Analysis
-
max time kernel
3156129s -
max time network
165s -
platform
android_x64 -
resource
android-x64-arm64-20220823-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system -
submitted
27-11-2022 07:09
Static task
static1
Behavioral task
behavioral1
Sample
602a5cef9cdcf610e95e326f5063214598f2cb83c1c47e7e85cabf2e595025c5.apk
Resource
android-x86-arm-20220823-en
Behavioral task
behavioral2
Sample
602a5cef9cdcf610e95e326f5063214598f2cb83c1c47e7e85cabf2e595025c5.apk
Resource
android-x64-20220823-en
Behavioral task
behavioral3
Sample
602a5cef9cdcf610e95e326f5063214598f2cb83c1c47e7e85cabf2e595025c5.apk
Resource
android-x64-arm64-20220823-en
General
-
Target
602a5cef9cdcf610e95e326f5063214598f2cb83c1c47e7e85cabf2e595025c5.apk
-
Size
1.8MB
-
MD5
4ea92431fad94dbd3958c5d59a68b407
-
SHA1
ffb3aadbbaf33232c0ad388c0d536248bf9f58f2
-
SHA256
602a5cef9cdcf610e95e326f5063214598f2cb83c1c47e7e85cabf2e595025c5
-
SHA512
fe1e70934efec840074f360480443ac2274a9fa132eb312490a1f7a37cfebbc58ae4df82fb1597f2de0bacba52b05d332651c8daa78d862f603549bc7f3dee4a
-
SSDEEP
49152:SqWZ0xbeukqtvMyAS+Q6Qa0K90Zw0iNquIPdaq1rfY:waWQa0dU5IPdaq1jY
Malware Config
Signatures
-
Acquires the wake lock. 1 IoCs
Processes:
com.android.kbbsdescription ioc process Framework service call android.os.IPowerManager.acquireWakeLock com.android.kbbs -
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
com.android.kbbsdescription ioc process Framework API call javax.crypto.Cipher.doFinal com.android.kbbs
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/com.android.kbbs/databases/cn.cq.yzFilesize
88KB
MD51d77e8c8e82017003c8f08d6bea5c5b9
SHA1a715f0c64b25b555cb0ddf59e2b158a7ed0ef6af
SHA256e27cf73f503c1897dfa49844984f719eb4430ea52ee980e26fcb31774144ac93
SHA512b5cd1751d5d0614d32ecc84966c415ae0b560e74ff2e81009784107454051908077ed8385e916cb8869f837da6e3105ec7d047390969d6868fdc97802e443c14
-
/data/user/0/com.android.kbbs/databases/cn.cq.yz-journalFilesize
1KB
MD527e94a97b77315b464343ad17db354bc
SHA1b8e1d1f591b11e454861f5b8cceeeaccb5d66816
SHA256f09a9e0ec826a1eaa7fba48ac3d117ce724e1c55744cce56724c312f2b79b909
SHA5124b44c1f697686f113c0893dac859e6e1f222f4a8e0e4493b24640f390a6359dea5595c4e6ec5b1679b6b6c17c4f35b065e6ef923b92a52aa749c48936f766081
-
/storage/emulated/0/Download/P.apkMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/storage/emulated/0/Download/P.apkMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e