Analysis

  • max time kernel
    2299171s
  • max time network
    143s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20231215-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20231215-enlocale:en-usos:android-13-x64system
  • submitted
    19-12-2023 23:40

General

  • Target

    6e0aa921009d7a9329dbdce75174a7918e4cf8f6048c06a90e0ec76670e5d389.apk

  • Size

    6.0MB

  • MD5

    06c6fb1b8564d4b3b9fa08ecd93dd339

  • SHA1

    92e58028f42fe5a18489fd03c4680faf24b29590

  • SHA256

    6e0aa921009d7a9329dbdce75174a7918e4cf8f6048c06a90e0ec76670e5d389

  • SHA512

    c773e41516f2191bf2973acd68314c315e426df51ea05bcb4ecd6c49bbd59552ce28c53e5f770ac943dce2cf6de9f25eefd1fff18785889455ee844b6e2cd8b3

  • SSDEEP

    196608:+PnmabQwcnN+SwZhaU/Vlp38QvpBnPb03nNzA:+u6M+SwKUtlB8GfnTgs

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.gamebox_idtkown
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4311

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.gamebox_idtkown/databases/cc/cc.db

    Filesize

    36KB

    MD5

    1b77217d803a7c04af9466680b92d104

    SHA1

    0cb959f4773c6730e8aed5746706c0f3ecb35c1f

    SHA256

    66c83ae35e997c33eaffe9c0557d98ee31931c18b99585a64eb6cc8f63d303e3

    SHA512

    39ea189895ca93855bb71b4a5447815e9373ffd39b50611ac172ae321ee7716fd4af5f86c1fd0d17e12b771f4016a86184620a7c5d07f57b88f017c4ce8312ec

  • /data/data/com.gamebox_idtkown/databases/cc/cc.db

    Filesize

    36KB

    MD5

    b986a138e325f9ed31653e246087baa6

    SHA1

    1cda06c101efbf7c89305f44b552e38282225064

    SHA256

    6945d75275af161fa082eab8b348f4cdccbab03854963f5e861fde210447e058

    SHA512

    5894180006885af44962dcd92c6f33a640d6080060a51a38ee4e348ee2dafe9abdcf2a931cfad4c395ebe20e08b96f810ca54b5b1f584fa232cdabc76be0740d

  • /data/data/com.gamebox_idtkown/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    776b762bfca04fe03bbdd1b31e92f065

    SHA1

    8f6ab94f3a54d77fc3c7dbf76c1b0b7730836d74

    SHA256

    47dd4f045d490f67e6d6c460f38b0d0a4956459fec0f405b7c021c4c1266fa2f

    SHA512

    8ca572bbacaa66348e8496a68c0cb7c92574e17eac8fc401c6d92369dcb51515d5d1233ff2aa7b6c619c7ab6b0d2c9bb7b7f65bf056dbf659d79d2dbbb41afed

  • /data/data/com.gamebox_idtkown/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    aec4d0bbe82be698b57997781e1f7310

    SHA1

    5f9ecb542240d342de9fdfcfdbf326acac0e7be9

    SHA256

    070c5b4a4d4c68a742e06587c778029a2227cd722b6ef97cdd5001841575b69e

    SHA512

    9125035fb89ef6ef0c0d8cf99edf16a07ab5dc85b8641ba5c53bd16c61ce60e49f67b25a1c11bf09548e9d290e21e4e5cbd3039611e8c7090d06c609e8190201

  • /data/data/com.gamebox_idtkown/databases/cc/cc.db-journal

    Filesize

    12KB

    MD5

    03ddddde914b9346e560d17e26bf0a22

    SHA1

    4c6079f273989b5f69ff166bca50751b665457e7

    SHA256

    f06043349876bbb8d9ffb0bdb54950d60462dd4a6e4ac720bb96b339559ca6ca

    SHA512

    89eb4ba8634fb68eb8b66392ad4f9a7384c392511fac492faa2c77dfda838d048f87423a81ac2224b2c6a9057e1f4e0db27e718d005e16350bfcd47adf06dfc1

  • /data/data/com.gamebox_idtkown/databases/cc/cc.db-journal

    Filesize

    512B

    MD5

    d468011cd3e3121d228393fde57d11ed

    SHA1

    042f2fefa4ddd2c6bf8a42ed0f319bc7eda1ccb5

    SHA256

    e0aee7fac47bd7ba778a29b9c76b338b865f53b4f3c70da09b6efb265302246d

    SHA512

    21eb2c49e269706311f56187d5fab1954ff5c81312f40181529a94aa16ffb9146caea1a5c063a31f2d88d74238d8348ab0a27061f10a688a5c8deb59019acdf0

