Analysis

  • max time kernel
    305443s
  • max time network
    37s
  • platform
    android_x86
  • resource
    android-x86-arm-20220823-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20220823-enlocale:en-usos:android-9-x86system
  • submitted
    02-02-2023 13:41

General

  • Target

    b8df48a3629ad88eec01b9a13f68645c4e3629b7.apk

  • Size

    3.3MB

  • MD5

    f0cce07d608a1d2d12532f64f301e48b

  • SHA1

    b8df48a3629ad88eec01b9a13f68645c4e3629b7

  • SHA256

    8824e6533b703fe8729fe526621de3e5305065acfba549cbae333278b1dca12b

  • SHA512

    415a1af509867ce3579852eada90e46fc0d7971a9db0086d38e7545544f92520f903e4548dfcb21b542df54862508db5da08782445acac7f460cf95a3d015a64

  • SSDEEP

    98304:V/gCUMzepPmSOomo8IWROuJqUoag/cvKancVtTNWUv:6pPmSVKqUS

Score
1/10

Malware Config

Signatures

Processes

  • com.feike.jupiterapps.stopwatch
    1⤵
      PID:4047
      • /system/bin/sh -c getprop ro.board.platform
        2⤵
          PID:4127
        • getprop ro.board.platform
          2⤵
            PID:4127
          • /system/bin/sh -c type su
            2⤵
              PID:4204
            • logcat -d -v threadtime
              2⤵
                PID:4251
              • logcat -d -v threadtime
                2⤵
                  PID:4273
                • /system/bin/sh -c getprop ro.miui.ui.version.name
                  2⤵
                    PID:4311
                  • getprop ro.miui.ui.version.name
                    2⤵
                      PID:4311
                    • /system/bin/sh -c getprop ro.build.version.emui
                      2⤵
                        PID:4351
                      • getprop ro.build.version.emui
                        2⤵
                          PID:4351
                        • /system/bin/sh -c getprop ro.lenovo.series
                          2⤵
                            PID:4385
                          • getprop ro.lenovo.series
                            2⤵
                              PID:4385
                            • /system/bin/sh -c getprop ro.build.nubia.rom.name
                              2⤵
                                PID:4411
                              • getprop ro.build.nubia.rom.name
                                2⤵
                                  PID:4411
                                • /system/bin/sh -c getprop ro.meizu.product.model
                                  2⤵
                                    PID:4435
                                  • getprop ro.meizu.product.model
                                    2⤵
                                      PID:4435
                                    • /system/bin/sh -c getprop ro.build.version.opporom
                                      2⤵
                                        PID:4501
                                      • getprop ro.build.version.opporom
                                        2⤵
                                          PID:4501
                                        • /system/bin/sh -c getprop ro.vivo.os.build.display.id
                                          2⤵
                                            PID:4530
                                          • getprop ro.vivo.os.build.display.id
                                            2⤵
                                              PID:4530
                                            • /system/bin/sh -c getprop ro.aa.romver
                                              2⤵
                                                PID:4555
                                              • getprop ro.aa.romver
                                                2⤵
                                                  PID:4555
                                                • /system/bin/sh -c getprop ro.lewa.version
                                                  2⤵
                                                    PID:4581
                                                  • getprop ro.lewa.version
                                                    2⤵
                                                      PID:4581
                                                    • /system/bin/sh -c getprop ro.gn.gnromvernumber
                                                      2⤵
                                                        PID:4605
                                                      • getprop ro.gn.gnromvernumber
                                                        2⤵
                                                          PID:4605
                                                        • /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
                                                          2⤵
                                                            PID:4630
                                                          • getprop ro.build.tyd.kbstyle_version
                                                            2⤵
                                                              PID:4630
                                                            • /system/bin/sh -c getprop ro.build.fingerprint
                                                              2⤵
                                                                PID:4656
                                                              • getprop ro.build.fingerprint
                                                                2⤵
                                                                  PID:4656
                                                                • /system/bin/sh -c getprop ro.build.rom.id
                                                                  2⤵
                                                                    PID:4682
                                                                  • getprop ro.build.rom.id
                                                                    2⤵
                                                                      PID:4682

                                                                  Network

                                                                  MITRE ATT&CK Matrix

                                                                  Replay Monitor

                                                                  Loading Replay Monitor...

