6989e9fad09f56679d9b86e76e54d417f3bd84493062835a720a8dc3994e9041

Analysis

max time kernel
2194010s
max time network
135s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
19/12/2023, 11:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

16ff5666c5db0a5ba9e7d4a942cf3072.apk
Size

28.6MB
MD5

16ff5666c5db0a5ba9e7d4a942cf3072
SHA1

b3a00687e1cb104d30f77ce8be291b3603ff7465
SHA256

6989e9fad09f56679d9b86e76e54d417f3bd84493062835a720a8dc3994e9041
SHA512

e3932d3898534d2329459c1db1b622a4fc3eae85d54024d38fd7a006063b2262f9975cb90128b5b837b12e5cfc0da4845d3f9ad9becee07cc25b89359906e72a
SSDEEP

786432:xEMy+EMyFBkfw2voAQGlgnf/wjFAGBYUbsM:EjFQhgnfcKrUZ

Score

8^/10

Malware Config

Signatures

Requests cell location 1 IoCs

Uses Android APIs to to get current cell location.

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.qianchang.microfinance

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.qianchang.microfinance

com.qianchang.microfinance
1⤵
- Requests cell location
- Uses Crypto APIs (Might try to encrypt user data)
PID:4238
- getprop ro.product.cpu.abi
  2⤵
  PID:4277

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.qianchang.microfinance/files/common_js

Filesize
6KB

MD5
b9affe610c7612d64ee5b8a042bbda5b

SHA1
daa41900031dbba0fdad6efdd3490daa585bfef1

SHA256
2e5be7f8b378ea777e6d9ea744a7f0cce07e103cda938cbb082fb2c8c9f241ea

SHA512
070eabffb07d94d062408d99cb9bb8b3dee9231ba10b2e5804601947d2e528cdb25bf7d917c2aee0fb5c925badf34228e27566e9440817a226f74c7ee80d5eee

Download Submit
/data/data/com.qianchang.microfinance/files/libcuid.so

Filesize
129B

MD5
20fa0d68697c4c9346cf741e455b45c8

SHA1
9d77d4062a566ca334e0f75eb7411b10818becf7

SHA256
293bb25e8d1cb8798253933a09839058b91efefaf3193be9716707910f294310

SHA512
cff66c373d0589246f5bee5e13c266875b98af5e42e093058892640ee2563b4ff4df65849fe180aa664094d6895bef1f02e32576ff1a648b03d9f0a568a4c7ca

Download Submit
/storage/emulated/0/.Android/.a4b154574052b48a9b945f81425d8adb

Filesize
32B

MD5
e42148a3cee4f161e7f70d84c8aacbe4

SHA1
bbfbb97e95e8bc397312c8b2b0215039ddb16432

SHA256
023389f9cad353b5e806c7f3be18314399d524209b2bbb25c47f43f889502b69

SHA512
45571c525e195248d18e8900534d4c1ab9d8b59099afb0b9a04e27c822e6ca4821fef1cab58a3e47445c40636a8f1ffc4742fdf8becd9892a973c3f20f71e98d

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
20KB

MD5
249e034c9703afc1fd6062371c7f3da8

SHA1
9ca489179488e0fe5a35f7c0d5887f163e4890cd

SHA256
18fc5cf216b05487a87be99a662e7474bd54120f214e034b3179f40ca989352a

SHA512
b819b152548431c7892678ecdf23abe44cbdcf80e8f22707ab32a2aedb5356346b27e3c3e750665ba893d602af1c7dcca97edbac3c820859a0fc20714c22c0bd

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
24KB

MD5
8c7f6e3b52e6e841b895bbd13644ed43

SHA1
ec8daf46a7eb99c75ea1ce8582ef77b2df8455d2

SHA256
6615188d5d8fa77b44fbae7a249d073b3623316e7489c5fec95fe53188ea467c

SHA512
cffafd628e62fa915872796ee02dd8119cfebd6811291155acd400986ee5d34b244ab3b5d0bd386566724205771f665571bcb04950d390c5c60072fdb90c5280

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
24KB

MD5
3c170608b83beff7a6fe94f0a7be293e

SHA1
f4d7610216ea280b20eab6e02d5954ad969efb76

SHA256
7403e08066417e060da29471f940cc60703bb2a2f0b4e1a1b55c98344d3f59d5

SHA512
71cf142c9a61cf4eddd3d505d44a17abbeb059b75a9ea9ef8e4b2b370bea4f2aa42b5caefc564aa68152b5226e34de53fcae523a831a90ed37d5a3c9a674b149

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
24KB

MD5
5c13597ca92ac91ee216c5ea55d60b2c

SHA1
c6bbea14a7d5da82fddaeae00d0d6f9d7356c151

SHA256
deb2820b8c4f62cec9b18a2d69b4f3d4c14998991650275c9f42fc384bb8aa32

SHA512
4a28ea8b94aed504cbedbdb2b5c3abe138a6b2cbabbd7eebe50a3726e112cb3e4510a2d3909c13e88140ea5c71c078a6721afd52917cfa356713b0d6211c62be

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
32KB

MD5
85feb823f66ccf16ac62aa0333b738f1

SHA1
819dbc0e49274034920c0cd5330a5410797b3f4d

SHA256
6c74a83f65c2f1b32eb9644916a433b393532035fa294b93bb399e2a2d249aa8

SHA512
09227a648bba618d7ade5f7beb154602dba8b02b9dda2eb580f5c2091624632a27e28c34f4ef1e3ddad6b23577123add73554737a6284bb7f11b8a30c1240834

Download Submit
/storage/emulated/0/backups/system/.confd-journal

Filesize
512B

MD5
05546fc25878c3d20bd57c30701d0811

SHA1
657e8cf78dc8d3a8f1d2a802454ba5c0934ffe9e

SHA256
be98d29aec1c7426d29f5d26af3c3316b0dfaf905bdd37d995e34efbafff9bf2

SHA512
91224d860a9ed49f614248e1168b7e57dab873fc0358044688512f39c029b5c4df198551489fbba4cd021616fce6feb7bd52162962517955abe94bb7c7d0c158

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
36KB

MD5
baf540dff0e9ecb7de8b90b21a1a089d

SHA1
6298417a09ce1bf23f0c82eecb9361ba53915642

SHA256
d9a42364c48c140f58fbd3c8baeb0c41fc9781baff69cb425079a7fa19e16365

SHA512
3acde78df151dffcf6996680980ad690a26689f44336ee0c18ebb89f31c9213cc7d4a82725938d6defbe6092292c56e81183a2e1d0ecbbaf4741c029a70fda8f

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
12KB

MD5
e7263347c4a3c1005553e7a8d78af10b

SHA1
7e5735e9e243b0120355314c334c5df10dc39421

SHA256
f00ef2466c5b319ce5c21d95a4aff9f79fd766dfb02630e8d2283490c875bdf1

SHA512
ba95d4a856db9bc3ca712595b1f596f17d72a23e960b7066b390aa71e614672227a2685398054ddecc22703335ee0278e7b1a67cd1786d28c41f9042fab15d3e

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
8KB

MD5
abb1763bcbb767fc28c498fcfb20e392

SHA1
69cb158b3d66443cc3559688086a2199692cc8a8

SHA256
0d59e41c2c544cfa5890aede74ac973b4592a8eb3d2d234de3f6a7cd5ceb3b72

SHA512
61783bea19d3ae25709a32eefc2f635cf050c41a9e6e64b638a56b526f3f2c02a43ea65715718c0970ad6342273fd3bac050c73c3f59d5e5103e5853d77b1340

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
8KB

MD5
c1a171e7d02bcdd91ffa8ea5361a7bfe

SHA1
0e9d83fee791d43999b7870021d69fef24d21b45

SHA256
4944cf72b6d1c12149ccbbec7863b5ae6dc9c12f28a51d587a73bec8494d73af

SHA512
0567c2735b6e34e6c39a2e58991e31a281119d428ef2490eaa70d7963ad2e3b09f67cf04ff185e611e9f18ce5100120129ab83847a7de9374c340ab28c924af8

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
12KB

MD5
8c29b7b4bd53965452e3a487f92da2d1

SHA1
fb98460ae781248a6f22bb0659544a67a923cfe7

SHA256
5fb43650ccd6bd57dd1fe752a6cdbdd3714aa685a62037ed1e8a405752265ea2

SHA512
3f787d4bd7d5a0f62f9029f43e0cf33a25e506755f7b314f2d02471a7128ff5bc154f2a55cdb21f16194548c577161fd30b3a4fbca3f3e014c445b464adf226c

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
8KB

MD5
29241e5f7941f37faa8fe96ab41aa673

SHA1
bc1a86aef9483e4881bf012676ca466a1d4e9d04

SHA256
13d5c90a05d9e5a681467256bcc4cb41a64e536637baab7b8ee36ae9a4a12341

SHA512
b9e7cbafb73af706a471b725acb8bdaee2fc6cdc8e1be6e35028fb288c2a95366e9e4be9b86cf40eee04b1e1d364ae5c849d98c17197d328019bdaa0b7104b90

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
12KB

MD5
a07e8ecedcd636fb54c7d068cde9ef0a

SHA1
e792e80ac60a8973d6b995d9327cf1277a607037

SHA256
581c3e660f1319566e08fc096f8af9ddb4be9476f7813869e7357b29ba7bce5f

SHA512
48a5b0d5bc5bcc6e59b70c2d755d9db4c1e57a3c27a1447fd9952db5d3c5194f80d9adc29b048a442835cd722d484c956b841d6c93c11cd0d49d6ab461aa4761

Download Submit
/storage/emulated/0/backups/system/.confd-wal

Filesize
8KB

MD5
7876258a46624abbff2b36dced3a15ef

SHA1
787b58a2b6a12390f05f318a53c0c24b35111eba

SHA256
04c7fa9cfe0e2d0264a40424acfbc15320aef0f6c5a4dd3a7962769817df7647

SHA512
3a6af912e346b995e077e528683ad361ddc7f20dc3f8617ac8d349fca7a5c4a67b51920ecbdb19d6f16a770fb64876f3aa453df819e5bf3edbe1bdbe0225e81a

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
25B

MD5
c2fb04e88c269ebe6685d4f548709588

SHA1
6fb759c25bbcd40d56c38758281a9ffb820116d9

SHA256
e590fd7dcf95365e1a72b5847d2170b2864bc8c89c30474e52a16cc964955b89

SHA512
63c3d6ec24ca4c84612743279cc22fe82088e4ab466350d9f7a1bbc331404533586221f69406b4bfee7869ec330e98c6713f5a590a3e2e61e6bbd1c567a6d45f

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
55B

MD5
951a4326ded44469aadf8ca57de15399

SHA1
7c7c0115703b7591dc733fbc24c22b910ef3df8a

SHA256
386cce66a934d1483170869e408a8110cdf5853525ccdcd0fe7d20eae4db5063

SHA512
19bfaffcf3624ab213c0ce7cbca83d70a09a51b7e2b72780f1a1ed6ed1468f290c6cd4f0564024a7213d896705fb1bbcd5906d9b56823fccb18f21c18c500cbd

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
84B

MD5
0edd3e7ad5ae47e4c93615692393e463

SHA1
68c8c82922c65da82e4021c5361971f9ff6898d7

SHA256
cd1d43836656b6f28fe3b11cfcd2c67b7b9f3f58baf5b426b174f1fa79b164c7

SHA512
7b9765b7937c0147e857638b0936ad5b503ef914e6688e35df13a9d670fab2e5c9a9efd351766f8c43bc5694ab33e9eaebdb513f056c98737f26065dc5b738aa

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
114B

MD5
cadc26e836ebf647b1debf5cd19a2d6c

SHA1
cd2e86cfabb82e01d572f70d45841cbc0e8a3020

SHA256
17b0c00ea564b17bd2a40b58795387f230a021ee959191691a4a13855f56b50b

SHA512
70d5d604f645ef8938c8de27a2bc76d274e4b04938220f92930593830c07be992c2d6e82fe20263c26c485f36edbb50fc4ef6ae5bac5675821a4d69f52176518

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
138B

MD5
73be85e1d945a0884c2ef43a66f6e5d5

SHA1
c9b151fcf7cd79107d151e22567482ef1d3233d9

SHA256
68ac41cbc9c2dc2f82d420235232916a02631b6c0231d196eaca329c0673452b

SHA512
328f43d4e93eec63b763eb367dc752036d68bb6719bf12580422fd6414ea33b6097e5dded60bfc0d20fbabfae2eff69b690f0a6c03da03788efd14fc01bf6139

Download Submit
/storage/emulated/0/com_qianchang_microfinance/log/log_1703000958369.txt

Filesize
76B

MD5
430f50ecc8f3e2792e7edd51863a6954

SHA1
837367b03b16770335c5df84427c863631578620

SHA256
e860df544173103b4ae31713309a421836fec27aa00ec6f8afdf9207bd00d089

SHA512
4a8547fc65330648813bcb9ad0ea8ee7fcf411101ce17a92d2b7a5b06dd0ff5830574655fee998acf8feefef697b4a87c29b1c68064d81cf44b6599702788e5c

Download Submit
/storage/emulated/0/com_qianchang_microfinance/log/log_1703000958369.txt

Filesize
337B

MD5
41eb362133a2e9508ff5e0e1ab500a08

SHA1
efcb9eb45fc8381079aaf7f4740eccef5c003e90

SHA256
79f03a3d9e7b88bba7059d1035a4aef58e9d4b4ffc1529289566989385b5437f

SHA512
5f5a7b5fcbbd04ff7eabe50f7026eb316b224277f0b5545ba817111791c4cc30f19d5f8a95e92385ccb383179b2389b37a3d4d2c703ff980f1e2ac88edd98509

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads