Analysis

  • max time kernel
    223512s
  • max time network
    135s
  • platform
    android_x86
  • resource
    android-x86-arm-20230831-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system
  • submitted
    07-10-2023 23:54

General

  • Target

    b893e500c12fd12a743dd12ba2d8f5b12f035059f12e0bd03b68863ca2365621.apk

  • Size

    33.8MB

  • MD5

    6cc474c83d3a20a15b1a1fe0f25c1cb4

  • SHA1

    f7d09c48df202d351c5e26a70312c97cf867b6af

  • SHA256

    b893e500c12fd12a743dd12ba2d8f5b12f035059f12e0bd03b68863ca2365621

  • SHA512

    c5f1db8a5895087ef7dadacbab30bca324c4e90cfd63dba0da07b9e975080574301cbd177af3fc99cd4510c35034ec23c272442cd60df0a43a4810e31a3b8540

  • SSDEEP

    786432:K+B0Qozm/WgmvZZ+9M35ejgbROTKIY4Ud3JAE1IM1Bl/X:K+6Qoz2WggZ+a35ugtmYmESM1BtX

Score
5/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

Processes

  • com.zikang.quickcheckcicada
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data).
    PID:4134

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.zikang.quickcheckcicada/app_crashrecord/1004

    Filesize

    58B

    MD5

    0d210bfb2a0e1f1b4c082a6a0f79de07

    SHA1

    bb8ed9e364db79d1d9f2fcde3f15091893222faa

    SHA256

    988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

    SHA512

    536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

  • /data/data/com.zikang.quickcheckcicada/app_crashrecord/1004

    Filesize

    237B

    MD5

    0dcb742bb46f59d51a8e1115244df76d

    SHA1

    147032b54680be32555fd9a88b5c592a2650bb1d

    SHA256

    fcdd2d7083e185ebc78e1708f49a2e8ed52d118bd11518b773d7c9405d6d5b49

    SHA512

    7fb1361375303eb9f85fdc13827efdb4ad51fae38c81112cfbbdd1da9f11381ce4a11068b4098b4fdb403ae08ff723f674fa1b07cb8bfbb234f012dba0a6f896

  • /data/data/com.zikang.quickcheckcicada/databases/bugly_db_

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.zikang.quickcheckcicada/databases/bugly_db_-journal

    Filesize

    512B

    MD5

    1d51f150e21e14f9e48d708a19fe7a86

    SHA1

    7003386dd2129fac9d9bc63c4b4e74a66522cbae

    SHA256

    85ce0dece88b8a82b851f4bba380e49e44e2a813058c82fda90e0fe3dc656234

    SHA512

    83ca2a0e21b85f1a7e58e61ff5ceb623e86a971a00fbfee3ec721d055f83cdcd2c00b3ad4e88e367ff1b50f290bf6d641a62f2b2629a60d64503613034a59599

  • /data/data/com.zikang.quickcheckcicada/databases/bugly_db_-shm

    Filesize

    32KB

    MD5

    bb7df04e1b0a2570657527a7e108ae23

    SHA1

    5188431849b4613152fd7bdba6a3ff0a4fd6424b

    SHA256

    c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

    SHA512

    768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

  • /data/data/com.zikang.quickcheckcicada/databases/bugly_db_-wal

    Filesize

    72KB

    MD5

    773937d5019e54889d2bf0459428686a

    SHA1

    1d11a4caa5e005fceb1314ef3abbffb9c288ad62

    SHA256

    9b72f09a15d1b38aa2ad1b9df7744d0720631c5909a37e659ee33627d1b32adb

    SHA512

    14f84006a1a0055dd5bea46efa32f9f50c1d45e2e8a01926a94897762d37fbf5134a8de42e14120d67c5fa843c3b0bb283398847e7683946a17b5511800b6dfd

  • /data/data/com.zikang.quickcheckcicada/files/libcuid.so

    Filesize

    129B

    MD5

    0820664ceebeec9f2f9b55e6b332461b

    SHA1

    47d7887dea2c00ac14d6a1dcb07015a056a0c244

    SHA256

    d6df8b7b9373e574cf8d181b9c47ba5fcda34536f06ec4b3812b13c7bff4f48e

    SHA512

    f87e41bbda14d2dcaba74c8c0d13a253d30a1ea61e409bb5edf4e63820c378cd8de8460065603bb45bfd0a615f695fcc511d8f361bf3a9a696598f9eb042db42

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    167B

    MD5

    2bfc842e9e94dedfb61db6e507e7809d

    SHA1

    8364f0aecf5eb0cb1df588f8880274f4f6d76676

    SHA256

    351bcd8ed4128c58ce41a6776f3605fde8a3b88c06e1b9526bd4b33785101386

    SHA512

    dd83db25f46ad0a91092113ea83c9121fe60d238eb6a9a93be1b9d16ed9c9f1ae5c5d1a7c4737ffb5dedf3ccb2bd3bde2190e47ee215ba98d1281dbffc21dba3

  • /storage/emulated/0/backups/.SystemConfig/.cuid2

    Filesize

    129B

    MD5

    0820664ceebeec9f2f9b55e6b332461b

    SHA1

    47d7887dea2c00ac14d6a1dcb07015a056a0c244

    SHA256

    d6df8b7b9373e574cf8d181b9c47ba5fcda34536f06ec4b3812b13c7bff4f48e

    SHA512

    f87e41bbda14d2dcaba74c8c0d13a253d30a1ea61e409bb5edf4e63820c378cd8de8460065603bb45bfd0a615f695fcc511d8f361bf3a9a696598f9eb042db42

  • /storage/emulated/0/logger/logs_0.csv

    Filesize

    101B

    MD5

    f509061efbdcaf39aac69f295d8e8332

    SHA1

    25065ca3214cc987545d23880fa6a1054bfd5e7f

    SHA256

    66b1d9de1ca9e6a1a83ac582ec9e1147e94d7c17096825b04035fe324c711554

    SHA512

    2b3e8e91da23433a57eacd2739fe6d339c1982b457c10b969c1b1e885a5c07fbdb5f82f90d82a44106ed03e1da1355b7f9b587b69c580965b2c55fa706a4bdf2

  • /storage/emulated/0/logger/logs_0.csv

    Filesize

    82B

    MD5

    aa62af23cc1cfc76e69da0c2e52884cc

    SHA1

    276ce9897d100ffccbb4cf28c27df8a232d981a4

    SHA256

    adc30bd5de7175daf63c24ac9420e7145ef7cdd373c9e0c0d319f12f62a6eb51

    SHA512

    8fe10c9cba31cbd9c530aa830eb18b541330a59f352bc06f79b85fb2e0db4f110f99f660bc841ffdc6ee9e7e3accd28be2408614b12b3f6516cd10edc15d697e

  • /storage/emulated/0/logger/logs_0.csv

    Filesize

    221B

    MD5

    d11383bc64f050d98950c088b6f6f8cc

    SHA1

    45db2f460bb597d1c9cae5e1305715a65746e3ae

    SHA256

    7f5ade64cdfe633effebcbdf7f800cd83ee6b857fcd87c5cef951f849ac75aeb

    SHA512

    4a52eaa5bfc29260bca9c798dca13fa0eadfa962ee5ab3f8d9704dae59cc26119b2a1ca7b4b14b4e98fb14be13ab5a2fb8f172d8e6379c170d2dec6bbf0d6cd6

  • /storage/emulated/0/logger/logs_0.csv

    Filesize

    94B

    MD5

    43fa3331226a27018764844144226854

    SHA1

    dcde1f7da17c00f5d2eb1d79ce3ffa9c85bff2b1

    SHA256

    55de5197c36e7395b90ac981a6337f2b52c1134d5138a78d677691f7ae3e4116

    SHA512

    e8842bc08422e2ce7f36afb739bd1ca505d72c8769ff264d3042a1e38f10273053ec9cfa6d376f64aba325686fc354fdac908c5c557e5801cdb005102f017742

  • /storage/emulated/0/logger/logs_0.csv

    Filesize

    118B

    MD5

    9c4eef02149b5ea14ada7bd4dd6581ab

    SHA1

    f4513a23b5ffd4d38656aac46a1c4838f062ce5b

    SHA256

    d5c792deb3ca99b95b9ab170453eca5d81c1811cb69e271848fb8c5073b8baf5

    SHA512

    ebae825ec77e53f7fe51d25e85ac04204ba364d3102d639ac613267c46a93ab65395be4b907506f21c94123363896ca78273a2a86ce7115faee385a62788ddb1

  • /storage/emulated/0/logger/logs_0.csv

    Filesize

    90B

    MD5

    146ca42604120d0436b9ab4b3a8df08e

    SHA1

    a791a591435815c1fcc1fef4cd0c0acdd79cfa0d

    SHA256

    6f3a363096c5b91f0603a237c83e577c4d95ef67018817329df62adb6e1b0e93

    SHA512

    ef61e1c8652e8404a639de7789c47dbe173ad485649dc226c1cc5b4fc0f4f9ecf6aeb9b209166cb5a895ceee1977dd7af05943fdb420fe3aec3ddae1dde737ed