Analysis
-
max time kernel
2813157s -
max time network
66s -
platform
android_x64 -
resource
android-x64-arm64-20220823-en -
resource tags
-
submitted
10-06-2023 23:35
General
-
Target
Take Chat Message.apk
-
Size
27.2MB
-
MD5
83f75f295c4756841f0a46e60b088cd1
-
SHA1
998138ba24fd4d2d20616fba97c5d440abf7ad1f
-
SHA256
af6bb4d550d911a6ef3b004dd2e245c9f5c4598b64073e524487add5e8b80897
-
SHA512
cf6591e3024b809d19bf17f40f1ad3dc6fbfc59dc9bf1f542106c11fb00bb5bfcdcff221dce780a28ac03f775ddf872eea454330a8b8dcce277d241e6530454a
-
SSDEEP
786432:E4rA0EQBtkQPyZKcrWecqjzPNpnIbEAL2ZQTJN:DrA0hbkaizHn2E6n
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
-
Reads information about phone network operator.
-
Listens for changes in the sensor environment (might be used to detect emulation). 1 IoCs
Processes
-
con.tanide.chat.messages1⤵
- Loads dropped Dex/Jar
- Listens for changes in the sensor environment (might be used to detect emulation).
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
/data/user/0/con.tanide.chat.messages/[email protected]Filesize
3.2MB
MD5692c6b1b89702297c59bd34c4bd1fa53
SHA1f38cac946f03d7e869018acbdfe0ed272e11b106
SHA256920e465a87a2409fc8d7186ea4e319c613c04d156bec75e8b91cb4d07b1deb75
SHA512927048402fb314ef2624776b27317a6f996ea6b3d697d66b8b213d5be9559f24ae0dca8d2f8a9350d32310b8cab071933936640641d297ba522b3af60424df63
-
/data/user/0/con.tanide.chat.messages/app_process_lock/1606324.0610604964MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/con.tanide.chat.messages/app_process_lock/1606324.0610604964MD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/con.tanide.chat.messages/app_release/v1.tmpFilesize
7KB
MD5d8267f1d8dce17656b6fd8746a5c0e9e
SHA1757a27045fdbb303e9ea280de57760e57431792c
SHA256905062c6dcf4488ac6226a6c45494f84b658b273d60bac37ccadd29ef8389959
SHA512685315f8bdc53b12bf11a4306a154a00facb64857abc9f07ccf4f247e22cfe579ba46fe469e7f9f541dc2d56661275f9af18292b992020b1d1977a6bb8c05af5
-
/data/user/0/con.tanide.chat.messages/databases/xUtils_http_cache.dbFilesize
40KB
MD55a621faf40dd05d5f55201d20ee7f808
SHA1ef655ff3ac151276b85085d01cde5bfb52c74ecc
SHA256ba0d7fe706fcaffae7c08f7045227b4394700bc41e1c45a30abe6db1cd2718c5
SHA5124de7d77332e1484df9cd641d8ae08e3c94b2025b8179094fb97fdac5be4b78734f29b4ee34f60de45d0637b7ffd045ce8426195c183ac130c65c49f53caeaecb
-
/data/user/0/con.tanide.chat.messages/databases/xUtils_http_cache.db-journalFilesize
1KB
MD511c2c713ba39ed51bbd27517b6cc7746
SHA17629e84ab5dcfc5dfea9a830af0757d941a64d90
SHA25642cc0519c56fdc21db6ce7b73893e38f09af1be2d00a004046e3b333034d2990
SHA5127ba4b6c259e24378aa5555601e389b0563f2db9c829186d45ab687a99be886f390c7b091c5fd72fdd998e70e9a8a69caf6101dc47afde50a94fdfbadc741fcfa
-
/data/user/0/con.tanide.chat.messages/databases/xUtils_http_cache.db-shmFilesize
16B
MD54ae71336e44bf9bf79d2752e234818a5
SHA1e129f27c5103bc5cc44bcdf0a15e160d445066ff
SHA256374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
SHA5120b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27
-
/data/user/0/con.tanide.chat.messages/databases/xUtils_http_cache.db-walFilesize
8KB
MD5057007c270c19340e24455c998c92c8c
