0af5ac7265e5936a94db11e0a8196a812e79c8b4dcb028861c419dd2f5560fa3

Analysis

max time kernel
3042132s
max time network
130s
platform
android_x86
resource
android-x86-arm-20220823-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
submitted
26-11-2022 06:42

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

0af5ac7265e5936a94db11e0a8196a812e79c8b4dcb028861c419dd2f5560fa3.apk
Size

2.1MB
MD5

92f3e087506c1871809e2825799e26e0
SHA1

2c0b1dc307fa8e6b348e97d50b193e50091d000f
SHA256

0af5ac7265e5936a94db11e0a8196a812e79c8b4dcb028861c419dd2f5560fa3
SHA512

02ba49f4268dd616abd435ded49325b3aff90e657eff817bd533da5de3d0467e04d4b4c8fb7e4f50db584a4bf8669dac6017ae3de8e329b5b10d1a88657c5219
SSDEEP

49152:tUhWXPOkvoUhiUbpa3FAa+H+uQbUb67msJai+AeYkU6ibK:20/HvDhi+pa3ma+euqk679aideYkU6iO

Score

7^/10

infostealer ransomware

Malware Config

Signatures

Reads the content of SMS inbox messages. 1 IoCs
infostealer

Processes:

com.sm.a35video

description ioc process

URI accessed for read content://sms/inbox com.sm.a35video
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
ransomware

Processes:

com.sm.a35video

description ioc process

Framework API call javax.crypto.Cipher.doFinal com.sm.a35video

description	ioc	process
URI accessed for read	content://sms/inbox	com.sm.a35video

description	ioc	process
Framework API call	javax.crypto.Cipher.doFinal	com.sm.a35video

com.sm.a35video
1⤵
- Reads the content of SMS inbox messages.
- Uses Crypto APIs (Might try to encrypt user data).
PID:4095

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.sm.a35video/databases/app_download_record
Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/user/0/com.sm.a35video/databases/app_download_record-journal
Filesize
524B

MD5
1a64d25d9eb6e350547b87b3e0262c40

SHA1
23f5f8d8860422e83f8e960ace0ae981e7788a95

SHA256
b56cfeec9c9c792613054dd0e75627dc1b6b36ca21587bccdce4e5104876c8d6

SHA512
7eed35b831628c65904c41b763610266e81c7b98429cd888643e88b5c8ec48c176a37008abcf5a184de84093fe95fc38ba854a02b9742c2871e718865b9221ed

Download Submit
/data/user/0/com.sm.a35video/databases/app_download_record-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.sm.a35video/databases/app_download_record-wal
Filesize
44KB

MD5
f7eea822571309d7f35952a021a43e18

SHA1
6a0fea05d4648d98c06b225006b6bf459e27d849

SHA256
8977b72f393c59300abbcc9f7e58024842565d1d2c55e476204a19b475c86023

SHA512
e2e81ad298d9edb59e3afce1e3559908832598d2d2192139c940ade11565e76c531bf4c48514f4cf86e5466f3a57156161aba717ed20d2285816a94964171b31

Download Submit
/data/user/0/com.sm.a35video/databases/sy_pay_record
Filesize
40KB

MD5
f33e40dc44dddf9886c560576fe30a70

SHA1
58df836a00a47eba37ba479a7aee95bcf404b2b5

SHA256
4438043ecb3f2ce4c482f5312042c439437aeb896181069dd6e8966f40bd3de2

SHA512
af1162e2b3802bbc9e4bfc43bfd1258bb40b49a601e361076c58f7dbc8f7e8b5d4e3003183dffba1c00810ac34a59fa595d8908ef9b2652578522b8c014327d9

Download Submit
/data/user/0/com.sm.a35video/databases/sy_pay_record-journal
Filesize
524B

MD5
7c7669f0102311849fb20dbaec029065

SHA1
8aa95f7b3bb62bbda8ac8cad6bf9ce2486eae3e7

SHA256
719f5844a456a4ad3119d6a79f12d2e178092ae47bff31611bbc757faa938ebb

SHA512
b210fec1fca7af8cbbdb8dfda3a9cb5afae3eba7e8b313b491139518046fe2828622873cffda1d0f7b84e29cf69575a20abf86f7d0a9f80daeb2be93603dbae9

Download Submit
/data/user/0/com.sm.a35video/databases/sy_pay_record-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.sm.a35video/databases/sy_pay_record-wal
Filesize
48KB

MD5
904fb093ccc58cb382de5b761ffa6d85

SHA1
dc1c0d19f4a1a96f2c76dffb778b5a10741a7e92

SHA256
f14a41f431ea96213da46ad48c07b6693a904b6d16e327062a64602456044cae

SHA512
85a1c0aa9aa5333f8db801e2b30c3cc640caea83a3625b17c1f89442d44f7d0c40670f2cedeb595690fa193846b506e4699857801464b5ad07d60027fccea857

Download Submit
/data/user/0/com.sm.a35video/databases/video_record
Filesize
88KB

MD5
fc845a680461d6872021ef8db2bf8711

SHA1
a12c09241708e4367e125a324cc8cde42a87e9ff

SHA256
76600f5583e24d6d239f3c4043edb0e0b3e1f1983df263503567b5743d18e570

SHA512
b73cfecc51fd7e5b5309b05992a118d0dbabe94a65413a9574b87586b098360cd92c9200e267a7853c88a6f5e92fd59a9242fc093236c060002e175602004fdb

Download Submit
/data/user/0/com.sm.a35video/databases/video_record-journal
Filesize
524B

MD5
ebc917b5d4136bc9d834737721d62dc9

SHA1
ca00c2d777c772cc3b29ab36262af79a278212d6

SHA256
2583c845cf79f79b9194ccbd89d941821510955938e4a7ad2fdc23cc68635cdd

SHA512
b792c79573a89942574b37fad3753d23dc15e1d1b7ef5d1792a8b382b3a069bcf9da5d62ed55ed600fc7fd0860aa2057c31b228b3e63f9d9f521e01f4e1a9caa

Download Submit
/data/user/0/com.sm.a35video/databases/video_record-shm
Filesize
8B

MD5
7dea362b3fac8e00956a4952a3d4f474

SHA1
05fe405753166f125559e7c9ac558654f107c7e9

SHA256
af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

SHA512
1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

Download Submit
/data/user/0/com.sm.a35video/databases/video_record-wal
Filesize
96KB

MD5
18d1d8a122cc14f1f1b56a38e072cb7b

SHA1
09109b071b675394b0c630257c5aa1c92f91ad49

SHA256
720635f825d37accb57cba7c63cba684bdcacfd8d55b7c2cecc0abc013e7338c

SHA512
dee9575c88f3f541691049f4818b2f2470ac603359bac5c25ee5493c5493f98e94b2281a56f4a212f237031272edd1e82befd35940354f4048b5c38feb333da0

Download Submit
/data/user/0/com.sm.a35video/shared_prefs/APP_START_TIMER_INFO.xml
Filesize
117B

MD5
1e816218052cc08e2cd6f730ca17c8b9

SHA1
be5ceb1ae2c457fd603fe6ab7e2cc84d0696c20b

SHA256
a700ecf1f577304c1b5ba8726026fc686aa44e186a53cc688900462954a024fb

SHA512
e3736a44f75a8a50feb921312988f21aa9c45bb94b66c5ecf26555e5a9d9012597fa9c50c093bcca3f910b1b523f26c0ce158baa63d592a2c32e9cd22165d284

Download Submit
/storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.opplugin_v2018.apk
MD5
d41d8cd98f00b204e9800998ecf8427e

SHA1
da39a3ee5e6b4b0d3255bfef95601890afd80709

SHA256
e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

SHA512
cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads