6ffca21be8104ea5b5e7dc270561fd6e7b5d94ca1e56f8bf332c150e333667c7

Analysis

max time kernel
2260931s
max time network
174s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
19/12/2023, 23:58

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

6ffca21be8104ea5b5e7dc270561fd6e7b5d94ca1e56f8bf332c150e333667c7.apk
Size

29.9MB
MD5

86fa662766b48caf3a81afd1c0611421
SHA1

50c7f78a864a30e3dbc449bc3a14216bf57052a3
SHA256

6ffca21be8104ea5b5e7dc270561fd6e7b5d94ca1e56f8bf332c150e333667c7
SHA512

dc2673503f9ac1c9b44ee0596c2914340321cf0e7201b24cfec8dc7f99b38772c2d8263d349a54af0c3b81da774d2f2ddcb1f4150de700ee56ab266f3410a8c6
SSDEEP

786432:baLNuQC6s1++++++++++++++++++++TyT6rw2/HcfdptTX2bi:baSZ++++++++++++++++++++OT6ceHWh

Score

6^/10

Malware Config

Signatures

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.h3c.android.h3cmagic
Framework API call	javax.crypto.Cipher.doFinal	com.h3c.android.h3cmagic:pushservice

com.h3c.android.h3cmagic
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4989

com.h3c.android.h3cmagic:pushservice
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:5035

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.h3c.android.h3cmagic/databases/H3CMagic

Filesize
12KB

MD5
96ea0d0c59539be5c3ce7be480ab19c6

SHA1
532d26d77637152b2be48ebf9098d3506aa687d3

SHA256
74606c5c8687b58283eee763156023b78654acbbdb3168ed459e1dfdec309e3b

SHA512
ae810bf554150da0f04a9768e38c281d532247cd21cf86314d53e8103b04233fd18d0180be726d43bf42054478d52d6dbb94b897878f04c84a514f32503a3480

Download Submit
/data/data/com.h3c.android.h3cmagic/databases/H3CMagic-journal

Filesize
512B

MD5
3f25f2ee8f8d6a5b318957b1049bfebe

SHA1
c8fa0c7f1bf1c4d7f8c5d4226da5371dbab97bc6

SHA256
717c8889d6eaa48edb371e845b348fd6ce55d59b8e8d939fd25d9e90777bf0ea

SHA512
f7f160a69cf2dc4289e662cb58cc0f5bb261af2f95ffd55f8d3ece38e1107148ef04a570c8d777e4a37f8aae7153678b9feced28bc1ce5af741b1e02c8a1bcc6

Download Submit
/data/data/com.h3c.android.h3cmagic/databases/H3CMagic-journal

Filesize
8KB

MD5
0aa53b84c8b49438ee2c23f3be3973dc

SHA1
a06966f0e0528089bde8dd470bb4cb76fd84ec53

SHA256
7e46116291aa7228dbc60f466b1607d356c1cc777536fd911aa99005c233a03f

SHA512
533f9aa0d5e4cc41490c6be7ba74bfc0f42a05b09247134c5cd3e6654074829fa2aa85eee609a2d48280e40e8653542a1ceaa17770fc88b23e0a44edf1dec1ac

Download Submit
/data/data/com.h3c.android.h3cmagic/databases/H3CMagic-journal

Filesize
4KB

MD5
d2b9dcf9e09ed439796761f369592b9b

SHA1
2f9c6c4c89bc546aba168901004b0c5719229a96

SHA256
776b1d064c6de285ecf74601e13425ed4269a3562fc118587823625e4c5cd17e

SHA512
25e80984e697f35ddd5b5792fd00686aba0c9db4411100883dd5ec9e45e22deaeec11a50358692f38443cbab9e2836dcdded13fb6d4c1c4146a1339ff5fe61a8

Download Submit
/data/data/com.h3c.android.h3cmagic/databases/H3CMagic-journal

Filesize
8KB

MD5
1fed6e4384e25c17f8329ef242b625bd

SHA1
b5aeab68b29be74f0a607616d8ebaf8580b7209f

SHA256
4417e67d47fc7026a7dbdf10c9b638daca2e5eb90bf278ae916cbe133239496a

SHA512
a6aac074b650d366cc5dc59b8eb3df4f3074d633d5fcb8ebc22d4c89b2f2509c9e034cf29966c84e4cfb67e0c5f3f38017deb52e759e13db8a90fec03c9efc56

