Analysis

  • max time kernel
    2662210s
  • max time network
    174s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    23-12-2023 22:14

General

  • Target

    95e1ac14a38e07e681f3c44b4f9d3c937accd4ab4ddf770e436656203d943d3e.apk

  • Size

    9.8MB

  • MD5

    612f512c0228b2a5dea4c3aef8f69ad5

  • SHA1

    de42145252126c2939ab069ca693e89e921db994

  • SHA256

    95e1ac14a38e07e681f3c44b4f9d3c937accd4ab4ddf770e436656203d943d3e

  • SHA512

    614e2a3047ab7a521c04009f75e36cd3ef10b5ecabe3f0a93a605647b11243df5e2ff1fb017f377beec4ea5f4171191249c026a4a10b7ced8a3bc323ca097b5a

  • SSDEEP

    196608:JpIBCfhlsxu8lQWZctG/yhUbVEHa7WU4Wq5boJoTmYIg:0BCV8u0q037WU4Wq5sJoqYIg

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

Processes

  • com.xmcy.hykb
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5100
  • com.xmcy.hykb:channel
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5322

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.xmcy.hykb/databases/MessageStore.db-journal

    Filesize

    12KB

    MD5

    9d340494b2c517fdaac48f53ca51ee7e

    SHA1

    b9226ba9f283a83e33c416cc1682774907b9b3e6

    SHA256

    f1ae7b0d40a85d07215ad43579cbbb5eebd0b49e55eeaf216ff61c0287095c67

    SHA512

    0fd4e89344132c7f25357c643119a78215f54755ae7ff994eb6c7f7cac1b4ddedf4b480cfdb39444a211fc2ffd75e8a32d9366ed903f11614ea7baa64884e641

  • /data/data/com.xmcy.hykb/databases/MessageStore.db-journal

    Filesize

    8KB

    MD5

    9deba267af2f95e0ab56dac12841aa7b

    SHA1

    67267c154e3290b733a4d8817f057e751c68cb1e

    SHA256

    e5bcc953d95a2749030616fb0d556cccfd8f1cf4666fc36728ffd3c76c7e4e2d

    SHA512

    16a6ee2d40af39fb1583d650540429438132915523708c4d7c32d7925d6150f31f2b21c566570fc5cd1568a112cd8da211a5d0a9934c295f70c6bd8b8ad87582

  • /data/data/com.xmcy.hykb/databases/cc/cc.db

    Filesize

    12KB

    MD5

    ea628e04765adaf4238a5dcdff4bbd51

    SHA1

    a801947619ea8c368efe9c006a324dc6339ac60b

    SHA256

    885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4

    SHA512

    c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

  • /data/data/com.xmcy.hykb/databases/cc/cc.db

    Filesize

    36KB

    MD5

    67c12933d1e0e63d9801a6aa43092ce7

    SHA1

    b6936908554e4a1986b8eb08289e2d3545e8ff74

    SHA256

    abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40

    SHA512

    db8b818daa3ff4ec7678645f84bf8b45c809bcbb758ea78b28982d071572655bba2d20e6f1ca4f0d057ab34fa655c5bc40457dc65050180351a2fc04a47175dd

  • /data/data/com.xmcy.hykb/databases/cc/cc.db-journal

    Filesize

    512B

    MD5

    4882dd23971c4c2f26eb053d62baae7e

    SHA1

    23095bc4418b9fd736f463a325c29fd44ba69dd7

    SHA256

    8bd9ae074b118d27d7d91e1887eb88550a3d63ec0ba6e30aa616b81a8c193ea4

    SHA512

    78d4c96c69c0c5ff07ef6af2330f6f3352b137802d4a512f60958b6abe0510750c7760f8342989c84a348ec369fa1826b0c1e21dc22d26dbb5ea2795ff660be6

  • /data/data/com.xmcy.hykb/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    e0f760fa33bbd9d2219293a749a187cb

    SHA1

    cb976b5098f93eb8dd6506c3f21133463328b2e1

    SHA256

    c7c388093d6075395e83f25320ba28c2abf46bc07f5c1fe74992859b4861819f

    SHA512

    cc3d2269866d71e0e008117a16477eab26b9be3cd926027ec084572a7c277c96beac69fdfe036630bc7cdae72f7f57e05eb5316c94a84df0508220461fd9d3e0

  • /data/data/com.xmcy.hykb/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    92e3c95d5dd5c15f1d6695dd15d4ce84

    SHA1

    2e4e8b8c568bc5ca42e9cd0c1e51d14b33ae5171

    SHA256

    accd3b8ed80d2b0d5ff4654b8f9578bcd67196bd276dfe2308e600adbfc41a0d

    SHA512

    ddd82c2498ea009e0e27e50080236aaa4bffb34e254c6fe6c35338f0423825dba397121cd761e05d97aba26d7c40c0a1d3624d45d3a668d8e5480cf57106dd1d

