Analysis
-
max time kernel
2870560s -
max time network
153s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system -
submitted
23/12/2023, 12:22
Static task
static1
Behavioral task
behavioral1
Sample
109574b583aab143c943ac7ac1714155cda2d71ac7cbeb5b5d2235852fa926c3.apk
Behavioral task
behavioral2
Sample
109574b583aab143c943ac7ac1714155cda2d71ac7cbeb5b5d2235852fa926c3.apk
Resource
android-x64-20231215-en
General
-
Target
109574b583aab143c943ac7ac1714155cda2d71ac7cbeb5b5d2235852fa926c3.apk
-
Size
9.0MB
-
MD5
609bc8fa33c8354192514a52a0b06bae
-
SHA1
c695554c277e948e3057ede73c551314b1040c14
-
SHA256
109574b583aab143c943ac7ac1714155cda2d71ac7cbeb5b5d2235852fa926c3
-
SHA512
3af9a3af05bdb381cf1ad92b9c5c6c258356b3c6f6f84148a3b8b8d7b2dd8be94f8fb436849a52bc6000dc557d24111c4376ee6e4299641aa06cf7aa560a9919
-
SSDEEP
196608:23D/tKUFRMnMf2bcyOG9m4+DlqIpGQeWmmQotfD:o/tKUFR/2bc0m7YmhfD
Malware Config
Signatures
-
Acquires the wake lock 3 IoCs
description ioc Process Framework service call android.os.IPowerManager.acquireWakeLock com.huangyezhaobiao:pushservice Framework service call android.os.IPowerManager.acquireWakeLock com.huangyezhaobiao:pushservice Framework service call android.os.IPowerManager.acquireWakeLock com.huangyezhaobiao:pushservice -
Reads information about phone network operator.
-
Checks the presence of a debugger
-
Uses Crypto APIs (Might try to encrypt user data) 3 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal com.huangyezhaobiao Framework API call javax.crypto.Cipher.doFinal com.huangyezhaobiao:pushservice Framework API call javax.crypto.Cipher.doFinal com.huangyezhaobiao:pushservice
Processes
-
com.huangyezhaobiao1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4922
-
com.huangyezhaobiao:pushservice1⤵
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:5048
-
com.huangyezhaobiao:pushservice1⤵
- Acquires the wake lock
PID:5259
-
com.huangyezhaobiao:pushservice1⤵
- Acquires the wake lock
- Uses Crypto APIs (Might try to encrypt user data)
PID:5567
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
48KB
MD5b6bcef05522786a7646cea79b30539d9
SHA131aeeec9f2f5bd55ae84b9248935bc919414cd72
SHA25694b66260f27f6eb485be059b7edf3ceb26255dbfbd6ba52ced2fedb32a8120b7
SHA51283dcabed768d026366f55d83382eb05d4c77ffc7878596c8e8dbcf9545f7dbfa68295d61acaa91516690a2badfbb644fe4ccece8d81dab7d4f19708690c07940
-
Filesize
48KB
MD5a33d81b63508ca8a4b24bf949e3ef02f
SHA148d0e8e3caf3ca8d1f59050e9406873dc2b62744
SHA2563accf952271f136092261508406d7fcaf324d38cdba698a35fd4889849553688
