Analysis

  • max time kernel
    2519448s
  • max time network
    159s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    20-12-2023 07:05

General

  • Target

    8e0478c6b1f2c5f2e03ff03ee1d9f2d44b5ad07dfbb501ddf83742081e99acff.apk

  • Size

    18.6MB

  • MD5

    b117f1d4fe0799d5ead03cebb4a81d9e

  • SHA1

    a9067f45ae0305c00b8b3cfdc5a2528eaa8ad753

  • SHA256

    8e0478c6b1f2c5f2e03ff03ee1d9f2d44b5ad07dfbb501ddf83742081e99acff

  • SHA512

    c0d3a9a9eb401564b2bea8ae1fdf7aaa94358274ed5ab47e587253d3dcf6de1a24b08c88533de9ce3f9b7a1b5a1a2dba5ffe24fd6f85eaee7fa2b2b8e96ea9c7

  • SSDEEP

    393216:nJhhKSOvVcRcXq+kBNtoD+69I47p+WLnV8JF5kBWwyyotYjIQ:nJhhKFvmRcNkjtK+69ZsWjV874T3w9Q

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Checks the presence of a debugger
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.market2345
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4515
  • com.market2345:PushService
    1⤵
      PID:4593

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.market2345/databases/androidx.work.workdb-journal

      Filesize

      512B

      MD5

      841ee8c57620f519e67e5a02e4104d79

      SHA1

      5ac6a8638fbcc04a2195bb7a61645c2c50d9507f

      SHA256

      221911e224315947c9d83f47269c2d46642b994d25fcd305bf31c2bf4dbc8b6a

      SHA512

      fdfd2809b493c489de42e8bf0bcef1a7974daff2fadcf1fe935533b1d5319ed60ab76f01cbfd80ba9a7fa342019e9385d5065f32583e5d5bc62068d0deaf1400

    • /data/data/com.market2345/databases/androidx.work.workdb-wal

      Filesize

      88KB

      MD5

      d34cabc3e57d8a4b4272d8ab86147bdd

      SHA1

      884add7dd269c4126c4f7270d0b4d501e073f14c

      SHA256

      b84c4f43afb5fa3eff7b469db9fb9f8bc1c60015783cd4a5d35953d8ddf10566

      SHA512

      66a9ad7f505ac876020ef321943d61ea7ece86ab868abb7f978159d7eddfa5d56c3cd7e4f8a3a312b5c72e15e82699c141aa14e8869bdbfc5a2b0c79af7a07ac

    • /data/data/com.market2345/databases/androidx.work.workdb-wal

      Filesize

      16KB

      MD5

      cb64d0a5494ba14f2d2fd03708c8acf0

      SHA1

      e65c12ec25d848a928b955dd7342e2739a5c7592

      SHA256

      6113f815ad20e6e9736a391b1f7c77aa5c6f7b1ec29ebd2df8a6a073ba8f9913

      SHA512

      c7ef04392226465965ae86c64a76598edec23a47252d35be46fea3d73e38f9e5b1720619e45a3de975655a667e589d03aadffe974bbdc7c5b94cd51a9a589239

    • /data/data/com.market2345/databases/wlb_db_events_magician

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.market2345/databases/wlb_db_events_magician-journal

      Filesize

      512B

      MD5

      ebfe2de4ea83765ee1d35f0bca3f7e1c

      SHA1

      9b61795953e95929619c25ba6acf0212b752085b

      SHA256

      1199e1a00bb5365ddc29a23044f17901f6dd588007f7006328a965528e428286

      SHA512

      1fd4f11d30341ad5e673ca3569ad9d1d5e1a7c08a382c2d3374b081b3ca27c4b0e2de83438540bbc7b99a30bf40f69cc9cf2ad11672a7e8c11dedf3733b9ae74

    • /data/data/com.market2345/databases/wlb_db_events_magician-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /data/data/com.market2345/databases/wlb_db_events_magician-wal

      Filesize

      32KB

      MD5

      83e49c226f61ee98784d118573e0f9fe

      SHA1

      5f793e231790cda0bf4cb0d2c1cdd7d97257e15d

      SHA256

      5ce659f636e8cdc93679db805bca11f331770befe0d22dd2baf7185a4af47196

      SHA512

      9586841779c6de2d64cb4875c2380770c60f0592f34612665494607214655bc609370683cd2adaa44b47715306c029ecd81aa66f091948c98b1b40c0ee4ed42b

    • /data/data/com.market2345/files/mmkv/mmkv.default.crc

      Filesize

      4KB

      MD5

      620f0b67a91f7f74151bc5be745b7110

      SHA1

      1ceaf73df40e531df3bfb26b4fb7cd95fb7bff1d

      SHA256

      ad7facb2586fc6e966c004d7d1d16b024f5805ff7cb47c7a85dabd8b48892ca7

      SHA512

      2d23913d3759ef01704a86b4bee3ac8a29002313ecc98a7424425a78170f219577822fd77e4ae96313547696ad7d5949b58e12d5063ef2ee063b595740a3a12d

    • /storage/emulated/0/data/.push_deviceid

      Filesize

      28KB

      MD5

      067b108cebfbcc06db4eda0ceb2b344d

      SHA1

      080e7d218790f49623590d7013b84a5350cbd5c8

      SHA256

      bf851d6db30e9497191e41bf55e7d759d957e16a7210c3b1c289fcb16a908050

      SHA512

      8c322c782792e2c5dc06924eed6e8fb8de4a4bae63bdc03eb622e8f9ae6393b1f6da40cfb9b49ae365602a3ba3ac783579615232aac8ddd10f612414dc04e3c7