Analysis

  • max time kernel
    3089059s
  • max time network
    133s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    26-11-2022 17:13

General

  • Target

    8996ca71cf973851abc8983d37cfe577d4b568bceac67b6ef124f128abeead0c.apk

  • Size

    8.0MB

  • MD5

    c8b6e9a840fbc2401a8bc786bcf3c48b

  • SHA1

    c4df83ec0434d07d155230701b7b296258a02213

  • SHA256

    8996ca71cf973851abc8983d37cfe577d4b568bceac67b6ef124f128abeead0c

  • SHA512

    0642e6224dc8919618f210917f85a0b1e89322bf14691d810745a19110c3856a379269fff69ef80f0857933335327011b9eda44efa7c6ea445a106c54796c9f5

  • SSDEEP

    196608:CNMTeYkLSpP9J2fMSviJLItS02O/f+ml3PTi3jr6SIFsIPU1Dilc:sMTeYkLS59J2UAeLItj2AXTizrDIFsI4

Score
7/10

Malware Config

Signatures

  • Checks Qemu related system properties. 1 IoCs

    Checks for Android system properties related to Qemu for Emulator detection.

Processes

  • com.icloud.game.flord.mm
    1⤵
    • Checks Qemu related system properties.
    PID:4747

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.icloud.game.flord.mm/shared_prefs/APP_START_TIMER_INFO.xml
    Filesize

    117B

    MD5

    d66661f98b9302d4f40f5ae5f38a38e6

    SHA1

    8463cd772d7d60c9951ab3d7b353b81528b4aee7

    SHA256

    f4589069371a6cb8d0159499ad6e82ff37f50751db2d6cdc0bf0f926cc8f28f6

    SHA512

    1326ec8a6d703d0ff2ac6362e4ff7b9440ba5619242a9efdd5c59289fbd9bd71295a1dd050aa6861fd83d48629ecb89f9124199aec447b1591e8bfbd69332a6c

  • /storage/emulated/0/Android/data/com.skymobi.pay.app/plugins/com.skymobi.pay.opplugin_V2009.apk
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e

  • /storage/emulated/0/nflord/com.icloud.game.flord.mm/flord/log.txt
    MD5

    d41d8cd98f00b204e9800998ecf8427e

    SHA1

    da39a3ee5e6b4b0d3255bfef95601890afd80709

    SHA256

    e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

    SHA512

    cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e