Analysis

  • max time kernel
    2893948s
  • max time network
    148s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 23:30

General

  • Target

    a11212252d4ebcf880c8841157e77df0d69907e32f5365c071f7d2c98d04d0f5.apk

  • Size

    9.3MB

  • MD5

    f18426df9931bc829149ab4654a66019

  • SHA1

    604be90da007912ab149b3747d95883887ae7fb0

  • SHA256

    a11212252d4ebcf880c8841157e77df0d69907e32f5365c071f7d2c98d04d0f5

  • SHA512

    bcddbdcd10891b98271e802384ce89004ff1d413eadb622bfc8119272eac1f8e4602002165eb8ffa30ed9fc3cc268b67d46cfc334b83ca5191f1631ceaa14c78

  • SSDEEP

    196608:uCN8wzzZQbKKfEEO+ebKlLtGPT+7Krqv0eJpo8pzGCgYIeDpzGCgYIe6B:ZwfEtZWltGPT+7KrqMeJLmepLme6B

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.cnlive.goldenline
    1⤵
      PID:4243
    • com.cnlive.goldenline:pushservice
      1⤵
      • Acquires the wake lock
      PID:4283

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.cnlive.goldenline/databases/goldenline-db-shm

      Filesize

      28KB

      MD5

      cf845a781c107ec1346e849c9dd1b7e8

      SHA1

      b44ccc7f7d519352422e59ee8b0bdbac881768a7

      SHA256

      18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

      SHA512

      4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

    • /data/data/com.cnlive.goldenline/databases/goldenline-db-wal

      Filesize

      76KB

      MD5

      bc18d2fb522cc3d89b943a959d1a9a2f

      SHA1

      c2da92cfaeff691191b76adab7f8b5814f65868a

      SHA256

      85f0dde92967f3696a7ffc81d481eed3851a7fc67751f78f2d4e7568f3202524

      SHA512

      4b548ca052aaa3b042649ba4f73353b47283b2d01789d083179600621e8b93bf20408028d72e98cc67a8e804f44bda7241d873a0113807ac67e2c787362e5884

    • /data/data/com.cnlive.goldenline/databases/pushsdk.db

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.cnlive.goldenline/databases/pushsdk.db-journal

      Filesize

      512B

      MD5

      0955c3cad5faedf95af42009075b8152

      SHA1

      1b2ac2bdad2326a26c92844bb31f1842c7a06865

      SHA256

      2e9ae9375cf0b434d145af47e8f5efc2ac655f395e046fb4e567b8abbce79cd2

      SHA512

      85fd11d56a74b34c3b5c22f206e619d8c05ced32f8dc456049eb9eb099d9d77f257436576c039c00a308aed308dd76ef171578834247ef623a57ad98092d7f01

    • /data/data/com.cnlive.goldenline/databases/pushsdk.db-shm

      Filesize

      28KB

      MD5

      1b37417b3a8ca86ab7d412bf5ad665f6

      SHA1

      fa2cb4699f98f322b842d9e67311033c2be2a856

      SHA256

      0d892cc04fd8ded900aaf749160500563e4c3ca12c131568b9e2c23ddcd1ecb2

      SHA512

      f1fbcde8fbcc0d321df7cae73e822d5068905bf344cb5181b64c75bc9ee59466a56c1d78cdabf600ce6ea31601ca1123b5265ec22f83a7b77cfde31a6140d0cf

    • /data/data/com.cnlive.goldenline/databases/pushsdk.db-wal

      Filesize

      80KB

      MD5

      de647f78c0f4263cec6e15cf741b39e3

      SHA1

      86a9ae8433e6aaa2b0f2fe98e6d95b7b59947408

      SHA256

      410efdbc52acdf602dbec7f64b991cec42e4e5b72681458804aa3746bc6329d1

      SHA512

      132ee8e7559f69c74d6431c07c1d8524726f4c2cb98b47c9c047a700d14686f49ebe36b7084eb5aa31cecd6246eeaf303e86619a38e42fdf4ef657a89a2e3cca

    • /data/data/com.cnlive.goldenline/files/mobclick_agent_sealed_com.cnlive.goldenline

      Filesize

      569B

      MD5

      7f69cce46c6886061f301bc5bcd6ceb9

      SHA1

      d4377c82a6f1e887626895db26252bb9de885477

      SHA256

      207ea7e4d8a473623627cfba80cc333b90bcb7bebb65b710565853f39ca93df7

      SHA512

      a9419f4ce61c3b954bbe7a19228916c5fadba1f77b647fc33de1ce14f371328e9c7aa014c99ba2aa644cc544c65af55ff054b125d8d5bb1999af282674adf523

    • /data/data/com.cnlive.goldenline/files/umeng_it.cache

      Filesize

      211B

      MD5

      264fe6161bfc36d6c88d6cb7f492d8af

      SHA1

      5ffdbd12eee9523b660c9b18865499e385427bc3

      SHA256

      86cc8c30d93fcfc96c4bc37811ca1be34aaf4ee1981d5a827db606ac8cbffd30

      SHA512

      f573dee51a043199316bd8472a09bfc72cb3a520c1f8154272e2d7d0d1334f9ab1d002182c9befbfdcff43c4ac3ddcac901213c68e01373938882653e6736738

    • /storage/emulated/0/Android/data/com.cnlive.goldenline/cache/783279512.tmp

      Filesize

      135KB

      MD5

      5c5f1a6fae79076a6917e594c85b450b

      SHA1

      f0c9df3b546a73a6006ba823856b8ec33bd19aca

      SHA256

      5fdba122d7d46540f127631438744e736114f48689a43afec913fac1ca41be48

      SHA512

      70aa9ca0a0404a065dfc143449a1115ecb38091db486a5b9ad49412e706294125ecdb1f579e2d353250a29402d672829408107da70e04acf28e089cb10b8386c

    • /storage/emulated/0/Android/data/com.cnlive.goldenline/cache/783279513.tmp

      Filesize

      126KB

      MD5

      e9f95e59db5c60bbd0240e0e3519cf02

      SHA1

      47172d6153e55132d7948fa57857dccfc56ef773

      SHA256

      24e82791d217973263972209b1b4adb2ac4ca806ee0de92c4d293d56aeb283ba

      SHA512

      e39227ea14a498b6e971696a7f289e68f3b0ce5cdb0a0bbb5d15337d36164429ba7088bb41a81eecf2635f727a80f289ad083c47f790d2771dce82d1ff79302d