Analysis

  • max time kernel
    2341695s
  • max time network
    155s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20/12/2023, 00:28

General

  • Target

    751401beea4621fbfe8d24e9be72bd30631f4ed1c3b155712fe36447eb6449da.apk

  • Size

    10.7MB

  • MD5

    265e7615b4f56b0a614d95a58e910ef2

  • SHA1

    41a283e8079f030d3483ce616d4802a0a3ed2da4

  • SHA256

    751401beea4621fbfe8d24e9be72bd30631f4ed1c3b155712fe36447eb6449da

  • SHA512

    238ecdbaea0b0fc2a5b29069660213eee8d6c53a838f3f69a68341247d0bec6fceda6954a8d2c5d9bd117e295138ff2b9f0d85c858d39f8ee5da21de527e5eab

  • SSDEEP

    196608:yXO4eJ2ae4O0LudJ15oodgXmtnszl/kvFZW7GBEqxChBkAY:yXO4eJ2ai06LvIcNZW7GBE8ChKAY

Score
7/10

Malware Config

Signatures

  • Checks Android system properties for emulator presence. 2 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.sky.xiaoqiang
    1⤵
    • Checks Android system properties for emulator presence.
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4254

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.sky.xiaoqiang/databases/NMrY528p-journal

          Filesize

          512B

          MD5

          dccd74c3403d94f0c33e03bbe6d0f4cc

          SHA1

          f0b013020d7f33d1292189c7d6baeb718d3934b7

          SHA256

          fb1f4a53a69e669575c3d76aab347060e125af8376c125f861e80dd76b31cebf

          SHA512

          d20464344579e140187d31b072756bd5fd22dac82cf092e6eb0605fd86146d7ac03c25058fa4c7c2ebf3f73fa2244524eacefab13e6ff72f8f91b9a1e1fd0572

        • /data/data/com.sky.xiaoqiang/databases/NMrY528p-wal

          Filesize

          16KB

          MD5

          e123a74a82f0e53a1d033c5e09a735a2

          SHA1

          7dbc5da62865c28d03cd44e6f4791bb68d4300f5

          SHA256

          80ba08646f07c288265e9b21572f150d9ccdc5ae8e3c94c3eb3d56c7d0937e9a

          SHA512

          ef0516b9ac6d79d8092602490e3a85e8a655d824b12501d2fc04b3b933430bcbd17184c5e084e89b8192df225ca7d00e1dc9b7a223f97846fc064dffc1c05b31

        • /data/data/com.sky.xiaoqiang/databases/NMrY528p-wal

          Filesize

          12KB

          MD5

          4ae04b55d2ac811b8493fd1501dba662

          SHA1

          4cbc7051495aa9649baf00591beceddad4d08c63

          SHA256

          4da71dba462dc92e078450533828dc59a7119ea527dacf9c8dbdb1e79c415442

          SHA512

          eb22d33e1b06c88b704360a3e6e74a5c24ee79445c3877419b2c9e9a3fc1f08ef9858b04177cb41e8c2c026da8345435918fb4a6687adee1eb21fa2e9cb681f6

        • /data/data/com.sky.xiaoqiang/databases/NMrY528poBxc-journal

          Filesize

          512B

          MD5

          c8110435c3d7d0baea590cd415f998f4

          SHA1

          325e5ad64de3d61832b949620d996523ec1ba4ec

          SHA256

          6399d9476033214dd92bae4a2e96736ff0fe3d7eecb40115e52aadb7ce141fc5

          SHA512

          796b95a195a0fad4d4873897a1fb416cf9aecc120f1bed90a9e5d2c6b034f1b1c988d2e255b61b00a9c084fb775239baeb3ed1a0fbe395d61ce74b6248464dc6

        • /data/data/com.sky.xiaoqiang/databases/NMrY528poBxc-wal

          Filesize

          36KB

          MD5

          4e46748497ef4821aff3312682e398f4

          SHA1

          49f357239416655798594e17c4076dad0a43a577

          SHA256

          5c8b4f66e7721295e8efacffe7a34e89189c447ad79532ab45536609caa2fe34

          SHA512

          5ff49694a8bcae96a227bf15631c944988b2bc487777e254d7b83de587a68999b0d048f6b8864088f637d9336ce53e700014274a682bf27e22647e7b10e3f74b

        • /data/data/com.sky.xiaoqiang/databases/P15pKIjsm64m

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/data/com.sky.xiaoqiang/databases/P15pKIjsm64m-journal

          Filesize

          512B

          MD5

          d80e0c816799899e9c3ccb6845ff213f

          SHA1

          1b3d7a944a33ff0806c2df7f4148be0374adcfa2

          SHA256

          1adb40cfc6f73eba7e8828eef0a628de850fc55e4af0f4d2cebb3cfccf735e1a

          SHA512

          39755ab67b727785981807c4449872a410db51e27923e60852e478bb17365218434f3076b16798bc5944f2791633d72df145fe91b13d376be884a8b4acfc75e5

        • /data/data/com.sky.xiaoqiang/databases/P15pKIjsm64m-wal

          Filesize

          36KB

          MD5

          2963316b0ffc156555222067dfccb5de

          SHA1

          307661ca946fceec4775764c381c253499bb2624

          SHA256

          e6b42162047776b2245e2101df8f2bb412515469c0ba08e5279f1cc8858741d1

          SHA512

          6dba0e235639f50969bd7c37758277e6161cdd0d7157a1a2ef4465d0be9702757890bbcd2ab1c2493bc334d231bcdb83f9935985fab8f17c9aa0f69e6af124ee

        • /data/data/com.sky.xiaoqiang/databases/T1oX0rhhuXWt-journal

          Filesize

          512B

          MD5

          3c7edede07caef05c9109b42eda1c641

          SHA1

          ef19c03e0667906735e01965a9204e2e9ccea017

          SHA256

          0382d8447883e84e2dc6a7f51ec651aaf0c652a7c7369c9511f21f97d001fca6

          SHA512

          810e56e5cf504b91089143de5d20dd5dc45a91d093032359e778b4461cb32661c67ec3b91b6f0b2e2e9725ff08c14dc453941f1d64cb04f9324c29345a378341

        • /data/data/com.sky.xiaoqiang/databases/T1oX0rhhuXWt-wal

          Filesize

          36KB

          MD5

          f70286f28f0451d3c2584eae775f080c

          SHA1

          b4680f0972add627c8f136d02bf07ce00e1ab510

          SHA256

          fcfe5b295c244b2b7ab8cb6326f2d089eef99e4967a1fe8fde5fb4390b989927

          SHA512

          6665303c0262c2ca589f7ee85b5486e1ddbfbe360583dd65b98b0ffaa28e1162305e6b8aca1b495207bd7732cdf9e2c49482b3b9eaf1b9e7c68b8d8cfdfd0a88

        • /data/data/com.sky.xiaoqiang/databases/jqIqJYOT3JpT

          Filesize

          24KB

          MD5

          9c37108c041a67252d4fb5059436eb9f

          SHA1

          f65bdd652f9b2a098993d2aca0be2578e8eed20a

          SHA256

          f4a3fc85419d0e98a0312af88fdeadf75bd9969460820043559d6ee45e7ace55

          SHA512

          d7b92b0b4900439a28552339cf7e80e2937887c7de796e10df0bec393d136bdcdeae47991133a5c144547ac2ffe484b9c99e60280246858f6ae9b8529c5d8548

        • /data/data/com.sky.xiaoqiang/databases/jqIqJYOT3JpT-journal

          Filesize

          512B

          MD5

          f6ad36481db8ac87b05799abeb852486

          SHA1

          e8686594400737f9142ff691d9d3e71499048a5f

          SHA256

          48e546fc9979ad4ff0f391a88b98d2180943102c20f0959d019e8457c9066190

          SHA512

          2cabafe55657aac3244b6885e533a25e772d72c38a568ad804f852a5ce96f2f3ad2b2dcd560149e21039f7306040985240767b2162d0020e068162f0c17ece03

        • /data/data/com.sky.xiaoqiang/databases/jqIqJYOT3JpT-shm

          Filesize

          4KB

          MD5

          620f0b67a91f7f74151bc5be745b7110

          SHA1

          1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d

          SHA256

          ad7facb2586fc6e966c004d7d1d16b024f5805ff7cb47c7a85dabd8b48892ca7

          SHA512

          2d23913d3759ef01704a86b4bee3ac8a29002313ecc98a7424425a78170f219577822fd77e4ae96313547696ad7d5949b58e12d5063ef2ee063b595740a3a12d

        • /data/data/com.sky.xiaoqiang/databases/jqIqJYOT3JpT-wal

          Filesize

          36KB

          MD5

          0896b3c70ce1f710dc8341a5f5c05808

          SHA1

          7f977b5592ee795fe8fb6a42bce17986cd46fdad

          SHA256

          96f706f0648b5cc75dfae01f26ab9cd26bc589a558113066d25da301e09390ab

          SHA512

          be022866ff6bcfc968b670275cc73d1335d0a1f01280c46197d3b713cf3542dadbc0ce96fe972f6820623b873b78bb0589712779f859e3e3bbd963294d604b1e

        • /data/data/com.sky.xiaoqiang/databases/sharesdk.db-journal

          Filesize

          512B

          MD5

          bf9ee6083bca130edc2a683be5280323

          SHA1

          66ca346f5b75b008591876b90d07048d8461ec7e

          SHA256

          a8870a41d905e5f751b137c3ae6ef740087c8ef0e7892dea588b57e56ddfcc51

          SHA512

          e0e0db0c0d8a20c7663e852359c407224a5f8df3c1ff2d428656c9d27541288efd5b447986b3348adda857616de2a05b1ddd23472787134a5798c05412b78a81

        • /data/data/com.sky.xiaoqiang/databases/sharesdk.db-wal

          Filesize

          27KB

          MD5

          e139667f573ad411ee121b5fafabb34d

          SHA1

          f6712ae135c53448d4a94743faab938cc79742d3

          SHA256

          48b2a2b52e4bfc6902b8d60978c32d1835078eb5eb5292a8a9f38ea7bfdc66ba

          SHA512

          1e231a4922ad5e209b674038075c0276a031bb70318815b60e1ba6e7f8762f0627ac9f0353c8207426dd13734a796f456a7fac9a08cf032d20a7cbb9552bcc17

        • /data/data/com.sky.xiaoqiang/databases/wsUL1uCdKvjD

          Filesize

          24KB

          MD5

          59413190ea19211285b5c0fed44c19c8

          SHA1

          ee67b7590047c3c17309f6e6eed48556aabe4c92

          SHA256

          3511c95f09883c65de19c3be645faa921aa3baa92d21b5c284133da349158e2d

          SHA512

          6a65fc51ea3e163ed1da558c2f4e911857ab4d3b15bc27135a4639e8fed9022fd6d89b4dd39a39b3bcc69060d7565f68ef23bcde4e622a2dd823e9fd217d314e

        • /data/data/com.sky.xiaoqiang/databases/wsUL1uCdKvjD-journal

          Filesize

          512B

          MD5

          a81dd4c5753c7ea777c7529ae573caf5

          SHA1

          28274ab4d99d09f23f2d04bb2821ebfd76788c05

          SHA256

          5927e7c1b9a45b2e2e39a76a704e9027706e4a4476409fe62ac58c4377a4306d

          SHA512

          619da84dd4b22e759e9cde9197d566aba64d660db8174a395c1f1abdba459716fc0b99fbaad5dd4c0cf6c85dc5158b0e8e41f63a0e9e2c585bddb0d5d35ae150

        • /data/data/com.sky.xiaoqiang/databases/wsUL1uCdKvjD-shm

          Filesize

          28KB

          MD5

          cf845a781c107ec1346e849c9dd1b7e8

          SHA1

          b44ccc7f7d519352422e59ee8b0bdbac881768a7

          SHA256

          18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

          SHA512

          4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

        • /data/data/com.sky.xiaoqiang/databases/wsUL1uCdKvjD-wal

          Filesize

          36KB

          MD5

          3c3bad7bdb70cf1695ee2d36b6b4c881

          SHA1

          b40ade2595ec55d33be1ac96b75f5830216643b7

          SHA256

          a7f16a9f960c1d6523d2d4ab2c60169d0a6ac902763af37779b839b66d8755c7

          SHA512

          68bbca460b6d56978aebbd2bef0b47d127390b9b54d0d3de5a0feb50b55c7aef5bd12f090ab3f7f6ef6918cd219c13d7a7069428eff1b35bbaba839e5e45a786

        • /data/data/com.sky.xiaoqiang/files/12_21_debug.log

          Filesize

          53B

          MD5

          d9480f71c33e5d051b0dd0843fd725f7

          SHA1

          ee75e395823192f0092e35846bdc9fa9979d4bc6

          SHA256

          65e3be34840a1e7617b5925ce43b46ea552fdfda764dbba711103acae4447fa9

          SHA512

          0db130ffd930c5c70332797fe0f85de5dd86929d24eae07aca90b2a5f0696f72eaf531ecf0467e102724420a5ed50851ff2e5582f418937b159f5b56c8139097

        • /data/data/com.sky.xiaoqiang/files/12_21_debug.log

          Filesize

          103B

          MD5

          fb3e26e2ea9a8d8f5f84dba70b57b0da

          SHA1

          37bce6ec58ef9e51655f9d7811528c16c03b7663

          SHA256

          d45d0b6e1d4305e6ef07748da2aa9494c0980ea0cd11791bd1596f690be85720

          SHA512

          ab1677cb324db16803f02c3c682efcc86597c0edc9936a11b48671be94cfa7cd76875dc578a9fd8d85fb5eacdb0fbe3a7807ae4f9c91227fe0033ee2b95cf913

