Analysis

  • max time kernel
    2350641s
  • max time network
    158s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20/12/2023, 00:41

General

  • Target

    75d2d79b1d12dac249c5f7a07e58c1a08f11ae864320b49ba370f39784c3ffc1.apk

  • Size

    8.5MB

  • MD5

    25183939ed83048bff87d01e30c07b64

  • SHA1

    87a115f21b63780419c60d5e9e01126662bb5955

  • SHA256

    75d2d79b1d12dac249c5f7a07e58c1a08f11ae864320b49ba370f39784c3ffc1

  • SHA512

    3cb513df958a9425c5a57780e63360dbea2da67b5d0f19738013a52d8e9398755c8358086865455d3c70f81426a0704abe5d9cbf666151bb568a2cd6e8e57f4b

  • SSDEEP

    196608:tC4odgvDlcG5WgSe37XSOwXAaduJEX73Atai1C39uBzsX0iggj:vz2NDe3TiXAaduyL6S3Q4EZgj

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.tzj.debt
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4250
    • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
      2⤵
        PID:4436
      • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
        2⤵
          PID:4454
      • com.tzj.debt:push
        1⤵
        • Uses Crypto APIs (Might try to encrypt user data)
        PID:4348

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • /data/data/com.tzj.debt/app_crashrecord/1002

              Filesize

              227B

              MD5

              6e65eb150ac8beebdd39e91ed22f069f

              SHA1

              016ebcb88304ec5406640d9eea29097625e54db5

              SHA256

              9ec90f093c74cb8b61560639421809ffd64f14d43cafe02ac01fda68f7f344ec

              SHA512

              1056fc03b86c9d8c58936b077ff190a93e56938d954688e06fa677bad9b9f1905da26d80c8018520e3cdc887afd2d568fc22d9e75734c37c88e154c5eadf5284

            • /data/data/com.tzj.debt/app_crashrecord/1002

              Filesize

              222B

              MD5

              e5ea557f6f7d569be56573e331eb9038

              SHA1

              bfd8e0b9b7a6e01048dd7a148102a0f4e1229433

              SHA256

              507906abb62ee24189b2576413b46c2c70686dab22c535886556c59c66366de5

              SHA512

              2c45bd5bff068251d30d250a6e7523a3dbd4bfc8b8ce862e225c41851866344966c6457e31ee09f5fe53543ced41fbf96268aaa9ef366085f117d812ab83b048

            • /data/data/com.tzj.debt/app_crashrecord/1002

              Filesize

              32KB

              MD5

              4e8994d4beda752e9d28c1d44f678185

              SHA1

              c358a00bc95882ef1d86ae8eceb90cc81a69ebae

              SHA256

              b8930c6adcfbcb867f6b5217c15eaa296c8f685e4273919b87994cc42a016611

              SHA512

              e19af09d8031e1a224e6da57bac1105a3987c59e06d9c81f8d6a1a18311b083fe525426cb96dc2f87632c8cbe3d18cd46e239bc7d548ada5126aeb0008ea0263

            • /data/data/com.tzj.debt/app_crashrecord/1004

              Filesize

              222B

              MD5

              a0157c0a0a8138e210d4935478f93ff8

              SHA1

              b7efb8d4a5c4655919661be0856783e6bc10c18f

              SHA256

              752173f6bf323e32a272e3dbb360a616d685cf6594d48c6b28e80f30766fced7

              SHA512

              f188406ba88697f495a0a6ca11a498cd0fa93f41b1c82c66c405cbf3418dda3fc228b72b0a0fb70c473b709c7e4594171170b052d50f1b774b287ff333c6728a

            • /data/data/com.tzj.debt/app_crashrecord/1004

              Filesize

              222B

              MD5

              14d5e8ba691debf5a91a64a12600dd76

              SHA1

              112de9978a1e139f06d9e22bd0035f6db5996728

              SHA256

              fbd1bf7e79717e24dd39999ed99217940517b8853f278b7e882d734ac27d876c

              SHA512

              2782108bb3e61500f51fe75189c74d7b68cfb5b3cae917b24172d5a53c2370b026507ba2aa0a3a12e1238e78b2f90c401e8b0f17314f5c49ac245b2311177f23

            • /data/data/com.tzj.debt/app_crashrecord/1004

              Filesize

              58B

              MD5

              0d210bfb2a0e1f1b4c082a6a0f79de07

              SHA1

              bb8ed9e364db79d1d9f2fcde3f15091893222faa

              SHA256

              988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

              SHA512

              536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

            • /data/data/com.tzj.debt/app_crashrecord/1004

              Filesize

              4KB

              MD5

              6e762eaff43b8d51b1d60fc223ed4157

              SHA1

              8e2c9922d7fa213e8e368a583458d7a1788bc576

              SHA256

              124e77fb3414702e543920e1552e165f52dee7fc968b5f70b8608c48d04d8d3f

              SHA512

              2417cc6b79c97889dacb689a4e1004ca26934e609a4be929fd2e71e6822893162409aa00abe59d8aed2a44dc65e282f99b12a9a403819727233f43ef4bb2e8d0

            • /data/data/com.tzj.debt/app_crashrecord/1004

              Filesize

              112KB

              MD5

              624a4291ebf783af33e4db6fd3002b25

              SHA1

              54ad4e40fa04b9270092b1e4f65ca5f785e979aa

              SHA256

              8fe965176050da979c0c04465d64ec46c458837db8231cb2ef86500c86253ca1

              SHA512

              c2a3a302999e05b569f4366c7ca8eeea5cfa7427da29bd81ee3dc374f3aa7e2446c92dfb16093043005f240c3473c69b13eb13f286df69d609cca19c0132378e

            • /data/data/com.tzj.debt/databases/UmengLocalNotificationStore.db-journal

              Filesize

              512B

              MD5

              73d8a2d0e77d4ff44413025d9520dc9f

              SHA1

              c915f48781c33f22ac0fc4688aea393ffa177241

              SHA256

              d8cd562d5f931a48edc512dfb817047a2ede218c3f95b0103ece7e91ba4ccbb3

              SHA512

              e08d531597994f22077271826f0cf228d687948af299de0b01267463c7bea91ccea8ba0a0069c4c0ef420468fe654c46d4ed4ea481d75b5ee2401938bae661df

            • /data/data/com.tzj.debt/databases/UmengLocalNotificationStore.db-wal

              Filesize

              40KB

              MD5

              9810df086e452d4aff013da5c3b989db

              SHA1

              e1c24fac15fe697fda9c0edb4d4fe642c12296c4

              SHA256

              8245eb04b0f76046c9503f4b4abccbd48be12587f1d673735a9ffaadc2082f07

              SHA512

              916a5590185a2531be957d6010397a0e94045028c57084916ad64e97477513378100be015731372efef441fe0500bd6cc5b7ed2b0dd449ad09a204fc2a762a1c

            • /data/data/com.tzj.debt/databases/bugly_db_

              Filesize

              4KB

              MD5

              f2b4b0190b9f384ca885f0c8c9b14700

              SHA1

              934ff2646757b5b6e7f20f6a0aa76c7f995d9361

              SHA256

              0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

              SHA512

              ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

            • /data/data/com.tzj.debt/databases/bugly_db_-journal

              Filesize

              512B

              MD5

              6d9f6827776c402fc0b0762544b25f67

              SHA1

              bbcd7616ef15133c39da22b2a8183711154f1225

              SHA256

              986ecab13ba9d40cd099437d6242094f950e46dd52db2669c4d3f83d6ad70240

              SHA512

              e8cedefd6cf91a4f8601f0baaf6da7b819e63c63b077373ba33d2c78117b3beefd1a5f7b3e63b795ed67311aeac08b57a6d48b4b402857344a08ddbe8009c358

            • /data/data/com.tzj.debt/databases/bugly_db_-shm

              Filesize

              28KB

              MD5

              cf845a781c107ec1346e849c9dd1b7e8

              SHA1

              b44ccc7f7d519352422e59ee8b0bdbac881768a7

              SHA256

              18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

              SHA512

              4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

            • /data/data/com.tzj.debt/databases/bugly_db_-wal

              Filesize

              100KB

              MD5

              22be242b7a5a756494cae536b0c51136

              SHA1

              2f7af323e5a2c703506d74a2923ab8d4f648e0ba

              SHA256

              f6a61782ce42b57e50bd0b432c97a52b85ecb3dfb0821c2834bac17ff7124718

              SHA512

              56216b2b8c1203b7e54dc49a0884bbec70d02792cc4898f0345b1f163b3e049c833a4d2b6ee6593e1a130f61c5a79873ec659e9875c2a943b5f15b6c56ccdb96

            • /data/data/com.tzj.debt/databases/bugly_db_-wal

              Filesize

              68KB

              MD5

              6d58b051bef5a6e5e73ebc3ffdebaf22

              SHA1

              4700dc9523ec5449beb762b143de2c4c6df18b33

              SHA256

              e7607317f1a65e05827a9670ffe83e1d9221e8d5a62b0e2ad39991a7c96a2421

              SHA512

              e270a099edd56324c46036a208fd6aac147cc33401e77c62661c419059841a000304a75a374119c05b86fca676f9565ffa4ec55c2c120b28b8868ea6469296a6

            • /data/data/com.tzj.debt/databases/pri_wxop_tencent_analysis.db

              Filesize

              4KB

              MD5

              23e953b4f9191b7a129972b0954c06b6

              SHA1

              99fcdf3b05ef56d91f25fe2a20bbd4412540d01f

              SHA256

              763f64ce05c0a4950903d78857821ef80137c6afc5331ae713a4d3219bf0a730

              SHA512

              60f78829f1015b7ce690f23402470c5f5eff133cc4bf2075b8c5cbaa8bb670b62d3bcd71d9f3342d2836827b061a1682ff8141637e494b011083b3f8aea9e5d3

