70897140f63f91b096c86742825199c3fd2a4432792730610394f0ecfdd45807

Analysis

max time kernel
2262004s
max time network
164s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
20-12-2023 00:02

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

70897140f63f91b096c86742825199c3fd2a4432792730610394f0ecfdd45807.apk
Size

2.5MB
MD5

04c2589dba3d5c35a8602e34eccc48a6
SHA1

202d05f4bf0202df5e818ce9bd845ccb72237c10
SHA256

70897140f63f91b096c86742825199c3fd2a4432792730610394f0ecfdd45807
SHA512

061250fee4687918f3564210bba7d6fb3802d214fe97e59081629c4ee922b0dda5c4cd38c4e3fe9f5cfeec7d1d2facb7c5e25e77ed1f3ca278b51a53e1cfcb8f
SSDEEP

49152:nUm23Ei2Lnu2S9xphxvrymYbg5EWBCkIannhfc3tBGAn2yf23IOYS/cDfpnQd:5238u2SkmYEKWHnhfc9HSWeD

Score

5^/10

evasion

Malware Config

Signatures

Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs

evasion

description	ioc	Process
Framework API call	android.hardware.SensorManager.registerListener	com.yxxinglin.xzid534567

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.yxxinglin.xzid534567

com.yxxinglin.xzid534567
1⤵
- Listens for changes in the sensor environment (might be used to detect emulation)
- Uses Crypto APIs (Might try to encrypt user data)
PID:4977

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.yxxinglin.xzid534567/databases/ua.db

Filesize
36KB

MD5
b7036131b84bdf2b66c67fde18d62308

SHA1
18b1e5a358d68c846495cab5cfef7c6679659093

SHA256
c2c0bc8842203ccf1665dbb5b3333b22ae5a6ae3ef8eafe83e7f43adf32d0295

SHA512
256bc83e1a516a58f5d1d024d27dad3c26723df0f96e0deca6baac86d84518000212570b06996a14bcbeadff05fed05125862aba2d4aa08c15a6999563dac067

Download Submit
/data/data/com.yxxinglin.xzid534567/databases/ua.db-journal

Filesize
512B

MD5
7de6c46e6fa32a6affe1d121bca22b3a

SHA1
0f551cebcba33cc18770f93630a41be0147d564a

SHA256
fb7014b6af473b0df13aa678ffffad9439dcf8d036009ec9c5761843a3c9315a

SHA512
ba4f377d16b65e3b25b051f2923cb11effc554ee0fe819c1a43f1640df6f3f5c79e071267af376ea88c8b289809afa46795b97e0008f59498ba88d8311a4df23

Download Submit
/data/data/com.yxxinglin.xzid534567/databases/ua.db-journal

Filesize
8KB

MD5
ea60c3456182311a5134c935c3050d8f

SHA1
ab3f2b9d489c73a54a5a1154b1a0853f2c2cd074

SHA256
046d3feeb248d81a4646f5dc87ccbd2eb7bc28a2c9e7cb8d9c7cb89d80b1b479

SHA512
a1218702f8dcfd1421d0e482bf51c2cfc0645e7d80a1c32410693115b5d4b8383c5eaff2c5b69506836f46e00ac2d3bd71fcd7276e739d8a65f65add15146757

Download Submit
/data/data/com.yxxinglin.xzid534567/databases/ua.db-journal

Filesize
8KB

MD5
aba03aee930ee153880b26a069c48569

SHA1
8a2143694d38cc20b8af574e0c74493ec71a1134

SHA256
62437dc0b5cb5c17197003c094f01651baaa6b4228b2367817ab6a9c0796381f

SHA512
29c9138ca648c2593481439148f9fe258ab076e8d2663754366a31c96222a8185f3c43161063a7bdb05b177ced2c5b905457293912535fc204db3203ffdc289e

Download Submit
/data/data/com.yxxinglin.xzid534567/files/.envelope/a==7.5.0&&1.0.0_1703068998395_envelope.log

Filesize
1KB

MD5
ec1926c7db196f3809ac3d237645feaa

SHA1
1041ba7444a8b0947e3fcec17cdfa4cf8978f778

SHA256
23e8df13d0f2c167f2b821d2a68e26dc9b79bc10917c5910b013fe2dcd1d4581

SHA512
1048292f1de0512c4e913e2ae3f8fccf7e40c487258141f7ad43b159ffa6681cda95758a5c12ac2bea062cb95fe3fe737749e6236d1fefba4d43df03b1877322

