Analysis

  • max time kernel
    2320082s
  • max time network
    174s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    20-12-2023 00:41

General

  • Target

    75d2d79b1d12dac249c5f7a07e58c1a08f11ae864320b49ba370f39784c3ffc1.apk

  • Size

    8.5MB

  • MD5

    25183939ed83048bff87d01e30c07b64

  • SHA1

    87a115f21b63780419c60d5e9e01126662bb5955

  • SHA256

    75d2d79b1d12dac249c5f7a07e58c1a08f11ae864320b49ba370f39784c3ffc1

  • SHA512

    3cb513df958a9425c5a57780e63360dbea2da67b5d0f19738013a52d8e9398755c8358086865455d3c70f81426a0704abe5d9cbf666151bb568a2cd6e8e57f4b

  • SSDEEP

    196608:tC4odgvDlcG5WgSe37XSOwXAaduJEX73Atai1C39uBzsX0iggj:vz2NDe3TiXAaduyL6S3Q4EZgj

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.tzj.debt
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4919
  • com.tzj.debt:push
    1⤵
      PID:5066

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.tzj.debt/app_crashrecord/1002

      Filesize

      512B

      MD5

      4ff9feea07afa1dc503b081c2412bc67

      SHA1

      545d7b874500416cc7e7e705bbdb0881efc4780d

      SHA256

      62dff12a5d06ae611e66a6c54c046f754916d49a5fbcf8245592486e420a895c

      SHA512

      ac38fb0fef05f687c0d060de718034c9566cba35b130d62fa910d518f9eff9fc4060b10a93e0719b6ad2e2f0c9c58a5a5a2f4460b4c6db8f5c1e50861fcb32ce

    • /data/data/com.tzj.debt/app_crashrecord/1002

      Filesize

      227B

      MD5

      42898eb9b8fc2a49fdba36493a27480d

      SHA1

      8ba23c870c2850e96bd02e99be9d4d262c5faabf

      SHA256

      be69d39af94fb0f1e01a8b21ab932e3d9855258d76792af8ce13e86911dcd570

      SHA512

      01e17a5aa87f1d3d7f6b6b650583b255cda52275be90549f0030d028e90b18a2a7712666dceab56ea7081bf5e2b1d94bb8166f31c720bbea542384e8a37af827

    • /data/data/com.tzj.debt/app_crashrecord/1002

      Filesize

      222B

      MD5

      3383cbe2fb21d4f1dc852dab92e50fac

      SHA1

      bb78e44aba5e023c36f3f4fe398a1df383ff8b11

      SHA256

      e4013b63f5982cbdce94212fe39ee9b42cb5b0df7554c6e1b8a741586dad4c1c

      SHA512

      b61b76fe5035c0b390a6c808d5a9dcc13225ed17fdde165244ce59599dfc2599d43cb5949ec49ddcbc246dd9ef56b81c2b8a6ded597a00d5ca9b44ba418d265a

    • /data/data/com.tzj.debt/app_crashrecord/1004

      Filesize

      222B

      MD5

      c3163f62a4756ae270a3946dd9d7f1d9

      SHA1

      c474ba9fcd40ea5ab9e62e657e34c1a413976668

      SHA256

      a53e159349c31854016616cf915050d9bbc1f924dfcd1874687724703c193458

      SHA512

      4a610e7d8173945995a6dae3cf3230f22604b672ff3a5dec256e7eba5fcc5a070827ad2ac643e8f272fd028f156e36ddd8cd77afe7bab99e0b25d3977729b542

    • /data/data/com.tzj.debt/app_crashrecord/1004

      Filesize

      227B

      MD5

      1b12e6c69222dfcf389ed647656e14ad

      SHA1

      0cbfb206441cf9ab81df693c1feecbba2a084e93

      SHA256

      af47db922832542637768c82c620fc4104c653c62d165fb16a3d0ab2a29b1307

      SHA512

      bd09366572145cfd4e9440bd79541d7e835ca0367af9c0bf0f79ec7806cc2d959a9fb83e0d5a72980583bf4052c26b52bc1922c6132e98d78d98f65c966f21c4

    • /data/data/com.tzj.debt/app_crashrecord/1004

      Filesize

      58B

      MD5

      0d210bfb2a0e1f1b4c082a6a0f79de07

      SHA1

      bb8ed9e364db79d1d9f2fcde3f15091893222faa

      SHA256

      988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

      SHA512

      536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

    • /data/data/com.tzj.debt/databases/UmengLocalNotificationStore.db

      Filesize

      28KB

      MD5

      000875e1a2106f82b0f0ead4e052747e

      SHA1

      5cf90b842489c3e12c9faef7ddbdf20d009a4291

      SHA256

      f338cd34759dc56064be9758b8f028b0013f70bb2e14baa81de9b1085842062c

      SHA512

      1dfdd9f99426e7592ba7958b5f37cd95c2cecd45bbcfd8823506718e5a48b73f691f5f5755618994d8fbe7118caf6c45fadecdac26763530b405be6fc39d4eba

    • /data/data/com.tzj.debt/databases/UmengLocalNotificationStore.db-journal

      Filesize

      512B

      MD5

      fcce40eb6cc997a4344eebc62d467b3a

      SHA1

      2b52e6014873e11cdfb7a77f3863a9c6462d4915

      SHA256

      2399af233c93ceaedbcf409605ddf4b3e1e5d4c1e395fc2d2e781ae589d23f87

      SHA512

      fed5c96cda06278d6df2b022f4b8ab225b337c0d94d15dab725f5b91ce8be245a93d47e0dfac9a95058b806a2d04ca15b50d07798cbb8b5661dbd35adb48a7fe

    • /data/data/com.tzj.debt/databases/UmengLocalNotificationStore.db-journal

      Filesize

      8KB

      MD5

      5137b4d026a51e94f54bac8135b010d1

      SHA1

      1fc8ceebb594d95ccab2be283cda48528b6d8435

      SHA256

      256889dacdfb783feb83453f3d3bd930bd4447e5f14cf780cfebb2b903711958

      SHA512

      9478969ae902aa34f9df4bf0b47797c32e84d1f0d13a44b119046ddff3bbce9ad7754818123a3ef21a37a946b5419f42645a8ed50c96313eec72fef989f9b9f6

    • /data/data/com.tzj.debt/databases/UmengLocalNotificationStore.db-journal

      Filesize

      8KB

      MD5

      3973429819cdfc641ba5c5348ec27c91

      SHA1

      b5f3fe0e86d23b9aebca3684b98ca025e440e31c

      SHA256

      aa457028aa0729b16223d56367e617d6e7935eca40b0c32d8fc10e605b91fadc

      SHA512

      57e5707890a551ff79508ec81909b19db87241026193da823ac440c178baa0849983d5395f14c99aff1c3723aabba774eb1872258fa2207e5301b64c18de692a

    • /data/data/com.tzj.debt/databases/bugly_db_

      Filesize

      12KB

      MD5

      ea628e04765adaf4238a5dcdff4bbd51

      SHA1

      a801947619ea8c368efe9c006a324dc6339ac60b

      SHA256

      885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4

      SHA512

      c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

    • /data/data/com.tzj.debt/databases/bugly_db_

      Filesize

      52KB

      MD5

      156d9e054deb45bb48b3e6da40fc4086

      SHA1

      99840d18da562c17761fd18b886cb00aaeeea2d3

      SHA256

      c1f5f0d776bf35dbbc3ea3bee1abbd33b94075f2666e4b0e060323031bebf967

      SHA512

      4f8d626994538ee6806e37de3fc4b3e498c4e9fce9c276da9b383fef0340ae4a06eab76b0715ce1adae6f0ac128136937c498a8f3c50bba3825792ba3daca106

    • /data/data/com.tzj.debt/databases/bugly_db_-journal

      Filesize

      8KB

      MD5

      9e50533c804121b0251d94ad044b9cdc

      SHA1

      2f1d9cc5587027700f325d9deff1e99062984abb

      SHA256

      49288c691f2a34ead6d6927542338ead4b351d6146bd8a9aa0207aa917e64930

      SHA512

      f2ba9d374166511d8958e61222cfc268da410aaffd248396885d0bf46f2d51667572128459092014ffc2130b257dcca1b2baa5a57866196bfac528621cbb6465

    • /data/data/com.tzj.debt/databases/bugly_db_-journal

      Filesize

      12KB

      MD5

      b737cb5990fb69eba7d9341d6b2e892f

      SHA1

      1559e39cff74b2849b3cf258e52e7c9bd758ee87

      SHA256

      028b4a77d0d184c911318f27d8c12f6e1f9fdb3baed6ae21cbbd468eba2f3b86

      SHA512

      90c9e13901e74ef9c16ce22cb9d723d6972ad3adebe97ca13423c5bb212794ca3f9a3c7cd4b484c56a132695c424c2481f0e5faf0bc8d14ee7f6023c5a7a8914

    • /data/data/com.tzj.debt/databases/bugly_db_-journal

      Filesize

      8KB

      MD5

      ff507e4563c03878eb478793b00e6d12

      SHA1

      79667830170c84bffc1631810b912bbabe396523

      SHA256

      17ef9134fc73ec970849e35536fb3d0c56f68d736af2d6b809f314893f1c4d85

      SHA512

      63370de905c1adfb8c893dbb45997c4dae7d5a9d22214756d4587b29ea7fea40663c00a4af82899007aafdf6ba295f9806598517edf45c6e12c2e613629d098f

    • /data/data/com.tzj.debt/databases/bugly_db_-journal

      Filesize

      512B

      MD5

      ca16d1e728c90b4a4f4c2441736a05d4

      SHA1

      666ee30a368ad4266a8199b8d7ad1ba2a8b56fa7

      SHA256

      d71477e51085c10d9b3607736bb4c0ecb33d30f4e5f4705a3ef98e4b68c4bd38

      SHA512

      a5ea6edf79b6c79860617ff48c8048e1bb7667134a7d528f55800fa8f9ca25adb6b51832169598e3b3e1b3b1ad88690fe47a3eac99ce63989f4eb954a37f4ba5

    • /data/data/com.tzj.debt/databases/bugly_db_-journal

      Filesize

      8KB

      MD5

      85af1f61b461b48f5c1a4c3b801ce6b6

      SHA1

      a8d394f590a5709babb0c44eb9ade64126eec255

      SHA256

      b3517a152036bb92b03870efe5c1def8390d631154826761c9525605e5b1a62a

      SHA512

      6812902810292268d4df0dbcd0b59bd1482caa4ac404bd14b700f0517473634ea73a4bf6b2edd6a0d35b599e2d50770acf823eaa1a8a6e5eaa1e601311251381

    • /data/data/com.tzj.debt/databases/bugly_db_-journal

      Filesize

      8KB

      MD5

      00fc4206120119a15126bde695f4b2f7

      SHA1

      7fd0563145b5f984859f1f75cd87d79384b6e732

      SHA256

      54317d587d89667b3c4923cbc87795cff839a5ece0055252a7e362dabf98a48a

      SHA512

      1542d2f15248f2c6968c82d0327e9da43136ae9529eb7ace8d7319b47733b9cc43f3d26edafb1f6c824d9617c7a6c9fd22ff9fd8593b31b5f6b96611cb0bad2f

    • /data/data/com.tzj.debt/databases/pri_wxop_tencent_analysis.db

      Filesize

      44KB

      MD5

      c3fe737dd72119d803372a8419d298a0

      SHA1

      8eed042ccdcce5bcab2734b12fb2d3f763b8f6c4

      SHA256

      d904dc24f52421231fa085948bd22608d4f5a10d6090ae9f78140a8e5c760bf7

      SHA512

      4c15800b06d515b5cef7a1d932f547aa40563544fdf40b995c18d16553b7a888fd11ffaf4753d8ca1f71815cdc9b8e89b774c52556d3509bb116f126c3443afb