SHA5120f00d10250cd8fbbb88777005284c3689576fd6ae6d9308509381baad1ab99ddb1e503bd2cbbbae4a1d75297ba8e5e83753dbecf18d121a8f87065acd809d987
-
Filesize
24KB
MD57b41f40335a9e621e37766d7c43568ce
SHA1d59e35be3cfac36927123a83c264e2d26d2397b1
SHA256225bd792bc7d85a921a453e0dbb438fe6f3b1dfc783fce84e85224621667b55f
SHA512b81145c5347b7f9c8cf3e2889b7b2c7f319716337f1f1653639d7b00e149e0b6e3fd9b36e458799084a4a9fe9fdb01d231a5847dfb6d48659f9028a75d1154bb
-
Filesize
12KB
MD5ea628e04765adaf4238a5dcdff4bbd51
SHA1a801947619ea8c368efe9c006a324dc6339ac60b
SHA256885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4
SHA512c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe
-
Filesize
8KB
MD5275dda942fe97e0f8b5812040b8a640e
SHA13a8626fb983c7c3f2d1fa12dfe75388ce5586838
SHA25611ce488d2432c562bd423bb6c62db09c47cf5a0c08eaf587030879794ef6393d
SHA51218777e4d5449c0d8e317987d956c20a6b257e94d25c53408e25e15c413dcb671a98c357ef40335f31caff6877fc5ae9a9c12103e1124fbbbb042c9da802a02ca
-
Filesize
8KB
MD5050fe83c498781841902bafaea631847
SHA159cf64de697945a5585098e310e55fc68e872257
SHA256aff0952b9f3f07ae1a5943266d0af285cccfc2b32efdbe6d7e6232fc9283d8e1
SHA5125cc92c0dc715a8ff632c59944f7d84b147415243cbc92b8d98ee47322c893057516b87eade3e121ccfb2d6815d75fe17ed0828bb841ae4eca912f5f225ce3f0b
-
Filesize
8KB
MD5d772fff58e0ccc6de6bd39fb62ffbf92
SHA13ccda77e46c764b5841a953abfb1f9c38c8e1425
SHA25684f7f51a8ab607dede8bdd63f962e907c8efc30679d968b21311abc87a13a672
SHA5124146a08083e2a5c20cd21b316a47b32c0709bd0f0f13547252852269d599772243b3d5f89ee86b2d0761bd5256d06418a0c8eb9db07945740995bca00e0fb5be
-
Filesize
8KB
MD598c4a05137870a0f4b06d9499dbee5e8
SHA1362a9d1207260b3971926ea205878430a525e4a7
SHA2567006bca529f02d90d8c2ba65144c3555a8aba911c2a6f8ea997bc878748e6fd9
SHA512f252f90ae1e05f09eb217519410c29770a47af9442ab4f02565614368d2828fc7b2c6bcd11cb515c570096dec7cd8713b4931aaeb0c503dab03a533b2718e6fe
-
Filesize
8KB
MD58714e24890e4a8dea34d6befe3eba775
SHA14cfda73ffd540c81d004a1ed0c7012fb0b3b56cd
SHA2569f5416f2c14a217a9e879a5c522f52b81739cd2bc64ecbbe163cde9a3a4f7132
SHA5123e5c3f540b3f1e64f1419588da52b2244f8c42a987aea4f6904c6d178a8d922567d85bff10570ae98f42e95dc058a816bb76652288f3c1a02611c38066471bdb
-
Filesize
8KB
MD5ddc2af68760e11ce4324ed5afce8d3a4
SHA141b8dcd81e3094c2799a04287d65386a942431c5
SHA256a924f6db0ec0a587f6cf64f55d2134f5a0af309a3819a86ea43856edb9ad64dd
SHA512be8e077e3bcd81b79ccbeaf1a7c592a2c73865fae9b22bf41541d105e3d8f4913a32023e479c1cbf21a737008fc5d46c412b2ee27c41ca9772a9778a6b7f5c33
