Analysis
-
max time kernel
3100143s -
max time network
142s -
platform
android_x64 -
resource
android-x64-20220823-en -
resource tags
androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system -
submitted
26-11-2022 19:24
Static task
static1
Behavioral task
behavioral1
Sample
e11f242889cd3c7285bc5ebdcba0a3411a5f36b514999ce4b8a2f1a4a18852c5.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
e11f242889cd3c7285bc5ebdcba0a3411a5f36b514999ce4b8a2f1a4a18852c5.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
e11f242889cd3c7285bc5ebdcba0a3411a5f36b514999ce4b8a2f1a4a18852c5.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
e11f242889cd3c7285bc5ebdcba0a3411a5f36b514999ce4b8a2f1a4a18852c5.apk
-
Size
2.2MB
-
MD5
ffc21561f5ffc51e341b387b60bb262f
-
SHA1
fa6155ab4afc9628dd1018414879c97d81e7053e
-
SHA256
e11f242889cd3c7285bc5ebdcba0a3411a5f36b514999ce4b8a2f1a4a18852c5
-
SHA512
086d1633f3aed6a0053e5fdf1f08e940850b874c7957cebaca6efb002fb5806e9c1d7e4a8161a1bfd7625aeb8e7f4ae25b4f1ff7c6c1d8f4845d90343a8941d3
-
SSDEEP
49152:ZVFkq7rdC6bUd0bD8fgr0hsOKrl56IUP6NiUyiIA1zbHr8Ud0bSMrcmaX1afH:3DC6bN38fXV6YP6kAVHr8NJrcmaX1YH
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
Processes:
com.kbbs.souhuyingyinioc pid process /storage/emulated/0/Android/data/location/locCache/app/com.kbbs.souhuyingyin/v5pl.dex 4732 com.kbbs.souhuyingyin /storage/emulated/0/Android/data/location/locCache/app/com.kbbs.souhuyingyin/v5pl.dex 4732 com.kbbs.souhuyingyin -
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.kbbs.souhuyingyindescription ioc process Framework API call javax.crypto.Cipher.doFinal com.kbbs.souhuyingyin
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.kbbs.souhuyingyin/databases/baiduFilesize
192KB
MD5fb1488ef8cecb4943c82562d9bc64340
SHA155fbee4a964e15f7e1bf9fba6aaee35384dcf436
SHA256755a37c018174b0bae70a4e88268f92059ceca69b3a7e6845f945cdd0a33b042
SHA5127abaa6d22f1e31e9bcf04b18f42b8cdff06aa052f9373102cf54bd1f3a2b03cd8216db7d5a7649ab740415ee3c785fe34891004078f45bbb1223918b54b2ec67
-
/data/user/0/com.kbbs.souhuyingyin/databases/baidu-journalFilesize
1KB
MD5897e5214d72382f99716c46014cf983e
SHA1de596bf0757c374536a82fb3224548ea4b029d8e
SHA2562cf6a75f90b18616486f6a627e48696229840440d309aeb0e534f4eece1e4525
SHA512aae5fd87342511fc744e3a20a6b781971af020918253c7aca90dade9c03ecf36866c72d73ad833b138b7081ae893d8bbb1bd12b28a55687cd21c941c001d202b
-
/data/user/0/com.kbbs.souhuyingyin/databases/cn.cq.yzFilesize
88KB
MD590d3c46a4acf687fab99de13702ba3f2
SHA1e61804eb6948ffe3ac63257689659cd8507cfdac
SHA25689fff3f4140fa6ee2b939cd489e271ae7228f00a3c69bbaee08752042029e38a
SHA512adc65d14b77bfadb4728d86d046c4e249100029a17ede55fc9396c470ed72d2d408885a9dbb7974cb65632f131ad21f317b06d538e34ed64348e958f73d9c078
-
/data/user/0/com.kbbs.souhuyingyin/databases/cn.cq.yz-journalFilesize
1KB
MD565493f7b34de2b2a3ecb8d83164e129d
SHA12692b111b1fc87e79088f8a60561025562ed6d5d
SHA25655711eab08c2ba7f6fc139a9969ee696bb7e8e496efd4e299ea0686b4136a21e
SHA51274b6d19d762a3e473e66f40622bfb9dc5c034ae13a3b546e736e5d983e3242029d7b7927e6c6bc286a4e45dc86381904992b734317ee5fb2f7b76f1b5084d8f9
-
/storage/emulated/0/Android/data/location/locCache/app/com.kbbs.souhuyingyin/v5pl.dexMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/storage/emulated/0/Android/data/location/locCache/app/com.kbbs.souhuyingyin/v5pl.dexFilesize
223KB
MD52f5a0831182b3b89d59150c5b5c647e1
SHA1783377889a70d20b74b31365f968b7a0403a049e
SHA256ce1a23d24c6b5a21506b2597a6430f493b3c97c75c12fba6764154aaf782e612
SHA512d5c87c9627542f561ce6efeb623c747414a8dfdeb5fd0b2e5da1fb5a29a6e912c9e62fb9d9fd24e5b32d781b423cdcd1e1a3e5d627b7080661c4776469042c40
-
/storage/emulated/0/Android/data/location/locCache/app/com.kbbs.souhuyingyin/v5pl.dexFilesize
223KB
MD52f5a0831182b3b89d59150c5b5c647e1
SHA1783377889a70d20b74b31365f968b7a0403a049e
SHA256ce1a23d24c6b5a21506b2597a6430f493b3c97c75c12fba6764154aaf782e612
SHA512d5c87c9627542f561ce6efeb623c747414a8dfdeb5fd0b2e5da1fb5a29a6e912c9e62fb9d9fd24e5b32d781b423cdcd1e1a3e5d627b7080661c4776469042c40
-
/storage/emulated/0/Download/P.apkMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/storage/emulated/0/Download/P.apkMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e