Overview

overview

6

Static

static

6

8c331735a3...79.apk

android-9-x86

4

Analysis

  • max time kernel
    2507339s
  • max time network
    138s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20/12/2023, 06:37

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target

    8c331735a3007457fb36d41ebb2786accbcb72fb0b191518723653e32f336d79.apk

  • Size

    17.2MB

  • MD5

    766d0ce4813314b4a5b35b181fbba567

  • SHA1

    f5f9430b1939ba9803cb437d9005c0fa734ba336

  • SHA256

    8c331735a3007457fb36d41ebb2786accbcb72fb0b191518723653e32f336d79

  • SHA512

    6560ba721625a00806e3e365aadcaabd32bb4d7d012d7e989065bee96742564b670e54afa8cbc01f36315dfe222fb78d5f518b3a812b97a1f7bf08a02502259f

  • SSDEEP

    393216:nyzWVnJbC4uqYjw5a0RKanc8FQGn/LlLqfTg6f0zT7emRc:nykJbC4p15aSLncADlOf8Nny

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • cn.soshifu.android.myapplication
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4222
    • /system/bin/sh -c type su
      2⤵
        PID:4276
      • logcat -d -v threadtime
        2⤵
          PID:4303
        • logcat -d -v threadtime
          2⤵
            PID:4321
          • /system/bin/sh -c getprop ro.miui.ui.version.name
            2⤵
              PID:4342
            • getprop ro.miui.ui.version.name
              2⤵
                PID:4342
              • /system/bin/sh -c getprop ro.build.version.emui
                2⤵
                  PID:4368
                • getprop ro.build.version.emui
                  2⤵
                    PID:4368
                  • /system/bin/sh -c getprop ro.lenovo.series
                    2⤵
                      PID:4393
                    • getprop ro.lenovo.series
                      2⤵
                        PID:4393
                      • /system/bin/sh -c getprop ro.build.nubia.rom.name
                        2⤵
                          PID:4417
                        • getprop ro.build.nubia.rom.name
                          2⤵
                            PID:4417
                          • /system/bin/sh -c getprop ro.meizu.product.model
                            2⤵
                              PID:4444
                            • getprop ro.meizu.product.model
                              2⤵
                                PID:4444
                              • /system/bin/sh -c getprop ro.build.version.opporom
                                2⤵
                                  PID:4468
                                • getprop ro.build.version.opporom
                                  2⤵
                                    PID:4468
                                  • /system/bin/sh -c getprop ro.vivo.os.build.display.id
                                    2⤵
                                      PID:4497
                                    • getprop ro.vivo.os.build.display.id
                                      2⤵
                                        PID:4497
                                      • /system/bin/sh -c getprop ro.aa.romver
                                        2⤵
                                          PID:4522
                                        • getprop ro.aa.romver
                                          2⤵
                                            PID:4522
                                          • /system/bin/sh -c getprop ro.lewa.version
                                            2⤵
                                              PID:4548
                                            • getprop ro.lewa.version
                                              2⤵
                                                PID:4548
                                              • /system/bin/sh -c getprop ro.gn.gnromvernumber
                                                2⤵
                                                  PID:4573
                                                • getprop ro.gn.gnromvernumber
                                                  2⤵
                                                    PID:4573
                                                  • /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
                                                    2⤵
                                                      PID:4598
                                                    • getprop ro.build.tyd.kbstyle_version
                                                      2⤵
                                                        PID:4598
                                                      • /system/bin/sh -c getprop ro.build.fingerprint
                                                        2⤵
                                                          PID:4623
                                                        • getprop ro.build.fingerprint
                                                          2⤵
                                                            PID:4623
                                                          • /system/bin/sh -c getprop ro.build.rom.id
                                                            2⤵
                                                              PID:4651
                                                            • getprop ro.build.rom.id
                                                              2⤵
                                                                PID:4651

                                                            Network

                                                                  MITRE ATT&CK Matrix

                                                                  Replay Monitor

                                                                  Loading Replay Monitor...

                                                                  Downloads

                                                                  • /data/data/cn.soshifu.android.myapplication/databases/bugly_db_legu
                                                                    Filesize

                                                                    4KB

                                                                    MD5

                                                                    f2b4b0190b9f384ca885f0c8c9b14700

                                                                    SHA1

                                                                    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                                                                    SHA256

                                                                    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                                                                    SHA512

                                                                    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

                                                                    Download Submit

                                                                  • /data/data/cn.soshifu.android.myapplication/databases/bugly_db_legu-journal
                                                                    Filesize

                                                                    512B

                                                                    MD5

                                                                    0312e397fbb48f8f57de8318f4ec33a2

                                                                    SHA1

                                                                    c8be566e9a9690ac658ca502dd9fe85db81eb364

                                                                    SHA256

                                                                    4337a76286cb0aeaa7e11c94490945f015d9d4ee468048c706b713d5d4602b4a

                                                                    SHA512

                                                                    44d5a0d64dd066853867d1abd1f804f8f958947992f250a615b11c2598c9365e00c6528fe1804386e154743eae53825efb3bacc15f2afe2d62a0e7d20aeff78b

                                                                    Download Submit

                                                                  • /data/data/cn.soshifu.android.myapplication/databases/bugly_db_legu-wal
                                                                    Filesize

                                                                    16KB

                                                                    MD5

                                                                    0003c534098161bfda1d48bcb02590f2

                                                                    SHA1

                                                                    7a0dd8ec3c55a9d90c2ec43729bfae156b24cee8

                                                                    SHA256

                                                                    ae8a16984020159ddbcf863c63e7ed690c16861dcdc80b1c575ce075869025bc

                                                                    SHA512

                                                                    d6a1ff8406d5a562d0e3e73220ddbd5835633c977557eaf66a0bf74c8732f80f0a0bff4910b2cc8c7d9373c9dcdc1bf15a3f72b33e8b064e0cd3751b8e996df1

                                                                    Download Submit