Analysis
-
max time kernel
2942492s -
max time network
149s -
platform
android_x64 -
resource
android-x64-arm64-20220823-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system -
submitted
25-11-2022 09:22
Static task
static1
Behavioral task
behavioral1
Sample
35fc14eaec8239b7f6f5803efbd9a95a632b1f2e63050c8d1b4fe81204dac55d.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
35fc14eaec8239b7f6f5803efbd9a95a632b1f2e63050c8d1b4fe81204dac55d.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
35fc14eaec8239b7f6f5803efbd9a95a632b1f2e63050c8d1b4fe81204dac55d.apk
-
Size
3.5MB
-
MD5
2df4253f3810fe295b4f37897f249792
-
SHA1
15eeedbea75b2b5eeea07c71d827ca9d72f078fd
-
SHA256
35fc14eaec8239b7f6f5803efbd9a95a632b1f2e63050c8d1b4fe81204dac55d
-
SHA512
6d89337a9716bc4957dfd84accb1c49022acf05f717d475dd3a1b51b50c06bea158c5d99c5893751c51f7ed5e7ae61b3bb6b1985fe17f27b6c15d7cfb84ad40a
-
SSDEEP
98304:ViMS3fRvlvjQVgylWlRZdFWHRZdFRAygzF:ViMSvRdsncvFUvFRAyY
Malware Config
Signatures
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.GuoLeTandescription ioc process Framework API call javax.crypto.Cipher.doFinal com.GuoLeTan
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.GuoLeTan/app_zq/z.soFilesize
17KB
MD555acabef61c918aae3cae7a315823d78
SHA1365811a7e77c4d23846c40cb1886fd11c3aadaa8
SHA2560c324fc008adcdf3ad65eccc85a4e42b51d97adc7ad2ae1a22225ffa21352e3e
SHA512e9619de32b3916329046b7d9a79e3a5a5b3b673aae68afeef6a4d6b0647a9c587680d07f6593736cbf9fddc5dbf9f30696cc17917e653ab94c179433ddcbe5c4
-
/data/user/0/com.GuoLeTan/shared_prefs/bmob_push.xmlFilesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
/data/user/0/com.GuoLeTan/shared_prefs/bmob_sp.xmlFilesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03