Analysis

  • max time kernel
    2261342s
  • max time network
    160s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    19/12/2023, 23:47

General

  • Target

    6e683a41bd2b206bd5a820ea6bf60a6f3c279b23c719e7a796af8700a0cd94b9.apk

  • Size

    12.4MB

  • MD5

    728f5d56276ca08e5b6277d33fec368a

  • SHA1

    bbfbb41ea90a60f9f3bf788184aac17d25edb1bb

  • SHA256

    6e683a41bd2b206bd5a820ea6bf60a6f3c279b23c719e7a796af8700a0cd94b9

  • SHA512

    01ca55052cafbdb87b24159b0f925591998a098b2e35446ae935c832f7588eb32ec11b863bd7935381a829e3ce632dfd9e19940cf0eaa4469d2af9118c56d856

  • SSDEEP

    196608:TkdBVcCUwiJbPUwKkNlNIC2URVqsncNl3QiDtPSWPpEoQFFzL7n9wMEUcl8:Ad7iJbPUmLIfURV/nC7ZPAr97EUK8

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.fangdd.mobile.fddhouseownersell
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4241
    • /system/bin/sh -c getprop ro.board.platform
      2⤵
        PID:4305
      • getprop ro.board.platform
        2⤵
          PID:4305
        • /system/bin/sh -c type su
          2⤵
            PID:4361
        • com.fangdd.mobile.fddhouseownersell:pushservice
          1⤵
          • Acquires the wake lock
          • Uses Crypto APIs (Might try to encrypt user data)
          PID:4294
          • /system/bin/sh -c type su
            2⤵
              PID:4428

          Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                • /data/data/com.fangdd.mobile.fddhouseownersell/databases/bugly_db_

                  Filesize

                  4KB

                  MD5

                  f2b4b0190b9f384ca885f0c8c9b14700

                  SHA1

                  934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                  SHA256

                  0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                  SHA512

                  ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

                • /data/data/com.fangdd.mobile.fddhouseownersell/databases/bugly_db_-journal

                  Filesize

                  512B

                  MD5

                  029078a45e72e0ce12a6537aa68db599

                  SHA1

                  2cd0c7d85f94110bc0e7b30fcd4f4bf62fbabf4e

                  SHA256

                  cc2b0c02fcae111c261474bf04265017c768e7909187bb45fadcac051941cb60

                  SHA512

                  99b2f717cae621eb9ba2961b9cc24cd9cec3644f9a16d27f4d1cf3ece7d0682425814ef9d3f3c1231e21310815066d236d2037eeec283345af1e7db429fbd62b

                • /data/data/com.fangdd.mobile.fddhouseownersell/databases/bugly_db_-shm

                  Filesize

                  28KB

                  MD5

                  cf845a781c107ec1346e849c9dd1b7e8

                  SHA1

                  b44ccc7f7d519352422e59ee8b0bdbac881768a7

                  SHA256

                  18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

                  SHA512

                  4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

                • /data/data/com.fangdd.mobile.fddhouseownersell/databases/bugly_db_-wal

                  Filesize

                  56KB

                  MD5

                  5d8a03aae5b17cc9399e4ec69c6ad07d

                  SHA1

                  9c07ff37de6912d2b58c322fd86f12c33029ffce

                  SHA256

                  ac787127f081e4ff20859babee671311e81721f79f94aa4d335e48b85e8a24de

                  SHA512

                  6b437792f549dc42ebba82e53afc5aa5e6c96b71a2ddd3a6b71a50ac3205b48fff2bb8f2944897c82dc5626606ebeb2d6e3d6df851a5b3dc09a95fe38179da20

                • /data/data/com.fangdd.mobile.fddhouseownersell/databases/bugly_db_-wal

                  Filesize

                  525KB

                  MD5

                  9f4e9951995a017a9f96db441b855f04

                  SHA1

                  f54882ac1a13cac2e4191ee0da4e4d67399c68fa

                  SHA256

                  c6dffb5f55e87791e94b4b33c94324b0c52314978caf90c7dd9d80a8bb874c49

                  SHA512

                  a9f96cc803f2ef177f704c48ef17d614e5f0341a5995bb51de98fbc90c9063a4ebdb548cdccc322c6052a2baee143a32c902acbe55348c792ee5c06560f751d6

