Analysis

  • max time kernel
    2965583s
  • max time network
    133s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    25-11-2022 15:10

General

  • Target

    300e3d2e602cfe0bb301deb1fab6c892247cdbc645e93825b52f27841a4b2fb2.apk

  • Size

    2.0MB

  • MD5

    1c728a305d61632ed4f9fb8157704cf1

  • SHA1

    e844abd75f706b66f79ce7306ac603f839d722f0

  • SHA256

    300e3d2e602cfe0bb301deb1fab6c892247cdbc645e93825b52f27841a4b2fb2

  • SHA512

    ba4046ff07a3e52f73981bdd91eb1cc9ea86e26adcdc2daed5f1934f943768c7bd555738ae0a745431c7c1040a2f8e1661e53c020ae83ce91f7e35687a690f27

  • SSDEEP

    49152:rIy2w+zVfz7Kg2FEzE63H1g+mKEvPecqMnGp/oNc6PWoWbSG0:8ytAdCgwEnGKudGp//6AbSG0

Malware Config

Signatures

  • Reads the content of SMS inbox messages. 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • ccc.cc.sy.www
    1⤵
    • Reads the content of SMS inbox messages.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:3992

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/ccc.cc.sy.www/databases/app_download_record
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/ccc.cc.sy.www/databases/app_download_record-journal
    Filesize

    524B

    MD5

    201c3ebd2fb7540be3b4fa9be62ad71c

    SHA1

    5d97156c00cd502d0d1144da094edb8f7f227f8f

    SHA256

    8ced9ed0502c6fe7d7fbc97069a5a25daa3e596d11d7e426ab4188ccc547f54a

    SHA512

    4479948adb38a89a406ef3153b478010d93d6e1e205114893afe837ed81e0c58fb2009c37955b4db77f946c9a159c15025b56105990e224ae613436b3c760e9a

  • /data/user/0/ccc.cc.sy.www/databases/app_download_record-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ccc.cc.sy.www/databases/app_download_record-wal
    Filesize

    36KB

    MD5

    8a73082c500cfa6efe3ec98abbc13c69

    SHA1

    2e488a453b02c314f369657b4d80bf10fa1dcb22

    SHA256

    eedfe813198339289863d2efd0d46952f95c0ee1bae617a6010a0ae7330d0557

    SHA512

    a8268554377fbb06c1ba758054499d6e4d075cd643022172f72289ca669bc728d26406d1af78f85423028853bc244481015760de6daba1351f07a0ad5322fc2f

  • /data/user/0/ccc.cc.sy.www/databases/sy_pay_record
    Filesize

    40KB

    MD5

    f19b264c4a120e89e14611a976535b80

    SHA1

    964eabf503943d09088ead27c7e51f1d79bf53c7

    SHA256

    c8d924d5810871ab3e914da8b57b6c55b8a671edbb272f0c8befdc5c7c3eb028

    SHA512

    c0adaecf99041036fecf1dd93cfe2e7699e222a38816a378e0da6b4d7c16d3f2caf448b4ff5ef1e6204cdc233953192a2a2c467a63351c5aad1fdf7ae743f3c6

  • /data/user/0/ccc.cc.sy.www/databases/sy_pay_record-journal
    Filesize

    524B

    MD5

    ef8af32f6be79e678e5c5d76fb93c063

    SHA1

    9cb7499e9e3ef61ac1c1b1be07865a57968dc40d

    SHA256

    375ec88d6cb9153264d5403fa55360efcd9ac782fe8dc8de6ded9f1edeefd5ab

    SHA512

    ad291f02a6e4a004e5f1eb6dc86a5a2131b28443b279d16ec07b9a79c5a2fd4805f1a1d32367f6c64571a62805d8474f091621d0e4cf5aa9d609fa3b806a2fbd

  • /data/user/0/ccc.cc.sy.www/databases/sy_pay_record-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ccc.cc.sy.www/databases/sy_pay_record-wal
    Filesize

    48KB

    MD5

    00c2976d0fe4dbdde1df181204bce72d

    SHA1

    c8fe647c8e3bfa8a2cb0fbd638af2b0aae8a2eaf

    SHA256

    07a369fb92e55995b1460a3482e5a36aa744bfdc0fe6c6966b3c190fb44df3b8

    SHA512

    f2d40efd8b14e1f27d3e0de055d789628504e1732d5beb2394f29da0fb660f4d962dea6cc65fbe6e7007469c18c4d20b1c985e98602a8b62ce1d746c68a2fb32

  • /data/user/0/ccc.cc.sy.www/databases/video_record
    Filesize

    88KB

    MD5

    fc845a680461d6872021ef8db2bf8711

    SHA1

    a12c09241708e4367e125a324cc8cde42a87e9ff

    SHA256

    76600f5583e24d6d239f3c4043edb0e0b3e1f1983df263503567b5743d18e570

    SHA512

    b73cfecc51fd7e5b5309b05992a118d0dbabe94a65413a9574b87586b098360cd92c9200e267a7853c88a6f5e92fd59a9242fc093236c060002e175602004fdb

  • /data/user/0/ccc.cc.sy.www/databases/video_record-journal
    Filesize

    524B

    MD5

    7832cc59e5141dcd06d6425f7e9aaef7

    SHA1

    ac8d494ffb8329161b0ab705affebb1ff7298fa3

    SHA256

    f7a5881ae3684dc1b7872db3aa0134b86aab59243e0a4f3959673684ee9fee9d

    SHA512

    dcf28c00ea9331b8f033f552eb58af682e14ee89672f9b4a7dddddf18dd3c9d9840e44a6aeab24a3f3fb41d8f4c74e70fdf4502088ef7cf3aa3ad19cd8e4f1f7

  • /data/user/0/ccc.cc.sy.www/databases/video_record-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/ccc.cc.sy.www/databases/video_record-wal
    Filesize

    96KB

    MD5

    cd0ecb72e5f54265e6426e23aaf14b47

    SHA1

    e7dd97169498a3e25805c2fc12b0c61d1346f13e

    SHA256

    ab6a6ee7ee5a02ea512642abe63cfc9534dc02528d9e1ef54a211b560668dba1

    SHA512

    27c7b73fcf56cd836b88824d74f591453786cc398af98379a5d4f795b1c4994f6b1ff964aaa9ccf50d5ee8edb1cf91bc079a34b16347c7a2ef385e59032d38c4

  • /data/user/0/ccc.cc.sy.www/shared_prefs/APP_START_TIMER_INFO.xml
    Filesize

    117B

    MD5

    6f041b5c594337397ff87a6509a18485

    SHA1

    5eb33692251f5e64e390b94f3e4949c6331172fc

    SHA256

    cd36e5c3ff46e4c474e39dfba4bd5e7ec880e162c78eddb96472fa6cefb2bf86

    SHA512

    461bbb3ccfe1bfdd32374d7db9663c26c39131fa45e076c6efbfed9eb225a1d9b930c0179f0fbb2aab387208bc1edabad55488c342ff811653c4747747d3ba6d

  • /storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.opplugin_V2014.apk
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /storage/emulated/0/syAdAssets/AdPlan.apk
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e