SHA1b46c51120a178412ac737936e4a1faed428f7bdd
SHA2560dd33356e9dff2371fb781b6993c53dfd741074ca23a02f9046deb7c5d4386d0
SHA51273f9b3ee5256d8f83d06043d3b6b3f7a51fd1ac531389076d65ba18dbbe33f302795c86113c047e5db9be07360f887b27d68228fc3d54337aeb03add8fbb660c
-
/data/user/0/con.tanide.chat.messages/databases/xUtils_http_cookie.dbFilesize
40KB
MD55a621faf40dd05d5f55201d20ee7f808
SHA1ef655ff3ac151276b85085d01cde5bfb52c74ecc
SHA256ba0d7fe706fcaffae7c08f7045227b4394700bc41e1c45a30abe6db1cd2718c5
SHA5124de7d77332e1484df9cd641d8ae08e3c94b2025b8179094fb97fdac5be4b78734f29b4ee34f60de45d0637b7ffd045ce8426195c183ac130c65c49f53caeaecb
-
/data/user/0/con.tanide.chat.messages/databases/xUtils_http_cookie.db-journalFilesize
1KB
MD542186feb74666a758e2483b2befdab76
SHA15df567a31160f6bb932a7f4efb07c9ad69ec7cc4
SHA2560fba929f3a6a969c05bbe568a605d6154b05281cbbfb763ee2a63264b6677c1a
SHA51219b1c9bb34c4595980e934b3ac2fefb3ee143c08fbfdf8dd9f436690638dc416e1b4b3f7da69174f93fabb2e05d56946ef11fa2a7548c3c57816bba5216d3ab8
-
/data/user/0/con.tanide.chat.messages/databases/xUtils_http_cookie.db-shmFilesize
16B
MD54ae71336e44bf9bf79d2752e234818a5
SHA1e129f27c5103bc5cc44bcdf0a15e160d445066ff
SHA256374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
SHA5120b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27
-
/data/user/0/con.tanide.chat.messages/databases/xUtils_http_cookie.db-walFilesize
120KB
MD545235650c9d235f3f55cc112f9f0ceec
SHA1b6e22cb1d55bd27d9ff5fa1c637c713aa68816b0
SHA25696676ef5b4ce02d7e68479195b7baedadff530d8109aec1f069926aaf934e42e
SHA5129a1a210bfd623398d1a8484537318eebe26eec8e044e3e13dda22d74a755f825b9aec8e6a60cb7a00bc593614fc1b170582af22be9bf504c05e89973246ff05b
-
/data/user/0/con.tanide.chat.messages/files/al/.nomediaMD5
d41d8cd98f00b204e9800998ecf8427e
SHA1da39a3ee5e6b4b0d3255bfef95601890afd80709
SHA256e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855
SHA512cf83e1357eefb8bdf1542850d66d8007d620e4050b5715dc83f4a921d36ce9ce47d0d13c5d85f2b0ff8318d2877eec2f63b931bd47417a81a538327af927da3e
-
/data/user/0/con.tanide.chat.messages/no_backup/androidx.work.workdbFilesize
8KB
MD5e579a6b00eef1318f9166352228eba18
SHA176988896854f0139083e77862eea1a4846cf039f
SHA2564b34cf505050facf47aa7936e4e7667e1969105665c632b3eefe7ecddf9a6935
SHA512c47632e957d87727bf6504a82ca7a44d8da24d30cd997a0f449a96e4f97c656a1b4d9da3fcd827e2a48c59677688da0b872358ebd0f9369d898d1b8ec18d5699
-
/data/user/0/con.tanide.chat.messages/no_backup/androidx.work.workdb-journalFilesize
1KB
MD54981b93ba3b36f83bd71a16b3873f9ce
SHA135dbedf51bc98b2f8c120ac92a737bf6e4c3a25f
SHA2568d6df695115d3b8214fcf98a00b88b8f82f070b05ffdab258b9a315627621884
SHA512ec0a774aaecca443204f1fb5a73d3cb06344b8d69391a834e7d5c4d3ff8e9a45cca1ac491a22d791f29231de9a597c3974f32eada650e4711335b701dc68a3dd
-
/data/user/0/con.tanide.chat.messages/no_backup/androidx.work.workdb-shmFilesize
16B
MD54ae71336e44bf9bf79d2752e234818a5
SHA1e129f27c5103bc5cc44bcdf0a15e160d445066ff
SHA256374708fff7719dd5979ec875d56cd2286f6d3cf7ec317a3b25632aab28ec37bb
SHA5120b6cbac838dfe7f47ea1bd0df00ec282fdf45510c92161072ccfb84035390c4da743d9c3b954eaa1b0f86fc9861b23cc6c8667ab232c11c686432ebb5c8c3f27
-
/data/user/0/con.tanide.chat.messages/no_backup/androidx.work.workdb-walFilesize
217KB
MD5cefa22e01d72963d394c617bc2d5ad76
SHA136fbed6f55222fd0f16586a5a9e1616121dc1d71
SHA256c82b948e4eaf1814ccc55390f343c4e5e4b76e8eec78055f1d8c7a3c1215f4b4
SHA51202de2926c502678bb07f637f385602b401cc3692389ec480f069e0409294188c50a275b25db07359b4442b9d520af634b015b81a1c66350b3a047fc909036e56
-
/data/user/0/con.tanide.chat.messages/oat/x86_64/[email protected]Filesize
650B
MD5ce882aea15a03752351c78b132135add
SHA1aa71f43d5df0bba60bb9d39a5a743c22199be94f
SHA2560d571d99803cb232e9e28fce71bd3405dfb611173a5e19e54106248c25d9dd26
SHA512624346dcbfcaeaf543bedc91ba774a5122bec575fca0162075268fe55579a8fe153bac382459a4794d004585bc6679f0c53bd9255bd874d466ec3299a9925e2d
-
/data/user/0/con.tanide.chat.messages/shared_prefs/app_set_id_storage.xmlFilesize
146B
MD57520cb924e53628fd28361a8c625b2c4
SHA1fca671236cfce6c1508f24d03f4488ec4fa52310
SHA256e984ea80b73a519faf5ce336d25c3f50f93f29e790b4b65da54c12c5dfef11b1
SHA512e92fdca9553dbd5ed2b616526a1bc04d2dfc8642d45b3607c26a5a5b0e12edac34b1e2fd75bfdff6d83547c7677157454094cfb12474cb24040cdb2f89f82ac1
-
/data/user/0/con.tanide.chat.messages/shared_prefs/app_set_id_storage.xmlFilesize
214B
MD540b1536cd6f4775240c3af3aa3874b45
SHA1d9767fe50415728d667b831c29d4a9d35ca2faf9
SHA256bd5f650fbe106178e92934530d8b0f2f3edcbb2c93f3f28b13726549a0569c25
SHA512371d44e00ed542c052804047fb62a08c712d01ee45a01844e084e67a030e805828fafa6d15b0427fd7ac79b459cb03fbc1c0a9dd2b56843f4792ffdbbd1bd6ad
-
/data/user/0/con.tanide.chat.messages/shared_prefs/app_set_id_storage.xmlFilesize
281B
MD54fbf9f41d685a6485326cd5fe3606b1e
SHA17af7915893b4adef2054c4cb13ff7223cdbd25c4
SHA256669a4da565b80befe47e23ecea423467a3bb6fde73c90828a16ec39203fb8796
SHA512f62c2636e5f4186484e0a0edc472867f5e042e97692a9573127810981fc69b7ec138af9042c9c4d8da121c21d6bac63a128bdc9363a4e2029be21138419f2991
-
/data/user/0/con.tanide.chat.messages/shared_prefs/com.applovin.sdk.impl.postbackQueue.domain.xmlFilesize
3KB
MD517ca8702d9c1bc449425bd344ff7fc12
SHA1f90db884c1cae61564f0e126d006928c8565e4b5
SHA2565fb446ab9e76d1515a510f1288206532cca20c20e4ec90919932f044e73e41c6
SHA512b3f5845fb074c7e329ef6dca3922b1d212b99410e10f07dd109273644c94423beb901fa3ba3a625cfe4c7ac4878250ff41d021d7857776fefa9e4f853219418d
-
/data/user/0/con.tanide.chat.messages/shared_prefs/com.applovin.sdk.impl.postbackQueue.domain.xmlFilesize
3KB
MD5253b78081ff41d9a886965b821d485a5
SHA165615fe1edd98fa94ae90177cebd7ba2fe27edaf
SHA2562bac50e5e8c95d944185b686075f1154ee010c95e01453891000ba439d5e9c98
SHA5127680a5eaa66cadd3c8d55f1cc07d144878f14db780b09280f80f244eda81eba19173af46e2da2e59eccf02df80bff9b6fd7f74de776e9033a742350e64693262
-
/data/user/0/con.tanide.chat.messages/shared_prefs/com.applovin.sdk.impl.postbackQueue.domain.xmlFilesize
129B
MD535cfafbcf334aea9fc5d0dd6bc00e2c4
SHA12564c427480d9dfe250d9e37654faf252c621924
SHA25602f67f3269d7a249ed5b4148191ffd92da92e21d17f5316acad139c1c2373200
SHA51275f6bc0ac5567de4534055ed21fcfa06089e2eaae3e7c45128ff81bd8602232fdb9c5b32156731536b797bf6148c01baaeeefd2f45474e99cba0da61b8e1e26d