6e91d606a43331be886a0bae13dd6757021a50160e012a549862675792878d1c

Analysis

max time kernel
2261628s
max time network
135s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
19/12/2023, 23:48

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

6e91d606a43331be886a0bae13dd6757021a50160e012a549862675792878d1c.apk
Size

2.3MB
MD5

e50d921b4efc7817aead87a866a4f55f
SHA1

84ea5a7cf93221bc180cbfd7068cfa13aeb1f790
SHA256

6e91d606a43331be886a0bae13dd6757021a50160e012a549862675792878d1c
SHA512

4a90d66fe93a0966a61140c6877a096cc3016806e266e9e794915177aa14653e5af0e2484cf0c0704f1e47f003ccf0c066516061b728fbeb13a17f1e2c490922
SSDEEP

49152:Jlx+wT6PfDEd34BKGKwt/NjKngnOdOPeFEg2xzJ8A3aE:71unDEd3Qj8dOPw2xHaE

Score

6^/10

Malware Config

Signatures

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.xcpd.jf

com.xcpd.jf
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4500

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.xcpd.jf/app_lua/AndLua.lua

Filesize
15KB

MD5
1a9da8543744571fbf85c3851b72ecfd

SHA1
cb76df6ed3ae1e4962556d0fed25e15a6238a8a9

SHA256
89bee2c7f64bce07052b03829597866d0c7de345be2534c39b25ab74030be078

SHA512
5b920c6fbc35cfb3467dba70dcc68c7f663b973f0e30267807e4c54aa5d3260726f00eeb161f3c6bc861bd320a273ee94567f9eb4b33cf664ab2c14a540d03be

Download Submit
/data/data/com.xcpd.jf/app_lua/import.lua

Filesize
8KB

MD5
1c046a4e6a9174d124c253058e398c80

SHA1
fc9db685faa397a5c02e5a28fcb01702adb00812

SHA256
5d284bd5ffb3fe303a82dcfe5fe68a9032cde3080794d6d67aa49dba41b8875c

SHA512
bf9d344390e3094cb09519817b4e6d724b148157d98670d24d71b26eb9d09efc65335b86186c2138e94d56dd23cc5c47701627e93821f5ed4ec3793d0b9e08f4

Download Submit
/data/data/com.xcpd.jf/app_lua/loadbitmap.lua

Filesize
530B

MD5
b5395e8d68efd81a248f54bdc2e4c133

SHA1
be73a63a264b72aba49dea36074b9c88f7f7b6c0

SHA256
f52a639bb91d53d20ed96b6565bdf4886975b7e2712e1fb102257c8ed265a093

SHA512
85a3f9bc114ef00593f424d17742f0ebf3c434a42ce66bdc97182d7c9eaa33aa30c096468fe614997022c4d88771872b23716ef8020c30d88836ada8872f1a8f

Download Submit
/data/data/com.xcpd.jf/app_lua/loadlayout.lua

Filesize
13KB

MD5
ce2c49b456d64bd2dd159d061529a4e5

SHA1
925362d0acdd4d18f18bc7f211262594a9fdbb5e

SHA256
33f4bc2ea31951b39ce2cc0d3edeac87db1337624f3e2a99e350d14edf563bca

SHA512
ba48ffb5444d52dee97df2ab5d095357ea75a808b0fc66f65c4f56036faf3616b376d6160d60607e4154840f892483c28dcc0abc7084b454fd33dd255374ff20

Download Submit
/data/data/com.xcpd.jf/app_lua/loadmenu.lua

Filesize
937B

MD5
dd861d76b75cc097a01e2f0dd67ac68d

SHA1
e78a8c68af24b540ee644e803edc2a14005ac9e7

SHA256
d085cb44ce5905320db972ce490a56df468723d3736a5582d6a984ae137c23a1

SHA512
3c30fe9537b8fe3b9d3f222a8cdf09aadebe294d3e88ab9b592e76ad7eb5cc9b9de66e8f67d88fcd81590250d13df7e91bce970070c866627afeacfe5ca88152

Download Submit
/data/data/com.xcpd.jf/app_lua/su.lua

Filesize
638B

MD5
4ab06803b589cb39657479d82c353d39

SHA1
89cb8ac5ad8ef284f93df792a55907c9f51a3753

SHA256
a8afcab19fd6ba804f8d438e1d23b0e9ceebe2321d44540759c8df52e1bba409

SHA512
4dcacc5f27da5f587ccfc1f05f7366cc86e58addf7bf6e5ed5b234acedc55fc2c98a9d43573aa25d34f0cfc41542922a1d2fb920353b0b9a25da704e63a34f47

Download Submit
/data/data/com.xcpd.jf/files/99.png

Filesize
18KB

MD5
3f089a32681e51810a2a216aa66710b5

SHA1
301d33dcb7f0fcacfef5dc1cf83256d4c8877087

SHA256
a6bdd7d9a680246c8afab9056fae0f95660189be3bf745227c6dfcd69d87f4e4

SHA512
15c5f1c2bbbf3fa4207e6972786940d68791b9a637a1ae76077ebcc362654238bf176e521a691e966b95906ea195d6509b8204e291a7ccce1a447cb14bed5398

Download Submit
/data/data/com.xcpd.jf/files/icon.png

Filesize
96KB

MD5
fb49a663f280665f0414ed784ab78784

SHA1
77ef586f435b4ed38491428109a1b1c51dc12104

SHA256
4857347bbd027d1515b725d0bd89a9445e2cc9139f1fbdd8447bcfb52531aae3

SHA512
4acab5264845e38e83d49892a51eb96635149865b73591410fced3fa5a0e1454663791828f1de2639140394d8e974cf22efb0a55848c67bdf7fd2f4db4830103

Download Submit
/data/data/com.xcpd.jf/files/init.lua

Filesize
343B

MD5
87fa41783c1126bade42b63c242e4ded

SHA1
aec713f18838726663e13f81efb0e967a554add4

SHA256
924e5321d75c080a7cc3608121d4bca32eaf489ad371c3441d6a879a1cac8f8c

SHA512
9d1734d1d02a14f01201fa3c070feb73d477346025dcecf0ef4789a0c92c71aa788629473b98a45f5b2f687312b6d3bb497e92f894f0ba3f56c3653b202441c2

Download Submit
/data/data/com.xcpd.jf/files/layout.lua

Filesize
395B

MD5
7ee992ea32905cc7f4f7863fcbee2df0

SHA1
0ed0e8b51047206e585346684b7a35e9f8787dfc

SHA256
fd346bc6a4a9fc6655f231f900978d7a5bad84bec5be92fc92d48302a5de074d

SHA512
56e2e8b61a1647c5617f4452e6047530d32b394d11ca537ac8ffc1a9e0b6cda0b082b23dfa226911bcef87fc2c0773139bab33208062d9d63cf99593bddde291

Download Submit
/data/data/com.xcpd.jf/files/libcuid.so

Filesize
109B

MD5
94ec7d0296c2f32953cc02aaf9b12d08

SHA1
58e02ec0d9a5019e5229bd5b43db91bb507150d0

SHA256
7ac8cf3d8d1226f2d20de6d10e34cb785430aa01fa78a2cf0682f44d57dafac6

SHA512
654ad10532b4a83bcc653cb6e557bae27ca86a4985247847eb5395acf009418ae0054cb08701d5fe85e3bc03f1524f9608ca827f5eb6e3076aeaa5d7b8023232

Download Submit
/data/data/com.xcpd.jf/files/main.lua

Filesize
5KB

MD5
2a25317722d220967a2686da6be7c2cf

SHA1
e93a29def5d05785840acaf3bacfbf96efbc77ac

SHA256
9f7e55c30953afdfbd8276ad9d234e23e48e3c337d67ec91da81b5b70c48a879

SHA512
c8ab020e02481507ec96cb4e011715e169699340c2a48c597b936aae55f614cb10e126bd2f9dbba17bcbc0f0bcce9c1abc8445dfc30ffbff955d2835ed4f3a55

Download Submit
/data/data/com.xcpd.jf/files/xfc.lua

Filesize
643B

MD5
8d4aa2267cfa93959d1aad2243977725

SHA1
881e78cb2eda274d048325ecb9dadf4f02010791

SHA256
03ad25802ef83574311db5d427a51202534598becd94a6c9309891784dc2cecf

SHA512
bcbab0f6089dd75cbb8308f17d17a2e929de4f07a19a72ee8ea19fb7760c2b4b55e32b8ca18667cea0d062ffaa478606762ca6834ed873288f2b215b9bc4dbe6

Download Submit
/data/data/com.xcpd.jf/files/xfct.png

Filesize
3KB

MD5
08336ff0cc9c996b1b8fb52631eba60b

SHA1
d2bc2ca2da58eb97cbd7c5de9361e146d116b758

SHA256
b5250e94709bc21551ff687d876d248700d02e4026b3163243ccfb6dc5328720

SHA512
363f5390879e3ee5a132e62e6d3443a2052131448a521040f0982fb3e8786088a14c7abaaa174529cb0caa42b314494682d24262c70ea3b5f79079c6eedcceb1

Download Submit
/data/data/com.xcpd.jf/files/xxc

Filesize
309KB

MD5
39479a9e74537742ffa4e8f0a5c9a4be

SHA1
6a6b33e32161eab9cfd2f2cfc67f5e00ff6355bd

SHA256
103fdd62dd50b24cdcc6de619aac0555da7548ee54fd4342fc762da37b1142ce

SHA512
c5288504c01a001cd951ea0c254652cd96abd428e5250fc077b656cefcacda9d9738e3667686a32b2e61cd3479132c0ec3935de1a59a10d404fddd7d8289c522

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
20KB

MD5
249e034c9703afc1fd6062371c7f3da8

SHA1
9ca489179488e0fe5a35f7c0d5887f163e4890cd

SHA256
18fc5cf216b05487a87be99a662e7474bd54120f214e034b3179f40ca989352a

SHA512
b819b152548431c7892678ecdf23abe44cbdcf80e8f22707ab32a2aedb5356346b27e3c3e750665ba893d602af1c7dcca97edbac3c820859a0fc20714c22c0bd

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
24KB

MD5
8c7f6e3b52e6e841b895bbd13644ed43

SHA1
ec8daf46a7eb99c75ea1ce8582ef77b2df8455d2

SHA256
6615188d5d8fa77b44fbae7a249d073b3623316e7489c5fec95fe53188ea467c

SHA512
cffafd628e62fa915872796ee02dd8119cfebd6811291155acd400986ee5d34b244ab3b5d0bd386566724205771f665571bcb04950d390c5c60072fdb90c5280

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
24KB

MD5
9794e9eb3c5a3a638752ae56f09b1c1d

SHA1
f159ec8fc2b6825f4ec9b3f81f4d20d18ca3bfea

SHA256
44b4aa869823e6f57207df54edd53bf9f1add8ff27d948f97e8cc4ce22f28f7a

SHA512
db0d1426941176513344c19f63712963433ab3b45a74d79398c5c98c56b2adaeb348dc1e0633950dde51bff4404c6a896665e492270ecfd699bdef1fe68f6f0e

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
24KB

MD5
b47e83c0f762a2eb6d4007e06e6973df

SHA1
df0316f21dcfcb35611cbb62128af3ff91ee89dd

SHA256
0c17e102d5bb92f545f927f4e89139ae865ce6a6db8d53760c37e1af413044cf

SHA512
972b59bdbfea10eb7f507550c611e8c44ba901fd3a71ef4f3187a7051661f30ebac2e80942ddb58ffbc29f25a66fc1c77b2f1498caee0c9087ba771449fa0582

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
32KB

MD5
3b42fb53e68e590edb7e36d94858ab4d

SHA1
60f9dd21721c75c44d298432886b265e97fff73c

SHA256
f824172de5a342606eef4fcd70c84541e663eec6058087cc1dab4f2709d0cc7e

SHA512
c9e1ad6093faacaa779bdf88643d80d6e9463b277fb0d3a547de0c8cf4dbbe3c3ed7cc0f97470d8853bd5d7df1c0c911ffd1f4c5aaff6bb7d04c956426e8f3f9

Download Submit
/storage/emulated/0/backups/system/.confd-journal

Filesize
512B

MD5
eee4872f5057510d8133fc9ed3205226

SHA1
63fbcae485607d38e51e4b3316bf8bf78f0e1445

SHA256
acb060a917204e4170b28a22ab2aeeb2d33bfd955fd634b16c6a0b4d0cf724f3

SHA512
8689627e3984f15483a81ffa279584bfc772ceae779ef56ead83ad45628119ad8028883e04aa7c8fc93029d78716d1d543aea61b1d2477b16496ec02dad98fb5

Download Submit
/storage/emulated/0/backups/system/.confd-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
36KB

MD5
572e67f1174f63cd984bcce4cc6e7b3b

SHA1
4949f2e6d2514d5d9276b98b4449bc1224f20273

SHA256
8ce4a5bc673ec740d91e4ab86fb94f75c333460bf6ce5b1f0b8a72f55cd985c5

SHA512
475e79e8c8f4e44fe4040fec75d94db1c9ea1d9455d3bfdea33a1ef5fcf7591189d6ea049a6b79610f308ecf86068bd49d522d940eadf4bc705a5441a34c657d

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
12KB

MD5
5e3679d375d2bda7e314193891124251

SHA1
3a292390a0d9b45099b4712f245aafd37569bcad

SHA256
ed516c3f0648e4cc657022b45eb41f370364a8c4c1d9f463ad3a2ae0422e69c5

SHA512
037e6fa4497921f5b5c0e3fcbb328443fee4c7990c973f3bdfc889309377b4805ec0843f457b8849ca9aede3ebaf5368b69bfb86cf7eda3e4c08364f4a32b986

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
8KB

MD5
eff3cf0090daa159d31ecd130f840e03

SHA1
3bf54c297dad04dac8a54e49569abe1e7e5143cf

SHA256
93fae9f7a5d3d3f5a9f1d0927cbb714b19ad659ce33e8e37549f84a6682480ad

SHA512
5d75e17bf67681f5c55d8fd75c5c4d2ebaf9e3fbbcafeeddaa22a4758ac48c9b6ea7ef19aa0bdd4b895e59d1a75ccc9e4f74177b1bca23e74066d392487da393

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
8KB

MD5
c473ecb07f0c6b72fdaf5b373eb4954a

SHA1
447757e0c7882531e7e79750152c6aeac0f2d20c

SHA256
b74f7f6b0acb9e7f3d8414389569676549436f2e7d1cd955735ec20f965e23dd

SHA512
b61efff3cb02cd88279d0df11c35bb8bb02e165a029c018dbb67e037b4025224d2076312fe019e2ccdb590c50ab7ed095ffd456ab4b7cf5e20478113c8ae935b

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
12KB

MD5
4ebf9be6fde5210ab0c82b1ec33d76de

SHA1
34635ccffb02c353fe45070fc9d250c251b4d5ee

SHA256
58a18eac23e0537084ea0dc76f758ca4b6230f53f3c61c31bbc43471c78901fb

SHA512
83d95e171d2f1b6d8fdbcd3efa58f98e92b9cb391ff0e591b6acc678de680374b4c22b78c891e266aa046f9e4722e619bf5156eac017de6412fb518284cb6aab

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
8KB

MD5
3ba9ba2b7b61e8cf764e209d4f45c348

SHA1
325e1dad5c47b7d4688e329bd8f3aad56b7c50aa

SHA256
5794ae2b64a62f37c882432615dbf4c1af767d00b526407f2e6eee102f76cb81

SHA512
520d15f80c9614f2ca450c6f7d608ef88daef9ccc8514067be248b57e4940945dfead22ec137a5cf159993d233527c18e460bff82542f164131715fae32f5c3b

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
12KB

MD5
a2625420ccc628785e2cb3eaffe5274e

SHA1
cd5f47f835dab6e3bf8399039e22ad20d524f2dd

SHA256
1add86029e28593777ea1c004b3e71673d6b40a1b356ff4c3968c1272b1063f0

SHA512
9322c65475e04e185e8f2b3fafe085040dec4620d4bcac8e9ad79259188f47ee628f757e54a5f2e21d82137732510866b692cce67f22895b780ec301415aa445

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
8KB

MD5
e81754808007790d0a28250731f4faf0

SHA1
4b4bb767525c03ef56040dd57fee28983a1153a9

SHA256
b205f51f9f3fdceea24c8eec3bff266695457f9139ffdb33dc32d111fe210ffa

SHA512
e15fd066d66bf2b9e7747336d506d51947ddc67d0eef8d48cbe0ed49bd59a67068e03ca3d20d20fb9e5f1e6bc88b8473958d77bf84f70223239424eb4e9d5bfd

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
25B

MD5
21d1037a884f2e3637ef9559cbe9abcf

SHA1
ccc5a13030c3486d55811caea037f0016fd93510

SHA256
57ec18a797dd416fdae3c07502fc5952c3f9d493896ba78d4b6fc9593a073c7e

SHA512
b2dabe87e8b5a6e3b6dc84f44cde8502fba5a76d8235af513f0bee1c5339cea831fa97962f5cbaef25e0e22c7c541d9faa577dee26cfb85f4551576d8e7b287e

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
55B

MD5
f54725f77ebb0dce68bd36cf7b3d57dc

SHA1
af7c481a1b3a3bd16ede54f28d27e2c8f4ba980d

SHA256
a042b04bddaca67752abf681fe09d0c7c266e57270bd351edb955e0556ed4bf2

SHA512
8079a4c6e8d2335a58a5d021492bd826f167382aa8785c81fda7115054aee5958c4745794902aa7d9ce62a4d1a7587fefa1f888db6fda00a0eb261fc84807257

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
84B

MD5
0cdded8e46509744be6d97207b07574e

SHA1
d038a73bbb9f3a2544f15eab8c53aa32c17596c7

SHA256
da3d5d977cc6722dbfefe8b26670a85c0c3d6b808cfaba8881c50fb95e67b8c3

SHA512
3207a0b6421a43531b0bfd63fe6465eeabb33a75746b166640e4e496a2e44c62d9bba5be2c63c711bb0d04f930803b980ce3737bd73238a384b6066e4aecd817

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
114B

MD5
abf389a36cd2b89b0cf32e8caf7b56c6

SHA1
613e2bd9776bd01824e9de55042a61a0692f59ba

SHA256
62bad34d1345be9527244fa868ab87df21402d3d8e9665198953abea5222ccd5

SHA512
e2206b773e4b30ee18825931084613f2323b9bfa46288c5ec64f68bb3a799aea35f2add067b78f3e4d1fe33304c82ebf52a31cbc3e584db6a73487adf917215e

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
138B

MD5
fe4c380fb2a0b77a4bcd4aece0529be2

SHA1
3703e562be734c9b50ac54daf48f27b1d760553c

SHA256
b3eccf78cf369cbaffd7bc7b97a873d98fa4339dddf5b3d6c1b490accb14e242

SHA512
2e86eeff9c6cb7a853e5a60664206f81adf710f396b104b68858b7d037f6263994b3f74d684d880de07a0a25431f74276d6a1898cd65d714e2db0425271f4dcc

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads