Analysis

  • max time kernel
    2856477s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    24-11-2022 11:02

General

  • Target

    9ac431371cccf0f5f41ea5dfa62f810111c0543048750ff712cea2177d333ae0.apk

  • Size

    7.1MB

  • MD5

    4be0330e97cb3e2526f9a190204705f1

  • SHA1

    dd86aab7a36eca0c068fffacecf490ef849a73bf

  • SHA256

    9ac431371cccf0f5f41ea5dfa62f810111c0543048750ff712cea2177d333ae0

  • SHA512

    0c17ac74fdf7fd62459407a4d7063e4cb3bab6383565c05bef4d185d4a75854d2adbae6e35a871cf1c6bb74f9c5e247da6a739b4fa2a167153c9e444cad0107d

  • SSDEEP

    196608:SJ0drZUia5WIWcgU+d4jPpaK8gsAyyZR5jPcRS:SJ0La5WIWcg4zkK8gsA53BPcRS

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.icloud.game.wrzjh
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4728

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.icloud.game.wrzjh/files/act0
    Filesize

    148B

    MD5

    3b35787ed6ad80315640b061ae44a265

    SHA1

    6234b3aead3e1c9b1aa8cbe503a68cd2b268bf6c

    SHA256

    50650ab3b1908034756c0ff48fcb5526a15b79a48a7d91d8fa67e208b6a6770d

    SHA512

    e8be3f1f4c007f985d410fb3f33729830cbb3cbe62e5bddd78e86d1c4e6283f8ff6785a7708438777a4e334f30fcf9a1df192968f4356976ccf29ffa8dd990fc

  • /data/user/0/com.icloud.game.wrzjh/files/act4
    Filesize

    315B

    MD5

    af93520d76ba7d367736c716e6319fff

    SHA1

    e29df93feb6ea67ee0d93ee9751dbfbabb5428df

    SHA256

    bdf70e9f6a03b24973fc4f727eb6364fef4d6eed8ad5b2bc31889f594aca074a

    SHA512

    497198c26366ec985eab4d7cb0ef981eb11b05f8c2df3cb9b968fa239ea795d97b841b1e12fb82154d9256c64696700e540b353a024f4e250c12440a4e34cab1

  • /data/user/0/com.icloud.game.wrzjh/files/evn2
    Filesize

    199B

    MD5

    3c1956b60c6b093d1cb843ee8718d6e5

    SHA1

    664db09df5a546a13863715308c41890ddf83b6b

    SHA256

    0e7f0eb67a774d1b86ae8c33274235272bef9517a5827283f5de67f6ba170366

    SHA512

    96fd3d9dbb75b6a6b9cfd84fb12dd5ee799a2c593920aaba0513160f904782ba169b1dd6173bad5e4f51bb29264eab2f9d946639a9d2d5d1dd269e1896597359

  • /data/user/0/com.icloud.game.wrzjh/files/evn3
    Filesize

    128B

    MD5

    e84f13870b4f2a45581b751c23832771

    SHA1

    ec2e0ef19977009eef5eeecb55cb4b3c80fd8ddd

    SHA256

    000d707dd7640161f1023a2f70f9d61d8a58464680d3206297eb60c22bc2b42f

    SHA512

    fc44e570e2500aa230cea9ba1c99b884fe564cd57cc2a764e3f67bafed0f00a904c91fb645055d7f29379e2e72a1567c01eb9365df8e86fee30716207980a724

  • /data/user/0/com.icloud.game.wrzjh/files/sys1
    Filesize

    505B

    MD5

    5e0c19ac1366e63ddb821904ec5e24ae

    SHA1

    0306488eb631897a8bc54fe008399762b01735de

    SHA256

    b35409e3021f2d14bec34f04bd4b042b841825e02e0862593cfcde83ceb93416

    SHA512

    94d9bf374f7d8794ab569c9a13262d648b1e6898534de719eb7357d375dcd6382f96e6494a8d068fce230b96cba83c77a933063ca75aca09e67f488f25d03dd1

  • /data/user/0/com.icloud.game.wrzjh/shared_prefs/APP_START_TIMER_INFO.xml
    Filesize

    117B

    MD5

    d6bdb05822aaff02d3ef647ed6855dfa

    SHA1

    2e1543a5195bfac097c5345e232a77c1ecd5610e

    SHA256

    cf69c72bd741f48b9487817e6e6076ccbe5e7b17e5a8ea45a5f79ee3e8cb3469

    SHA512

    06713e0d67b6e1c76774be2b9223cde0c24fc4e64d21e15d74ef9ab17f1df1c5d072c3dcd73eb3bec39637ceae35b4fa4fdb05e229205e893214832049b6b9ce

  • /storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.opplugin_V2009.apk
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /storage/emulated/0/wrzjh/com.icloud.game.wrzjh/zhajinhua/log.txt
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e