Analysis

  • max time kernel
    2354002s
  • max time network
    153s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    20-12-2023 04:58

General

  • Target

    85b94f396c873a8b8eff08cf73cbb6545cbcfe76d55666ef00b890313d62946c.apk

  • Size

    5.1MB

  • MD5

    84b5e5f7d0000f7f890d16481f234a77

  • SHA1

    d6bf8d9d1ff3bd35f43d69239366ebf5b4681791

  • SHA256

    85b94f396c873a8b8eff08cf73cbb6545cbcfe76d55666ef00b890313d62946c

  • SHA512

    ec330f9a7ed5c305d94e5adb520ac30133d6cd74266555fab8e27963d3b1dace9d418264ac50077df6cab793bacce1dbeab654c6a483f845e4db9929a868aef0

  • SSDEEP

    98304:D2FIO9lKOh32ofh8faHAN7ykE0l7tVhVn4H+fuaiUU430e+/VMx9X91u:INthmQYN7Y0vVhVtm/4k/Mx9X9U

Score
5/10

Malware Config

Signatures

  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs

Processes

  • com.mcmfmemnnpnlnjmomlme.leitingrobot
    1⤵
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:5056

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.mcmfmemnnpnlnjmomlme.leitingrobot/files/.um/um_cache_1703160965905.env

    Filesize

    563B

    MD5

    02bc6918c0c4c207ba7627b7fff510fc

    SHA1

    5df682949e690ee6cdf4f01df96094f12a251977

    SHA256

    9fb359bf9931ca28b30ac63be4e9d26139e4da6d0b8eb72df23d23d9111a3c17

    SHA512

    fd8d7660ebed5d6655308d9bd93b5a044561364b0f95e5d5c817a62ea408402794abbd3c37517b62d65766ea2dbf3b19eb907d2f2b777fe64e15bc63b66f67e6

  • /data/data/com.mcmfmemnnpnlnjmomlme.leitingrobot/files/eventservice.jar

    Filesize

    217KB

    MD5

    71a74f358cd5e52123fc5a3651c8b12e

    SHA1

    47a72e58feedca07f5aaf064ac8a4621fc76f71c

    SHA256

    66c2736532c79af3f30e97dd72823963e9e476aaad386b7759eb18347bd8ec8f

    SHA512

    8be4f612c8287d7ce7dad0d20b7386841d00add060083b5de782ce96587551a4095eeb390e551f4aca107747cae162f31775e1bb796d1798b0d8268a276bd06e

  • /data/data/com.mcmfmemnnpnlnjmomlme.leitingrobot/files/script.atc

    Filesize

    340KB

    MD5

    745e809223d33954acfadb449f9318bc

    SHA1

    5c1a5e3674bbd9e0483c8be87dfe7c6ac3f7f09a

    SHA256

    80f84aecd309db67adddded97467d80328bc1826fd4bc1a2be5b2a20b9114694

    SHA512

    517bdc790862cd9b8921fbe0c3e87dc52d0ed448cf2fa76641e55855c9b15009b4f567290841937afad00484196a46aa7a50da242fc360888ecc7d9b381cb6f5

  • /data/data/com.mcmfmemnnpnlnjmomlme.leitingrobot/files/script.cfg

    Filesize

    233B

    MD5

    c80da982f0686ecdf36d92bb4e5ed02e

    SHA1

    ca94627755cc5c0935e4d758dfb72c62b4e6a6fa

    SHA256

    6546d5072a499f181aeef8ad57e0973a8fc855850ddb41ac882fda6fec3e959e

    SHA512

    41f26a5a7da74d258ea90964612822b99870068372583b3a69f1c29faafde8870af9a845aad80ffbf92d558f20c25e58622f9696ed8d987b4bb5bda810c91474

  • /data/data/com.mcmfmemnnpnlnjmomlme.leitingrobot/files/script.lc

    Filesize

    54KB

    MD5

    89346f1face9b84a5e5c897259f02ca6

    SHA1

    190947ed3353e4709536709bb8e2b7b8b848af4f

    SHA256

    5ba3a6ea3bf7fadd3d45633feb7a4a9f720f43e72a0e3c3ba7a3abe7cac96f8c

    SHA512

    833050aaa257593ec662f824e5225adedb81275690244968e918c5dd966d6cad996f91a3b96751ab259e21151663e45a113afa99fa1bfd082923a6068e70c2bb

  • /data/data/com.mcmfmemnnpnlnjmomlme.leitingrobot/files/script.prop

    Filesize

    303B

    MD5

    9d9a3ee0c150f424a6c8b0423b261cbc

    SHA1

    c5285616c7b577122a2fdb52df5833ee0861482a

    SHA256

    5e1a8ecb3a3986de9f9297eb3f13cbb194f88afd5d8b32d578da5500a3877fcb

    SHA512

    92903c75b8c3abe07090c4ff7e7a87ec998cd2a2a3ea5de05d82bcd6a7ba82391e2032e6de4719055daefe76e0fed226a3af4ecd70bdf41a556e0ff813a2e25a

  • /data/data/com.mcmfmemnnpnlnjmomlme.leitingrobot/files/script.rtd

    Filesize

    31KB

    MD5

    13778cdaf79c9ae2934551582f5ac3f3

    SHA1

    920641132a70b4c03fda31034757ef1e5be7e267

    SHA256

    0c12b10c9c5afc535cfeae8b869ee2cd87a5e33fcfec5d901ee7467a2c166645

    SHA512

    12e385deb19017ba96a327cddef1f6b602bf90e9a9c985d8fff264b1d94bdac8d7aadd6fef65fdb95581ac8e8830aceb450430c06aab05b2e236590167e3ac55

  • /data/data/com.mcmfmemnnpnlnjmomlme.leitingrobot/files/script.ui

    Filesize

    3KB

    MD5

    7377cda96c4d8973b00e05ec09a6ef58

    SHA1

    81d9e5d00a2150b7bf1b786767f0d0d932594915

    SHA256

    3905fad8d83102648f75152574f4e0095d9640d1da3cc47056c684c6b95447b3

    SHA512

    7352a7b0b3656f52a68d51436fac2e1a7451afd2c3c1f697e840301b83f5bf7c65361a5de503ffeb1b0584630078a6635615f6c8a948f733c7ee255eda85fb49

  • /data/data/com.mcmfmemnnpnlnjmomlme.leitingrobot/files/start_eventsrv

    Filesize

    331B

    MD5

    eb6dbd32a4b0784d2df79aded9f76924

    SHA1

    781c17c5f2483dd93b08eb692d99987d09d33a52

    SHA256

    280b0765dd4903632aa30ab6ac4c69910a3aa2aa07660f8c5c8d7017ad223469

    SHA512

    91eb232d9d9baa8f7e563c797c104cd1bb8ae7becb6002fea7ad3f9b037ab1c22bdc93ade49563903be6af7daab5b53a84cf3419873ce560fb6b98b478669cfe

  • /data/data/com.mcmfmemnnpnlnjmomlme.leitingrobot/files/umeng_it.cache

    Filesize

    245B

    MD5

    6c921a8a0cc1b3ffe68a2b5911e46e79

    SHA1

    39dde70cd34202792df5d63a5f7776cdbede9457

    SHA256

    6a5d8ea1c6c66c8044d0d08e0533d8677fb89f10a4a780d48c9f052e647c702b

    SHA512

    e1c9ffe3a0f217bb829e16c170572e39ccaa1f136c7d7aadca7cbcac4c9507a2f4c31624c6fce87552e88e81e943f861df502525c64ca82337c17bd2a65c2472