Overview

overview

6

Static

static

6

6fc9ba550f...40.apk

android-9-x86

4

Analysis

  • max time kernel
    2315597s
  • max time network
    135s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    19/12/2023, 23:56

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    6fc9ba550f2a3220e78c96cf9c7b2fabc71d8604309e54c100ada6f880fe0e40.apk

  • Size

    18.4MB

  • MD5

    1c21e7c4e3f52810dd7e36a99b3398b8

  • SHA1

    887ebeeabe1ff43581789c57e6f62088ac16df72

  • SHA256

    6fc9ba550f2a3220e78c96cf9c7b2fabc71d8604309e54c100ada6f880fe0e40

  • SHA512

    5e3e2ca31ae01c0efa3421268c764f21a92413f090d08ce2f78ae7b715b257b43e92b6fa80744b1cfa6bebefd72dfd084d5b8cbb9e5ff2d95c7571b0991aca8c

  • SSDEEP

    393216:Km8RTksV/Epvox+pELZCXCP8oVl6eA6QyDFNUu7XrWSitO4DYXF5ND:P81VMlG+eg26edDLUkXrWdc1D

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • gooogle.tian.sanxiayidiantong
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4250
    • /system/bin/sh -c getprop ro.board.platform
      2⤵
        PID:4279
      • getprop ro.board.platform
        2⤵
          PID:4279
        • /system/bin/sh -c type su
          2⤵
            PID:4307
          • logcat -d -v threadtime
            2⤵
              PID:4335
            • logcat -d -v threadtime
              2⤵
                PID:4353
              • /system/bin/sh -c getprop ro.miui.ui.version.name
                2⤵
                  PID:4374
                • getprop ro.miui.ui.version.name
                  2⤵
                    PID:4374
                  • /system/bin/sh -c getprop ro.build.version.emui
                    2⤵
                      PID:4401
                    • getprop ro.build.version.emui
                      2⤵
                        PID:4401
                      • /system/bin/sh -c getprop ro.lenovo.series
                        2⤵
                          PID:4426
                        • getprop ro.lenovo.series
                          2⤵
                            PID:4426
                          • /system/bin/sh -c getprop ro.build.nubia.rom.name
                            2⤵
                              PID:4451
                            • getprop ro.build.nubia.rom.name
                              2⤵
                                PID:4451
                              • /system/bin/sh -c getprop ro.meizu.product.model
                                2⤵
                                  PID:4478
                                • getprop ro.meizu.product.model
                                  2⤵
                                    PID:4478
                                  • /system/bin/sh -c getprop ro.build.version.opporom
                                    2⤵
                                      PID:4502
                                    • getprop ro.build.version.opporom
                                      2⤵
                                        PID:4502
                                      • /system/bin/sh -c getprop ro.vivo.os.build.display.id
                                        2⤵
                                          PID:4528
                                        • getprop ro.vivo.os.build.display.id
                                          2⤵
                                            PID:4528
                                          • /system/bin/sh -c getprop ro.aa.romver
                                            2⤵
                                              PID:4557
                                            • getprop ro.aa.romver
                                              2⤵
                                                PID:4557
                                              • /system/bin/sh -c getprop ro.lewa.version
                                                2⤵
                                                  PID:4582
                                                • getprop ro.lewa.version
                                                  2⤵
                                                    PID:4582
                                                  • /system/bin/sh -c getprop ro.gn.gnromvernumber
                                                    2⤵
                                                      PID:4607
                                                    • getprop ro.gn.gnromvernumber
                                                      2⤵
                                                        PID:4607
                                                      • /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
                                                        2⤵
                                                          PID:4634
                                                        • getprop ro.build.tyd.kbstyle_version
                                                          2⤵
                                                            PID:4634
                                                          • /system/bin/sh -c getprop ro.build.fingerprint
                                                            2⤵
                                                              PID:4659
                                                            • getprop ro.build.fingerprint
                                                              2⤵
                                                                PID:4659
                                                              • /system/bin/sh -c getprop ro.build.rom.id
                                                                2⤵
                                                                  PID:4683
                                                                • getprop ro.build.rom.id
                                                                  2⤵
                                                                    PID:4683

                                                                Network

                                                                      MITRE ATT&CK Matrix

                                                                      Replay Monitor

                                                                      Loading Replay Monitor...

                                                                      Downloads

                                                                      • /data/data/gooogle.tian.sanxiayidiantong/databases/bugly_db_legu
                                                                        Filesize

                                                                        4KB

                                                                        MD5

                                                                        f2b4b0190b9f384ca885f0c8c9b14700

                                                                        SHA1

                                                                        934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                                                                        SHA256

                                                                        0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                                                                        SHA512

                                                                        ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

                                                                        Download Submit

                                                                      • /data/data/gooogle.tian.sanxiayidiantong/databases/bugly_db_legu-journal
                                                                        Filesize

                                                                        512B

                                                                        MD5

                                                                        a5059961396417ad578afa46cc5af9cb

                                                                        SHA1

                                                                        3d288cc2dae667b1618d5f4f0d9df0cb68e96cf2

                                                                        SHA256

                                                                        5001851e0b3d8b36ddd721087af09da51dde0105a3abdb9aeaa3efd3e3668ad8

                                                                        SHA512

                                                                        0211f48ad99183626d25404a8e9cb90eb0929e7a07747aa755b2fd4153f4e1dc98a3ca2fc8da64d2508b20079b7cf6a912d1d2f928aa192dfee86f1e4cd92a01

                                                                        Download Submit

                                                                      • /data/data/gooogle.tian.sanxiayidiantong/databases/bugly_db_legu-shm
                                                                        Filesize

                                                                        28KB

                                                                        MD5

                                                                        cf845a781c107ec1346e849c9dd1b7e8

                                                                        SHA1

                                                                        b44ccc7f7d519352422e59ee8b0bdbac881768a7

                                                                        SHA256

                                                                        18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

                                                                        SHA512

                                                                        4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

                                                                        Download Submit

                                                                      • /data/data/gooogle.tian.sanxiayidiantong/databases/bugly_db_legu-wal
                                                                        Filesize

                                                                        92KB

                                                                        MD5

                                                                        8fae7a136b70868104bc6ea624cc66b8

                                                                        SHA1

                                                                        a4e206089b15ef8d059c80392d87ff60b6c54b80

                                                                        SHA256

                                                                        c24ef9ea18ece33b6740484c740bf0a38a856ef641b4fd67ea26698f7c089954

                                                                        SHA512

                                                                        42c5ddbe98366d9237ecdc8526c7153b6caa52c5ed0064ee8ccab76e8b7d98ad7815ee569f95868a499fc34eb7b530a3d46b02782d2841bb97fa1d7934423171

                                                                        Download Submit