Analysis

  • max time kernel
    2950628s
  • max time network
    168s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    25-11-2022 11:11

General

  • Target

    ac64c31ecaa58bf619ebc46c30e464e85a8d39e2027aba26ade6500be1a3cfe6.apk

  • Size

    1.8MB

  • MD5

    a987d32f2cb019083bb6e330b5ecf0f8

  • SHA1

    7fbeee4580eb44d67568fe393630b84b0bc2d6cb

  • SHA256

    ac64c31ecaa58bf619ebc46c30e464e85a8d39e2027aba26ade6500be1a3cfe6

  • SHA512

    6a2ec4c01a36d504b884a7c034b0becf14949378a7f8e259e677ffe08556bbf30e2d31a2c1e053194ad4b6ebe9619599bdc7d9bf25b850fc912c755d8a130068

  • SSDEEP

    49152:kN7b/njiVnb1qjXOsVhHNFxCGieORSt/0IvroQAdjz:kN//+R8SkHN7CbbyMIDoD9

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.beauty.shipin
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4620

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.beauty.shipin/app_webview/.com.google.Chrome.G0kU8H
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.beauty.shipin/app_webview/Default/Web Data
    Filesize

    120KB

    MD5

    a48cd9324b1f8754b07f00d863b840f3

    SHA1

    11c6614775b35a58f440971dfc87c8aaac6d6173

    SHA256

    8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420

    SHA512

    35fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1

  • /data/user/0/com.beauty.shipin/app_webview/Default/Web Data-journal
    Filesize

    2KB

    MD5

    a16c88e64133bf5cc857be7dda7f58ae

    SHA1

    8fb98e2379ddcd979c2b1a928062e815f411fdcd

    SHA256

    98f2378bbceb735e70bf8e104fab39faef59ff33a697f003dddd7c315e0cc680

    SHA512

    a4bd3be2d97945b2b813b07a90f53a0ae0abbb2ed431d266a1dc843e6551fd9e7661b3f5daa51de09b8428ea1704f82a21e0e86a9897f53ce9e7f721ec942efc

  • /data/user/0/com.beauty.shipin/app_webview/variations_seed_new
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.beauty.shipin/app_webview/variations_stamp
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /data/user/0/com.beauty.shipin/app_webview/webview_data.lock
    Filesize

    23B

    MD5

    4212b8890ac23e4788090471f31bae24

    SHA1

    f54150451bea6faf31e848e4262cf1924a1c57f6

    SHA256

    e25443a86cb0afca537cf569e6f3b5ffbdd53cc08e6e6e650c7893640c2dd31c

    SHA512

    d843c38faf66788fef5855850fffb183069e4462e61388324d8d56f2d445d3c8a2ef3ebdba3f3264b8245abdb269f874139ffee86dd43205c24b34f464e514d5

  • /data/user/0/com.beauty.shipin/cache/WebView/Crashpad/settings.dat
    Filesize

    40B

    MD5

    bf133d598816f85a99faee5b82286639

    SHA1

    375309f8461fa1e051dad19e0f00839585c7d4e2

    SHA256

    a8ac28bf7413b0d413b460c50956e2994de4663deddaa815ae71c7856e03709a

    SHA512

    9d04b55220e1db6a726c59f963c214077cce565ff35a341fb8ccd907560916554ff0c1d66df3bf69999c6ba857c3258e485e334cbcc887b17dec1d79ae79b183

  • /data/user/0/com.beauty.shipin/cache/WebView/Default/HTTP Cache/Code Cache/js/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.beauty.shipin/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
    Filesize

    96B

    MD5

    ba1e5e1754350866bcba1e564872bb1b

    SHA1

    20c4c627bc438adfe522212b4d390f48cab47bd1

    SHA256

    db77862d5b7368070e18970c8a74c3c042929d6424d36fbf8b1a7465b9247ed7

    SHA512

    2c288d811aa70a815f4496673b56fed404e838ce6694a2e3a5cb616759e98a55e90001da6b5ffc7e17bc125db8ce3303076eeb6ba24fee3722ab5d9dd82ddf8d

  • /data/user/0/com.beauty.shipin/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
    Filesize

    48B

    MD5

    6d7d499960179766cd4261d12dacc411

    SHA1

    e6f8553b0015e12b23cc551afe98763f3b1c9bed

    SHA256

    c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182

    SHA512

    6526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547

  • /data/user/0/com.beauty.shipin/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
    Filesize

    96B

    MD5

    37580175f6ef1e8b614d53deeda4ba14

    SHA1

    e8c7a1eff08045f9c870c99a648866971ba28719

    SHA256

    f5ac85852d2b616d8c553e169c69a23ce34f9df73d0dfe7c084c9cd46254b3c9

    SHA512

    e66168b35be7889066c1d2ff83a3b8739ecacefb8a60a20217ade3b461c4015dd39c84dcb0fdd2ef201f7737617a96c9c048fd87858b5c246dc552e63f598f94

  • /data/user/0/com.beauty.shipin/cache/WebView/font_unique_name_table.pb
    Filesize

    57KB

    MD5

    f080fa2a56ab5479d58063e5ea871447

    SHA1

    4b3fd57a98916fa5784305b76ba30af26b5253d9

    SHA256

    0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815

    SHA512

    8aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936

  • /data/user/0/com.beauty.shipin/files/__local_last_session.json
    Filesize

    105B

    MD5

    be29b4f211e121bd58437a662d1f18a5

    SHA1

    92c4e4c31c50d4a113cd22b4bbc1a1d841b33026

    SHA256

    79bc72531f24e7a594a058f4407624a0c0ddcff876d72ceadfc01b7d13e948d4

    SHA512

    f04ae9cd15d94e0a004010d8a10b3995c1ade0b977a2910efe8c6b514c3fb1221d546b878369e5e025a7c9a54df16867710165e0b54df02f03cfc00cd23ec48c

