Analysis

  • max time kernel
    2871296s
  • max time network
    163s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    23-12-2023 12:23

General

  • Target

    10f1f42e9618f4e1d1b972a9eab1adb8b3452dcf9f68c4e0b232d7eafd600d26.apk

  • Size

    16.2MB

  • MD5

    13586cc410f39e5f581b7f7caab64721

  • SHA1

    51f9be73f944968408e67cd16876233e03d25c13

  • SHA256

    10f1f42e9618f4e1d1b972a9eab1adb8b3452dcf9f68c4e0b232d7eafd600d26

  • SHA512

    61241a197aecaa8f8c9a0189d3308d248228441b29d011d38a12b5a1ed8662a9733239855a5a0a523f3c591d7f81f4ba95260cc01c4bb4c1d5af905f7b9480a2

  • SSDEEP

    393216:6NaDAZy7uRu81/bkv3Ktb6SJDEjqeBxT/8bpfMy:60kg7cj1/bz0qeBtSpUy

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 2 IoCs
  • Reads information about phone network operator.
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs

Processes

  • me.chunyu.ChunyuDoctor
    1⤵
    • Acquires the wake lock
    • Listens for changes in the sensor environment (might be used to detect emulation)
    PID:5109
  • me.chunyu.ChunyuDoctor:pushservice
    1⤵
    • Acquires the wake lock
    PID:5263

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/me.chunyu.ChunyuDoctor/databases/db_default

    Filesize

    12KB

    MD5

    ea628e04765adaf4238a5dcdff4bbd51

    SHA1

    a801947619ea8c368efe9c006a324dc6339ac60b

    SHA256

    885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4

    SHA512

    c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

  • /data/data/me.chunyu.ChunyuDoctor/databases/db_default-journal

    Filesize

    512B

    MD5

    e00000bdf1734100d604c8f045b34be6

    SHA1

    481ee4a249d7b0857fc01acd794ed078a27dd458

    SHA256

    12fdad8ae0e39e3f3e2c4a283f21025ebd8b2d7fa2dab3178cb1a94d90484b8a

    SHA512

    b9ac3de63ca2480a7e625fa08812e14251cb3eab0b39bb72aa6a58f2e2ca51ea54fa3871a330f53edf27646358aec89b6a7700a0da48eb956b7b19cf0c27baa2

  • /data/data/me.chunyu.ChunyuDoctor/databases/db_default-journal

    Filesize

    8KB

    MD5

    41d9842722a0dc7809fed7ea7b3558ca

    SHA1

    95eade95cc5c26ba8330a2f721163af615ede760

    SHA256

    74cb174bee6c46ef1c9a016fd904857865b9abf76850cf626169c51458b42e09

    SHA512

    1829913b8fa30f8bacb00d08b181a0ba5607193b3097ebf82c79de6cbfbc07b259d7c65c7a166720102dba7973dfd871531f07f1a051b650c1a8712bd22e2d95

  • /data/data/me.chunyu.ChunyuDoctor/databases/db_default-journal

    Filesize

    8KB

    MD5

    cd0079f53d3f40f501e9b3bb1aebda1b

    SHA1

    d78e9c5fd4ce1a8424dcfa19c8a4f60b60254411

    SHA256

    2c0d2d627fd640474873992256d81c8c61aefb52c3092af10ae50f4c65a94424

    SHA512

    b7d1a9817af76f32b9f9906daf50c1bcce87e00a9e06dcc766af53a934018f883ae6c650f1afd9ec4a99b36e018f69c6271d15f78690cb570c2e52c7241dfe77

  • /data/data/me.chunyu.ChunyuDoctor/databases/pushsdk.db

    Filesize

    44KB

    MD5

    755ab1adba0113c1d2cb6c7c85badcf8

    SHA1

    ec7dc1140743fae50ad107b1013915de12632032

    SHA256

    8a9660afd6764f1821eb1c07d2d33c9047285425d8dc553d84ef6eda9aa9b0b5

    SHA512

    140f9ed4561e62615b5bfbb572dd5ab98dbe2f9f7212c8a2ba82e5e512d8ba3c39e1d0e27a6196326f9f3193f5b22deed6899bbd634618b0f21e412049477524

  • /data/data/me.chunyu.ChunyuDoctor/databases/pushsdk.db-journal

    Filesize

    8KB

    MD5

    8cd6a135975d0d3885301d53e2690992

    SHA1

    04cb0913a85e06b09290563dd73e4bb0b76b47ee

    SHA256

    4655d785022a91ae0c720b0287624973f00f0190bdda78c42420c5abd06d11c1

    SHA512

    7e7a39777177c307b101c984d6d7ca31d4704419bb22f47d2b73da711ed22f32f5c78d8c5c90ce63ce2a761921fecf9d6653187df050127ce9b001e70ecfd875

