557a03d67c1d2e7a05b8793b813b7a0278a2b110b0a27bd7ff8b15b60972d497

Analysis

max time kernel
2826325s
max time network
155s
platform
android_x64
resource
android-x64-arm64-20220823-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
submitted
24-11-2022 02:59

Target

557a03d67c1d2e7a05b8793b813b7a0278a2b110b0a27bd7ff8b15b60972d497.apk
Size

706KB
MD5

d396a168dae32a5cc7674ad1b89de35d
SHA1

4f2dfbc15933bdc50ca531284aaa6eeffd7c7608
SHA256

557a03d67c1d2e7a05b8793b813b7a0278a2b110b0a27bd7ff8b15b60972d497
SHA512

305142ff93fcebb5d3e43f8aa3a4877992e9ca48385d47d2dd2c52c87cfe1e98b1cd16d4e0bc57631e31d607167e952145ce883649742ae018cea381ee8561c6
SSDEEP

12288:Z/YF3coE3EIu5GaSgNosChWhhu+d7fjED50bR2ZcopiA4AYsKC:ZQy0J5/SgNChW+APEoY6oiAtY5C

Score

7^/10

Reads the content of SMS inbox messages. 1 IoCs
infostealer

Processes:

com.ly.jqkb

description ioc process

URI accessed for read content://sms/inbox com.ly.jqkb
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.ly.jqkb

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.ly.jqkb

description	ioc	process
URI accessed for read	content://sms/inbox	com.ly.jqkb

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.ly.jqkb

com.ly.jqkb
1⤵
- Reads the content of SMS inbox messages.
- Uses Crypto APIs (Might try to encrypt user data).
PID:4614

/data/user/0/com.ly.jqkb/databases/afinal.db
Filesize
80KB

MD5
53282ff9b2f7830a146392fc0d67fc22

SHA1
b252e4bbd9bc0a3fc80a5f45bcec47bf61216546

SHA256
446efc7fc289cc700557ae1183ac7d55e52edacf2616e0a0645357af5314c4dd

SHA512
63bae7f3b9dab1736bda4920cba23172d765ae30b20845503fa7fd4510dca3c035afa0e9452d7423a440a0a8208c9764baa37dd5c09468ff0f30de3a8655cbf3

Download Submit
/data/user/0/com.ly.jqkb/databases/afinal.db-journal
Filesize
1KB

MD5
9d9055d5765998d8166ef6585b592809

SHA1
63f8f26b17b3ddba603811ebd435ca0ad2f403a5

SHA256
1311408a9649529ed13755488230b6bbc5d8a6362c2a6a78511941818dcb8877

SHA512
a091f12d54d7cf9daf78d9651e58356ebd4ab52f65b1ee27fd87e3c34113df9a5e0dc870b833b6566594fe2cfa7ddf21151d50571182f765132258141dae1ec5

Download Submit
/storage/emulated/0/cache/user_cache_jqkb
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/com.ly.jqkb.start.times/com.ly.jqkb
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit