Analysis

  • max time kernel
    2946813s
  • max time network
    151s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    25-11-2022 11:10

General

  • Target

    3cf6ef8781223ba0a50331a35a3f5591a913dfd2847d3559e8f0238daeb97704.apk

  • Size

    188KB

  • MD5

    685f5063d94fe912afc3602bb8deef5c

  • SHA1

    38f342b9cf9a055d8d13fc743d200a0d2c3cbe6e

  • SHA256

    3cf6ef8781223ba0a50331a35a3f5591a913dfd2847d3559e8f0238daeb97704

  • SHA512

    447d4b958677962c09a284fe8b80638b7ff934a4cbc3589378612c62efd13bb554efec316a70f5eb455b23515e0f5b7a92a525ce1b0b5e34023b9af9621f7233

  • SSDEEP

    3072:8lfysO2aRcTZ3+Vk6WlPiezs5amY+cMtgbfVbT22pkQVOYtYw:8FE2VTZ3Ik66iezs5V3tmVbThLjtv

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.media.ver13115
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4050
  • com.media.ver13115:service
    1⤵
      PID:4141

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.media.ver13115/databases/downloadProvider.db
      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/com.media.ver13115/databases/downloadProvider.db-journal
      Filesize

      524B

      MD5

      aba45655e337aeccbb2ef245c2ad235a

      SHA1

      8e7c499386d7a653c96b12ab85f426753875700f

      SHA256

      e7dcea5a6d206b17edcf369522300dbd092c6f9e7e5c47225827834c6466ce8e

      SHA512

      0b8ba95d2a23ddea0ed713bcedb24701f0d43b0ec69ef993edb005f0a8e15e9a6aacc306dae28f2858cad05a145151e57412638ee164207a486c02ea51b52a8a

    • /data/user/0/com.media.ver13115/databases/downloadProvider.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.media.ver13115/databases/downloadProvider.db-wal
      Filesize

      28KB

      MD5

      2e6cdb42c9a3fa86b4f2539c13ec506d

      SHA1

      46e6538654c0670e020353252a5cd4f40ceb019a

      SHA256

      56d25251d55f81bfd7cd78c5b277637827d39ab4cd852e63ae9e475702bbca46

      SHA512

      44cc2246a0bc36aa7ec1de2d036dbcd8cd925e6d937593c736f8ab9ed40836edb925e37844540e8ccda25fddf2de1d390b01ba2fc1713bad25aab71a9a4a689e

    • /data/user/0/com.media.ver13115/files/b1/main/aknfile_standalone_ptl.dat
      Filesize

      11KB

      MD5

      3f86c71974a92c752e0be5827c506325

      SHA1

      6e8b205009fcb96caf90538aac7e20113b946dfe

      SHA256

      39f0376c419da5bee33cc96e156f4b6d65b94f6c96617aeace86625e257c2c5c

      SHA512

      225e7b73e64b1e608b3c5da1ce71c17ec92514540b2449bf4deb46c13ce552b87436efebcb2cc911a7e8830dcc908b9fc87a6c2c8aa041f730e55634e33c1ce9

    • /data/user/0/com.media.ver13115/files/b1/yong.dat
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.media.ver13115/files/vs_filter.txt
      Filesize

      3B

      MD5

      85d8ce590ad8981ca2c8286f79f59954

      SHA1

      61188f24396807ba7ca38919a158766de935852e

      SHA256

      8bcbb4c131df56f7c79066016241cc4bdf4e58db55c4f674e88b22365bd2e2ad

      SHA512

      83d3d75231ae36b89e0aceb2a623eec88eb5ac7f54fc7d9b2dab4c4cac6bd978826d44bd09685f86ccdccb891f11f3e89c0b0d0231447e496798c51c19ed53c4

    • /data/user/0/com.media.ver13115/files/vs_num.txt
      Filesize

      17B

      MD5

      23aa4a0c6d3f51b1666372cf598e445c

      SHA1

      26fd79aafef9e74716afa5c721a7fda59e768784

      SHA256

      137c8e81e30f7670f646d2003e705ae3ea391773c029fb5d6d49cb83006484fe

      SHA512

      fd4d811eefc0bfe7fbf88620c43a137183bfed86a0a31da9bda7550c9131cbbcdb368e8501bbad6179d907fad12e62c64c622262da54816fe1c39ef4ccd0219c

    • /data/user/0/com.media.ver13115/files/vs_ver.txt
      Filesize

      25B

      MD5

      85dad931a0532d8ca9cf286d6ab97f16

      SHA1

      b059aaea00b26ee79bbf743bfe624522a1a63daf

      SHA256

      d497e24419b69a8ca88e4c8523b0c363fa6d0ad2d52060f7792eaaed0799a517

      SHA512

      bf808dc321fe086212698aa02b7eb82e6f3a3175c2a05cbe992717aacf26c95f87013a85e1c206eff882bfa176646a8db21a9fea493024a99c50fa0783234d34

    • /data/user/0/com.media.ver13115/shared_prefs/mService.xml
      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03