        • /data/data/com.sky.xiaoqiang/files/12_21_debug.log

          Filesize

          157B

          MD5

          f5f0d23258b8880fce7fa5a892f50795

          SHA1

          ced4d56fe23a19637c51bf5eef48545ac4d987fc

          SHA256

          ecc425f6ce7ac5c1e50def0d9ed9b762e21875fef0c4ec246a27d708e8f3a5d2

          SHA512

          89e64f10ece5ac12947fd6e178c21784b41b27f26810608b30bcee89bddb793dfa61f539767a5a0685693a7c545774efc3270cb9543d77c1f5195a3f09ae5dcf

        • /data/data/com.sky.xiaoqiang/files/mobclick_agent_cached_com.sky.xiaoqiang

          Filesize

          196B

          MD5

          8b9d10aa618d5270482eb34c9109aeb1

          SHA1

          cebbfdc2283e177ce71b18a58d4746dd8608c023

          SHA256

          2b6c703afabf4ad3f5b1cdf76fe5690914df5d1f2b4508bc807631d570d2e1a6

          SHA512

          225225ca3f61f2bb97875c2220d0cd1029acf17fee110205e370c3a5fc212dbb9af61337b62918d06851a714a35117aa851b70814a476c3029648cc35e95061b

        • /storage/emulated/0/Android/data/.dataycache/i42d45df023jnkdd93la483f9xGFKXI

          Filesize

          26B

          MD5

          3c33e392d0bcb15294b1ad95f8c63ebb

          SHA1

          c421f448ddb928f9dc78f160cfb642b12cca03dd

          SHA256

          ec795dcf5ce8a6cbccc2078f0a90725cc74b4aaabca0a9535e99d752235d0e81

          SHA512

          1790a4d4303d805dfa8a6a3a5eaace03abe0cee255fc62b603c283901e46fedb36bc3fe466fb34f0cb181d4221043133a061e498b8c433513f315791e51d121e

        • /storage/emulated/0/Android/data/.dataycache/m929bb76e8110d1a70260af57b446ebc

          Filesize

          22B

          MD5

          b59f7f521008e55e9592aafa4ce3ae36

          SHA1

          3696a3e25428639f58fdca352138b57cd796589d

          SHA256

          00dae9faab5a999144141684ab00fe0d34136bf967b8be2573ef1027e6f3bc72

          SHA512

          aaf6505afd366e58af9e9e9811e67f7784e7d1258e962d81b9e83bd8e8b507bd840644364f34bfd2a21537efc71c8d00e460810ef73ffe6c258e7f83498e5bb4

        • /storage/emulated/0/Android/data/.dataycache/s92TjjdfoP2n3o9dfji2l9s1olkjf0p

          Filesize

          26B

          MD5

          95058d3fa3076e4fdbc058e18d566e0d

          SHA1

          f6082f93a9c0ce4565c1228e61099d1b3b4f1c6b

          SHA256

          a079ab1b81730bd46de6049424ff404e37db84d47c48c5dae619911c9647f299

          SHA512

          2bee197091f0e83989094b48f1fbcda3d9af8f9f5bdeb2716f3d659f99e97167e3863d1cd2e4b5e1537b866860ba016f4d7f9005e03e3f2d0c1dc3b2a0b264bf

        • /storage/emulated/0/ShareSDK/.dk

          Filesize

          107B

          MD5

          c9383021bd97affc44be4db7018c4d7b

          SHA1

          7e680409d1c86e35149bebc22f2cf8c484f0d23e

          SHA256

          b7b7e032170e3190a84359e5c37adede1d58b6bf4c455ef0c01f73335709bb65

          SHA512

          7303f068da97319891e2d25c1c737035f1cfdc365d75d954102b612000e54d7e2b5dfafe10bdf909563e2b46ec3ff9e546423bff6f0aa9496880eab1c1c36a81

        • /storage/emulated/0/ktplay/d

          Filesize

          43B

          MD5

          8efa117491635a0ecd318aa8a236edbe

          SHA1

          b63b3367a6e44d8d98140a8953d2ba59b242345c

          SHA256

          52299d79c0405fdc953c9658e2b160b191fffd6d5ee648a255d20885c3f56a88

          SHA512

          7dcc706f5b85f2dcca481743d8cd6a492cc6f82989a788f4bc31adc2aec57186088ee30f00b7e4e7c1b035be5d0de7b9f820b76a645b764f000e0283d7a33544