Analysis

  • max time kernel
    2825284s
  • max time network
    174s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    22/12/2023, 08:29

General

  • Target

    7d4a7d07153fa315b19de7d3bb4b764d.apk

  • Size

    4.6MB

  • MD5

    7d4a7d07153fa315b19de7d3bb4b764d

  • SHA1

    b27b425f8104806cf64495b0bd5c8a53d7ce2897

  • SHA256

    b3424c7293ebafc58c3ea6b8d42a21e3d5d11e9568d5d75ecefc6a76dc53aa4c

  • SHA512

    6d128cf473fe535a54e0112f5744ea65de32f610bcd027bff07f1730269173593bfd10724890405b60146d0b1e4ed8580cd225e2bc23c92ea2b9ec7c293dc20f

  • SSDEEP

    98304:VEVKVApmLb1IPNCEbg6QgIhBJlqo068fUqbzE5CTiZ8aXd9HWHQY+WPPM7:VEYeYLaPQ9hF0DfUAQcNaPHwQEc7

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.gufhn.plknhh
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4913

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.gufhn.plknhh/databases/LoanFlower

    Filesize

    12KB

    MD5

    ea628e04765adaf4238a5dcdff4bbd51

    SHA1

    a801947619ea8c368efe9c006a324dc6339ac60b

    SHA256

    885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4

    SHA512

    c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

  • /data/data/com.gufhn.plknhh/databases/LoanFlower-journal

    Filesize

    512B

    MD5

    2df0cc1aab3d9829db8657502f0928ad

    SHA1

    cf620fcdbc6137d4ba6a6efb3dbc3031553de4b9

    SHA256

    2da17942faace587880dc1b781983c731007223e8eb4960a348cf6f4a0afd985

    SHA512

    0c73082578fd546002bef03e466f698bb6635a71abc426b37ea34be755e2be6ed1be66946f274b18988c4c9fc13077da4fa1a37829a5874b1b52ae783ff66989

  • /data/data/com.gufhn.plknhh/databases/LoanFlower-journal

    Filesize

    8KB

    MD5

    2aa3e78f9720ade175e20d61c8e029df

    SHA1

    5d00ee757d6ae79e2f643fd6f5180c8257d04837

    SHA256

    4fedde7e2e6c9d87d0b6244752c94de1fe9ff63454df3a8d911760a7a9017709

    SHA512

    4cc0ac672aa0f3cad4c4ef97295701ece17010b55022bbf2a37b48134b5aaf4b73b2adfcb0e5bde658eeb3eca23844e1796a02b66212ab04370a000c7fa01107

  • /data/data/com.gufhn.plknhh/databases/LoanFlower-journal

    Filesize

    8KB

    MD5

    5a4100d21954e9564d92caab1909a1a5

    SHA1

    a4a6c05bce756b668bc8d82a4a94f230fd0c7abe

    SHA256

    301622b52f8fca2eb2cfbc5e05ff5ddfd8f041b972d947899ff2b4f3b33e3d88

    SHA512

    cc65e18d249118317dd11e2d1309873241dc31473c117a33de30c24fabd3df7f9b1c35cd3a789a79637063f7ab9ee67d842cef0cf34eaa7b42d34456ab135703

  • /data/data/com.gufhn.plknhh/databases/okgo.db

    Filesize

    44KB

    MD5

    ea8567f3be1e69cee0fd90aceb337881

    SHA1

    d0ea09d974511f95f81319f0211e0109d5473541

    SHA256

    e37ef597e4622ebee037ec62853b26f3a92990510f63b11de92858ae03a4f858

    SHA512

    9c7eda34a44b17ac72f57e32d72e0d0e23832f187d089801cda0bb7ad00f2470edd0902b83581e3235af55a6b9b428cb471f2f833f565f44bd9fb558f8cb93cc

  • /data/data/com.gufhn.plknhh/databases/okgo.db-journal

    Filesize

    8KB

    MD5

    2ad9c41ab7f6eb9423f7b2e61a122864

    SHA1

    f2fcf14847404625a88af13cf9d8ce4b9dd6cddc

    SHA256

    1f5e673842e4c045a7f1a9b34a4ac319e377c9c5ca83a6763552caec1c4dd5e3

    SHA512

    bdd570e147a87c1d0b2b9ea7390ca3b7cc01ddef787c1ab5844a2ca779b1a0a823c1f9ae56ecd06e30e40269b61c6eeeb6f03d247390c22427cae6b584da7e05

  • /data/data/com.gufhn.plknhh/databases/okgo.db-journal

    Filesize

    8KB

    MD5

    404da6a52c710ba5b254ab3643393816

    SHA1

    e125d059d7c0e2958175d97b3ae3c56bd707e2e4

    SHA256

    f79c060ebdb6369e4fccdd8f6f077454d2a5c25bb33f9b76ca4c6c6bb752fc76

    SHA512

    b434e9c2f9ec0aec9ca864f8bb26a37942b101325b2aede509d864541d5ea8cb66ed4c9f8453b7f7e7425218e696e78b66c30acab29bcb68399651829e9912bd

  • /data/data/com.gufhn.plknhh/databases/okgo.db-journal

    Filesize

    512B

    MD5

    f471f4b43a5e99d40fd7fb485b057a8a

    SHA1

    c4eb16c0e9953d7f015c5910a76b88ab780a07c5

    SHA256

    b17ee561c172e588580348dcfed453877d8d8f069be1b148e0afc357f3836bbb

    SHA512

    935476e7e935a861891ffe6494c5515612484ef7f60b5c7c88c302d7521d41e0f237f9aa823013957fbc9bc22d974f3388385febce30e5a79ad1b34a24be87cf

  • /storage/emulated/0/Android/data/com.gufhn.plknhh/files/tbslog/tbslog.txt

    Filesize

    1KB

    MD5

    a267296e6e7aa45c29c05c683245fd01

    SHA1

    b6fb969cc9a9db3cc10efb23a7843046af31971a

    SHA256

    b33e3b347a1668c88b69fb1e5b2dc1150408f98d322b873bba5375e4759d4418

    SHA512

    07cfdf11ef27bde473893205cb97debc7fb320cc9fbf7861a3463a5092e74892489f5477d77125e4b177df651318e25b85c50e05d4fc410ceabe12fceff32da6