Analysis

  • max time kernel
    2379780s
  • max time network
    143s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    20/12/2023, 06:52

General

  • Target

    8d0dfa28d9c4fbd9777a5497cbc48d428b95dadec6589afa28ba7bd3e90740de.apk

  • Size

    20.6MB

  • MD5

    75986b59ca4e015b7499d37fb50e858a

  • SHA1

    a938c332ceaeb4e6c8347e92c56531565e51b7a1

  • SHA256

    8d0dfa28d9c4fbd9777a5497cbc48d428b95dadec6589afa28ba7bd3e90740de

  • SHA512

    1cd14d72289303f8102f4e6cd1202678e04d6c9daeb68643c7a2749413324da4d909ebd6cbde94c8707418d3385f2d95acb40c61da5c658d5a4cdadb778504a9

  • SSDEEP

    393216:JDh18tIYUJ66g7aizy7V1aPubed6KQVQRdt2H6GRnsyFOVvN4tI8WQ9H+C6pn27v:JDt46CaWyhMWbeozMG6lyMC2n2ik

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

Processes

  • com.hiker.eduWp
    1⤵
    • Loads dropped Dex/Jar
    PID:4965

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.hiker.eduWp/app_bugly/rqd_record.eup

          Filesize

          352B

          MD5

          7b3b4127018c38544a22f36b3acdaae6

          SHA1

          85bdb8e403750991c1ea45f4a5a9ecc71433d689

          SHA256

          b1258e26d6f4420f02250facf82a4f6040711209821f6832fd55de94757bb399

          SHA512

          7c7df8bd0ffa89e5bf6f3cbb61b5ee3ab136910d6aa75c3514120efef98f2ead321afd2932d8d4cfcd3e7567339ad8e30e92f2867cafbe67820febab62aee20a

        • /data/data/com.hiker.eduWp/app_bugly/rqd_record.eup

          Filesize

          1KB

          MD5

          7f21e811e069b226a2f135bba679a244

          SHA1

          3c05a53186708afd8c288dc3225a84a15eea14b2

          SHA256

          43ed8cbcb7cff2cd077f9c0794f922f0f97f9dcabc2698e635f9cd73c817a1c8

          SHA512

          5ace7754797ac5e320763b66ff620bb62c04fc1a7efb029991524dd81ef0894d1829984abd8ea6588cc1b0dfd1c67de130c6ade3098c143e0667c853051605f3

        • /data/data/com.hiker.eduWp/app_bugly/tomb_1703186823432.txt

          Filesize

          19KB

          MD5

          9ad9c44f1eeb3bdfab900f2a4dc148c1

          SHA1

          ebaeb8a834493e97186d7a2a4e2b9cf76b4dc0f3

          SHA256

          c2f3367ff01f041439ed889c30a35840510cf124963901b2fa94c7a1d9385770

          SHA512

          7a57f0562a0d2f4287f907d3fc67914a40b19c2f52b6d4e45d20844dfa41dd4b7f54d8b2a391b275eed12767bc8398a03653e67754b04f090cab98bb55f2ed00

        • /data/data/com.hiker.eduWp/databases/bugly_db_legu

          Filesize

          60KB

          MD5

          48d6ae68dc96326f43a5709f1861dbeb

          SHA1

          4e00cb7e8371e9c7dec396b3d01f7898029995eb

          SHA256

          7382186f33ae7258a19cc924563a049c5ca1ce8490ac929188525031fa1bc809

          SHA512

          7bb5e2fc0d111eeeea048acb41b105f2a285a3afc48ab6c01ce90097605dd46bf187c1c7e962b16e1f23cb04f19bf936782f083fef44ed2978757c93f59662ac

        • /data/data/com.hiker.eduWp/databases/bugly_db_legu-journal

          Filesize

          12KB

          MD5

          889e4f9ab6c36c7f409d6e09ad551a73

          SHA1

          491b7fc9fd2340718cc7a3ebdb28d2368fbf5e61

          SHA256

          4c9c472dd9b04e86fd54d07c1b8d95c583edf603333659ffe28bb98dbe27f1af

          SHA512

          a01aa1589fd268567e2835145a3675b1fd3b942dabc982af83e6923b812ade6f8d794a7046698e78c63f2cab3f045e1880bf5b1e0baafb867b0c02c09bd2ac90

        • /data/data/com.hiker.eduWp/databases/bugly_db_legu-journal

          Filesize

          512B

          MD5

          a14ad80ed11bd98b5d509abb8c72a23d

          SHA1

          6b1ee800d418b91d009afb17064541d484ea394a

          SHA256

          9a326fff0f62f737b3d13ff2c4fc1c45f8a5af168fe8a58f04476a2b8f3fcdc6

          SHA512

          76d594450930711e652de7817738de495ad867c24f8e5475b0d75225c2062782c013976bb449573c41cebb30346830c5c402d1f4d727b81aaaa0c181860cbc1f

        • /data/data/com.hiker.eduWp/databases/bugly_db_legu-journal

          Filesize

          8KB

          MD5

          c99fc135d93dac2108da09673e7b8097

          SHA1

          1428a5643f4349d6fb17f864f2494a5ff201afd0

          SHA256

          392793cdb634dae2b16f5ee2bba27b162f63f63932de8cabb6822ced0c118a83

          SHA512

          0f10509e758afe8c8b7f8ec292a83987c6869750d5179766346af44ff33e42f3cef73d2417278a833f04027dbc0eaea769adf68cb1c1b2117140233f97a83f08

        • /data/data/com.hiker.eduWp/databases/bugly_db_legu-journal

          Filesize

          8KB

          MD5

          13998c007dc66e3b70fdc6a8a5abb748

          SHA1

          8830c21677095342a150e1d54eb6d980fa0575b4

          SHA256

          4af5b2fcc102ea4c8340f43ee7719f0244abfe1612e2bca0eeb55429eb18c8e3

          SHA512

          1f9934faee91b7ffa91806b703465642d53d301c6eb9b13b3a62446497bdf7b1da7491997b8f74e89ad467637c31b1daacf638b02e38b0ac0df44358270726cc

        • /data/data/com.hiker.eduWp/databases/bugly_db_legu-journal

          Filesize

          8KB

          MD5

          17ad72a738b48cf3aaa62ee8f9f12427

          SHA1

          5efc159301b7b61feb0ca8b757c319d4067b7683

          SHA256

          821f5c60564c5e8765525c5910067861b6144b87b1288ad66571b9d6b67a3422

          SHA512

          f2732c6f82fe7032e574feaf5ceb766c99ba44a12092b163454177f493f76278cb89f81c10008532b32152b3f94164017f548ea222744bcc469bec9da36236e8

        • /data/data/com.hiker.eduWp/databases/bugly_db_legu-journal

          Filesize

          12KB

          MD5

          c01bb39555db9f700737e430426a1528

          SHA1

          283f1c1bef9d4bbf10251d6e71cad7dfb7dc3466

          SHA256

          8c77922c2e99e1c79b01af129ad9e5802621104423c92cca157df84d47ab2293

          SHA512

          166eb396334dfde384c3f1c2587c966f38e9566b96b7cc1682e73740ede43a1150b81dce70bac3c48ebbbcb346483a7a821e186a280e7bbeba9e5a8492a28212

        • /data/data/com.hiker.eduWp/mix.dex

          Filesize

          292B

          MD5

          63f77f99bd2c2b772a479923bde11974

          SHA1

          c7632e7d301e4463fafce85f84e9c3d7da3fdbbe

          SHA256

          4c76a3af64cdd2f8713ffe2733dea50dbe714d0ca41c17d1847ee5b62a7ca615

          SHA512

          3aae4a89d1ed51fdd911cb367eb10afe3c2264e4222085891b18a60d5412f85d10bf5c8f3c6642db70abb9aa42732bac5c42c42ee32d587100f53c21b5beb16c