Analysis

  • max time kernel
    3179538s
  • max time network
    140s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    27-11-2022 12:57

General

  • Target

    16f3beaa2dd458601297b609b187c023efd0e74a5823c9b464b468db035b2573.apk

  • Size

    1.2MB

  • MD5

    994124c4d3bd57b51c9a8bd53b59cba7

  • SHA1

    03dbcbe6fd075d9873c3a750e225b41decc5eec9

  • SHA256

    16f3beaa2dd458601297b609b187c023efd0e74a5823c9b464b468db035b2573

  • SHA512

    537274c144ab2cb7bec66d4ba4bf39360b74a92045d7a7686139666511a09159391d698bb03b2c8d0a610334feb899b823407f33be1397d9b0801beb55196910

  • SSDEEP

    24576:wlkFPOd9NH48Y3XnjEI1G3C85R2ngwK/YHDuUArj8d0bEuuFO1klrLziStJungyL:zP4H4Zi3tR2gwK/Euxf8dufGj1JUL

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • ycq.lhxvdi.pww
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4076
    • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
      2⤵
        PID:4173

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/ycq.lhxvdi.pww/shared_prefs/Game.xml
      Filesize

      117B

      MD5

      af85887185a296c934ff1762a35f16dd

      SHA1

      af52694fea6ef52ffb7d73f0db7955ad6e52e6b9

      SHA256

      df0560fcd9e28c47ad44525b73b71340b4fc9d90cd7efec7aca9e1845f16763c

      SHA512

      e11e710206c82404c7749fe06852bb179cafb5986aa37caf72a34cb48f68b3db81cb5338de3e89b9c7011af0ea4cd155a2c00549e45d63e4864b5c6f12995997