                • /data/data/com.fangdd.mobile.fddhouseownersell/databases/pushsdk.db-journal

                  Filesize

                  512B

                  MD5

                  969dd347c78c205de34a4f6b63a1aa3d

                  SHA1

                  28480762ed6cc2c6ac92eea3802860dbd2980ed1

                  SHA256

                  f9929ee9d664ecb6d42d9afcac3d1b8ee7db700afb83f4778605de3e2afe7f95

                  SHA512

                  126b54b6bfbd141d954d65ecda46d2ad72cc9b1d31736eb9b78f3a41f5c66c41c0e31e5affd6bd56b87392c260fa076d01b5a59608112fd03bcd047b71f1d679

                • /data/data/com.fangdd.mobile.fddhouseownersell/databases/pushsdk.db-wal

                  Filesize

                  80KB

                  MD5

                  5f50cbb099a06d665e395850101b0d94

                  SHA1

                  36912dd9cc0773f07c5cf67c32b5d89237961837

                  SHA256

                  a7250ed2fc0c75f199782379889414099c3b2fe5aed884b8892564f460165387

                  SHA512

                  e40760a89327be901e73000b38d4fd8113e360310d931d34346e22b498302e1d87d71a2275c26c4f7c20dbf7928ba099bf8c441c401cfdebdab082b8251f7abe

                • /data/data/com.fangdd.mobile.fddhouseownersell/files/.um/um_cache_1703068311337.env

                  Filesize

                  625B

                  MD5

                  5a7aecef8e18e6aaec6e5c88095321b0

                  SHA1

                  70a316619feaa4e8744b432e6aa7b5b30ba4dbe8

                  SHA256

                  47df47b6cffb310090768dcc47000d0f42151256747f424e6c4b02186663cd1f

                  SHA512

                  e412b7cfcd8371b9ec6a0af838c7f6865f41ba69c62d7b94cd6d0f454519032bce174c3e467cea94680d6ee017ca8e2ee48b4438a9706b562d64d29426fa6342

                • /data/data/com.fangdd.mobile.fddhouseownersell/files/.umeng/exchangeIdentity.json

                  Filesize

                  162B

                  MD5

                  316932d3ccc53e27047500b41e2bbd97

                  SHA1

                  f40189f02320069ba45aef83bd8aa3f1d5b0407d

                  SHA256

                  6c9990783493f3299d8987b3e67e5ef3629b66879386a84f040ceaafbc4ca3aa

                  SHA512

                  f971a1b0415643fc9fe088c9b28243324cbb27b15749376ec1412d6988534073d55abae15efec23ba2ce250113ba07f65cb201daafb7283d0f0c9fed0ca74176

                • /data/data/com.fangdd.mobile.fddhouseownersell/files/cfg/a/ResPack.rs

                  Filesize

                  525KB

                  MD5

                  0357e8edde36315c0e0a4f5385de625f

                  SHA1

                  2e6c6f15010e88dac5078f34e31a8ddf5e032f2f

                  SHA256

                  44764ad74b21113fb17b21899bd0d4c81740544e868eaad680553b3bd0cb016d

                  SHA512

                  497385b4e3b512f6a4365486d40bf1ed298422087f23a352ed2cec96331b9b012814ffba9c3ba83af5f777df16b53bbe1bf3ab8313902db49011f01a3024cf93

                • /data/data/com.fangdd.mobile.fddhouseownersell/files/cfg/a/mapstyle.sty

                  Filesize

                  248KB

                  MD5

                  46a9f9a5221dbe4ff71bfcd2ee045c5c

                  SHA1

                  915cb3bc2f0096dede38afc1cd7f09c8782360a9

                  SHA256

                  ad3067eb308a9420b727b4f24dc5134bc75b36bdda7a7a7c5651090698dd10a9

                  SHA512

                  185530752b639d743f99e28369f75626900420dccf598a639065ecb08c562ff98c4a1f6abbec9724d1684ed053774d60402cd2f20e3586a534c8715e7cec2ac2

                • /data/data/com.fangdd.mobile.fddhouseownersell/files/cfg/a/satellitestyle.sty

                  Filesize

                  166KB

                  MD5

                  3f1348cd6165c9a66a9892565c917ca1

                  SHA1

                  96f0c939438c494cf3fd89246d458e92c0c7203b

                  SHA256

                  5fbe3817e4047e14c40b567be4955d7579c8bf7b7824bf8370f5e194ebf9767a

                  SHA512

                  405c3d1d5f4899cf723509f8e293f2ca1d95a79f7892e93401309372335a6a286f2eae9ee9312f69af10c5bcabd091cd90608898a129542b0abe0617c500d023

