Overview

overview

6

Static

static

6

77d5fede83...2a.apk

android-9-x86

4

gdtadv2.apk

android-9-x86

Analysis

  • max time kernel
    2365014s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20-12-2023 01:15

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    77d5fede839a13381c306ea36be8e1f464d188bf9f549d1c51b5e94bdc369a2a.apk

  • Size

    22.5MB

  • MD5

    6ebda1fe02d599f6d20b76432e709299

  • SHA1

    c8f8e8ecf717dd1394112adac6297010e65d0d07

  • SHA256

    77d5fede839a13381c306ea36be8e1f464d188bf9f549d1c51b5e94bdc369a2a

  • SHA512

    e09e895b39a4b126a5e6ac65443d7e4b55c4cc8a757e2b6ebf4b511af66eee11d9faf9adcb7c6a0e9f379009bbf86914eb61baec56943aa0f8b8d6deafad0ef7

  • SSDEEP

    393216:tds4P1OHA+wQrDPLmz7D+AlMkEaD8Eq4ZaRkgVuvtfW94Uh4etDBSs/qKb77JElR:tds4AbwQH6zn+5aDFq4MkgAiXhrBB7b8

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.lmiot.autotool
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4235
    • /system/bin/sh -c getprop ro.board.platform
      2⤵
        PID:4264
      • getprop ro.board.platform
        2⤵
          PID:4264
        • /system/bin/sh -c type su
          2⤵
            PID:4293
          • logcat -d -v threadtime
            2⤵
              PID:4318
            • logcat -d -v threadtime
              2⤵
                PID:4336
              • /system/bin/sh -c getprop ro.miui.ui.version.name
                2⤵
                  PID:4356
                • getprop ro.miui.ui.version.name
                  2⤵
                    PID:4356
                  • /system/bin/sh -c getprop ro.build.version.emui
                    2⤵
                      PID:4389
                    • getprop ro.build.version.emui
                      2⤵
                        PID:4389
                      • /system/bin/sh -c getprop ro.lenovo.series
                        2⤵
                          PID:4446
                        • getprop ro.lenovo.series
                          2⤵
                            PID:4446
                          • /system/bin/sh -c getprop ro.build.nubia.rom.name
                            2⤵
                              PID:4473
                            • getprop ro.build.nubia.rom.name
                              2⤵
                                PID:4473
                              • /system/bin/sh -c getprop ro.meizu.product.model
                                2⤵
                                  PID:4497
                                • getprop ro.meizu.product.model
                                  2⤵
                                    PID:4497
                                  • /system/bin/sh -c getprop ro.build.version.opporom
                                    2⤵
                                      PID:4522
                                    • getprop ro.build.version.opporom
                                      2⤵
                                        PID:4522
                                      • /system/bin/sh -c getprop ro.vivo.os.build.display.id
                                        2⤵
                                          PID:4546
                                        • getprop ro.vivo.os.build.display.id
                                          2⤵
                                            PID:4546
                                          • /system/bin/sh -c getprop ro.aa.romver
                                            2⤵
                                              PID:4580
                                            • getprop ro.aa.romver
                                              2⤵
                                                PID:4580
                                              • /system/bin/sh -c getprop ro.lewa.version
                                                2⤵
                                                  PID:4606
                                                • getprop ro.lewa.version
                                                  2⤵
                                                    PID:4606
                                                  • /system/bin/sh -c getprop ro.gn.gnromvernumber
                                                    2⤵
                                                      PID:4630
                                                    • getprop ro.gn.gnromvernumber
                                                      2⤵
                                                        PID:4630
                                                      • /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
                                                        2⤵
                                                          PID:4655
                                                        • getprop ro.build.tyd.kbstyle_version
                                                          2⤵
                                                            PID:4655
                                                          • /system/bin/sh -c getprop ro.build.fingerprint
                                                            2⤵
                                                              PID:4685
                                                            • getprop ro.build.fingerprint
                                                              2⤵
                                                                PID:4685
                                                              • /system/bin/sh -c getprop ro.build.rom.id
                                                                2⤵
                                                                  PID:4711
                                                                • getprop ro.build.rom.id
                                                                  2⤵
                                                                    PID:4711

                                                                Network

                                                                MITRE ATT&CK Matrix

                                                                Replay Monitor

                                                                Loading Replay Monitor...

                                                                Downloads

                                                                • /data/data/com.lmiot.autotool/databases/bugly_db_legu
                                                                  Filesize

                                                                  4KB

                                                                  MD5

                                                                  f2b4b0190b9f384ca885f0c8c9b14700

                                                                  SHA1

                                                                  934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                                                                  SHA256

                                                                  0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                                                                  SHA512

                                                                  ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

                                                                  Download Submit

                                                                • /data/data/com.lmiot.autotool/databases/bugly_db_legu-journal
                                                                  Filesize

                                                                  512B

                                                                  MD5

                                                                  2b93b78888e482cc1096840ad6668545

                                                                  SHA1

                                                                  b16f94ea4c02dbb77f45fd6b6dfc018787419d59

                                                                  SHA256

                                                                  3860cf1002805427a3e429e7152c4c2289d3b5fcd3945d858c08dad7ad23f13b

                                                                  SHA512

                                                                  a8a0f0c6b14403028c567ee974e92f686c26fb009ffeb82085409de32b804b92a913cc2f92ea413529b7b76904143c6519a58682a2cdeb85561bb64988331e29

                                                                  Download Submit

                                                                • /data/data/com.lmiot.autotool/databases/bugly_db_legu-shm
                                                                  Filesize

                                                                  28KB

                                                                  MD5

                                                                  cf845a781c107ec1346e849c9dd1b7e8

                                                                  SHA1

                                                                  b44ccc7f7d519352422e59ee8b0bdbac881768a7

                                                                  SHA256

                                                                  18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

                                                                  SHA512

                                                                  4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

                                                                  Download Submit

                                                                • /data/data/com.lmiot.autotool/databases/bugly_db_legu-wal
                                                                  Filesize

                                                                  76KB

                                                                  MD5

                                                                  a3eddd0e19b6b521a4db997e9ed7e797

                                                                  SHA1

                                                                  f581527f11654894e7864dc77c48e93659cbf9b0

                                                                  SHA256

                                                                  c0cd052eef6729bb485d8934936137bc91e8c5d9ef3a9b010e01e76d70c89fc0

                                                                  SHA512

                                                                  8d52f430926293ca622cb0aafacbe0c8be84097f5a43e9c8fc82b88c95dbb42b3a814adc49d8ed05d7523b1e027a97e212e15ea3db2c947e5e50c9defd72f283

                                                                  Download Submit