Analysis

  • max time kernel
    3218427s
  • max time network
    158s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    27-11-2022 19:53

General

  • Target

    fa20ab02da5fa099a6266ca6c56a22991f3dc4ad84cfa46bad6907ea351bb8d4.apk

  • Size

    584KB

  • MD5

    fe49c4deeb06a77d4717e6d855c77a1b

  • SHA1

    f71a37efb6c65f1ea792b4c1a5f3f2da25c344c9

  • SHA256

    fa20ab02da5fa099a6266ca6c56a22991f3dc4ad84cfa46bad6907ea351bb8d4

  • SHA512

    9a2e191edbf360bafa4beb04e41ae5294b217c963e767b81abe1e1e15045e8785bfc6aa4aa6eb5258b39c5c8e52897a02f29fa6f91e8ba2c2f7351573b8f87e4

  • SSDEEP

    12288:zUomi3TtC6ws/+DsxeuSRNH3eQrqpffSFx84wrrQoxLLZLO0aE:Yom45/+DsxeuiJ3eSr8jrrQ2XdhaE

Score
7/10

Malware Config

Signatures

  • Reads the content of SMS inbox messages. 1 IoCs
  • Reads information about phone network operator.

Processes

  • net.d2th9.ccy2mw3.wlr3av2.yuoko.w20
    1⤵
    • Reads the content of SMS inbox messages.
    PID:4404

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/net.d2th9.ccy2mw3.wlr3av2.yuoko.w20/files/.imprint

    Filesize

    841B

    MD5

    70c1359727727e87057fbb550c170ac3

    SHA1

    ebe089f6167652ca24719da5ecb3b1060b81174c

    SHA256

    7e170254f7e6fa87f9a53133dcd5192db263b4c4696bc9adbbc5129e3cbf5cdc

    SHA512

    b7b2c9bc6a6b2b317b3f4e5a9356bc04a6085b53544809343e833ac85dfcad152d35fa2cdd888e96c32ac1f5c734207537158d7056b41660338afbf11689df19

  • /data/user/0/net.d2th9.ccy2mw3.wlr3av2.yuoko.w20/files/umeng_it.cache

    Filesize

    245B

    MD5

    15c7cd88a4b31c7adeffadf9dde3881c

    SHA1

    73a3e237efd8d5b7edde1905c6a1c820718dd81c

    SHA256

    3258119dab6bcc0688048a7de1e6737d07ccbaa1b7f7c8d23bebf76eed37d6d6

    SHA512

    3f7ce651760898c674a13923ec37c26f1839b4f75421e109cbd7f5d9adaa5f193a623f43e34744a642fa96fd9d526d104b4a065bcf2f07c4dcb91c77afdfe79e