Analysis

  • max time kernel
    2826855s
  • max time network
    49s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    24-11-2022 03:21

General

  • Target

    abff646e3272dd4310e6908ca4b3438ea95dc0f07f4ebf462d3793068aca9984.apk

  • Size

    200KB

  • MD5

    01a27d898c06e9a0c29970b593bd6d99

  • SHA1

    edcc5f9fc931da06d6cbe1c25b1e1d835e487ccb

  • SHA256

    abff646e3272dd4310e6908ca4b3438ea95dc0f07f4ebf462d3793068aca9984

  • SHA512

    cae7c923efd7dcf955aed75cdd824f7ef70783b1942e7f27d105ede010e68ef1928f76735063902bd0fee03bb5005b5eb490dffb5d9106983b216587f834cd24

  • SSDEEP

    3072:k333dB9s66DScTsPvoufTxhxlkc5HdyQaBix5PPU+4A/Mnmtf2I3wKehxX8UtBCV:S3b9FncYvh2ctdy2zPbMmtf2z7LtBCV

Score
5/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.system.wcrash
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4738

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.system.wcrash/databases/packHelper.db

    Filesize

    96KB

    MD5

    19756742653bbdcbdb9a0bf13a65c261

    SHA1

    9461afa3c958642798c3913ea06a9ff0c25d40fc

    SHA256

    b8e12f8c0a5bf23ad003540e0a9d8999ae5d0be03e6156b8be2cd665f855ccc9

    SHA512

    87a0b2ea968f12e4f5d7fc2e66f120a530c5b8b40b18cdc0627666f5ae857ebc345c2a4ba0db985087242f12d9387166b48947a815c045692e27713c65f9bb3e

  • /data/user/0/com.system.wcrash/databases/packHelper.db-journal

    Filesize

    1KB

    MD5

    e7a2e3d8257416e726a3883c812d1ee0

    SHA1

    dfc3ccf5d4e05933e5eb4d87851effe47bd0f113

    SHA256

    6a557944dbaaaab60848a71b9b5c8a72afe724399d582483d5103251262f6dfc

    SHA512

    5fb3ebc842d9a552893dc7969f0477e8cd68723ca943d9675632cbef54576c68158873fade5a207e92e65865f208ab20fda1348e35b7a66ac2765116bc08320b

  • /data/user/0/com.system.wcrash/databases/timeHelper.db

    Filesize

    96KB

    MD5

    aed1dcaeead47defa57471631de072aa

    SHA1

    c67c221ed9d757c013b582cad98eb3e8adcec94a

    SHA256

    bfe5ceda622e3e4c76e60792a318afdb7605612c7599c909ddb17cf24cb362f7

    SHA512

    29389bd3db9f25eeebd85f50bb1f89a7c1837b425b6d5e86144e836140ca6c2350258c673189dd0566acf4b844ff90fc05a7798ef39c76ac1b5df012a71e3255

  • /data/user/0/com.system.wcrash/databases/timeHelper.db-journal

    Filesize

    1KB

    MD5

    303a0e329adbd9d8b8d117fdc51c7f7e

    SHA1

    ad5c6c251efedb04c860f79d5abc0f5d107a71c4

    SHA256

    85db818982e0fc3145e24338cab2de6ebbf774998b96101fc6ac06ec049ab0ca

    SHA512

    926245b9c471950790b7069b3db7b4a95679581893f15b5a9268cd653bd0cc0e9abbc8d13a74aee624f4199301f9a654eae958e8a6e7ff23bf7a935b180bf243

  • /storage/emulated/0/ttan.ini

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e