3fbaebb7ada6ebd4a9b75208210d50e05fc58d45ebb66173dbaa9a9894212b27

Analysis

max time kernel
2965534s
max time network
130s
platform
android_x86
resource
android-x86-arm-20220823-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
submitted
25-11-2022 15:00

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

3fbaebb7ada6ebd4a9b75208210d50e05fc58d45ebb66173dbaa9a9894212b27.apk
Size

2.0MB
MD5

2eedd5201550f66c278548e0f4c37bd3
SHA1

cb3e705d09a72737d590b85fa5e506338671705c
SHA256

3fbaebb7ada6ebd4a9b75208210d50e05fc58d45ebb66173dbaa9a9894212b27
SHA512

d4c750a418ff75720f95150ad925240b5d8651d530c85a3134d9d92e18803297ae1b7ec941411e2f0ec9bcb0a8938639c147888485153b1261378575ec0c7432
SSDEEP

49152:Qah0yP5yw5wecKgmWRKwqPeRrD6BKgsUXhMOcEn+zVEkDELR:Pfleoa/cpXhMNEnklDELR

Score

7^/10

infostealer ransomware

Malware Config

Signatures

Reads the content of SMS inbox messages. 1 IoCs
infostealer

Processes:

kkk.kk.sy.www

description ioc process

URI accessed for read content://sms/inbox kkk.kk.sy.www
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

kkk.kk.sy.www

description ioc process

Framework API call javax.crypto.Cipher.doFinal kkk.kk.sy.www

description	ioc	process
URI accessed for read	content://sms/inbox	kkk.kk.sy.www

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	kkk.kk.sy.www

kkk.kk.sy.www
1⤵
- Reads the content of SMS inbox messages.
- Uses Crypto APIs (Might try to encrypt user data).
PID:4087

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/kkk.kk.sy.www/databases/app_download_record

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/user/0/kkk.kk.sy.www/databases/app_download_record-journal

Filesize
524B

MD5
48163a8158e254917ba9a7941de71783

SHA1
1a07d31140d30f0a002cc1928d2715ad94cbbe73

SHA256
0235087ea43e9fc84889748e504b6975a525f4592bd72593ea230ea913db537c

SHA512
11c980f49aec022f057236f3237f46240502f8d336628d8705e3fc88cc6d6be0abee33a780791e875a852ba2503caa240476c034119732ebb9627285cd2c62c8

Download Submit
/data/user/0/kkk.kk.sy.www/databases/app_download_record-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/kkk.kk.sy.www/databases/app_download_record-wal

Filesize
36KB

MD5
3e94893a98c0d25e2148a82eef073cc1

SHA1
447e3c785fcebeaaf9526efa0caa6c8069e61e21

SHA256
8ae5550416a25eb8a9f29f9f4bff53cf0382bb51cb38a4fc604b2da238381e68

SHA512
7f87dd2afd95f7544696bdc60b9d8d2bc552a0f254f654cbb5d550de7606beeb67fef7449c9ebf8af7870dc4edc3b37c1019f0828785c7a6a959ace6efbb0435

Download Submit
/data/user/0/kkk.kk.sy.www/databases/sy_pay_record

Filesize
40KB

MD5
f33e40dc44dddf9886c560576fe30a70

SHA1
58df836a00a47eba37ba479a7aee95bcf404b2b5

SHA256
4438043ecb3f2ce4c482f5312042c439437aeb896181069dd6e8966f40bd3de2

SHA512
af1162e2b3802bbc9e4bfc43bfd1258bb40b49a601e361076c58f7dbc8f7e8b5d4e3003183dffba1c00810ac34a59fa595d8908ef9b2652578522b8c014327d9

Download Submit
/data/user/0/kkk.kk.sy.www/databases/sy_pay_record-journal

Filesize
524B

MD5
6cd1569f4f841a0d009304d3f1690a9e

SHA1
157092800ebaa6d8b9bfc0569f262b5d5ba4e149

SHA256
f8a1d711bb0e0a3c16777593776f01a848d099f5a2d830ec0430e4d82b90b4e9

SHA512
e44276d4fc875e30ad92e500a27401c75778aa71ac6e3727de4213bdaa200147af34cbdb0085fb7d901bb40e8e04a94e1512296f119474c1a6025c6e7dc3894a

Download Submit
/data/user/0/kkk.kk.sy.www/databases/sy_pay_record-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/kkk.kk.sy.www/databases/sy_pay_record-wal

Filesize
48KB

MD5
fe298129f1ce0f9523e6ef2c9f2372f6

SHA1
530bbbdbb08b0523860e6f07e7dd74709bd67da8

SHA256
e27a9e8b556d8d115787ddfee912cefd7139ab062414e14f7178c6691396b5d9

SHA512
19e8c988caa950997c997f618a3159e0d5dde4dc2d70321fabc9e82287e3c90d0aa53e93756290e94819d53717d847e242aa71977a8cd1e7aa88c4a92543a8ea

Download Submit
/data/user/0/kkk.kk.sy.www/databases/video_record

Filesize
88KB

MD5
fc845a680461d6872021ef8db2bf8711

SHA1
a12c09241708e4367e125a324cc8cde42a87e9ff

SHA256
76600f5583e24d6d239f3c4043edb0e0b3e1f1983df263503567b5743d18e570

SHA512
b73cfecc51fd7e5b5309b05992a118d0dbabe94a65413a9574b87586b098360cd92c9200e267a7853c88a6f5e92fd59a9242fc093236c060002e175602004fdb

Download Submit
/data/user/0/kkk.kk.sy.www/databases/video_record-journal

Filesize
524B

MD5
0256f67aa8861547e81c88442d847979

SHA1
5ae9cdd32851f10ef4e2a026bb2458b71d124b2b

SHA256
08e4302171b77a00676603867694cf72405bae9771bcdf3a4a5faaf4ee142a19

SHA512
3f449a1fdfcd037ede26e444552957c1e5aaea27158f02e1e386b426cf5125f4d59f6f96b63b7dce0d668ea252e9ac08ebfc331c6698619de2fa38d9de6b496c

Download Submit
/data/user/0/kkk.kk.sy.www/databases/video_record-shm

Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/kkk.kk.sy.www/databases/video_record-wal

Filesize
96KB

MD5
ae002acdfb9ed7aa6a069af41dd8977a

SHA1
62f3a4317c05ac0efb4d85f128d4fa2e3f2ab3b7

SHA256
ec27fb1c6c60da499cf05af142d0a80b7c2179109cc7234e93c9aaa875fc6b18

SHA512
988d7115a01a2831b2624cb549f15864858007690004d14a9528ebf98819526093c7925021c1881b7461aff61bd0b26ba81b34e27a275928094b71f6598af39d

Download Submit
/data/user/0/kkk.kk.sy.www/shared_prefs/APP_START_TIMER_INFO.xml

Filesize
117B

MD5
6c28cefc69c63282fe263cbb825e43d8

SHA1
a1a797dd0840da2565e87832f52a5e31696c8199

SHA256
4840d71510f87917b9bea6676b930e47d53b5ea8ca9916b8857de33290cb7476

SHA512
26870d4de2bfcb0382d8d829942a1ced302e7aeafe674a047c816ffced60d0b5ccabd601a9f261bf68a5b120ffab8007784c5c7df30c6cf37c51b1a0423b9ce0

Download Submit
/storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.opplugin_V2014.apk

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit
/storage/emulated/0/syAdAssets/AdPlan6.apk

MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads