Analysis
-
max time kernel
2950628s -
max time network
168s -
platform
android_x64 -
resource
android-x64-arm64-20220823-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system -
submitted
25-11-2022 11:11
Static task
static1
Behavioral task
behavioral1
Sample
ac64c31ecaa58bf619ebc46c30e464e85a8d39e2027aba26ade6500be1a3cfe6.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
ac64c31ecaa58bf619ebc46c30e464e85a8d39e2027aba26ade6500be1a3cfe6.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
ac64c31ecaa58bf619ebc46c30e464e85a8d39e2027aba26ade6500be1a3cfe6.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
ac64c31ecaa58bf619ebc46c30e464e85a8d39e2027aba26ade6500be1a3cfe6.apk
-
Size
1.8MB
-
MD5
a987d32f2cb019083bb6e330b5ecf0f8
-
SHA1
7fbeee4580eb44d67568fe393630b84b0bc2d6cb
-
SHA256
ac64c31ecaa58bf619ebc46c30e464e85a8d39e2027aba26ade6500be1a3cfe6
-
SHA512
6a2ec4c01a36d504b884a7c034b0becf14949378a7f8e259e677ffe08556bbf30e2d31a2c1e053194ad4b6ebe9619599bdc7d9bf25b850fc912c755d8a130068
-
SSDEEP
49152:kN7b/njiVnb1qjXOsVhHNFxCGieORSt/0IvroQAdjz:kN//+R8SkHN7CbbyMIDoD9
Malware Config
Signatures
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.beauty.shipindescription ioc process Framework API call javax.crypto.Cipher.doFinal com.beauty.shipin
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.beauty.shipin/app_webview/.com.google.Chrome.G0kU8HMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.beauty.shipin/app_webview/Default/Web DataFilesize
120KB
MD5a48cd9324b1f8754b07f00d863b840f3
SHA111c6614775b35a58f440971dfc87c8aaac6d6173
SHA2568859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
SHA51235fa712f0af4a5eeed7e00e4e59ed5027dc6609d268462fe79d92043be9ae0c5961ce9e1d2f64b1a196c9b6aa6242b8b83817b3ee4c1058596c58a99c45478b1
-
/data/user/0/com.beauty.shipin/app_webview/Default/Web Data-journalFilesize
2KB
MD5a16c88e64133bf5cc857be7dda7f58ae
SHA18fb98e2379ddcd979c2b1a928062e815f411fdcd
SHA25698f2378bbceb735e70bf8e104fab39faef59ff33a697f003dddd7c315e0cc680
SHA512a4bd3be2d97945b2b813b07a90f53a0ae0abbb2ed431d266a1dc843e6551fd9e7661b3f5daa51de09b8428ea1704f82a21e0e86a9897f53ce9e7f721ec942efc
-
/data/user/0/com.beauty.shipin/app_webview/variations_seed_newMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.beauty.shipin/app_webview/variations_stampMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.beauty.shipin/app_webview/webview_data.lockFilesize
23B
MD54212b8890ac23e4788090471f31bae24
SHA1f54150451bea6faf31e848e4262cf1924a1c57f6
SHA256e25443a86cb0afca537cf569e6f3b5ffbdd53cc08e6e6e650c7893640c2dd31c
SHA512d843c38faf66788fef5855850fffb183069e4462e61388324d8d56f2d445d3c8a2ef3ebdba3f3264b8245abdb269f874139ffee86dd43205c24b34f464e514d5
-
/data/user/0/com.beauty.shipin/cache/WebView/Crashpad/settings.datFilesize
40B
