Analysis

  • max time kernel
    2438409s
  • max time network
    129s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20/12/2023, 04:48

General

  • Target

    84ebc7125e9b84589dd6a3c112a0e9a01e8ca474859e82080634f0b4be6ca960.apk

  • Size

    6.3MB

  • MD5

    1d8a45f3dcd39d0608e999426abdd91e

  • SHA1

    c7f7e837f4182f1dc3fe28d3578d5e794f6eb4af

  • SHA256

    84ebc7125e9b84589dd6a3c112a0e9a01e8ca474859e82080634f0b4be6ca960

  • SHA512

    f816f8348ce96588f7b58f3acbfd7b5a78b0dac8ebbf3ad9b4801d5d38b2ec3ae1ba030171a762b958d6d2be8eac3cfb910d60c8b8923793f8b21be8b7c4e2b6

  • SSDEEP

    196608:/aqsLRz7d/voJcd5kPOX/cf/zVMZa4jlO+j6ss:/Y9/vwc10hMfw

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.jtgame.xyjztpys.byh
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4258

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.jtgame.xyjztpys.byh/databases/xUtils_http_cookie.db

          Filesize

          12KB

          MD5

          3fe30614d7e0d11db870b4624f6c50e0

          SHA1

          053ff0fc621ab40f2afeddb3e7b4a73ee41ec533

          SHA256

          67c532f0324228dd33b445cd399c1426e3a0e0cdc7b9358c66b402c5d40a838d

          SHA512

          c7c09e97a408e88aacaf8099ad4d1fa604d58113393500a384eb3c2eb7c3c105af41314934b86eca2f088045cbab5a20d768bbb295448dc1ae6cb6c3f59821ae

        • /data/data/com.jtgame.xyjztpys.byh/databases/xUtils_http_cookie.db-journal

          Filesize

          512B

          MD5

          c37c9a51119d9f485a03fbe2530b88a7

          SHA1

          b092600b5e72698e6a40ec2076ef28b09d772644

          SHA256

          f98e3d8cd489ab86ea9675b170c881e12524994f0d558aae796df1098fa9109b

          SHA512

          e851a6e1d65346237132aaf3629973c684881cb9ecb6e658b75c5b9c8e22d439e8ab99723bd7563e4ec1c1fdfbb5b599b35ccf24768f0faa4dc0c614794ea889

        • /data/data/com.jtgame.xyjztpys.byh/databases/xUtils_http_cookie.db-shm

          Filesize

          28KB

          MD5

          cf845a781c107ec1346e849c9dd1b7e8

          SHA1

          b44ccc7f7d519352422e59ee8b0bdbac881768a7

          SHA256

          18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

          SHA512

          4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

        • /data/data/com.jtgame.xyjztpys.byh/databases/xUtils_http_cookie.db-wal

          Filesize

          16KB

          MD5

          b04b6c37203b3a07e3dfbb80a07f1cbe

          SHA1

          9a7f230b534ecbc13d3bff98828e77db404bb2b3

          SHA256

          abc6651d298bf85cf5126fe90918c2c70306d965aee110a3444af712c0af0571

          SHA512

          5e31b0bccbc649281076512d6e17a30dda980f0a5e75d2a36a92140f691c46d51f946fa4df4aaf2e48fec6732920594bd973554b0b1efb967a2404a52025e13d

        • /data/data/com.jtgame.xyjztpys.byh/databases/xUtils_http_cookie.db-wal

          Filesize

          4KB

          MD5

          05185e3555cff012f38c0a11545fcb7d

          SHA1

          35116618aac61e8e4f241ec99f58cb0aa8cc8895

          SHA256

          2bcce6ab29bed3ff83a6dddee66582b5f7b7a4c367b639fff67eded9c85aa7cc

          SHA512

          6a5396137e13e4a3dbc676a770fef81752bc3f3375a006e18bcdc24e151d1bc124e6ad45e6ceb6346d77d7fcae63c6f18d5e11446584413feea9bfa9783915dc

        • /storage/emulated/0/.DataStorage/ContextData.xml

          Filesize

          111B

          MD5

          99a77e7d35371287ecca04bb5e8decbf

          SHA1

          4c29c472680e11f7b8d30f97512802793a046759

          SHA256

          bf0e3cf58b8f5f8c74fb47eebd651d5ef8f0e5546ac958d7dcbdb553bb94f2b2

          SHA512

          a0c8c0e6d76243589aa1e43f432b49ddd0d5920eba3f6b53f5bf4193eda5fc73cdb0df3fa72bd51e7308c08edd8fb3f3153e919e4fe439067bbaae4af6d7b31f

        • /storage/emulated/0/.DataStorage/ContextData.xml

          Filesize

          213B

          MD5

          4688624569ac30e19289c8e8d948899a

          SHA1

          e41f4f6596f763a9878ac37502bbe86837501e9d

          SHA256

          53cab12461ed362b6f9c7318e2893a09dd2f4995ad4b470638759e1d8f1f5162

          SHA512

          6eecb0d93d1a9c24657e859268dff5c5ed950536491ac3ad6ee3c7d344c85d62474197c439be382f96a2e39efcbe2ee90281b7cd35d549ba00c30bb31cfc18c2

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          65B

          MD5

          9781ca003f10f8d0c9c1945b63fdca7f

          SHA1

          4156cf5dc8d71dbab734d25e5e1598b37a5456f4

          SHA256

          3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

          SHA512

          25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          111B

          MD5

          fd53bd61dcfb2e2ee5a7b34fc81e6e3e

          SHA1

          5b492c59cfb62b1a7d5000c540a691775739efe8

          SHA256

          5000b55299b0247b1b8f0b3b5c01532b670d591370cbc8b6fdd6b4916bee0a64

          SHA512

          715f3c605e2b4dc333ef3e1d58ad8c7c49028dcec538d4beb4fae539f7893d45b9519c060587e4cc03896103924d79a6f57596044cedefcbd04908c7d95a79d6

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          167B

          MD5

          c66cf2dc94e28ce080eab030e6f66307

          SHA1

          e8b4da8900f0eeca059794536059fd5b6ff7c222

          SHA256

          d649b193370c6aabcf9dceb8a810ebdcfe26cf3ef3834330361b45e745f08697

          SHA512

          8ef5a4dd31445ae280754032d07e7a4dcae16ad95611cfcccce9a30cb0dce6a6bc8c6f4c849cd9d65cacb179ec3e6ae64a01832140695fed23176408f4f00052

        • /storage/emulated/0/UcQkDir/qk.dvid.txt

          Filesize

          65B

          MD5

          8d19569f413bfb54167b51cd24bdb72f

          SHA1

          47d69861f371464f2fa5d6261cee0a80e90ed9dd

          SHA256

          aa7a58b71d61d433c9f9c3f83f074308657bcbc8495ea21178e88e6db28897e6

          SHA512

          80a1d8d092e5c39765081c212f0d6b5d898eb4a45c7002f14be076fb93504febd167549434fab425f6e3dc23eea603c34d21b4d0ec85548fd7c4889e8ed150ec