Analysis
-
max time kernel
3016161s -
max time network
150s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
26-11-2022 00:58
Static task
static1
Behavioral task
behavioral1
Sample
2d7fcfe7ca9e6794b1cc1ec46cc8cf0c692c1c1a0cfdbf6e2e706b37e712df68.apk
Resource
android-x86-arm-20220823-en
General
-
Target
2d7fcfe7ca9e6794b1cc1ec46cc8cf0c692c1c1a0cfdbf6e2e706b37e712df68.apk
-
Size
688KB
-
MD5
c447bc99335961e13defb3498ca41105
-
SHA1
52f28bc898c612c51419e5f0f5c8108e6c5e2152
-
SHA256
2d7fcfe7ca9e6794b1cc1ec46cc8cf0c692c1c1a0cfdbf6e2e706b37e712df68
-
SHA512
b8f7596b47b010a888d696bba03849fa31746d29f8290cf0655396c74675f3d5042c249b483d1e2be32b9fa9ee5839678c2ee0bf99aaa85f946b67816141476a
-
SSDEEP
12288:7ndBwOvnrwvicOuRo30yJ5UfDNi9aCoAbG+q/szYqmUmHTsU:7nPwOvnrIJrA5ULNiopAbG0zY1UmHf
Malware Config
Signatures
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.gjts.ruzj.ecmvdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.gjts.ruzj.ecmv
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.gjts.ruzj.ecmv/shared_prefs/SMS_Listen_Manager.xmlFilesize
134B
MD5c0672a770ad29e1e095e8705d69dc43b
SHA1c3e1d015b10073b36083076a111b362d130edacf
SHA256fef09ca1c5f0fa2bc0c1791ba076c43577fa298dcc749e41e3d6fd3f48b0a8de
SHA512c38171084ba5a88464e644b0ad8548db25f06e2e1110d15934eeb92de261e7101659d0c8639f4df4e2e4ce4c285bd7dbbbe18e065683b2908389a69595ea6ff8
-
/data/user/0/com.gjts.ruzj.ecmv/shared_prefs/ui.xmlFilesize
122B
MD5510515bdae08c3279cede61925d2760d
SHA114e12d699e00d30cb97a8d9d7f0a0c832f11de5e
SHA256de4aeca88e449d5038b049d41cbc442c1cc453871d0386d4cf9845d75fd4edd4
SHA51287684e0e1fc38285e4e300f26eb1f7e9d174561d8404846cd99e1b5f91a20489d973ccf493c2656e3a31844b24c74a5bf94e4fdc5a4bdf2269656f1015f6ce65
-
/data/user/0/com.gjts.ruzj.ecmv/shared_prefs/ui.xmlFilesize
163B
MD5ad7449dffe8a142840c98485dea2cd53
SHA1647cfdef93910fbb6708a006c1534a2e29957a65
SHA25643a527568f123203d3c22d6282fc844289d1c05e1c5932259b161f413707665c
SHA51256679f28dfb6392244d583c4650021651f2cc1f1fd6b4a36292c1865e10232b77c33adfbf13cf4ae149cd64e560db3c062efec0679d708d74a72d3739726ce05
-
/data/user/0/com.gjts.ruzj.ecmv/shared_prefs/ui.xmlFilesize
207B
MD5b2b3441eccc5c6fa68126402428fe017
SHA1bc6288e782ccecc1d113d1daa0a58ce7310613f2
SHA256ed9a6b5e79df502228a8cc6c2bcf61aafd854ace063c24800329d377abd226ca
SHA5127f03a8d0155bdb143d6d54c99ee76e735e506ea4ac22ba17310efa7bb2708f3a674716367f8e74aa34c04b23630a44851d3e7f00ba7b7b6ce7790c847799e7b4
-
/data/user/0/com.gjts.ruzj.ecmv/shared_prefs/ui.xmlFilesize
261B
MD57ac38e619f7ad240e43906c695517ea7
SHA1e75414ccf75aa98dbf06c1e6fadf0023f25cc115
SHA256c05749386423206f6ff032e3b9a65e26034ef0fce9f557b1de009210504c86e4
SHA512d7dd339e3c01b0f81a12401273e80fe2f7b26cd9f2ebb44fa147be25f435e098b7e42a1fe4afbb1c72bb0cea96a645b02d0a1483d68434cdc5408054f5a74169
-
/data/user/0/com.gjts.ruzj.ecmv/shared_prefs/ui.xmlFilesize
311B
MD590b37d91f7840624d373fbfb215f9358
SHA111ebc01e1e0618a85e8cddac3467fd8765bfef5d
SHA25621b931e2b8a504cb36699973d9dce350ab9d5cc1cf99c525b9f3faf7f6df95c3
SHA512de9e63d6e19597ddd6b68f74cd11c3d16ef0f59964fdadd7f24cec3a3f7e6bacbdf0177b59cf3b297613165f3766ca52065efc5f06e81eff2397e34ca86e8c0a