Analysis
-
max time kernel
3075111s -
max time network
158s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
-
submitted
26-11-2022 14:06
General
-
Target
2da8cf1b2650f757a0960c1695151d8eda7ca8c0608d21e8e44317f6b8d30690.apk
-
Size
304KB
-
MD5
8c8820f9ce0f4fb66badd439c96715b8
-
SHA1
b1ec6d716b34c4feb791263626dff1115c7abe90
-
SHA256
2da8cf1b2650f757a0960c1695151d8eda7ca8c0608d21e8e44317f6b8d30690
-
SHA512
1295c2467b2826725d7ce01ad4500344058e55f579eff2a6fd3e3c7d113e66a47d8426acf18f2116b63c156eba0e73daa4997c49af9b4478a64cd82d05290b42
-
SSDEEP
6144:qpsL4iJT3d4jN3ya285pgVkffZ5VIs+1wiz/nlQg8a7AqcnC25:qnE4jNLfZ5uscB78qKnC25
Malware Config
Signatures
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes
-
com.c1014212170591⤵
- Uses Crypto APIs (Might try to encrypt user data).
-
com.c101421217059:service1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.c101421217059/databases/downloadProvider.dbFilesize
4KB
MD5f2b4b0190b9f384ca885f0c8c9b14700
SHA1934ff2646757b5b6e7f20f6a0aa76c7f995d9361
SHA2560a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514
SHA512ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1
-
/data/user/0/com.c101421217059/databases/downloadProvider.db-journalFilesize
524B
MD5a44860edd190100928b39cbb1aa2dea4
SHA1dc2a469fce5f903e959fd365c2568f933e834922
SHA256432d3624c8f969cbdd8dedd63bdc7d9c17e08455f62dc8676a5dc2032c94a69c
SHA512779d4ec0d75e7c7778b144a00263423ec9ebceafccd13347f203c676958694bd8ebfef5d57ea37354bb8baa1ea107c927dfedceee90bdbf14e43fcb7d83548d9
-
/data/user/0/com.c101421217059/databases/downloadProvider.db-shmFilesize
8B
MD57dea362b3fac8e00956a4952a3d4f474
SHA105fe405753166f125559e7c9ac558654f107c7e9
SHA256af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc
SHA5121b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b
-
/data/user/0/com.c101421217059/databases/downloadProvider.db-walFilesize
28KB
MD5503e92a8b768da459aad2d96ffa14e98
SHA143a836ea0dc02d731e0aa7236ed2c17cace6ff08
SHA256cd96807880816560900fff053b3f927cc04db90ab248ac2a8168533917d30a7e
SHA51229b6a74795dc7ba658c0124fff709c60a6c97c1212d42e1d0587b55d67d27ba4ab84ac7e3af4cbb921f012bdc74d3482c6c37ec95c1734b09899a5379e2c6e3e
-
/data/user/0/com.c101421217059/files/b1/main/aknfile_standalone_ptl.datFilesize
12KB
MD5f87608360123ac5eb5fe70d16ae0736d
SHA12fd0d1ac1546b7b02b11e8009affe9c4381cf240
SHA256370666182898f09015115af5f2383f6d1cc5d64c80a1478cbdb0f597b22e6df2
SHA5125fef2faf30cfb2890aa2c0533b33eb5d4ca006188ff21e09ffb00efb4ae8e24b8bc15dd3d68088c5192009eb3e09ca49e2c9fc06e73ae32d8b17b43f661c3559
-
/data/user/0/com.c101421217059/files/b1/yong.datMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/com.c101421217059/files/vs_filter.txtFilesize
3B
MD5e165421110ba03099a1c0393373c5b43
SHA152fdb9f68c503e11d168fe52035901864c0a4861
SHA256c0509a487a18b003ba05e505419ebb63e57a29158073e381f57160b5c5b86426
SHA512a072d5111db256d24fcaea0e46a3e75827187a8e668c0def238bfcec9267115db1a40c3467577bb623fa825fda7a47649401d17051f92da8b9790da319b7ce70
-
/data/user/0/com.c101421217059/files/vs_num.txtFilesize
17B
MD5e0dce9cf22445464939663d459c31dd0
SHA1adbb4b7f7d475dad6a0e1152bf143652421774f0
SHA25696192c890a53274bb1e6b1387b63e3503a7b4bf42a6dc6374c56faac2217e859
SHA512f57a2fa3f41a7897db49302456ea87bd97daa99a1a0c8c6cb941a6e751c7e9aa71eb99232a29864d251719adcd1bc8b6f7db0340517d9cd0e9e30507964f4151
-
/data/user/0/com.c101421217059/filesvs_ver.txtFilesize
25B
MD589c97d14d5174474eab73d70ffdcd7a5
SHA1f5d7ac6f9ffb7be87ce1a43131511945d726a58d
SHA25672fcb677fa46a7f8aa222a2b24d435c8159efba492b8ce95562582462c0a04a5
SHA51207b9080df7b74ba7dd152b83070162bc93b12825ee536bd035ef1a8e4c827e711bc64ea5eb0f2eda7325ea5b3363c0800f1404ac3d373d27562f0bd7fc1b1485
-
/data/user/0/com.c101421217059/shared_prefs/545baad78677ff84f033291576483a3e.xmlFilesize
132B
MD5592a0cc04202d119d49eba17c6d82fb8
SHA1f2537a5c45df9f2057a2639de66f2a9ca614dba3
SHA256234414a3f9ea8a3f140de1b20f346c2e9a2fc561d7003a21616899ac5ea87f15
SHA5127a517cdcce4d8eaa9935a7e33638ad8b2c9716523f443cc96d85c3187099b9d86d536d4e104c09b1cdb2f9a51a28dee5991d1c27d33a1c75ce59d370a9f4c292
-
/data/user/0/com.c101421217059/shared_prefs/AUTO_UPDATE_DICT.xmlFilesize
124B
MD5cc02e6e6a2d99663ba630f6a0e928e75
SHA16c4d7b2cc4b53db3fecdf49e582ca075e35ef3d2
SHA256a4854bf12a35fac9fb7a2e57db770c90134a292f2e1897ec07f924cd64148232
SHA5124b27ce285a7aa920df4a8fd20e07c529c16af6030438bc424e61a5badaade6f6b1418396f93f95611238363f204ea1bf200041b08dbff9269b1ecd84f59a2574
-
/data/user/0/com.c101421217059/shared_prefs/com.c101421217059_preferences.xmlFilesize
124B
MD59e2c7c08c329bb7a3bf3e1e43d3208ea
SHA1380ade9cbdc12f320162de6f3526e125b7b1ed28
SHA256c93ef9b2725b81c290c04bfa5e47116f47fe2c35a18d5dd2f6723421d3f9bafa
SHA51200b1fd9a07847410ed8693f4b7553ec87ab7044f5bb21158bfc630cc27c9a1ca92c1d25c7994b64fb01a6981ded038dd84b53cf63d1f4f5a8b9d85f00b89b015
-
/data/user/0/com.c101421217059/shared_prefs/mService.xmlFilesize
65B
MD59781ca003f10f8d0c9c1945b63fdca7f
SHA14156cf5dc8d71dbab734d25e5e1598b37a5456f4
SHA2563325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
SHA51225a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03