Analysis

  • max time kernel
    2947054s
  • max time network
    153s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    25-11-2022 11:10

General

  • Target

    ffc995af7126172008b4463791d31ef4fd65e3608f9e1f3857c0c7bdb865d2f9.apk

  • Size

    185KB

  • MD5

    3790b26f9b561ad2bcc35623fb5d433e

  • SHA1

    dd4c529fd481c81d7597ce8ab7e096c23090baa7

  • SHA256

    ffc995af7126172008b4463791d31ef4fd65e3608f9e1f3857c0c7bdb865d2f9

  • SHA512

    f29d75d57eeaa61c9b9f1cc00dc6e7fd55ae7474448dcadf8feb25b6a463aa6521a6e4858b73e27456e5f5409cb4ee1a40433e8042a6472ca7fae2fa29536a18

  • SSDEEP

    3072:3Uo+OQZXPTfwN2axZDH4pvJxqTE+6HGWfnMh2/wNaGzMjwzfA:39+ZTY2G4pxxqTEQvw/wP4jwzfA

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.media.v127
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4076
  • com.media.v127:service
    1⤵
      PID:4179

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.media.v127/databases/downloadProvider.db
      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/com.media.v127/databases/downloadProvider.db-journal
      Filesize

      524B

      MD5

      353358a2b5cd4fc9cc00271f2fa4006a

      SHA1

      e63d319a72e82dff86deedb5560202f5b086e121

      SHA256

      7114b1d60e5e63192459bd27bb499232d5caa32357eb50fc44e785b705132fb1

      SHA512

      5ae84ce510cb7267ba336b55779248d56e09f1263a9f979e0a398ba67a88ad5fd635e56ff2e2b044cc046939208b8dd580f5559c13bf608e7b13aa540d36abd0

    • /data/user/0/com.media.v127/databases/downloadProvider.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.media.v127/databases/downloadProvider.db-wal
      Filesize

      28KB

      MD5

      9007259f97e8f8b9fe3408bda8179d9f

      SHA1

      e408df1ea641fb4b748fcdc73e66947d9ef9bef8

      SHA256

      7a88ffcb4e03838abccddd999212baae5e01f1a5835bfd93038889e4c864e448

      SHA512

      ddaa2654f1e93f02b3bf88a283fde29f2cf71313337f732a583647cf10376307dd5ae9b868cbb67141be335a6a07620e08955b94e334b0cea76fd9b71d438113

    • /data/user/0/com.media.v127/files/b1/main/aknfile_standalone_ptl.dat
      Filesize

      11KB

      MD5

      447dc20351bc1c2be804ab6823faddb2

      SHA1

      526d44f966847eb87974e4656b65f2b392f5a2e6

      SHA256

      b096217320f7aaf56705518391bd1bdb0521670bc4e2afd51e8fce6a8c35e0c1

      SHA512

      f9d228f17ad434bf83789392ddb84fb4ab56cd9c11c76f92691fd5293940ca63e2ab093c59d57956e8a7b4fec3c9f55ac3389cfa3bc76cec423d5819c8a8032e

    • /data/user/0/com.media.v127/files/b1/yong.dat
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.media.v127/files/vs_filter.txt
      Filesize

      3B

      MD5

      bd686fd640be98efaae0091fa301e613

      SHA1

      14bb99f81147d2705f53a1d75337b2ec3e10d23a

      SHA256

      684fe39f03758de6a882ae61fa62312b67e5b1e665928cbf3dc3d8f4f53e3562

      SHA512

      7928dede8d7e723c00b976549a83c2934f0876893dc5ae3d56416968ca2a018bc00fe6df315739698c80607bbc309de316b48f402fa6ee939c0aa39b27ebdb43

    • /data/user/0/com.media.v127/files/vs_num.txt
      Filesize

      17B

      MD5

      1130f8094c91787ed86e33c81a37320e

      SHA1

      762771f94590a40455f4e98da76d8dd12cd41d04

      SHA256

      8a66e204a32a108a471f3bc23fbf6f87d47e9b74962629cabbd39849ca6ad33a

      SHA512

      59f2eda8d7fb92b3e83dbec15a538deda7e5e49f8ccafd95a3d8986ddc36963a8e652f67f1b1f4d2fbf2bc42ea0ef843ba997851e74987ddc90b360530f9a564

    • /data/user/0/com.media.v127/files/vs_ver.txt
      Filesize

      25B

      MD5

      c8ac689748f5938e6c1b796ac48818a9

      SHA1

      65d81bac4da0aeca7bc68f720fc6d8c2a75275f5

      SHA256

      a3dcc41a0e91a434fca4039d809821567aab34e8057a4ccf8230512d4007306c

      SHA512

      bb297e787811991aace7cc5b568f15a9f72a299efead7a16cc999a2db0c3832658c7390b0f5278fc790ebfa67efb5e459c6fd126dac0d1f4b1609d7db7c23a78

    • /data/user/0/com.media.v127/shared_prefs/mService.xml
      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03