Analysis

  • max time kernel
    2446549s
  • max time network
    138s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20-12-2023 05:08

General

  • Target

    866d352621488fb2d8f29bf270790b5b22d8df80928a57d4fe1f116f12ab293a.apk

  • Size

    5.7MB

  • MD5

    ed75840267daf2009e7cc97e66e678a0

  • SHA1

    de04daba563008112f6795554165e4a1b6a0217f

  • SHA256

    866d352621488fb2d8f29bf270790b5b22d8df80928a57d4fe1f116f12ab293a

  • SHA512

    afd97684f05559f3d48727b875571da1a9b0a16111a76c94d22ead8b0f7e3e4fc1587ffb7b5a0b54e19808a835e440d141a4b477da3a6ba94fcae872c5b3a1ae

  • SSDEEP

    98304:7n3PP7cllSc88BHU6g5ZfcrijefQRmwsboNwGBEW3qflubgAvZxkjuw/WME7gEch:7nz8doiihRm/kNrHqflubgAxxkjuw/W0

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.sxy.ui
    1⤵
      PID:4246

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.sxy.ui/databases/welike.db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.sxy.ui/databases/welike.db-journal

      Filesize

      512B

      MD5

      117fc5bcc561895be50569ec8e63bece

      SHA1

      18a3c7fd87943fffb2fde91ce9d6d319ebcf6331

      SHA256

      ef2637a2b4c6e0134d5f8dda1ace86093727662b9ceed9e65910b92102484c28

      SHA512

      cfb4057488042d8a4eae492ca05dadb67501f0a24f0c4db01e97bb4b53c572bc7a26dd67e673fcf234376b1aa7faab4597ebdbea19fbb1d4c5a5a3dd72de5deb

    • /data/data/com.sxy.ui/databases/welike.db-wal

      Filesize

      16KB

      MD5

      fae43bdd155c57fbdb48687be9e88a17

      SHA1

      d0fb85821b5f613a583392516290c7961b96187a

      SHA256

      f19fb1673b3af6dc46107015dba1c196edd934eb990a4e06869dc4eabd0df94c

      SHA512

      4507ce6257459641ca517e342b24509d7a052b130ba34066dfd362c5ab013aca75018b39374804538074d7266a52e38cd09df9e879d063f0112ba97bfbfe1a13

    • /data/data/com.sxy.ui/files/.umeng/exchangeIdentity.json

      Filesize

      162B

      MD5

      fa1636c1f6088c2f22e254297c73fd80

      SHA1

      dfb8bc41755b6decc18df0d4c88d42cad322817f

      SHA256

      0777ba57e3f0b6678e71e6195b27a736812a1b439cc37ad34694223ab68be034

      SHA512

      01052dc7e9f5080b759f9f931c2a572a26ad1cbe151bb6b735ea3d35bee567d665168e02740269ab4fbf203506724f2da347da3030c73c198433024932cea86d

    • /data/data/com.sxy.ui/files/mobclick_agent_cached_com.sxy.ui258

      Filesize

      10KB

      MD5

      acd61100790df2e5dfc2290c5ae7fdc9

      SHA1

      eb4828208fbc12f93fb228984485cdbc47ce8a1c

      SHA256

      2d05691dbc205a07b5eedfa7d4826a1673f6cf7173c45a868150504b904403b9

      SHA512

      067cb011bbd7f883f2940ba06372a13e1edc68dd6e793e1d148873a27e3aa768bde71a8a8162502bb7ed0a76a9e6e93fbd2e60a88c1c4c155bc14df82b76ee07

    • /data/data/com.sxy.ui/files/umeng_it.cache

      Filesize

      350B

      MD5

      f37c1c757976efc5c5f6ef28a93aa37c

      SHA1

      f02ed38dbe49af4f7ae69a87e596774bac59cff1

      SHA256

      7ad7188a97857783cc82ee586ef91e5596e64a3aeb1dc4b87ace9af3161a5c74

      SHA512

      d0e2a2ec5783d92e18a1d264585e830b0ac7ae245541b7bf12eef280b2417c86976766a9479f21134f61d952b28137e71a242c055db24dc0c63c40cf7d9243d2