Analysis

  • max time kernel
    2950492s
  • max time network
    134s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    25-11-2022 11:11

General

  • Target

    ac64c31ecaa58bf619ebc46c30e464e85a8d39e2027aba26ade6500be1a3cfe6.apk

  • Size

    1.8MB

  • MD5

    a987d32f2cb019083bb6e330b5ecf0f8

  • SHA1

    7fbeee4580eb44d67568fe393630b84b0bc2d6cb

  • SHA256

    ac64c31ecaa58bf619ebc46c30e464e85a8d39e2027aba26ade6500be1a3cfe6

  • SHA512

    6a2ec4c01a36d504b884a7c034b0becf14949378a7f8e259e677ffe08556bbf30e2d31a2c1e053194ad4b6ebe9619599bdc7d9bf25b850fc912c755d8a130068

  • SSDEEP

    49152:kN7b/njiVnb1qjXOsVhHNFxCGieORSt/0IvroQAdjz:kN//+R8SkHN7CbbyMIDoD9

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.beauty.shipin
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4831

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.beauty.shipin/app_webview/.com.google.Chrome.W2LhAl
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.beauty.shipin/app_webview/Web Data
    Filesize

    112KB

    MD5

    b663831f8cc130493476d94f2d7a5330

    SHA1

    043a1956ab8e40821d67043f8a9110a8eb36fb93

    SHA256

    c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7

    SHA512

    e8ee923192cdf16318febdc23362f3eeaf5c914b923f80cd3a91a2e83e94bced54460d4ef1e54accc26a7d54b89e2e10c00097e60002cf6427298dc5f18fed16

  • /data/user/0/com.beauty.shipin/app_webview/Web Data-journal
    Filesize

    1KB

    MD5

    397b1217effe4ff9a3f89e1d5cb592c2

    SHA1

    6b2a41e0626aa19dbdeeed561a19c8d3ffa418b1

    SHA256

    0044a255267a93caa216d4b2b48ccca45f3ef3a2d0c9235ba49b2eb988b168c4

    SHA512

    7d25d0c646252cad3fd76a6310a93909aa76e2f85ba41d9f6bf83102f8df08c0df03ba3bedc14b494765f40cd562ce015dd14637f8510ce8159156abba66775a

  • /data/user/0/com.beauty.shipin/app_webview/metrics_guid
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.beauty.shipin/app_webview/metrics_guid
    Filesize

    36B

    MD5

    4a49f3d9be482dab425a9d950b37d397

    SHA1

    2e5385c5dd34edb74cfbd816ce994ca9b22866fa

    SHA256

    30f26eb3be24213ca08f616b7276c8fde42eb216d624888e2b576929d400cd1b

    SHA512

    531a59af2d95ce15d547c1a1e847c8ad988f7dadd97815f498e3c7bbc5962c1deeab599979d36c758044bfbed6979932aecf6931f9de624bbef39c62b12bfa2c

  • /data/user/0/com.beauty.shipin/app_webview/variations_seed_new
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.beauty.shipin/app_webview/variations_stamp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.beauty.shipin/app_webview/webview_data.lock
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.beauty.shipin/cache/WebView/Crashpad/settings.dat
    Filesize

    40B

    MD5

    8f73d981d9fb5c7f8f20a8aebb32c968

    SHA1

    3e353edfc02572eb1e23a5cf3862569abec985ab

    SHA256

    196553b8eb4f790973ed15d87ed22bd4d056c6e1c4e1a99a07f869914b658deb

    SHA512

    542950a9b6f9d7e703fa99af19251b47269d53042d49d3b5cdd9dde3a1a3b983c80d1077d4ba2dc8ad6e36bfc3d760e5e25a83a23687e8f7687f78e207a41279

  • /data/user/0/com.beauty.shipin/cache/org.chromium.android_webview/Code Cache/js/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.beauty.shipin/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
    Filesize

    96B

    MD5

    e99da336814b0c7c5dd8af4b4cc7bfb4

    SHA1

    6e41f28f3771356fea9d219f7a8d8970ca7d7a71

    SHA256

    c5a73bc5128f9b5b6759926428557bd8dbe80a80e068f5d822a2b5682670c9ba

    SHA512

    f41c59e05723aadb0ab5596c70163a37bdb4fe6c56cf9ea3f7cd021e92d69811d5deee081a2526265aca3dec6668e6e2a130a657fb2dc76fdb4afb00af2e6b60

  • /data/user/0/com.beauty.shipin/files/__local_last_session.json
    Filesize

    105B

    MD5

    de03d5385a821931696d9834f72db889

    SHA1

    1312bc9075d6ac366799475c196b3539dc507a03

    SHA256

    33d1cc29e08db3a1c16f54681d6bcf902b0c9e13f2400770052f143531d32cea

    SHA512

    a98b4342ecdda2975344c8a50c145cb1ad4b36a54fc15061e1a78ccec7a4cb2857dc1839cac580abc3948953b8d5868be1a3b3f9f7908169e2847d81b315a1b5

  • /data/user/0/com.beauty.shipin/files/__local_stat_cache.json
    Filesize

    25B

    MD5

    2d805b13f2f28dc3ca9bbcc000f49bb5

    SHA1

    9eac165b4d81258fd3967cde5cc53b53b1dabcb1

    SHA256

    c8a6624f390568f0ddcb9841336aec6a564460fdaf6624e562b32935b8956f19

    SHA512

    5db8c57bab36bcf9db698c1dce70318cbffc156dd1d1c1e09e5b7ba60aff07b598ebbf26c4bd8a2b03bd6e59ef2dde2d944a22a8d8a19ecc8378e83afb7c83b0

  • /data/user/0/com.beauty.shipin/files/mobclick_agent_cached_com.beauty.shipin
    Filesize

    120B

    MD5

    d4ccc9cd6dc5f6fcf22ad5ecf01c6468

    SHA1

    c8be8c6786aedb882fd0b179acc3356f8f58f72e

    SHA256

    72c8c5c23fe7cd72c5c9179ec63db135d55631adca7a5a7b5350cf9a1b7d2dca

    SHA512

    7e71460c46162c1c35d84da4324673ff55173b7e02a629b69f22f6c665e4b92e8b2e3888437b67452aaf0ca8c2beee019f3b880eb2d45103a63836fd3b921db0

  • /data/user/0/com.beauty.shipin/shared_prefs/Sys.xml
    Filesize

    106B

    MD5

    b178462d2cf3357b10484ce683be0cd0

    SHA1

    f3813bf732b99d58cee9712591aab21aa5b1f25f

    SHA256

    7a170fc7eb3548b52a14aa02d74dba3df910c716826facce34255dc7aaf13a28

    SHA512

    5ba0229d0182861e75d49938171cba48294501d875f7b933f508c4abb9c9be688b7a9b105b6fe4a5a688a042b4f97cc1ec0c9a91cf495e412119b2f2cde0da5e

  • /data/user/0/com.beauty.shipin/shared_prefs/Sys.xml
    Filesize

    141B

    MD5

    5c0b35c758ce5e14e70dc05e9ff9c0ff

    SHA1

    8b305bab3ea46c02779d2ff447ec8719feaa24c7

    SHA256

    bd46b013b58f527ea5933ece74cb94fd86109fe5a215b20122706335c5626afb

    SHA512

    b23bcad7064e23b5df98f58301f2f29f364a9e717af8055ef473d968c960813454ea085874116e77b770c6c9fbbd2208b676c1c03948ceba3ac2eab92a14e3b3

  • /data/user/0/com.beauty.shipin/shared_prefs/Sys.xml
    Filesize

    176B

    MD5

    db5d2d3e0d6b710be8dc23640955169e

    SHA1

    4a924e8d43ed02b168f9ff5f0afd314546ebbf4a

    SHA256

    3a0549455e84e0bc299643808867eee7b5c6dfd403d50bcaa2c9b9d474ffa215

    SHA512

    348b0e173b44ff5eb717af82369f563b9e0902ba0f606f7ba643dc4ce914787e95ef55a1913896fb5aa44745f577fe520d17932ad4d33136845ca3f079125eb3

  • /data/user/0/com.beauty.shipin/shared_prefs/Sys.xml
    Filesize

    209B

    MD5

    3e72e26848d38f232789bc35bb51d37c

    SHA1

    fa22c4864250376dcb70ae27dbb9aa2c803255a8

    SHA256

    f7a4dd6b65640b9d457f96eb385fc95be10b89348adf5c31209ead111263d744

    SHA512

    21e0987f0218c38f1521c1923a5542b55cf89574791dde4e5e6f262aa1029954779bf05679f96706ec338dfb331535c2e63eaa5188fbd6a4e6c1801882bedcd5

  • /data/user/0/com.beauty.shipin/shared_prefs/WebViewChromiumPrefs.xml
    Filesize

    127B

    MD5

    6ef709b8536878951e87c29a1518fc2b

    SHA1

    24376c70b00152501b3d98df61fa7db435339172

    SHA256

    10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6

    SHA512

    96547eff6779251a5c4941e812ec56ed273e9270265005723e1f2864688b04f3b852a90145fba4ea0ddf1e02b39d99e33d28f761b07a04d46e0e4257d8909ff9

  • /data/user/0/com.beauty.shipin/shared_prefs/shangyanhui_preferences.xml
    Filesize

    111B

    MD5

    e8693745010754ff7a03c00efefb77f1

    SHA1

    833bd3fbd8272a847d96bc8da3f1895b315d6c3e

    SHA256

    becffe80495da0d04d4a8cfba1e41e3842f87397cc9b2ea7c10031ef90b77943

    SHA512

    cb2131d927f8faa3c16faf588d8b60f87cd64e4c9986b12dbf976cd347f52ec37e6183a4ff1b2e21dd76a1b2b5192d506b74181f30f3d735199c23822e26035f

  • /data/user/0/com.beauty.shipin/shared_prefs/shangyanhui_preferences.xml
    Filesize

    165B

    MD5

    dfc9edc0ee990918bdd25f77ac949134

    SHA1

    1af9a3d6e7374052017f8e36d200b42e5eb3ccf9

    SHA256

    d8d647d45d762df0c9da12d6229b5669e33ffc47a360be4effd343b32fdcfa9a

    SHA512

    e914f990a15622d355bb3a9ea0d2a87041e7dce1b15c38adcd1731e48b75c122ce5720fe39562a73eb9aa5e5a546a8f2bb6252862b67ec69a9e55e522d90c939

  • /data/user/0/com.beauty.shipin/shared_prefs/shangyanhui_preferences.xml
    Filesize

    218B

    MD5

    5bb05a1535627f2f4aa02d52aca11ffc

    SHA1

    e3e3b500630e1bb41ba154d8f00ea6bae5952b44

    SHA256

    1c10a46ea5a036c4132793442171f68d8bd433062a6212d0b206045382341960

    SHA512

    b6244d272b43a749fe01c7328b2921c724c4eea0da9baa729efe4f5e808df3f03ca1544125a931f6290f9b5660a3dbc3f65ffa1ae48e6bcd778822a08a531abc

  • /storage/emulated/0/Android/data/com.beauty.shipin/cache/.nomedia
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e