  • /data/data/com.gamebox_idtkown/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    26941a91d2df69afd337a9de35867c8b

    SHA1

    d16078cc27276021df68ea34a6cca325048ed0cd

    SHA256

    fe1a421698fac1903f83162d3ce525f1f3c059f8982c2135cf3c353c5456fc6c

    SHA512

    9068e1a3189cf57a747d45f7d728be01c5c998490bc2a07bc235778a7287bfcbf0f6b365628969e5b22bb871b45845e9fdb7a546163e8cf4a449c9ff1432d926

  • /data/data/com.gamebox_idtkown/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    fb9521acb9a131c645325c1234f363fd

    SHA1

    0ad81123e2a3e157ed12439232000c4f79c73ae7

    SHA256

    b3d07d1cd34d9b9d05c98792f01e0949ac6d4d65b6be04a37a283f7366a8b9f4

    SHA512

    665446b6485b3449e252c6d3f60225e6ff0280d7ebc266a46ece96f9a0249115aa87e55556a85590fedc697abdf3a59e54bf25879ba955d54990ef5fbf6e3809

  • /data/user/0/com.gamebox_idtkown/databases/com.gamebox_idtkown_6071box-db

    Filesize

    72KB

    MD5

    f4da611345d98b857c5aa5e2afeca6dc

    SHA1

    9355e4f166a83aaec1a9f39d8b79dfa12a7e90b0

    SHA256

    7d3eab1d9c31dc489475939b3a5ffa81ce9bb984073582ee7250143699dec080

    SHA512

    e9ed92ad3fc1f461e9cdd9dcc46a9933025e164bb0014bcae1387bf6a19d1c7282b091b485109d5dbddbc3f132cc9ea8c102a19deac167878e53b0a2c39c04bc

  • /data/user/0/com.gamebox_idtkown/databases/com.gamebox_idtkown_6071box-db-journal

    Filesize

    512B

    MD5

    eed2843e8b7e9138cf7ed07672f0fb09

    SHA1

    0b1a53aaaafb086f71d7abd3b82dcb687fc2c861

    SHA256

    ce9d61ba25a04715e76aa49bddd9a5d4f9f998146e69a55947fce4db3fbf52b0

    SHA512

    affdeed5c91ab78eda9d60490ba1bca43f5cf9a9644b576c0397b4ddfa40f8c32acb309e711dab93042864424be8382771d6984731a8c3f4d8661da402723cbf

  • /data/user/0/com.gamebox_idtkown/databases/com.gamebox_idtkown_6071box-db-journal

    Filesize

    8KB

    MD5

    b932c53f12077f0448014be8a1987089

    SHA1

    1af83673a4873a1318502b5bc7b606581dcd7b8f

    SHA256

    4393fd834872f2096917118ece39faafe0b50f5731718376617f43bba7deff3c

    SHA512

    f6e5353125549805ebe760215381294a2d8ec6ff74c292f61ac5d388bb8c6e3af26466f6c333a55b787ea187e404ff386a01a1c0e1281a32bd1858f1ad682f34

  • /data/user/0/com.gamebox_idtkown/databases/com.gamebox_idtkown_6071box-db-journal

    Filesize

    8KB

    MD5

    814fd7a67785f255b7904dc2310a11a4

    SHA1

    a9374d665bc81a27744b3d57ea67a15c08b1df24

    SHA256

    ed8f6b83cc0d74dbe372f3e2392fa3fc8881e2082ad698103d63c9805b82661d

    SHA512

    25f5bfc888d390b15e0c110bb94a034ca8fa67cf86a91c74c271ce34750d6a7bd8abd5cc67addfb259984d4eb320135bf6716ce000c8ac051d44b89635e0a1aa

  • /data/user/0/com.gamebox_idtkown/files/.um/um_cache_1703106220103.env

    Filesize

    1KB

    MD5

    103a3ae50897f615d02f48da4cbb23f2

    SHA1

    7e95cc051d95a3c060c153357bbd321fbdde61c4

    SHA256

    87fa0df8ba08481b2ab85bc83286dac95c544f079550e20cd76b9b5bea25ec32

    SHA512

    45950026c3db20a919b508ab2176a70eb9f95dad3cbfd2951a869ee78c61697432ff252337c818b474cda45e49329f6d97844a46c0ea1e72c950d648bdf049bd

  • /data/user/0/com.gamebox_idtkown/files/.umeng/exchangeIdentity.json

    Filesize

    162B

    MD5

    9792fe4c8867ee5167229ac1d9a13f89

    SHA1

    4a94d46e8bfa1da73ece0205a776974c64a93440

    SHA256

    fd1393bb3c7a59eee1c68b2ce95c0b51e0c6926a00ed677bb81094d323e7f3bc

    SHA512

    3cabb830ebbd8da2308df64c031265588b63850533d9979353faa1f352c80f0f5d92fd5750e5598dee2d5ab9d8413250f09ef048b9c8cbc2d69524374a0da36b

