Analysis

  • max time kernel
    2864108s
  • max time network
    168s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23-12-2023 12:02

General

  • Target

    0b918dd5111322fefce44faa241768ae5668195f2616611829b98d4b221d53a8.apk

  • Size

    13.7MB

  • MD5

    2a99cdacab3732bd99cb48af4ac0a908

  • SHA1

    93eb7c167e5193772165b9e1aa25a541c04807e4

  • SHA256

    0b918dd5111322fefce44faa241768ae5668195f2616611829b98d4b221d53a8

  • SHA512

    dde32ff636a428706a16ae1be9546248836945a5955fe435441fcd3b30b99c395b93025a734fbe7f3458f2334fd0d9b45a5dbb715dcba26982beb6fabf2920a7

  • SSDEEP

    393216:GPZscWTWzY9oyQKBaBJ4zHxtXVXqwZnvb581WkI:G6TWzQoyx0BJ4zHxLlZnv+1WB

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.moji.mjweather
    1⤵
    • Requests cell location
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4627

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.moji.mjweather/databases/alarms.db

    Filesize

    16KB

    MD5

    cfea54696f846f507761a90099cce97c

    SHA1

    7805993490d357422ca6fbb475441cb80585a5cb

    SHA256

    ca14028937cf35a913018deb9d41e488f418263d02b2dc40e70bf3858f1e0695

    SHA512

    38bfbe5d29de3e174afad25653014269fa556240d7ffa88b4d8aa10b2dbfa0bbfd46256524c61e317d855c0964253da687ad06399331989d8a150ff78f1e1abe

  • /data/user/0/com.moji.mjweather/databases/alarms.db-journal

    Filesize

    8KB

    MD5

    b2b87c6f69603ed476901280e26c1b94

    SHA1

    46e6afc77caac71977b6a3555f705c0af1ee7c2d

    SHA256

    a6c37bff98b163701ff5ba06f8922a9353e28c21a58923d3c539f5e65e1b935e

    SHA512

    cdec811ab2e30a00dfd4c57c5e90dbc2ac202063e20ab1555d6c3bc8a4723b45d5ea1038e4875e76008d3647fa4ff08850b4d1da9cf2c2696862fe3802261ba3

  • /data/user/0/com.moji.mjweather/databases/alarms.db-journal

    Filesize

    512B

    MD5

    13dbc34095ddc726d72f38a0076368a6

    SHA1

    083736017bef9e4db16feb05c8650b4445e69556

    SHA256

    a8943239cb1212800930f30fe6ca6887045120a8fca4b38ab4c7233e211a1aa4

    SHA512

    63837ec50aa8b2e6e640d18797ad1c1e35c8dfd7ad57413c1083fe9c70f61a7dd1b166cd9fdf412136b0a9cc9c2cd00449b91f7091354de0a756253fc0defd2c

  • /data/user/0/com.moji.mjweather/databases/alarms.db-journal

    Filesize

    8KB

    MD5

    25314630ef9baf27ad49df1aeae0ea61

    SHA1

    7c58c65072e18d25ec4323fb28afb8a07ac24f37

    SHA256

    70a235f5a95a9421284b53b1e0178bb49921d02a682cc390a354bde8f3a6bc05

    SHA512

    1ea010d734a0b0bbfeeadc356870d2de577f158bf357f5b6a0e55d730e817da3865b93eaa09b516314ebe8f3206609a83696162581318d334cf56104d49d3834

  • /data/user/0/com.moji.mjweather/databases/alarms.db-journal

    Filesize

    8KB

    MD5

    1dda0c49c537123dc5f805b72f1297f5

    SHA1

    9505e07412c7a45abed96b75e3a4e011f87089eb

    SHA256

    045f82587b0fce89312a8eebc36d6fa69e8bd491d6d0248c1ef36c98dff0679e

    SHA512

    41abc486aa09af5fae3177c9f98797c8ab75b925bdeef3c74ab79de8065acdb64839c03e53fc46bb2afa917f3c04e842ffb9ddcee444164c1b15f7a24a240953

  • /data/user/0/com.moji.mjweather/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    71a2a67ba5646b6f5c1958cb2365a1bd

    SHA1

    0a7e5ac882d018fa930f3255e6c16eec96fdab08

    SHA256

    b01e81a629d0d3b14f3d8b6cdab97ebc4b10a92e89216165e415e1147cc724d3

    SHA512

    022d6e5dacc87d784b7bd5fb4fddcf099eef5e7ceddeaff7546a6cdfe2b6aede531fb9c2a91a5c4dc717812b31f8b4b0ea03af81c487502f6e508100bb7b069d

  • /data/user/0/com.moji.mjweather/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    4a490135994382a0440edb347ec82d5c

    SHA1

    419a0323562f80a26f9d05f4504302248aa8d697

    SHA256

    8d46affdfde970196fa8569b4d8f6c8e03c5caa17c9fc6c8f7b06f5ccf22a2c4

    SHA512

    a47a5efd0a8c7a51f782c7a4a4b83131568b4a7d2b0e1057f2e0d5fcea90793eea5112ca4e2c8d07b1e046d350c5b0b774a9c21feae38432e816155939b31b92

  • /data/user/0/com.moji.mjweather/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    b0008cf5ccb029d13c42f6af7a92ccc1

    SHA1

    69afd91c9ad15ad65ffb3c51fbcdcc4f050a3314

    SHA256

    fa83b7dd0a5d1e7290f1f900330fd61d0561c1dc0c22460ef290dc4674ca63eb

    SHA512

    cf72825d83ad3d2661f8c84bf0b91b3057f5dd59d94a33b151b4391d728f66a84ac7d2a71343773042c665a65982429b2859c74216da402ec77311fdc893c0e8

  • /data/user/0/com.moji.mjweather/databases/bugly_db_-journal

    Filesize

    512B

    MD5

    764928c6e59ed4c062146af83969b6e6

    SHA1

    6d1f7eef71116806445c22db2791da50241ed09b

    SHA256

    d3422e20c9708b9b7b5c99bb74c34c41eb7e12d677f44e32784c37cbaafe1bc4

    SHA512

    1b912b1719faf65bb2e43386886f974baf727b5e91f5847d05952869b30336c0b8a211d7fe5f1553e3d8ce33f1b18325924181023f5571b17b5b1b743843a8fb

  • /data/user/0/com.moji.mjweather/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    59ffc163bd539ee738d433e3129b334e

    SHA1

    ad4637bd7df3ae1adf41be2b291d7d7566a64732

    SHA256

    0028fbccbab43e45a066f585362eb25ddc336d08c172ccc1930ef5c632c01c0e

    SHA512

    010b8bb4699675509f2f981640287828ddf53e4923413d33e7eaf794d3ab79d203654d65491c86c115c61a26cbf755ee329c21c0211461858af13fd99c0234d7

  • /data/user/0/com.moji.mjweather/databases/bugly_db_-journal

    Filesize

    8KB

    MD5

    032bdb14897ad7b12b1f29cd3bd35d3e

    SHA1

    a5dbda5b808da1b3e75ed52ba05a9ed0fde90580

    SHA256

    57fe21068c7c542e50213628c0dd2868a6dc9a2ffb135b5dedea1b4eac489d27

    SHA512

    98f6fc306f45fa4dad0c23e8533cda022f4dad9a681f259029a184d52e513087b85d24bee4108c576d6c99336045e8d7e47b9c47914e3bf4957d255339b326ab

  • /data/user/0/com.moji.mjweather/databases/dynamicamapfile.db

    Filesize

    20KB

    MD5

    2e8e014b73d8de81cdc1173d0d37b975

    SHA1

    752ce93b9293a4f8c2d03fbf7fc3942f44adec12

    SHA256

    a74efbe6be4d11a2c2fc39f2130b2fa556f140365bb25878544c2548d38f0978

    SHA512

    8c9af334238fff4597bf502d146482eb17b03be1aef57f50317038103cbebd150cf4b0a30af895277c24c8ba83db2e2b4678b7accfe970889e39ee8d53e6ddca

  • /data/user/0/com.moji.mjweather/databases/dynamicamapfile.db-journal

    Filesize

    512B

    MD5

    750ba0b77189c0ea97c420604672b057

    SHA1

    48337c0004f716f5c81ae49c664db5b8c742865f

    SHA256

    d25cdd77bdc800312ab0e3bcf3db79702a4234e7b1b895e0d2aabc942aeb65d9

    SHA512

    c16a3bc9fb8181b0106966673a0d1b072ee666596f38ba883b127c8dd5ed430c067a66aa381ada5358ce446a2f42696968bbd616250c3bbad67c3a88573201d6

  • /data/user/0/com.moji.mjweather/databases/dynamicamapfile.db-journal

    Filesize

    8KB

    MD5

    c345115709e4003aa58c5bbdb3bbf21f

    SHA1

    722054171ddd1138150c833e3d62dbfbef8a298d

    SHA256

    405daef1a69b0bd7a7eb8be731544617c4c0a244746595aa51089c505a67894d

    SHA512

    3de716a60b9090e6bace3f1168709a41ea2c7e630dcfff865546d11264cdc8e15bcdc3577bb5b16ec33736347a7466843b1d0adeb5d906bfbda9a4956b58460e

  • /data/user/0/com.moji.mjweather/databases/dynamicamapfile.db-journal

    Filesize

    8KB

    MD5

    6b68a6c4ab2d5ffebe6d1c4aaff10976

    SHA1

    479bc1eb48502d344a8f849f7083535a9236cdbf

    SHA256

    fad91199235d595f513d53f6b794f7821f1ffce3e6762c6c1fc370bf576ed9ff

    SHA512

    1517a167ba26b047d8ffbc3f1f32e1afcb430695e1792131d09b34ca289d00373974fda7b1413acf68cdde27a380858b89c89d1405a52b9d7902b5f878b2e643

  • /data/user/0/com.moji.mjweather/databases/mojicity8.db

    Filesize

    1.1MB

    MD5

    de0421475e6b45167581c4fcfa7dc9f2

    SHA1

    befa0359af3fad25b47edd2b253482d38c9046a8

    SHA256

    2a5c86e66d1d051e4fdd37b3b2f354e7c3a01f1400704612cb631dd41373d7ab

    SHA512

    ac1ea18b36928714376d1afd0ee549f71335b1f5f11e7446eea123f6674a77b23e26e63f11968559ce2428d4ce43a9be20e4cbb454c0e5baeb4a580c3083dd73

  • /data/user/0/com.moji.mjweather/databases/mojicity8.db

    Filesize

    1.0MB

    MD5

    4e0d7c399562be0211beb81615149545

    SHA1

    ef4eb0c569e61cfe3d6280fd8efb0195c0167278

    SHA256

    2fbbe001983a454e2f9e0d1dc2fd90b950e76235782fc11eece140e0816e7f5a

    SHA512

    a6934d78c87bd50031a5b19c858a38a3e0e4922a1ea667973aa0b57384c5dbc68a72371ba8152b9989a55e1538d9ef841b0ff0c21e3aeb577d287c880ee44324

  • /data/user/0/com.moji.mjweather/databases/mojicity8.db-journal

    Filesize

    3KB

    MD5

    2ca1ff090001cefa38f53f53f7f9933c

    SHA1

    bbf7210b1c183aa1d60096663506b71ea13d3279

    SHA256

    b7ab2488db903bffd883822f625866e994dd365ebc475675856ccae376b1695d

    SHA512

    339545517927f4e8dc182e95df4457383a663824c014549b0f7c0f6a68ea3287bf38caae119a22fd721a933a2a8e0e7c20c03155631fa45b849a0b627698e2aa

  • /data/user/0/com.moji.mjweather/databases/mojicity8.db-journal

    Filesize

    2KB

    MD5

    b7db458605ca3a8f6151516b07f370b8

    SHA1

    3b7ec553b3a72362f36b17b360a2cbef7e421d86

    SHA256

    0cd1de82c38b7ae7886da103ca3a30b5bb49bc84bfdca2d77bcba6a715e99ab9

    SHA512

    ac27638b050af641b5428b11800ded88944cc1c3936771dad512c5ca18ed65df507d28469b10deb0d1eff53e51833fd6b766a84fb6a25820f83433ee9b292dc6

  • /storage/emulated/0/moji/temp/lla.log

    Filesize

    291B

    MD5

    e691df875bb0e6716603425749bd7953

    SHA1

    81099b703916f1b40151540ca038ae7524136f10

    SHA256

    795f68838be5ec34c124ddd0f3421abf2d579b969d37e89d83ad6f95c80b883a

    SHA512

    0b206e887d398ee541620d1d7d3fe411c8ef0b289ddf6d8cf67a979e6a760153a47b1d030e6c801b70bd29fb9ecebf34d39cc8d035ef8bb655c3cffea26f9bf7