Analysis

  • max time kernel
    2314046s
  • max time network
    159s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    19/12/2023, 23:53

General

  • Target

    6f93eca8347719eb1f1f19ef901070c16016e94d09794cc3fb76e22c88bdc3d1.apk

  • Size

    4.9MB

  • MD5

    5931f929be14e110d60981fc0ca89a55

  • SHA1

    8313455503117e7507343f7e81cfc51fe0f4f942

  • SHA256

    6f93eca8347719eb1f1f19ef901070c16016e94d09794cc3fb76e22c88bdc3d1

  • SHA512

    5ebd69195ae6275d403f289a9653701608eb73dcdeb27310372fc4ff637cccb0a316990994db617ca3d3d799f738032b215aa3b771f20b004ab36982f6c4de61

  • SSDEEP

    98304:8sSB74iw09jt9dlO2cj67I+b6QAW80jjYLEo7IcJ1NDnxKtSNDAdz:gnw09R3tG6NHjHU/kcJ1lnxsqK

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.ecymh.ecymanhua
    1⤵
      PID:4263
    • com.ecymh.ecymanhua:mult
      1⤵
      • Uses Crypto APIs (Might try to encrypt user data)
      PID:4295

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.ecymh.ecymanhua/cache/image_manager_disk_cache/10fe052483bd588173ff091853aea060c79f0b3e9641e96592831cedcb89ab5d.0.tmp

            Filesize

            910KB

            MD5

            2b4a3931d84a0f98f1a7f8be371a2fe8

            SHA1

            b108fe54b4feee4268d978e078252596e1e94ad3

            SHA256

            8bc8f8f88228e17a55db9f3203164ae9f266ca3cbeb8f5836d0e7baea15f284f

            SHA512

            ea7283fbe58b92dd6faf2a07e8bc6ef0a2e8d3889e8b33616ec4673467bf18faaa95596c552ebbeb38ffe2b1e88eb983079201adf32f16f2cf08e24c3ad17e30

          • /data/data/com.ecymh.ecymanhua/cache/image_manager_disk_cache/13635787c4c42196d19461e7c94f03ce3f2f9624463c3190fb73c6c71f1b6b6f.0.tmp

            Filesize

            14KB

            MD5

            f97d398d41b1092d9652565f82d00646

            SHA1

            cf4136aaa7df1afbf9a4604d317d927422289467

            SHA256

            29c2dc48e0c1dfebc26cc454c8fdc7bd02a75b95c59d1a70243ca9223d89011e

            SHA512

            17e6a6ce9b7fac2974200bdff74c453517468cbb8950aebc9b2b5132ea43b863377d3f02b9320d74177cac6caea482ccc1ae23b407069a5c1a9534d6f9bf4fc3

          • /data/data/com.ecymh.ecymanhua/cache/image_manager_disk_cache/21d75c7cd934a7f9f9999c1794c8dc0f39917999856f35c343d78328f730f59c.0.tmp

            Filesize

            9KB

            MD5

            b67f0109a6de81a6c5f4af0685234b75

            SHA1

            d20a282de0bcf639485b79dbb191d1cac4376e89

            SHA256

            94b713ee96f0e525342ffe7ad9f29b38e911d8a752f672c97c42a17cac0f62f9

            SHA512

            1115e859f7cf393d9c2c78a5bf70b6201a0f3add94f8c74e4e7965c1db65f0089b631faa499e7bb3c28208b827eb0d5e8136b1fa5507c54b88576c9f6ad1e419

          • /data/data/com.ecymh.ecymanhua/cache/image_manager_disk_cache/33401eabc3f788361b0c932dfc2b3db375daa7fef18d5b3d63a20a19292c6494.0.tmp

            Filesize

            211KB

            MD5

            6c5d02ba4735676d895a9f6a9bc8ce25

            SHA1

            37fd32c5347018807e6f3c31b5917febe7bbc689

            SHA256

            4071778031a8a8fef1f6c8c2e4ef8316e6f0fa581427eaf424db6772d22de883

            SHA512

            f6f228fc3aaee6c901f5cda8eb2586f3de9dc541c7cd1d54d10c4173129b0f81bcbbacdc20fe09f1e819596148877132191e67ad88a97276c73506562066ee4a

          • /data/data/com.ecymh.ecymanhua/cache/image_manager_disk_cache/6763c13d18b1270502e4a608788b0143feb060b894ef095ac6e2c57c2f9e8853.0.tmp

            Filesize

            8KB

            MD5

            524d59760c5712ed06ac9dfb378d59d4

            SHA1

            015326c26899dd37d7b00532104ebb013e89b971

            SHA256

            c5bdffe98ce2d0be71424de6c25b9932aceca177c5d31518bf3d0aaa4e31ad90

            SHA512

            8d7aa9cc6714746300c8f1c6baf6bcb2ff6975c67559ee785687ef952ac0da4b933c8cbb1dac1b1bcb3d7b6fc7554398645452a3a80c12bd001e7a1f93cbd90b