Download Submit
/data/data/com.h3c.android.h3cmagic/databases/H3CMagic-journal

Filesize
8KB

MD5
f41657df67bfc0b81f05f8204bd6e4c0

SHA1
ad84a9a567cd0d31fa6d92ecea1c2a7092d43489

SHA256
33c4ca9ffbd30fb80c547bd105d04bc344368e14dd81cc6a6a5f6a19d200203d

SHA512
fbdd1c2bdade3042ae9c1a7076627a3af7ab80ff2a9c800cc0af5433a747af644ed4d6ebf4406df2f3bfe535c0829d8d301d45143ac2b97c4ecd122d3d876e37

Download Submit
/data/data/com.h3c.android.h3cmagic/databases/_nohttp_cookies_db.db

Filesize
24KB

MD5
8b88d8ed6786b69e2bcfafd38ddbe5f4

SHA1
2d0e5db696a423e48d9dec06edb15ea7e1ee31c3

SHA256
d0eb89463fdeb0a62e43db6094305fdae72131a09e030e5febefeb7cc1cc5da1

SHA512
f1ef59c1065199347615401ce91c20a90b30a9e3d434c09abdf121da985fb0146b0835570b74dbe2689f68ee93c98958dfd2550375d20efdc3dfb88c9d238868

Download Submit
/data/data/com.h3c.android.h3cmagic/databases/_nohttp_cookies_db.db-journal

Filesize
512B

MD5
5fa5a3ac4e5244d483e324db58202050

SHA1
18f3c4f52fec348d83db3524473a26b002a513a2

SHA256
76b902270b36f06202474ee61106fdc4abda8b067510aeca9bc5a012115da353

SHA512
db7ea445ce53941a7b6f3343b476a3c5b5d76b282ca9ae6f6a719b7cb34457f42853bcc19ef762f7583500219d8ffcff50bb526c74774b4cea28623a165f732b

Download Submit
/data/data/com.h3c.android.h3cmagic/databases/_nohttp_cookies_db.db-journal

Filesize
8KB

MD5
2adc253981eed5ba9783e41594a16706

SHA1
4de32928e723b4633dbbea3436edeb4b6ba2b0e0

SHA256
e658ea6de2986dd017df9694deedf05b5c5a4d37b441e2e01a615ed175b53757

SHA512
241b2cc7dc77c2a794dae03c1ab51734b4f68df01b3975e325d3bcb49218eacee821a7ff14a09d4aacc1e0589d94357a64444681173d2c17b6946008ea9d365a

Download Submit
/data/data/com.h3c.android.h3cmagic/databases/_nohttp_cookies_db.db-journal

Filesize
8KB

MD5
8bc18f0b4d6b82c6594b47628a302c61

SHA1
9dd344bf1995844ba1ab537000abc100636d5e85

SHA256
e961241e1cd985e91435b82b9a7b1efd9329e0d7bcd526ae0b1b35039478666a

SHA512
923acca78fc474df3e33ec1961d8c91f02a58c6a52ebdca935e705c97a804612d120edebf3f3ac8628f1d89169df53b3541dc3116c0a83f08dea43448a330dfb

Download Submit
/data/data/com.h3c.android.h3cmagic/databases/cc/cc.db

Filesize
36KB

MD5
0908e924aa236931dc7166fef6e00862

SHA1
7782648d6d8f6e835bd47058d4852932c096a467

SHA256
38f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f

SHA512
3c16fbc5172aed04cd206e776c46d26e911732c6e3631536410a71f1d217449475727ac9b3175e827c5ce645a1da9e05900258ee6ca27c936a9060f241361dee

