Analysis

  • max time kernel
    2514120s
  • max time network
    129s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20-12-2023 06:52

General

  • Target

    8d126148c0886b94f2cfebbdf87ec709bdda724e2f9772483b7dbc23baf6cb37.apk

  • Size

    8.1MB

  • MD5

    07acbbda20097a270e9d7063e2b14e6f

  • SHA1

    4e9edc247e9094477d42f756bf4a836e9ea526fc

  • SHA256

    8d126148c0886b94f2cfebbdf87ec709bdda724e2f9772483b7dbc23baf6cb37

  • SHA512

    c4dd5303adf404184116bd9145fbd45c7c946d583177034b0c4ec03fdf98622b853b1e33373ec9bee836cf102174daa55467f5a97f6d6e36f8782b02e776924a

  • SSDEEP

    196608:GN0wlqcOzmzG6GEikCsU8xA5PWcSPj8G6nuL7dhpz1ClTdT2:GGGOzmLjHAFWFAGuuVhpz1sTdi

Score
8/10

Malware Config

Signatures

  • Makes use of the framework's Accessibility service 1 IoCs

    Retrieves information displayed on the phone screen using AccessibilityService.

  • Acquires the wake lock 1 IoCs
  • Requests disabling of battery optimizations (often used to enable hiding in the background). 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.aiaxc.gz:script
    1⤵
    • Makes use of the framework's Accessibility service
    • Acquires the wake lock
    • Requests disabling of battery optimizations (often used to enable hiding in the background).
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4493
  • com.aiaxc.gz
    1⤵
      PID:4522

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.aiaxc.gz/cache/image_manager_disk_cache/journal.tmp

      Filesize

      31B

      MD5

      8c92de9ce46d41a22f3b20f77404cc1d

      SHA1

      8671a6dca00edb72be47363a7071be65cf270373

      SHA256

      68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

      SHA512

      30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

    • /data/data/com.aiaxc.gz/databases/IntentTaskDatabase.db-journal

      Filesize

      512B

      MD5

      ac18244da8fa6445d07ecd06425bd4bb

      SHA1

      6a8503524e1c3d4e6fdba8e8e9c9aa6e8b9b5c5a

      SHA256

      3afa5d62136060544520ea4618d4158a7b55aa112c0507acf166423664d4f943

      SHA512

      27d855f5d07bd89a17c42318f5c29cda1c10cbd496baaba6b780e20215205ddcc9928bd0a873669cd6a59f4acaa8e6129f4fa9e86c6184fef80387315b078216

    • /data/data/com.aiaxc.gz/databases/IntentTaskDatabase.db-wal

      Filesize

      32KB

      MD5

      3ca7242dbe43fca7e6ea30882e0eff72

      SHA1

      390efc6779b3255de1d0eadab66f0a45b82a1ffe

      SHA256

      8c2e7a65c44e2e63075559e866d4d4521a460bda2801cc5e1f27100bd122d8fe

      SHA512

      a82fc72c9892094e740391295613bee765849ec15e10e57e1094f889542f99968d15859a96e62490143f435c5956a43fdeec6da2782222f0844da8f8e7cee09e

    • /data/data/com.aiaxc.gz/databases/TimedTaskDatabase.db-journal

      Filesize

      56KB

      MD5

      f210842e3a4df805a1049486055d88b4

      SHA1

      aca13398e815b287364b01ef94ddf413de68146f

      SHA256

      48fed8e79a2f25b3337a8b2bc3753018143f572f26cf6f7fd1f0fa04f8193b74

      SHA512

      5ac96fecc367fc4ad5844613e80775d53df8e16918f080cbed84788359d8abc3236feebc18dfc15d23e559e38a2fbdaa190912ed1165393b696570f8f7902b59

    • /data/data/com.aiaxc.gz/databases/TimedTaskDatabase.db-wal

      Filesize

      32KB

      MD5

      e44410aec6e37ee46812acef45b7e4b6

      SHA1

      cc9622e6ddbb88ae3e4de61c48087c8ec7fe6f35

      SHA256

      c7958c443c66b4772c9d967c5751784cbca214aa9c5d450ea12c872fe9c614f4

      SHA512

      31994413a8a3db2078c11013de4ae1e7e43066aa22b9dbe001a6b344a230b448707aa743ca88c6982e53b683556fc1860be0d889b74b9030ccbceee753df1fab

