SHA256

      eef1074bc6bea3c20d3e974eaf88e310a4cc7e818497cfa873acbda482e95978

      SHA512

      5cab6b296084a7520f95d6a1a2984a9e66da759b5d3361453dcfa6db7db22801a3d72794b13da9702b96db0d8c1be2f27a03f8cb4704714c8b12641632af9584

    • /data/user/0/com.c101416904030/databases/downloadProvider.db-shm

      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.c101416904030/databases/downloadProvider.db-wal

      Filesize

      28KB

      MD5

      397ff172e1056179c3e6475a5abbd714

      SHA1

      990ff8a89550394b1f3ca647d7a740381def3d9e

      SHA256

      63f1d8ac1d9ca1c72a33ae38738cf578cb863dce78c8d2b1b209c9f375269d30

      SHA512

      e23d7dcec102ddd6c95fa58bd5e48dd7e3a4ec83e2667e283c30d6fb5611b1a2726286794b97a1e1a75c4369f9f1d456381ff2b8b43a3106b6970cd39a9e80c4

    • /data/user/0/com.c101416904030/files/b1/main/aknfile_standalone_ptl.dat

      Filesize

      11KB

      MD5

      247ac50f3bf4df0a348641f17f54d0b7

      SHA1

      5495434bde2c8339013b3517e1b97087df71510d

      SHA256

      cc4448f2976df022469071964fc060e8f03a26e95f10bb64154cc21f14405f95

      SHA512

      eb154e024cccefcad362da93b0e19494f47d54bcfedc4fca5ef7e0ee23717c0791a1d633b11263f9ce1db0d47c4b605350ae7069f0f1a20282d2f43ca14e66ba

    • /data/user/0/com.c101416904030/files/b1/yong.dat

      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.c101416904030/files/vs_filter.txt

      Filesize

      3B

      MD5

      3b8a614226a953a8cd9526fca6fe9ba5

      SHA1

      828f720439cefaeb3acc7a7babce0a28abaa07a3

      SHA256

      d86580a57f7bf542e85202283cb845953c9d28f80a8e651db08b2fc0b2d6a731

      SHA512

      60da519a6dd8da0c334f93c9fbd45a9db13ad3cd00acd57da39b2109d050ac0be7767f24dba050d8bd6b771e347f1df5e1610790af3c7aca5a23bcaa152d7377

    • /data/user/0/com.c101416904030/files/vs_num.txt

      Filesize

      17B

      MD5

      67d71328af64318838161de2bd93cf51

      SHA1

      c6a31cc7b088c285cbc635c403341ebbaf796f94

      SHA256

      5c2efd7ac9da99cbd489cefeca4884e6b77c65b507a14afefe185cb0bccab12b

      SHA512

      ab0c93ca1ecb95b632701da63184c2f8113c3620c10cff10d4d49b0c9ddca352c2ddb1ac146a13d3cccb8ec108ff8a1ee3a3068959d837566fc1517ed32a6ea3

    • /data/user/0/com.c101416904030/filesvs_ver.txt

      Filesize

      25B

      MD5

      8046151e241970d835512e41f15d5269

      SHA1

      e1c207ac6f5f3e8b4c0deafc1c11d7b351ed5d9a

      SHA256

      435c741b7c7aeb267829f83c4b5e6c20c4093af2c430b92b3088e52be5b872e4

      SHA512

      b32606a6b6aa7d413162058ddd9922e1dfc13172966cf7fa48d879d2be55581fb30724edf2e6151a76ca6da8e0c5cdbe207c1b6cec9e58da59bbd4b5a9bb32e6

    • /data/user/0/com.c101416904030/shared_prefs/AUTO_UPDATE_DICT.xml

      Filesize

      124B

      MD5

      a4d7cc300ed626fa79381d20208084a8

      SHA1

      38f8f50c344427a94a889231c619eee86ba7d529

      SHA256

      70be77ba053a36d382c8038254e13b749546c77ba895d34934739a8675bec2a5

      SHA512

      b604632f08e5048b1daacafdc6ab25be8db3097f783525298ff2e47cac1521521bbb2a191c15ef58c83e833c4cff545c1d62398ee0e93d3fd4072ed77555f426

    • /data/user/0/com.c101416904030/shared_prefs/com.c101416904030_preferences.xml

      Filesize

      124B

      MD5

      9e2c7c08c329bb7a3bf3e1e43d3208ea

      SHA1

      380ade9cbdc12f320162de6f3526e125b7b1ed28

      SHA256

      c93ef9b2725b81c290c04bfa5e47116f47fe2c35a18d5dd2f6723421d3f9bafa

      SHA512

      00b1fd9a07847410ed8693f4b7553ec87ab7044f5bb21158bfc630cc27c9a1ca92c1d25c7994b64fb01a6981ded038dd84b53cf63d1f4f5a8b9d85f00b89b015

    • /data/user/0/com.c101416904030/shared_prefs/mService.xml

      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03