66938c3ace01402165d09db3cddaf315e0b57e70e831d2cc2f8be6298ab2693e

Analysis

max time kernel
3848739s
max time network
132s
platform
android_x64
resource
android-x64-arm64-20230831-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20230831-enlocale:en-usos:android-11-x64system
submitted
30/09/2023, 09:23

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

legado_app_3.23.09272322_原包名.apk
Size

17.0MB
MD5

d2ef86d10ee3d40123c1aaa0db95d2ef
SHA1

18195f22c28114c7b0197d6cd1f35d034749402d
SHA256

855567ba65278f666b2921f0098bb0d74502b8b80e8b0989cfb4cf54bdb0b08d
SHA512

ef49211e1660460e7c01441eba5a7897bed588a702e1f3b6b98a8851a0ee4450c60386844f064714c6c133b28269bcfe791c9bc0bafa9772ba2807a762e9074e
SSDEEP

393216:ibyKpomD9y+R33jiVdvrtoMx9/yWRAbfwLsvQiXok2a0bV8:iHumD9y+OTrSMx9KWRqw4dh7

Score

7^/10

Malware Config

Signatures

Loads dropped Dex/Jar 2 IoCs

Runs executable file dropped to the device during analysis.

ioc	pid	Process
/system_ext/framework/androidx.window.sidecar.jar	4519	io.legado.app.release
/system_ext/framework/androidx.window.sidecar.jar	4519	io.legado.app.release

io.legado.app.release
1⤵
- Loads dropped Dex/Jar
PID:4519

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/io.legado.app.release/app_cronet/x86_64/libcronet.117.0.5938.60.so

Filesize
4.5MB

MD5
a91196950841eb45b8dda49da256b188

SHA1
d41291eabbde70d911561e05ffd7da8f61a2e618

SHA256
1f7b7c5b60f4f7e576371cfa9058c0d5635bac1eb7c5b446c81398dcc462d0c2

SHA512
c0725d70d565da4929a259ed6e243e1335e0361993c88765fbccdbcb21312c2c36daa7cbf5ce3025960582280d4f7f38c9cc5cd91affd5e869b68d32358e4c7b

Download Submit
/data/data/io.legado.app.release/cache/image_manager_disk_cache/6261b3beb2da7a61a6c32a55dee5eabadebde449b1fa5101cfca42184abfc199.0.tmp

Filesize
307KB

MD5
c592a9734b6ef661aa6d79f67f0e34bf

SHA1
c25b981c3036a50027a77b6bdf772de76e067d03

SHA256
523bbaed0dcfd203b677b40383f5487026bfdc09529093a7d3f6fae215b9fbf8

SHA512
52b851024f749b8653e5dda477f6c55fcd0612629ce58322bd1c397ea0bdc3370c8aee3b56615b78107da29621c9767304a63de99775c13561631998ad976f3a

Download Submit
/data/data/io.legado.app.release/cache/image_manager_disk_cache/journal

Filesize
180B

MD5
02cce4afe098141b387c7779d26d978c

SHA1
65d3a17f83e4325135fdf6e879343b3d460a7a32

SHA256
c55ee06beac48bc6c1b23e2d36478aa8a801fa70da46543ad37889fd6a3f075b

SHA512
728afdc246702edc90a5a90c07ec042c7dc53a20f27ad58ee8afe0ec286eab8a0491a4bab37deb0197e8dcf94fac3a5cf769caa906ae97493e65a318462b1013

Download Submit
/data/data/io.legado.app.release/cache/image_manager_disk_cache/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/data/data/io.legado.app.release/cache/so_download/libcronet.117.0.5938.60.so

Filesize
4.5MB

MD5
a91196950841eb45b8dda49da256b188

SHA1
d41291eabbde70d911561e05ffd7da8f61a2e618

SHA256
1f7b7c5b60f4f7e576371cfa9058c0d5635bac1eb7c5b446c81398dcc462d0c2

SHA512
c0725d70d565da4929a259ed6e243e1335e0361993c88765fbccdbcb21312c2c36daa7cbf5ce3025960582280d4f7f38c9cc5cd91affd5e869b68d32358e4c7b

Download Submit
/data/data/io.legado.app.release/databases/legado.db

Filesize
220KB

MD5
92ca382132a4cb07015240534b16868c

SHA1
bf3b805599564de294efbf5ec516a277c02e2bcc

SHA256
be6d588b2fc6b8a95e5feebf24a907e790cfa9516886a802d4da708f003b4d50

SHA512
04b61b0a5e7a77b541f3e1d79d4d115d77bbe1893fe8c7e47f76074577f6fae465f71620776ee8b0f7e4833ea7e80092b6b9487d1d39c2724772823f82a72849

Download Submit
/data/data/io.legado.app.release/databases/legado.db-journal

Filesize
512B

MD5
eca9716a3df2d5205fb8659e63771ddb

SHA1
c7f698486473d78daa3bbdf90c15cb00a69a8e7f

SHA256
6edf30236921a92ab97977dfc63e874567f950c15b0d466ced8f7b2c10e8684c

SHA512
56ef7379fa31c615d6c0ced9430aab6e2ae9f7f8f7b5b84ae4958d0aa9bb19a3278468be9b1f969660929e200a24a51c30eced71bcda01e8026a2c2f84ee171c

