Analysis

  • max time kernel
    2292303s
  • max time network
    158s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20-12-2023 00:34

General

  • Target

    7579e3b66ec1673d6a88060605eef5603227022fed1f329f1f714928d25cdc78.apk

  • Size

    3.8MB

  • MD5

    fd89832bdc242219c1ce3270a9adff5d

  • SHA1

    896b9dd5ceb3dd41fe0b6eea2d72d8ac845dd1a5

  • SHA256

    7579e3b66ec1673d6a88060605eef5603227022fed1f329f1f714928d25cdc78

  • SHA512

    a4a1cd9a3d063b5c232cc03a6914633548c6ddf8b5f7f5293cbfaa79d43aa861f819f017d982bc4b390d2fc95053959a8a343c43b77b24959628af6d8fd55e5d

  • SSDEEP

    98304:PpLQ3kr1opEHsvdc3YMqCJOARKShLH+pWITRxLaiLiZ5:PSkr1oP1c373eKLqWITRxzLiD

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.janmart.dms
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4218
    • /system/bin/sh -c getprop
      2⤵
        PID:4255
      • getprop
        2⤵
          PID:4255
        • /system/bin/sh -c type su
          2⤵
            PID:4314
        • com.janmart.dms:pushservice
          1⤵
          • Uses Crypto APIs (Might try to encrypt user data)
          PID:4278

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.janmart.dms/app_crashrecord/1002

          Filesize

          223B

          MD5

          09cccb0a624ba7bccefc0bde26e5c005

          SHA1

          d7d6a2ecb005dc116d609ec38420d7b95ad813e2

          SHA256

          74246574825b8dd37c7a6e81c6df9a45c2180e569ffacf61d91d5025bee1d1de

          SHA512

          89fb4473aabce9c158d5800bd8893a4a3f30ea5c6cec12724a36cf4040f5d9b17f2fddee93f6bbac680f57243e29108eb8c3c41b5f43d2cdfd6b63f446917e90

        • /data/data/com.janmart.dms/app_crashrecord/1002

          Filesize

          32KB

          MD5

          4e8994d4beda752e9d28c1d44f678185

          SHA1

          c358a00bc95882ef1d86ae8eceb90cc81a69ebae

          SHA256

          b8930c6adcfbcb867f6b5217c15eaa296c8f685e4273919b87994cc42a016611

          SHA512

          e19af09d8031e1a224e6da57bac1105a3987c59e06d9c81f8d6a1a18311b083fe525426cb96dc2f87632c8cbe3d18cd46e239bc7d548ada5126aeb0008ea0263

        • /data/data/com.janmart.dms/app_crashrecord/1002

          Filesize

          235B

          MD5

          f3276b5e2fb5840dd06fde383d26cbdf

          SHA1

          b7c6fbae10465040cc9fa56a4270aac9fca916ec

          SHA256

          be94f0a3efb9620220c6dbd82e7a2d62ecabdf329ce52fa7c8809159bb0a7a2a

          SHA512

          25693349884375c838933f305711002d5d54bedec1de1dedee9de77a0a80c86a58bd3e1ebff1942b4be3fa5b563b45e1aac0aefc5beae527132fa955232eb2ee

        • /data/data/com.janmart.dms/app_crashrecord/1004

          Filesize

          223B

          MD5

          8ca23142ea1e7ca7603e217d30d3ef35

          SHA1

          066f082529e5c5c4747651a58ac9d18d29f2874f

          SHA256

          de929054ee2a517ad78784b78df090316e209fbafcf50f8ebd24c69ba2139eb5

          SHA512

          1acf621d84159d50e61e815b6a26b717d919c8364b552f13d4dde56d7d3ec86fa29221aa88152e17f3940437f08a96f1532dfc6e01bd7b650e848ab4fd408f84

        • /data/data/com.janmart.dms/app_crashrecord/1004

          Filesize

          223B

          MD5

          db3d970d909f46ef040f35460a464276

          SHA1

          0720978eb79395b4b3502d0c9c9326dd08b350cf

          SHA256

          db79283b3fc1789270b72c4451f86a53f7d077e01c820e09da663cd540a59daa

          SHA512

          3716fad2293dc328d3a1e978a3fdbf80ae643cc1f80cac422438c6e0d417e75e7c579560c093849caefe45c0fbd4fd43fcc7f18afb54ad735eaa1f624b5858db

        • /data/data/com.janmart.dms/app_crashrecord/1004

          Filesize

          4KB

          MD5

          8902c0715657cb51bd47b4ea59eb24b9

          SHA1

          38d2253ef6286a2a0b13b689fbfd5cd3ce648e83

          SHA256

          f0b4145cad51304b3c7ba954a73ddb5426ea612b994eeb7459e07f71d291f920

          SHA512

          9c3fb04ca30a93d25a1ef2325343761b80d6016b50429dbb517b730438332f9defaa592aad5366a1303d3f61264e601f40c655514d458d80ed2d16534fa8756f

