Analysis

  • max time kernel
    2947104s
  • max time network
    151s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    25-11-2022 11:10

General

  • Target

    0ced107030da9772fa0ae8b92017662865ba382c173a3fd03188f61d016ba99f.apk

  • Size

    183KB

  • MD5

    23ed713ec0ca1a25a8f7ac254c898d87

  • SHA1

    d904ea99d0fcb7ce9d06efd55321c5121c821dd5

  • SHA256

    0ced107030da9772fa0ae8b92017662865ba382c173a3fd03188f61d016ba99f

  • SHA512

    069b0b4b304ed88f26b41bf1ff9e76766ac53e53dd1c20642acd5b66d952de708430e9c85ff7575355844cfaf87e0d7c3e8d77c2112e78b8268e20ea67db7be6

  • SSDEEP

    3072:Tr02zReSL4CW2aw4aDbzuX6a/n3bpSz2WLd/wNaGzMjwzLWU:TBLm2bnzsnrpSz2WR/wP4jwzLWU

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.media.v128
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4060
  • com.media.v128:service
    1⤵
      PID:4165

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.media.v128/databases/downloadProvider.db
      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/user/0/com.media.v128/databases/downloadProvider.db-journal
      Filesize

      524B

      MD5

      a8c64966b12d1c19cb0d399129ce1754

      SHA1

      e7c64b0691eac85724960f892dbaaebdc337eca0

      SHA256

      83686925af3454c0f85fee8fb302afe025011b34825ae23504a73963a049d06c

      SHA512

      47677cce6fd04cc9c81f9244bde802ddbe43cccda76bfaf11b73f9129b21e08ef5c458228c75e5cb4aecad28157c81eb7e0a145c7b8c43af1260a9dcc031b9d0

    • /data/user/0/com.media.v128/databases/downloadProvider.db-shm
      Filesize

      8B

      MD5

      7dea362b3fac8e00956a4952a3d4f474

      SHA1

      05fe405753166f125559e7c9ac558654f107c7e9

      SHA256

      af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

      SHA512

      1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

    • /data/user/0/com.media.v128/databases/downloadProvider.db-wal
      Filesize

      28KB

      MD5

      48665853c3cde233a6d248da350cb3af

      SHA1

      bd860eed0af131277f1e2779316250028c93d412

      SHA256

      181f864459debada2f05db9a81ea82bfafbc971bdaa2406d40be812133604f91

      SHA512

      b0c336e530121cbb6d4547f48222b9008ab752fa5712ecff57af05d06f9d3cb270867d86f7e4b806c39eca50c3d0eae2998f74c961b1098952b92a7823aa16b8

    • /data/user/0/com.media.v128/files/b1/main/aknfile_standalone_ptl.dat
      Filesize

      8KB

      MD5

      15456fbf2559da3704736b6de18800f6

      SHA1

      3e41032fec3d5f0bb58ed9ee7d7e9d55a1dd2e16

      SHA256

      30406f6a66f6d002f8c8facc4ddef8e3d386c522f8078b100ac7253de6c090e7

      SHA512

      dc07e2b30a4ad12793b31402b81b11d5707796e6355bf8dc3598fb22b74bc1a7140368f17c7648a50f6fe0ced3d2be8fac5656cd198357ef3546d3297ece77b8

    • /data/user/0/com.media.v128/files/b1/yong.dat
      MD5

      d41d8cd98f00b204e9800998ecf8427e

      SHA1

      da39a3ee5e6b4b0d3255bfef95601890afd80709

      SHA256

      e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

      SHA512

      cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

    • /data/user/0/com.media.v128/files/vs_filter.txt
      Filesize

      3B

      MD5

      9766527f2b5d3e95d4a733fcfb77bd7e

      SHA1

      74cbd2c215c2c13c4b6110ada96de8891b355dda

      SHA256

      bc52dd634277c4a34a2d6210994a9a5e2ab6d33bb4a3a8963410e00ca6c15a02

      SHA512

      6b30dd9237095c5ac6469bfbe617e554d07b483bf751c827d60d030ab23641e82e499802716833712adfc6dca9e71824b5a9bf186ddf836a38fdcf3f4468ff46

    • /data/user/0/com.media.v128/files/vs_num.txt
      Filesize

      17B

      MD5

      afa67a645179a620558b98a789accc9b

      SHA1

      6ba70cec5b670bb372a0a951ff6d30870f0e96af

      SHA256

      d74b52379e1da51ce9960441bb96877f39618ea2432ac5881731b2977dee18e2

      SHA512

      86efe28696712e5f57fa44d6569a4e7ab44f39b227fdf1eb172fa017564863b5a5ae4d66de4865585f45242ad4d675e99971c6b0d19b7e7bb791d81bacff532c

    • /data/user/0/com.media.v128/files/vs_ver.txt
      Filesize

      25B

      MD5

      6f3245725999c472bcbe069559fc3115

      SHA1

      07c679215793eaf6444399c2db43df9cf8a2d5ff

      SHA256

      5c02511f4f71d88f6d419371d9ae9e408f966f43f3029f2336fc6e7fbc863fdf

      SHA512

      5fdd9f1989470b4e6cf163a128015085ef116e2ccd2f30730530eb1836d4cdcf6636063f9ee218aeab67fe3f11d5d42fd92d7a7fbbbacdf5eb4ac0afe9062b85

    • /data/user/0/com.media.v128/shared_prefs/mService.xml
      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03