Analysis

  • max time kernel
    2194219s
  • max time network
    134s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    19-12-2023 11:47

General

  • Target

    1772d592eeef4a9f218d55cf47d1dd25.apk

  • Size

    9.3MB

  • MD5

    1772d592eeef4a9f218d55cf47d1dd25

  • SHA1

    eb20269a0ad653501b16687ef0f7b9c722893a1d

  • SHA256

    bc67dd491a6af08a64da39ecd8640b46bafb00de95a6a04bcaf1d6ffa7c57260

  • SHA512

    4dec81f3578c63df7eb80f5da162b0b9b1da7d14b82b002f7036033f3c7a6a0917235407479949c2bd54332a54facab7f6893b224733d6e992c07b8ef2baf95d

  • SSDEEP

    196608:uWxF6k7zPoyNQjW6MGTHsy30MwaZ+9etJT5/iY6KdXG/2cJ3:uWSk7tQyrWwcl5/iY6qy2cJ3

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.dangbei.zhushou
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4502
    • cat /proc/cpuinfo
      2⤵
        PID:4562

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.dangbei.zhushou/databases/MessageStore.db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.dangbei.zhushou/databases/MessageStore.db-journal

      Filesize

      512B

      MD5

      2be5fbe2c28331ab9c890cacef29c1be

      SHA1

      3de738f0a4f2bb8ce1306319a597f0780b3e39f2

      SHA256

      25799fb2803de7a76f159e94a4be99019bb8e06c85837b6e3f22e5f136e40d2b

      SHA512

      935f15a609ac88eef6d794da2c2c47606a1eee874cde489cb52e47ae0f7b6c933a34617e0c9a49e42f942eee7352a1a16598043e9b0a8d9614f797122e2f481c

    • /data/data/com.dangbei.zhushou/databases/MessageStore.db-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /data/data/com.dangbei.zhushou/databases/MessageStore.db-wal

      Filesize

      48KB

      MD5

      6e602c9b5f63fedf027e626e631648ad

      SHA1

      8915853e8bc4f04d91f552be1487712af2e6b239

      SHA256

      3dac9181eadd290d1f5ae12fc0184cfa8419d11e8b9f3ba85f1d0a4cac21daf1

      SHA512

      390460cfd0cedef7b68f2dfdd49b731d368989feb49d92b20159e6c404d6e1f69bda28fe2c3c36ffb6fdea563d59960193defc976e41759542e7cf6a800b9181

    • /data/data/com.dangbei.zhushou/databases/MsgLogStore.db-journal

      Filesize

      512B

      MD5

      71eccf9fec21b51f3339b52b715fdc07

      SHA1

      4d26ed74ec066d1246f2960b3017974da68d0ba3

      SHA256

      4de20c6244a49e59eb30e770927a3adf3c8b23e18972118c56ae2c5a48cfd5e3

      SHA512

      912a95c7d6c16b3f4cb2aa5c3931a9f38f5b88f1ffa12ca8f6dc9776fa6644aff7d5539a58ef86f2eb82f73ad14a771c3c8c3491e8125423d45a16efb16adb69

    • /data/data/com.dangbei.zhushou/databases/MsgLogStore.db-wal

      Filesize

      68KB

      MD5

      690883f73d3ddb5a0aa0488e87b23244

      SHA1

      cbdf2fd6ce51b28401edfb59b7bdb16b51f4d67c

      SHA256

      e40e4d0b3bd1028006c0edcb0dbc4cf123e54db2ed640d2b2874f5a7e6727cbb

      SHA512

      e541b9cf2fc47b9e05d1c3250e28db7b25693eb7d3bade196cc332f2d2194963472830a42bc8941158bb9adc8478ee931230f9eb546a135b82b4d9f3f1d8397b

    • /storage/emulated/0/.deviceid/KEY_DEVICE_ID.property

      Filesize

      79B

      MD5

      d1ab0fa56bc76d8db10b2cc9f773358d

      SHA1

      58d57d007a51c2e350df5ed53b8c8411bc169421

      SHA256

      c632daf4c2857b558eb15d2a632c8854d872870ddf03370c293458c9e82c9fb6

      SHA512

      802e371efa53b93b8a4caf17bd8884486bbadee44b80768db109a7c65fb69e32219c67308c5f32e7eb50b87988e49cbfa1d6a88ecb5bed49adb5a7a111337688