Analysis

  • max time kernel
    2422096s
  • max time network
    155s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20/12/2023, 02:55

General

  • Target

    7f3d01abe8f5d1423c5724cf104ea10b8c82711ac583ee6b79ff3d2b71f33469.apk

  • Size

    8.4MB

  • MD5

    6216b6a2a42ab2f1e543fd0b529e3ffa

  • SHA1

    a025f7f1495a8abd25982cf1ec3536ad2c360d45

  • SHA256

    7f3d01abe8f5d1423c5724cf104ea10b8c82711ac583ee6b79ff3d2b71f33469

  • SHA512

    096cf9f01771664689a431cfb9c27d849c0b747b70613b83014b328794331fd34fdb276cd59e7256539a18ad38ff98811b4ab57f4f6fcbe7cc890738d0f07475

  • SSDEEP

    196608:ywNfWWT0wuuuuuuuueDDDDwIezXZUShTdSZkc2z56n46Zd/19sqQch:TVWERhT75Q/1HQch

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.sohu.kuaizhan.z8580636223
    1⤵
      PID:4266
      • getprop ro.product.cpu.abi
        2⤵
          PID:4319

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • /data/data/com.sohu.kuaizhan.z8580636223/cache/Analysis/avoscloud-analysis

              Filesize

              424B

              MD5

              3bb28b1c8d5c11822d279929bd609e58

              SHA1

              8924d80febc6cb3c2924810cfd50346602496070

              SHA256

              8f46aa94e5b2ce8be2eefe3ace0e510ca3b96fc82b19e8b6e59369033c3ce5a6

              SHA512

              d736f864d9e187b9a407dd0a675be495baa6a3deef8d241b07ebb5e8ac4488a65f1dc9d936dbd96bb7d77b5f786c3b4753b7fca9d8d5783482fc126132420301

            • /data/data/com.sohu.kuaizhan.z8580636223/cache/Analysis/avoscloud-analysis

              Filesize

              648B

              MD5

              b7a5afc571d953a35ae264554e29ae7a

              SHA1

              2f9f6c20aace2fb6be13b7cbe3f10b0629cba786

              SHA256

              a47f4fd156d9e72826138328939d3568a63f11572d60663f64808b7bc1967d13

              SHA512

              13012cf0dd78db2bfd0d87e65c7dd3f81b2eec68541b9c2d3202332c74e50482d3da11d830f0e0cf548db8d0a8251b19c7ff69582d3bc187d6d15d8e6930bbda

            • /data/data/com.sohu.kuaizhan.z8580636223/cache/CommandCache/1960db5684d563695d46d76a0bfd8794

              Filesize

              1012B

              MD5

              34803961166fdea9cb26668082374ede

              SHA1

              ac63fcda0a8fbe506cc8738904b0a2a6863324b7

              SHA256

              9db81af4a767d1a78b47babb8925f7016f9578e383f072c5a90c5f044bc6d36f

              SHA512

              9fc5af43cc73827896fe9405f6b5e5efa59ae1601705f9da22d1315c01d4daf7cd4d80b951660d856610e58632d05604f136885b8955ebb95fc8c75e9f1d8008

            • /data/data/com.sohu.kuaizhan.z8580636223/cache/CommandCache/5b3b09d136ea34fcf812d218e6c18686

              Filesize

              1KB

              MD5

              4d432a511bc1c8896e580ad82767aef8

              SHA1

              d49341d41accac476aa5f9df28cdad1035f99b89

              SHA256

              2a683e68847373731dd31495ad1933e49a6a9e57d8beecdc4c76d573f824bb61

              SHA512

              d49ce0feaca6927ad280814c38778fa77fbc04a9297d451f918ed0110a0037973db5849bc1e87a11798ece81c84ed48d62863582c6f4d7d4d1c276c9cbe84c19

            • /data/data/com.sohu.kuaizhan.z8580636223/databases/cc/cc.db

              Filesize

              36KB

              MD5

              ce6135aa1b1fe4f2c2db2a546d2a5558

              SHA1

              79b59582154017aadab783dc266fcb158c252940

              SHA256

              7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

              SHA512

              2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

            • /data/data/com.sohu.kuaizhan.z8580636223/databases/cc/cc.db

              Filesize

              4KB

              MD5

              f2b4b0190b9f384ca885f0c8c9b14700

              SHA1

              934ff2646757b5b6e7f20f6a0aa76c7f995d9361

              SHA256

              0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

              SHA512

              ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

            • /data/data/com.sohu.kuaizhan.z8580636223/databases/cc/cc.db-journal

              Filesize

              512B

              MD5

              8960df7777490ff1da970766127a9bf7

              SHA1

              b7ef1768a3c582f8942d34307bebdc86c95d38a1

              SHA256

              1dba42159b6e243f704f217c0bb932762f1e01cb582dd263c5c8d66c86a28c43

              SHA512

              b5833484d634d98695503373a71dd3bf6e5ce37d11d3b1210370d12813c47f07c4634423fcb7f31dc12ca03570ce79f19ed099054ba727d6aa0e49fe1eb2a259

            • /data/data/com.sohu.kuaizhan.z8580636223/databases/cc/cc.db-wal

              Filesize

              16KB

              MD5

              f08269fa5c51b05836af7e757f980af3

              SHA1

              d45d82a30b28662ae36ac053bd22447cadba73ba

              SHA256

              8bf24d246ad3a61114172c62e785a1f758e442bce6a75333b085513a8df32098

              SHA512

              f95c466290c3c6be7f84767860cf16e3e906a4a1d519d5c647bb642a8bc11f83e280dff66c15a05a19d015040fcac97f47908f2824713a44266746f1b8d11001

            • /data/data/com.sohu.kuaizhan.z8580636223/databases/cc/cc.db-wal

              Filesize

              16KB

              MD5

              37f7452207099d5c30bdfbee266ff285

              SHA1

              446cf87bc3df6c73561c38a0f239c1e6c598ccd2

              SHA256

              f2f8a9a57378e20a25ad5342c9b344d2d4c9cb84020eec6e1ed19f99e9b271c6

              SHA512

              a55390537e716354c3ff397b86a1a809e9803d32ca6037330cdc170cddc8493ba945cc4b3148e6aab6401e1f9317019b7c4b0897e0e55c37b1b343fb6a294354

            • /data/data/com.sohu.kuaizhan.z8580636223/files/.um/um_cache_1703229074776.env

              Filesize

              1KB

              MD5

              a21057da17a26569d7b4186d4b7ba5ee

              SHA1

              e014551a773e1dc7f293d9945dc28c21c0bca6d4

              SHA256

              a3b71319feba0bff9ee68461c97b20c3f26630ad1e39301bebdb21a7c8268b33

              SHA512

              dc892ff1bb52b50906c6d7726ab5a7487555b6b23f8efcd422e1f113dad39101ece6444e0cafcfd6807e5c7acf4276c1ced88c73c52529d49cab921cf2035885

            • /data/data/com.sohu.kuaizhan.z8580636223/files/.umeng/exchangeIdentity.json

              Filesize

              162B

              MD5

              81d32ada42fc7149ffc53af06afab17a

              SHA1

              8d86a41ff06eba9e090b7dc23b438d9df1f292e7

              SHA256

              305d52bc0309a6289b26906ba2357987e168652cc88d16fecd2d75dffbaaadd9

              SHA512

              cd2830cd52d10b8de63fb93773e5fb33d85e8617bd930c8a2e9311c1b20f0e8c977a3d0f2a0eb477f739267048beba25347b80923b0d134494bfe11f216994f7

            • /data/data/com.sohu.kuaizhan.z8580636223/files/installation

              Filesize

              446B

              MD5

              ea293a7184b17a8456d76825c840d66e

              SHA1

              bc5ae889b79f93946f6878c5dd10ed8dc985b7d3

              SHA256

              3c54ea8dc05c58f8297e45fda3634799c79c8bba4d4f78c104af8125a64e396d

              SHA512

              759970584f7882991190348b138fce169aa5377d5665c4bf09cbf053dd41b1216ccddb6b5e1a37dd59656a267fd061428c88a200ed68850805ce1288cb059cc0

            • /data/data/com.sohu.kuaizhan.z8580636223/files/umeng_it.cache

              Filesize

              498B

              MD5

              84b6d6112c7f0a266c7f028332d8ad93

              SHA1

              4712ee445aa205c5946a4f04af4d7990a77e1451

              SHA256

              0dff77cc409b5aae012e243321da396be4e00f7076714c53e352080227a0b566

              SHA512

              25a3b2b85bdabd6c8eaabf75c4110a0037ba15387fdc2636124757948ad485287544dc2576118446a3dc29537791f5f829cdb1d920f1b3146c1401ae3f9e8e92

            • /storage/emulated/0/.DataStorage/ContextData.xml

              Filesize

              111B

              MD5

              03cc4075c7b30389ce7b8849a02192f3

              SHA1

              c479f6d4aa89d2cfbaa97bcd7a3b22ce700f1b0e

              SHA256

              d7250cff935da4d96d8c3e694e5b115132a62260529c7951f6905f867c29f945

              SHA512

              bf122e9bc46a867170c225d191fea2880662fe5890a98cb5c4829f9e6bab66254a8a1bc8965b7474335d5ff1b442424390dc4963c2128a3900fc35a191291eb8

            • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

              Filesize

              65B

              MD5

              9781ca003f10f8d0c9c1945b63fdca7f

              SHA1

              4156cf5dc8d71dbab734d25e5e1598b37a5456f4

              SHA256

              3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

              SHA512

              25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

            • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

              Filesize

              111B

              MD5

              3637aa253fb462908f476d7c459332b5

              SHA1

              fe67c7e1e394c2db4296f70acca22bc89eae0a69

              SHA256

              9d5f092caff348c01b4bf9dc59da4c25fc7d2dbe6e801b831cd7f0a8ba32222b

              SHA512

              524e6412ea09cab2bbf19ef91b8d41d5663bbdd0197c811caf2f37e8f94e4e7ab3c1454c284d786bb8416c06c4fb361794eaefa2ad70d96ccee9c22440529702

            • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

              Filesize

              381B

              MD5

              caea291b6870a8e82104bcb4ae693d40

              SHA1

              222e87ad3e357fbff6a56baf2a90726d6618f6b8

              SHA256

              b7f87e1b81bf3f499cc174f9963e77b46b362dfe0696bd629a3bd150398b5200

              SHA512

              0725eab769e5fe02491c0c672746b2f8580724af017f9bb3ef253d4cc78ae5dd91ae19f88e00425ff4d35c1464c7072e0df2b1cd8ed832b971cf3d2d03c03a39

            • /storage/emulated/0/tencent/tbs/tbslog/tbslog.txt

              Filesize

              1KB

              MD5

              cd42cf30f8bf5b67e1fe65529d8de7ae

              SHA1

              a0c41d860cbcc165dbf64e8def7ed42b2d30e21f

              SHA256

              565cd5f17b8c79d0e44a724e43db298921a8e16c4668094266bac4a1a3e3e50d

              SHA512

              d6c6bc91bf3867d017b24d7475b7fd2bd479050f71246666a7f378a65b9a4f1f75dc1bda20ee2209e22bff3584a366559f3cf6fbdcd3f088fb88a334e52a9e6c