Analysis

  • max time kernel
    3146934s
  • max time network
    138s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    27/11/2022, 05:03

General

  • Target

    a4414665600f3938f21a0e454c66d8066b218101f8eaa3f35e14bd0e098995e2.apk

  • Size

    4.6MB

  • MD5

    d7e69c978a778d0ddb8439e77c8fcf0e

  • SHA1

    dc872b7c0ad3d95c75c4acbf696e987a3d8bacd7

  • SHA256

    a4414665600f3938f21a0e454c66d8066b218101f8eaa3f35e14bd0e098995e2

  • SHA512

    bca3c1ff80173b2974dbfc481331742f3574afd89252521b34a347fb0d59ce33838be004ee3918ff6bbec182a084123178078b7e90f32fe6e5869978a05a59d4

  • SSDEEP

    98304:7yLcJ838jaN1/gEygwAKYPEn67Dvrc/4VQVH4al0EWpMnOcDVFXEYsSe+ifq:7zgygZKY467fgH4kcpMnrDrsSe+ifq

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.

Processes

  • com.poxiao.xxxbs
    1⤵
    • Requests cell location
    • Loads dropped Dex/Jar
    PID:4437

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.poxiao.xxxbs/app_skypush/plugins/com.skymobi.pay.sprpush.apk

    Filesize

    98KB

    MD5

    f1f3db1e81a2c9dc79f63913042a40ed

    SHA1

    86832d3f54586153c4fa3d6fcfc0a2984611b8da

    SHA256

    1377c3c99bacaee770e0cbc07d04d39d797b5c2f82758e50db4013f90ea55ed4

    SHA512

    f715a814d97c06c6e2412c0753f52ecdd0b01f7348a91c3bde496bcea7ade98d6c2389c8ebafc89119d6f6794df1c5aba72b000a45a609282d8f9f5e008f2eef

  • /data/user/0/com.poxiao.xxxbs/cache/CommandCache/016934e45f0855e0f070d5bba6e291bd

    Filesize

    767B

    MD5

    ff9ba1d0bbd2d82c141f54a5dcd50cdb

    SHA1

    d806272131749ae3c8f186751cd9898bfd4c6fc8

    SHA256

    94c157d902e613bea302dbe0a50c4292376910d48faa25518d6f5573810dce32

    SHA512

    41c755fa0d8f5cf1621930d27f843c5e4c758736a8261376eeea90860c0386ddbfbbee4520804ee2b51b80e002a0e94a6ca65931fcda6ae05c421eb0d572fd35

  • /data/user/0/com.poxiao.xxxbs/cache/CommandCache/c1bbe283541c83dfb715098c7cca53d8

    Filesize

    1KB

    MD5

    ed204b52d697672eb01d9a5c64ddc8b3

    SHA1

    06155fa6d585cc1fe0f8187d9a2dd0303a9f09d4

    SHA256

    480b4d88ee859644f815af889d1b803a5b7d63d36deb2930148b7d0de66fe4c5

    SHA512

    7c80226d8e0c743130bc193f8d1381cd5ed617f3456fb6bb50f294a438a8a436fcc786d54140c8c08f39727fc0e1f7e1a47473248af1211b4aa4e4996be8cc8b

  • /data/user/0/com.poxiao.xxxbs/databases/PushData_Spr.db

    Filesize

    32KB

    MD5

    cdb22d4c87ac710535fe107545fac87c

    SHA1

    f067b6d826d6ee223aab73944bbb718ed75ca7f5

    SHA256

    33b3ca87efd2aed5273b150f223f16e042af143e97dfc919aa8f92d1b24fbd6c

    SHA512

    03e5361a142678d9917e636b37ea738ee6b0643969d14ffdac9d19ce804f4154a85338d9a1303b746a43af93488169b6109d231d8cfffe80c2cf6fc6350b90fb

  • /data/user/0/com.poxiao.xxxbs/databases/PushData_Spr.db-journal

    Filesize

    524B

    MD5

    c280c37eaf6e2d2e9c075ce095c6c51e

    SHA1

    a45e9c49738c016156e41af404b46b56b0abf710

    SHA256

    8d3fe9013fb56d1001dbd114819ce5f7dc4426618c1f35d6a11ba8ec13187268

    SHA512

    b4d3a921807e1a78a9b4ee2c585fa2742d7c7c39b8e5a0db68d4f82e17d50bd550ddf1e76e6c1f14d547520b6d6150351fdbe25f3c9c12c5029983f076087d13

  • /data/user/0/com.poxiao.xxxbs/files/installation

    Filesize

    1KB

    MD5

    7f5f16cbf719186b63cce5c36561c849

    SHA1

    ba40a6587a29ebefaf2d218239cdb54bbd1098b1

    SHA256

    72a4d7b60de47fb642b3c3507c8a6a32e084f6c6e75d0a2384bad091500363ea

    SHA512

    c4434ecaab9e2fc35bbe729fe5db6359cf8709c8c1e1236a058c134de599a176ce83aecbc79fe7427546281e30c72d906c4dc587d7a4eb73cc6da7899353d827

  • /data/user/0/com.poxiao.xxxbs/shared_prefs/AVOSCloud-SDK.xml

    Filesize

    117B

    MD5

    6dc79ab0f87a05bf7567abe519743486

    SHA1

    d29301cc1f46d5d1612626517465ea8071879bb5

    SHA256

    9e0e964eb0a3c34f5b6c0f9aa545953f222332eac6ed841bf7c147c5d1cc7aef

    SHA512

    9d8bb4fcdc1cf5a00118d449ea7e0cd825ba1c5ab9f49195f65defc608764b994e28882938c63ec112e29a8c8d051a21af4bf1fb45e10a04874a5bf37d2f6910

  • /data/user/0/com.poxiao.xxxbs/shared_prefs/AV_PUSH_SERVICE_APP_DATA.xml

    Filesize

    193B

    MD5

    0bc99d49cde3946f4a3356c605bf71a8

    SHA1

    f0a5c6a5923b5408103843a45f68865aef961e23

    SHA256

    7c3455e96353d16ba4c1cb9439576f3effb5bce10f9d7eac76553f3745e27711

    SHA512

    f3f9e6ac0c7ce797d9d764209e0783aec9d9eb13eece3b393ad30edac2c984143ffb3d45c97b481b1ddf6bc94b83430e356962228d39f3e4795b5f7fdfd95c05

  • /data/user/0/com.poxiao.xxxbs/shared_prefs/AV_PUSH_SERVICE_APP_DATA.xml

    Filesize

    274B

    MD5

    49d5e84bd0e285a3cd031d70bcd15a71

    SHA1

    909df4616adbb4f741467cc9738251fe6da735ee

    SHA256

    9782f22b6cd0b5f7540e8ccdc14f9667c6897a47234b8f06280a949f71ff5e17

    SHA512

    2fb66225522641989aacb28af8c954c4e824839c61c28bb5818c729dcc0e2bf67f3e2f36ba0513ad342ea4f415028d22349320edcc5bbdc915dbaf993f83d87b

  • /data/user/0/com.poxiao.xxxbs/shared_prefs/AV_PUSH_SERVICE_SETTINGS_KEY.xml

    Filesize

    125B

    MD5

    8c354d1eb89a4242473c45152022e49e

    SHA1

    bbb255ab482691ff501e109e7cfd872e437725e5

    SHA256

    d36266379c0c281ee4e812dfbf04468e8bb363fa551513d95f4083c7cc0468ce

    SHA512

    10f4900385a65cf6a7f576e496b0edb239aa75baadf9c7a504712cf29d1b60e0888920f1c4e07c54056c6c9154cd4cb7afe8ad8a179118355227043e5d5f307a

  • /data/user/0/com.poxiao.xxxbs/shared_prefs/jbxxl_game_info.xml

    Filesize

    321B

    MD5

    ab3b466641924866d9393d6eaaa3a2b8

    SHA1

    8dfcafe3cf13410188dd1033854bae75f2961d04

    SHA256

    4b3241a793c45aa47eb871ade8a334ec35b890560496c0362aa4541f56b8c85e

    SHA512

    c639b3098127d773b3617b0402f48cfb414a314bf9a69f3beb560ce62f486a86cdb523842dd7b84ceb998a60702f065e1cccfcad1461447b64b23ad7ae2f609b

  • /data/user/0/com.poxiao.xxxbs/shared_prefs/jbxxl_game_info.xml

    Filesize

    367B

    MD5

    e7d1d6139e615d0436d6af5c6c3f7b57

    SHA1

    871308a0b0d1115d88a2702493995909f883839c

    SHA256

    73c4883b5c933b9cd3806a6699a9425e152dc4e5834ee05513ec8f4c6d0daf81

    SHA512

    0bbac42f082000b7c37d7ba4b7905e3aabc821ad9fcc2fa10fd66c5cdfda5de667a5b73ffd376d1e7c7f0d1adf108f7510a774a2337317f718bec40c66de5bf3

  • /data/user/0/com.poxiao.xxxbs/shared_prefs/jbxxl_game_info.xml

    Filesize

    471B

    MD5

    0d9011eb090edcdc0b853f1bf91485ad

    SHA1

    7cdc21cd7b82ae52061deb0e1e4f85fe6311b0f1

    SHA256

    c1b83d50d0aa64795e6168dbede24362abd07626a3ea6f35d21a6bfccc88d3ab

    SHA512

    d079e09574d5d1cde8cb4afc246ad64960d18c3b8cedcac4a9ab305cffbdfd54614d68563cf2192659160f0a962925a2f12eb0a11bbc4578139aa6bb0d3f0406

  • /data/user/0/com.poxiao.xxxbs/shared_prefs/jbxxl_game_info.xml

    Filesize

    108B

    MD5

    c4b91878e234218364c0506040bc4f83

    SHA1

    12d22b7d804def5a1911249b780b0aa8a568bf97

    SHA256

    014143c213b81e24dbfc030be5f14dd7a8b73abd6f33f91553b953b04ed37400

    SHA512

    c8bd5b10fb4c3d8089e42f351bfd64be20ed0e594e28cb918228c18ccff29125a20d8ea3239861bca42d62f3e52dc5be12116719c849b1e1e2c0814ad95c2846

  • /data/user/0/com.poxiao.xxxbs/shared_prefs/jbxxl_game_info.xml

    Filesize

    147B

    MD5

    9f053f09798542b1f485cc64ca49fc3c

    SHA1

    79c46d07f61b332a9dfb2c51f15a4d86b5fa6cc0

    SHA256

    786c353f8f33ab1afc6678ef769485ff78b9e80b0acabb6bb78741c53995123a

    SHA512

    345b97f6c44988afee5a6745be696438a83d78f94534f9a71e85a89af37c7191a1851b51377e17a1f5e3b1c9bb1e8eea204c3f1649d44b6bdb5ced4f0ff77e0b

  • /data/user/0/com.poxiao.xxxbs/shared_prefs/jbxxl_game_info.xml

    Filesize

    186B

    MD5

    085366c99670e60ff4ef5a858943d9cf

    SHA1

    13d794ad8bc14c2719ef7d9b83a7bca123d40c1f

    SHA256

    930c0b90e0e26e71485ed583cfe1ab273e77b05d7fb361a263ca8e4a63702215

    SHA512

    8ba6ef9cacb2e7638f08637b17eda13d5fccd8d22d69bb9b03261aac7d1ba2c856149b708b7799e92ab0ddb461eeedb0997d8483f7d581d2f238f3f27d9c7cab

  • /data/user/0/com.poxiao.xxxbs/shared_prefs/jbxxl_game_info.xml

    Filesize

    229B

    MD5

    d6002eb892f6d13e9c29a89847ce504e

    SHA1

    6419761bece84765473994f19a2ddf597d9ee20f

    SHA256

    ab92ea583c23dbf38b6a58c448f1f18f1d7af9cd36aa0e00256b2772f83444ea

    SHA512

    3beaafef9ac6a3563565380b8cd1b593e00252a14429e8804cf0ed2084ee6ebd5e585e08c4e108b60d8ee32356c508e9b7cb0a28859969aeb8d85c3c0bb8be63