    • /data/data/com.tzj.debt/databases/pri_wxop_tencent_analysis.db-journal

      Filesize

      512B

      MD5

      e4ed62b0d3f365e935264a52ae441620

      SHA1

      15ae977589e835e39d6d26b5d3909f0c6d1012a0

      SHA256

      15205939a1119c460929facbba2b76aa05e3b39a6acf378fdabbea038a1321cc

      SHA512

      08b1ad1c30641564465db951e00d467d1790cf234ddd2217190f284dca2dedadd75ae78923a289d8f5e69c07a1dbe050a26e8e339eab430290c418048999d31f

    • /data/data/com.tzj.debt/databases/pri_wxop_tencent_analysis.db-journal

      Filesize

      8KB

      MD5

      897c0e5d2749ceee4adaad43132f73b4

      SHA1

      4a8221e63ae5ed0019a508ef3c04e4a23a54daf3

      SHA256

      9f24d3e13304b7bb4d2690dde8412e4f981fbd0cc09fddbf1b71eefd73baf17c

      SHA512

      4f4870e299efb8652bc13acfd73489380bcec296d31ede776f4df1c5d3f70e86c58125bc92084df83cc3f8b68c20b0f6c1b7d41fc2bcc5247c7dd98736559746

    • /data/data/com.tzj.debt/databases/pri_wxop_tencent_analysis.db-journal

      Filesize

      8KB

      MD5

      6551b37aa88fdcd41bb493a8ee91d50b

      SHA1

      33b82fbd166adcf7c6cc9848b3d17b9142c71546

      SHA256

      66a4892f50737177d1bc49eaf8c2b7b076eca192c3180096f5dc25345988048d

      SHA512

      960a5e69e01a73425830bde6148f9713de42c75b688ba7f7d16060967d5865bf3e2ea30b0c967dc6919b13a5680f40e0834f804c4c5eb18db7094c5903ca0d7f

    • /data/data/com.tzj.debt/databases/wxop_tencent_analysis.db-journal

      Filesize

      512B

      MD5

      343427a52135b8d95641087d8399599c

      SHA1

      f49b811142e33b025e32ed48a8f8f64201da2a96

      SHA256

      a4122cf472f40bfd7ca82083507ba54d570327e8de649b1fb66ff7faa8a63907

      SHA512

      341ba44ce37b570e2aa5f24a9cdaee51674e9922b5b211a241817b3850f8bb35bcf3b7bba7c698649e441e8e017d1eb8f05cb95eb645a7825eb81c49cb120a46

    • /data/data/com.tzj.debt/databases/wxop_tencent_analysis.db-journal

      Filesize

      8KB

      MD5

      e2cd67073bb4ef9c61d295331601e89c

      SHA1

      8ce20773cbd28bbeb5d397f08da65c1113f701ab

      SHA256

      255c89dc4832a54a9a5c0d6c6f666df8fb6b5c6e315c93d346dd6c12552aadfe

      SHA512

      4f56bc50b00ca215617bdb9ecb747836e7f501ccbe8480f7a2ab2c00db61476029976ebf5f794d7c119ccabc506b6c0238cc9f0ddf428607071801d82f757a95

    • /data/data/com.tzj.debt/databases/wxop_tencent_analysis.db-journal

      Filesize

      8KB

      MD5

      8bcea156aa751296206983f9420614d0

      SHA1

      d8705ae3bbde28d57a5424a733d6ce41eed19e77

      SHA256

      08084e00c59d52df5da8278fec255f6c4098985f121f1ee25001509155f77c61

      SHA512

      15346eca79ac84b6af124fd2637b036b88b9aca316f77efc2bfb8ba05cc6fada078c57a623056666c87496e1bb21555c96c1f27471c43232675e9c5509a55ff5

    • /data/data/com.tzj.debt/databases/wxop_tencent_analysis.db-journal

      Filesize

      12KB

      MD5

      e2521b6a7e26ef91d3a891b842d4385e

      SHA1

      4e3c52dca7c083e3c3c1f676bff7541118736c01

      SHA256

      4010e69fb9359188d60c97324ad39311b2e549892dabacbc826c2c0aca792284

      SHA512

      8d7c0dfdf7fbe4dd8cfafb7c13ca4d1ad8730d4a0ac93dbbdc57c8cd5c2f48490de9f9e2fc1453eb7b4b63b5fb250c06a861c35b5273b4e7055e721ad5df88a9

    • /data/data/com.tzj.debt/databases/wxop_tencent_analysis.db-journal

      Filesize

      16KB

      MD5

      24dfef431c5209c655ee2513203d202e

      SHA1

      96c4abb63fbfe897c76c18b9df7f3fedb33d59ce

      SHA256

      1c8cf8e6c0a229ef695ee80c18afaf3e938a75d2c4dbc183c43109b92ab5dae2

      SHA512

      10b74b13469bf18a4ba8784159431a4139b5523886868561ac1dbd5c677c86a687f99b71d96da3820537eafc8cefbafe1943199b4b6b7eb117e3598ab2f66d5d

    • /data/data/com.tzj.debt/databases/wxop_tencent_analysis.db-journal

      Filesize

      16KB

      MD5

      da2af7a8f56465b95de9a394343e0498

      SHA1

      bd074e1005f724d45a0d47450588406b95ccd488

      SHA256

      e4ac2ccd1d8b15d6c481f78c538368150ea8fb2d7fff676ac6aabecb6806d79a

      SHA512

      1d02b2609d3083e1c67fb668829ff637c3af611750c983cf959926d1810b0e16f40dd6f478120d78f1f3a5c8a23636d5eb69e5aa3bdbb2b9d8ac1b881a3b9bc7

    • /storage/emulated/0/.DataStorage/ContextData.xml

      Filesize

      28KB

      MD5

      a251ee32695f16443998dfcec41da80b

      SHA1

      d5ed7817dd454614cebfdee49c5c5edc93c45707

      SHA256

      06753980fc0e06130d2e809a4de89780d9ee7de997e6e6d6ca7656797edc7a78

      SHA512

      f85736265224b6b64a43d4f19801e53a5d8c3f582646946aae66ec5953208e3313c7b6646f0b1d09b2348a2fae9019482deed1a14750779a993bbd269bc2ab48

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      65B

      MD5

      9781ca003f10f8d0c9c1945b63fdca7f

      SHA1

      4156cf5dc8d71dbab734d25e5e1598b37a5456f4

      SHA256

      3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

      SHA512

      25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      111B

      MD5

      8fc3fb979f56a7f9b7db3e6c214952e4

      SHA1

      b486acfd0781d2f818531d7cae0f92850ffc7efe

      SHA256

      df49aa349576b31753b6e251f3473f5ff8cf90898289d2d120021c7998b1dd04

      SHA512

      95d5ebb42bf73253787c3101cf17414dcae538b91c7ce6517c2bcfc0713020d3ad61b2ff8f5dbce5e351552c1d546d4eadde65f07073b91db270ef541cf00de8

    • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

      Filesize

      512B

      MD5

      a07beedc623c3e5b93862419d71d4ed0

      SHA1

      9d406d8be17fb59994670146227809177858eebc

      SHA256

      2852ba4c8d9857e26d8986b6db410a6f8a83238c77986e59988deea088bb41ed

      SHA512

      9dbf7a87991ffbc9d6214bb39d4a238afe3f582f46f5c21baa681c0cf7d3a8a562741c2b1d1b99a3cd59f62d8806a501cc46295b506550ba95e2ef272fc32ae0

    • /storage/emulated/0/Android/data/com.tzj.debt/files/tbslog/tbslog.txt

      Filesize

      1KB

      MD5

      3d1ca8bf042893782d55c232f9a071df

      SHA1

      b8d063ca01b0c432f92dd3dbe42d652ccbc4496d

      SHA256

      d459608e582eb8fe9d1acc8c451175a333d8fd6e869f64307f40a3091cd254c9

      SHA512

      90389ada9b7cba322266761504f109061a56fd350303f70bc5c3e7877eb56e429b1773e3066b7c933ab36c044211c29fbe276697f97d057892200e1b6b311ba1