Analysis
-
max time kernel
2947101s -
max time network
159s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
25-11-2022 11:10
Static task
static1
Behavioral task
behavioral1
Sample
61d1f32bef5c398c9c2e064b5d0a05e295566f3d6b377ab549f674433e2c0cfd.apk
Resource
android-x86-arm-20220823-en
General
-
Target
61d1f32bef5c398c9c2e064b5d0a05e295566f3d6b377ab549f674433e2c0cfd.apk
-
Size
185KB
-
MD5
caa5f89eaaf8282758824531858d7139
-
SHA1
3e60d29f4d60ef81e1bad891598909e666037c5e
-
SHA256
61d1f32bef5c398c9c2e064b5d0a05e295566f3d6b377ab549f674433e2c0cfd
-
SHA512
4935f13ad1729435d7fcb6513060ae2753e21054a50cb7218d9d1130fac62a67b3367f774e831b03ab095a6907a96fcf3d0d273e8461ec0b57276d258b9d9737
-
SSDEEP
3072:dhaU6PV+Ox6Zti5lguSx2/WDUdTttCGFj9e6QiJjlLnqDX6IpO0X7N2axBDHepvU:K1+UTe2OepxxqTEQvw/wP4jwzfN
Malware Config
Signatures
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.media.v127description ioc process Framework API call javax.crypto.Cipher.doFinal com.media.v127
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.media.v127/databases/downloadProvider.dbFilesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/user/0/com.media.v127/databases/downloadProvider.db-journalFilesize
524B
MD5620b50079338411e68800a8042f9f437
SHA169b33699a4dda701316e4bfa95e3083a9f6861f5
SHA25624dffb4d4a354750d7ba2c2a6b3a7b82706438fd46b6ddff2b7b8c142c285438
SHA51295faeb680500478e959b1a084172c8aaed7e5533fba9013a94feb6f6a278c1ea4ec7528304a2091074f6565eae5debb834ffbe96489820b298360912dc22c827
-
/data/user/0/com.media.v127/databases/downloadProvider.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.media.v127/databases/downloadProvider.db-walFilesize
28KB
MD55269b260cdc8b9a953adfba8f3fd7363
SHA17154c24698fba7f3248b75269307e17f4e0aea77
SHA256ecd3cf13cc72f4e381ad6c01346b3da655ce26bd49acf1f0097811312cc49f0f
SHA51212503a405531e287aa57530068204e49f6755f6a01b30a01e2f554a8496678f42eee580670128adffdd008999883397f2e242f09f72d3811a8d2de29577e043b
-
/data/user/0/com.media.v127/files/b1/main/aknfile_standalone_ptl.datFilesize
11KB
MD5447dc20351bc1c2be804ab6823faddb2
SHA1526d44f966847eb87974e4656b65f2b392f5a2e6
SHA256b096217320f7aaf56705518391bd1bdb0521670bc4e2afd51e8fce6a8c35e0c1
SHA512f9d228f17ad434bf83789392ddb84fb4ab56cd9c11c76f92691fd5293940ca63e2ab093c59d57956e8a7b4fec3c9f55ac3389cfa3bc76cec423d5819c8a8032e
-
/data/user/0/com.media.v127/files/b1/yong.datMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.media.v127/files/vs_filter.txtFilesize
3B
MD5bd686fd640be98efaae0091fa301e613
SHA114bb99f81147d2705f53a1d75337b2ec3e10d23a
SHA256684fe39f03758de6a882ae61fa62312b67e5b1e665928cbf3dc3d8f4f53e3562
SHA5127928dede8d7e723c00b976549a83c2934f0876893dc5ae3d56416968ca2a018bc00fe6df315739698c80607bbc309de316b48f402fa6ee939c0aa39b27ebdb43
-
/data/user/0/com.media.v127/files/vs_num.txtFilesize
17B
MD5e978f8fa229da80f927f2d64a687222a
SHA1b81734aeb3b21c739a01d52d812e340f77dc6689
SHA2563f496118a4e5d319510a90da3c461f9f17c5ce98b1c3d2f21eb056040359e72c
SHA5121eeec48c1cb29494eabaf19332105cfb686c205c6cfbc39c5614e95d39b16a6d53afaf38bd3fbc7d151b8da2d5cc70c020c9d5f2f767991eeec2017e75aae348
-
/data/user/0/com.media.v127/files/vs_ver.txtFilesize
25B
MD5f1e7b410fa34ad735c64e119eecc6eba
SHA1cab9079c73e6c121fe01b5841e677c94fe7d5050
SHA2567ad833c3e1e52d1523b29d5bdd4310a9c46b069268e90c41ce11c54bfd42d30f
SHA512afb7ae851da4dfd07515d3a61c848020ec3a081b48bffd80574e08694a5a01b3f7ac9c74716247c722250d6d68f94d6a66bd6f1ba62274110549faee6ca9dd92
-
/data/user/0/com.media.v127/shared_prefs/mService.xmlFilesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03