Analysis

  • max time kernel
    2422624s
  • max time network
    170s
  • platform
    android_x64
  • resource
    android-x64-20220823-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20220823-enlocale:en-usos:android-10-x64system
  • submitted
    08/01/2023, 07:59

General

  • Target
    com.mini.screen.tvcast-32-apksos.com.apk
  • Size 6.5MB
  • Sample230108-jvdymsda79
  • SHA256 41298824cd00b282517c797830be2979ace038d26f39a4deab7fc2c4da716c4c
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.mini.screen.tvcast
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4731
    • sh -c type su
      2⤵
        PID:5588
      • ls -l /sbin/su
        2⤵
          PID:5618

      Network

            MITRE ATT&CK Enterprise v6

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            wa_none_1_1_4731_3441_1673164757415

            • Path /data/user/0/com.mini.screen.tvcast/app_UApm/5efc45aa167eddfef00000fb/ready/4731/wa_none_1_1_4731_3441_1673164757415
            • Size 3KB
            • SHA256 31f5310c5bdad0a54663963eeb67d433bdaa4a6db85d775f20a46f326a2e915e
            • MD5 SHA1 SHA512

            wa_gzip_1_1_4731_2403_1673164817506

            • Path /data/user/0/com.mini.screen.tvcast/app_UApm/5efc45aa167eddfef00000fb/upload/wa_gzip_1_1_4731_2403_1673164817506
            • Size 584B
            • SHA256 cab66276ef89357eeefbfc842fdd9b0d4009f1cb4be0edc408c8d66d0240061a
            • MD5 SHA1 SHA512

            Cookies

            • Path /data/user/0/com.mini.screen.tvcast/app_webview/Cookies
            • Size 88KB
            • SHA256 c71cb36d7066e6e08e309adc7b7596bedec1fa14e4eef3a1bc46cef83b18994f
            • MD5 SHA1 SHA512 SSDEEP

            Cookies-journal

            • Path /data/user/0/com.mini.screen.tvcast/app_webview/Cookies-journal
            • Size 1KB
            • SHA256 3d529c679bf34b52e5a03afc833dd4106c19f17c8498c43ecac5d0cf699028f4
            • MD5 SHA1 SHA512

            index

            • Path /data/user/0/com.mini.screen.tvcast/app_webview/GPUCache/index
            • Size 48B
            • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
            • MD5 SHA1 SHA512

            temp-index

            • Path /data/user/0/com.mini.screen.tvcast/app_webview/GPUCache/index-dir/temp-index
            • Size 96B
            • SHA256 844b7178d7c9d4a47d19106ac7f974c1f24298d2b89fb9d534411967bb9c0ee2
            • MD5 SHA1 SHA512

            Web Data

            • Path /data/user/0/com.mini.screen.tvcast/app_webview/Web Data
            • Size 112KB
            • SHA256 c109aa8bfc364d5fd0756f1c9d35ee3d6df31325061ac70d8469f28cfc882ab7
            • MD5 SHA1 SHA512 SSDEEP

            Web Data-journal

            • Path /data/user/0/com.mini.screen.tvcast/app_webview/Web Data-journal
            • Size 1KB
            • SHA256 8d0f1a95d04d81163ea083817f25860e6438d578140060a84861efab7caf395c
            • MD5 SHA1 SHA512

            metrics_guid

            • Path /data/user/0/com.mini.screen.tvcast/app_webview/metrics_guid
            • Size 36B
            • SHA256 6396ca125ce5c9f3128c65547457a024116f5b829145e3aa23905c044d25784f
            • MD5 SHA1 SHA512