        • /data/data/com.janmart.dms/app_crashrecord/1004

          Filesize

          58B

          MD5

          0d210bfb2a0e1f1b4c082a6a0f79de07

          SHA1

          bb8ed9e364db79d1d9f2fcde3f15091893222faa

          SHA256

          988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

          SHA512

          536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

        • /data/data/com.janmart.dms/databases/bugly_db_

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/data/com.janmart.dms/databases/bugly_db_-journal

          Filesize

          512B

          MD5

          61969e4eddebfa57b7280c01ae26d293

          SHA1

          d2b7044a774b387fa7e019f77b52470119487930

          SHA256

          d71e61d47ca59c1a8b8524ff9979fb91c34522615bb765f6e20d3fcab6db68de

          SHA512

          d15428e68313e2170d65f1df0f7666db71ba10fe6836dcc01832d8f1c6f64c93d1abaf8a570a16380f1dc92d12c84492f7c80c0ee0c9e9b0b10eb07bf71d5d5c

        • /data/data/com.janmart.dms/databases/bugly_db_-shm

          Filesize

          28KB

          MD5

          cf845a781c107ec1346e849c9dd1b7e8

          SHA1

          b44ccc7f7d519352422e59ee8b0bdbac881768a7

          SHA256

          18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

          SHA512

          4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

        • /data/data/com.janmart.dms/databases/bugly_db_-wal

          Filesize

          76KB

          MD5

          88cb4b6790e42fed6c0232039432a8ea

          SHA1

          25179f825fe1e9b1aeb0e3447daeaa0676bcc22a

          SHA256

          4f71926a991d0f500d893abc2e28822c996be8fc82488d2de2ed8b1e27a86833

          SHA512

          99cfc1edf7c3e0afb6701989707d6069f0708c934034ac171adfd2d029b1f2e70965214295a331f5a4cea5aec847973d2057354d00153f958026a051146b6507

        • /data/data/com.janmart.dms/databases/bugly_db_-wal

          Filesize

          28KB

          MD5

          3ae23e57903c4a347d2c03f4bc8ff008

          SHA1

          97cf2498dce1aa62339f1670d04a21e69bc5b953

          SHA256

          412278825a13f960dc1962f1b2e3f994f7e939614c73ddbce32e6edb67de7124

          SHA512

          d03a284989c3c2ba41d74db13268514e041e5be9727b79a28215f5708f72b55f416cf46b1156b3dd6baf7a5581b9381d3dd38b35c1b938bac2b8f9e1962e8b55

        • /data/data/com.janmart.dms/databases/pushsdk.db-journal

          Filesize

          512B

          MD5

          627e9e2cb660ba18e7546f219e6fd1f2

          SHA1

          ea8e8e280dc3e886f8a727bcbac249e16cbdd444

          SHA256

          a4503639ef917419ae02b46c890aec7208143d6e4435b3d90ce04f5d4451e6ef

          SHA512

          becdd11e1b3734efc45b3e849431d9af830c1723c2e4d4a91a4c9c0e5020ba4ce3ad0725ecc54009d82f6de3273820e32115445876ca68bd9d0c056da8a1a9ff

        • /data/data/com.janmart.dms/databases/pushsdk.db-wal

          Filesize

          16KB

          MD5

          c66e33ce806ad45e26896cb92a093f18

          SHA1

          c71553975d71bd263936a2b947421c12d2010f6c

          SHA256

          ebdd88ca562f7bf2389be622156a1c8ade354f808f8cdf2220de488143871ba7

          SHA512

          37ebdfaff730cdb1994716528f32431111e42cb4adb5eef1696b70f6cb8698704ff90f157a7eac1ae56c9a4c1d4d753a2314a3d5b224c25dc580d6baa9dfd6e0

        • /data/data/com.janmart.dms/files/init_c1.pid

          Filesize

          14B

          MD5

          9aa3997cb04035cca54f0f12daa2ea37

          SHA1

          3aeea5f4eb4b6f230dc28ceee458d7e6026dcace

          SHA256

          46216fccf11433ac8c4f63c2bd8f7e14774be6b050d48b14577dcdae3084a1e3

          SHA512

          b37cc8b3a95d87e4e43115d9e88c178308bf7867c7a1d4c5e6d8df3c306c99430c5a7b74feb6791d6ec2ace6920f754df8b6c19ed6343f68067364d3d069da5d

        • /storage/emulated/0/libs/com.janmart.dms.bin

          Filesize

          72B

          MD5

          eb78feaa2f5c3cdde7a579e1f2150c45

          SHA1

          353b54dcd1e668f356c8aa2a6278b70420720f51

          SHA256

          d2e0491d1345bd3771891cda4e1ec1d4fc29507bcddd9fa1d552d0a023845f47

          SHA512

          7a75a06f643e3336229b0f15edf5f019ab9557fbe6142da512997269076a12d60ef80120f250aaba63f48b646761266ba61ceef989e2c1f101bf5466cc860aae