Analysis

  • max time kernel
    3040757s
  • max time network
    132s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    26-11-2022 06:16

General

  • Target

    4cafc8bf7f6e7b578eb06214b37105f514b60068330ecf77d449e9dedb4aca00.apk

  • Size

    2.1MB

  • MD5

    ade6b6bc1547d40b87d942a657797a6d

  • SHA1

    48f01e0b508f45a7905e16b4a341433ebba02c07

  • SHA256

    4cafc8bf7f6e7b578eb06214b37105f514b60068330ecf77d449e9dedb4aca00

  • SHA512

    b879d015d6ef1c1b56c3aa52a92a896f703b17c94e4bb12eb77e06345126d67ce63e1472decd2a9a028a579d0c4e08ff3003be80a86eb59e806b20d2d78bbb5a

  • SSDEEP

    49152:hFUhWXUOktmUhwCfvwJhAaoHQinXmvKGIhz/6eOLGyhqPbuSeYk8rLk5:hu0EHtxhwMvwJyaowq2yzy/aQqPbuSeX

Malware Config

Signatures

  • Reads the content of SMS inbox messages. 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.sm.a39video
    1⤵
    • Reads the content of SMS inbox messages.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4061

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.sm.a39video/databases/app_download_record

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.sm.a39video/databases/app_download_record-journal

    Filesize

    524B

    MD5

    5ba0dcee31a49d835a483d4c0504908c

    SHA1

    f5fb3b6ac84170ec36056fe3f0e345d72b19d7ca

    SHA256

    57c42e41d339dd8a06e614fbe6e90c90929ea1e9145c45aff14fb003fc3a9c42

    SHA512

    66683f62a12975c9b3180b4be4940e0002db72898f8c1de9ed0014fc70993f1e21c129daeebdf498248af7aac6f9245e68b900b8271d55f6629a1dbfdf96dc66

  • /data/user/0/com.sm.a39video/databases/app_download_record-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.sm.a39video/databases/app_download_record-wal

    Filesize

    44KB

    MD5

    519f3a7e7746564179487efe00b35640

    SHA1

    0c2f542e6ea6809cd2fcef6ef9ad3a7081bc726c

    SHA256

    3a809ecf213170e0d40b3b8f8f4ee706ea187873229e74e3c54fb531d1b1e543

    SHA512

    206a2c33b8c6a0b5dff0704f046a34ac9ed888d8795328d185e20602d90cb11b29fcae6a658c0f2b224b43afd568aee0bfcd971de1e3f19e6babcbe1653fbcbf

  • /data/user/0/com.sm.a39video/databases/sy_pay_record

    Filesize

    40KB

    MD5

    f33e40dc44dddf9886c560576fe30a70

    SHA1

    58df836a00a47eba37ba479a7aee95bcf404b2b5

    SHA256

    4438043ecb3f2ce4c482f5312042c439437aeb896181069dd6e8966f40bd3de2

    SHA512

    af1162e2b3802bbc9e4bfc43bfd1258bb40b49a601e361076c58f7dbc8f7e8b5d4e3003183dffba1c00810ac34a59fa595d8908ef9b2652578522b8c014327d9

  • /data/user/0/com.sm.a39video/databases/sy_pay_record-journal

    Filesize

    524B

    MD5

    987d34fbf647b12f6afbd0fe230216ed

    SHA1

    2f72972239bf21ee275dc1582bf93713dae05c48

    SHA256

    28790ebf17123008c897a2c3c4df549f725a1813cf3797f46d0b66afcac1d267

    SHA512

    d9069bea07e9e0eaff2a848544c644e91e19b226344bc1e3ca4dc31aa4509fbc6864dce044f860e750147d4661ef1dbd5df4ad10ace5a8fd92605133169d830b

  • /data/user/0/com.sm.a39video/databases/sy_pay_record-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.sm.a39video/databases/sy_pay_record-wal

    Filesize

    48KB

    MD5

    09b6bfe37aa42bda4f640896294e5d3c

    SHA1

    f3334567f92e8407c043f4b796af819a0cc15cf5

    SHA256

    f0ab29382aa574f3a7438b7cc46dc99d4086438483148aaf82170c88beb72f8c

    SHA512

    a0174ef71af74eefc490ab03a7d932f4b3473dea9061cc6314e24e318a22b13791a952e87fc0826cbd02c7dcedc37fd49683445f2d563904374ccd49c72a657e

  • /data/user/0/com.sm.a39video/databases/video_record

    Filesize

    88KB

    MD5

    fc845a680461d6872021ef8db2bf8711

    SHA1

    a12c09241708e4367e125a324cc8cde42a87e9ff

    SHA256

    76600f5583e24d6d239f3c4043edb0e0b3e1f1983df263503567b5743d18e570

    SHA512

    b73cfecc51fd7e5b5309b05992a118d0dbabe94a65413a9574b87586b098360cd92c9200e267a7853c88a6f5e92fd59a9242fc093236c060002e175602004fdb

  • /data/user/0/com.sm.a39video/databases/video_record-journal

    Filesize

    524B

    MD5

    0086657e581ed7e84bc49e9a33a79969

    SHA1

    9fe58b07f48bba6033f722767794b5c2c80729e0

    SHA256

    39490ad8bfb66eaf54157c1f4b70f5dc8c2a6279328b5abc96425c1268b3de01

    SHA512

    a4ee8c25ca60275f84e2107aa7efb33887ec79e970270faedc76c995f5d8d6f62648b081b41dec5c54bcfc4175d273bdbc2912a805e23d4e4f075de7c5882adc

  • /data/user/0/com.sm.a39video/databases/video_record-shm

    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.sm.a39video/databases/video_record-wal

    Filesize

    96KB

    MD5

    456fa40137d87892b5811d589247cd92

    SHA1

    47b3837f6cba7ef38beafb75f28571fbafa95af0

    SHA256

    0b1130bfa56a54a261afa5db4d73e4d636638af136a1176607127829b18560b5

    SHA512

    1c992062d8863c8583e2c3029923d760466a637d2690b7f08cf68342fa34e6c500a4eead950a138f16ee49bea03905dad989c91a8c8177cfa9643f15a9120fc8

  • /data/user/0/com.sm.a39video/shared_prefs/APP_START_TIMER_INFO.xml

    Filesize

    117B

    MD5

    24d2b9aa47b666eaed8a4fde4febde46

    SHA1

    fc8050183226dd1db510febe8182d2e80125484e

    SHA256

    78c3aa37678cb4f1118283462c44f5639f247eff7c27b7ff42c2ae14695a2a9e

    SHA512

    e9fc0d2211ad3047f2bc9252962345af27dc7242116dc7989e05a838ae088a26bebf52eb4c76ab80f45c6b0c5e3e0d98c3d7519d11437fe85bd494f8cd068064

  • /storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.opplugin_v2018.apk

    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e