Analysis

  • max time kernel
    2852478s
  • max time network
    135s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    24-11-2022 10:57

General

  • Target

    3d2287c3e3b0517a6fc55a6df28f3e4226cea8bd38f17b881f8bdf39ca6b0151.apk

  • Size

    1.8MB

  • MD5

    7acdd3d24e4d7bf0978f60c12c81dc82

  • SHA1

    69e748bfbca4983be2190de6d591ea0b1cca6629

  • SHA256

    3d2287c3e3b0517a6fc55a6df28f3e4226cea8bd38f17b881f8bdf39ca6b0151

  • SHA512

    6ba3cabd7516227b5db980cb35a685850e6c3c3dfbe2878a96728a8ce6541e92b3d7be80edff13d81a43279db2850b12cf5f37744df06205cb6bafdfbc7138b1

  • SSDEEP

    49152:i2OG1Ezeua+Ok/Bg40QzcekFI8ajecD5eLLxWAtFON4u7mplSl:i2OG1EibHkO/Dmb8dW4KmplSl

Malware Config

Signatures

  • Reads the content of SMS inbox messages. 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.sm.m56video
    1⤵
    • Reads the content of SMS inbox messages.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4081

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.sm.m56video/databases/app_download_record
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.sm.m56video/databases/app_download_record-journal
    Filesize

    524B

    MD5

    5ab996ef4e448cdbc4cc03bad700c2bd

    SHA1

    03fe9a1a3e1e3be0a236246dff5cea854143b2c2

    SHA256

    13c5e88bdefcf94b6a56396fe6b00fa11807b09af38df17e348346bae4f16100

    SHA512

    4fe300290b895bcd9e4b143a56ee1b26aa63a0cefcacb1c85bc3890e090f85d9cd95fd9951d9f6ba7e3658cf5d6d08f9b111d42c58d33a8bc6be64befb7654bc

  • /data/user/0/com.sm.m56video/databases/app_download_record-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.sm.m56video/databases/app_download_record-wal
    Filesize

    44KB

    MD5

    1103f868a73987cddc4cbc79fe36ff3e

    SHA1

    ab7a2b3341d45ae8173f0c693e0d8895f707ef2c

    SHA256

    ed2208c66937cc2c5d3d396d989880314bc21c2b0042919719fc412b2645f908

    SHA512

    d076b9a0ed3b7a6231af3c8b34c2b63f49257b9666f0f994dc268d47cabc76bebb76f70cb057424768fbc8dd412ed95a70151943b9a32d0b297d4c1faa8da820

  • /data/user/0/com.sm.m56video/databases/sy_pay_record
    Filesize

    40KB

    MD5

    f33e40dc44dddf9886c560576fe30a70

    SHA1

    58df836a00a47eba37ba479a7aee95bcf404b2b5

    SHA256

    4438043ecb3f2ce4c482f5312042c439437aeb896181069dd6e8966f40bd3de2

    SHA512

    af1162e2b3802bbc9e4bfc43bfd1258bb40b49a601e361076c58f7dbc8f7e8b5d4e3003183dffba1c00810ac34a59fa595d8908ef9b2652578522b8c014327d9

  • /data/user/0/com.sm.m56video/databases/sy_pay_record-journal
    Filesize

    524B

    MD5

    67e8cd94387eba53dc42c0551128e1ef

    SHA1

    39652ac87233aa70087be9d1dd074a040bded660

    SHA256

    4eae61faccb9b242a92885f83063ee1b550becac01e973009ce8c59c55bd527b

    SHA512

    eedcb3c8e6f91d65579ed1d833cde5279ce2edfd457e4e02ea6fc0eaf0ddf3deadff76c7c58587268ff3a99b7eb8ac4e697a4699da7c36bd134c9e89dd01e9bf

  • /data/user/0/com.sm.m56video/databases/sy_pay_record-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.sm.m56video/databases/sy_pay_record-wal
    Filesize

    48KB

    MD5

    dbdf6188f6059e75271ffa4016a26c94

    SHA1

    a200bf5832737aaad3ae398909dbf1b227edf1a7

    SHA256

    64074e12794306d38f25d2cb193c7afdfd7ac8bd4554bb395423c83c386df117

    SHA512

    60726212395632a1f1b01504902ff4f2b77b26a73af2b178f7a9d153ab70d8131edb375ffad8febc5a26ea158138b81d3a3a6a42fcaa10338269342f56a378b4

  • /data/user/0/com.sm.m56video/databases/video_record
    Filesize

    88KB

    MD5

    fc845a680461d6872021ef8db2bf8711

    SHA1

    a12c09241708e4367e125a324cc8cde42a87e9ff

    SHA256

    76600f5583e24d6d239f3c4043edb0e0b3e1f1983df263503567b5743d18e570

    SHA512

    b73cfecc51fd7e5b5309b05992a118d0dbabe94a65413a9574b87586b098360cd92c9200e267a7853c88a6f5e92fd59a9242fc093236c060002e175602004fdb

  • /data/user/0/com.sm.m56video/databases/video_record-journal
    Filesize

    524B

    MD5

    727f77046ffa034e50abf619df3bf526

    SHA1

    31595f3b9cabda47421fb05d8c1112f8c0174118

    SHA256

    52baa8d04c795dbb0a1ba425055e6316ba5d6fe406e9e9744f2ec790b3d3697b

    SHA512

    5bbbb4f6cad9bb692d6dfb2db9fba171a9259ead6fe5be6f7f905419aa463d9c370de74cdd426559e1dbaacfe9de179720e6a8d6599b12b18f3e83f90ecb15a3

  • /data/user/0/com.sm.m56video/databases/video_record-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.sm.m56video/databases/video_record-wal
    Filesize

    96KB

    MD5

    34835b68e3c90e9fd2511a5991f8e985

    SHA1

    d1ca9db5cda2d8b7cd8310e2b9a7d6cf54dbfa8a

    SHA256

    3d7b70fa5013a6d691078638d44d7c3545ffd1b75d46a870c65de375fab3b1f0

    SHA512

    fb1c63604290642545c4b2555c15121fa357fb75ddf567573502addfa375f9cec1e97e65c2ecd9652a3367e706aebf9416977ff2c1a0b6957838e4c257cf8ece

  • /data/user/0/com.sm.m56video/shared_prefs/APP_START_TIMER_INFO.xml
    Filesize

    117B

    MD5

    30bc4cdec9b4597d495abab7bc40002a

    SHA1

    949283a60243de9e4c1b9cc79446df1c3e2f4d17

    SHA256

    94c0ef0e447c7ab5f4f66075c2ef58247fe526544635a8521c84555a87d8ba48

    SHA512

    f97fe19566261b33235ee2fa22f70f243ee1f83d188eced8f82352ac72c0da195f85a62c051a00221f83a7a8823afdc0d0304567655e81ec17eae39b03c22480

  • /storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.opplugin_V2014.apk
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /storage/emulated/0/SAdAssets/data.apk
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /storage/emulated/0/SAdAssets/data.db
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e