Analysis

  • max time kernel
    2832609s
  • max time network
    158s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    24/11/2022, 05:40

General

  • Target

    be724f73ff63338470980be3f127e95b963aa571bca5bb9fd15e93948eba22c9.apk

  • Size

    6.5MB

  • MD5

    c59147e52a8b03d06069e88536838d11

  • SHA1

    2b913db69b748f40598ad65b612477053def421f

  • SHA256

    be724f73ff63338470980be3f127e95b963aa571bca5bb9fd15e93948eba22c9

  • SHA512

    4a61fa4769e7713f917e575daeabb37019f4e276b9833e3d991136804ec743f2237b2d966781d66e50d417fd7b13018ca44953d0b43f62788cae26b09fd52dc1

  • SSDEEP

    196608:ZVroePqe0Ar36B6mDZQq6N0DGBERCaCmOpeDo1n25qTfv:ZieDzrW6Cv6N1wCa0pIoV25qTfv

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Reads information about phone network operator.

Processes

  • com.lei.kongzhan
    1⤵
    • Requests cell location
    PID:4063
    • ps
      2⤵
        PID:4239
    • com.lei.kongzhan:remote
      1⤵
        PID:4154

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/com.lei.kongzhan/files/lotuseed.apps

        Filesize

        3KB

        MD5

        e27cb7255b0e15c6f482c9425a0c8782

        SHA1

        ec93587e4a33d4dcf33cd8872a5697edde78c444

        SHA256

        57118923df9e0b846f119780d857fb11ddf875795891067b75fe2b778b5986c6

        SHA512

        bb45b3df72a889f6817e9de0eba6548189e5afea86bf23870ef714c222107e8ee7e53189c03593ceffe6e7a36ac60c85b2026b1653ac57a42228ec0b5948bff1

      • /data/user/0/com.lei.kongzhan/files/lotuseed.s

        Filesize

        452B

        MD5

        78655c56b063854f39ed47c4191e5f49

        SHA1

        d209ee8277c28cd0672625857a4f387ebaf2d846

        SHA256

        32e02c877dc087f5e1cf24296b061da198785ac3135de18d662af198c7172631

        SHA512

        8cd853ed0c686de9d521fd37ee0e527aa54a0c35380d2701a395f9e36633a4c08d753edbb389df6552176205730c6cffd3854bd582e314c48277710fca016491

      • /data/user/0/com.lei.kongzhan/files/lotuseed.task

        Filesize

        77B

        MD5

        12d93540c1762b59fd5becc055c824ef

        SHA1

        1a51d8256b937feef59f8c67c4926f5fb6c7ec7d

        SHA256

        cf54c83f37590bff7c786e9696331e774025329945bc871cb431f5f39fb851c5

        SHA512

        26fddbe225f4a44e5215f43c5247d5bae0e613786fca08580ead2882eb390ae49a5e2b7cea80c8a77602b77c829d8c76e2239db095f92f9acd9bc60030d607a1

      • /data/user/0/com.lei.kongzhan/shared_prefs/APP_START_TIMER_INFO.xml

        Filesize

        117B

        MD5

        3ee63b0fcbe022db59dcd3dc58555eaf

        SHA1

        de4adc42a56733e4f19b26f1fca0d0edc12e2a16

        SHA256

        fd7d7fd9d89482b0602cfa02224e50d978d097015298ea6d0ede1e09a8be3431

        SHA512

        c9c98ece859a49cc4ae6689a2d8d64a94e8ac3146263b28dc82f9bc58bff0015981d719b5a629696f964cf767f4fa23e254c485ebbd4c261484d0f106193cc60

      • /data/user/0/com.lei.kongzhan/shared_prefs/APP_START_TIMER_INFO.xml

        Filesize

        117B

        MD5

        2c3969d08dc4fb4d5c913f023cb55cdd

        SHA1

        5ce9a165ddb51542023a025ada41fdefd19a0485

        SHA256

        0ba1a3a9ef0748b64b4001c9984a0912932096864958f59961e16522341042f4

        SHA512

        0e80e785b16263b3cee47668e2f9a01b49c127e7282f618706e0dfdb110e16233622ee95c5fd3c3337003264e0a7d5c2d6b66b66094ec363a72dba23ca8c569d

      • /storage/emulated/0/.system/lotuseed.devid

        Filesize

        85B

        MD5

        b05a29e0f25e9cca01cac1e515b05aa0

        SHA1

        d2c7f5849bc2aea0b2fd3e2122bb325a812721be

        SHA256

        4837f4149280be591dff83660ce6918f3360379b08d88d1052e7e310abb806b0

        SHA512

        7fb53ee8b96eb10a84e8b0d9a5bcd69adeda3087c55a4515f6986bb6c73bd703dc3f535e505c66470d7548dcb34d56d83194614a26a5f77fcbf4eff26f4a10c9