Analysis
-
max time kernel
2950809s -
max time network
153s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
25-11-2022 11:29
Static task
static1
Behavioral task
behavioral1
Sample
aceb1a1caed9ceac1794df1dff11b19f9d046c0f10e0850d0f6e15d9218a4266.apk
Resource
android-x86-arm-20220823-en
General
-
Target
aceb1a1caed9ceac1794df1dff11b19f9d046c0f10e0850d0f6e15d9218a4266.apk
-
Size
670KB
-
MD5
ef5c9cdbc189d1db37ba52025aea5beb
-
SHA1
b15cf07437addde70784d07d5d168d1c7c1d73da
-
SHA256
aceb1a1caed9ceac1794df1dff11b19f9d046c0f10e0850d0f6e15d9218a4266
-
SHA512
859bd8cb08242aa4f70018c42820dbeec3aa853355a0f20994f88916af630830364443837383d5ed2cba4ad9d5a78c03732166e237bbfc0cca12b067497758b4
-
SSDEEP
12288:7ALEtLBJHBqXec7QS9dj4GALEtLBJ6BqXec7QS9djB421gV6:7ALcBJAXBQgdj4GALcBJDXBQgdjBzgY
Malware Config
Signatures
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.media.v128description ioc process Framework API call javax.crypto.Cipher.doFinal com.media.v128
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.media.v128/databases/downloadProvider.dbFilesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/user/0/com.media.v128/databases/downloadProvider.db-journalFilesize
524B
MD570a65d02fc2fdc5c43113d07854554d6
SHA139b8554de048a60020d463bd76370f7bc78c5cd7
SHA2566f64a2cc4599c970a3225df8cacb62513877aa775251c2175a3903af43d34167
SHA512ee42b06f16f6c5aefb0dd62a865dc01bf2ec5b29dc2846fcbc1b2830dd0da67d06c0062b1e8e1fcf1ef54924298b0f0837868df6e72e8d6348c7889dbc8803a0
-
/data/user/0/com.media.v128/databases/downloadProvider.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.media.v128/databases/downloadProvider.db-walFilesize
28KB
MD51cf267ec919698f22e64537073e93606
SHA1c09aa76f4d98b7ec8e423044248c0849dc3c1836
SHA256c1e0ba80d6ddc660ee98ce97280c767fd1f36879097505eaa8fdcc4c7b38cdc8
SHA5128bf1fd1f30da01dfe9fd0b9b1324b3cb31be525a181206121a62aea17aa45bbf93e9cef79060aab91739e6f7099b4c19d09affc8a9de72900c9547eba375a642
-
/data/user/0/com.media.v128/files/b1/main/aknfile_standalone_ptl.datFilesize
8KB
MD515456fbf2559da3704736b6de18800f6
SHA13e41032fec3d5f0bb58ed9ee7d7e9d55a1dd2e16
SHA25630406f6a66f6d002f8c8facc4ddef8e3d386c522f8078b100ac7253de6c090e7
SHA512dc07e2b30a4ad12793b31402b81b11d5707796e6355bf8dc3598fb22b74bc1a7140368f17c7648a50f6fe0ced3d2be8fac5656cd198357ef3546d3297ece77b8
-
/data/user/0/com.media.v128/files/b1/yong.datMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.media.v128/files/vs_filter.txtFilesize
3B
MD59766527f2b5d3e95d4a733fcfb77bd7e
SHA174cbd2c215c2c13c4b6110ada96de8891b355dda
SHA256bc52dd634277c4a34a2d6210994a9a5e2ab6d33bb4a3a8963410e00ca6c15a02
SHA5126b30dd9237095c5ac6469bfbe617e554d07b483bf751c827d60d030ab23641e82e499802716833712adfc6dca9e71824b5a9bf186ddf836a38fdcf3f4468ff46
-
/data/user/0/com.media.v128/files/vs_num.txtFilesize
17B
MD5ff8cd4fe6930510568c5d69992d881ea
SHA1590a09dbe30029230a8245af5a6025ed1912826b
SHA256d3fd35448ca82c4d31b2eb27a332161b4ac27487bf8f526554cbce638669952c
SHA5123522b547694e21a3d53cf3cf9867ebd2d0144fdcfd14fff3b3e675b153d8990b768b3708840f5170f264954cb445fd1addc58ec30007fc304953567095215204
-
/data/user/0/com.media.v128/files/vs_ver.txtFilesize
25B
MD551625990350e777f1cfc3126710ee51e
SHA1d9f79bed3ee1fff6c5a4c68726fa4e39d0cd2ebb
SHA2569daa9d9817863e8627bc4003f7ecc743fe8db333f3841b32d4123b6d605832c7
SHA5128f5e39d27a93deb7ff26cefe98f63ec979d72fd4161d4e901af6b3c030a783c020e36c963679dd2fd44259606fcdfc1ba40204dd8213640375af503971553d03
-
/data/user/0/com.media.v128/shared_prefs/mService.xmlFilesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03
-
/data/user/0/com.media.v128/shared_prefs/r.times.xmlFilesize
101B
MD5e1ef566249ba7c829ebda3149f605e76
SHA1505f2a0c7c6a3375f586ce4a2135c1f954bd85b4
SHA256072eca118e60a7a559d36431f0492232d1ed8753c0654c95910b9180bdbb66ab
SHA5125c836ada1dac78f358354876635e58890a9ad2152842ae4190b362a549d23b0a8913168529a948202120bb9883544d901eded1f28739e899c35bdccbd53e8e35