Analysis

  • max time kernel
    2863508s
  • max time network
    169s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23-12-2023 12:03

General

  • Target

    0b9fb4c71e86ff39866e9e550a87c6a58bc6c1619e00d80ce713e6a14ba7bc5b.apk

  • Size

    14.8MB

  • MD5

    07998b2c68cce10d8ee286295e6996a4

  • SHA1

    93cb0eeaedc33761836aad4ef6d27ef613587682

  • SHA256

    0b9fb4c71e86ff39866e9e550a87c6a58bc6c1619e00d80ce713e6a14ba7bc5b

  • SHA512

    408d3bc552ae4969c43eaa788b867c6d9f4b2faf5d5c8b118cffebbf3a5d2f1e46b0ce09607e3fad5b3f41d536163b6c5b0286fb0fa4e240944ac491d526ab55

  • SSDEEP

    393216:DVE8P3DSYTIHH9f+yNNe4XCQlAd7ElukRkhdY4IVJIx/C:DVE8P3pcn9mo+XyuOxVo/C

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 4 IoCs

Processes

  • com.jmheart.mechanicsbao
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4633
  • com.jmheart.mechanicsbao:ipc
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4683
  • io.rong.push
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4718
  • com.jmheart.mechanicsbao:ipc
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4781

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.jmheart.mechanicsbao/files/libcuid.so

    Filesize

    109B

    MD5

    2a7b39ed7515a29f1c9f52ae43b8b63c

    SHA1

    efdc2938c11652969c278022b743c09bc647410e

    SHA256

    2b2ebebce44e5febbad603c202370d185b30b5d4ae23f8a975edb0e6b48897de

    SHA512

    75cf9a04900a90cdae268ca1b08dabfd33c230a7a1637335b0f972ffe140c1c00ecfacf1312debb9d457685f0fae77b06bf8c8d499330620b53f3f2d22b9e0b9

  • /storage/emulated/0/com.jmheart.mechanicsbao/cache/image/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56