-
Filesize
8KB
MD55d43210fb34391da5413ed961e6c7b13
SHA1c4253054c4955d1ad27f72bdb2fa268993b56c4e
SHA256fb420e05a9582f5ed13be8bc855872fca5b0abf6a10d88785c0121817bdd682f
SHA5128ecd8ce7391db1cd96306a93d21fe3a6449cc430f2b291910160a25b78681fb571de7523722c885e18d980ef52f58a29cc8a140e898473783444849a3c3f36b3
-
Filesize
8KB
MD544fc6c536c6b7c40d3a8b940c2bf5348
SHA1b4c3ef7d2ff1c74b74ade889780ed25911ecbc29
SHA256e3bf5ad0f91540f995e5cd761abbcff3971dafd5c61d26301f54f3548fbc2ee1
SHA5129896c3e0dfb3fbd257c329b9b6bb2034fa51ed10b4bb5bbc6c027a07e1ff8b22399b5df97a267148e524202ca330bceeb4fc06d27592b7edafa3e6ebcf524dc6
-
Filesize
8KB
MD5ad4562d8f88bf58dc7c34e32fd33c4eb
SHA1a5459bc7e87e0ea15e61a9d3bd37d39a784f31ac
SHA2569e57a4906c10e46e86bfd04156631d756f780e34c7061f2aec06c974a121ab97
SHA512b2092c0fcd9982fd16f8aae0f3e7315178a5007e10a4db078b3c6b29ee58c019c634a2c8d894b623e3da06e19b03cc186e98a31e0a9735d4de619868fc795da4
-
Filesize
44KB
MD500d6f75dd45420e99f7ac58e6da9864f
SHA106a8708ccacc0f167c347a1c2cebe54fd70a0066
SHA2566716b2dda7ced9a516de2a2c6d08c337b9882a03479895776949ec841618a102
SHA51273c04dfb40af7a012bc517f7ca5e13032325e9a3ba1253135f8aec0a79383c6f1d0fbbceade584c08aa29e59bea62c2dfb158a11da2ea5097a881b1b1a6356fd
-
Filesize
512B
MD571ba0b55f85bd83ce2d7fc25820b26a8
SHA1a86716755481ff5ce1400a740e367f96f7fcc9ba
SHA256fc9f80ef17f2d4cd3a0edd6a56f6d060cf41966b44857c1d3a451b802bf51c95
SHA5129414047f72c57052767c0e191797652c830b767b2091f937c2c646de0a49620751796861a095ccd06e082fff984a1e6d94f46fcaf7ff0aaca874a81f96fa25e3
-
Filesize
44KB
MD53d6caabbf1f784652ea88c505e40eed3
SHA11fbd3bca9f3ee0cd372a7487524201fba65b6d75
SHA256d262cba52e1f3a7d150b84aa56a65f141e8b20a6686e6dc2fac6ef9e4a742baf
SHA512cb76d4550eda91945ee50f3033d0f7c26432f8d14f2ee4c7c0592134f88ebfb81e0354d5819c79862330d1c05983cf944879bddb3dc2e559e2c04326fbf3d6ca
-
Filesize
8KB
MD54e050d228d57eda9aef9ed3dc93b9310
SHA165b6d74c800fa4280c3fb9d2eb918cb2748eafbb
SHA25602fc401f5665818b599e136672bf3c2622beb575afecc97a28d318ec679d3a10
SHA512fc8c4b215b556eecc390b4dec3cbcc4b49cfad7284727dcf4f3094ebd3075591012592b7c98dee40864bcb89ce327f59c0fd9769209c8270fad22f6cef9c7629
-
Filesize
8KB
MD5efdf49b200ad375605b0a60ffd504040
SHA1463f950fd06cd03ea955cb9f58f9d8b9629d678d
SHA25671952398453f6c10654ef3e9460d4b73d5bdedd0b915b17367d1d6dddbe4a970
SHA51267989bdd85fc803153a75ba813daeba126a60e568c839aa13f0ea39c6a3726d1bedf1efd42a106d8eefc55e2a3fbfb227bcbdfdbabbe9f5249b46b8c7f5f7303
-
Filesize
8KB
MD5c3fcf32cdff8648c2e4dbe6432a08496