  • /data/data/com.xmcy.hykb/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    415ffd7f492af3da7251445f34fffde5

    SHA1

    c4a535de4cce997a16e9b0465ff98dcb9f01a126

    SHA256

    45abc45c3db314204d39fa3a43d453754cd11cc5944629e12acf7beadaf88cd9

    SHA512

    450924f3c454e6acaead82252a52b271b87af3a291d8c6b8e965b7ec246d173b35847ad5f53be9277dbbf0244d988ac11143d5cadcde24888347e96b57316518

  • /data/data/com.xmcy.hykb/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    29478c5602c147ff7f81cf7aa5336dce

    SHA1

    ce13b0c998f5062287b8275887985de362e5e00c

    SHA256

    4654509466f5c92cb040c67e9535543d2aa95b01b3466c9981a5a24f87a9de04

    SHA512

    976a2f8c230ebd40afe760923ce5be85710f8d8d12843cf613ece95c0913a8bf7efb7bb0dddc8d66dd06da64f3b96b881bb06b3d4793a5090bc45e8c67135414

  • /data/data/com.xmcy.hykb/databases/cc/cc.db-journal

    Filesize

    12KB

    MD5

    a1a07f70cd1d07ed3eee35c86a004d80

    SHA1

    02e847cfc0412fcba57a6f3e1b3dd7c03da65b0d

    SHA256

    ad28bb4df8807ad7f68169ad2daf0f59529e667c5780a0b4d50471b571cf83b7

    SHA512

    78ce199cd3fa1a77a4a65d5afcf05bb1576958889772cc8f37e917766b9dda7a0558df5948240f6dc8cf75560302e4f94a2939e26f7fb0d85a1c2ee072ffaa29

  • /data/data/com.xmcy.hykb/databases/message_accs_db

    Filesize

    36KB

    MD5

    709cd5b51edeee2934d9e2688cbbf18a

    SHA1

    a23b1049605ad14c856b1b11e5209557d25168c6

    SHA256

    72a6886ffd8ea2e5abd5011eca1b3d2a30a78433448eaac188e4bca0b865fb08

    SHA512

    ba7a65e0ea3055759c7329495b45c5e5c85f07ce19d530654804df6b78bbba83f2e8e9ed34c766a5476a94666ab8f7fede34a3360bc8519fc5efbe5e5021860e

  • /data/data/com.xmcy.hykb/databases/message_accs_db-journal

    Filesize

    20KB

    MD5

    a0110e64db0b344a3a7743d64966ffe0

    SHA1

    d6fe37d9e390d8ad3e3046a90c77c68270eda92d

    SHA256

    12054418756a8663a6156f8e0c10f88199e86767ead92a6920e107b44f5095ec

    SHA512

    4d3188e2e826be96486d2192a714347dacdbfa66ae4c6106550dd60a0d318df633f0d68a99ecf746a29ac28573cf9e75328e4f8fde3b526fdfb0277ae4b6154a

  • /data/data/com.xmcy.hykb/databases/message_accs_db-journal

    Filesize

    8KB

    MD5

    add42e7e549f2e211dcd30e5a9452735

    SHA1

    f1840e45a94975f46ad95c5a4e63240f195ee6e0

    SHA256

    5026ef2852c6ed3b9c4ef90059c2e3330f26b73592f2bf3215a229f5af77d836

    SHA512

    c2398430d7d6f04ef347327d6da3a8065c5d54f682fabd5a690f6a31d4066ae844c83e543f19e84c172c6f25371fc9ead8171981dfa93355d4b3e0cdbfd9ae41

  • /data/data/com.xmcy.hykb/databases/message_accs_db-journal

    Filesize

    8KB

    MD5

    e63ad3dbd725f7d2e10d6bcf9ad169d5

    SHA1

    b63d5d068b6c3bad10800156e37d9f6d34699b48

    SHA256

    60e3325dcfa8ff5778ac225018ccb6a0266cf5fd2d1d1ede91ed9d4f40619c14

    SHA512

    146ca1f7c452ed50601096e02573aaabe5a51f691961bea1c9d30db4be5b5ef2d27e45e24ab94979a794b9ea1fc6d0c6525b756da949a6a39ad42c8f68a1d29e

  • /data/data/com.xmcy.hykb/files/.umeng/exchangeIdentity.json

    Filesize

    162B

    MD5

    82d173c14d50a21d82f78143bd99c758

    SHA1

    9dcee35870882332629006590114ae9d80c4c307

    SHA256

    d46c7c11c47013b813ad7d5dc6bfdf6cdf9ca05e2e7ada3a82e36fc7fbac4f58

    SHA512

    ec6b0e1f832470fc8f955219855c6ff6fa11904344978465b2703efc54c10b28b15cfeecb6203837feb1e252ac34308056e26be1a19a54ac0bd9c65cb50357d1

