Analysis

  • max time kernel
    2857818s
  • max time network
    132s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    24-11-2022 12:16

General

  • Target

    72c1098fbdff9be85bdc3a443a63592b58596dc943f23b3d4c42341b7849178a.apk

  • Size

    2.0MB

  • MD5

    f2fc78fe6681a223398e5e77dbd2e979

  • SHA1

    4587bb5f85460171f345adf8071c0a49e1793f6c

  • SHA256

    72c1098fbdff9be85bdc3a443a63592b58596dc943f23b3d4c42341b7849178a

  • SHA512

    2dc298a0237acb0c880b391a4d7250fe0ac86c9d927613144ad4040c5861e9049529afd8ca5a283149e97a2a9ac071cca00e4b4784e14529dfebb03a3c988af4

  • SSDEEP

    49152:q2cekFI8DecwQviG8L/yEEdc+htbGMX8QMl1HlEG+myqado6s3:qvDmGiLyg+iOMl1FEGJ+o6s3

Malware Config

Signatures

  • Reads the content of SMS inbox messages. 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.sm.m63video
    1⤵
    • Reads the content of SMS inbox messages.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4115

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.sm.m63video/databases/app_download_record
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.sm.m63video/databases/app_download_record-journal
    Filesize

    524B

    MD5

    aa68fa4b7a4ffccbbf35ce1b3221c9b9

    SHA1

    f15982582887ab6d7dd16f25c22862638c8da196

    SHA256

    82b513817998844a98b34da8f938957e0c7ce44b12fe469e96e7154e2c8d01b9

    SHA512

    767a7026d55de561d9f050b26943667c8c73ec93a13882bbbd59445550397044fb8e2bf921435513f8b30e487f0166413914becac4f0fe8a2c7518eff2445979

  • /data/user/0/com.sm.m63video/databases/app_download_record-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.sm.m63video/databases/app_download_record-wal
    Filesize

    44KB

    MD5

    a6b3c2030d07cc7a5f8527eadc76f59e

    SHA1

    b60c47a056a54d151ccb8d2c2c8eb4855bfa4667

    SHA256

    c8a380846abb3f398dff5c0bf7974aab048a723907c0a3c89a4a1597d4254e9b

    SHA512

    521bb03c263e58c1ecd4aaa0ed0e402be158e2a857c01c513c80073b91de103bf8f4ad62ef75a7d9b8962b18b8ea09501ee14f302a99b295ca6397410169667e

  • /data/user/0/com.sm.m63video/databases/sy_pay_record
    Filesize

    40KB

    MD5

    f33e40dc44dddf9886c560576fe30a70

    SHA1

    58df836a00a47eba37ba479a7aee95bcf404b2b5

    SHA256

    4438043ecb3f2ce4c482f5312042c439437aeb896181069dd6e8966f40bd3de2

    SHA512

    af1162e2b3802bbc9e4bfc43bfd1258bb40b49a601e361076c58f7dbc8f7e8b5d4e3003183dffba1c00810ac34a59fa595d8908ef9b2652578522b8c014327d9

  • /data/user/0/com.sm.m63video/databases/sy_pay_record-journal
    Filesize

    524B

    MD5

    ac540a12bc82c47e23be77ffd0f65f4c

    SHA1

    79028eaef8e1bceb25622e1da763d6d88f81e484

    SHA256

    58cf0f1e9d40318c40e41058158d80708763fbba7900dcd7592164a8ee1ce23b

    SHA512

    977cd86669683447e2943966c9d83e9d97ce575e9108a6dc343521ba6e995bc6769c4a9c9d8428eaeaaf0a14f264569a5858bd88544c498bf874c07d5b2bd5d4

  • /data/user/0/com.sm.m63video/databases/sy_pay_record-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.sm.m63video/databases/sy_pay_record-wal
    Filesize

    48KB

    MD5

    52a8d6784fd2fc9e3652a8172d4d5f87

    SHA1

    d1f28e26e2c5ea945c94f12ca16755b3fd88d08a

    SHA256

    be8fbb2a722a30bfa8f48b8ca2bf474048cb41e13365412145631b659d294ee9

    SHA512

    b6ce827dc14cc58b3056112a3cd3eb249d8704e5da1fe8405b0ea0862fc911f7dacb0e7fd1312cf33240336ff7602414db191f52c6cd692715b23c26933d6b7f

  • /data/user/0/com.sm.m63video/databases/video_record
    Filesize

    88KB

    MD5

    fc845a680461d6872021ef8db2bf8711

    SHA1

    a12c09241708e4367e125a324cc8cde42a87e9ff

    SHA256

    76600f5583e24d6d239f3c4043edb0e0b3e1f1983df263503567b5743d18e570

    SHA512

    b73cfecc51fd7e5b5309b05992a118d0dbabe94a65413a9574b87586b098360cd92c9200e267a7853c88a6f5e92fd59a9242fc093236c060002e175602004fdb

  • /data/user/0/com.sm.m63video/databases/video_record-journal
    Filesize

    524B

    MD5

    1c2ff263361c54c3b16b0efbc1d72a53

    SHA1

    2b3bd04e796c73b882789a15ee94565491f18b96

    SHA256

    d377e6e7716d784fa72d1edb09be850daef06e3bf5deebaf7bc98532c182f445

    SHA512

    77403c7c7270b7cd9ce6a33daf6a6449cdd3ae94d9ee0020e7965504942720f851f39078ba5670a977e2118e63ecc77b2ee3f65881a7511ae644d22ec3166ab0

