Analysis

  • max time kernel
    2834472s
  • max time network
    132s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    24-11-2022 06:21

General

  • Target

    d6be211b2c9826dc1c14d655d6585186034635e00e8fb19ba41e77decf278299.apk

  • Size

    2.0MB

  • MD5

    e0bfb1bfbcee3542a77e4e9a0a47d1c4

  • SHA1

    22302b16c65f318176c7095aaf166bada1716358

  • SHA256

    d6be211b2c9826dc1c14d655d6585186034635e00e8fb19ba41e77decf278299

  • SHA512

    eac6a6ee6e392f6f232dd0fa86ec34794f3c3a09b93602d2a4601a6e5c43d41306a9078005cec2792eef34edc91093f21e72da6f84e37b03fe62dd993cd78d36

  • SSDEEP

    49152:kibHcekFI8DecRQviG8LWyEEdc+htbGMX8QMl1HlEG+myqasMWgE:kiwDmFiKyg+iOMl1FEGJHMWgE

Malware Config

Signatures

  • Reads the content of SMS inbox messages. 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.sm.m63video
    1⤵
    • Reads the content of SMS inbox messages.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4082

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.sm.m63video/databases/app_download_record

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.sm.m63video/databases/app_download_record-journal

    Filesize

    524B

    MD5

    ed332318b41e570d3fa787047f98d988

    SHA1

    a74b0077dff7b808b7309af7b70e2b8611d8fdd8

    SHA256

    851d7818adcfb443926dd1b99eba67c08b2de9090bcaff8ffd7a9a27de928f2d

    SHA512

    d666d99244b84f01e99983fe9c80e28114c562acba2f7784a6e27ca14981e7b333e0e576fa9340d324a63d996f697add6d69a4336827a583e1b3f0d560a74353

  • /data/user/0/com.sm.m63video/databases/app_download_record-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.sm.m63video/databases/app_download_record-wal

    Filesize

    44KB

    MD5

    01e7de674d6d3ba343ed3525e38ff0f5

    SHA1

    294c975911c6097dc464a054f0156b6ce1861e34

    SHA256

    37589ae72ed980b0a50ca3a4a45ad6607e0d11f2b90321bae424d4883195c931

    SHA512

    aafe7886d035d1bf75ec93048f61a1a185708cd1c27010d18d5b8ab4b7de839af7d964c569c3ddbf95ce2844432e88ce7c9631a6a49b95080d8cab079885431e

  • /data/user/0/com.sm.m63video/databases/sy_pay_record

    Filesize

    40KB

    MD5

    f33e40dc44dddf9886c560576fe30a70

    SHA1

    58df836a00a47eba37ba479a7aee95bcf404b2b5

    SHA256

    4438043ecb3f2ce4c482f5312042c439437aeb896181069dd6e8966f40bd3de2

    SHA512

    af1162e2b3802bbc9e4bfc43bfd1258bb40b49a601e361076c58f7dbc8f7e8b5d4e3003183dffba1c00810ac34a59fa595d8908ef9b2652578522b8c014327d9

  • /data/user/0/com.sm.m63video/databases/sy_pay_record-journal

    Filesize

    524B

    MD5

    ead5cbcce97a8a9d0d8cf633e11555c6

    SHA1

    f70a55d20447d80a5eaab708af494b87f4ce10c9

    SHA256

    db24d4143b32cdd01dd154d2a19046184b03e1dcc1aa4ebc53f2946b332545d2

    SHA512

    ae0e6d5dc62ee477e8af6627fb43fcc4f5882780d115bf16bccc556501348ddaead97cfd45981766103827a47e1ab18a9f7a45667338d6e1658e23b6e5059648

  • /data/user/0/com.sm.m63video/databases/sy_pay_record-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.sm.m63video/databases/sy_pay_record-wal

    Filesize

    48KB

    MD5

    dc12cee552bde821fd9f5e7c2d97ba1a

    SHA1

    0288da8009d96b99d7a0208ef5d39b80e1816dae

    SHA256

    90f5a99bf5655206244715602f616a1cd1871fd5cb07846ee84b05e6b2aa819f

    SHA512

    77b3beead1234895a617d76552b120022703008bd50b185838fcdba5978eaab18c9003b7403a06fec61af1eae8c54d1493020f5ef70f9bed5de2c7881433d024

  • /data/user/0/com.sm.m63video/databases/video_record

    Filesize

    88KB

    MD5

    fc845a680461d6872021ef8db2bf8711

    SHA1

    a12c09241708e4367e125a324cc8cde42a87e9ff

    SHA256

    76600f5583e24d6d239f3c4043edb0e0b3e1f1983df263503567b5743d18e570

    SHA512

    b73cfecc51fd7e5b5309b05992a118d0dbabe94a65413a9574b87586b098360cd92c9200e267a7853c88a6f5e92fd59a9242fc093236c060002e175602004fdb

  • /data/user/0/com.sm.m63video/databases/video_record-journal

    Filesize

    524B

    MD5

    ab8a289414603d7ecffad8976593ae95

    SHA1

    a71866799d3acc731eec044810c854befda0b457

    SHA256

    7f9367006e1b974764206631901a5f5eb848c52ac189678e3a2483d1acc626de

    SHA512

    7ad265de7724bf576628f5ce47ffd509b6b8f923ae1c7eb5559014388b88a774f8c56b5b4a8db6cbf76e386450718b6df835d8f758312444b3175e68b754a64b

  • /data/user/0/com.sm.m63video/databases/video_record-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.sm.m63video/databases/video_record-wal

    Filesize

    96KB

    MD5

    f00b12b7b99b7c24d71e5b4ec9a7581a

    SHA1

    9c8e620dcbb11da10abdd13e939ba6510bfded4b

    SHA256

    e2d6d326bba2531ad78c592924ff2e2b6838f9be4c7a27a3842d6bc52360427c

    SHA512

    3b8c2d280f7d5edcb826161c88c2454e10c91211fb052ba6f882680ad29573c9a3bafef170024007563009c86a9c8e276d628af41fc5ddf774bdca631e714707

  • /data/user/0/com.sm.m63video/files/icom230148.png

    Filesize

    26KB

    MD5

    fff08f153f4dc64469fae34ce3bc30b9

    SHA1

    52a229b1c7d358a563e838d5dd09f35dab9296ad

    SHA256

    84d913424c99f6009f4700aa0fe529c3b9868729bf77cce8c2cb2f275ee5f6bd

    SHA512

    795575b3cb2dd849fcf25ebda71dcc0fc482a82785e6fe71d95631677416052d9bdda1283056b75dc82465e6758da76cdef1eed2e65e215b8b2176152bec5b5e

  • /data/user/0/com.sm.m63video/files/icom230248.png

    Filesize

    8KB

    MD5

    4dea4d8adba61c26f238863369f5f3da

    SHA1

    c55de8dc399b03b0416d6594a8554eb7d890191c

    SHA256

    b13c3fb26580bd7d0a16ef88701d6608b719c61321bcda33a2f34a1b42bace87

    SHA512

    76c9ec79b8afe6d34e87740dfe7133be0e454b7839028a70cd14fc58bf9544f922553517b7c0c9c679b0f4562c5526f2c9aa90d1a7e0b22b7007f4b5c6c25e04

  • /data/user/0/com.sm.m63video/files/icom230348.png

    Filesize

    8KB

    MD5

    d92797d6ee634dd28d68972c160d97fe

    SHA1

    99ece99cf7f0673fcf07d94b32c029bd8bcbd88f

    SHA256

    47da5f1d901f66da9428653e4daee6969a0e39a4165a556a81ea63122a8b3ebd

    SHA512

    c998b2ae65e02db4f3aa52717557db8e906d12a6bf719f05b81fec0a0bce02c7c88aaec92e0dc55925f1c28fd338261ac0ed2e9ae9472cf70695586bb8b1cb22

  • /data/user/0/com.sm.m63video/files/icom230448.png

    Filesize

    8KB

    MD5

    a5cc4ab509de6cab1a81929a70d96ed6

    SHA1

    de59dafa00725f0ad003975b9aa2a29750142dd1

    SHA256

    ed890c8628fb3920ff79ca3a489f3369d725afb37dddedc80214e46b604956d6

    SHA512

    dab181136652aa3959fe4fbe845831b15ef4a311841c289a55ef2e052ffb652be1e65f7dd4a41ae59aaeff9f0b101b6d769fe89626b36fd65dedf6651d701bda

  • /data/user/0/com.sm.m63video/files/icom230548.png

    Filesize

    8KB

    MD5

    bb84f770c92173ba4142979f5aa6c209

    SHA1

    29ea3dce4e5268f1c8a13dcbce71c95702ea90c2

    SHA256

    f809a254d510615afc27c2ed29bdf62791689497f2ce3f4197fde830f1fb4f3a

    SHA512

    172494f3e3f8868239b69f1ad5ee8019a958005d0d170db9e6ec2ed2e9d84932d49f26904f5e1973c55844c00ae7f03750a5c35c891ffb6a0a50c0a186189b63

  • /data/user/0/com.sm.m63video/files/icom230648.png

    Filesize

    6KB

    MD5

    0a9c6ea70085c15238c185699a2626db

    SHA1

    3f687b395764fd5b9f0830908d218b963513cea4

    SHA256

    094ea1f1215b0445b314d4c1cf84ff8348bd10516cedae3a331263d940b4e0d7

    SHA512

    d2b49abcd9d7310b82e025dc2bf3b2bb2adb8c08b8537677e4bf0d4de8b2c41a8eae88ddb27c87aca81bd84e5ecc875e97714dc0457e91d99a0f5af2c965495b

  • /data/user/0/com.sm.m63video/shared_prefs/APP_START_TIMER_INFO.xml

    Filesize

    117B

    MD5

    400fac024ac927bcd7b130f4fe2ebf47

    SHA1

    87d291cebe803a1e5cd7396976ce4f9212e36997

    SHA256

    45c1edf6c7f0c9d63a26afaa7516b5d52baf78d635f9fe3c468118d4daffa482

    SHA512

    799adc8ba9baf3edaac3ee5037a7f30337264438f62f827e13872aeaf600c6c205b8c6d2dbd1179c87de086d11ea58eb6c82f2496da41832bf492f6e50674577

  • /storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.opplugin_V2014.apk

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e