db38e8e03fd99b1479bedd284124494c463c74a29af1950af59c50f27645a0b4

Analysis

max time kernel
792041s
max time network
132s
platform
android_x86
resource
android-x86-arm-20230831-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20230831-enlocale:en-usos:android-9-x86system
submitted
14/10/2023, 03:28

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

SHAREit_Premium_v1.1.48_MOD.apk
Size

16.3MB
MD5

a3f86f923956729dafd1453982f666c8
SHA1

d100522e9b812fd964f63ac84e4b76d9503e25eb
SHA256

db38e8e03fd99b1479bedd284124494c463c74a29af1950af59c50f27645a0b4
SHA512

0b0131b8c52289229347c7a473500627d6e9ee393fc73145070f1b4a255a193a8f185e83399d69bfb00221c96be8457fb897d612b09c5e1a6d0830bfaa4471dd
SSDEEP

393216:MTh4Fvtc8PS2lWLX6u/56FGZHLgXB5/irqk7gORw+b0bJcqzna:MTh4FlpSFRxe5aXb0Da

Score

6^/10

ransomware

Malware Config

Signatures

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data). 1 IoCs

ransomware

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	shareit.premium

shareit.premium
1⤵
- Uses Crypto APIs (Might try to encrypt user data).
PID:4184
- getprop ro.miui.ui.version.name
  2⤵
  PID:4216
- getprop ro.build.version.emui
  2⤵
  PID:4236
- getprop ro.build.version.opporom
  2⤵
  PID:4255
- getprop ro.vivo.os.version
  2⤵
  PID:4273
- getprop ro.smartisan.version
  2⤵
  PID:4291

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/shareit.premium/databases/beyla.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/shareit.premium/databases/beyla.db-journal

Filesize
512B

MD5
8badaedb5e4e8ea7756fb92b560385e4

SHA1
cccac84262921e3eef496152b56faa66ffe4ad64

SHA256
1ea7b2ba3db26a840866f9085a562145ca5e232ed47050012c5a67891dc6cef0

SHA512
f749aaf5091897e3e4e919fc8c39431423a980765ba071482b45a3f78e63ef02c1a2da061924644718aa46f0add8a0302d9800c939c66f6e01152b595331a241

Download Submit
/data/data/shareit.premium/databases/beyla.db-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/shareit.premium/databases/beyla.db-wal

Filesize
104KB

MD5
707ded696b25868925565b80e1f0496c

SHA1
f71e473ab3aacaf39a5afbacd11ef48fc6d44377

SHA256
41af20549adb6cd7301f8d9a7b541d1cbfaffcfe5bed1b27d816c54049e480eb

SHA512
0900de294fad2325fc27a3bf4735736edf40292d5553ea6f1c885869dfaaa662315166110ab2b5ca6c7375e598bdbb074366b06ff63fd4ee72c4be1da5c429c7

Download Submit
/data/data/shareit.premium/files/.shareit_beyla_ids.cfg

Filesize
83B

MD5
6b0e894d8d51f1f952c48884a4f61ea0

SHA1
1d30a7d9b32a6b5aa0c142f749625ec4da5681d7

SHA256
7533af787cadfdb0aa1b0de3370ee49a77dd702c1d578cda700626c0287b2465

SHA512
f153b1ec91a94983098e95cd3dde42dd7eb8e2ece516cecef2133b35c122ed083e9ae65c5f89b7807add8ec9cf429df30d4d32cfe35c6c7727b9e8b06455758c

Download Submit
/data/data/shareit.premium/files/.shareit_device_ids

Filesize
70B

MD5
74bef3c802d31a1408baf289f3a8975a

SHA1
9ba9982eaaf17ba23b6d1a3a40aff5b53f6f97b4

SHA256
d0ef5b8253cd7dac3356b52a2b83c6a73ec8fb0005dae83bf212cc8371f79ad2

SHA512
e2ba2477099ee6f3b20fb23279ca25d6d6336e50b776a69886e11a5eaf17dabad9a127724184928518920c0c1c9517cd5d8b2140aa1759fecba7841a060b58ff

Download Submit
/data/data/shareit.premium/no_backup/androidx.work.workdb

Filesize
96KB

MD5
d7bae9714a3106e1ee01cfede6c9133b

SHA1
c15a7830e498f0a33814944000eb14386f99efa5

SHA256
352b60121a71c89fbaceac779f571f48445f943f6517d320f35338fe079e4f86

SHA512
7ada33a69a82058a65a39d389dc0318730a34495f46c067388aef77b7ff75a92ef9cd08c2f17da7e4af6a9e93e56609c5c2e8cc4c6a4b9977dbddbbb2fc373bb

Download Submit
/data/data/shareit.premium/no_backup/androidx.work.workdb-journal

Filesize
512B

MD5
a8ef22b50adcb8dd57b09297cc85e2da

SHA1
66551368b8da4815f003a3ec5ea95beb1870969a

SHA256
5e349b91e759c916879525ab36a5c8ff2a444c5f69c581a27611777f1032fe7a

SHA512
f0ea14436473b5e60969c2d3a36c7d65db4289fc781edcb15020b65b970961cb319dc76677ca25af8a90528848da6029892130a86c365a95e17fdf205ad3a444

Download Submit
/data/data/shareit.premium/no_backup/androidx.work.workdb-shm

Filesize
32KB

MD5
bb7df04e1b0a2570657527a7e108ae23

SHA1
5188431849b4613152fd7bdba6a3ff0a4fd6424b

SHA256
c35020473aed1b4642cd726cad727b63fff2824ad68cedd7ffb73c7cbd890479

SHA512
768007e06b0cd9e62d50f458b9435c6dda0a6d272f0b15550f97c478394b743331c3a9c9236e09ab5b9cb3b423b2320a5d66eb3c7068db9ea37891ca40e47012

Download Submit
/data/data/shareit.premium/no_backup/androidx.work.workdb-wal

Filesize
16KB

MD5
3229d0c902659b17b2b01909eff7a683

SHA1
b95281ee79049dcb6a5ad1b2ad066704b2c26731

SHA256
1593fa145ef1b190e04a3d0433272fa1a4bf9c8d0faf758438376803fca81709

SHA512
2e9d762cfefd28a294c07f2cb661f596ad04a5fe3028ff25e99871be105acfe469aa6498268c0cfd1fec064fd51cdd38875e0af4037b41a858b6bd15e1e9a1aa

Download Submit
/data/data/shareit.premium/no_backup/androidx.work.workdb-wal

Filesize
108KB

MD5
8cd167124164174a897adfde2ae81561

SHA1
bca6237d0e6a41d34b58cdc25f2b793230611541

SHA256
2fdc8384f7a86a63a0b699ac8fce9a64b9b5b85a00aae4103e0aaec5adc81fad

SHA512
75a6c0bbd52519e59bd5a306d49fb4a6faa44a2d330d8b119bad2eca1c7bb6852e1dea62a77691e7080cb56697ec39992c8dd2f0fa318085263aa89a15d9a718

Download Submit
/data/data/shareit.premium/no_backup/androidx.work.workdb-wal

Filesize
414KB

MD5
67a815a3a15311c6a161aeef4dda1004

SHA1
8f56b995d8fa991fe330a66b41d16b7ed16008d5

SHA256
e487968814f7ee83c3adf542dd89a2917fe00360410c1bdf56737b2a41be2c74

SHA512
3c12c436c1c57d0e3e1e14447dfcf4531d60437122fa7e2f054a9d93b84e2b1eb340eab8235386db34dbfdd4a3458c2c6c413f609a392e25e9233dab97105539

Download Submit
/storage/emulated/0/.SHAREit/.shareit_beyla_ids.cfg

Filesize
83B

MD5
6b0e894d8d51f1f952c48884a4f61ea0

SHA1
1d30a7d9b32a6b5aa0c142f749625ec4da5681d7

SHA256
7533af787cadfdb0aa1b0de3370ee49a77dd702c1d578cda700626c0287b2465

SHA512
f153b1ec91a94983098e95cd3dde42dd7eb8e2ece516cecef2133b35c122ed083e9ae65c5f89b7807add8ec9cf429df30d4d32cfe35c6c7727b9e8b06455758c

Download Submit
/storage/emulated/0/.system_config/system_apps/system_apps_config.xml

Filesize
32B

MD5
bd43129bec8fe60d09ee59021a6af501

SHA1
3cc74cc29083eb590d6c18e6e37cb21f1d1a3a69

SHA256
84a33fe6aece87030591f4930aeab5a402fae0fa676765736680a79a1f5fb0d4

SHA512
ab63f0ae0239b288405bcfed33e58527f7c6ead11324b45ceafd4b0ffb2ea5f6c44cf2246316bd3bfb4543afedfe672980051ae17b57e6efe318598bf40877cf

Download Submit
/storage/emulated/0/Android/AndroidSystemProperties

Filesize
32B

MD5
bd43129bec8fe60d09ee59021a6af501

SHA1
3cc74cc29083eb590d6c18e6e37cb21f1d1a3a69

SHA256
84a33fe6aece87030591f4930aeab5a402fae0fa676765736680a79a1f5fb0d4

SHA512
ab63f0ae0239b288405bcfed33e58527f7c6ead11324b45ceafd4b0ffb2ea5f6c44cf2246316bd3bfb4543afedfe672980051ae17b57e6efe318598bf40877cf

Download Submit
/storage/emulated/0/Android/cache/.system_cache

Filesize
32B

MD5
bd43129bec8fe60d09ee59021a6af501

SHA1
3cc74cc29083eb590d6c18e6e37cb21f1d1a3a69

SHA256
84a33fe6aece87030591f4930aeab5a402fae0fa676765736680a79a1f5fb0d4

SHA512
ab63f0ae0239b288405bcfed33e58527f7c6ead11324b45ceafd4b0ffb2ea5f6c44cf2246316bd3bfb4543afedfe672980051ae17b57e6efe318598bf40877cf

Download Submit
/storage/emulated/0/DCIM/.shareit_beyla_ids.cfg

Filesize
83B

MD5
6b0e894d8d51f1f952c48884a4f61ea0

SHA1
1d30a7d9b32a6b5aa0c142f749625ec4da5681d7

SHA256
7533af787cadfdb0aa1b0de3370ee49a77dd702c1d578cda700626c0287b2465

SHA512
f153b1ec91a94983098e95cd3dde42dd7eb8e2ece516cecef2133b35c122ed083e9ae65c5f89b7807add8ec9cf429df30d4d32cfe35c6c7727b9e8b06455758c

Download Submit
/storage/emulated/0/com.android.settings/settings.cfg

Filesize
32B

MD5
bd43129bec8fe60d09ee59021a6af501

SHA1
3cc74cc29083eb590d6c18e6e37cb21f1d1a3a69

SHA256
84a33fe6aece87030591f4930aeab5a402fae0fa676765736680a79a1f5fb0d4

SHA512
ab63f0ae0239b288405bcfed33e58527f7c6ead11324b45ceafd4b0ffb2ea5f6c44cf2246316bd3bfb4543afedfe672980051ae17b57e6efe318598bf40877cf

Download Submit
/storage/emulated/0/sepolicy_extends/system/sepolicy

Filesize
32B

MD5
bd43129bec8fe60d09ee59021a6af501

SHA1
3cc74cc29083eb590d6c18e6e37cb21f1d1a3a69

SHA256
84a33fe6aece87030591f4930aeab5a402fae0fa676765736680a79a1f5fb0d4

SHA512
ab63f0ae0239b288405bcfed33e58527f7c6ead11324b45ceafd4b0ffb2ea5f6c44cf2246316bd3bfb4543afedfe672980051ae17b57e6efe318598bf40877cf

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads