Analysis

  • max time kernel
    3038105s
  • max time network
    12s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    26-11-2022 05:48

General

  • Target

    9d66b5781a8e101770be32173b1ff43b0d73c1e5d78bbb50399ad149c48206df.apk

  • Size

    2.1MB

  • MD5

    32aed74a4ede04420e06505035b5ab90

  • SHA1

    84d5d464f05e18005636be7a7e2861f903aa3110

  • SHA256

    9d66b5781a8e101770be32173b1ff43b0d73c1e5d78bbb50399ad149c48206df

  • SHA512

    9c220b79a457787b1432c4e9bfdf908fc7c9753aad746e0d7fa1e353d0813ea76a774d5a6a5cb135060ac823d90c244f70d22018a746b786b2ee35062798f2ef

  • SSDEEP

    49152:DUhWXXOkjiUhlp94XedAarHPQWXHSrhK79VZXCeYkSYEz2:I0nHj1hlj4Xe+arvQsHSrA/ZXCeYkSYr

Malware Config

Signatures

  • Reads the content of SMS inbox messages. 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.sm.a36video
    1⤵
    • Reads the content of SMS inbox messages.
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:3994

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.sm.a36video/databases/app_download_record
    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/user/0/com.sm.a36video/databases/app_download_record-journal
    Filesize

    524B

    MD5

    6c4c0dfbbf3eb36ee8e174037a70c670

    SHA1

    f6123d426a12bc514b23a0c43ff3250319de98ff

    SHA256

    f3df7b3e414227c54a7b411802a8714e42e637b09f8bafa56262f2b8d72015ff

    SHA512

    0d02dc9fc3b31a766dc5d0a3f5da3f20e64e79ae5ba264a6e59db792dc15e25ad123610725badee22c075ffd0d253be640eed2da464a79e3ef167144034404e7

  • /data/user/0/com.sm.a36video/databases/app_download_record-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.sm.a36video/databases/app_download_record-wal
    Filesize

    44KB

    MD5

    a95fb9a38fa37e64fee0338bc59f404b

    SHA1

    9ef198cb9f9476e8d896a12d2a558ca75156635e

    SHA256

    55fa52816185181909c0155dd5c3686c61df63ebe8c7addd5e0890e17ac3b907

    SHA512

    7b41b84c48cafdeebfec5f07f2f059f355ebb023fe2b6e7561eab3bb14a4bdf09e295e8b43d40b0d6ff4e0af368094abf3919cfb9a56bb018687aeb3a02bef07

  • /data/user/0/com.sm.a36video/databases/sy_pay_record
    Filesize

    40KB

    MD5

    f33e40dc44dddf9886c560576fe30a70

    SHA1

    58df836a00a47eba37ba479a7aee95bcf404b2b5

    SHA256

    4438043ecb3f2ce4c482f5312042c439437aeb896181069dd6e8966f40bd3de2

    SHA512

    af1162e2b3802bbc9e4bfc43bfd1258bb40b49a601e361076c58f7dbc8f7e8b5d4e3003183dffba1c00810ac34a59fa595d8908ef9b2652578522b8c014327d9

  • /data/user/0/com.sm.a36video/databases/sy_pay_record-journal
    Filesize

    524B

    MD5

    eae0f55b7d28de0bd468ba48473e3deb

    SHA1

    c631b8e840dabd4b142885c4165775a5f85c33d7

    SHA256

    cf13582e7897b3b57545d99570aea40b892057eec40a9aa2b7f9a435ca9dfa82

    SHA512

    97c0961cb93ca96a354111864462432277462783a3eba857715430adf1aef4c9e1061dcae6aa057700430ace8c906fd7606109ad6e79b341c0d7985978551d39

  • /data/user/0/com.sm.a36video/databases/sy_pay_record-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.sm.a36video/databases/sy_pay_record-wal
    Filesize

    48KB

    MD5

    38fb1bb872d073d6087c523bc416ed8c

    SHA1

    b25af8b40b7043eb481808eb89322ee44406da25

    SHA256

    05d5a95a47656a0470a754df975e8eb1deebed02bc2849ada07a4d2119747f86

    SHA512

    00c08a2cee5afa972af1c5edaa925a5ec215084237c5ae63897c9cd4888537a997726f3a0c5d81c9ff8e331dcfe24b49bdc431855ffd35810bc1b4f08cfeef09

  • /data/user/0/com.sm.a36video/databases/video_record
    Filesize

    88KB

    MD5

    fc845a680461d6872021ef8db2bf8711

    SHA1

    a12c09241708e4367e125a324cc8cde42a87e9ff

    SHA256

    76600f5583e24d6d239f3c4043edb0e0b3e1f1983df263503567b5743d18e570

    SHA512

    b73cfecc51fd7e5b5309b05992a118d0dbabe94a65413a9574b87586b098360cd92c9200e267a7853c88a6f5e92fd59a9242fc093236c060002e175602004fdb

  • /data/user/0/com.sm.a36video/databases/video_record-journal
    Filesize

    524B

    MD5

    7e874dfb6ac357797800db52ea60863d

    SHA1

    54e60f85e25ae9981ee848e0716db6b44848bc0b

    SHA256

    6ad5684a5b09ca297e47e9562a8812f87daccf348f192826dbe384b9bd796c7a

    SHA512

    2065e89e407c5ed5b42891e35c99a137dceff0055919091f3762c8c2377641552ce0a5cb5ef7afff07bf0f18a0718c215a4eefc1c9921437990998d0da2c3a5e

  • /data/user/0/com.sm.a36video/databases/video_record-shm
    Filesize

    8B

    MD5

    7dea362b3fac8e00956a4952a3d4f474

    SHA1

    05fe405753166f125559e7c9ac558654f107c7e9

    SHA256

    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

    SHA512

    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

  • /data/user/0/com.sm.a36video/databases/video_record-wal
    Filesize

    96KB

    MD5

    99e33f64d2b79eb1125b1d0dc23c684b

    SHA1

    3c2a20f1ae68423919bb63e9d1afc10696e63e98

    SHA256

    7add8f9964668d1a308ebebd0b311ec0d567466bf034b6cbd279cdd61d9021aa

    SHA512

    03c781e7ae85429d0e0668ad1f32fbc31d09cdd46513472f68c7f31ae09530f9ba96017f4c7a1a6500210b0854acc013b2b5c8d385b458d9dce626223e0ce522

  • /data/user/0/com.sm.a36video/shared_prefs/APP_START_TIMER_INFO.xml
    Filesize

    117B

    MD5

    c24bcd2e4618aaec15484522f1d0b092

    SHA1

    3bd6c147810a240ab421fc5657ebf97950626f43

    SHA256

    4650823b35bcfec35e58c3c74b4a2b5e11ade6e8ddd6c2a00ff55d2723590966

    SHA512

    46ad1a7e43af309ad99d52a435cc3f884d4e755b64521d3eec9cbdfdd8ba1bcfe3cf0e62c601d6cc4bfce3a4ea8e7d1d0907c4889c03f7c88b50e926bb686d3a

  • /storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.opplugin_v2018.apk
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e