          • /data/data/com.ecymh.ecymanhua/cache/image_manager_disk_cache/8097d1304bb921daa9154f978fd7c306fe079b0352b46ea4d5a3476b3838ec50.0.tmp

            Filesize

            16KB

            MD5

            e06eec01ff51dcc938c0349515cd6c99

            SHA1

            af3b1e5cb39767eb3a09f8a3e97f6ee29422aeaf

            SHA256

            af9a478953fa3fc8f005959adcf8c1bba58b17b3978c4ccdf9de1651cad90a61

            SHA512

            d1b6932191cf4ac0a1041188a87aefa914b2e58b9f7e0e193819b0119148aae1f05d4e8b52886c445e50100296304b35cb90bef0729a50e5dd8150b2191b1e62

          • /data/data/com.ecymh.ecymanhua/cache/image_manager_disk_cache/c557c75a7951757ce9f925370f75a196e51a7c812089978b0b9fe5d06722d9bf.0.tmp

            Filesize

            14KB

            MD5

            e3612475dba6d22cc1bfc346cd0c7388

            SHA1

            a9b8daa15a04f64cb47736e64fbcffb29e171180

            SHA256

            7823671005d2f650e2e6f98596aec835a9b326e755bc88997f3d529fd0981733

            SHA512

            fdda7e3b9faadd55a8e58348a864f9b1cf55baa44099ab866a526ee977cfe32ed20ec850b2da1e3388c2c2fee33f1e9964bb998c64c57d7b94136b120b09458a

          • /data/data/com.ecymh.ecymanhua/cache/image_manager_disk_cache/c680cba49de4998c33f2ab979c9bef3a14c56e349fcb0a64fd5f798f927505a2.0.tmp

            Filesize

            13KB

            MD5

            d42199ddde21f21e835c2e79d5b101b9

            SHA1

            6d6ad5b78230844f16f86e03e626d68f232d8394

            SHA256

            6bff3aeadb3d1c90ad2e850977039caf51fafa2d38c5b417455f333fa9977bde

            SHA512

            c2276dd43dc4ffa817dcf891058e5286c190dabe3f7889c94221dfb744079237cc73315537da90fc148cedc24fa93e2c6fbda66248042b608d72e09f52448837

          • /data/data/com.ecymh.ecymanhua/cache/image_manager_disk_cache/c979e08166703ddada11b80644fdc115983a4289f6508376432a1d4ea9760b13.0.tmp

            Filesize

            14KB

            MD5

            98b58fbd78b7858db3b0ee334d7105ee

            SHA1

            608e8fb35509a225e07fc1de782bd6bc254c30e7

            SHA256

            456ac9029ecd6afdf950e28e759a0ae3983732bfc274af8b23fdca9698ae3328

            SHA512

            34b2c5f4da82aacfb53fcc8d8645c73eec13628c80105f09352309389ae5ed18cef0d81955ace0e65d5b02af1df5b39837f2cc03a65429ec1d60f1e9419c74ad

          • /data/data/com.ecymh.ecymanhua/cache/image_manager_disk_cache/d4eb70c24d4bff7482b717b9a6e7c108eb70b1608489fe4ac785de300986c2a5.0.tmp

            Filesize

            567KB

            MD5

            53ef49b80e3989a5bf0343a04be96eee

            SHA1

            452b8a84d58fc8331b4bd12cdf60fcc3c1d63055

            SHA256

            9e9951e3bcac9bf188a49e0e6a1abfaf11040d07c085895f3875af37b2bef962

            SHA512

            4eebffc9562ab7da9623396f7248a0285780a5c35879b9c606d305f03fe501970eb7e9972bf7eb2e933b29def1a67dfd7780d7b27b34c3b4dd716e301ae7899a

          • /data/data/com.ecymh.ecymanhua/cache/image_manager_disk_cache/e90bcc22af476a49c8a3a270247c1dec8adaf83cb3a76914d70836c14167f88a.0.tmp

            Filesize

            13KB

            MD5

            46b6d32308a9c25a3259e4d5db4b0aca

            SHA1

            77ff38d6b40ef1dbbe3e52639b819dc150f222b5

            SHA256

            fb80cf3b9708646a3d858ed70c1cc7d0ad625a45f8d885b3155c21801f4ab70e

            SHA512

            9575e8f18bf4d7ecc86681887626019068a79d3b2e89960e941b7fd32b3e14c447f15b49941a7828272fa7518409b049d384a0ffd7299dead72adbd414a145c5

          • /data/data/com.ecymh.ecymanhua/cache/image_manager_disk_cache/fc6e9212f10ac3d801d64375d79657ae06f4e5e4fdca5367a57bc8f031b84158.0.tmp

