Analysis

  • max time kernel
    2422630s
  • max time network
    156s
  • platform
    android_x64
  • resource
    android-x64-arm64-20220823-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20220823-enlocale:en-usos:android-11-x64system
  • submitted
    08/01/2023, 07:59

General

  • Target
    com.mini.screen.tvcast-32-apksos.com.apk
  • Size 6.5MB
  • Sample230108-jvdymsda79
  • SHA256 41298824cd00b282517c797830be2979ace038d26f39a4deab7fc2c4da716c4c
  • MD5 SHA1 SHA512 SSDEEP
Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Legitimate hosting services abused for malware hosting/C2 1 TTPs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.mini.screen.tvcast
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4401
    • sh -c type su
      2⤵
        PID:4827

    Network

          MITRE ATT&CK Enterprise v6

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          wa_none_1_1_4401_7857_1673164757408

          • Path /data/user/0/com.mini.screen.tvcast/app_UApm/5efc45aa167eddfef00000fb/ready/4401/wa_none_1_1_4401_7857_1673164757408
          • Size 3KB
          • SHA256 1b730e755033b53e5aa0a17c2aa8a7b1f92ccaf8262a411c4e0e2f12385c8483
          • MD5 SHA1 SHA512

          wa_gzip_1_1_4401_7297_1673164817436

          • Path /data/user/0/com.mini.screen.tvcast/app_UApm/5efc45aa167eddfef00000fb/upload/wa_gzip_1_1_4401_7297_1673164817436
          • Size 559B
          • SHA256 64fdf5c39e83a68950bce5631e1bb2197e554fdc419fcb44f0a0f77cf9190054
          • MD5 SHA1 SHA512

          Cookies

          • Path /data/user/0/com.mini.screen.tvcast/app_webview/Default/Cookies
          • Size 88KB
          • SHA256 dedad651c6c2095d4c77030a17669bd9c7ab957cf93dbf1dcdbc8e0256124e76
          • MD5 SHA1 SHA512 SSDEEP

          Cookies-journal

          • Path /data/user/0/com.mini.screen.tvcast/app_webview/Default/Cookies-journal
          • Size 1KB
          • SHA256 3e4a2244e217f7cb08d82fff60a2da03e9faf0ab695efcde06e00199de288da0
          • MD5 SHA1 SHA512

          index

          • Path /data/user/0/com.mini.screen.tvcast/app_webview/Default/GPUCache/index
          • Size 48B
          • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
          • MD5 SHA1 SHA512

          temp-index

          • Path /data/user/0/com.mini.screen.tvcast/app_webview/Default/GPUCache/index-dir/temp-index
          • Size 96B
          • SHA256 b544fdcad4eaabddb1ccf2048d6580f02a89029369cf3ef06c503c9e34949af2
          • MD5 SHA1 SHA512

          000001.dbtmp

          • Path /data/user/0/com.mini.screen.tvcast/app_webview/Default/Session Storage/000001.dbtmp
          • Size 16B
          • SHA256 0f1bad70c7bd1e0a69562853ec529355462fcd0423263a3d39d6d0d70b780443
          • MD5 SHA1 SHA512

          000003.log

          • Path /data/user/0/com.mini.screen.tvcast/app_webview/Default/Session Storage/000003.log
          • Size 61B
          • SHA256 5c3a5b578ab9fe853ead7040bc161929ea4f6902073ba2b8bb84487622b98923
          • MD5 SHA1 SHA512

          LOG

          • Path /data/user/0/com.mini.screen.tvcast/app_webview/Default/Session Storage/LOG
          • Size 134B
          • SHA256 342023f259ea387d1dcfb1d14469f0445356959bf3e67314f92da1a42f2ae2c2
          • MD5 SHA1 SHA512

          MANIFEST-000001

          • Path /data/user/0/com.mini.screen.tvcast/app_webview/Default/Session Storage/MANIFEST-000001
          • Size 41B
          • SHA256 f9d31b278e215eb0d0e9cd709edfa037e828f36214ab7906f612160fead4b2b4
          • MD5 SHA1 SHA512

          Web Data

          • Path /data/user/0/com.mini.screen.tvcast/app_webview/Default/Web Data
          • Size 120KB
          • SHA256 8859a216183793485d4699bf69d7ed96904679834188d07b9a70424d47eb1420
          • MD5 SHA1 SHA512 SSDEEP

          Web Data-journal

          • Path /data/user/0/com.mini.screen.tvcast/app_webview/Default/Web Data-journal
          • Size 2KB
          • SHA256 d9ac9915d9afafb9d3138eb6ab86eb153a95f595d782d7365e064d3175f940cb
          • MD5 SHA1 SHA512

          webview_data.lock

          • Path /data/user/0/com.mini.screen.tvcast/app_webview/webview_data.lock
          • Size 28B
          • SHA256 cad26a9abae124e063ac4d34ed89ebe0758b8d5e4f16409925a0cccb7820f443
          • MD5 SHA1 SHA512

          1651189566953.jar

          • Path /data/user/0/com.mini.screen.tvcast/cache/1651189566953.jar
          • Size 20KB
          • SHA256 1f37ad9f8b5cb9ae9d584d9c382fc0cd9a4596c26f62d9ecb74d9c32720ee1e6
          • MD5 SHA1 SHA512 SSDEEP

          settings.dat

          • Path /data/user/0/com.mini.screen.tvcast/cache/WebView/Crashpad/settings.dat
          • Size 40B
          • SHA256 38c1f7905854e88efbd1f6ad806d3a5015bb33f121e17419bf50fef4f9bcc707
          • MD5 SHA1 SHA512

          index

          • Path /data/user/0/com.mini.screen.tvcast/cache/WebView/Default/HTTP Cache/Code Cache/js/index
          • Size 48B
          • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
          • MD5 SHA1 SHA512

          temp-index

          • Path /data/user/0/com.mini.screen.tvcast/cache/WebView/Default/HTTP Cache/Code Cache/js/index-dir/temp-index
          • Size 96B
          • SHA256 a496136b7a67affc9806fe3a16de9f0d27fad9f28cf4866df7b40b87e8e4ac0c
          • MD5 SHA1 SHA512

          index

          • Path /data/user/0/com.mini.screen.tvcast/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index
          • Size 48B
          • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
          • MD5 SHA1 SHA512

          temp-index

          • Path /data/user/0/com.mini.screen.tvcast/cache/WebView/Default/HTTP Cache/Code Cache/wasm/index-dir/temp-index
          • Size 96B
          • SHA256 e7302e9b3134542026630893824733564c89c94121fe6ace1eca3379712bfbd5
          • MD5 SHA1 SHA512

          f038e94cb33282ab_0

          • Path /data/user/0/com.mini.screen.tvcast/cache/WebView/Default/HTTP Cache/f038e94cb33282ab_0
          • Size 400B
          • SHA256 6da95ae1acbfb719cf6466b2e0cbf3379ce393df0f2f7061acfd4048ccd3a929
          • MD5 SHA1 SHA512

          index

          • Path /data/user/0/com.mini.screen.tvcast/cache/WebView/Default/HTTP Cache/index
          • Size 48B
          • SHA256 c96ac03cfdbc6f4c1bdcdf764f1a6573f852e7aae5ef405969516b93ed271182
          • MD5 SHA1 SHA512

          temp-index

          • Path /data/user/0/com.mini.screen.tvcast/cache/WebView/Default/HTTP Cache/index-dir/temp-index
          • Size 144B
          • SHA256 1ffa7fb6beae9f72fbb27359204b6a4c905227114ca019fdc662526ac3b176c4
          • MD5 SHA1 SHA512

          temp-index

          • Path /data/user/0/com.mini.screen.tvcast/cache/WebView/Default/HTTP Cache/index-dir/temp-index
          • Size 96B
          • SHA256 872409611d88be219f90f8b0ab9e6938f8bb0b7344bbe3544ffc37fd23be998b
          • MD5 SHA1 SHA512

          font_unique_name_table.pb

          • Path /data/user/0/com.mini.screen.tvcast/cache/WebView/font_unique_name_table.pb
          • Size 57KB
          • SHA256 0aa374bc456330fd1b5daf18d25b4bb8e2df1998dfa85466f2c31843ff56e815
          • MD5 SHA1 SHA512 SSDEEP

          TSACVT0NEERCS0INIM0MOC.ss

          • Path /data/user/0/com.mini.screen.tvcast/crashsdk/tags/TSACVT0NEERCS0INIM0MOC.ss
          • Size 3B
          • SHA256 789547faf32d975b73dd8387a8fc28f886d00f1b211e07e39d661318c447d520
          • MD5 SHA1 SHA512

          unique

          • Path /data/user/0/com.mini.screen.tvcast/crashsdk/tags/unique
          • Size 36B
          • SHA256 deae365c5fc5e4ffc93274865073055a9f24e43a8a92cbec399fd319b0c76dc3
          • MD5 SHA1 SHA512

          ver

          • Path /data/user/0/com.mini.screen.tvcast/crashsdk/tags/ver
          • Size 24B
          • SHA256 0447169c23559e70e79ce2cbcbf8f4d6c523796e3fbcece89d0588d3ea18a34b
          • MD5 SHA1 SHA512

          google_app_measurement_local.db

          • Path /data/user/0/com.mini.screen.tvcast/databases/google_app_measurement_local.db
          • Size 88KB
          • SHA256 a59674cc863d7e977b030c7047072dc4c6d5ada1257917574fe184d886042cd2
          • MD5 SHA1 SHA512 SSDEEP

          google_app_measurement_local.db-journal

          • Path /data/user/0/com.mini.screen.tvcast/databases/google_app_measurement_local.db-journal
          • Size 1KB
          • SHA256 3fda1871910e4aaa82c138a1b837f2c0d6ac737ff90fede8177fe3699886d816
          • MD5 SHA1 SHA512

          ua.db

          • Path /data/user/0/com.mini.screen.tvcast/databases/ua.db
          • Size 136KB
          • SHA256 73c9c748102190c834040590c2571cdae2db2a88676baef20026ecad8f2499a0
          • MD5 SHA1 SHA512 SSDEEP

          ua.db-journal

          • Path /data/user/0/com.mini.screen.tvcast/databases/ua.db-journal
          • Size 1KB
          • SHA256 11cd8386d1362abcbcc74b9a5f392d28a38a0c7c07a748a797d8307a853a953a
          • MD5 SHA1 SHA512

          z==1.2.0&&3.2.2_1673164757479_emNmZw== .log

          • Path /data/user/0/com.mini.screen.tvcast/files/.envelope/z==1.2.0&&3.2.2_1673164757479_emNmZw== .log
          • Size 284B
          • SHA256 f2153061d3278ce766332f9487133fd2213f67bebad74bada30b3c8c83be233a
          • MD5 SHA1 SHA512

          exchangeIdentity.json

          • Path /data/user/0/com.mini.screen.tvcast/files/.umeng/exchangeIdentity.json
          • Size 162B
          • SHA256 80bd06cb388cee0ce5c1e4f7f538794ce82a4f77889387410fdcad4bd06c5fd6
          • MD5 SHA1 SHA512

          exid.dat

          • Path /data/user/0/com.mini.screen.tvcast/files/exid.dat
          • Size 62B
          • SHA256 e552a0ff6b9c6fab412da34ed0aadf6caeb900a2d1c112da88b413bddb97b88c
          • MD5 SHA1 SHA512

          androidx.work.workdb

          • Path /data/user/0/com.mini.screen.tvcast/no_backup/androidx.work.workdb
          • Size 8KB
          • SHA256 4b34cf505050facf47aa7936e4e7667e1969105665c632b3eefe7ecddf9a6935
          • MD5 SHA1 SHA512 SSDEEP

          androidx.work.workdb-journal

          • Path /data/user/0/com.mini.screen.tvcast/no_backup/androidx.work.workdb-journal
          • Size 1KB
          • SHA256 ecc7c67c550a7903e9025c7312ba9c6790b4ce5063f70f66df14afae30832a76
          • MD5 SHA1 SHA512

          androidx.work.workdb-shm

          • Path /data/user/0/com.mini.screen.tvcast/no_backup/androidx.work.workdb-shm
          • Size 16B
          • SHA256 374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
          • MD5 SHA1 SHA512

          androidx.work.workdb-wal

          • Path /data/user/0/com.mini.screen.tvcast/no_backup/androidx.work.workdb-wal
          • Size 217KB
          • SHA256 ec7f7741bcffe05746f1cf6224d41c9ec131422511e5328aad57c2719e675f1b
          • MD5 SHA1 SHA512 SSDEEP

          FirebaseHeartBeatW0RFRkFVTFRd+MTozMTA0NjE5MzcxMzU6YW5kcm9pZDpjNGQ4NjY1OTY5Y2RhYWJhN2VmMjFh.xml

          • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTozMTA0NjE5MzcxMzU6YW5kcm9pZDpjNGQ4NjY1OTY5Y2RhYWJhN2VmMjFh.xml
          • Size 480B
          • SHA256 c8bcde28a2e48d412a26f59e0f93258504001c892ca678c6e7c1011e904fbff1
          • MD5 SHA1 SHA512

          FirebaseHeartBeatW0RFRkFVTFRd+MTozMTA0NjE5MzcxMzU6YW5kcm9pZDpjNGQ4NjY1OTY5Y2RhYWJhN2VmMjFh.xml

          • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTozMTA0NjE5MzcxMzU6YW5kcm9pZDpjNGQ4NjY1OTY5Y2RhYWJhN2VmMjFh.xml
          • Size 178B
          • SHA256 43e660bf25e5fc32b2f0bf80b179f62b45ce0cff1fad186aed2c47a2c8345026
          • MD5 SHA1 SHA512

          FirebaseHeartBeatW0RFRkFVTFRd+MTozMTA0NjE5MzcxMzU6YW5kcm9pZDpjNGQ4NjY1OTY5Y2RhYWJhN2VmMjFh.xml

          • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/FirebaseHeartBeatW0RFRkFVTFRd+MTozMTA0NjE5MzcxMzU6YW5kcm9pZDpjNGQ4NjY1OTY5Y2RhYWJhN2VmMjFh.xml
          • Size 534B
          • SHA256 0347575a9c8782eae5f2055abdd8bb0e2249875552e4c1ee2863ae46425d54cf
          • MD5 SHA1 SHA512

          WebViewChromiumPrefs.xml

          • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/WebViewChromiumPrefs.xml
          • Size 127B
          • SHA256 248ff7928128015b1cfe3e6517c8f9b8c9511bfb8c8baf44fc1370640eac61fd
          • MD5 SHA1 SHA512

          com.google.android.gms.measurement.prefs.xml

          • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/com.google.android.gms.measurement.prefs.xml
          • Size 395B
          • SHA256 c4e7a883a340729ead89efe7d70450a124e4e4246f5fe65d1d5e2dc8cd3af6f6
          • MD5 SHA1 SHA512

          com.google.android.gms.measurement.prefs.xml

          • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/com.google.android.gms.measurement.prefs.xml
          • Size 606B
          • SHA256 88681106ed586c9c7fcd30ede400e1b09ee8bde8fe0c0ccb11b567e7892d0b9f
          • MD5 SHA1 SHA512

          com.google.android.gms.measurement.prefs.xml

          • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/com.google.android.gms.measurement.prefs.xml
          • Size 607B
          • SHA256 d7385ed3fbe43158fa66e7517fa629d0251eaaafc997c372f42bcf16d959ae31
          • MD5 SHA1 SHA512

          com.google.android.gms.measurement.prefs.xml

          • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/com.google.android.gms.measurement.prefs.xml
          • Size 122B
          • SHA256 2478c97a377db9ce6a44977b4864a40af8b4f5e5c8f81892c424a608ddec911e
          • MD5 SHA1 SHA512

          com.google.android.gms.measurement.prefs.xml

          • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/com.google.android.gms.measurement.prefs.xml
          • Size 665B
          • SHA256 208b8595270380cf4b88c7d249d693541b4c7b3dd497ae55ffb57d78eabf1c92
          • MD5 SHA1 SHA512

          com.mini.screen.tvcast_ad_lib.xml

          • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/com.mini.screen.tvcast_ad_lib.xml
          • Size 122B
          • SHA256 da18515d12c89606d4c41dcb06cb42f2e2aae4da5cb86bbce7b3af703c7e84c2
          • MD5 SHA1 SHA512

          efs_launch.xml

          • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/efs_launch.xml
          • Size 139B
          • SHA256 aa884e1f7346169612efcf6dc5f77479e0c24c8e4c02a038e335142c5b4fdf55
          • MD5 SHA1 SHA512

          efs_launch.xml

          • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/efs_launch.xml
          • Size 214B
          • SHA256 bc24f011c637c5bdf7962e990e036476b06461f5fbadb901b6f3fa84dfab1f12
          • MD5 SHA1 SHA512

          efs_launch.xml

          • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/efs_launch.xml
          • Size 278B
          • SHA256 b30e1e3b9151693584e02dc508c3c7acd53857d0c198495f5bd3b3924c91dd24
          • MD5 SHA1 SHA512

          efs_launch.xml

          • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/efs_launch.xml
          • Size 335B
          • SHA256 005e2f089cb6398168deb5f30f295a6b4707dbece6d54f753a9158893195f389
          • MD5 SHA1 SHA512

          sdk_preference_.xml

          • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/sdk_preference_.xml
          • Size 65B
          • SHA256 3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793
          • MD5 SHA1 SHA512

          um_policy_grant.xml

          • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/um_policy_grant.xml
          • Size 217B
          • SHA256 e067b7b300cec8983475c015cbf9bc4e8a20606747aab4488b56479961ff9b9a
          • MD5 SHA1 SHA512

          umeng_common_config.xml

          • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/umeng_common_config.xml
          • Size 130B
          • SHA256 e9629c21b8307ba116906b5b324f65ab938fe1803cc68eb0c3f89ea72d727304
          • MD5 SHA1 SHA512

          umeng_common_config.xml

          • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/umeng_common_config.xml
          • Size 195B
          • SHA256 465fbb7e3eaf843620d3e2a14057db50ef0cacfeeb78a3ca585fba6053bbc853
          • MD5 SHA1 SHA512

          umeng_common_config.xml

          • Path /data/user/0/com.mini.screen.tvcast/shared_prefs/umeng_common_config.xml
          • Size 244B
          • SHA256 31b0b7a796954b183445e4d30ea45e00b2c35c2053ca123958c341f0e450ac6a
          • MD5 SHA1 SHA512