    • /data/data/com.aiaxc.gz/databases/evernote_jobs.db-journal

      Filesize

      512B

      MD5

      19c980f9e02efd08febbf063798fce7f

      SHA1

      55c74510f1eb7b8cd359b58979ac83e2a7e5470b

      SHA256

      77a7001e2de606011f5f9f55c6cd994b56d1c2181027c2a74bcaab53a8e86010

      SHA512

      fe00f001f87ff69c9166b40d1bd6616cf9cc3f72b7dce85d4bf3b942bc530de654d7668d3cf547f34a77f8b4ea4043ed01600c2588654a529037afc6dc9827dd

    • /data/data/com.aiaxc.gz/databases/evernote_jobs.db-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /data/data/com.aiaxc.gz/databases/evernote_jobs.db-wal

      Filesize

      32KB

      MD5

      0b5243f2c42adcde596124c86206608c

      SHA1

      00be5e896e7b4296c44d77a8152b3feee3211e43

      SHA256

      254d6d85d57cc1f3b90b36f8c72bf86e4d48e65cf07ed04d545b702f92dadda4

      SHA512

      018c79d91b9473e70e8a944541377561814dea4c4c87b1a010131e88d45ea1f72b8070f8f4518d6397ce6e1e5aa9ab580668a065907c9a1781a5882886b35873

    • /data/data/com.aiaxc.gz/databases/tray.db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.aiaxc.gz/databases/tray.db-journal

      Filesize

      512B

      MD5

      0e5f34013439825938ce6af7b33f0d70

      SHA1

      eeb1c7cbc111668fe5ab98e83b1bfb9db05616fa

      SHA256

      5618535a1d16e587775cc67153c85eabdff2c24dac0aac841abc19c4a9b6bd71

      SHA512

      03ae5afa097827b6df871bcd29120f6ffb7dc089a1690281c555b54393b9dfa386a5238ca7be9bd27ebebccdbbeea386c80576dcf445470ff20af7adbb7196e9

    • /data/data/com.aiaxc.gz/databases/tray.db-wal

      Filesize

      16KB

      MD5

      97904550d9b153fbc79e152de446e529

      SHA1

      d3f22c760b7252e7cce5f9e5fd5eccd037f8c743

      SHA256

      95779c305bf21d4cbaf169623428e17f3ee8305498d190976a926e9c55880637

      SHA512

      01d5fbfeebd49f86f02ed96557e241dc181f33abfa887d59e1799f8f2ceb67e9de454ad550ee641f577cb32aa2eccf8a21f388d28cb07894639424e5b742778d

    • /data/data/com.aiaxc.gz/files/logs/log.txt

      Filesize

      4KB

      MD5

      93a4bf0f1c395c8749f7cb8dc459fdc7

      SHA1

      7813fc1b6df984f860e7ec8dd70d6a66c71b6d44

      SHA256

      76ed1eeffaa2d3b07bcc1071a3cb724f634a5bf96b145e0646b0dc2ddc954fda

      SHA512

      1da44f39b08f505ccd73b7d75e5fe838ffb850cb5fb0bae4cefc2eeaaa8a5b280b70772329a0146d2cc7b320c4a1c3496616b231cb11d3d4eaec07920358dfba

    • /data/data/com.aiaxc.gz/files/project/coordinates.js

      Filesize

      58B

      MD5

      ebd2c7d6b69e3656b0cada1278ce86bd

      SHA1

      f82ff21d83cb9d1e7833ba2c655f84b510d1b4ac

      SHA256

      27e9d6d76599f0ec0ee15943ce66eea67f7306d04838ef51b0ee876ba1db9559

      SHA512

      c44aa4dd6b3bff4e03254498d80df99a8446ca7fb984fde2e4ed5174ea0d19bb0cecd9952e41b176f453ae7da90e0b40c751e4b9e24e26e06177c450e560ffc1

    • /data/data/com.aiaxc.gz/files/project/joy.dex

      Filesize

      1.2MB

      MD5

      6e785fd8a939bb2a46602b41e29d05ac

      SHA1

      033a042d33e876835f813a38a04de6ed27acb7cf

      SHA256

      74c804bd3ff3b2aa5b18d308473bc802dd46bcc8aed022b5d672ba8d0e49f311

      SHA512

      1dc02bc314e35606f310893d3b92a6be2332bf4fbf2273dbedfffb75bbd96da24e9a920b735196987384500479e333c44f6bd367432c9ea47a6d489846944d22

