Analysis

  • max time kernel
    2268158s
  • max time network
    160s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    19-12-2023 23:58

General

  • Target

    6ffca21be8104ea5b5e7dc270561fd6e7b5d94ca1e56f8bf332c150e333667c7.apk

  • Size

    29.9MB

  • MD5

    86fa662766b48caf3a81afd1c0611421

  • SHA1

    50c7f78a864a30e3dbc449bc3a14216bf57052a3

  • SHA256

    6ffca21be8104ea5b5e7dc270561fd6e7b5d94ca1e56f8bf332c150e333667c7

  • SHA512

    dc2673503f9ac1c9b44ee0596c2914340321cf0e7201b24cfec8dc7f99b38772c2d8263d349a54af0c3b81da774d2f2ddcb1f4150de700ee56ab266f3410a8c6

  • SSDEEP

    786432:baLNuQC6s1++++++++++++++++++++TyT6rw2/HcfdptTX2bi:baSZ++++++++++++++++++++OT6ceHWh

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.h3c.android.h3cmagic
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4248
  • com.h3c.android.h3cmagic:pushservice
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4288

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.h3c.android.h3cmagic/databases/H3CMagic-journal

    Filesize

    512B

    MD5

    4289a9cdd96cb844cd92368782f6e886

    SHA1

    4a289cd0b2046ac261aeefe38720e4fd4f9646b5

    SHA256

    181885f3c25868af245a7232e018a6a0b7d4f99a058fecce361a3f3ddcf447cc

    SHA512

    ee7311b188e0085f6ef131904e9e78f00fe356c524b97a9efd6d555b0be9a51af7c4e850bfbf55300e7537e94670b1306c38fa6e2b02b83ea9dc05c1d4550562

  • /data/data/com.h3c.android.h3cmagic/databases/H3CMagic-wal

    Filesize

    20KB

    MD5

    9ef806e6ffea4cb865c423437ca67f1f

    SHA1

    7907ed12aa884fe850ce924fad459444b1cd7ed2

    SHA256

    964bd2ce8ef9f0155dbb4aa891e3b4ba7d6c7dda98f0eb10f10962b583a08512

    SHA512

    4789968cd0071c7f732570a1e94b6ba3f6d75f7a27a7dba5dba7536a5064122029419e4fe6269271c90b771639ac9a6a234cb86863616f566a53499a29bbf531

  • /data/data/com.h3c.android.h3cmagic/databases/_nohttp_cookies_db.db

    Filesize

    24KB

    MD5

    692957a8f6be4a25986a068c449b83ab

    SHA1

    04223c8cbcf0032443488e3f5f9bee9f91eb5f7d

    SHA256

    4895bff14c71a617ca75f6ce7933b28332ee06a1b2aa431ee3e108db693cdf0a

    SHA512

    0617a88df6a60252050fc5403f6d01936bbcba961d707474d62bf97cf1e2034999befd13fac5e58d430ce43dd45dce8e2e6c8b6b125ea53dada382aebcfa3742

  • /data/data/com.h3c.android.h3cmagic/databases/_nohttp_cookies_db.db-journal

    Filesize

    512B

    MD5

    18ddfb12304ea131eae98d038e75f4ba

    SHA1

    14be69bce1373ad7aa4fc2299bc18c3a08244a94

    SHA256

    51af87dbe3cad4ca13a18cd932b4df8a689704470dfa77919bea4790a86051a3

    SHA512

    d252b084df931c70849b52bb194449dd76ae2ef034e9506e1fbb8e23bb420031917e7ed28f47c59da5d4ecd394e9bc2e50437575ddb53693b59217e30852b1a4

  • /data/data/com.h3c.android.h3cmagic/databases/_nohttp_cookies_db.db-shm

    Filesize

    36KB

    MD5

    4f75faa5eaf571f281a168a3c548a76d

    SHA1

    4ba913d5d5d7434dd57e8b119009d74d3a5792bc

    SHA256

    961bf9b659b4a94ac29db87a2873d04651af6ae394435c56fdc777eb8dcb77c8

    SHA512

    1ca70471c63f050f6a0a0ff3d2a5ab0d9f8d81a36da94a2b28d056b84c239fe37bd55851935e72b14eaff20c21ecf74c7f97759d163275171f8ee593075b6118

  • /data/data/com.h3c.android.h3cmagic/databases/_nohttp_cookies_db.db-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.h3c.android.h3cmagic/databases/_nohttp_cookies_db.db-wal

    Filesize

    36KB

    MD5

    48c892f8475c2ce8c2f5dc89df72338e

    SHA1

    90f64f8e28ee37dd204e877ca575f077a5787ed5

    SHA256

    deeddb8003c90209b89f9fd2bf572b993fba6b2822f6f9b911982e80e890c180

    SHA512

    f5e1325a5fabb646e9982ed2f6d4152400f08a881e07f5594eb988dbde890bf7e8362ace23b3236e7ee7db678de073b547f43bcdf1c418171e6656b7eb3c4304

  • /data/data/com.h3c.android.h3cmagic/databases/cc/cc.db

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.h3c.android.h3cmagic/databases/cc/cc.db

    Filesize

    36KB

    MD5

    ce6135aa1b1fe4f2c2db2a546d2a5558

    SHA1

    79b59582154017aadab783dc266fcb158c252940

    SHA256

    7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

    SHA512

    2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

  • /data/data/com.h3c.android.h3cmagic/databases/cc/cc.db-journal

    Filesize

    512B

    MD5

    3b7b75704ab71080b356261a641c95ac

    SHA1

    84f35d974977246fdb48545e658978f4430a0859

    SHA256

    7cceed29ca314fa9b247fba33243d34a0235aa2989da79059333b089c3ca6ca0

    SHA512

    3b2ec9492099034a166f5f8dc0c50c2db6c86a0cf5e8fe0e61cae5a449e73b9d00f816de636b526c7ad35c851c596d765d392ed00d0c764cd836926ce7f108fa

  • /data/data/com.h3c.android.h3cmagic/databases/cc/cc.db-wal

    Filesize

    16KB

    MD5

    85aac9bf0a08beb7b8d65552888b9ce5

    SHA1

    69e913b95c1535c0be196207910741df46c71ee6

    SHA256

    ca0b378fd8b2af5a0c9213a00ea3406bf5d963cb40fb06c296c084de24ab92a0

    SHA512

    2c09193a0e924e562e4da6b4974bf933509ab506bc6bef1c6898f27faab64921d8fb141b57cba819ec386d166d8c5903d796199bedcf78ab5434a4d43fcfa281

  • /data/data/com.h3c.android.h3cmagic/databases/cc/cc.db-wal

    Filesize

    16KB

    MD5

    df0576f2041e3cdcad16e95c7960e858

    SHA1

    f9afe96320651b28c32e8a9e6ea6ac3a9eaec284

    SHA256

    921624fc9ce0f3a15122d629ab3bf6f94ae86fe2bbe601f49796c102d97c08b0

    SHA512

    89133b7cbe8880b530bd671cca2e04bfa05bd16096d0d43b86c1d5b8c96baebdd193f0b6d6a6f686a662e02adde3c2bb2ef94b26c65a7ec93cacd96bc0fc4ed4

  • /data/data/com.h3c.android.h3cmagic/databases/pushsdk.db-journal

    Filesize

    512B

    MD5

    f63fedaefc51011fdb5cd361788ef740

    SHA1

    8378cf8354c59f566bfa408a612f760c8249d64f

    SHA256

    faba38039f6ee15534a19394ca3cb0f57a0a76b410a076d763f7834da85c9827

    SHA512

    1320451a8a3532e5325a7dee467810a0403e76313aec0b3e454710b46beaeaf91f22c99e451aa8763f4f082057887074e62a127356f98b6e605d8baa21758c79

  • /data/data/com.h3c.android.h3cmagic/databases/pushsdk.db-wal

    Filesize

    64KB

    MD5

    d1d0594ecf5940c303cf308b4e3704a3

    SHA1

    19b74ac66fa90f23650013a2b42f07160523a98f

    SHA256

    0dc970e0ab6f5bc0c4b9dd60fc69baf0410185849b92318c9913e75ce4a2c44c

    SHA512

    d09135bdbdaa8700658d27dddf90db0a354b3510ff5dab9f5b40e05c1c7de180ec2dfa17d617c4ad45f279a32f4621e58356d4d635cf242882c9b0975354e5fe

  • /data/data/com.h3c.android.h3cmagic/files/init_c1.pid

    Filesize

    14B

    MD5

    745cf56f2182f7c8f3ffaaf16ea2f343

    SHA1

    104871044c497a2d4dba970ccc792f91885483ca

    SHA256

    ed6a73ffe9ce3094a7078838894f84717817325fa0c6d972814c1bb03e2ba32a

    SHA512

    3affc9c6c5cdcd8c0c979d7102c608be9fed378dbb26930824d6660efe71f78e1a3779fe03a4d665fd6695cf854336c2c2c2029162ee9dbae586a9b9f3423436

  • /data/data/com.h3c.android.h3cmagic/files/libcuid.so

    Filesize

    129B

    MD5

    bc1403a56fdd26633586f83afd250f49

    SHA1

    378db76552965d1a1fa12b60b5d81663e435ac9f

    SHA256

    a88e2694f7e6e1da4d5637c5100f93202b6f089622e71e4c066f4fb1df814aa1

    SHA512

    7cc99edd8a19ca9f9be0f971283a77c06fe44b2afa3fc1970adda6af3ffa3ca90dbc77df2ff43671bbbe7f4f6059b0e09c06328d8f9f74322d6dcbfaf7fe3289

  • /data/data/com.h3c.android.h3cmagic/files/umeng_it.cache

    Filesize

    415B

    MD5

    f40b2327dd93750106ea4139bf8b9324

    SHA1

    65d1186267ac725ce53ff9918e52e2752db595e6

    SHA256

    c7f252ba99385bf049934543455fa9cac534a0bb45b86259fd8ebbe363c0c4cd

    SHA512

    9148ec618ba993493b669cf48fc6b1e3402b32e0341ace72e7d287bc37c636ba10e42cc603d56bc1f090ba2000b27cb0ec7ddd98ba83b894c8465cb529895557

  • /storage/emulated/0/Android/data/com.h3c.android.h3cmagic/cache/uil-images/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

  • /storage/emulated/0/libs/com.h3c.android.h3cmagic.bin

    Filesize

    28KB

    MD5

    50e7d3f53ef6f446c76db6f39540c359

    SHA1

    77073e5833d3fb2c6da091889cb5ceba7c35e391

    SHA256

    eeea2fba4e795284ea84ad45734da3b927d0e8444c41f2a4a185e081d6fd775c

    SHA512

    0983c8f3e23d3087f8d65e69266c0df3aaf6cfccf64573737d816a4e4c1bec7170d26f6c73aeb0ef920e34b54870072d7dc091867341b553d91e12d0fbe24b87