Analysis
-
max time kernel
3179538s -
max time network
140s -
platform
android_x86 -
resource
android-x86-arm-20220823-en -
resource tags
androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system -
submitted
27-11-2022 12:57
Static task
static1
Behavioral task
behavioral1
Sample
16f3beaa2dd458601297b609b187c023efd0e74a5823c9b464b468db035b2573.apk
Resource
android-x86-arm-20220823-en
General
-
Target
16f3beaa2dd458601297b609b187c023efd0e74a5823c9b464b468db035b2573.apk
-
Size
1.2MB
-
MD5
994124c4d3bd57b51c9a8bd53b59cba7
-
SHA1
03dbcbe6fd075d9873c3a750e225b41decc5eec9
-
SHA256
16f3beaa2dd458601297b609b187c023efd0e74a5823c9b464b468db035b2573
-
SHA512
537274c144ab2cb7bec66d4ba4bf39360b74a92045d7a7686139666511a09159391d698bb03b2c8d0a610334feb899b823407f33be1397d9b0801beb55196910
-
SSDEEP
24576:wlkFPOd9NH48Y3XnjEI1G3C85R2ngwK/YHDuUArj8d0bEuuFO1klrLziStJungyL:zP4H4Zi3tR2gwK/Euxf8dufGj1JUL
Malware Config
Signatures
-
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data). 1 IoCs
Processes:
ycq.lhxvdi.pwwdescription ioc process Framework API call javax.crypto.Cipher.doFinal ycq.lhxvdi.pww
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/ycq.lhxvdi.pww/shared_prefs/Game.xmlFilesize
117B
MD5af85887185a296c934ff1762a35f16dd
SHA1af52694fea6ef52ffb7d73f0db7955ad6e52e6b9
SHA256df0560fcd9e28c47ad44525b73b71340b4fc9d90cd7efec7aca9e1845f16763c
SHA512e11e710206c82404c7749fe06852bb179cafb5986aa37caf72a34cb48f68b3db81cb5338de3e89b9c7011af0ea4cd155a2c00549e45d63e4864b5c6f12995997