  • /data/user/0/com.gamebox_idtkown/files/jpush_stat_cache.json

    Filesize

    138B

    MD5

    526a9155da3e7967309e22aa062ed5f7

    SHA1

    f3e757dc41581bc2d8b9695f4154ceb0e53ece47

    SHA256

    2b88120449c165491a7f1074b52557ca8c82fc761e48893754f412a5ed73de0d

    SHA512

    43c94244b2d5ffd359dc6c16086c32e3f66c0ba4b87a429a93ca34e72f00cc0d6700d38ed8e6d29782bfa1cfcb52546a3cd0f70647d3ed046150920cc83019d4

  • /data/user/0/com.gamebox_idtkown/files/mobclick_agent_cached_com.gamebox_idtkown117

    Filesize

    2KB

    MD5

    bbf21856915dcd1800c52b35161fdde4

    SHA1

    211127f5b9d92c2645d7445533f0baa40342ab48

    SHA256

    289e1d87e119a11a7dc7bb1952f88ccb73cbf00e3da3a8a4713c97f5dc838347

    SHA512

    fc46d795136c3ac4024d222f5d0f23e6bb938737d0e4f3d881eeb9075f6b4ee5d664df9b8ba82f047fecd4958a7fcafe5ad5fbf3ffde25013a4e16b61e0f5a26

  • /data/user/0/com.gamebox_idtkown/files/umeng_it.cache

    Filesize

    435B

    MD5

    c5c7f4fe3298c4f15def15a9025de82a

    SHA1

    9b4250b3e0043c3649b5d7ebeb9ed36b3249c2b1

    SHA256

    6d1805642a615cab15099e5b53c452b432ba870b0d170f6f4a7b613bacfc2e13

    SHA512

    b70c7b68240541caf44ce41daee72c591a9c39b7b22e3c7d8a1ead711b8a79f88c6729543b3b06401d0a539748e7c959d4ce43a43c8ac738d3ca0957fdd8a57b

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    111B

    MD5

    eeae243e6915c5a863bc9728eea1b840

    SHA1

    5d4666ed7e435135f05d404e76d3bdba21cdb53b

    SHA256

    54a8afcb0687bc80a6ac45904a5c8e7033c18dee7b18df2594e72a17581c351a

    SHA512

    fa5f702d10ebfb557df4701b0eb37b244620bf7ec67a87842be19c090adc6fea4716c2a18a0cd06a83b5b30a6e8917751e1d47f30668cfe490a02bb973bcec0a

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    65B

    MD5

    9781ca003f10f8d0c9c1945b63fdca7f

    SHA1

    4156cf5dc8d71dbab734d25e5e1598b37a5456f4

    SHA256

    3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

    SHA512

    25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    111B

    MD5

    dc150bdd4ce7db81c579ab7c3230774f

    SHA1

    e8e9da6941f81291ba1a0784411abc6816af11fe

    SHA256

    e19ff4150d4e24e74d712ff9e3bc5fcf59e1154b5ac61e38c3586ccadadda82e

    SHA512

    52e567d38a54b7c455e821aaa03075b197f9aef59ceca0c9d533e132751b77219609006a6c0e99c964e3180f233cc96d063fff8e5e357730ef1399916071604a

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    222B

    MD5

    e057b4dcfaedbd79d218c90597549904

    SHA1

    c403e9b62cdac5f8c9abfb0168e1a43762dbe206

    SHA256

    1ae4b6351507afc5bb1ac585cb6155425472aaec8d28bc8d89ea952d628aa507

    SHA512

    12aa7d53743c354330b04fe1be01af686818b6a01e9c2c5a57c1df5644fb070c6c475a0a6b121404b161da0c4f9fadedb5b65c3920ff0075a91990e1bd4b6def

  • /storage/emulated/0/6071Box/goagal/5ac714da7be6d534dd74c84a097f98e0

    Filesize

    352B

    MD5

    7b4620c92f4af9984707458992903377

    SHA1

    7f1d1e7e384851d6223076afb146eae0e00dab49

    SHA256

    40fb1417d0c62ab13df895ed863b4f4520522380d4dd7f83fce6777fc8bb6516

    SHA512

    e48c06ded16651270a4d793b4dd1eb3841b5ff670c1fe67cf1867afb55135c190301d53b48bca506881209d5b9a07d95f46c6312b94eea6cdf3014077b11ad0b