Download Submit
/data/data/com.h3c.android.h3cmagic/databases/cc/cc.db

Filesize
28KB

MD5
288c043f3259d46a1f71b680ceb035c5

SHA1
a0dcc33019236ebcb7972bc6dc897010b782bb5b

SHA256
8d82543e37a2eb3b37385c0e4788be855eb6dfc6b4006d82a79ffc829c1c3b5f

SHA512
cbf7d8a29644266566dce873e08dad9f31b1726be96034fb2be940f91d1385284fb73047be3c22750297fe899609e8f39011ead797dcb5134c243eb99045b1df

Download Submit
/data/data/com.h3c.android.h3cmagic/databases/cc/cc.db-journal

Filesize
512B

MD5
032569b99c93e91bfe56745cb056eb38

SHA1
92772f3603958c1b0146d287dc57e01fe0da4176

SHA256
9c9b565906b0aa4f9894468e33454481ae95d5ff0f6b151db77f77b659bbd56c

SHA512
3fefade7d02998c5a59aa71127e022e26d2b5d25afefe0e0f31f55c21eb09d4de375393078e55454620c235d7da9b0e70b17c5abf9fb4a1dadd65305e6b0fc87

Download Submit
/data/data/com.h3c.android.h3cmagic/databases/cc/cc.db-journal

Filesize
8KB

MD5
dbb587613ef4ccdb8d596429feb135a3

SHA1
66456049cf93ba4804ef80d07d99adda0c5667ad

SHA256
8ccf1b8ee17e9438bdb7887eea485b0926eb60f267a3b4c1fa0c1bb9c7c8c33a

SHA512
aa1146f0aa6cd4c8c1f201e751a2b44345749b3c74dd69771a5d3480068880cc19a3b8a6a6bb735973e9ef3b9c759549f7918e4e4fe428cf68a5cb165b9eadb8

Download Submit
/data/data/com.h3c.android.h3cmagic/databases/cc/cc.db-journal

Filesize
8KB

MD5
eb62190997dbcebcb5011c4672550bf6

SHA1
6bb429c879736fbc47561e9a2cb9a09a04177f72

SHA256
4aaf54e7b603deb79e9f7c4651e294c96aefa26ade11954cce91ca74117665c9

SHA512
d74e5fb3f3df95b6905c14c8d19eb77e1002863dcab4cc59d3407e35d00fa7a807f54da761941f742ca43ef644f55304a0dd77b09fa4638a73a9b6f10a7dff3d

Download Submit
/data/data/com.h3c.android.h3cmagic/databases/cc/cc.db-journal

Filesize
8KB

MD5
54ea9ceb50982ab70a303c8a3ee7c256

SHA1
86b54a1a9ff4f785d4406e9dcfb4a584fd8ed8f1

SHA256
eaaa6e7134f5ddffd1bda445050b4d2ab974d16c1d9c02f982d80ab151c9262b

SHA512
e2ea09c934c1d9a7bc007cb11bc420b7431605853e92a0f780fc98768b4c0ae8a76ea49dd1e7f280d7fe69664771b2da1eb96493c4367345e2c47704338f4326

Download Submit
/data/data/com.h3c.android.h3cmagic/databases/cc/cc.db-journal

Filesize
8KB

MD5
431fde59a94a24f49badd346feae227c

SHA1
e2c49835a4c7cb7480ebb6cc9277032964be70d4

SHA256
eade8b6c2761571f9e49f28b8d630f562ad76ea5ff668ddfbb599923d034cdcb

SHA512
c96b1db69f68656d72c6dd66f1a7f6def368a9c9075b699d5f811c2ff2d902a30bd3db7da572e83efbd2b8dbaeeb1ebd7502b70478de185df5b8af0f9321b9e8

Download Submit
/data/data/com.h3c.android.h3cmagic/databases/cc/cc.db-journal

Filesize
12KB

MD5
39f4827a123e82197c4e058d77088e6f

SHA1
aee28815b14e6d82ca9fe79f5d2cbc15c6903f31

SHA256
869bfc20a858ff772b99fb0092c064c6b9a9ec3fb0e88eecdab58a4635d43c0e

SHA512
900aed21b2996ffe299ee56004f365279d4ad8962a15bebd33bbe950f8af3ed3f55b25be2fec62f716b20dc05a12a257968a0748c7117152ac5ff583a11833d4

Download Submit
/data/data/com.h3c.android.h3cmagic/databases/pushsdk.db

Filesize
12KB

MD5
ea628e04765adaf4238a5dcdff4bbd51

SHA1
a801947619ea8c368efe9c006a324dc6339ac60b

SHA256
885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4

SHA512
c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

Download Submit
/data/data/com.h3c.android.h3cmagic/databases/pushsdk.db-journal

Filesize
36KB

MD5
816edaf41c5609596f71cde289ef088d

SHA1
37941e9d08322426d7bd7f9d238f00578c79b9d0

SHA256
b8ec6379ab20516672f8a2525e6e073b88956856c2529adcaffe907f5fd414aa

SHA512
d80dea311dcc18d1b750ee11fc1a82ebac033fbe1c1187db0d3f469c0e181e57d822b0c7b169beab333906702dc0cb96cb6f1a005da4c29c68dcf00de17a3dff

Download Submit
/data/data/com.h3c.android.h3cmagic/databases/pushsdk.db-journal

Filesize
512B

MD5
1129555031994a021a9c7a0c8d9d4a8f

SHA1
262dc4507b52905f70129860680a01159eb6163f

SHA256
e6fa3bdd546ea94a91de99f882a785021f68a1e50536a21d19978f28d6bbc5fc

SHA512
9c1d01c1ad8f753ccaeb4ae5116ff302034ea64b57dbee02f1ac5d967c1518e80ad21ea7774024df75f06eb4f1dfc954cf4226e19aaae272346874ebefedb455

Download Submit
/data/data/com.h3c.android.h3cmagic/databases/pushsdk.db-journal

Filesize
8KB

MD5
1da80b96d8122f413e631f97422abbf7

SHA1
18c24fd27dc5782359d6a538b071bf22b5ee6443

SHA256
5e59689b602d0e4b571db3c65272c7549497e2b57d723180955f3f1d5620f265

SHA512
4843abff48b87d5c5a7583dc5cdd9f72ed7b03b300f87834f3c20a5293512fb4c1d3ddcc8166fff43e0bf74d818eeddc9aa98de5fe2bcfdfee18e1829620ce16

Download Submit
/data/data/com.h3c.android.h3cmagic/databases/pushsdk.db-journal

Filesize
8KB

MD5
9813aa42f455f89cae9fa8a2d66c05f9

SHA1
bfdda18635815b1160111abab6e4c15ac736fae7

SHA256
12eec778e9be703588a997f7d5d4f469271f4bcbb28d3c17687c829eb4d030a1

SHA512
ed7834ac4297405da5ba3bf4f80b5d5c3cec3aeb7899be3be0a4d989e6f6eba65c2409dbf82438c5d77555d4df9f5262d5601ac327108730ae336cfbfac32409

Download Submit
/data/data/com.h3c.android.h3cmagic/databases/pushsdk.db-journal

Filesize
4KB

MD5
7dc413d1c9bf750777819fc23227f00c

SHA1
b6551c813ba4727aaf6e48259c469ea52159a847

SHA256
9f274d9b271e70e254ee510812af95554c9e09e80c540e70a584c317c8f68885

SHA512
a8925d4e44fdcb5072c3648284cfc6d252fa6cd5bb1ef59fa9678cdc9d6c71f768561600656e6049744118b5c50dd3081b8fe87bd1fc1668baa79be2e59fb1bf

Download Submit
/data/data/com.h3c.android.h3cmagic/databases/pushsdk.db-journal

Filesize
8KB

MD5
3ddad0beb69f4f5abcdb091dcba0c3a3

SHA1
cf1cb21c921f13c037161bacc7eb414853c94fb9

SHA256
bc7aaa034753b6683f809fbea665d747082ea5e363da4293cd597b4e7452c47c

SHA512
4a39642ddca8296459add4127bd5adbd637e32e069e3a24d9ca60b8b7f8a37f6620fd3fb31758b6163da6f31e30b4371fa003a10d0a35c1bea05f0f9871156bf

Download Submit
/data/data/com.h3c.android.h3cmagic/files/.um/um_cache_1703067964063.env

Filesize
1KB

MD5
8c5d49b3f028da50f4c6c6f7c0729117

SHA1
82bbbff64259285f43beb7b0b51318ccde03cd13

SHA256
c19dd4f86af3786fa09377480277a81df87036aad9e9a3e0435a6f473924b1b9

SHA512
90e412f037c48e90c7216d93425d7fc9043a2f5eded35dfa3be47bb35aca898f58f4663261198fcc71f43ffabc86e13c5845b770739c5a4f27e0b15916ed0d50

Download Submit
/data/data/com.h3c.android.h3cmagic/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
46978348fad3f1e4893d0b4af2c5e9b9

SHA1
9d6e129b299244628073e54bcdb12d2aad2c2b0f

SHA256
afe6b842cdae7695ad72b5b528d725ac2e4cf90c777ae3b97509facc0ebfac39

SHA512
7cefd3b03631996b842c95a096f7e911b7eb5d6b133295ad878486e6b884eb1f8db3aa0f4d79b1386c49524e41c3104bc5d78c739b1158f9564a7207694316c7

Download Submit
/data/data/com.h3c.android.h3cmagic/files/exid.dat

Filesize
61B

MD5
0001e1d9d46fb579c40ccbe8f1ba9b2c

SHA1
464fa29911ea02529524230ff7841fad6f8c9143

SHA256
9e52b35daf1f4ea003a642c3922613627307b2c7afc061a2f87c7ca985821468

SHA512
cea51bd62369579dfb190e18778a934ed917a14221adc71e2c773a7f1698b7fa69a61bd77c64ba0a3eda46ac8d24749fabea8b14f9200dbcf45bde911070d0bc

Download Submit
/data/data/com.h3c.android.h3cmagic/files/init_c1.pid

Filesize
8KB

MD5
87168a5295ce6162e9705d40ee2c53d9

SHA1
2756f2adc3096229a58a1c0a585c972ecbc4f534

SHA256
b5b064c5ebf3681920f8d836d2702c9d97e792f4de20d184911ff9d9d986c486

SHA512
566dabafe2da52113628ad336362f03da97d6b5950f72e004951146f0930090bcae393602d94f626f32c47d6177d2c5bfa7929b367e162b5c7b72dda1fd673b8

Download Submit
/data/data/com.h3c.android.h3cmagic/files/libcuid.so

Filesize
109B

MD5
ff8259dacc466aca11276e41b3250f02

SHA1
6a1f9973029a47bfeb0f8c92f8ded9c4ce6e17e0

SHA256
b913ea54c77dc44266d040343e577df222ba57439f462d8fa1249f3d3338dbec

SHA512
ec543ec2a734e85b93f6c32b47a3ce04c91949bee8c88460cac67d14e507097bef9bd0c48f9ba3dbe78457da10f69f795a0ef77003a0db5d71831bb77ff56e1a

Download Submit
/data/data/com.h3c.android.h3cmagic/files/umeng_it.cache

Filesize
350B

MD5
4bc320c3f98b1dba6e01020f9472d241

SHA1
d33fb120b18dd73eddf11c9c8102a1b680d31aca

SHA256
a4b68e15d1e028507e7ab18fb66baa60c351e7d6ddc05296d505d29e1d6246db

SHA512
ae15c4b7c8cfb74e7d1219395fb12ad4475193d4df0d01e7023b1c04812093218478d9dab0a85580a0cc0f824aa8d0b8b909bd352ef1c582949078b768ff9886

Download Submit
/storage/emulated/0/Android/data/com.h3c.android.h3cmagic/cache/uil-images/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/storage/emulated/0/libs/com.h3c.android.h3cmagic.bin

Filesize
24KB

MD5
585444df06820efa2f33397abb5a14f7

SHA1
d5d25821b368a4cf3cea8fc4ba7f6b6c0bc60fea

SHA256
e028dc899ba1cd2b61e4d29db4305a0bc11858b69e9ab2fadb966ee689175a5f

SHA512
2e9841bf9b6c02cda6873aa02ec3e895429d2b1dbc640f2b9a47c4d1fb5a2fbb61a889db835fed5b78cd8675324ccb2f0984ed39e93313bbba1090900c22d14e

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads