ffe7aad42601d0388b493a587bc168d3eb8a9f5ef33d34dfba7505ab28779411

Analysis

max time kernel
3191529s
max time network
137s
platform
android_x64
resource
android-x64-arm64-20220823-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
submitted
27/11/2022, 14:43

Target

ffe7aad42601d0388b493a587bc168d3eb8a9f5ef33d34dfba7505ab28779411.apk
Size

105KB
MD5

9751606927280a2c2e9dd17a57c00b0c
SHA1

238ddd7e4c45ec2f7b39fe925b7576b690960637
SHA256

ffe7aad42601d0388b493a587bc168d3eb8a9f5ef33d34dfba7505ab28779411
SHA512

40129efe025ecff34470f30f6f104f8d9193516786260e04687b528ea5fddaaa549b3f9361aa6c5fa63bd6a6c4109ad23ff8199cc94547ca29c9dd48caff3012
SSDEEP

1536:5uIGvGB5w1K0+dGeOexaWU2lfYyl5rv5xPRFbgLKxe7wuaNVh5UDrQ1QJC0JeyT1:49vOy1KDGe3U2lf9vmKx3NT5UMMHl3

Score

7^/10

infostealer

Acquires the wake lock. 1 IoCs

description	ioc	Process
Framework service call	android.os.IPowerManager.acquireWakeLock	com.android.down0311

Reads the content of SMS inbox messages. 1 IoCs

description	ioc	Process
URI accessed for read	content://sms/inbox	com.android.down0311

com.android.down0311
1⤵
- Acquires the wake lock.
- Reads the content of SMS inbox messages.
PID:4640

/data/user/0/com.android.down0311/databases/baidu

Filesize
192KB

MD5
f69cc51bbb89f344d02183c90a56beaf

SHA1
0793761223c9445b80f077ecb65212dbaede3902

SHA256
19a54aeee4eee5797291b72bf0ccddfda8def872c57c9b1e00c582f6429b8047

SHA512
0ca44d18ec5664a89efc0da66bec4400a6057d09573f5fecb4e53b8f8be627d69423a4851b9b0109edce35f39642b629d227d71a31b7d49b461cd3d1fe41c380

Download Submit
/data/user/0/com.android.down0311/databases/baidu-journal

Filesize
1KB

MD5
fdd44b237841dcc05494f1fdf350ac23

SHA1
5a0b69bf8d134212bc499f614af4b265f9b57674

SHA256
3b288706f64c4be5121a6b12655c593a20cebc35373fe6dd4d367d14db057af0

SHA512
6a92b929c0ae0f6fac569a12dfa6aa90ebcdc3e96037e1febd2c94cbdebd85eab1fcb5e08720f73739f3b5eeadfd60e33bc5eb102356841bff187e3d4c8e6919

Download Submit