    • /data/data/com.aiaxc.gz/files/project/likemusic/musicliebiao

      Filesize

      32KB

      MD5

      4ff82bd28657c24013efaf511efb34e6

      SHA1

      72fb24967a4ada400764dfa53f12604bd88bb988

      SHA256

      8ac7416f6ad55cd93cbd34eb7c9c0fe46c0cb1bf131c954f73362da124833398

      SHA512

      d13099c84bde655b87302d1730b461586bd67b973c6ba66f52807d852bae56e9d307edcc78851981f835fda9c97ffd5b6a21d59d8156a0d728b2a03950415b5b

    • /data/data/com.aiaxc.gz/files/project/main.js

      Filesize

      262B

      MD5

      9295af8e7773c8e86600856e9958667b

      SHA1

      cba7dd155c858e03eac9c1c937a85c5e06f020e6

      SHA256

      8b47a71c9f4abb2373c77745a46d631b7da9f981bc54088b51dd1c126f62d160

      SHA512

      6d58f5eb35aef9dcbe0775c7ae4d4ced97e544dd70985a8bfb280438f8580b7edbac6caad15def86efdf4ead9ca0f16b8915ed8dabfb2a8196c1059b2463ec9f

    • /data/data/com.aiaxc.gz/files/project/project.json

      Filesize

      773B

      MD5

      c3c473fef1ad4e2cd1cea46ed3c3e640

      SHA1

      694607b12f265faf4831d13b205683b6e551a18a

      SHA256

      1cd4c492dfe3dad5d28bdc034faa3ea42b67bde32d69696c428e70cc66e2fbed

      SHA512

      ab03fa8e9012f6cb595c0e6c0db50091e1efb35821efef2c7215a44974bc0e08cb24764413362f50e34a6df54929c1fa5bd013e8468564eb2239bdbb78788db8

    • /data/data/com.aiaxc.gz/files/project/res/icon.png

      Filesize

      147KB

      MD5

      1a7b49a8ecb2bc31bf10288daa1aa759

      SHA1

      9d8dfcf0afbea8b27c3241d32aa7aede2f2aab10

      SHA256

      7b03984c9e00bf7e1c7068eac9d5d91ee042e14a98d14d76d1f7f582505c4570

      SHA512

      addd92a9fbba168cc0556f1a7ecde4c85a6d1f811fe02cd459c25a54f0724cef75f07d6edc28134cf8738c01fac3da68074db5f489a353e176ff32c8ba700c1b

    • /data/data/com.aiaxc.gz/files/project/res/logo.png

      Filesize

      11KB

      MD5

      7f3674225fd3abbe7a015d9316015bf7

      SHA1

      0333d67704e0ee4e8f37e66bdd9095ef0f26bec4

      SHA256

      37f1a65e201761d46ecd18b12b2f3d9e4ae265edbd1b43cc6979dbd0fadc8e76

      SHA512

      d6d633a73dac20d10b32c965a6e40d3ff6cf8ff4b966d322625ab78e0f87d2b13093ff776d4c117ec1fa440134ba026bc4b8e7b03136cf728e8b07d13d7e6b88

    • /data/data/com.aiaxc.gz/files/project/zengsongmusic/1.php

      Filesize

      2KB

      MD5

      13172287eabf7bf219cf24f7b7273369

      SHA1

      e69ed72b8d23e13d647774daa032f2a9af0903ab

      SHA256

      c78049d97b5a9971adb011c0a3e1cd8d43b83b5d4ae9ec4505deb07bd6e395eb

      SHA512

      600cb03de4d9aa6339cb419a2f14843bda6223557782c771ae2d8755e06b624acce45265920cec6f6fb9cccc24da0edef19f80895744ccf68445dfb88458497b

    • /data/data/com.aiaxc.gz/files/project/zengsongmusic/10.php

      Filesize

      15KB

      MD5

      86a90137db0847615463e944b5712bc3

      SHA1

      db8106f6828de2a375195dcea348bd7aa44d80e3

      SHA256

      cefc2ab4d6d96eacd4d8be708f2d9e59ab093bfb5207f57493d123481bbc950e

      SHA512

      4f966479647b12547ff16a412213be4bcd5d1ae950db35c6be3a492f4dca54ed33d0c19b657f641ba835b908a728138ff20b3bc6265ad1d14583329651b84fae

    • /data/data/com.aiaxc.gz/files/project/zengsongmusic/100.php

      Filesize

      10KB

      MD5

      ae0e0881463e4c15278ce6b489f87f54

      SHA1

      76854310ef8b547abf6a309999d63e0a41a8493e

      SHA256

      7f9a16b6c06bb10354d501775fe0dbb447d3db01409675c5d2ac6577fc79196d

      SHA512

      a0f16399ab0230aa4e74b6505c3a1a00fe1e4172c491958f55a6d3e3dde7ab59b1bf3a1ab851842048dcb357bcd9edc17d139d7070007e17751cb723ec411070