  • /data/data/com.xmcy.hykb/files/agoo.pid

    Filesize

    8KB

    MD5

    eb4bcb8cc123a43dfc5fb8349ece9872

    SHA1

    c064fae36a003a8bdef3a62c139819fb8cedfe4c

    SHA256

    c68b0ba75a2f3ddab93408e64d9910af5330da45295f6e54fffd0517835b7f0c

    SHA512

    d47ae4f4d3e51a418a8f9b0f0ae78a8e34dc02ed3746597aa44085dd1b09eb592c0e32cf7677baf4e4f8d04c31a63ecd5449df9c1b25dfd522af28d315af61bf

  • /data/data/com.xmcy.hykb/files/umeng_it.cache

    Filesize

    433B

    MD5

    730670a69d0a8674e492a30855a77873

    SHA1

    75bbf41196472d85e09f9e6f8146d73856a67b1b

    SHA256

    40d64e32530615806113315f53ce048347f85d9eac7b2a110517a9fda94f5f95

    SHA512

    eee67bd318c5127150b12bc72e52f2e98b3209a4dcacb2473ec55945187db46453a496dbf94e9f2fc39544b46af40a6578db58e9c9335b3806239043cdec0146

  • /storage/emulated/0/.Android/hykbData.dat

    Filesize

    34B

    MD5

    983c84d618f980b90c0e80b2e8f3e717

    SHA1

    f75c67ac50cfa7355c7f328b2d5aee7be3306c24

    SHA256

    7dc83312dbb007c1bfa701f7aea42a812a6edae1652c6b7ec7a8d16643e9c565

    SHA512

    5665545d0c98382f16bb6599aaaffe77611b83defc91ad609cf48fc3daed3ba9c050a1d677518d63d84d6e7bbd24c327c54b95be76b70d046cea08ec2ce11204

  • /storage/emulated/0/.DataStorage/ContextData.xml

    Filesize

    8KB

    MD5

    467f3494642e0ae87ca9a23ee1e1dcd9

    SHA1

    c11d8cdeae72fc03ba9fd418de7df91b01d3db6b

    SHA256

    829a80c3aa5e353e2f1ffbf1cea7ce421b4282e15b80733e82f203ea84e00fde

    SHA512

    67ca3c297e965ca9a67124c10e501bc32114a3eb8b12fb35a45f485b649916b26997cac1d671c186da6fa2330b1e725d5e390293a4a92d0185cbf90cdbcb52b8

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    512B

    MD5

    d8f7080ba03a0b468ed9d2fd9a0de05d

    SHA1

    5f6937a9ce9929a61f5ffa390e2d917be8bc22d5

    SHA256

    c98adda8e95c94c00db6089bb72506d1bdcda285ba6ec1603247eb9699faf1c1

    SHA512

    58e09dbb6a797a90fbbe4098cb25acda2a5acce183e84b531d410799e31692193c3cc06bff0bd32086a3a66423474b74690a931b1b04ae8bbe9ef83cd4c5cbab

  • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

    Filesize

    8KB

    MD5

    c42ffd7a478abe50d50cbb62b5373e66

    SHA1

    d58fae4c52ae7b404283fa8060d6ad7714bc6893

    SHA256

    e67bb6bca9e4bc0c282f8aaed3c226f3b529a50a2475d8ffbdcbf9f9a3f2f8e7

    SHA512

    8b5902439a9044868d35100fabb1e3b4831ef79ad757158a5198759e4d76b60396a8fb18f58fc92cbad64690cfdd6c1c8bf6c5cdb27f1b25e63df3867ea84755

  • /storage/emulated/0/Android/data/com.xmcy.hykb/files/tbslog/tbslog.txt

    Filesize

    2KB

    MD5

    889209dd695a087ccdd2be12d4064036

    SHA1

    5ef21bcd09d590092cd48678b10e5d1d37c0c8b0

    SHA256

    f016103eac186ad2edebe78e653cff651bab62465eaf5c1ac656626215c01e1a

    SHA512

    525b229ac3fa9237edb4e2fb0f8cc153308a58e518de5ba1264ac6fef47637ff0ef36f60c1896dfaf7c9038ef9fa35210c2007fea6f7cdb53e82056d34618168

  • /storage/emulated/0/Android/data/com.xmcy.hykb/files/tbslog/tbslog.txt

    Filesize

    56KB

    MD5

    bb08692efe460556ce21cac303756dea

    SHA1

    c48e892e7c5e05e6f2ea1da05ab368059c7b9311

    SHA256

    aa24e2f951dea30ecc1142e0b07963c224c41044bc69fd6a688938463174cc32

    SHA512

    149fa0ec9bc784f4c986e838d5a15844708c96514f5c473fcc3998e38b2d04e1ce4358f085504698463ca444d66d1c7b490081f350536e560691c6e8bb8ab77a