                • /data/data/com.fangdd.mobile.fddhouseownersell/files/cfg/a/trafficstyle.sty

                  Filesize

                  4KB

                  MD5

                  6a86f30539dfc9332cd235fc48fcb62c

                  SHA1

                  5c202003f6346edb85175b8df7c460793f5512c6

                  SHA256

                  34bfd1e28c3625f50a23240c4b08ac50a90fd35c5e5f88aed1cf36fa8fe5e18f

                  SHA512

                  f63edb8270e6cd35e5c6896e2b9153144af0d29303e367a4fa81941b1b2bb0de57fa484badb7ec7f05ebdfa67d77b00c3651572c5f05e9314389887f5546d235

                • /data/data/com.fangdd.mobile.fddhouseownersell/files/cfg/h/DVDirectory.cfg

                  Filesize

                  69KB

                  MD5

                  4e9eab735928758b860e48b2f9befd7b

                  SHA1

                  7223dfdd00f8059d3b83c28c6f7d78d2dcaa0569

                  SHA256

                  1a5650bc57e525ff23c7f0cd058d4574142e772c51a89867a13f89e13b93d6b4

                  SHA512

                  c7465fab9518be687ee63cbe044f28a4d5c60f1c043fab0ec66a856b2b542c9d99d9ef5812c7eb2033f797805ba37b821572b83eeeebdaac4854a4bf53977599

                • /data/data/com.fangdd.mobile.fddhouseownersell/files/cfg/h/DVHotMap.cfg

                  Filesize

                  10KB

                  MD5

                  c16f5ca1517683c46e02a6b71aab3c00

                  SHA1

                  2d09a048d1b8d556d89d4d723947e9e234b5e59b

                  SHA256

                  13d4fbc0d1cb7c2761641a3632c440f6f1d919dce731b8c32cb35e652b0b39f9

                  SHA512

                  a692b79382747548fd8be8ed94c06198b143c167be1e96f60d8ea7ee9432a0eb1a0cd73d0704523e487d59443bf7ad13eb36e47b67864e227917d33225e3e62b

                • /data/data/com.fangdd.mobile.fddhouseownersell/files/cfg/h/DVHotcity.cfg

                  Filesize

                  1KB

                  MD5

                  883c30365d5d377966125dd0c079debd

                  SHA1

                  d296ec1e3f4badb6e3e6166c1473fb55d4265761

                  SHA256

                  50112e7ed210b33224fbe1cce568c8e95a14fb47f7d39ec905369e2feb9668aa

                  SHA512

                  00b1604e206a5d929071aa1cac99d83320eacdbb064d517973a5a36757a8a9eb8a103452c98f24e7c8d29adb4b2843e804bfdcb32902da7e364a0c30f8609b7f

                • /data/data/com.fangdd.mobile.fddhouseownersell/files/cfg/h/DVVersion.cfg

                  Filesize

                  86B

                  MD5

                  298924848d2517a508f43ff0cc51bd3b

                  SHA1

                  b9fcde7b86653ead6deb57280a6049cf87745710

                  SHA256

                  0b6eb1f518059d8c472bab90091bb26d9ab877f6c70fac375412ff1582b8ca3b

                  SHA512

                  63b88c5b9b971ec52a5f724485d9998bfedb073e84ed63bcf0337e726923510d97a8ddf87371b5620f89ba788af01db58300638fff5031856c77dec8e18b4342

                • /data/data/com.fangdd.mobile.fddhouseownersell/files/cfg/l/DVDirectory.cfg

                  Filesize

                  69KB

                  MD5

                  65685a117c72fe8fbf5a92b07073c99e

                  SHA1

                  b115b527f74e4c291edcaab19b316a446aca8f5b

                  SHA256

                  19bcea79613a5c3bb71dfe6b311241fcbf3534b538f0b147c7e849b58b24b2b8

                  SHA512

                  e5821a5212f0790db33ec7274f018b08f499557ff7f2f118021a7905573e8dd66e716fb02144919d96eeec7da9db921c756a88cf0a050f65a9f8de3894dcc253

                • /data/data/com.fangdd.mobile.fddhouseownersell/files/cfg/l/DVHotMap.cfg

                  Filesize

                  10KB

                  MD5

                  cc3fad9057e0940ad4d4c7ad27922023

                  SHA1

                  403cbbcd7b819733b5caf49ed2a58d654441e99d

                  SHA256

                  f6d90bd8621889ab994374b4f51a1c3f9b028aab1a2129b8b3b0e1d7c5c37864

                  SHA512

                  ebaf2b8c56bc15826ef38b36e72ae41765fc723470c6dcc40bf9f31118f252777072ad39a535a79f53b6aa29811b4b21cebbc9810c47e34ef9400246d789ab21

                • /data/data/com.fangdd.mobile.fddhouseownersell/files/cfg/l/DVHotcity.cfg

                  Filesize

                  1KB

                  MD5

                  1c6abcbbd253448057930ad1cc59ac75

                  SHA1

                  a5845d1c4bc87b8b4785b456d76edcb8309eda4e

                  SHA256

                  a46b498ba6586aaa2f246bb34e47f4290ac60273cb86ff662475b0def7172136

                  SHA512

                  71aba5b2a1020d1925b3844c861cbe595de3b21d665eedb13f1ef0d80477fc091663e0625b09c5f49d4f9d0770970dd0d188b84635e9c75c1bdba9f2a7171631

                • /data/data/com.fangdd.mobile.fddhouseownersell/files/cfg/l/DVVersion.cfg

                  Filesize

                  127B

                  MD5

                  d54b7b380a5ff46c78283013a07d8e0f

                  SHA1

                  f697c5f7028ba2679a96d6bc5291c38ff96d7982

                  SHA256

                  c7ad837b097687d92e0d944815fc70adcb0e1cdc82db28f728d13e8a48d7532c

                  SHA512

                  ade792589c33179c51305f201bfb6db28c05b2ea098d12bfefc1a5cf9bd3014d53830ce2e71f027719ee1b83b2394c7654b5ddf4fdc7f678840869d2a2787ef4

                • /data/data/com.fangdd.mobile.fddhouseownersell/files/umeng_it.cache

                  Filesize

                  310B

                  MD5

                  b7efa8e7db71da28d7ad00eb9628d970

                  SHA1

                  56c9d3a0a20dc0a32aa09ffad89456e03cfec37f

                  SHA256

                  ed3dfbb67b3adecb2f85a3115e4689460a628ceee60ebebd0055e2112bb69bb2

                  SHA512

                  fc291a21a84c5f8f12ecf4fb6af24efae08e4efe18aacdabf140319342f5d5fc926b8807e06817797f2dc2c648c0b055bc2143bd0e553373bfe593db005c6615

                • /data/data/com.fangdd.mobile.fddhouseownersell/files/ver.dat

                  Filesize

                  6B

                  MD5

                  8e31aa8d6b61e8b044ac3346e87098d6

                  SHA1

                  70e4050667039f00eb5231bd731b9f3cb5daf00b

                  SHA256

                  d2a616114953901b1bbbb79a9be694acc0aafdabc1df94f46002bcd6b75b3a4b

                  SHA512

                  2935b5e37639b7c631aac8d5073a200d56471b1a06858c0e3dac03e03a89758743b023cedd1ad703e8f775114b39ee0ca808165188c74359d6b1e47fa7e171d6

                • /storage/emulated/0/Android/data/com.fangdd.mobile.fddhouseownersell/cache/uil-images/journal.tmp

                  Filesize

                  31B

                  MD5

                  8c92de9ce46d41a22f3b20f77404cc1d

                  SHA1

                  8671a6dca00edb72be47363a7071be65cf270373

                  SHA256

                  68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

                  SHA512

                  30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

                • /storage/emulated/0/baidu/.cuid

                  Filesize

                  89B

                  MD5

                  4b03a2665f99b01b20f54128bbeb1838

                  SHA1

                  8860bb256bf2272603bcbc0ad5b565d84e2d277c

                  SHA256

                  d7e9b3f6ec12a37ffcf98a320e1afd08e0ccc378e0e16ff93b93efe50f339c40

                  SHA512

                  c3ab5e08513312296f534d7415f179476c960878f3b6d239cdcab5fb1ec47671cf66d9ba3af36857742551852b8c62b33143fd9393255bd3c7b2a929ad9c7b34