Overview

overview

10

Static

static

10

0625f2c1f6...42.apk

 

0625f2c1f6...42.apk

android-10-x64

8

alipay_msp.apk

 

Analysis

  • max time kernel
    2854563s
  • max time network
    151s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    23/12/2023, 11:38

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

General

  • Target
    0625f2c1f6bc4c2ffc8309d8c3877723f597ea108e3de7a9fb6ce21c40da3e42.apk
  • Size 23.0MB
  • Sample231223-nr2bzsabc7
  • SHA256 0625f2c1f6bc4c2ffc8309d8c3877723f597ea108e3de7a9fb6ce21c40da3e42
  • MD5 SHA1 SHA512 SSDEEP
Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Acquires the wake lock 2 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.leho.manicure
    1⤵
    • Requests cell location
    • Acquires the wake lock
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4994
  • com.leho.manicure:ipc
    1⤵
      PID:5034
    • io.rong.push
      1⤵
      • Acquires the wake lock
      PID:5155

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          leho_xiumeijia.db
          • Path /data/data/com.leho.manicure/databases/leho_xiumeijia.db
          • Size 12KB
          • SHA256 885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          leho_xiumeijia.db-journal
          • Path /data/data/com.leho.manicure/databases/leho_xiumeijia.db-journal
          • Size 512B
          • SHA256 4a35f49241e7901c4a84cf2f3637415caf2f5817e72e30e3573e6716ca7c530a
          • MD5 SHA1 SHA512
          Submit Download

          leho_xiumeijia.db-journal
          • Path /data/data/com.leho.manicure/databases/leho_xiumeijia.db-journal
          • Size 8KB
          • SHA256 b36c55cf9a515d8f4f55ca74f339b516b379244a9b7130b7f8eb148b686662c7
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          leho_xiumeijia.db-journal
          • Path /data/data/com.leho.manicure/databases/leho_xiumeijia.db-journal
          • Size 4KB
          • SHA256 5b709e9f0830ce142c11e55b900465fca8a51118ebfa1234da6175a57dbb9008
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          leho_xiumeijia.db-journal
          • Path /data/data/com.leho.manicure/databases/leho_xiumeijia.db-journal
          • Size 8KB
          • SHA256 a7869199e0260d7c2f02974512ee34c8b3783a502dc92851f6d280326fbb39a5
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          leho_xiumeijia.db-journal
          • Path /data/data/com.leho.manicure/databases/leho_xiumeijia.db-journal
          • Size 8KB
          • SHA256 6fb54f34bf40bf541236226e4636ded71cb5fb868f0d322cfc1e2b2cfbbc853d
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          rong_version
          • Path /data/data/com.leho.manicure/databases/rong_version
          • Size 28KB
          • SHA256 9ef1ac570ac574c9bcff889f234e4b34a22fe2528ff0616fca5f8ca9a1d33ba7
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          rong_version
          • Path /data/data/com.leho.manicure/databases/rong_version
          • Size 28KB
          • SHA256 79a98505796f6b3be79bb66b3d9eb0f3831c65bc15ebca27be621a21e14b65b1
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          rong_version-journal
          • Path /data/data/com.leho.manicure/databases/rong_version-journal
          • Size 20KB
          • SHA256 24193840241ff1406c48a81a0f31e221cebcc6b59e246a7630e04c0471376354
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          rong_version-journal
          • Path /data/data/com.leho.manicure/databases/rong_version-journal
          • Size 512B
          • SHA256 ef0de2166356d890e6848329c379e577102c6523b12ed1830fa3912c7ec84556
          • MD5 SHA1 SHA512
          Submit Download

          rong_version-journal
          • Path /data/data/com.leho.manicure/databases/rong_version-journal
          • Size 8KB
          • SHA256 4b64459d371db2bef08b65d218582ac391b959d4929675f5cfb34ba7619b17e4
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          rong_version-journal
          • Path /data/data/com.leho.manicure/databases/rong_version-journal
          • Size 8KB
          • SHA256 0d4bb6368222d151ee9ec8b038ad92a0a80ed7c8e54331de631f3f7a6a32e9c6
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          rong_version-journal
          • Path /data/data/com.leho.manicure/databases/rong_version-journal
          • Size 20KB
          • SHA256 19398467ba2196e3c3d9da56b632d9bb19a72538cee308da652b353454b7742c
          • MD5 SHA1 SHA512 SSDEEP
          Submit Download

          mobclick_agent_sealed_com.leho.manicure
          • Path /data/data/com.leho.manicure/files/mobclick_agent_sealed_com.leho.manicure
          • Size 579B
          • SHA256 af3bcc7fca6704a6c4cc278fd50ed8bdad1cb269d503b4857351cc8360e591ba
          • MD5 SHA1 SHA512
          Submit Download

          journal.tmp
          • Path /storage/emulated/0/Android/data/com.leho.manicure/cache/kit/journal.tmp
          • Size 31B
          • SHA256 fddce724f39edc9ae1df4f8920e512cfd0fe3a9017b32031f1ca0e9ec06a1150
          • MD5 SHA1 SHA512
          Submit Download

          journal.tmp
          • Path /storage/emulated/0/Android/data/com.leho.manicure/cache/locationCache/journal.tmp
          • Size 31B
          • SHA256 68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274
          • MD5 SHA1 SHA512
          Submit Download