Analysis

  • max time kernel
    2832609s
  • max time network
    158s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    24/11/2022, 05:40

General

  • Target

    be724f73ff63338470980be3f127e95b963aa571bca5bb9fd15e93948eba22c9.apk

  • Size

    6.5MB

  • MD5

    c59147e52a8b03d06069e88536838d11

  • SHA1

    2b913db69b748f40598ad65b612477053def421f

  • SHA256

    be724f73ff63338470980be3f127e95b963aa571bca5bb9fd15e93948eba22c9

  • SHA512

    4a61fa4769e7713f917e575daeabb37019f4e276b9833e3d991136804ec743f2237b2d966781d66e50d417fd7b13018ca44953d0b43f62788cae26b09fd52dc1

  • SSDEEP

    196608:ZVroePqe0Ar36B6mDZQq6N0DGBERCaCmOpeDo1n25qTfv:ZieDzrW6Cv6N1wCa0pIoV25qTfv

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Reads information about phone network operator.

Processes

  • com.lei.kongzhan
    1⤵
    • Requests cell location
    PID:4063
    • ps
      2⤵
        PID:4239
    • com.lei.kongzhan:remote
      1⤵
        PID:4154

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • /data/user/0/com.lei.kongzhan/files/lotuseed.apps

              Filesize

              3KB

              MD5

              e27cb7255b0e15c6f482c9425a0c8782

              SHA1

              ec93587e4a33d4dcf33cd8872a5697edde78c444

              SHA256

              57118923df9e0b846f119780d857fb11ddf875795891067b75fe2b778b5986c6

              SHA512

              bb45b3df72a889f6817e9de0eba6548189e5afea86bf23870ef714c222107e8ee7e53189c03593ceffe6e7a36ac60c85b2026b1653ac57a42228ec0b5948bff1

            • /data/user/0/com.lei.kongzhan/files/lotuseed.s

              Filesize

              452B

              MD5

              78655c56b063854f39ed47c4191e5f49

              SHA1

              d209ee8277c28cd0672625857a4f387ebaf2d846

              SHA256

              32e02c877dc087f5e1cf24296b061da198785ac3135de18d662af198c7172631

              SHA512

              8cd853ed0c686de9d521fd37ee0e527aa54a0c35380d2701a395f9e36633a4c08d753edbb389df6552176205730c6cffd3854bd582e314c48277710fca016491

            • /data/user/0/com.lei.kongzhan/files/lotuseed.task

              Filesize

              77B

              MD5

              12d93540c1762b59fd5becc055c824ef

              SHA1

              1a51d8256b937feef59f8c67c4926f5fb6c7ec7d

              SHA256

              cf54c83f37590bff7c786e9696331e774025329945bc871cb431f5f39fb851c5

              SHA512

              26fddbe225f4a44e5215f43c5247d5bae0e613786fca08580ead2882eb390ae49a5e2b7cea80c8a77602b77c829d8c76e2239db095f92f9acd9bc60030d607a1

            • /data/user/0/com.lei.kongzhan/shared_prefs/APP_START_TIMER_INFO.xml

              Filesize

              117B

              MD5

              3ee63b0fcbe022db59dcd3dc58555eaf

              SHA1

              de4adc42a56733e4f19b26f1fca0d0edc12e2a16

              SHA256

              fd7d7fd9d89482b0602cfa02224e50d978d097015298ea6d0ede1e09a8be3431

              SHA512

              c9c98ece859a49cc4ae6689a2d8d64a94e8ac3146263b28dc82f9bc58bff0015981d719b5a629696f964cf767f4fa23e254c485ebbd4c261484d0f106193cc60

            • /data/user/0/com.lei.kongzhan/shared_prefs/APP_START_TIMER_INFO.xml

              Filesize

              117B

              MD5

              2c3969d08dc4fb4d5c913f023cb55cdd

              SHA1

              5ce9a165ddb51542023a025ada41fdefd19a0485

              SHA256

              0ba1a3a9ef0748b64b4001c9984a0912932096864958f59961e16522341042f4

              SHA512

              0e80e785b16263b3cee47668e2f9a01b49c127e7282f618706e0dfdb110e16233622ee95c5fd3c3337003264e0a7d5c2d6b66b66094ec363a72dba23ca8c569d

            • /storage/emulated/0/.system/lotuseed.devid

              Filesize

              85B

              MD5

              b05a29e0f25e9cca01cac1e515b05aa0

              SHA1

              d2c7f5849bc2aea0b2fd3e2122bb325a812721be

              SHA256

              4837f4149280be591dff83660ce6918f3360379b08d88d1052e7e310abb806b0

              SHA512

              7fb53ee8b96eb10a84e8b0d9a5bcd69adeda3087c55a4515f6986bb6c73bd703dc3f535e505c66470d7548dcb34d56d83194614a26a5f77fcbf4eff26f4a10c9