  • /data/user/0/com.beauty.shipin/files/mobclick_agent_cached_com.beauty.shipin
    Filesize

    120B

    MD5

    28b9a135671b254978b3639cf3face02

    SHA1

    5e0f425a575bc0e19b50a193bebd037280d72637

    SHA256

    1a069846b991bd2fb34fdde558c0ea174e439aced5132ee8b8e706caeef5ae96

    SHA512

    8026de91bac10cd7b76b30619ca5a0387a0655ea3d24e9d85cb40bab97ca66f30a8867deb9a741fff216b349c4c5f9437f3b25d5eb8ebd4b71843c68e19d8cea

  • /data/user/0/com.beauty.shipin/shared_prefs/Sys.xml
    Filesize

    106B

    MD5

    b178462d2cf3357b10484ce683be0cd0

    SHA1

    f3813bf732b99d58cee9712591aab21aa5b1f25f

    SHA256

    7a170fc7eb3548b52a14aa02d74dba3df910c716826facce34255dc7aaf13a28

    SHA512

    5ba0229d0182861e75d49938171cba48294501d875f7b933f508c4abb9c9be688b7a9b105b6fe4a5a688a042b4f97cc1ec0c9a91cf495e412119b2f2cde0da5e

  • /data/user/0/com.beauty.shipin/shared_prefs/Sys.xml
    Filesize

    141B

    MD5

    5c0b35c758ce5e14e70dc05e9ff9c0ff

    SHA1

    8b305bab3ea46c02779d2ff447ec8719feaa24c7

    SHA256

    bd46b013b58f527ea5933ece74cb94fd86109fe5a215b20122706335c5626afb

    SHA512

    b23bcad7064e23b5df98f58301f2f29f364a9e717af8055ef473d968c960813454ea085874116e77b770c6c9fbbd2208b676c1c03948ceba3ac2eab92a14e3b3

  • /data/user/0/com.beauty.shipin/shared_prefs/Sys.xml
    Filesize

    176B

    MD5

    db5d2d3e0d6b710be8dc23640955169e

    SHA1

    4a924e8d43ed02b168f9ff5f0afd314546ebbf4a

    SHA256

    3a0549455e84e0bc299643808867eee7b5c6dfd403d50bcaa2c9b9d474ffa215

    SHA512

    348b0e173b44ff5eb717af82369f563b9e0902ba0f606f7ba643dc4ce914787e95ef55a1913896fb5aa44745f577fe520d17932ad4d33136845ca3f079125eb3

  • /data/user/0/com.beauty.shipin/shared_prefs/Sys.xml
    Filesize

    209B

    MD5

    3e72e26848d38f232789bc35bb51d37c

    SHA1

    fa22c4864250376dcb70ae27dbb9aa2c803255a8

    SHA256

    f7a4dd6b65640b9d457f96eb385fc95be10b89348adf5c31209ead111263d744

    SHA512

    21e0987f0218c38f1521c1923a5542b55cf89574791dde4e5e6f262aa1029954779bf05679f96706ec338dfb331535c2e63eaa5188fbd6a4e6c1801882bedcd5

  • /data/user/0/com.beauty.shipin/shared_prefs/WebViewChromiumPrefs.xml
    Filesize

    127B

    MD5

    97ccd9a2b2063143df56b6937f961ca4

    SHA1

    5e78a91ae5df289ce83443cb7d5589dd3504fb5d

    SHA256

    248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd

    SHA512

    86c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b

  • /data/user/0/com.beauty.shipin/shared_prefs/shangyanhui_preferences.xml
    Filesize

    111B

    MD5

    e8693745010754ff7a03c00efefb77f1

    SHA1

    833bd3fbd8272a847d96bc8da3f1895b315d6c3e

    SHA256

    becffe80495da0d04d4a8cfba1e41e3842f87397cc9b2ea7c10031ef90b77943

    SHA512

    cb2131d927f8faa3c16faf588d8b60f87cd64e4c9986b12dbf976cd347f52ec37e6183a4ff1b2e21dd76a1b2b5192d506b74181f30f3d735199c23822e26035f

  • /data/user/0/com.beauty.shipin/shared_prefs/shangyanhui_preferences.xml
    Filesize

    165B

    MD5

    dfc9edc0ee990918bdd25f77ac949134

    SHA1

    1af9a3d6e7374052017f8e36d200b42e5eb3ccf9

    SHA256

    d8d647d45d762df0c9da12d6229b5669e33ffc47a360be4effd343b32fdcfa9a

    SHA512

    e914f990a15622d355bb3a9ea0d2a87041e7dce1b15c38adcd1731e48b75c122ce5720fe39562a73eb9aa5e5a546a8f2bb6252862b67ec69a9e55e522d90c939

  • /data/user/0/com.beauty.shipin/shared_prefs/shangyanhui_preferences.xml
    Filesize

    219B

    MD5

    fccff048fa46e260957c67d6f91b9192

    SHA1

    ef138477dd2a999e275429ac81a93db5a67497f8

    SHA256

    a5834e13c74cb13cb1f79702c7cba4ff1d0bf3d4bcc72473495c3b15ffaa4f16

    SHA512

    591a829e20c3cb09a01d265e358ad6240cd9a32de60b39ef10cbc854ce12d245b41cb418f8c21cc06d4f37d5d192035053fa9980d3a588e9212bed8b8ada82c9