75853099f78cb092186db90055cc3eb473e2d0d319391126c9b5d1b3687f30a7

Analysis

max time kernel
2347233s
max time network
134s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
20/12/2023, 00:36

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

webzhuan.apk
Size

5.3MB
MD5

da356910e3842ccc3612aa39ee056c6b
SHA1

5be1032773e16a6b8d525bb60059d24998f43bfb
SHA256

7e49b333f657f457af46ed230c5dfea335eba16f83dab0173f07dae6ed671fc0
SHA512

4eebe45d55a3d45917cc43a2b708414a9f052ad66908ca47ff1f91e71b0e227e3efd02e03135b8a1de676bd297ceead87acdc43ae81dc20329afaf3211980daf
SSDEEP

98304:m/jRBH35pojcTK0Hx7MV+f4lQKwLejoe49MRqT/AVbbgGfzJuzne3EgpfrqfT:S1135ucu0HxIcwGhgESRYOv9uq3EJT

Score

4^/10

Malware Config

Signatures

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.mobile.webzhuan

com.mobile.webzhuan
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4264
- cat /sys/class/net/wlan0/address
  2⤵
  PID:4314

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.mobile.webzhuan/databases/bmob_provider.db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.mobile.webzhuan/databases/bmob_provider.db-journal

Filesize
512B

MD5
dcf14afc8d31f0b7dcbac27456281f16

SHA1
c4356ea6d47f07413b7ec437fa3a152d454293f1

SHA256
01903417152a075bcc58c084a13a6d716be3d6374d0ff3c77dc5bc84b7ca473f

SHA512
6bc340bf6e364334c2307a9e2b284f4b22e012afe1f8e6a8c64cddc56bb34cf570f2bb38eed56005ff88655569dcd69d66ef789e78b1662265400d5618d2b898

Download Submit
/data/data/com.mobile.webzhuan/databases/bmob_provider.db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.mobile.webzhuan/databases/bmob_provider.db-wal

Filesize
28KB

MD5
40591848daf4b5a5a114bd1510e1440a

SHA1
4ae0f9e73333ab1d783364135802ca710d3a7a0e

SHA256
43afafa1809feab5f831732f0617c898d32c8d937b739c9d2524bab7a65ca565

SHA512
e209ec5dfc8be9a016386d420708f771891b15f4d5fc540e8fb4b541aa14652c236b7ebae5a9e3ed4476d2ded895559efa099d017c18922e29259c0cdc61c0c3

Download Submit
/storage/emulated/0/Android/data/.mn_410185822

Filesize
130B

MD5
f321656a466363e5192773d92000e401

SHA1
3a6abe9be1a6f4deffaa98fd27f3449c888d3c4a

SHA256
53efd5207de6ed80429ec3c7865eed2b64023a0ed66e0fd29e7f45b708a1751c

SHA512
fcf6884bf5ce8d10b3a3dd461fad96cb6cf0bc4129e01788de112551230fbc4d8ea6961b04411d1c7816e248437c4560277069d9c544e5450612abc0e2c0171d

Download Submit
/storage/emulated/0/Mob/comm/.di

Filesize
57B

MD5
70a42cba408700f9a6c01c7941a8829e

SHA1
eab01cc2c0671538795fb0b1146017dc099d0984

SHA256
499576707ce2623293166979e59c832be5b8636c64ad39aa63ebcf961910c35f

SHA512
8900d4dc8eed0430babbacb72942401bd22ef7fe5430cad90d3ce0c2c53010220d666aa0e2eb1026f3ec81d574c7fa12585b49222a5f15b01637f6ba134fe70c

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads