4cafc8bf7f6e7b578eb06214b37105f514b60068330ecf77d449e9dedb4aca00

Analysis

max time kernel
3040757s
max time network
132s
platform
android_x86
resource
android-x86-arm-20220823-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
submitted
26-11-2022 06:16

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4cafc8bf7f6e7b578eb06214b37105f514b60068330ecf77d449e9dedb4aca00.apk
Size

2.1MB
MD5

ade6b6bc1547d40b87d942a657797a6d
SHA1

48f01e0b508f45a7905e16b4a341433ebba02c07
SHA256

4cafc8bf7f6e7b578eb06214b37105f514b60068330ecf77d449e9dedb4aca00
SHA512

b879d015d6ef1c1b56c3aa52a92a896f703b17c94e4bb12eb77e06345126d67ce63e1472decd2a9a028a579d0c4e08ff3003be80a86eb59e806b20d2d78bbb5a
SSDEEP

49152:hFUhWXUOktmUhwCfvwJhAaoHQinXmvKGIhz/6eOLGyhqPbuSeYk8rLk5:hu0EHtxhwMvwJyaowq2yzy/aQqPbuSeX

Score

7^/10

infostealer ransomware

Malware Config

Signatures

Reads the content of SMS inbox messages. 1 IoCs
infostealer

Processes:

com.sm.a39video

description ioc process

URI accessed for read content://sms/inbox com.sm.a39video
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.sm.a39video

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.sm.a39video

description	ioc	process
URI accessed for read	content://sms/inbox	com.sm.a39video

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.sm.a39video

com.sm.a39video
1⤵
- Reads the content of SMS inbox messages.
- Uses Crypto APIs (Might try to encrypt user data).
PID:4061

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.sm.a39video/databases/app_download_record
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/user/0/com.sm.a39video/databases/app_download_record-journal
Filesize
524B

MD5
5ba0dcee31a49d835a483d4c0504908c

SHA1
f5fb3b6ac84170ec36056fe3f0e345d72b19d7ca

SHA256
57c42e41d339dd8a06e614fbe6e90c90929ea1e9145c45aff14fb003fc3a9c42

SHA512
66683f62a12975c9b3180b4be4940e0002db72898f8c1de9ed0014fc70993f1e21c129daeebdf498248af7aac6f9245e68b900b8271d55f6629a1dbfdf96dc66

Download Submit
/data/user/0/com.sm.a39video/databases/app_download_record-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.sm.a39video/databases/app_download_record-wal
Filesize
44KB

MD5
519f3a7e7746564179487efe00b35640

SHA1
0c2f542e6ea6809cd2fcef6ef9ad3a7081bc726c

SHA256
3a809ecf213170e0d40b3b8f8f4ee706ea187873229e74e3c54fb531d1b1e543

SHA512
206a2c33b8c6a0b5dff0704f046a34ac9ed888d8795328d185e20602d90cb11b29fcae6a658c0f2b224b43afd568aee0bfcd971de1e3f19e6babcbe1653fbcbf

Download Submit
/data/user/0/com.sm.a39video/databases/sy_pay_record
Filesize
40KB

MD5
f33e40dc44dddf9886c560576fe30a70

SHA1
58df836a00a47eba37ba479a7aee95bcf404b2b5

SHA256
4438043ecb3f2ce4c482f5312042c439437aeb896181069dd6e8966f40bd3de2

SHA512
af1162e2b3802bbc9e4bfc43bfd1258bb40b49a601e361076c58f7dbc8f7e8b5d4e3003183dffba1c00810ac34a59fa595d8908ef9b2652578522b8c014327d9

Download Submit
/data/user/0/com.sm.a39video/databases/sy_pay_record-journal
Filesize
524B

MD5
987d34fbf647b12f6afbd0fe230216ed

SHA1
2f72972239bf21ee275dc1582bf93713dae05c48

SHA256
28790ebf17123008c897a2c3c4df549f725a1813cf3797f46d0b66afcac1d267

SHA512
d9069bea07e9e0eaff2a848544c644e91e19b226344bc1e3ca4dc31aa4509fbc6864dce044f860e750147d4661ef1dbd5df4ad10ace5a8fd92605133169d830b

Download Submit
/data/user/0/com.sm.a39video/databases/sy_pay_record-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.sm.a39video/databases/sy_pay_record-wal
Filesize
48KB

MD5
09b6bfe37aa42bda4f640896294e5d3c

SHA1
f3334567f92e8407c043f4b796af819a0cc15cf5

SHA256
f0ab29382aa574f3a7438b7cc46dc99d4086438483148aaf82170c88beb72f8c

SHA512
a0174ef71af74eefc490ab03a7d932f4b3473dea9061cc6314e24e318a22b13791a952e87fc0826cbd02c7dcedc37fd49683445f2d563904374ccd49c72a657e

Download Submit
/data/user/0/com.sm.a39video/databases/video_record
Filesize
88KB

MD5
fc845a680461d6872021ef8db2bf8711

SHA1
a12c09241708e4367e125a324cc8cde42a87e9ff

SHA256
76600f5583e24d6d239f3c4043edb0e0b3e1f1983df263503567b5743d18e570

SHA512
b73cfecc51fd7e5b5309b05992a118d0dbabe94a65413a9574b87586b098360cd92c9200e267a7853c88a6f5e92fd59a9242fc093236c060002e175602004fdb

Download Submit
/data/user/0/com.sm.a39video/databases/video_record-journal
Filesize
524B

MD5
0086657e581ed7e84bc49e9a33a79969

SHA1
9fe58b07f48bba6033f722767794b5c2c80729e0

SHA256
39490ad8bfb66eaf54157c1f4b70f5dc8c2a6279328b5abc96425c1268b3de01

SHA512
a4ee8c25ca60275f84e2107aa7efb33887ec79e970270faedc76c995f5d8d6f62648b081b41dec5c54bcfc4175d273bdbc2912a805e23d4e4f075de7c5882adc

Download Submit
/data/user/0/com.sm.a39video/databases/video_record-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.sm.a39video/databases/video_record-wal
Filesize
96KB

MD5
456fa40137d87892b5811d589247cd92

SHA1
47b3837f6cba7ef38beafb75f28571fbafa95af0

SHA256
0b1130bfa56a54a261afa5db4d73e4d636638af136a1176607127829b18560b5

SHA512
1c992062d8863c8583e2c3029923d760466a637d2690b7f08cf68342fa34e6c500a4eead950a138f16ee49bea03905dad989c91a8c8177cfa9643f15a9120fc8

Download Submit
/data/user/0/com.sm.a39video/shared_prefs/APP_START_TIMER_INFO.xml
Filesize
117B

MD5
24d2b9aa47b666eaed8a4fde4febde46

SHA1
fc8050183226dd1db510febe8182d2e80125484e

SHA256
78c3aa37678cb4f1118283462c44f5639f247eff7c27b7ff42c2ae14695a2a9e

SHA512
e9fc0d2211ad3047f2bc9252962345af27dc7242116dc7989e05a838ae088a26bebf52eb4c76ab80f45c6b0c5e3e0d98c3d7519d11437fe85bd494f8cd068064

Download Submit
/storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.opplugin_v2018.apk
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads