Analysis
- max time kernel
2712937s - max time network
156s - platform
android_x64 - resource
android-x64-20231215-en - resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system - submitted
23/12/2023, 23:28
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
a070878e7d79f78f40281ddb9309cc9e9eaee11e11c9516c4d718069405f9504.apk
Resource
android-x86-arm-20231215-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
a070878e7d79f78f40281ddb9309cc9e9eaee11e11c9516c4d718069405f9504.apk
Resource
android-x64-20231215-en
1 signatures
150 seconds
General
- Target a070878e7d79f78f40281ddb9309cc9e9eaee11e11c9516c4d718069405f9504.apk
- Size 15.7MB
- Sample231223-3fz24schb4
- SHA256 a070878e7d79f78f40281ddb9309cc9e9eaee11e11c9516c4d718069405f9504
- MD5 c02fb30a5c8798d7f9e8f64220daa2b7
- SHA1 7a88fe650089bc7605bc54d139186c0a6838532a
- SHA512 d0fcce52e1405691fe0d159a9521bd84d9813243450127d4b09bd1ec714889ce9fa220d46b842f4877f2b8e5a4a90f659481ac7ce33309d6ee204a46e731c85c
- SSDEEP 393216:qsrHqBzqTR6OOgXdj4sfRojCAbg0Gnn1DiZzdN:BrHqwTQNgtj4seL00M1Dur
- MD5 SHA1 SHA512 SSDEEP
Score
6/10
Malware Config
Signatures
- Acquires the wake lock 1 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock io.rong.push
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
- Path /data/data/com.travel.koubei/app_td-cache/tdappcpa
- Size 8KB
- SHA256 bdb0a8b425a369f1496dc3be7774b9b421ad63908eb29617d6fa55f18f9ed2df
- MD5 75282a1399c812e103d9f34c17f1e50f
- SHA1 495941c05774f9058b15992e3b52617a56511497
- SHA512 434a25853a43cd3389a392c8d1734bed0bc9ceb62e00ba3f93b7f709036da6612cc175c45f981f8e28f63526f5908bfda0029f861a9aa0a8080f04f1573b56ef
- SSDEEP 12:7+tErW2YrEOkSIPJEKwdlcfqLiuWdwRmBEyPbm:7+tOW2YrEr6cfqLiuWRGSm
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.travel.koubei/databases/mta.db
- Size 12KB
- SHA256 885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4
- MD5 ea628e04765adaf4238a5dcdff4bbd51
- SHA1 a801947619ea8c368efe9c006a324dc6339ac60b
- SHA512 c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe
- SSDEEP 6:l9bNFlLdrlOERX4PBX4ogLugMBX4suuKTqiOw2:TLJdTRmBEyPbsOw2
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.travel.koubei/databases/mta.db-journal
- Size 512B
- SHA256 0cbfb21cd4d15708c793b4f20e3d10b3b6a44f51326ce97a9f07150c411813f0
- MD5 3fc3c692b2e2954ac7fe0fd2ee3500a7
- SHA1 29344721404f9d0dca3dbe493ac4db0032963202
- SHA512 03b7385afe687962c6db4a9b75f74beebf71acc5df8d7326d2004dd04226d537e5d0db3d8e0a8946c2de38a61f0dce58852e945733f050556d19e254155d9150
- MD5 SHA1 SHA512
- Path /data/data/com.travel.koubei/databases/mta.db-journal
- Size 8KB
- SHA256 3d770582fa8283c65bac99c95ef65ec776fa17a8470d5fde81dd585a9fe8d31e
- MD5 3f748414fcf69ed97625b2acb4bbb212
- SHA1 aa3c055d09db55fef11eb048bbdfa3c04403cb59
- SHA512 c97d682baf4bd91c08abda0fbd287a4bf48a74124d1794b1f6afca5871865cf6d0151c6a9ef01c0353bdee449dbf2d7c2b0e0f3845f9ca5b8eb6254af5499503
- SSDEEP 6:7+/l9Hn1kfg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKN:7+tIfqLiuWdwRmBEyPbm
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.travel.koubei/databases/mta.db-journal
- Size 8KB
- SHA256 2e8da3ea7e75fb0195ada8bda4b885ce19bdb89dc5ebe44768f92314ffa531ae
- MD5 fc9a5c8d0f68a987cd1f50acf064641a
- SHA1 8b18adef40cdd09d9f99ec172cbb3ca49c1fcbd7
- SHA512 d41be834c2cf4e1a7d8d628731177d60382817e94ec0299cf2515274352c384c86a61c08fb636eb313ff03b0e44a255840c902287c36e4c7c9f7f17ebcec2bed
- SSDEEP 6:pXSFPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKClkl//Rl:pX4qLJdTRmBEyPb/klXRl
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.travel.koubei/databases/rong_version
- Size 160KB
- SHA256 ab01295670c44f84950e2566acfd8ae9bb1a94a01a9c7f676ae4dd1dc8717182
- MD5 a51f7e97bf02712d01cb37dad7ec94a2
- SHA1 3c36ca333cfbbfd3196e94eeec463099d70a9c1e
- SHA512 3958bfdb5cf83370f7c2ec79b7bde2a78df6bd40abbb398c40e832b3a23151a1bb39ba40eafb963713f1ba87f474a737969dc28b9df2281db82e2ca02af7a8c3
- SSDEEP 384:BzJ9qhyLeoTcqtqhTLefqVFADCqbmsbp4PFA8sGz9qCAZ:VHVwU
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.travel.koubei/databases/rong_version-journal
- Size 20KB
- SHA256 d5b11400b29fa09552c70e3dae38157ce683f6a4391721cd946a14899f2e7bf7
- MD5 a162e6b1adbe6c6ba198092fadfd948e
- SHA1 f4f0a88ad1a692b1ae826c7cf684ca4acb37272b
- SHA512 130594db23cd35c64525a1e0bef0e960c4cd74a1e56068e4031d9582d98a4391b02dc5f345c40b93a110b3bc7865116227017d6350ff7c37a1020233122a8d73
- SSDEEP 48:pkWqo/An8kigvjQfjz0atYXIr///m/mkkkSj:pkWrAn8kigv0fjz0atYXM///m/mkklj
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.travel.koubei/databases/rong_version-journal
- Size 20KB
- SHA256 bdce88b699b58acdd536f692ce0ca6ed5b2692c2949aa6586c75b85f310fa881
- MD5 f0fc0fb8c5a561dc5b047d1eeb0e291e
- SHA1 d75575b326819b49cf0773aeb5355ba1910165d5
- SHA512 9637020efcc71aeab1e3c2a42a446bcfb8748823907ca63503c8b57f438fe8851ca1de278897a6e60aa1a63fe4ff1ce1b6490e1984af70ba84a4053aa72cf24e
- SSDEEP 48:7MOhbqln8kigvjQfjz0atYXIr///m/mkkkSa:7TbMn8kigv0fjz0atYXM///m/mkkla
- MD5 SHA1 SHA512 SSDEEP
- Path /data/data/com.travel.koubei/databases/rong_version-journal
- Size 28KB
- SHA256 9dd4c9683e9237e36b77e6a97311a6b6b45bfe37ee7710b271fafe773574af2a
- MD5 5f638ecbebed852d15996a5e90f33067
- SHA1 2c87358532e7f6f2b8aefcfd0fd58efee4bb4cda
- SHA512 b26b6c0320c804b0e0d28a1f266d82970b8423889f7e46c7ce11a5bdbf20c717a23f966d09a8e9957796296832523638e67d346a81c3a43a62d8013f31691546
- SSDEEP 48:To/An8kigvjQfjz0atYXIr///m/mkkkSjE:iAn8kigv0fjz0atYXM///m/mkkljE
- MD5 SHA1 SHA512 SSDEEP