  • /data/data/me.chunyu.ChunyuDoctor/databases/pushsdk.db-journal

    Filesize

    8KB

    MD5

    a04814932faa41ea10350b278dc573fc

    SHA1

    c0e5c6fa0025a65e0cd7995f37db450a1036198a

    SHA256

    b7d69f75c609467e7fa9f042cc5943941e7178feb2fb1d6c19820232e0c13765

    SHA512

    48c401d8bf7be3ebd33e19488a9a951b13c9c05e5eca1d78caa64cd67bac1caf6ec2a53797f99038ce4bd5103929e38aa06a894547af75ef58fc3111e52ec530

  • /data/data/me.chunyu.ChunyuDoctor/databases/pushsdk.db-journal

    Filesize

    8KB

    MD5

    641e50eaac01eee7f14d9fe3728848f6

    SHA1

    a006ecbb2698c3dbe4f4180a4f1eabf2d9a54a03

    SHA256

    0d3aec7227aa1fa638d408b5c3a364b77c2aeb5dc9c2f145841eb5659e6fd81a

    SHA512

    3b5bc000f4b64cffef7ed9e7ee080b472c17c19c720b8ae165e4d167680468b05642e3e4552ca4373f01788805bd8284733bce7f02cc2499ee9bfcce93713a5d

  • /data/data/me.chunyu.ChunyuDoctor/databases/pushsdk.db-journal

    Filesize

    4KB

    MD5

    aedd1d0ba58641a2c3c67e6b184e0b82

    SHA1

    ba533fecb29526ece26fd3a916d40acf376e8d46

    SHA256

    395e1065f51667ededad26e8d8978ba003ee283d5d79b85c5c80a178e535b89e

    SHA512

    a10c07a1961067d73544907aa5dbfd92dc6c9325aec7510e2307234eadba725d1be39ebaf28f3676e9a0981819e6b00375de822890952ac1da20ebec462951f0

  • /data/data/me.chunyu.ChunyuDoctor/databases/pushsdk.db-journal

    Filesize

    8KB

    MD5

    d5c4a017e5ba4d38a863df6d97454c41

    SHA1

    bd310c26aea878d5d46922252e4e608eb42ac8a9

    SHA256

    6a1c07229bdb095a62a28c4d5de7e689e13a04b680a8f2a7d946322be878b695

    SHA512

    01706ccbef704b3bfaabec291e68a9786e22e10a12ed61ebbbb1a959b88acb04a8b5d168f5be57f3131b074402da30bae6f26ab7f219cbbf0b00771994c627f4

  • /data/data/me.chunyu.ChunyuDoctor/databases/pushsdk.db-journal

    Filesize

    12KB

    MD5

    156c7a0f5ea7b01840ede74b31d8f6f1

    SHA1

    2c591cd58e0805bf9c9a3caf38afe31616b8dbfb

    SHA256

    8b0606187deb020fc94e61bfed580f0a98051f05115a36353a33b75216e2da44

    SHA512

    afe23df2ea3570c73e576a3c9d1834385479e7d328c1650a500644ab8683b9eee4a21b5bfff8f5f47ff9085a08fc011b40e027e7f05697908dd494a7d2f100bb

  • /data/data/me.chunyu.ChunyuDoctor/files/.FlurrySenderIndex.info.AnalyticsData_6BTKQ64JXMSQMP697J8G_156

    Filesize

    42B

    MD5

    67778b62bc685aa5426a68eb4b89fa76

    SHA1

    89a5038a24fb8a229c0e74def058ae41692e3cd8

    SHA256

    018d5c801c296a71964dff25ce2a6644412dacf6083f3b0de114f87ce1ea27f5

    SHA512

    cfa51697b48ac029d666d88534c02158cfa367a2f33d3aaba70ec3ac8919b46eeaa1e90dd2dde73de125427dcf3c6d1e1d9fe07b0e602e0d4a040dd4e5ca89c2

  • /data/data/me.chunyu.ChunyuDoctor/files/.FlurrySenderIndex.info.AnalyticsMain

    Filesize

    44B

    MD5

    a6c400978781f5ae5d6ef395957ff036

    SHA1

    74c21e52f17b59ec528d0fa671832e7d5f942237

    SHA256

    18c656d51836124c76345a2c2a737124981cc3210701523e66d039108b83c341

    SHA512

    2a84c2a7f83bb080d8d160ffa54d71db00b794945815a967874be5bb3ac5a6953277033707e943ceb1a1cf4aa6ed3a512d8d5541371428c98b6e3f442819e106

  • /data/data/me.chunyu.ChunyuDoctor/files/.flurryagent.-248f6de7

    Filesize

    192B

    MD5

    c2568c27a59a1e451ce6e52bd8a203a1

    SHA1

    421aa584503593b82875caa08058378a3d805728

    SHA256

    6170fbded669c32c83c41a8fa1db271f6fc37a607c3099835b095c7db22868a9

    SHA512

    be9cedbc54ba041b55147e6f80808738cc752d04cc4c37e0160e144603d7a65c18ffcc42ed53a3d7bf0e73ee827f81169915eed51d40b32799ace95efb097434

  • /data/data/me.chunyu.ChunyuDoctor/files/.flurryagent.-248f6de7

    Filesize

    192B

    MD5

    13fa8f61b8553ec626be33cb79d2e657

    SHA1

    535b2ce5db66069f22fcd98f39dbb6bef7d3b06c

    SHA256

    635830232107b5cac086159f279a0af22be0d178ac4b1f41628e97b878fcc8b8

    SHA512

    d287aa73b9dc758eb88ea021ecc9b31f20428766058752eb5066878aaa1c59ed3f8423035a9f13f301d646d262574066f2a3882c1d0d4a76780282265fcd2e9a

  • /data/data/me.chunyu.ChunyuDoctor/files/.flurryagent.-248f6de7

    Filesize

    192B

    MD5

    d80c2e124d9db72d617d691f8cf80d78

    SHA1

    25b7717159433a65c4f40016fb541068c94ae99f

    SHA256

    2a029038147e517a5aef4c7d6f673372ce78dea1904afa88be20002db73112da

    SHA512

    871369dded7999b5ffe3d7f468b505bea02deff39786904d86790e8589ff49539c3215ba4eeee2f152a1157c85c166fc28f56b4753c636e8ddc77ea5e93f1483

  • /data/data/me.chunyu.ChunyuDoctor/files/.flurryagent.-248f6de7

    Filesize

    192B

    MD5

    975370d09f248d495389c74edf937988

    SHA1

    ac2522599b80a788a6da8f8a3d35e949c6cc9306

    SHA256

    f60b955ca14fed1aa34bb0a2dc3a38ae4ab92cf985fd1108aa99403041ac3382

    SHA512

    c7ee7fc9295cee1ee64749f57b49793b18441bfc545a49231a9bd0fb4a32e41fc3a5c54b064ebd7ec33875707bdc143b9420627fd80eeb9888b62b00302fec9c

  • /data/data/me.chunyu.ChunyuDoctor/files/.flurryagent.-248f6de7

    Filesize

    192B

    MD5

    d44620114217660165f9a907256d025b

    SHA1

    38ebb9edd6f7afc0890e71a9b55aa2ea29915ce1

    SHA256

    e1b2e664ebfbd1250eca46139921ad1bc27d4d5d397ff3bc7ac5aae72b0cc0ab

    SHA512

    5832b85fc12e2ddf4253945a39f31ff6fa0487d247ec647dd1584e49b5d58e02a626888ccb007d77d62a060b95ec033eae9aa65c2cc640e4de6aee8480de97b4

  • /data/data/me.chunyu.ChunyuDoctor/files/.flurryagent.-248f6de7

    Filesize

    58B

    MD5

    c5c6dbc32da7eac376531f486b242e03

    SHA1

    ece81e509d8118ee695a42efab84cf4ea889ba15

    SHA256

    894f6858244a3dfb53a35d262d828ed67d633d38201b4a2a055e618f17a418e7

    SHA512

    f1afd583c74471f45532e7b21626e1949e99ce09b9af1bad20df7b81d6f8f6849dd66fe7869168c916d3ae5338b51a7b12c1c0fbff5c0ddba1367f18901b34cf

  • /data/data/me.chunyu.ChunyuDoctor/files/.flurrydatasenderblock.4efede7a-c031-4d9e-b4a8-81ec29ef047a

    Filesize

    254B

    MD5

    57546ee233616675457268e352250f8a

    SHA1

    903558341b7a26b0ac4ec71a8aae88b155e369a6

    SHA256

    99fadc5acbbffdb6cd2f1f5e04f320d9821bcdd9f85edb1c40e136976a595eac

    SHA512

    f0c234a5d0796a4ab4271d08d526827e21fab613931aa991f48018e057c16a287320e56152eb8d4c53e4a3c7590d3060a26ba4f3d25a9052e3949cb2697e81f2

  • /storage/emulated/0/.ChunyuDoctor/.picasso/journal.tmp

    Filesize

    36B

    MD5

    37e8e716e0e2f4a0b05cd9571d95b84d

    SHA1

    f8d068f6931707bddb8cd69f706f2224ad1fea3c

    SHA256

    7080cb592d5149c858b206d3fd0d5e3e7d601f120af00b2616bee928ee1291ca

    SHA512

    e62b850901835fdb73fa6224618422f721dd765861d42f6bc2dd013413e96bd910ac5313afd9b4f63da74beb12a15fac81b5157456c9caa3031862dab84423f6