Download Submit
/data/data/com.yxxinglin.xzid534567/files/.imprint

Filesize
412B

MD5
891682c65b989b6632403e7b1dfb62b7

SHA1
b2f86f75ce01514f13e53514f85248738af06ffb

SHA256
6bb0607583a27e23cdbd80e52f25b87d0259083bca24b71f35c87e4bf03bf638

SHA512
948e7776afe3b4df43e81d8896ed8780a8da5d45dee9b70c388a67a58bc7046b09167a47aad6a5924ca8f6805dbcb84ee22c0666e0338bebb51d10fc50eac17f

Download Submit
/data/data/com.yxxinglin.xzid534567/files/.umeng/exchangeIdentity.json

Filesize
202B

MD5
fb3ad97a1606d812ea00b45d6fe8e1c1

SHA1
07cfbd2b966065655f80e9684f0bd7cf7c8dee62

SHA256
3905d780c9252dafca648fb8dc28876cf29c8e5160dbba61700046b91ff07c16

SHA512
98223cf1b16e03c63745e9688dbe29d57f65c3e4d2674148348373a4ec3231531181eaf98faf656fe388679dacca1cf567734716b137d43d34d54ef8f2afa2a0

Download Submit
/data/data/com.yxxinglin.xzid534567/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
8b0cea8a5b194b0b438120f537b4a814

SHA1
df2409cfc15c22eb297965fefc3398bd1760b61a

SHA256
a5996f78a186b5ee1e11c63cd92af30016fb29a1df246da93d9c8c7ffa1afc55

SHA512
8a638c8538b9aa81e2d445104a1d8cd3008c4f867769ca61410ae195df21119e122d4789b9331b1ef90a1ce4e9e92425ae8192a74d454266d636b691b4dd6026

Download Submit
/data/data/com.yxxinglin.xzid534567/files/exid.dat

Filesize
99B

MD5
9648e7281a39f45e7bdbdc164feb0bf3

SHA1
d15f08434746f02b4d8f4acb5db479016401c789

SHA256
8e4e027b6a16d876df61d3daa1236ae9d129f101978de234c536031fe3241526

SHA512
7f2bc8cb7baa56d59d574c448237082013dd6e04d1a49e2b297af3da55e26720618ce1ded2f3cb75960e95c1759a79172104b76096c8fe471dc63122fe610e93

Download Submit
/data/data/com.yxxinglin.xzid534567/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzAzMDY4OTkzNjEw

Filesize
1KB

MD5
c8344090d06f0ba59be4e9ae64526b37

SHA1
8a2d5c7a1098ff379ce24e61ca3fcc47ddafb9dc

SHA256
5c251ffb01ef8b0b498bdf732a6fbccaf13b0fe40201d8828a53fdbb038197cd

SHA512
61d46929681da9dd4fa09c9c5c34464fe875422faaf4fd29dd0a82e96a4d8228f8bc452d18a560f93231ac9bd9a015b211a496faaaca752ab78ff1ee9dbaa915

Download Submit
/data/data/com.yxxinglin.xzid534567/files/stateless/dW1weF9pbnRlcm5hbA== /dW1weF9pbnRlcm5hbF8xNzAzMDY5MDIzODM3

Filesize
1KB

MD5
4c69fcd079c665b0df5a7a9d9d1639ee

SHA1
1997cbaef218a1a257aac59dc241edb5c8907e0f

SHA256
c64c169c88fdd1a0acb5380ca3afa41b211af7eb2653533c25ca7bfb518a1bfc

SHA512
e1667d85164ff664c9a8a9cf1305023b6453ce5e7ab7918789bf4231c1948f97f5fbe572ad071314c7e679106cdae160251c9e707471cff1b8048c28438c3129

Download Submit
/data/data/com.yxxinglin.xzid534567/files/umeng_it.cache

Filesize
348B

MD5
1ce733a436d58e3cff998b4c176f37d3

SHA1
a6959ad67787ff23cda74a316242516c97e56e6c

SHA256
b2a15b21ac97b5af5110817dde46091024e561cf6156841a20354b683a12a58f

SHA512
7a87875f20465ee3efa15cb98cf9943842d1f3ae3a9c6f99a88a5f95c8d92aadfc6b98288e5821fda88dfbdae6650c88071a8963ed6879debd721aff0eab2934

Download Submit
/data/data/com.yxxinglin.xzid534567/files/umeng_it.cache

Filesize
177B

MD5
565f450a677cddf788d6750331cd1d91

SHA1
960c4205d38c4219db91d169275afb84f4487519

SHA256
f2c87543bd7d6cecf448ee2d58bf0746f9eb058d5780be253fd051b855d98548

SHA512
a37bd2cace0f54cd83a603b6e9b10558aaf5acd1bcde9b40644158fba1408c8804969e33cd814399a9abd0738132d231cae019630c81d799352c8d77ea7a6c39

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads