9cd713b63686df27328402e7305348596c485c2de58e4c9b3f3882e344e805cc

Analysis

max time kernel
2709207s
max time network
140s
platform
android_x64
resource
android-x64-arm64-20231215-en
resource tags

androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
submitted
23-12-2023 23:10

Target

Ebpay.apk
Size

487KB
MD5

42fb9ef509a7d4def22f9b7b92a804f2
SHA1

5116dbb3418361936bd257fa1672ad71845d599d
SHA256

567851a6ca8d2129b2f87b865eece965214fbe6d150240937515f0b25689ca5a
SHA512

ba7ddb963f98d0a3b3608023220ff1d103a78344a4e291621bc72714583f9e7352cf46d4eb3fe9cb2e4b36152cc081076a90f7849b5d57e07187797b819c0397
SSDEEP

12288:LLVCxawRp5bXa2aVXnz0pZxYZ5Yg+0cvC9uvwpahY9:PXnzl5069GWaW9

Score

8^/10

Requests cell location 1 IoCs

Uses Android APIs to to get current cell location.

description	ioc	Process
Framework service call	com.android.internal.telephony.ITelephony.getCellLocation	com.baidu.android.pay

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.baidu.android.pay

com.baidu.android.pay
1⤵
- Requests cell location
- Uses Crypto APIs (Might try to encrypt user data)
PID:4631

/data/user/0/com.baidu.android.pay/files/__local_last_session.json

Filesize
99B

MD5
88f71101a362300c1e57effac7509f8e

SHA1
c4e30f4485ea195504662fb94dbf96bb6e2ed6b4

SHA256
63bd3f7dd38330e7e66612bd23b65ed087f1bca241be8d74df0ab54fa9c0b9d5

SHA512
11ad822b47ce42ac9bc1f3eb8827fb878eeebf38d2a54c2826de205b8cd86362d35f3e896fd04e694ec09d3e31d8e80fbfae3c9685b9703d40249d4d7d67eb13

Download Submit
/data/user/0/com.baidu.android.pay/files/__local_stat_cache.json

Filesize
25B

MD5
2d805b13f2f28dc3ca9bbcc000f49bb5

SHA1
9eac165b4d81258fd3967cde5cc53b53b1dabcb1

SHA256
c8a6624f390568f0ddcb9841336aec6a564460fdaf6624e562b32935b8956f19

SHA512
5db8c57bab36bcf9db698c1dce70318cbffc156dd1d1c1e09e5b7ba60aff07b598ebbf26c4bd8a2b03bd6e59ef2dde2d944a22a8d8a19ecc8378e83afb7c83b0

Download Submit