Analysis

  • max time kernel
    3034466s
  • max time network
    132s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    26-11-2022 05:14

General

  • Target

    f53f37752285f79a2f502a0c264985aec3506ee1286080c4532f5e9dc84b9fa4.apk

  • Size

    2.1MB

  • MD5

    ab79cc6ad8a796388f7bef953588a00f

  • SHA1

    1a7d973296709806d223d167c379e2bc9c05bbad

  • SHA256

    f53f37752285f79a2f502a0c264985aec3506ee1286080c4532f5e9dc84b9fa4

  • SHA512

    c53b6f77910241ad0f1749469271ab2a5b4981720a0394e87d995446c407f07d63233863299b46010d346e109f0cc4aa8e93c3c319e5d819d526fde1ce838639

  • SSDEEP

    49152:yceUhWXXOkjiUhlzdKRspAaRH1EMXH87hK79VZXQeYkNzsTn:yc90nHj1hlRKRs6aRVEyH87A/ZXQeYkQ

Malware Config

Signatures

  • Reads the content of SMS inbox messages. 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.sm.a36video
    1⤵
    • Reads the content of SMS inbox messages.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4113

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.sm.a36video/databases/app_download_record
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.sm.a36video/databases/app_download_record-journal
    Filesize

    524B

    MD5

    9e5dcdb20755b9f82e59889226622ab5

    SHA1

    22b65c664ac88432371754c7125eb8f13a01c57b

    SHA256

    ec761137a60c3f6b69d35f271b98a2efc1a7764cae15f9f71892547481656a0a

    SHA512

    1cd978ffe827146d314b12dd3b81d0cf6ad1dce6bed088f5cb763103d82bb91048e6f99dc0825e7d29296dc4c5d89e5b8c1d47704bca0d5409bf14ce0d36fc4e

  • /data/user/0/com.sm.a36video/databases/app_download_record-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.sm.a36video/databases/app_download_record-wal
    Filesize

    44KB

    MD5

    2e43ad78bb8310904d2509a5d85988c6

    SHA1

    585690f8e74ca14c8b82b83478de38de83590714

    SHA256

    3c11d5bb6f421dcb59edb2b7ffb8722e1c21796e6f8cb22e9a5e51f6812c1f55

    SHA512

    2b70c3fdee23e57c608a96b105ce753b35616b9a625232a94911ff8b2e8ede5e83d95ed6f5f6889eb5bfb13cc9c5d83720934c2da43cd07c22b2e2312652189a

  • /data/user/0/com.sm.a36video/databases/sy_pay_record
    Filesize

    40KB

    MD5

    f33e40dc44dddf9886c560576fe30a70

    SHA1

    58df836a00a47eba37ba479a7aee95bcf404b2b5

    SHA256

    4438043ecb3f2ce4c482f5312042c439437aeb896181069dd6e8966f40bd3de2

    SHA512

    af1162e2b3802bbc9e4bfc43bfd1258bb40b49a601e361076c58f7dbc8f7e8b5d4e3003183dffba1c00810ac34a59fa595d8908ef9b2652578522b8c014327d9

  • /data/user/0/com.sm.a36video/databases/sy_pay_record-journal
    Filesize

    524B

    MD5

    409e04f8df327e392265cf43f2e0cbff

    SHA1

    b1f79dc89525d167b20d6a48c747759264ec7c44

    SHA256

    b0b0b6ba7b8cf2672c83f00dc4ea499b3ffeec37c694f9035f74e3d14ed04f32

    SHA512

    8788f111ee934751cc9195b7349c7f34817d1ffc08edba0200ebde3e0352519dedc5961fa0981365fec1bc062bf7827cb86c9f2d0088b33d8758df72d108777d

  • /data/user/0/com.sm.a36video/databases/sy_pay_record-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.sm.a36video/databases/sy_pay_record-wal
    Filesize

    48KB

    MD5

    fe04a93f67807fcc4e6ea5bb7a7f62e4

    SHA1

    56c7ed7890bf33464b85414d77618fc25bff49f7

    SHA256

    531886de9722a46764107c2823c04a9414979f856056d40ad64c3956a2ef0cdf

    SHA512

    2bc625f24539b28dcf03cca567cdde3cfb4851e46f0780b8e4adb9a2abcec2becacaad1c36fbc8ee8c05fd40b0d600df39f493b4d10ef8836c28d766cb243fdf

  • /data/user/0/com.sm.a36video/databases/video_record
    Filesize

    88KB

    MD5

    fc845a680461d6872021ef8db2bf8711

    SHA1

    a12c09241708e4367e125a324cc8cde42a87e9ff

    SHA256

    76600f5583e24d6d239f3c4043edb0e0b3e1f1983df263503567b5743d18e570

    SHA512

    b73cfecc51fd7e5b5309b05992a118d0dbabe94a65413a9574b87586b098360cd92c9200e267a7853c88a6f5e92fd59a9242fc093236c060002e175602004fdb

  • /data/user/0/com.sm.a36video/databases/video_record-journal
    Filesize

    524B

    MD5

    bf8d0306912bce5bf28f18f785f423fc

    SHA1

    8244da9ad36cc2026a9e418c4541266e6b41d639

    SHA256

    38d1b5619ed528b022e6d3615ab8c660de103ed11c4d652c40ff0f7f2e719706

    SHA512

    de9b8a40131d8f8aedb49843417288efa56f61fe3e574a7e996243cc11b244976b3d9f924ce60b1b4f00b8343d10f4582f7309392a9c783bb5c91f3d4ce19936

  • /data/user/0/com.sm.a36video/databases/video_record-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.sm.a36video/databases/video_record-wal
    Filesize

    96KB

    MD5

    6ca489772217a6bdc948ad3e071009df

    SHA1

    2a2e81e2d95175185427d7db751810f9351934f3

    SHA256

    2245f8f7e9318e317082e7a1a7a4dc0a83c05c91be4e9bb8c9a5cb3b5f1e3978

    SHA512

    8fab0d580612db4063b299f133d22499ef6fc993d1df326adfeb44fb8c74712e95715660e8e0a2e2c021f4e14c4ce0a7c6b2579b6356faf9eed54978b272a835

  • /data/user/0/com.sm.a36video/shared_prefs/APP_START_TIMER_INFO.xml
    Filesize

    117B

    MD5

    3b1d9e517649a810ba2f412ae2aaf644

    SHA1

    abf26973b387cfcae5178380d2e0d2fc979f31af

    SHA256

    8449f460afbd706d530b2af8920b35ac3a7e89973356dc7a4f62e71c41b94ce6

    SHA512

    baa0fd1195c4ce8e4693c68d06a777effd03cc9f6bc9be23d751ea1c0dae95a669a0b404f06f6b9a85078a768dd4f082ae3dc5d21e39a646a6ee817f3099db5c

  • /storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.opplugin_v2018.apk
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e