183afdd8cf681d63dfd8d2b1e4971bcd43cbc905d35bbb80c9ae249185b0cdbe

Analysis

max time kernel
2886781s
max time network
171s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
23/12/2023, 12:53

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target
183afdd8cf681d63dfd8d2b1e4971bcd43cbc905d35bbb80c9ae249185b0cdbe.apk
Size 24.6MB
Sample231223-p4ppdsadcn
SHA256 183afdd8cf681d63dfd8d2b1e4971bcd43cbc905d35bbb80c9ae249185b0cdbe
MD5 eff848166447bd44bedc11a62e5a459e
SHA1 671b58416471a480657ad5942925e42ab1c13ebf
SHA512 0e7040833eaf77e3e62eac5d8a74e3cf9570eec852e1801728cb84a82d1ae1f6e3c8c38ebba9be9d1247f21cc4af94814999114dbbb1d1f2aafcc1b38233058b
SSDEEP 393216:yhgs7iwWiwXhS0JNO7XF5mdRrvbaRfLNVzezyO+sze1qyGiajyPc68BbUj:yus+xjJNQF5mdRr2BqyQze1Q16mbA
MD5 SHA1 SHA512 SSDEEP

Score

7^/10

Malware Config

Signatures

Checks Android system properties for emulator presence. 4 IoCs

description	ioc	Process
Accessed system property	key: ro.product.model	cn.kidstone.cartoon
Accessed system property	key: ro.product.device	cn.kidstone.cartoon
Accessed system property	key: ro.product.name	cn.kidstone.cartoon
Accessed system property	key: ro.serialno	cn.kidstone.cartoon

Checks Qemu related system properties. 1 IoCs

Checks for Android system properties related to Qemu for Emulator detection.

description	ioc	Process
Accessed system property	key: ro.kernel.qemu	cn.kidstone.cartoon

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	cn.kidstone.cartoon

cn.kidstone.cartoon
1⤵
- Checks Android system properties for emulator presence.
- Checks Qemu related system properties.
- Uses Crypto APIs (Might try to encrypt user data)
PID:5120

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

ksPhone.db-journal

Path /data/data/cn.kidstone.cartoon/databases/ksPhone.db-journal
Size 512B
SHA256 c546ab0d2350201ffbf661270f9f484a3313ad37673ff049957d65cf41c0ff49
MD5 c40d1a4a7c5719f34b16e0e75331b2c8
SHA1 55050d0eb24e810329d75e9899135bf337564198
SHA512 14deb6a64d5b99c54f5b3d0144db62226c8a28a119e8b0f378b589d8be02601d795b6433ce9e0834685a7ae5f8a6ce24cd1a1dc499ba967317a8574d80dbb16a
MD5 SHA1 SHA512

Submit Download

ksPhone.db-journal

Path /data/data/cn.kidstone.cartoon/databases/ksPhone.db-journal
Size 8KB
SHA256 e02a0d3f75055adebd7b018e2fc8f8f9679018acb7646156704b014a0f7ababe
MD5 7c31ba7ae4a935bd98017c479951d94d
SHA1 ec478d9f07a97d0eb166e34ddb8e97b05645f816
SHA512 27a8abcba915c4ca94c003f3db6a5df9795bf29db9699d0652be912cbc4ef42ba08fe76201b110c281c60960292351d926a93254269f6c182e8f0d899ff4503a
SSDEEP 6:7+/l956/gn1o/vg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKiLq:7+te/J/vqLiuWdwRmBEyPbTLq
MD5 SHA1 SHA512 SSDEEP

Submit Download

ksPhone.db-journal

Path /data/data/cn.kidstone.cartoon/databases/ksPhone.db-journal
Size 8KB
SHA256 8690e48f87402fe5de361ad0ef26f5622dfb4a0d579707ec1c2e88b435571e94
MD5 3635a59730aa17e0607eff7bd0497307
SHA1 35e8890032b870abb4f060c2cafc9ae26c161f6e
SHA512 0f02e48ed78dc2d6a622f50814be1d067695ca141cb044759371dc95e1b9ff1c31cfd28bd18fefb3cda1545a37730cadd3810f7749b975b3efefd8bdec3cdd75
SSDEEP 6:2gPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKcmtM/a:9qLJdTRmBEyPbxmqa
MD5 SHA1 SHA512 SSDEEP

Submit Download

tracker.db

Path /data/data/cn.kidstone.cartoon/databases/tracker.db
Size 12KB
SHA256 885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4
MD5 ea628e04765adaf4238a5dcdff4bbd51
SHA1 a801947619ea8c368efe9c006a324dc6339ac60b
SHA512 c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe
SSDEEP 6:l9bNFlLdrlOERX4PBX4ogLugMBX4suuKTqiOw2:TLJdTRmBEyPbsOw2
MD5 SHA1 SHA512 SSDEEP

Submit Download

tracker.db-journal

Path /data/data/cn.kidstone.cartoon/databases/tracker.db-journal
Size 512B
SHA256 4ac7732d4723678761dfbe7962f121b3f99c141ffb9d84deef9748fce1f17be5
MD5 d579cdeb44bb935d3dc699a4d31a8fbf
SHA1 0c814e38cb3fafd5ac7cebff0347cca4f4e9d379
SHA512 5337bf6452ec96f42d325e8ede55f839ad1ed87a7ee9043ef4d279512aa2c5c1ea8cf75cee756cab339b56f9809760ce6ce7c63f25c95cd1bd796799448b705b
MD5 SHA1 SHA512

Submit Download

tracker.db-journal

Path /data/data/cn.kidstone.cartoon/databases/tracker.db-journal
Size 8KB
SHA256 8da303a608eca54d3fd6799075290494b5eaf74e0ecbf0c02675e8a749aaf6c2
MD5 fd5a623498f1049f3feab79b594a0465
SHA1 f701d6159f93c55970bb096a505a75e4e55d595c
SHA512 6977a719841653759e38a4300966fd9c969878cdb2141378a49769a7c4aa6c7737d975202384cdecf83030fbe8d29185d820e3b1e6188993df8d35c07b00c785
SSDEEP 6:7+/l9Own1Eg9bNFlEuWdOlOERX4PBX4ogLugMBX4suuKuC:7+tEZqLiuWdwRmBEyPb3C
MD5 SHA1 SHA512 SSDEEP

Submit Download

tracker.db-journal

Path /data/data/cn.kidstone.cartoon/databases/tracker.db-journal
Size 8KB
SHA256 da7a2a69574101c1deff9ea5fbbc347e4cf23f0c8d3b3f4831c222aa511578f9
MD5 901946f93e91401d1ba3de6767651e7c
SHA1 2d9ee8aa2479033009d41b22b00362f791e922ae
SHA512 1d07709bce390670bb21c9aae513e03229e914e8889518146f20ccefcd0b4e7e6fc7328467efd38566bbee868c74a84633ad1eed09df2bcf3529dec0b5f38295
SSDEEP 6:7+/l98GPg9bNFlLdrlOERX4PBX4ogLugMBX4suuKty//+5:7+tC6qLJdTRmBEyPbbX0
MD5 SHA1 SHA512 SSDEEP

Submit Download

shumei.txt

Path /storage/emulated/0/shumei.txt
Size 62B
SHA256 770b0991aba64c336aed0ba315d34a836ae93306ba3e0b2781072df4b453e56e
MD5 a84b3dc5d5135f555d02d478be3968b8
SHA1 17ecdcdd41279a8925bf4ed61592ee2d577bd465
SHA512 a55769674916de9435a5adf27e615d5b7a25ac53716d45305ef8639b5721dde35526160928d85cbb7c0f20fd3ade4f01da4f3bf93258433195a15064d3300844
MD5 SHA1 SHA512

Submit Download

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads