Analysis
-
max time kernel
2979443s -
max time network
159s -
platform
android_x64 -
resource
android-x64-20220823-en -
resource tags
androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system -
submitted
25-11-2022 17:30
Static task
static1
Behavioral task
behavioral1
Sample
961fea50ceaf316835443a790b4c2f4343e1f367b8b63bb76bc0f836f0578c68.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
961fea50ceaf316835443a790b4c2f4343e1f367b8b63bb76bc0f836f0578c68.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
961fea50ceaf316835443a790b4c2f4343e1f367b8b63bb76bc0f836f0578c68.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
961fea50ceaf316835443a790b4c2f4343e1f367b8b63bb76bc0f836f0578c68.apk
-
Size
1020KB
-
MD5
149f1471d656dbacaa5c12a94e019aba
-
SHA1
65fef10898d185d575614ac3b113084313c2741b
-
SHA256
961fea50ceaf316835443a790b4c2f4343e1f367b8b63bb76bc0f836f0578c68
-
SHA512
40170f87a60d19ebcee3003182641eb745c2666a5af9568f76e3b260fd44bad7ffbcb2648fb4e74a215db80bb4581bc8d603f1e0929a634c0afb5a17e0d49acb
-
SSDEEP
24576:zihxviAr0xB1F70fI+26V1yLlvR1DlHoHoh:zcJHr6+rzyhvzlIs
Malware Config
Signatures
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
cn.yidonghuidescription ioc process Framework API call javax.crypto.Cipher.doFinal cn.yidonghui
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/cn.yidonghui/databases/yidonghui.dbFilesize
80KB
MD56259f4a0ed0bf2bcf8223c9673565f54
SHA1071dc0a177b103b99ee0818cae1e4c21f4231477
SHA2567ec6ea3bf6fcc1336609e05c76870bc12a2f1c42d5577ffa806ac87c940ca4c2
SHA5128b761e9742f72673479e54827d422377e9193d16f41b8a37bb5ba213e7373764fc1ce1f8efa39d4c5b3ebd2de2bd4113439001b76e8ec22e4411204ae119f268
-
/data/user/0/cn.yidonghui/databases/yidonghui.db-journalFilesize
1KB
MD52cd0f5ef90a4cde41ceb7cff98173f29
SHA1b2145841bb64bf2b5be1cc8a0754f43b32a168e7
SHA2563d54f3d130ab074fda45e31a1e9deab1e9dca9c5ee5de34e6deb0f67ba764c07
SHA5125f2e2dd54d0ec67c967d05654c82cadb0086206e1ab17a69892eddd60d9bdccb51c61dbe08c09ee9f62f4338621225de7aacebb81fef3c44136cb1e8119286e5
-
/data/user/0/cn.yidonghui/shared_prefs/MainActivity.xmlFilesize
119B
MD5d132b0120d87e26044c12c01b41416ff
SHA123e8025906a14e42a04392a8ad0cd33c91e9902a
SHA256042e27e73e04fe731325d3a5a5ddc87cd08831ca9b3a58a446bfe533ef992497
SHA512d93539d29f713a6236bf3d11f5796d31fadc9166a219ff2ae50c5cf0d054b617cf0d062c69f80d79ec6a224d066059050a39038169dfe4e41a015f7f6a8e7535
-
/data/user/0/cn.yidonghui/shared_prefs/MainActivity.xmlFilesize
161B
MD5ff5b7e4f04ee01c757b8cf9add030a27
SHA11e8d448b9901974b50438613c53237a34cca2807
SHA256e1f681f6bea768b60355594324eb5ad74718ef4be6840e738f4de99d8dd127cc
SHA512899618e8767581e695edea6a214f4c9d8080b73389663cdad5c5e3436be81a815fd7ccb12a6b696ae01bc7f84d9068a5b5d80a4036e93d8494de9379d54d6bde
-
/data/user/0/cn.yidonghui/shared_prefs/setting.xmlFilesize
123B
MD56c013a73717ad8a9240e26c8e5023abc
SHA1cca1af6199cc7dca228b7daca2d36026ea4bd0b8
SHA256646858f95f6e71079b1010ea3a6d47ab849ace289f91b110fb6f060d98628064
SHA512422d1da2d05c1f249b7fd88ea9dea6769d28987b5f16d54998580a800e51a7b503cad680ff26db333ebcc47857a81d4254ddefb9d6c71d3a8c983959cda330fa