  • /data/user/0/com.sm.m63video/databases/video_record-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.sm.m63video/databases/video_record-wal
    Filesize

    96KB

    MD5

    8a04e699f50e98dc231e89cfab56582a

    SHA1

    8bd0ae3471c30633ea59cba29c92d71dd2740d10

    SHA256

    eb2ae780f06cc31196b3d0811d9a120c8630b6e13bac72a5e688da8d09f6ec49

    SHA512

    ba147464d43b0c59650a9de93bece0cf394a62d5a3624d60b595deee129b922a1d2be0e89a50222388575b50c0db3a8456a62de27ce83a99c55198eb12e38cbe

  • /data/user/0/com.sm.m63video/files/icom230148.png
    Filesize

    26KB

    MD5

    fff08f153f4dc64469fae34ce3bc30b9

    SHA1

    52a229b1c7d358a563e838d5dd09f35dab9296ad

    SHA256

    84d913424c99f6009f4700aa0fe529c3b9868729bf77cce8c2cb2f275ee5f6bd

    SHA512

    795575b3cb2dd849fcf25ebda71dcc0fc482a82785e6fe71d95631677416052d9bdda1283056b75dc82465e6758da76cdef1eed2e65e215b8b2176152bec5b5e

  • /data/user/0/com.sm.m63video/files/icom230248.png
    Filesize

    8KB

    MD5

    4dea4d8adba61c26f238863369f5f3da

    SHA1

    c55de8dc399b03b0416d6594a8554eb7d890191c

    SHA256

    b13c3fb26580bd7d0a16ef88701d6608b719c61321bcda33a2f34a1b42bace87

    SHA512

    76c9ec79b8afe6d34e87740dfe7133be0e454b7839028a70cd14fc58bf9544f922553517b7c0c9c679b0f4562c5526f2c9aa90d1a7e0b22b7007f4b5c6c25e04

  • /data/user/0/com.sm.m63video/files/icom230348.png
    Filesize

    8KB

    MD5

    d92797d6ee634dd28d68972c160d97fe

    SHA1

    99ece99cf7f0673fcf07d94b32c029bd8bcbd88f

    SHA256

    47da5f1d901f66da9428653e4daee6969a0e39a4165a556a81ea63122a8b3ebd

    SHA512

    c998b2ae65e02db4f3aa52717557db8e906d12a6bf719f05b81fec0a0bce02c7c88aaec92e0dc55925f1c28fd338261ac0ed2e9ae9472cf70695586bb8b1cb22

  • /data/user/0/com.sm.m63video/files/icom230448.png
    Filesize

    8KB

    MD5

    a5cc4ab509de6cab1a81929a70d96ed6

    SHA1

    de59dafa00725f0ad003975b9aa2a29750142dd1

    SHA256

    ed890c8628fb3920ff79ca3a489f3369d725afb37dddedc80214e46b604956d6

    SHA512

    dab181136652aa3959fe4fbe845831b15ef4a311841c289a55ef2e052ffb652be1e65f7dd4a41ae59aaeff9f0b101b6d769fe89626b36fd65dedf6651d701bda

  • /data/user/0/com.sm.m63video/files/icom230548.png
    Filesize

    8KB

    MD5

    bb84f770c92173ba4142979f5aa6c209

    SHA1

    29ea3dce4e5268f1c8a13dcbce71c95702ea90c2

    SHA256

    f809a254d510615afc27c2ed29bdf62791689497f2ce3f4197fde830f1fb4f3a

    SHA512

    172494f3e3f8868239b69f1ad5ee8019a958005d0d170db9e6ec2ed2e9d84932d49f26904f5e1973c55844c00ae7f03750a5c35c891ffb6a0a50c0a186189b63

  • /data/user/0/com.sm.m63video/files/icom230648.png
    Filesize

    6KB

    MD5

    0a9c6ea70085c15238c185699a2626db

    SHA1

    3f687b395764fd5b9f0830908d218b963513cea4

    SHA256

    094ea1f1215b0445b314d4c1cf84ff8348bd10516cedae3a331263d940b4e0d7

    SHA512

    d2b49abcd9d7310b82e025dc2bf3b2bb2adb8c08b8537677e4bf0d4de8b2c41a8eae88ddb27c87aca81bd84e5ecc875e97714dc0457e91d99a0f5af2c965495b

  • /data/user/0/com.sm.m63video/shared_prefs/APP_START_TIMER_INFO.xml
    Filesize

    117B

    MD5

    936046a1f3b48ba271d3642cb7c0aaca

    SHA1

    8da4235cd22689dd22ef3133a69bd9b77cd6b0d5

    SHA256

    9a2310db8d0c7d10a16bfebd93051a302fe4c1f64d5630be7d0fd7b296f4cdcb

    SHA512

    5cac43f09f75fe7a79456624cb671e34c280ef1492a62a738a3c5861d1c66b2371d3eee1d08bce3d30309dadb56ab0773455a3f49a020a975be04756f260aac2

  • /storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.opplugin_V2014.apk
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e