MD5bf133d598816f85a99faee5b82286639
SHA1375309f8461fa1e051dad19e0f00839585c7d4e2
SHA256a8ac28bf7413b0d413b460c50956e2994de4663deddaa815ae71c7856e03709a
SHA5129d04b55220e1db6a726c59f963c214077cce565ff35a341fb8ccd907560916554ff0c1d66df3bf69999c6ba857c3258e485e334cbcc887b17dec1d79ae79b183
-
/data/user/0/com.beauty.shipin/cache/WebView/Default/HTTP Cache/Code Cache/js/indexFilesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
/data/user/0/com.beauty.shipin/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-indexFilesize
96B
MD5ba1e5e1754350866bcba1e564872bb1b
SHA120c4c627bc438adfe522212b4d390f48cab47bd1
SHA256db77862d5b7368070e18970c8a74c3c042929d6424d36fbf8b1a7465b9247ed7
SHA5122c288d811aa70a815f4496673b56fed404e838ce6694a2e3a5cb616759e98a55e90001da6b5ffc7e17bc125db8ce3303076eeb6ba24fee3722ab5d9dd82ddf8d
-
/data/user/0/com.beauty.shipin/cache/WebView/Default/HTTP Cache/Code Cache/wasm/indexFilesize
48B
MD56d7d499960179766cd4261d12dacc411
SHA1e6f8553b0015e12b23cc551afe98763f3b1c9bed
SHA256c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
SHA5126526c668477a01a850b8757b77dd3e7be27ad1991f5cf777685efcb03a21f31b71f6eae00f326931599baae4b16360e33e3d0f2894f1b2c1753391df02a14547
-
/data/user/0/com.beauty.shipin/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-indexFilesize
96B
MD537580175f6ef1e8b614d53deeda4ba14
SHA1e8c7a1eff08045f9c870c99a648866971ba28719
SHA256f5ac85852d2b616d8c553e169c69a23ce34f9df73d0dfe7c084c9cd46254b3c9
SHA512e66168b35be7889066c1d2ff83a3b8739ecacefb8a60a20217ade3b461c4015dd39c84dcb0fdd2ef201f7737617a96c9c048fd87858b5c246dc552e63f598f94
-
/data/user/0/com.beauty.shipin/cache/WebView/font_unique_name_table.pbFilesize
57KB
MD5f080fa2a56ab5479d58063e5ea871447
SHA14b3fd57a98916fa5784305b76ba30af26b5253d9
SHA2560aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
SHA5128aee3186a95b389d39882620b7c4199a29aa50580aa98a381b2931a934de6406943c89d4d00ebeabff21e2b03b4a4adcc01e37e32a2335c4838be24bdbf61936
-
/data/user/0/com.beauty.shipin/files/__local_last_session.jsonFilesize
105B
MD5be29b4f211e121bd58437a662d1f18a5
SHA192c4e4c31c50d4a113cd22b4bbc1a1d841b33026
SHA25679bc72531f24e7a594a058f4407624a0c0ddcff876d72ceadfc01b7d13e948d4
SHA512f04ae9cd15d94e0a004010d8a10b3995c1ade0b977a2910efe8c6b514c3fb1221d546b878369e5e025a7c9a54df16867710165e0b54df02f03cfc00cd23ec48c
-
/data/user/0/com.beauty.shipin/files/mobclick_agent_cached_com.beauty.shipinFilesize
120B
MD528b9a135671b254978b3639cf3face02
SHA15e0f425a575bc0e19b50a193bebd037280d72637
SHA2561a069846b991bd2fb34fdde558c0ea174e439aced5132ee8b8e706caeef5ae96
SHA5128026de91bac10cd7b76b30619ca5a0387a0655ea3d24e9d85cb40bab97ca66f30a8867deb9a741fff216b349c4c5f9437f3b25d5eb8ebd4b71843c68e19d8cea
-
/data/user/0/com.beauty.shipin/shared_prefs/Sys.xmlFilesize
106B
MD5b178462d2cf3357b10484ce683be0cd0
SHA1f3813bf732b99d58cee9712591aab21aa5b1f25f
SHA2567a170fc7eb3548b52a14aa02d74dba3df910c716826facce34255dc7aaf13a28
SHA5125ba0229d0182861e75d49938171cba48294501d875f7b933f508c4abb9c9be688b7a9b105b6fe4a5a688a042b4f97cc1ec0c9a91cf495e412119b2f2cde0da5e
-
/data/user/0/com.beauty.shipin/shared_prefs/Sys.xmlFilesize
141B
MD55c0b35c758ce5e14e70dc05e9ff9c0ff
SHA18b305bab3ea46c02779d2ff447ec8719feaa24c7
SHA256bd46b013b58f527ea5933ece74cb94fd86109fe5a215b20122706335c5626afb
SHA512b23bcad7064e23b5df98f58301f2f29f364a9e717af8055ef473d968c960813454ea085874116e77b770c6c9fbbd2208b676c1c03948ceba3ac2eab92a14e3b3
-
/data/user/0/com.beauty.shipin/shared_prefs/Sys.xmlFilesize
176B
MD5db5d2d3e0d6b710be8dc23640955169e
SHA14a924e8d43ed02b168f9ff5f0afd314546ebbf4a
SHA2563a0549455e84e0bc299643808867eee7b5c6dfd403d50bcaa2c9b9d474ffa215
SHA512348b0e173b44ff5eb717af82369f563b9e0902ba0f606f7ba643dc4ce914787e95ef55a1913896fb5aa44745f577fe520d17932ad4d33136845ca3f079125eb3
-
/data/user/0/com.beauty.shipin/shared_prefs/Sys.xmlFilesize
209B
MD53e72e26848d38f232789bc35bb51d37c
SHA1fa22c4864250376dcb70ae27dbb9aa2c803255a8
SHA256f7a4dd6b65640b9d457f96eb385fc95be10b89348adf5c31209ead111263d744
SHA51221e0987f0218c38f1521c1923a5542b55cf89574791dde4e5e6f262aa1029954779bf05679f96706ec338dfb331535c2e63eaa5188fbd6a4e6c1801882bedcd5
-
/data/user/0/com.beauty.shipin/shared_prefs/WebViewChromiumPrefs.xmlFilesize
127B
MD597ccd9a2b2063143df56b6937f961ca4
SHA15e78a91ae5df289ce83443cb7d5589dd3504fb5d
SHA256248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
SHA51286c05a5bb3d7eedea390664796966e9e5a5bf846c85808da54407788a76b3ee25b91428242a1e76d8765bfe51e1ba3636617fbab6e7dbb39fcc433e07c3fcd3b
-
/data/user/0/com.beauty.shipin/shared_prefs/shangyanhui_preferences.xmlFilesize
111B
MD5e8693745010754ff7a03c00efefb77f1
SHA1833bd3fbd8272a847d96bc8da3f1895b315d6c3e
SHA256becffe80495da0d04d4a8cfba1e41e3842f87397cc9b2ea7c10031ef90b77943
SHA512cb2131d927f8faa3c16faf588d8b60f87cd64e4c9986b12dbf976cd347f52ec37e6183a4ff1b2e21dd76a1b2b5192d506b74181f30f3d735199c23822e26035f
-
/data/user/0/com.beauty.shipin/shared_prefs/shangyanhui_preferences.xmlFilesize
165B
MD5dfc9edc0ee990918bdd25f77ac949134
SHA11af9a3d6e7374052017f8e36d200b42e5eb3ccf9
SHA256d8d647d45d762df0c9da12d6229b5669e33ffc47a360be4effd343b32fdcfa9a
SHA512e914f990a15622d355bb3a9ea0d2a87041e7dce1b15c38adcd1731e48b75c122ce5720fe39562a73eb9aa5e5a546a8f2bb6252862b67ec69a9e55e522d90c939
-
/data/user/0/com.beauty.shipin/shared_prefs/shangyanhui_preferences.xmlFilesize
219B
MD5fccff048fa46e260957c67d6f91b9192
SHA1ef138477dd2a999e275429ac81a93db5a67497f8
SHA256a5834e13c74cb13cb1f79702c7cba4ff1d0bf3d4bcc72473495c3b15ffaa4f16
SHA512591a829e20c3cb09a01d265e358ad6240cd9a32de60b39ef10cbc854ce12d245b41cb418f8c21cc06d4f37d5d192035053fa9980d3a588e9212bed8b8ada82c9