Analysis
-
max time kernel
3100149s -
max time network
157s -
platform
android_x64 -
resource
android-x64-arm64-20220823-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system -
submitted
26-11-2022 19:24
Static task
static1
Behavioral task
behavioral1
Sample
e11f242889cd3c7285bc5ebdcba0a3411a5f36b514999ce4b8a2f1a4a18852c5.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
e11f242889cd3c7285bc5ebdcba0a3411a5f36b514999ce4b8a2f1a4a18852c5.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
e11f242889cd3c7285bc5ebdcba0a3411a5f36b514999ce4b8a2f1a4a18852c5.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
e11f242889cd3c7285bc5ebdcba0a3411a5f36b514999ce4b8a2f1a4a18852c5.apk
-
Size
2.2MB
-
MD5
ffc21561f5ffc51e341b387b60bb262f
-
SHA1
fa6155ab4afc9628dd1018414879c97d81e7053e
-
SHA256
e11f242889cd3c7285bc5ebdcba0a3411a5f36b514999ce4b8a2f1a4a18852c5
-
SHA512
086d1633f3aed6a0053e5fdf1f08e940850b874c7957cebaca6efb002fb5806e9c1d7e4a8161a1bfd7625aeb8e7f4ae25b4f1ff7c6c1d8f4845d90343a8941d3
-
SSDEEP
49152:ZVFkq7rdC6bUd0bD8fgr0hsOKrl56IUP6NiUyiIA1zbHr8Ud0bSMrcmaX1afH:3DC6bN38fXV6YP6kAVHr8NJrcmaX1YH
Malware Config
Signatures
-
Acquires the wake lock. 1 IoCs
Processes:
com.kbbs.souhuyingyindescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.kbbs.souhuyingyin -
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.kbbs.souhuyingyindescription ioc process Framework API call javax.crypto.Cipher.doFinal com.kbbs.souhuyingyin
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.kbbs.souhuyingyin/databases/cn.cq.yzFilesize
88KB
MD51d77e8c8e82017003c8f08d6bea5c5b9
SHA1a715f0c64b25b555cb0ddf59e2b158a7ed0ef6af
SHA256e27cf73f503c1897dfa49844984f719eb4430ea52ee980e26fcb31774144ac93
SHA512b5cd1751d5d0614d32ecc84966c415ae0b560e74ff2e81009784107454051908077ed8385e916cb8869f837da6e3105ec7d047390969d6868fdc97802e443c14
-
/data/user/0/com.kbbs.souhuyingyin/databases/cn.cq.yz-journalFilesize
1KB
MD55a8889f13bc02f421a48a2cdfd166a22
SHA14094481274abb16d7ae8072742c1ad8c80f27a73
SHA25630eeb5363d80ccb40a9d46d7c6bece63eab8e6ddbd1558bc3c705fde9f2473a2
SHA51221318d07aa7d0b5e95f0a322c1f9ae82efa579a5d1ee7f0b92bed3bbc7ad2f1708fbf012f6b3552e71d1a87d031c8d52ff05bc5b4d55ae20b6f515d31b3595f7
-
/storage/emulated/0/Download/P.apkMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/storage/emulated/0/Download/P.apkMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e