6989e9fad09f56679d9b86e76e54d417f3bd84493062835a720a8dc3994e9041

Analysis

max time kernel
2194010s
max time network
130s
platform
android_x64
resource
android-33-x64-arm64-20231215-en
resource tags

androidarch:arm64arch:x64image:android-33-x64-arm64-20231215-enlocale:en-usos:android-13-x64system
submitted
19/12/2023, 11:44

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

16ff5666c5db0a5ba9e7d4a942cf3072.apk
Size

28.6MB
MD5

16ff5666c5db0a5ba9e7d4a942cf3072
SHA1

b3a00687e1cb104d30f77ce8be291b3603ff7465
SHA256

6989e9fad09f56679d9b86e76e54d417f3bd84493062835a720a8dc3994e9041
SHA512

e3932d3898534d2329459c1db1b622a4fc3eae85d54024d38fd7a006063b2262f9975cb90128b5b837b12e5cfc0da4845d3f9ad9becee07cc25b89359906e72a
SSDEEP

786432:xEMy+EMyFBkfw2voAQGlgnf/wjFAGBYUbsM:EjFQhgnfcKrUZ

Score

8^/10

Malware Config

Signatures

Requests cell location 1 IoCs

Uses Android APIs to to get current cell location.

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.qianchang.microfinance

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.qianchang.microfinance

com.qianchang.microfinance
1⤵
- Requests cell location
- Uses Crypto APIs (Might try to encrypt user data)
PID:4276

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/user/0/com.qianchang.microfinance/app_tbs/share/core_info

Filesize
49B

MD5
d5fda5f11f00c7e4605b5e5b276588d1

SHA1
2b21dd15f56dd55a518cf54fc1b0fa40277596ba

SHA256
2e4b789376c4e31457849a5bc892e4d6199772b1bd6b15bec9f5f54457e75cd1

SHA512
85b7d9317a90207ed80f1face4c828695771746e67ca383a686fef8e8d4980c6d0f4a66d168f72911206a20d9108f7a8f4b655e17e217680f7a471691047868a

Download Submit
/data/user/0/com.qianchang.microfinance/cache/com/rong360/crawler/log/data/main_2.dat

Filesize
122B

MD5
a3984e9a26c91076f81cb3ec68fcaf93

SHA1
29fc76a2df80e079009dc2c815e7b6e2ec77374a

SHA256
300e0b7f6da5e598fe694a28fcdcb27e86197aaccad21352d40fe09682f93959

SHA512
acd0d540a2363d805f3b36eccf45b14af513adbb9a0d2d81e3049eb8f96c4784be3d1a6336f88496e10fd40f1b6e72bbce52ea393bf0f635610670f55f600ae1

Download Submit
/data/user/0/com.qianchang.microfinance/files/common_js

Filesize
6KB

MD5
b9affe610c7612d64ee5b8a042bbda5b

SHA1
daa41900031dbba0fdad6efdd3490daa585bfef1

SHA256
2e5be7f8b378ea777e6d9ea744a7f0cce07e103cda938cbb082fb2c8c9f241ea

SHA512
070eabffb07d94d062408d99cb9bb8b3dee9231ba10b2e5804601947d2e528cdb25bf7d917c2aee0fb5c925badf34228e27566e9440817a226f74c7ee80d5eee

Download Submit
/data/user/0/com.qianchang.microfinance/files/libcuid.so

Filesize
109B

MD5
8e5d24d0603b9d3c7d5d9a198cddcd86

SHA1
994ede15594f84a8799d5cec6f4fe9f08a636bba

SHA256
0dcfd7b86cec785d499f3937832cf8f3190d4041781f8c68c7a49f8806f26fcb

SHA512
f570039c789a4f0332287ead3741ed2a317908cc450cc3d72a32bcc1dc75e30719d611c30cd0f2261af0a894dac40e9d153dec7cd26f23ef009ca15d7aea7d64

Download Submit
/storage/emulated/0/.Android/.a4b154574052b48a9b945f81425d8adb

Filesize
32B

MD5
4798d88ca24ff63260f0b66e599c4f8c

SHA1
10aecff096b92a5cdc86ff58155d270cc9056ca3

SHA256
04b25150187fd43fefaabd310d150e6a0c179333d0087453fcaad8dc0f8cfb84

SHA512
92193d9639b0f1397f7eac6f83e8067cfc6b0f197bfbf169111d486fb819ae3667bd8e9763f606c3616d01a31ae4404890c66c9a1f84ed0f1ec0ead43a2ba2ad

Download Submit
/storage/emulated/0/Android/data/com.qianchang.microfinance/files/tbslog/tbslog.txt (deleted)

Filesize
1KB

MD5
f36536c8f03eedb1eab1c7c2eb70ae63

SHA1
c0f5f5cb88f902e922c0753a3db65cf997de67e6

SHA256
55b725f75669ba1d541ccfdaaeab80dce0dbdc7013edbc97e58cc96a48985909

SHA512
1c26154e4c98109e7924d37cd890532f039fcf0dced1b77df62bcfb74ae6bbf410b39f4f6e0a957fe99271952b4ce9771395d0261dfa4a084b45fbbb31185fe2

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
20KB

MD5
0ddc066dd1b65ec4fb584cbb35408dd1

SHA1
4c3d4dec74adbf2143b4295f9d647f18aa4e1aaf

SHA256
452b98f7a5ab103891d119c75b2158a53a8a5a86295d5a39d094c3e05c2c4f68

SHA512
405e0e741bfd1f917b3feed83bd53d3e77f48076ca98b9eb76e47736c6d3168486291b365d122e3f4809fe3a251499831b0b87e03d9470578b771984cce658fe

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
24KB

MD5
30803013c74755b2a79810d47c2bb9d8

SHA1
81c38079f8509e3479b4dd989614b3212504f7f4

SHA256
a0a652236d75cd002f8850de2252f8fbc831e43b2da917dc5cdd4451890236bc

SHA512
b8fad74833377afeed60fdf1df17de32b8d8db6366f04ecb6930c2a1957573f8f8938a27261d564b1babf5f55fe3cfc539ae15c6e6ce0e3f18e358accadecc78

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
24KB

MD5
91618594e63e143498d360db0db21afa

SHA1
b89cb5b7e5c0be6c8b033565f9a1ace3da484e59

SHA256
5265ddb016deb7d14608073cf44600a75ff89067f962fef678209c4e465e6d19

SHA512
b7042f32617dbb16b51ebf1fbd5a99177f18e189ca5fefe438c20c4c81092a911596481a7168cf6d2d3c846fedd61c3dffe15f25f8c0a5dc7c2bba9b4603d405

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
32KB

MD5
4e51092035700ed17e54214a15fef944

SHA1
3983b92b53f750406da7db59af3c74ddea6a2849

SHA256
1b6fa75e047b9841fd43979e63d7edb81944d07cb35782337bf0a55785f112bd

SHA512
be0352403bb1697010a4b0566dc49202d8af3ae5902bb0e24d6381c4afd0e855cd38e6054af079c615c20db588a73b3367a668cbcbaafaffc4ddfa181ddeb0da

Download Submit
/storage/emulated/0/backups/system/.confd

Filesize
40KB

MD5
f6820cab7dbe290af9db266f6e8e4424

SHA1
fea0cd8aeeeefbc0847e32a14385cc0ad9d40bd0

SHA256
33f9c0927d9f7193bba328164d3869c818f1f0a7adbba74100ab607da80e4d6e

SHA512
a8bfaa6913cc35beb0a5fdc0fab3d70f1ea493bf697dc81588d8677233fcd2239e83cc314b24205b7e733f898cb855b40ca4c78b45cdff4457c30ceba05f1976

Download Submit
/storage/emulated/0/backups/system/.confd-journal

Filesize
512B

MD5
77fae798ac77c3278eb3f01facbd1bd8

SHA1
977ebf99fc171dd2e7b18bd2801eaeb8cf2a723c

SHA256
54a0ec50b6ac6c57b250e529ff3a499acc05471716cdfde560de21ddd9f1b0d7

SHA512
f03ebadbb043b995f448def5a8856311f244583d62cbd7cf0deab28f8636085d3d2f9197aa9c06218cd2a1ad3353d30eac1c8846434ca43106f66665714194e0

Download Submit
/storage/emulated/0/backups/system/.confd-journal

Filesize
8KB

MD5
1378327e12a641630cc2458b1844ca72

SHA1
f77ff974408615b5feb25bc630f522581fdb78d9

SHA256
76d43cea610a4317c4b6dfc2a12d12c13ff65df6330f2863f8ca94f00d3a80ac

SHA512
0e0d60f86f1e52a4ae700340ef62bd2d79f39e42a42630125a802007877a424b8e48ca7ad65625b04d54d1e5c39321c2527c4fd1eb9aa8520e3699cc104d7b3a

Download Submit
/storage/emulated/0/backups/system/.confd-journal

Filesize
4KB

MD5
90925a5fc28ae1c2e68abd8fe296b1ba

SHA1
9bdc0b81ec5fe46c4c0973945a2d6d4bffe4b2bc

SHA256
e7a2cadd6d44cd8989e775ef24959fe3c8727e8a72c9e8d14c0cf226cc725a45

SHA512
6a5f3f497ce3830828d39bec245a312b38bcdce00ce94143b9316a5f87f10dcea7a05d5cca225fe054c019c6dc0b863ac46e5f6ad336004a6f2dfb2c78a29180

Download Submit
/storage/emulated/0/backups/system/.confd-journal

Filesize
8KB

MD5
25d257a197857a0a914ffd20f6e738a6

SHA1
987d371b9a74d263fc4a478c3646fdbe2fcdb264

SHA256
4d6b8f9580c0e6fbcd832dc6be639bff37faf267481a2869746ed80ca5614108

SHA512
9a19c35fcb341cf6bfc0f4dea303c6f7e0f45b1a82371c7bdb6aa3066f67f2bbd95ddfec2da32145bf50cd1382e302a3a1cfee4826705355cc05f98ca7ba4113

Download Submit
/storage/emulated/0/backups/system/.confd-journal

Filesize
8KB

MD5
a7fa38e987d7cf66463f6ea9cccd8550

SHA1
b3b523bb5d95ca8f81d2e0cfc77ab69faf5cf6cd

SHA256
072ec427e867a1c861a2e1192112caedea703a0b27e645c6f946e38fab599625

SHA512
c19d6bd1eea9a03b2c8b591e5b0f49f5c94ec1a08773884816b3c44a983a71918c165e2a63f63c72c8d82db68f17ce526b4aa7b5843e496acbcf3ad38f682331

Download Submit
/storage/emulated/0/backups/system/.confd-journal

Filesize
12KB

MD5
bd1fe00f53233fa7adcab2367f22aad2

SHA1
e64452bfc6180df18f4f880e942a41e50050b858

SHA256
f7b099c0866dbb29286c5e99f91bed71f244a398ea504d7a70e1dae458bb0a9e

SHA512
a337d634f9db86e2261dcdb677c95cb389b0134da545f4cd2445c84880147cef1050ed6beffe0834359a978d1845896166dcdc55b56ae7c680ddbcdaeb8d7bb9

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
25B

MD5
4f61d92594f5986ad60a9360766bed33

SHA1
ce591e1de09c286f9f09d0afdec941b93a12afb3

SHA256
714005fd34f7a2c6344d373fab099609608685f13a24e0a713c94300538da0be

SHA512
4b06c511f9b422f30fbdcba8b04fca11002515c561f9ef27f5f7c1cadabdf1535bb14a6489036b25cd83ff3bf84fe1250146852dafe1c76bbb09c2dfc2efe995

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
55B

MD5
18ee27d31a1fbeae318dc4f20753c8d3

SHA1
5ea0e65707cd7d902af0777cfbe684f2916973a6

SHA256
629d1c1f4e4999c0d04b2093123ec5189c339e7bec4117219c2546cc5f595bca

SHA512
d7c0009bfc2d2e0bc9f26dba9e1dee36e87f22d64019640a318070ec1dd7727ae34a7d2c4d214ea27e48520d5d12fc38edf8f7f7036ef0baded3b2a93951b261

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
84B

MD5
39f68b206aa742237123106e7b3b0467

SHA1
95d4b404949abcf85f5dc74d1720609f2472f23a

SHA256
1a62ae38a77f3a32104e0cef627e7be1462c8c9e261795d7358498a3010cf02c

SHA512
81d21bc58e39ff5fe30d9c95095745245c1d1420d06f9d58bcb4e221af3eb7650a5441c3728e84f2bebd43450cf1f23316e148d38459d4f685d6227bb60b2ef6

Download Submit
/storage/emulated/0/backups/system/.timestamp

Filesize
114B

MD5
1c060828b8719e5d18f488a6f329cf45

SHA1
2be2cfff7470b809b9cb68073245a67ebb8e79ff

SHA256
15409eb8f0b0293902856a7e3665286a520ac1905faa57c73811022a785b379b

SHA512
a80db3c0e660234cf597b1fb876d27618d3a9716a1abce9f3e1ae232998620280fe9ef0c2910b562c842e51e213f4d90c306f300774fa135e29d1e704780b2dc

Download Submit
/storage/emulated/0/com_qianchang_microfinance/log/log_1703000972919.txt

Filesize
76B

MD5
49066497e0cec03610afc0f8740fda14

SHA1
f9a511f7a4b9dbaf65b4960444dcb822c9a7a5f9

SHA256
b2aa7dff68a5a4648beb05bad99aedcb435ecd70609489d8ce85a58ef8654e9e

SHA512
3f6345603813751f46a758401b7eb4ae1e68c1d894e0382c819e2827313dcbb7a24f175576555920de4172a58c643857b4ea09daa64d65af4ab304b76a806e88

Download Submit
/storage/emulated/0/com_qianchang_microfinance/log/log_1703000972919.txt

Filesize
305B

MD5
bde7aaf8fe001a312a12a9224682566e

SHA1
46bca3b6f712d0d285ff424e33413ed95ec342ac

SHA256
b1a84a06d89f404790587216a6c1f6ac6c7668a0128f63021ef2bd561c91b097

SHA512
d5f3ce16531026df4d0fb48a9c886ff16a0a3d62f5e8cd5a7587fe4dea89c75e92f355180eaba507076fa16df60e3b7aca4fb0be472655728c9ed1f4a40b3fb6

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads