Analysis

  • max time kernel
    2456750s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20/12/2023, 04:39

General

  • Target

    84963383e86df7ec8d6f6a5ef96ec3e40d9523a0325b1a3bbef6577f103771e6.apk

  • Size

    24.4MB

  • MD5

    7728800bbfcc7b5686206018b7a5d298

  • SHA1

    e4fd7246a68f11275f0e3d7bc1ea2bd34a615659

  • SHA256

    84963383e86df7ec8d6f6a5ef96ec3e40d9523a0325b1a3bbef6577f103771e6

  • SHA512

    b54791a21471f0c5a236b905c68f75745998f83872b7fa7892013c765e646989b3a981d4b3cb85994e9830062ab79466381206dbf41acc77330456a30311f4b9

  • SSDEEP

    786432:eCiF6MWRbtZeHCMJ0K1V2RG1B7unCioJpXXk5oAYUC:pI+bxA32RWqnCTXXyfq

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • cn.com.pansky.sxzgyl
    1⤵
    • Loads dropped Dex/Jar
    PID:4222
    • /system/bin/sh -c getprop ro.board.platform
      2⤵
        PID:4254
      • sh -c getprop ro.yunos.version
        2⤵
          PID:4265
        • getprop ro.board.platform
          2⤵
            PID:4254
          • getprop ro.yunos.version
            2⤵
              PID:4265

          Network

                MITRE ATT&CK Matrix

                Replay Monitor

                Loading Replay Monitor...

                Downloads

                • /data/data/cn.com.pansky.sxzgyl/databases/bugly_db_legu

                  Filesize

                  4KB

                  MD5

                  f2b4b0190b9f384ca885f0c8c9b14700

                  SHA1

                  934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                  SHA256

                  0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                  SHA512

                  ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

                • /data/data/cn.com.pansky.sxzgyl/databases/bugly_db_legu-journal

                  Filesize

                  512B

                  MD5

                  a6ea9fa59beceda934fe049568add1ad

                  SHA1

                  bbc155267873216f8bc8c610ec452e9a55c0d565

                  SHA256

                  e71a99e2ee765d98f40254bb502883bbf39735f2ec0d3e37b2caedba9dd127f4

                  SHA512

                  cb8069c98848985022c5b8ae34da34c5afb534725d98bdd42c862d6e9351ef2c9022a02ae1d0a1877ac03026d0ffec82d1efa9fba5870ac46e1be53052ded056

                • /data/data/cn.com.pansky.sxzgyl/databases/bugly_db_legu-wal

                  Filesize

                  76KB

                  MD5

                  d73190db84932138a35a1463fc58253a

                  SHA1

                  0e4216348d0a1a726c6dcffdac387f6baa540f22

                  SHA256

                  15d764b069ae10f7e68cd3a9319f2a33cddee06c8ffeb1ca4690f6c6c9500e95

                  SHA512

                  01188098d53612802a7f59a6a49beca6f9f3eb2189710eda261a89084a11721ff3e8d85bf0fa5c164020a1ec5f3752f4cc1467d5ba32ba50d87ed34045e71609

                • /data/data/cn.com.pansky.sxzgyl/mix.dex

                  Filesize

                  292B

                  MD5

                  63f77f99bd2c2b772a479923bde11974

                  SHA1

                  c7632e7d301e4463fafce85f84e9c3d7da3fdbbe

                  SHA256

                  4c76a3af64cdd2f8713ffe2733dea50dbe714d0ca41c17d1847ee5b62a7ca615

                  SHA512

                  3aae4a89d1ed51fdd911cb367eb10afe3c2264e4222085891b18a60d5412f85d10bf5c8f3c6642db70abb9aa42732bac5c42c42ee32d587100f53c21b5beb16c