    • /data/data/com.aiaxc.gz/files/project/zengsongmusic/101.php

      Filesize

      11KB

      MD5

      db97edab83e4990dc93f5f859837d9f1

      SHA1

      60a6be4adf35981ee5fcec769172a1a17d30d195

      SHA256

      fcc89764b5b5a030251559859bc2877232324d3b899f25e5f3dddbd2e7e669cb

      SHA512

      d2b914c2aff632c7794f0dfa7c5651f7a28b1754a2cfbd18e3df92a2dbc435127bdf1176de1ffc3c883ea837c2c0b62a8d6ca84478676f31098c9a53d3b0c79f

    • /data/data/com.aiaxc.gz/files/project/zengsongmusic/94.php

      Filesize

      14KB

      MD5

      096388c9fef0dd270ea71be24ad6dd6b

      SHA1

      e332c69b0fade74e8adb58b6e8f3389c59006c20

      SHA256

      582724d63d59854319e4f48f95b60a3631d8aabf06ed876917a94dcce3ddaaee

      SHA512

      c7ccabb6695c438bb8454d797df2deb4db5b92733b0ca17ed6071eedeeb654770e44b8bd4b4b28e1cfef11d74be27aaa3fc43a51f3cdfd54de7d63b2a1a72d15

    • /data/data/com.aiaxc.gz/files/project/zengsongmusic/95.php

      Filesize

      25KB

      MD5

      520e77a902057bb9b19a03a16075504e

      SHA1

      c26cf445066d98d21488646484c8a92cf03b28b1

      SHA256

      ccb828823e58bec753447841d9e7e61d47f40d0ebac5e6724ad9aad2119f67d8

      SHA512

      bdfc76dbb459f435d9c0d9de52be68c30bcafd8093c749cf322e706aa7082150e117b69abd523a332de8193e1eda2ef3b1b52d33c169758253e95a28e8b020a8

    • /data/data/com.aiaxc.gz/files/project/zengsongmusic/96.php

      Filesize

      17KB

      MD5

      4b7309d156859d4a63281a550b1d0564

      SHA1

      f151ab1750a7f7c7a2019199689497d40a22fcae

      SHA256

      a22aa7aa717c8ffd41a65a89736156e38bca8c685862a06c6837c6a189738b7c

      SHA512

      607ec3ae29c0ed079e3925ef873c4419bb22b3a6d6801ce42307f317ce7bd15a09166072b2e7b00f88fe368e9a465a2b5f74f825ad0564093cf06f9e11903790

    • /data/data/com.aiaxc.gz/files/project/zengsongmusic/97.php

      Filesize

      23KB

      MD5

      1caf7a86bce6d5e85f24420bc936955a

      SHA1

      f8aa0bdf73585f148c097ec17b043f225f1b5989

      SHA256

      e636c3503034318732c086ef8312fdbdd1f1229874e8f9b65fd61dbd81eba95b

      SHA512

      644343fbc38f2aab5abae22215e78eee30c71efcc541e540a3bb4de8789ef9eb12a365acd246b7ce0cae4c36e438d5fead092c2632302fd73b0607e3aec3e1ad

    • /data/data/com.aiaxc.gz/files/project/zengsongmusic/98.php

      Filesize

      18KB

      MD5

      13e6c2d7a083e7f0018c6c6b8c5da42d

      SHA1

      7f3a15a23a41297ac19eb7562f11429fa70b6e24

      SHA256

      4ff6899a2c62486837a0fc55db42c2b41c1da047183b7c27f42a99c7712ef15f

      SHA512

      8a29ababd80f960258cc32401d9ccd2c80959018141aeb3c264b46cfccf0ec9c5e96b9f46118afbcba41deeb98d8afff100767bc35cb9f7c9081aa1d32fb6640

    • /data/data/com.aiaxc.gz/files/project/zengsongmusic/99.php

      Filesize

      5KB

      MD5

      662118ae2522442bf4711c210f6e5d82

      SHA1

      15f3ed0b5a5a32b3514bdd9f6a22c9a630180187

      SHA256

      2a44a163c112465d51032183beb993a12c46129990e261e864be48f5100dcea4

      SHA512

      d2279d5539f887dc2ef3f0641fa766dd6bc1f8574d3d21ba7160752a5e7b2df049e3014bf786d915531d74b642041d18bc9e9fb802468fd5b3e2885b77121839