            1651189566953.jar

            • Path /data/user/0/com.mini.screen.tvcast/cache/1651189566953.jar
            • Size 20KB
            • SHA256 1f37ad9f8b5cb9ae9d584d9c382fc0cd9a4596c26f62d9ecb74d9c32720ee1e6
            • MD5 SHA1 SHA512 SSDEEP

            settings.dat

            • Path /data/user/0/com.mini.screen.tvcast/cache/WebView/Crashpad/settings.dat
            • Size 40B
            • SHA256 1b7c82df4a0f4588dc359442abaf5ab7bb8d33d791124700b5ffd2be9364543d
            • MD5 SHA1 SHA512

            index

            • Path /data/user/0/com.mini.screen.tvcast/cache/org.chromium.android_webview/Code Cache/js/index
            • Size 48B
            • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
            • MD5 SHA1 SHA512

            temp-index

            • Path /data/user/0/com.mini.screen.tvcast/cache/org.chromium.android_webview/Code Cache/js/index-dir/temp-index
            • Size 96B
            • SHA256 eb48272f12e46dc8f25cddc0ff0f513b04825a222f6a7caea0e0cef534b21468
            • MD5 SHA1 SHA512

            f038e94cb33282ab_0

            • Path /data/user/0/com.mini.screen.tvcast/cache/org.chromium.android_webview/f038e94cb33282ab_0
            • Size 400B
            • SHA256 6da95ae1acbfb719cf6466b2e0cbf3379ce393df0f2f7061acfd4048ccd3a929
            • MD5 SHA1 SHA512

            index

            • Path /data/user/0/com.mini.screen.tvcast/cache/org.chromium.android_webview/index
            • Size 48B
            • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
            • MD5 SHA1 SHA512

            temp-index

            • Path /data/user/0/com.mini.screen.tvcast/cache/org.chromium.android_webview/index-dir/temp-index
            • Size 96B
            • SHA256 8951e05a3e76e49c3e110b45116e068b1e6c072e45d3e1f44ad9260b7f282b55
            • MD5 SHA1 SHA512

            temp-index

            • Path /data/user/0/com.mini.screen.tvcast/cache/org.chromium.android_webview/index-dir/temp-index
            • Size 144B
            • SHA256 463e730e6c66787813a82e312d8d926af5f5863fc47254d61801450e0d315fb6
            • MD5 SHA1 SHA512

            temp-index

            • Path /data/user/0/com.mini.screen.tvcast/cache/org.chromium.android_webview/index-dir/temp-index
            • Size 96B
            • SHA256 2a2fe292ff0c4f2513ac3a8b1afa887f8c9ac6cf58d36139c4acdc13a745e5c8
            • MD5 SHA1 SHA512

            TSACVT0NEERCS0INIM0MOC.ss

            • Path /data/user/0/com.mini.screen.tvcast/crashsdk/tags/TSACVT0NEERCS0INIM0MOC.ss
            • Size 3B
            • SHA256 789547faf32d975b73dd8387a8fc28f886d00f1b211e07e39d661318c447d520
            • MD5 SHA1 SHA512

            unique

            • Path /data/user/0/com.mini.screen.tvcast/crashsdk/tags/unique
            • Size 36B
            • SHA256 320c9090bd68d044bcdbda6bd4516986a937643590f9a849fe53f31fa3be9382
            • MD5 SHA1 SHA512

            ver

            • Path /data/user/0/com.mini.screen.tvcast/crashsdk/tags/ver
            • Size 24B
            • SHA256 0447169c23559e70e79ce2cbcbf8f4d6c523796e3fbcece89d0588d3ea18a34b
            • MD5 SHA1 SHA512

            google_app_measurement_local.db

            • Path /data/user/0/com.mini.screen.tvcast/databases/google_app_measurement_local.db
            • Size 88KB
            • SHA256 c3aa0e8a52b6dcae0f988502bb3887f94c13148a8f36c3fcf5036c7c99afbdbc
            • MD5 SHA1 SHA512 SSDEEP

            google_app_measurement_local.db-journal

            • Path /data/user/0/com.mini.screen.tvcast/databases/google_app_measurement_local.db-journal
            • Size 1KB
            • SHA256 5e0db0ca94e363485f663fb774d237ce0550862d94b7c8e48faa403b4665772b
            • MD5 SHA1 SHA512

            ua.db

            • Path /data/user/0/com.mini.screen.tvcast/databases/ua.db
            • Size 136KB
            • SHA256 55e9b14fd71132bef7616269a3eb5c35f429375818feb84488d7411d55ae6492
            • MD5 SHA1 SHA512 SSDEEP

            ua.db-journal

            • Path /data/user/0/com.mini.screen.tvcast/databases/ua.db-journal
            • Size 1KB
            • SHA256 b67b9fffa59a11d82b08af7e1cdb90e96c464d6715ca2d3f9b971ba3f5bd55d6
            • MD5 SHA1 SHA512

            umeng_zero_cache.db

            • Path /data/user/0/com.mini.screen.tvcast/databases/umeng_zero_cache.db
            • Size 72KB
            • SHA256 b038c916000735fcb92571c72c1eeaeef3117254e1c1a74208802968ac8e0e8d
            • MD5 SHA1 SHA512 SSDEEP

            umeng_zero_cache.db-journal

            • Path /data/user/0/com.mini.screen.tvcast/databases/umeng_zero_cache.db-journal
            • Size 1KB
            • SHA256 11261292f1d68a983c5269d8a60bce3b7ce8d23e1f51f61d0094f6e3de99e1ec
            • MD5 SHA1 SHA512

            i==9.5.2+000&&3.2.2_1673164796883_dW5pZnlfbG9ncw== .log

            • Path /data/user/0/com.mini.screen.tvcast/files/.envelope/i==9.5.2+000&&3.2.2_1673164796883_dW5pZnlfbG9ncw== .log
            • Size 1KB
            • SHA256 e69ac865acd90581e3cc10ccdb8d1ca7c97782ed9656d88ede9cf845a162e704
            • MD5 SHA1 SHA512

            t==9.5.2+000&&3.2.2_1673164792160_dW5pZnlfbG9ncw== .log

            • Path /data/user/0/com.mini.screen.tvcast/files/.envelope/t==9.5.2+000&&3.2.2_1673164792160_dW5pZnlfbG9ncw== .log
            • Size 1KB
            • SHA256 713688f4c2bb0e748b9e5d9b0a9a6e7608f6dd3957a2e30ce8a172c417676bed
            • MD5 SHA1 SHA512

            z==1.2.0&&3.2.2_1673164757418_emNmZw== .log

            • Path /data/user/0/com.mini.screen.tvcast/files/.envelope/z==1.2.0&&3.2.2_1673164757418_emNmZw== .log
            • Size 284B
            • SHA256 f2153061d3278ce766332f9487133fd2213f67bebad74bada30b3c8c83be233a
            • MD5 SHA1 SHA512

            exchangeIdentity.json

            • Path /data/user/0/com.mini.screen.tvcast/files/.umeng/exchangeIdentity.json
            • Size 162B
            • SHA256 80bd06cb388cee0ce5c1e4f7f538794ce82a4f77889387410fdcad4bd06c5fd6
            • MD5 SHA1 SHA512

            exid.dat

            • Path /data/user/0/com.mini.screen.tvcast/files/exid.dat
            • Size 62B
            • SHA256 e552a0ff6b9c6fab412da34ed0aadf6caeb900a2d1c112da88b413bddb97b88c
            • MD5 SHA1 SHA512

            frc_1:310461937135:android:c4d8665969cdaaba7ef21a_firebase_activate.json

            • Path /data/user/0/com.mini.screen.tvcast/files/frc_1:310461937135:android:c4d8665969cdaaba7ef21a_firebase_activate.json
            • Size 108B
            • SHA256 ce6a230617025601d4a66221d962c7d4c19f9fe3ba6e88d579db504eedd5741c
            • MD5 SHA1 SHA512

            frc_1:310461937135:android:c4d8665969cdaaba7ef21a_firebase_fetch.json

            • Path /data/user/0/com.mini.screen.tvcast/files/frc_1:310461937135:android:c4d8665969cdaaba7ef21a_firebase_fetch.json
            • Size 108B
            • SHA256 ce6a230617025601d4a66221d962c7d4c19f9fe3ba6e88d579db504eedd5741c
            • MD5 SHA1 SHA512

            umeng_it.cache

            • Path /data/user/0/com.mini.screen.tvcast/files/umeng_it.cache
            • Size 285B
            • SHA256 b7161988cd1a059824d82dcd3ad81cb8741e0e69fa54673cf2f76ecdef6a71ec
            • MD5 SHA1 SHA512

            androidx.work.workdb

            • Path /data/user/0/com.mini.screen.tvcast/no_backup/androidx.work.workdb
            • Size 8KB
            • SHA256 63a219c7092be26641907c5f955aa977e7675e3922a8e4ee2af25bfed8c7bbfb
            • MD5 SHA1 SHA512 SSDEEP

            androidx.work.workdb-journal

            • Path /data/user/0/com.mini.screen.tvcast/no_backup/androidx.work.workdb-journal
            • Size 1KB
            • SHA256 30e4d13d21e54a64ba1fccd11fac6c62e88198b2d81dbc751af30fe9c60c6728
            • MD5 SHA1 SHA512

            androidx.work.workdb-shm

            • Path /data/user/0/com.mini.screen.tvcast/no_backup/androidx.work.workdb-shm
            • Size 16B
            • SHA256 374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
            • MD5 SHA1 SHA512

            androidx.work.workdb-wal

            • Path /data/user/0/com.mini.screen.tvcast/no_backup/androidx.work.workdb-wal
            • Size 217KB
            • SHA256 5ae92903410b03f21d02f8847aa97f54596f441f54cbc565b57bc16ff3df4ccd
            • MD5 SHA1 SHA512 SSDEEP

            FirebaseHeartBeatW0RFRkFVTFRd+MTozMTA0NjE5MzcxMzU6YW5kcm9pZDpjNGQ4NjY1OTY5Y2RhYWJhN2VmMjFh.xml

            • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTozMTA0NjE5MzcxMzU6YW5kcm9pZDpjNGQ4NjY1OTY5Y2RhYWJhN2VmMjFh.xml
            • Size 480B
            • SHA256 e074dbfd331a8a03fa628c7307f51540042f6a304b16a5b00ddc7d05ca5eb78d
            • MD5 SHA1 SHA512

            FirebaseHeartBeatW0RFRkFVTFRd+MTozMTA0NjE5MzcxMzU6YW5kcm9pZDpjNGQ4NjY1OTY5Y2RhYWJhN2VmMjFh.xml

            • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTozMTA0NjE5MzcxMzU6YW5kcm9pZDpjNGQ4NjY1OTY5Y2RhYWJhN2VmMjFh.xml
            • Size 534B
            • SHA256 8a08f45c0759f15348f335ace5a1dd4c0d35b42201f990de1f55065501fe8668
            • MD5 SHA1 SHA512

            FirebaseHeartBeatW0RFRkFVTFRd+MTozMTA0NjE5MzcxMzU6YW5kcm9pZDpjNGQ4NjY1OTY5Y2RhYWJhN2VmMjFh.xml

            • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTozMTA0NjE5MzcxMzU6YW5kcm9pZDpjNGQ4NjY1OTY5Y2RhYWJhN2VmMjFh.xml
            • Size 178B
            • SHA256 9da54cb93101be1f5c80e541f2a8aaf1fff4f07d74c794762a0c8613cec4807a
            • MD5 SHA1 SHA512

            WebViewChromiumPrefs.xml

            • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/WebViewChromiumPrefs.xml
            • Size 127B
            • SHA256 10b13d894f36d4391fcc31313a244d5f6cd89c8e8c03347282e281c4af13c0a6
            • MD5 SHA1 SHA512

            com.google.android.gms.measurement.prefs.xml

            • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/com.google.android.gms.measurement.prefs.xml
            • Size 395B
            • SHA256 9eb1d61851a98900ad1f42b39d4fa1914f0859c9e2b3d51b9a6d2c6157dd3be9
            • MD5 SHA1 SHA512

            com.google.android.gms.measurement.prefs.xml

            • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/com.google.android.gms.measurement.prefs.xml
            • Size 443B
            • SHA256 1f1db2dea9a6e6ac9a6d37bc098c0425b9df4df1fa519527ca0964419458d803
            • MD5 SHA1 SHA512

            com.google.android.gms.measurement.prefs.xml

            • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/com.google.android.gms.measurement.prefs.xml
            • Size 606B
            • SHA256 851c7c4ee7ad1535a5c385950ff1197a78a9ea22bef23ff756401b67e7a26706
            • MD5 SHA1 SHA512

            com.google.android.gms.measurement.prefs.xml

            • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/com.google.android.gms.measurement.prefs.xml
            • Size 607B
            • SHA256 67aa51443bd616a376a09017f990eaba6a7763401579c61b16a796cde6b519ca
            • MD5 SHA1 SHA512

            com.google.android.gms.measurement.prefs.xml

            • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/com.google.android.gms.measurement.prefs.xml
            • Size 122B
            • SHA256 2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
            • MD5 SHA1 SHA512

            com.google.android.gms.measurement.prefs.xml

            • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/com.google.android.gms.measurement.prefs.xml
            • Size 665B
            • SHA256 b5e28ebd76d275b6b90801c374ee718e9da445691c666e4bc54a7d03d093bf98
            • MD5 SHA1 SHA512

            com.mini.screen.tvcast_ad_lib.xml

            • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/com.mini.screen.tvcast_ad_lib.xml
            • Size 122B
            • SHA256 da18515d12c89606d4c41dcb06cb42f2e2aae4da5cb86bbce7b3af703c7e84c2
            • MD5 SHA1 SHA512

            efs_launch.xml

            • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/efs_launch.xml
            • Size 139B
            • SHA256 aa884e1f7346169612efcf6dc5f77479e0c24c8e4c02a038e335142c5b4fdf55
            • MD5 SHA1 SHA512

            efs_launch.xml

            • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/efs_launch.xml
            • Size 214B
            • SHA256 f5d9d489713acc88c0f62a2ceb9c73c67bc38f4c9c5f518b6aa8106dea605347
            • MD5 SHA1 SHA512

            efs_launch.xml

            • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/efs_launch.xml
            • Size 278B
            • SHA256 2ba7ce633e51ae705e5e9e8a74967e13f8ceda3ab3713b9b35c2ae11cdde1045
            • MD5 SHA1 SHA512

            efs_launch.xml

            • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/efs_launch.xml
            • Size 335B
            • SHA256 3ef422e44d422d08ffd13f5b0c69951316470f4153a3461f142d8496aa4ea5ad
            • MD5 SHA1 SHA512

            sdk_preference_.xml

            • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/sdk_preference_.xml
            • Size 65B
            • SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
            • MD5 SHA1 SHA512

            um_policy_grant.xml

            • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/um_policy_grant.xml
            • Size 217B
            • SHA256 e067b7b300cec8983475c015cbf9bc4e8a20606747aab4488b56479961ff9b9a
            • MD5 SHA1 SHA512

            umeng_common_config.xml

            • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/umeng_common_config.xml
            • Size 130B
            • SHA256 e9629c21b8307ba116906b5b324f65ab938fe1803cc68eb0c3f89ea72d727304
            • MD5 SHA1 SHA512

            umeng_common_config.xml

            • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/umeng_common_config.xml
            • Size 195B
            • SHA256 465fbb7e3eaf843620d3e2a14057db50ef0cacfeeb78a3ca585fba6053bbc853
            • MD5 SHA1 SHA512

            umeng_common_config.xml

            • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/umeng_common_config.xml
            • Size 244B
            • SHA256 31b0b7a796954b183445e4d30ea45e00b2c35c2053ca123958c341f0e450ac6a
            • MD5 SHA1 SHA512

            umeng_general_config.xml

            • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/umeng_general_config.xml
            • Size 209B
            • SHA256 a1073a39d9b1ea408ce4d12e1d5b7c3a0d1ab4d8c2a2f74be2c2725779e18381
            • MD5 SHA1 SHA512

            umeng_sp_oaid.xml

            • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/umeng_sp_oaid.xml
            • Size 65B
            • SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
            • MD5 SHA1 SHA512