SHA1a147cd45a9e65cd0be363eb2fdaa8894db57ba42
SHA256b0bf87c692181630ea93c937f814ade7aa4b78fd64aa26d5439ed4a26d9438a4
SHA5121c8bf8b99133f90bd79194131538d0b3a114a8d921cda5e8f808bb33e1353ec1e62ac751a7b27da1e870782374674053c2a3cb091672f41fee7aad9fdb19b1c9
-
Filesize
8KB
MD58e6e610e38ef3263863cb157b7c49e1d
SHA162cdfa8d63300904601ca53744f95dc71356d19b
SHA25658e25b1132847d197a2be897a8dc23c57d8b1be48a9beef3b8cb705f6d21c62a
SHA512541d82804705c2bc055445c2ad8ef16b7167f6f5eafe2d5a59844d287534b2cb42d9a7641c34d380caf84f9555ed88679bc94dd48c58e2aa8997430f46214755
-
Filesize
8KB
MD59a898141d726dfb4631832ceefbd1461
SHA195edee0942ff4b2a65f3ddf2cf48916476eb2537
SHA2569eb31a629f1dd2c42221dafc1da4da4244edfa0eff140c4af266f7ae62385e59
SHA512e17a278fc2cb915a55c2b01fae7ffb28df51cf98dae9ec4c7786f79f568fa8c7da92be8b30a6f2fcca1212ac4c126a3237400f91e197f35728272efe4133eb2c
-
Filesize
12KB
MD571e6e7d940b6ef1ba05cd465452a69c5
SHA1e5f353d2aa624e73e9f3a8918d1ac0da744d9d1d
SHA256b49c29ca3a42bf258dbc9b779cee28805103234bc74b74a75623c1bbb1a70429
SHA512e69b9fd79ec169f1883c37fe0f364b8706b21c05f6634633c088f324664f07ad442ab36b591200a281313fa817d8ed1035a8d92cf52e2975eead800ce89c78ab
-
Filesize
12KB
MD5163b0e3f017becbc89b9d7f330b78f09
SHA11ef9cd8ac8655190468d0ccece0a4738634ab0f9
SHA256cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36
SHA5126a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd
-
Filesize
512B
MD57856f70cafc8d2ef0ace0e657a1e79ef
SHA132e32d3ce027b2afa81709212636f63d886e3648
SHA256e93b336c3a4f53c1509ef9efad21d8af2c318a97f3be2e38eeb9310575cc7891
SHA51213ed62cae4f02dee1b640a6f60a0d6e489ddc1e5eb4da2dfc7c7f3aef0a5208d523a824a40b5804b9796f90417bb7e0351780ef55caf2d01b09271c6c7f0ec97
-
Filesize
8KB
MD56105f36ea2c42d5afb4f0fc1e53da81b
SHA14aeacdba21fabcc75242a6eafda4b35d0cdd82e9
SHA2562fc4126fc6e0ec7ef9d814f1b25a6bb238fbdb47d6a9dc5a78b2f8369de7c9f3
SHA512290f78ccaffff2afae07c6b48f7583b18f3dfbba95ad052799cda9907e6de61f3b09a54b0ae36b0c9c50a507b01de43d5222c190dfbaeb9adcd447d057c2330d
-
Filesize
44KB
MD5f2432ddaacff3b133e20522dc6a7c25a
SHA131b529ec6f1d6fc8b5b7a11dc31685b36a985498
SHA2564c300d0a10887cb52df3f867e4f26757d307cb5787f128121ddec9136b51bd54
SHA51245efc971d31f98fca02c67f042f7206c2210736500c6455f43847ce36c3538e1b4cbe8a723e923bd33c4cd16c0e9572460de8cb85e45530f846518028a47fefd
-
Filesize
8KB
MD53ecde34261efd7d765d781ce475f2092
SHA11852e192fb6497f5f4714f60af35a2ad265f3a79
SHA25684b29a2e31a7a02bc5b295e61368febe7c92b2c6c20b80df9d7797f35d9de34b
SHA51291c8379b25369c19ce3c14c21ac6c7b9ecce15fa83a4b6b3078dd4843ede87e3880af73e6463cda25bf3791b58a9c64b06af109ad453f1c0d5d56b3b98b5ec64
-
Filesize
8KB
MD5e0aff51507e51b61e64592b25ba0b08c
SHA19f16553d7bdcb4a70e02d7e38a6e2c3cec19704b
SHA25619ba7eac1481664c65ead0fa6436e28dd4cd51f57485f35fde4f7d8f6a7d606f
SHA5122e866e7c40c3c26309b4a33d539c8d39433ce736a074832c42fb4dadaeebf8aa0c0ff38ed86d0b023ff1c697b8e9d651672171d45a80a82d311da7a9728bc351
-
Filesize
12KB
MD5298459a782e869c1487ca08206238cd3
SHA10fd13ddb9f910cd985ff4afbed9bdf1c5d66b2d8
SHA256f0fd63a7053eff8a05c7ae946f6ad02d3b386a11e726d69fd79b1dfd9e4cfac6
SHA5125bafd8a5ad4829fc260035249dc20236cb3d956f895330fabac37453137bf050aefe208aa3552466afc011101db41a7deba86e0676244149e25c45712fdf556b
-
Filesize
12KB
MD5a38dc46175091477587166b67f949a8c
SHA172404af67a3cac7928b0d71266d0a20dc2837b2d
SHA256e5184d738b5a628c375beee2e658594f8aa8cfe62df7d105d0eb7b6093c5a03d
SHA512a2f0f17d7f4c79871ef39c536482d9c7cc0e5fdd3de0d16cfc2fdd95d1d925973d85899b86711a60791aff56fc1209b810ffb03861743664d52afe8b8092104a
-
Filesize
12KB
MD579aabf5105036795f1cedd2092100b8e
SHA1ebeb3c1ef1f3fc8d4c98ec0e3d1a4e2c26fb7485
SHA2569acfc4a4e61b757440ce3a33e6622c2e2476ad34a762a073c7fc738e38117952
SHA5128a5b358d3de9c35f52e9812d0fd73e06824eaa14650ebf22583e7df9f1e4332ed735d22d2f0907b3ec6b451c0f75afedacc5deb86c7d8327e472c5032f2445ff
-
Filesize
8KB
MD50864016a2993c547d7067dc232850269
SHA1cc0c2e87a2623f3d5a905423eb691af2edff6e09
SHA25683b8ac92426d78c6520eaa05a8efd18b26e91590775f2af863e52db6ee2a9657
SHA512e18ff1c04f432cc6279ada0b115719de42bde10f580b1d4a04b4c7ef990dc124c4a18ae66fad8b9f431bce95ef26e2899d1af6bcd1089c29f6d353e5b8de70c5
-
Filesize
8KB
MD552f832ae535db2ff89346a0c3a0d4f1e
SHA1367aca6fed83abc3da5443bdd3a6c4d948e56bc2
SHA256c68d39280bcc88565f8d55e44d188afaacfdaf93cb8c5d0f7a4538de547936f5
SHA51279eb1961c08e13eb2b20c9149d27580c2ccd2ed908c033c89383bd6b044dbdf40207bdeb346dabf676303f8385db473862ff64cf186eafe0c07a3bd8218638ea
-
Filesize
8KB
MD5c38256bccfb5c356d0fa21c99f51ed40
SHA155391338e6b8b1bf6db40dd6c0f125bf3d771a6d
SHA25633472729f6abd19c153da2eba28b321f3d713b4d24c638a78f35e15de5d2df8b
SHA512e7d5d6effd81337f6a7ee9a748b75f1ec3cbd102f0460bdd9568056b7df86e669c774fcac065ffd8c42a2ba505d00ed8c49ea1be23b1cbb6db2f759b8f0bf98e
-
Filesize
12KB
MD5c120fdde534519739971b73d1ec335ca
SHA1f53bb72b3819a0c77065c62e736cff2b2b3856b4
SHA256e57e193dc13276a5f4ff80a2996d44c7f501b474b6144621c3f20e82e57eaada
SHA512bdb074a7cab58c2a2f73d24e1f564a1903adf7d43a67211796c9774fc2f0b28431c75383e99e84b6d2979cc80c126163a052be7423525d9ea61a0f9351e48b2e