            Filesize

            14KB

            MD5

            af2afdb9484cafaeac1ba7e0da90cad4

            SHA1

            1e7ea2b1698346046fc8d7f8d2c77cc99c4b425d

            SHA256

            d79889df3f240ba70be0d2b8afcd9d11047f5fa576edc1a586e874bbdaf26254

            SHA512

            3328b570732094d72d999389703e7aa862848213bed2c62d38f4b840168ba4cad4eea00565b9975f02b572a45057ff9c1202797436db115eb0c1da2d36622c58

          • /data/data/com.ecymh.ecymanhua/cache/image_manager_disk_cache/journal

            Filesize

            685B

            MD5

            a80273a981db4fdfc6fe619722892423

            SHA1

            c91693ef4992934a541d814660df508b6ad39a00

            SHA256

            ca6a56843c016c21befc6bfc99f702a6084ba1b6535b7043983ec3da40cc0631

            SHA512

            d2f6404ca786b79ed18eb19f105346edb926205deb1f9b213f392a3a185b3732d0e2da93e5a4dc5c0fbdb31697e3a70edff9c64769d0a05e850ea8ecf80144ba

          • /data/data/com.ecymh.ecymanhua/cache/image_manager_disk_cache/journal.tmp

            Filesize

            31B

            MD5

            8c92de9ce46d41a22f3b20f77404cc1d

            SHA1

            8671a6dca00edb72be47363a7071be65cf270373

            SHA256

            68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

            SHA512

            30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

          • /data/data/com.ecymh.ecymanhua/databases/test.db

            Filesize

            4KB

            MD5

            f2b4b0190b9f384ca885f0c8c9b14700

            SHA1

            934ff2646757b5b6e7f20f6a0aa76c7f995d9361

            SHA256

            0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

            SHA512

            ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          • /data/data/com.ecymh.ecymanhua/databases/test.db-journal

            Filesize

            512B

            MD5

            2a79c06e6d2970ad67ac16e8ead661e6

            SHA1

            23653253217c0e37593806e0d84d5c7d97569be7

            SHA256

            b96130f4c0868a4d34c9357f76d76df1ce13da816db41f2f919fab809e5355d0

            SHA512

            0e1dd02d01f38b3b443cd56806daace9ae5c76f844cdefa6d6c74f8181d4175fb91a3d52bac8a64ef7447de719b20cfd5f7de8ece847ce68e528044325237111

          • /data/data/com.ecymh.ecymanhua/databases/test.db-shm

            Filesize

            28KB

            MD5

            cf845a781c107ec1346e849c9dd1b7e8

            SHA1

            b44ccc7f7d519352422e59ee8b0bdbac881768a7

            SHA256

            18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

            SHA512

            4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

          • /data/data/com.ecymh.ecymanhua/databases/test.db-wal

            Filesize

            44KB

            MD5

            7146af25e544a4647556242c9e02cfab

            SHA1

            acdd4589a40e394575b5a0bccebff55d21a88b3e

            SHA256

            a1a9ee6c12f31bd7484c21baf8ec2f2d8026dd7ec6f23278a649742252c17149

            SHA512

            46e2a8bb598bc3b794c9ea09507689dc41480bbf94113efc67ea92c9832b60802f03e128c892bae39ea790b6d3f95b08ffb087b8044907435218ba1e64df7497

          • /data/data/com.ecymh.ecymanhua/files/jpush_stat_cache.json

            Filesize

            119B

            MD5

            c120c887d548e0d46b00bc206374bc04

            SHA1

            55ba04a53da970a48357313549f62b34594a7164

            SHA256

            235a57a029ab3bdbf893dcafdcdfc324f446ec23d4620f72f36fe011ee4a3793

            SHA512

            0bd7a5ce7788e7165524f6e180d1b0b1fbb36dba1a8a34c102df1014baad90df5155ebc406cea362a9e447264cc35a3a321ddfa0e53a8b9607ad281277873f19

          • /data/data/com.ecymh.ecymanhua/files/jpush_stat_history/normal/nowrap/221a1820-ca1f-40ca-addc-11e5ac708c4c

            Filesize

            159B

            MD5

            22d8ba0e392e5871f2087aad0986af04

            SHA1

            34be44b4190256b345f54d4092d70c2174813583

            SHA256

            3d14c8059c2301c22f04009d463d69074d83509507c106bde777a9f546f46e7b

            SHA512

            710acd1f3b13410723eae9e480489861e72ea6ee1d122cfdca053ae7bc7d07bff6755b2dabc3f62188261c0a9e275de108d8da0df1665b821028a1decf485a3f

          • /storage/emulated/0/data/.push_deviceid

            Filesize

            202B

            MD5

            3bd78ba2ca21ebaf8f8fe36811211852

            SHA1

            0294a4bbcf47a03d96288921c5430b8d30e2588a

            SHA256

            3b92842a4151322a0d1b65455409bc59c0733e41a291a7d52aab13854cc18aee

            SHA512

            00b65672644d0543a580c34a88d9973174cc2e052fc8400d52139421608fab666ff6574e39c59be90d8b67d00b3cbce430961d0a556733076a6538ea23a9b79c