Analysis

  • max time kernel
    2888742s
  • max time network
    158s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 23:15

General

  • Target

    9e24dbbf828e4cbabe5e5c81bdd8ae15b27cf584bad64d73c7e533d7d7525872.apk

  • Size

    6.1MB

  • MD5

    518b3b5278e7f064edd4a4bd5de6ca68

  • SHA1

    da0c5ec5d6a79e8c21d7bc00a3d837daa3e7f050

  • SHA256

    9e24dbbf828e4cbabe5e5c81bdd8ae15b27cf584bad64d73c7e533d7d7525872

  • SHA512

    029b002cd61a4984b8909fc919c77318dcf99615f6abba580621124fefd29fec45d0d694f8002be6280e12a49651be409e4a8e56d52a7ce02b77b3180e67607a

  • SSDEEP

    196608:Ju/83ZZ2x3LWsPGAr2zAs3/ETawSkJLa6WNl/b0:UGZ8bhPEzAs0e6WvT0

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • liubaodian.xxxxx
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4259
  • liubaodian.xxxxx:pushcore
    1⤵
      PID:4292

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/liubaodian.xxxxx/cache/image_manager_disk_cache/journal.tmp

      Filesize

      31B

      MD5

      8c92de9ce46d41a22f3b20f77404cc1d

      SHA1

      8671a6dca00edb72be47363a7071be65cf270373

      SHA256

      68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

      SHA512

      30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

    • /data/data/liubaodian.xxxxx/databases/download_file.db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/liubaodian.xxxxx/databases/download_file.db-journal

      Filesize

      512B

      MD5

      e8c66ebaa89983ee47692c656a8310a3

      SHA1

      358d0b4a9715aeea64a648c59dd5dc9480ae6d4f

      SHA256

      678733c4eb246c01b1459f7f8d63f4e96a3207ecc948d030f597455a48634322

      SHA512

      3c62ef8c299799cd7340e48052489efc219d430b64202d103591808020efdc585b1fa5424733d9ddb945d6da866557b76ac1aa3d3b5094fb76c16d2b1c484ce5

    • /data/data/liubaodian.xxxxx/databases/download_file.db-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /data/data/liubaodian.xxxxx/databases/download_file.db-wal

      Filesize

      36KB

      MD5

      46b248aac70343c85a62efa10cb946ff

      SHA1

      d6005672b7f77d19dc792799d79584236af915a8

      SHA256

      de43638fc359c0287f3648da002fb356acb5d0b05f839067b7553a1abafa5252

      SHA512

      c9a8242654417eae80ae094762db37e83ce9f394069e7b1f1361cc8ee2a115e247188af16414cdabd57abee05b6d500888d838a46b7b31a7c0aa7ada9bb50dad