                                                                  Downloads

                                                                  • /data/user/0/com.feike.jupiterapps.stopwatch/databases/bugly_db_lejiagu
                                                                    Filesize

                                                                    4KB

                                                                    MD5

                                                                    f2b4b0190b9f384ca885f0c8c9b14700

                                                                    SHA1

                                                                    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                                                                    SHA256

                                                                    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                                                                    SHA512

                                                                    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

                                                                  • /data/user/0/com.feike.jupiterapps.stopwatch/databases/bugly_db_lejiagu-journal
                                                                    Filesize

                                                                    524B

                                                                    MD5

                                                                    a26b902150719e5aee30623442ac50dc

                                                                    SHA1

                                                                    f7e3945881171d888f956cd20c55f4632ce93905

                                                                    SHA256

                                                                    ab1ee5e1e29962de8002a8a2bf3ecfd1655226a4690d5b7a9c579e72f264f044

                                                                    SHA512

                                                                    d2ba78f0f30ccefaaddf1bb7e8458444dfb90f87216c804464f101727b7a43db3ce69f36a17f4b47c02d8b5cffc823db960b2af60dc14d1f1b1838dd2fe07e94

                                                                  • /data/user/0/com.feike.jupiterapps.stopwatch/databases/bugly_db_lejiagu-shm
                                                                    Filesize

                                                                    8B

                                                                    MD5

                                                                    7dea362b3fac8e00956a4952a3d4f474

                                                                    SHA1

                                                                    05fe405753166f125559e7c9ac558654f107c7e9

                                                                    SHA256

                                                                    af5570f5a1810b7af78caf4bc70a660f0df51e42baf91d4de5b2328de0e83dfc

                                                                    SHA512

                                                                    1b7409ccf0d5a34d3a77eaabfa9fe27427655be9297127ee9522aa1bf4046d4f945983678169cb1a7348edcac47ef0d9e2c924130e5bcc5f0d94937852c42f1b

                                                                  • /data/user/0/com.feike.jupiterapps.stopwatch/databases/bugly_db_lejiagu-wal
                                                                    Filesize

                                                                    225KB

                                                                    MD5

                                                                    b2ae5ab5f417cfab23599572d0402637

                                                                    SHA1

                                                                    7fa34952616a5ff3e9f75b920e561d1c0957cad8

                                                                    SHA256

                                                                    466d233dbbce38f04b608311b8788116e79e95b2a7837bb69516f208abf54821

                                                                    SHA512

                                                                    9d77ff58deaaa9ff3afdf093927c0ebffcfd4c58cc3402052b8bd6efcb168a689c5598ceb7ae6fdd93e545c8c23b391c7651a9da1facf636762d1981c6a57c65

                                                                  • /data/user/0/com.feike.jupiterapps.stopwatch/shared_prefs/bugly_data.xml
                                                                    Filesize

                                                                    114B

                                                                    MD5

                                                                    2a9bfaae5ec6981cc547d639451c9f41

                                                                    SHA1

                                                                    20a39e5b8f759955f378a4351a24ec5e93bee806

                                                                    SHA256

                                                                    f41a6e8a9b388eaebff716d1689e821590df1380f09c92a7745f864c90111597

                                                                    SHA512

                                                                    67aa67daf7232c36feafb64a4fec58e8089a451e5469fb9ed4766651bb55f7556ea18bde3223dfb746c20825fa8ef5965d77789e7741970fcfc3cbe4b90a6faa

                                                                  • /data/user/0/com.feike.jupiterapps.stopwatch/shared_prefs/bugly_data.xml
                                                                    Filesize

                                                                    162B

                                                                    MD5

                                                                    4f3d43f634585bd165941cc8891ac285

                                                                    SHA1

                                                                    b4ee92402c40010e96828f363201f90265770d13

                                                                    SHA256

                                                                    f3dba2ed6d716f1dd634333004d15aacc04a369cc50e335dadbff5b6dca05a34

                                                                    SHA512

                                                                    d53c9201f292d8d93724fde6320307784d9d773c0cea2db333e94d68734e83621772146d26deed965b2bd21def212ce2724fd95d86fb1b06492622e630484d48