  • /data/user/0/com.poxiao.xxxbs/shared_prefs/jbxxl_game_info.xml

    Filesize

    276B

    MD5

    6906a87a0e5d5b5be6ca42f6d47ebd1f

    SHA1

    606652c260f3aa60cd25cbcda5a18bce77f6cb0e

    SHA256

    82d0ab17a745a7b4de7c7c3d7f0bb997c82d0a9439e6c75f6a14ed39e5832496

    SHA512

    e393d75be929cdb75079b0a68e784f349e7fbb891597b5ac2911bd785f0335294642f4e2a80862e5ea64b4cd119c4b43ef5cfb97c52dcf735dce677757a3ce46

  • /data/user/0/com.poxiao.xxxbs/shared_prefs/px_cloud.xml

    Filesize

    110B

    MD5

    dfa6fa31acd3b4a52d84db0ed5fbcc41

    SHA1

    4bb5c5b088b196833bc8139f866d09b610e5333f

    SHA256

    bf50ac24c4b4ec3edb5de5a6f1a2f505e4bf889d0f6b19714ee8a18dbfd6598b

    SHA512

    c70f0a5e0ba5678d2d8b8174814535378b3ef163fba3ef304e6afbd9487341a0c686d4411c4c409b13132df5deacf6a2893de1cfe57e8882a0d62bf39c12b989

  • /data/user/0/com.poxiao.xxxbs/shared_prefs/px_cloud.xml

    Filesize

    152B

    MD5

    edfc9a572c7cda18aa1e66c688c52b8e

    SHA1

    16d9a1242754ce9227c5bef5ec70f7065a7d6e77

    SHA256

    8a952b4c6fbb16473312ea0722d7bd180af462e356746398008f75a98de730d3

    SHA512

    90c9ac1b068619314361859982b7b7aec28fa5d3c180ab8866b4ef0f2c16767e0bc5a7c0b5d2b032a04199ef3dffd0bfc826694e7a5b617db40ed26949977918

  • /data/user/0/com.poxiao.xxxbs/shared_prefs/px_cloud.xml

    Filesize

    209B

    MD5

    2fffbe93802d880283f710b58bb35e03

    SHA1

    cf66aa3a78b6f52edc906c446853e2a7a8189b5e

    SHA256

    e901f19071d4eb8a2f0ae1f218a0abe915e86d2e70666f8b2f1a5705def67354

    SHA512

    f03574de201f4971fe70f3134c6eb997b5f5cb885693be5cb721c27de1f3e991c7ba2995be6a6af418082c88809c697dd47a23f7e47e0b255fcf05eddbf0d5dc

  • /data/user/0/com.poxiao.xxxbs/shared_prefs/setting_music_info.xml

    Filesize

    117B

    MD5

    45efcb828bde29413b1062f37140c8fa

    SHA1

    4e8252927f067c1287c5d96574cd42b671b6dc39

    SHA256

    2e0fd6daf28aaef0c7ec817b4c5a0e211903eac6cf4ea9661549445fd662f4c2

    SHA512

    f7cabb1ce182c5cdfceb19fc5b9ddc2eb43ee449bcde9a10362e9ea7cda18ba2dc450bd10fe84bdc9b3fec0862b122776b67a2ed511158b24432c202dc3eae35

  • /data/user/0/com.poxiao.xxxbs/shared_prefs/setting_music_info.xml

    Filesize

    185B

    MD5

    43c53533485ffdd758f184c743e5e441

    SHA1

    afbdfc8623da3997c210ace4cd9585450ff931c6

    SHA256

    8253682d9cf305877346240d89756f419d9d575769d6925a6e599595a31c7c84

    SHA512

    859482791ef4583bc6035df4c39214323167708b5a621ca7e4beeddc91ec406cafb13223ebbfbb816cab85ae2dc093e3222ba9488eaa68b1f33744ccaab58360