            • /data/data/com.tzj.debt/databases/pri_wxop_tencent_analysis.db-journal

              Filesize

              512B

              MD5

              07f4df795c3c27cb4df2edd90c01ea0d

              SHA1

              3d8b0e3837b1773661010c26560f576518a5b504

              SHA256

              87d9eab0506425ff33234304852abc99e8e5ab72335a5fdba718def9ba4b5934

              SHA512

              ac824f94b27b6393e3a2940c8378976f4bea48b234da633aea92f948e7e6b029c3132e0f2e604806ec3e35ebeb8b760c8e0e29851faf4151adb354c1a5373265

            • /data/data/com.tzj.debt/databases/pri_wxop_tencent_analysis.db-shm

              Filesize

              28KB

              MD5

              c851647cb02473a7756992659dd754e1

              SHA1

              0649a1e358c409a7273cbd51f94cac9c13ca3867

              SHA256

              8f3606628c3d6f30f48c6f95beb48829177e822d20f67e2a4f27759435428199

              SHA512

              2a7d9e0e57c6b0323dca9920f1193b12c635d69230ee331bd9f3fe7eb46642dc03f7f7bb3e8540b721d6a0a71cebe3db38246d27939b096c168f5c1b7f31d477

            • /data/data/com.tzj.debt/databases/pri_wxop_tencent_analysis.db-wal

              Filesize

              56KB

              MD5

              29f33ae1719d3a328aed8f3993127ea5

              SHA1

              8867a9198642a2ff1383e4b15c75e0d2fe64612b

              SHA256

              ea7394be753a69c8617af995a8a1d8eb09a5d4548b6c6cb379790d3836ce0ba0

              SHA512

              46d3482c90b6fd12103f2c020e4f50b697dcdabef83229e5cfc2a76c7321a4acf1121c6d59c079d9d762b3cdc40caece865afaa79f5de85110a87b7c5c020d1c

            • /data/data/com.tzj.debt/databases/wxop_tencent_analysis.db

              Filesize

              4KB

              MD5

              25702d9e47d9c5de1f47275a04865c6d

              SHA1

              f9ed68687fd8361a74eb388a4313fc1e2cc09b05

              SHA256

              1a5e402f3aa14b00df588270cf971949666fdd0955e67ca10b41658b4a4e6488

              SHA512

              39a322f7cdecfba3cce15e516cfbb66be87d69bf531e0a20d5ce8d2e3626a1b253e44ee5787e686589fe54701e77141e6d43b223a2fe5b21da788b071ae1d673

            • /data/data/com.tzj.debt/databases/wxop_tencent_analysis.db-journal

              Filesize

              512B

              MD5

              582e53ab86dca170494c7649ef89c032

              SHA1

              aebbe2627f0b63dcce06aeedcc361fdbaedec423

              SHA256

              04c6567accb0ea403357a4b9896c2c25080af00e47e3372040e4fea7d68f9251

              SHA512

              2c79dc5bb88708af309b64a6a5333f930e157992d2c15c516dbffd46d8d3c30b81c5266d0ff927784d32f94067f5b1e54dd1e389d5d743d2ccee5df542ed1032

            • /data/data/com.tzj.debt/databases/wxop_tencent_analysis.db-wal

              Filesize

              56KB

              MD5

              5fa401072375046a8a69d3c9c3002f28

              SHA1

              2ecd3f4311d33e438f4aa73625c0ba550a7439ec

              SHA256

              9c1d021287cd0f4e535ba485545b06a159ca7fcd33331d8faaff5b430dcbbfa3

              SHA512

              bf7dea7a0bb9454dbc92aed483446075e2c431bc21dcf8f9e9641c99717fd644a3e8131d048c45d63bca343fd7d9fb59dea4ef08d4088dd6870490ea14c06581

            • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

              Filesize

              65B

              MD5

              9781ca003f10f8d0c9c1945b63fdca7f

              SHA1

              4156cf5dc8d71dbab734d25e5e1598b37a5456f4

              SHA256

              3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

              SHA512

              25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

            • /storage/emulated/0/Android/data/com.tzj.debt/files/tbslog/tbslog.txt

              Filesize

              1KB

              MD5

              bf63fb115924ecfdd63c7f4295d0ae76

              SHA1

              9e25bbc5299222e35c55199bd5fa9de9f54fa890

              SHA256

              9a7c8110d770e3d29bc721bd79d9ffa6dda3a071777b39d3104acfdc6434f527

              SHA512

              ec53f16180e8f2dfe2e4866a8b799acc60793265e341ba59370362811b9a6172f71ad8afd604d13cd7e8c27a7da445775e9a4c138f105fbb4bcdbac7d238c563

            • /storage/emulated/0/Android/data/com.tzj.debt/files/tbslog/tbslog.txt

              Filesize

              1KB

              MD5

              dc387f129c10537dc513663cd716c70f

              SHA1

              80a6372425c01bc08ed5aa607c9cca050db4651e

              SHA256

              aeea2729695ef4214b4a33a191d4c474e4d01dd2b920acf053a1222cdaa3c61a

              SHA512

              668e8461b7e50b711006ed839306e75079e3e0a902cc4c2db5795e9e059ffee534df202fca7e6bd1f8c5403b0e19f4ea14718b00669598dfb6070555cd4f13dc