Download Submit
/data/data/io.legado.app.release/databases/legado.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/io.legado.app.release/databases/legado.db-wal

Filesize
156KB

MD5
5b85559d2e666b8f51dba724412eedcb

SHA1
46401ec550ede3ffd4dac97aebe6b518af3d398d

SHA256
ba71554992b148ba65d41d341f11bd7e0cd53f33cdd3246982c91b93cbef5735

SHA512
f4e494d15105a393f842f0366b2ecc91acf4e9e212db6529bcb0863c51ef73e0875654477f0fa34981eb9f2f7b844741d204036ea01fc1aea39e81b0dd209797

Download Submit
/data/data/io.legado.app.release/databases/legado.db-wal

Filesize
16KB

MD5
a8ec6b24f64e69d2c1d9a8700cf51062

SHA1
6362bbfa331f2470f3d1d9c90a4deaca9cb1ff71

SHA256
e42338eaf7bfb52065001ca7f1f62ab272ce093b4ee91e527d17d3345af48f09

SHA512
1a3bb2d99142a4bccb89ce21a406dad9d3b6afa97d5bf8928ed44eefbb11587ee1311e8d724968ff94c6cbdc5b123a07f6a11041360321d686209202e525744f

Download Submit
/data/data/io.legado.app.release/databases/legado.db-wal

Filesize
237KB

MD5
ca8a94edbd9e89036ae30c47e53629c7

SHA1
ac19669bc8dc626f02146f77166519a4eae6b793

SHA256
f0a95945f301635f268f69c44e88696ed9b00339f6398b613d3bc65bb81ac76e

SHA512
520670d068ccf3ac73a4901517d848cb1e505da303e7887837e29c3be886425e7406b599e653fd1a31927fe05ac86cf16b25cc6f07ef6ccfcb2a8758b06bc615

Download Submit
/data/data/io.legado.app.release/databases/legado.db-wal

Filesize
406KB

MD5
774a2b1cd8324735dc71eab97f5428a7

SHA1
93c2ea7af4fbc5f8984d22992b90d1d4265b8888

SHA256
a0b40feb5766c2b8ab78b6d242dc75a4df8c682250ef31df19dbc9c938bcf96d

SHA512
b9fcfb220820f2bd7fa6b6992ac068aeb72d6a99d17e96669d6ae251e8c365c2aebb248d62de7be84df6cc3a0030468759f0e30a1a63707ff45178b2f1aed532

Download Submit
/data/data/io.legado.app.release/files/profileinstaller_profileWrittenFor_lastUpdateTime.dat

Filesize
8B

MD5
04678edae76d9042d158e53c1701030b

SHA1
817ddf9c18578fe4e157f034a64cc50ac2453423

SHA256
9176dbe29b65344c68879308eb30366645661ebbe098b685a0311d6b788ff5fb

SHA512
e7294e302b2e5714257fd324ae06e6b8aaf66c303f6761e7e29151d9549444966e3ea39902056d553101de73d14cf39f42ea9825a0e387724d3df7b4ef8fff3c

Download Submit
/data/misc/profiles/cur/0/io.legado.app.release/primary.prof

Filesize
2KB

MD5
4935de9498935deb53248e9d8b727400

SHA1
6980c7d113895f6bdf21251279930a721cde77dd

SHA256
eb301db782850f8a670d5ca5b2df1c9bb4c98219aa5771e99a797a35f5473d4e

SHA512
f190fc3c59a9335d368f18ce9404d8182ffb15cc4ad22406093c811bb664d28d9bdf7a40ec1a908c811281262a4d21cf2a9b97c8bdc12f938b54670ecfea132d

Download Submit
/data/misc/profiles/cur/0/io.legado.app.release/primary.prof

Filesize
17KB

MD5
47be26d44e8ab2c69e5e62d5fbd25897

SHA1
a0f3e175cd2aac06e83dac9b2e37ea9668a747e8

SHA256
0bee3979e33d3775d788f36e9a07101f9f1e4e6064415a99f0253d1397adf3fe

SHA512
8649483e14f122a9224fada237af3b6bcc7deba26cf55482686d14e9c6ebbcee1419aa8ca7627db8d7829a8fc34a760e89971888e136da2a5f26aa3ebf1e1051

Download Submit
/system_ext/framework/androidx.window.sidecar.jar

Filesize
12KB

MD5
bdf3529e80318eb14e53a5bf3720c10d

SHA1
25c9ace4b1af6e80ebb2572345972c56505969ba

SHA256
bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

SHA512
48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b

Download Submit
/system_ext/framework/androidx.window.sidecar.jar

Filesize
12KB

MD5
bdf3529e80318eb14e53a5bf3720c10d

SHA1
25c9ace4b1af6e80ebb2572345972c56505969ba

SHA256
bbc8300dd1e9cd08de8f66560c1ac2c928615b72b51cef9649f88974f586d64b

SHA512
48b9c2d01171bb651b9b54826baa51f4add48431a3efd8ceb5f7cc3bcd6f8f37edf47fabb24349dd15b3a02329cd450f90a8d164bf4f8dfae554bf3b35a8a55b

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads