Analysis
-
max time kernel
2364744s -
max time network
148s -
platform
android_x64 -
resource
android-x64-arm64-20231215-en -
resource tags
androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system -
submitted
20/12/2023, 05:21
Static task
static1
Behavioral task
behavioral1
Sample
87148020bde62020fd1cd7c8cee092c16fa3b53c2fdc455d1ddadb7178622158.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
87148020bde62020fd1cd7c8cee092c16fa3b53c2fdc455d1ddadb7178622158.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
87148020bde62020fd1cd7c8cee092c16fa3b53c2fdc455d1ddadb7178622158.apk
-
Size
8.4MB
-
MD5
02786271851ea9941269d892a3d488fd
-
SHA1
c50486a1b2c37adf3bd83919f47c701cbc5cf82c
-
SHA256
87148020bde62020fd1cd7c8cee092c16fa3b53c2fdc455d1ddadb7178622158
-
SHA512
fe37fb823890a8e287412cbaa97311e4e4facca8604bd50f12d27971dc261ffb22ce92a161a1665b05fac420c03885e8441e921dbd25feddd01295499a23cbea
-
SSDEEP
196608:3PyyuYqCuJFbNpxeFuLGtkCgrgT0FrCybKobYBWOe9GaUYR0:Ky4CuvMFuaPk9FrSJoGaUYR0
Malware Config
Signatures
-
Loads dropped Dex/Jar 2 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/com.yuyue.reader/.jiagu/classes.dex 4448 com.yuyue.reader /data/user/0/com.yuyue.reader/.jiagu/classes.dex!classes2.dex 4448 com.yuyue.reader -
Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
description ioc Process Framework API call android.hardware.SensorManager.registerListener com.yuyue.reader
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
5.9MB
MD5fa7e2e6622ba77ea9c91f0d258283488
SHA18bf98bce220ae771d4af1b2aa76a5291c7cc2983
SHA2566849ba4621ca4f2f48ed009b267f13ed47635c5c396d622b6bb2191fc150ba9d
SHA51283cce12ff02120a5a34a2895229ae9e235b758babf8f25341e5575cdd387ca4aab260960cc7a8922f4fa880dd293e98ee7670da4bf611c058e29cc90669179a6
-
Filesize
1.2MB
MD5bd7060e31e715595dfb4cdbde16c9f3b
SHA1667b1d1d7053aafa853713902d0fb85b954b2ec1
SHA2562deff7451df535011a7d1ce6adb8114167e1239a77eb62e8e5676831fd197686
SHA5127bb9de1121429332951b1c036074c536a04275a4a71f634011a1c9ba0a6e6df4a9ee67690f001ea1fd3d935c475f568473718ad481603bea716b1507f324716b
-
Filesize
495KB
MD5de685970891708f6edfd18f03c6557ba
SHA1ac50f88327652a72df73d43e9260faf169283c34
SHA256b3124a6f192e562313f1e2d24b292852d4eb87cbe95dccd1d94b3a0540c0c11e
SHA512cd56aa34265252c1457e28f442872dfaedc897607b816526de7e76c88ea00c24feb3542c21be7dc587b58df8ccbb1e045d3533741981212eac4d704143bfffe0
-
Filesize
526KB
MD5f3f377aff0413b6667306b3ad51a032e
SHA10e03658be45eb84be83a147329b82885da1b4702
SHA25678bf69f4b3eea98355f96ae381547380263beb136fe29d630e2e3216780fdac8
SHA512a23a89fb8721736f4c82f779f515fc2f702c0d98d696911802d57600ba4066762ade878535abdff7ba529e167d035f7b97e829dc3e1b7d04825b00d31f7d3b0b
-
Filesize
32B
MD5e6dbbf1c4ab476770afecb02bdd49bdc
SHA1b2f18ba8cb8c1d6f266193dac17b51fdefa76213
SHA256b156a594f31b8479ae3ff191b75000663794f537c144e617795cbb7115764f3c
SHA5123f3382d9eeae2973942e0ff9807a1680a559921c7c1d2b356153d9a190760a995982c2f2a0d78fe81c4c3fb226d1cb5aed73d2c1f591c0948e6c95f458ac4943
-
Filesize
32B
MD5e21128384fbef55a55f6485d67aa2a4f
SHA1c1f938ab4c34ac057be7ef223930ebc64e5fab9a
SHA256486c11c4213e43cf57ea02c5f8949faa4f4e4a5062e47d2e201c822d44f5d26b
SHA512619fad644886a80cca409d3d327c2c62faba69a53d6d6cc0ae76b69e85b88ac5d440e2be059f9b02c4b5925460de26a91b95e7eb600cffddd327a9d029c21e86
-
Filesize
32B
MD58b35a9aef4fb03768ac9d65f0505c4a4
SHA188944ff3ac19babfa5b4f66483d3cd0d7ba82cad
SHA256a6f13364d6d874def6552eea27fd0af482a92eb91b34802f628585db2a54a186
SHA512d1e873d61dab2b1060aba9d81ddc2a474d30fe1c2ae11ddabe8b567f8b0a9c2bf8d354417d61d768b8777d334b1f139aa6068c8911856495725807bef9825a59
-
Filesize
307B
MD5d56c918cef7cd816b5cc002b447eb9e2
SHA18997689f777b350e2863b271ce6d2e5be35ab168
SHA2562703213de77a0292a64c938004b966d9a9f8d2fa36e458681b5c4a31edd58876
SHA51265d57b8c4e2a90fb61dee7b0d39a51e7e95f3acf3f24643d0ecaa0eed7cdb25b0b304e47c913c0988b8e45ba37747fbc61cf660f933cafa79a8335af33d6288e
-
Filesize
314B
MD551689c06c5349b19a13d49fce0ff9c32
SHA1b73e850875099d267d7d889892c36c290e8726ac
SHA256b792e4c0b77508d6204a83e0b52c78bbf045a1ad9bd356bd8ad16287301d0c8f
SHA512aa15d3ef6fb0cb313e78efcdedce58ced188b1e958b207a47d154ee4d68b400072bd0fed98168d8ad10fed6661a6df06dd7e2a48449956ed9127ca17db86dbb8
-
Filesize
32B
MD5e25d184758ff5cf9b20ce3b2d7046251
SHA1046bcc0cdcc3ac4387f565c1735fa968699a7d3d
SHA2562711fee843d81228e2feabc73679542361f41a6029f16bc4be1200f344f8ffbe
SHA512d6d61d808f06716867eff0853de506334071d6a5d1a771120334af30b98f9fbde8f10871733e3d3b8824545a2c2e159b2d7da6bd3918982d3d7f68ad591272a5
-
Filesize
27B
MD542edef8fad7034bd7c80e995458527c4
SHA19a140bd2696bca6759a859aa3934d386d9d2771a
SHA25649b3b98334bdb494f6dfdd9ddca2fa6f8c52229af77c5295802ef7528111b9ee
SHA51222d40dafe47178ed56d7146b8ac2e22364a1e367452694a684d4a9710dbfb9db6c518405788189aa605fa549678d0342d92f28e51895e10dcce98579c1413d33