Analysis

  • max time kernel
    2422385s
  • max time network
    170s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    20/12/2023, 07:03

General

  • Target

    8de12b2c557623a296c094ca82efe863359c76f0daf22dbb03bc6b8543c655c9.apk

  • Size

    23.3MB

  • MD5

    674d86dbc639573a6302179f0743a7a1

  • SHA1

    73f4e4badfc5d8149d2ff177e2198135dd785d26

  • SHA256

    8de12b2c557623a296c094ca82efe863359c76f0daf22dbb03bc6b8543c655c9

  • SHA512

    f7a402b9f96c7f7b08a4d8b668f83eb47f31df125a4d68812f96722caf14a53e31c6025d6a0006233873d9580432f2dd7e7abe40369fbb719098696e18a0af23

  • SSDEEP

    393216:p5WHHCcdl+9gnju+8PXb9m1uJ+rn5CZLT98lWLy8J5oPfUu90OrHlg3ksFNNFwxm:p0HHCcd6Yh6b9mcJ+7QLy+X0Pl90yFWr

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.org.qbqb
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4927
  • com.org.qbqb:mult
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5003

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.org.qbqb/files/jpush_stat_cache.json

          Filesize

          138B

          MD5

          292d837fb05beab88ca6d547b1d65290

          SHA1

          a123b0000217d3500ca966ffaf7c21ad9822ffb8

          SHA256

          b374398fc847033435443599abb292e59de005b2788bb43e63bf21446766c320

          SHA512

          b7b42020488504dbe09d420273b2b145f496fd33e77a4f8591ac1b8506a0edaa947c7825b96427dde6593ef05e271e90b773cdc4afabd8c609d4bfe8afe238ba

        • /storage/emulated/0/Android/data/com.org.qbqb/files/tbslog/tbslog.txt

          Filesize

          3KB

          MD5

          8fae72df69d117316f6ed405c1d42d73

          SHA1

          71c24296083768eb6d9cc3eaf955dffc7fea6213

          SHA256

          c0c83cd58366af84aa5412247365b3a36acaa51b26112c36b69eea485695bf05

          SHA512

          a4388c7aa0c21ba7631d14a10386f848d85e8c7c2df9e4534cc0a539529aa25d68b98586811fbf80536e1cf44ef1d057f73d8acc5e31c5b151dfb1cb29378a02

        • /storage/emulated/0/data/.push_deviceid

          Filesize

          32B

          MD5

          b3280a648482fe09e62929814220dbd2

          SHA1

          c19aba397fbd01e33c4d646cef07febf5bd4487a

          SHA256

          2ab0191e0a00835c5f00f357ec52e94d64f64f1793974c2a7f3f93f6fea5607a

          SHA512

          ff42c85edade2e07f0b2be76b9a7fa90e90193c599c5a7738d6e322498415a943480ee93d90d5f130e40394724f7bfa5298cb69faaff40a863411a708be9e019