Analysis
-
max time kernel
2946813s -
max time network
151s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
25-11-2022 11:10
Static task
static1
Behavioral task
behavioral1
Sample
3cf6ef8781223ba0a50331a35a3f5591a913dfd2847d3559e8f0238daeb97704.apk
Resource
android-x86-arm-20220823-en
General
-
Target
3cf6ef8781223ba0a50331a35a3f5591a913dfd2847d3559e8f0238daeb97704.apk
-
Size
188KB
-
MD5
685f5063d94fe912afc3602bb8deef5c
-
SHA1
38f342b9cf9a055d8d13fc743d200a0d2c3cbe6e
-
SHA256
3cf6ef8781223ba0a50331a35a3f5591a913dfd2847d3559e8f0238daeb97704
-
SHA512
447d4b958677962c09a284fe8b80638b7ff934a4cbc3589378612c62efd13bb554efec316a70f5eb455b23515e0f5b7a92a525ce1b0b5e34023b9af9621f7233
-
SSDEEP
3072:8lfysO2aRcTZ3+Vk6WlPiezs5amY+cMtgbfVbT22pkQVOYtYw:8FE2VTZ3Ik66iezs5V3tmVbThLjtv
Malware Config
Signatures
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.media.ver13115description ioc process Framework API call javax.crypto.Cipher.doFinal com.media.ver13115
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.media.ver13115/databases/downloadProvider.dbFilesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/user/0/com.media.ver13115/databases/downloadProvider.db-journalFilesize
524B
MD5aba45655e337aeccbb2ef245c2ad235a
SHA18e7c499386d7a653c96b12ab85f426753875700f
SHA256e7dcea5a6d206b17edcf369522300dbd092c6f9e7e5c47225827834c6466ce8e
SHA5120b8ba95d2a23ddea0ed713bcedb24701f0d43b0ec69ef993edb005f0a8e15e9a6aacc306dae28f2858cad05a145151e57412638ee164207a486c02ea51b52a8a
-
/data/user/0/com.media.ver13115/databases/downloadProvider.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.media.ver13115/databases/downloadProvider.db-walFilesize
28KB
MD52e6cdb42c9a3fa86b4f2539c13ec506d
SHA146e6538654c0670e020353252a5cd4f40ceb019a
SHA25656d25251d55f81bfd7cd78c5b277637827d39ab4cd852e63ae9e475702bbca46
SHA51244cc2246a0bc36aa7ec1de2d036dbcd8cd925e6d937593c736f8ab9ed40836edb925e37844540e8ccda25fddf2de1d390b01ba2fc1713bad25aab71a9a4a689e
-
/data/user/0/com.media.ver13115/files/b1/main/aknfile_standalone_ptl.datFilesize
11KB
MD53f86c71974a92c752e0be5827c506325
SHA16e8b205009fcb96caf90538aac7e20113b946dfe
SHA25639f0376c419da5bee33cc96e156f4b6d65b94f6c96617aeace86625e257c2c5c
SHA512225e7b73e64b1e608b3c5da1ce71c17ec92514540b2449bf4deb46c13ce552b87436efebcb2cc911a7e8830dcc908b9fc87a6c2c8aa041f730e55634e33c1ce9
-
/data/user/0/com.media.ver13115/files/b1/yong.datMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.media.ver13115/files/vs_filter.txtFilesize
3B
MD585d8ce590ad8981ca2c8286f79f59954
SHA161188f24396807ba7ca38919a158766de935852e
SHA2568bcbb4c131df56f7c79066016241cc4bdf4e58db55c4f674e88b22365bd2e2ad
SHA51283d3d75231ae36b89e0aceb2a623eec88eb5ac7f54fc7d9b2dab4c4cac6bd978826d44bd09685f86ccdccb891f11f3e89c0b0d0231447e496798c51c19ed53c4
-
/data/user/0/com.media.ver13115/files/vs_num.txtFilesize
17B
MD523aa4a0c6d3f51b1666372cf598e445c
SHA126fd79aafef9e74716afa5c721a7fda59e768784
SHA256137c8e81e30f7670f646d2003e705ae3ea391773c029fb5d6d49cb83006484fe
SHA512fd4d811eefc0bfe7fbf88620c43a137183bfed86a0a31da9bda7550c9131cbbcdb368e8501bbad6179d907fad12e62c64c622262da54816fe1c39ef4ccd0219c
-
/data/user/0/com.media.ver13115/files/vs_ver.txtFilesize
25B
MD585dad931a0532d8ca9cf286d6ab97f16
SHA1b059aaea00b26ee79bbf743bfe624522a1a63daf
SHA256d497e24419b69a8ca88e4c8523b0c363fa6d0ad2d52060f7792eaaed0799a517
SHA512bf808dc321fe086212698aa02b7eb82e6f3a3175c2a05cbe992717aacf26c95f87013a85e1c206eff882bfa176646a8db21a9fea493024a99c50fa0783234d34
-
/data/user/0/com.media.ver13115/shared_prefs/mService.xmlFilesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03