Analysis

  • max time kernel
    2824738s
  • max time network
    152s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    24-11-2022 03:19

General

  • Target

    09e180049c54243ec8b894546162e3b46b2bdbbcbb08e45f3b498e83eb6bc404.apk

  • Size

    2.4MB

  • MD5

    7a7a0727408c25bfb7b83b6d843979ee

  • SHA1

    63413328240fc636e87668dc3c9454213e3fd874

  • SHA256

    09e180049c54243ec8b894546162e3b46b2bdbbcbb08e45f3b498e83eb6bc404

  • SHA512

    f199383f4f6c474da6b83add77e9086a1f8f8c07bf1b612062caedd7132176d187c1d8f1fa66faf8846f63207e7849ad27ad9467846044db7c955d9e9360f1bc

  • SSDEEP

    49152:W+0D1S8XZYKE3bQwMlqs0m6GH8BapFFfvbAhWU0cYbEIhLU:W+07Zw3bQwh1zGqGvfvbAnsAIlU

Score
7/10

Malware Config

Signatures

  • Requests dangerous framework permissions 2 IoCs
  • Reads information about phone network operator.

Processes

  • com.shuame.rootgenius
    1⤵
      PID:4075
      • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
        2⤵
          PID:4221
        • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
          2⤵
            PID:4249

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/com.shuame.rootgenius/databases/tencent_analysis.db
          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/user/0/com.shuame.rootgenius/databases/tencent_analysis.db-journal
          Filesize

          524B

          MD5

          3b42af0870239060fc34af3a5766203a

          SHA1

          dc5338c5a00f08c23dc37cc86483d3be37290b99

          SHA256

          12d7154fe1af9df0ba3be4c1a8cf3dea95b9654c3b0305100931191478bdeaa4

          SHA512

          3395b5c5c15bd8c07e25dbea530a6928efca1fa2b9fa07ce00b7f15e5231360d092ba4acc9f8014504e84058b199e57838de3b18e3598114e4cb94eb9185001e

        • /data/user/0/com.shuame.rootgenius/databases/tencent_analysis.db-shm
          Filesize

          8B

          MD5

          7dea362b3fac8e00956a4952a3d4f474

          SHA1

          05fe405753166f125559e7c9ac558654f107c7e9

          SHA256

          af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

          SHA512

          1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

        • /data/user/0/com.shuame.rootgenius/databases/tencent_analysis.db-wal
          Filesize

          76KB

          MD5

          b3715d98468abe434c3e35a503190d7d

          SHA1

          38ae72cfed8b728f4714ef42bdd4ec9da968a165

          SHA256

          1793f97f772484a0952f90ceb4879a80085516dd8ad0dc02131b28fd2e6e737d

          SHA512

          80f32bc2620aab5052254656366d033f7e34329d50897cf0c85ec9383f16ed32936088002f8249d871b65ac8b71aeee475920048eea96bccc48716562de6a754

        • /data/user/0/com.shuame.rootgenius/files/Data/Apk/Kinguser.apk
          Filesize

          692KB

          MD5

          15c9abe4b45028820f53f328862a5834

          SHA1

          27b7be5458e2b5bb760b6d1e81baff237ff7263d

          SHA256

          d36deffe07246cbe7c9f1497d5ab54ff602c9d7378f57fe53c9b6bd92f3cfd95

          SHA512

          c23111d1a4a7fe167e115579e3eec5be0dea71b396b6ddbcd80d3c69b45c6c26ee92da5774684cb3d0bd73d068c1cc31bb3ecbb14eba8e923577e6559457628d

        • /data/user/0/com.shuame.rootgenius/files/Data/Bin/busybox
          Filesize

          1.0MB

          MD5

          bc6c1234f315b50a7883cbc9f8041a22

          SHA1

          f57c5db795dfb323c157bad2517199ffe3c9f135

          SHA256

          f765c41eae0a56c67574ee191371fe95de287d5edb3e527d465fd973c351b4cf

          SHA512

          71a645ca0f0322fe657328f7352614c55cc4f42583337129d15cf23987f460ecec927b31869b287dd4137bdbf6bb25cc7cb6780095c7712bf1f19c41061ad01c

        • /data/user/0/com.shuame.rootgenius/files/Data/Bin/install-recovery.sh
          Filesize

          487B

          MD5

          107c9ab08b958ca59c6b51250beca228

          SHA1

          523950eba74c648e4c465e3734ad6ae5e6bd2269

          SHA256

          6766255958106c1b877d1776b026b49f7e253a4596f8d65399f3d7cdc9822148

          SHA512

          84fcc784372a9d6237850ca8cfcfd3a069434890be193c65f698158ce512385f0bdd14d6e5f520a47ea3093f6e1eccbe0ee69641883e6663fc78d35d89082acb

        • /data/user/0/com.shuame.rootgenius/files/Data/Bin/ksud
          Filesize

          41B

          MD5

          cfac7c70fd36833b10685484a9bb411b

          SHA1

          c3c2327e001f40d3f126b37396ee85f11e5d30eb

          SHA256

          8074d5336d162c54f9fefe987a623ba1e2c2f977398a1cc17ce57339b2029a46

          SHA512

          e975607c72027efecaa20df82cf8ddd865636d0fd62bd4f1b55053e6e4b827cfab26fdefba5f98212236d21a779c8bc780f3458850c2d21649136819779b9518

        • /data/user/0/com.shuame.rootgenius/files/Data/Bin/rgs
          Filesize

          25KB

          MD5

          1d7a847e0b19da258f858d5ee93ced56

          SHA1

          d8e476300654f8a075a997436a3a95d90b521194

          SHA256

          7460f1f9b0bc5c1b831b4608f1b5f1fe1f2afb1c2289fec707afa9e83e28288a

          SHA512

          07d9ba92cc0c47b878037acccdc9847e4c221cf2e92a3bf29e96ddd6eb729902592b01c5d2cf303b79e91566f94b27b941d339feb269c21a6c3bc1b26763a563

        • /data/user/0/com.shuame.rootgenius/files/Data/Bin/su
          Filesize

          31KB

          MD5

          411527ad97f21b3eeef2f5dce98aa8bf

          SHA1

          0728164146604e576401b20dc687451eaa24d31b

          SHA256

          b4ab1de5cc85670214bff6396cc639a90e4c74f6de4d2caecaddeb5adc4e2a21

          SHA512

          bd0a0896310e7d40fb258b028291c708209eabf961677fe01ecb9bb11042719cad2b596fa6f9133aff83ded8819d972df26a083a6dc85c01525c1f9cb060c205

        • /data/user/0/com.shuame.rootgenius/files/Data/Sol/2020
          Filesize

          290KB

          MD5

          42d6f191f1d7daf1e6204aa5823ef563

          SHA1

          5243fc20e4289fc9670ca0324f11a19c2dc606f7

          SHA256

          c784b92ffc91d34bb1a19632fbfefb96a8573423f4f1c06a5b2411f1f701ce1c

          SHA512

          8b2e82378a294aa3eaf19902123750c5413cc03b4d59a21bb0518fa2706785c2f77d93bc39333263b548334fb0f65f5e26db717fefe23ee59f4d7ab7a9b50e29

        • /data/user/0/com.shuame.rootgenius/files/Data/Sol/2025
          Filesize

          182KB

          MD5

          20bf72b5d3da5222d55c1a64f2de0d08

          SHA1

          3a6799fe50c66d886e5ace4f5e3652c9c4eba94f

          SHA256

          adf5d70924fb4f834f680cf424279e13632fd370cc70a5cebb286477d2061b06

          SHA512

          ee18d032511927ee30091bb2ae42b6941a7b6e6bc5210fdfccdddafdd289b24497bcb6ab2760b179a16926463d4186045321fe683f58f5dc77b88da9722066cf