Analysis

  • max time kernel
    2515187s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20-12-2023 06:55

General

  • Target

    8d814e75ad6636789c1505a6d5486652aecd7763f6ebabb6a77099648c248f91.apk

  • Size

    15.8MB

  • MD5

    b9314208ebaacfdb871186ce3f049d19

  • SHA1

    99f1c3b171899302f51455d1d14f3a9b0781c010

  • SHA256

    8d814e75ad6636789c1505a6d5486652aecd7763f6ebabb6a77099648c248f91

  • SHA512

    d9742e23bba18de1d54e7232e41a20a84ccec01981c6a7640da662b77ecd184a52252a861715f7bae6d6d6b82cef99e51b2b893b8cd212bdfb7da04242dc8e15

  • SSDEEP

    393216:Clwisyqr7LqVI99fI5eK300zl0rkksj8BmvjFBvT5o+SwVn0am:CKbdQeK3lzl/jKmrLdpxm

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.tushun.passenger
    1⤵
    • Requests cell location
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4252

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.tushun.passenger/app_crashrecord/1002

    Filesize

    230B

    MD5

    b670f61ad56a7b24abc30ab89b0931da

    SHA1

    a72510fbafa46af4f91fc7f9a8cd00053ab2938f

    SHA256

    37d00d44442b30fd3af22ae4c97647ea61787067f431b4fb971ace79e6e8ca85

    SHA512

    778f10ff00d698be13589a55d88856c8a60cc7616f89864fa01b4eac4e58e421a8918fcb6487c2267c5b56753c3277e326fdeb6cbf777de6cd17efdd8dd4670a

  • /data/data/com.tushun.passenger/app_crashrecord/1004

    Filesize

    230B

    MD5

    5e2c2df1e6dc8e510d0ee844268d5c17

    SHA1

    b27a8d45b58ce61a39ba347d6b077f137241538a

    SHA256

    acbbd1cdf0f5ee90ba763e9ba3959de35dbbb8f202a7d4f55b74c2c5a16f2880

    SHA512

    b02a1aae9f31cbe720c6b45fb0c32f645233ce0a273ffb9dfa0fecbe21517a2bc9c5a5cd53f32b82fcbd7856efafde515ee4467d383c5d42b435da0596adbd99

  • /data/data/com.tushun.passenger/app_crashrecord/1004

    Filesize

    58B

    MD5

    0d210bfb2a0e1f1b4c082a6a0f79de07

    SHA1

    bb8ed9e364db79d1d9f2fcde3f15091893222faa

    SHA256

    988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

    SHA512

    536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

  • /data/data/com.tushun.passenger/databases/bugly_db_

    Filesize

    4KB

    MD5

    f2b4b0190b9f384ca885f0c8c9b14700

    SHA1

    934ff2646757b5b6e7f20f6a0aa76c7f995d9361

    SHA256

    0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

    SHA512

    ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

  • /data/data/com.tushun.passenger/databases/bugly_db_-journal

    Filesize

    512B

    MD5

    3d440a601e56c313b3f2617ee0664deb

    SHA1

    93f2cc89b769e3824512d39c545a38b084bfed81

    SHA256

    2a9c2697053d44175e069e0c3d99d6ec5ce08fd164025d6f08b001494d09bce0

    SHA512

    76dcf32f77e8ec82b865fed9b587996530a4a4d205cd98562ae9d4eeabc364cf6086a3e557dd1604f72b630bb74bfd1f75809fc26c022f582ca440ba4fa361d5

  • /data/data/com.tushun.passenger/databases/bugly_db_-shm

    Filesize

    28KB

    MD5

    cf845a781c107ec1346e849c9dd1b7e8

    SHA1

    b44ccc7f7d519352422e59ee8b0bdbac881768a7

    SHA256

    18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

    SHA512

    4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

  • /data/data/com.tushun.passenger/databases/bugly_db_-wal

    Filesize

    68KB

    MD5

    22d1dc57f8615ded68aaab6dcf3aa26e

    SHA1

    315cf216e574bcf3a8681221f57d4e615828247a

    SHA256

    5e27664981f89408b0c226136db5bd4a2994cd245747a5907b7af6de0a37422c

    SHA512

    44bfca9cb40e9ea0983a6350059e544d79f332e2cb51c27588f300622ce40e4174a99ef63ada38adaf84be2023e26188f36fe31598ebde6be9ce4d857add4df5

  • /data/data/com.tushun.passenger/databases/hmdb-journal

    Filesize

    512B

    MD5

    c1a284e35a4c66a86c81a09404774c0e

    SHA1

    3df34ca04aadb281b22dc7be856a067f2e6e34aa

    SHA256

    7cc98c581ce51c0f4b031e06c8d601d1a20e4f4e59afbd19fbdd84398b81face

    SHA512

    a3d0e45e969e75cef33b534b778090ab72976a4e5984a39c28f8af3623b3d45ba35a41c6e143986a89cde63cc92b2df0eba728de5817c3ab5e88ce519fe0dc7f

  • /data/data/com.tushun.passenger/databases/hmdb-wal

    Filesize

    12KB

    MD5

    e0049581fc342f90397a10e2a70e0642

    SHA1

    9ab12e73d809ca1247456589b7bc61724d2e41aa

    SHA256

    26414cccd394de11c2017aba7562ddcc633baed04fd520ad168fb627bdb169cc

    SHA512

    d8bb02012705b1c35d5f75ac84911e6b8bd25a400bbab2548a1596c4cae88a00c0a8fb53606f917e7d3d1fcce485596fd65107f26d679ec6b2c19bb78d526b82

  • /data/data/com.tushun.passenger/databases/logdb.db-journal

    Filesize

    512B

    MD5

    ce8d220a36bf5a8dfcb4ec04db34eebe

    SHA1

    297b7c27c86925aeb8aab2e7cf3772248aa2630d

    SHA256

    3752336ab48fe3fb07aa5dad8af7043bfe9da2313e608b06694b44741017cb84

    SHA512

    9814fc1bf7cc732104691915a85037a58d4c45b60baf7163d964e5a5224fe6b55e29e8fe5c35484aa74631d1a256f72d440bba44cd7c142421c02272165ff437

  • /data/data/com.tushun.passenger/databases/logdb.db-wal

    Filesize

    16KB

    MD5

    d8d71f9c7e01508a89a066fa7fe7e5ed

    SHA1

    4e2f0d25f5ad4288241c77d77e1a3a9f2c4a6915

    SHA256

    e0f1aadcdc8f56322a6c0ecef88fec729bab5fc7f184bb731b4669c92e6781ef

    SHA512

    b688de5c76d6d99c4cfc2c73e13ef66a428655ea3323a8d429e764e0b457603b5653dafebea5dcfb05b9a897a5b86f948ef732604a04117eda3b0f8162605b11

  • /data/data/com.tushun.passenger/databases/tushun_passenger.db-journal

    Filesize

    512B

    MD5

    b4f6ae27458979782fcd046a9cbce726

    SHA1

    4cb8d5663204b711bb1d1210a7e4290b338367e9

    SHA256

    8c894da864406cd2bd392156e6a9b61f06eb7676165ab8b422cd4cc7e5077acd

    SHA512

    50c392e416b200d2af42b1fc74bb02c0533828a15899de37cad590fe43d6b035eada3c74e7b81d473032fc604e2f3135098343d7f00c27a4364ab44de49b37ec

  • /data/data/com.tushun.passenger/databases/tushun_passenger.db-wal

    Filesize

    16KB

    MD5

    33a851e131ff257d3892873582b0a1e0

    SHA1

    547a41309be9bfebbe261ddeeb8c089e9abab3f5

    SHA256

    7907ec6b865ebf2b37b71e910a64ede9f17a149851e3822463bc7448f8400c92

    SHA512

    8475d76d4a4341363285f9cb7f5d58675b7c5151dbe5aeef0336fa4180cdccd12cde971c79f736b09ca99b691250c6beef440e0318935dae33b932eb601438c6