Analysis

  • max time kernel
    2815157s
  • max time network
    153s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 13:47

General

  • Target

    25898633f030376e497acce5fde7fdb8cb1e36f38f42b9f08a9cf1623b1c1ab7.apk

  • Size

    9.7MB

  • MD5

    16152158e02b414bb10d31f1c71d360a

  • SHA1

    3df1947deff3cb90a1a0ab74778837c4b0c38fe3

  • SHA256

    25898633f030376e497acce5fde7fdb8cb1e36f38f42b9f08a9cf1623b1c1ab7

  • SHA512

    0cfaf91351d3b1192e1a43f5ef503dbe1781b94722baa3c26e788eae47019aba00a4a76691bc7475bf3a902bdca954937a8acb32558b91e8aa7f40f69f04e331

  • SSDEEP

    196608:wd39U6WWRYH4JWuLN22mkUGyuT4GnuNs9HzEohCoUXgfw+gQIIV9l4:gK6W5HcWQdyuTz1oHoLfwkxx4

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.shenxingtaibao.logistics.driver
    1⤵
    • Requests cell location
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4239
    • cat /sys/devices/system/cpu/cpu0/cpufreq/scaling_max_freq
      2⤵
        PID:4309
    • com.shenxingtaibao.logistics.driver:uexjpush
      1⤵
        PID:4336
      • com.shenxingtaibao.logistics.driver:push
        1⤵
        • Acquires the wake lock
        PID:4427

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • /data/data/com.shenxingtaibao.logistics.driver/databases/wbpalmstar.db

              Filesize

              4KB

              MD5

              f2b4b0190b9f384ca885f0c8c9b14700

              SHA1

              934ff2646757b5b6e7f20f6a0aa76c7f995d9361

              SHA256

              0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

              SHA512

              ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

            • /data/data/com.shenxingtaibao.logistics.driver/databases/wbpalmstar.db-journal

              Filesize

              512B

              MD5

              2296bbd235dcc23bea475d010b38b498

              SHA1

              4b0cb482a858b9df1561b0715f9defb6c291056e

              SHA256

              1d63d84e548fc367dc7c9eef58b4fbc46a9835fdde6a78228b5a57e0eae0614a

              SHA512

              06d852e88d1aa3a9831a3100ec4c456bcadbe0729933c588d7beec96b9c55cb37f2351e139d3a2e0ae226a1a76fd797f3c54a95de4ea003abc9f4641dfbd5f00

            • /data/data/com.shenxingtaibao.logistics.driver/databases/wbpalmstar.db-wal

              Filesize

              16KB

              MD5

              922f23166942f903f2577d1558d7d96e

              SHA1

              f9520cf1611d68fd5026610aab1f272a7ff7ca91

              SHA256

              4f53212d695df3d7c49a9382791b8fd45333253040d6d6df25244330d45fab9c

              SHA512

              d4c0f7776ccbb7bf0cf67a3ac668850db70ff8b009f729650f71c77fcb67c4704d290e727ee6aa81713613c37c33b41ba4da8fbb7e28f3beaccb5ef3608ffe0a

            • /data/data/com.shenxingtaibao.logistics.driver/files/widget/OrderDetail.html

              Filesize

              6KB

              MD5

              4e906d9054e8d41ec339e1b348455c1f

              SHA1

              2282f7167f6b208df62da4b0492da91ee89ee618

              SHA256

              dd372b0643ec769e8b0965585560454d46cb8c36ac945e71793fb7393928d330

              SHA512

              9cd6eef5ce5edc562e785fef626722be5ddb58a923266488c0a0ca15eb6f2c1fa666dcc9d659658d658781a90b84c914af1ed876e3c077169a963de08779797f

            • /data/data/com.shenxingtaibao.logistics.driver/files/widget/OrderDetail_content.html

              Filesize

              17KB

              MD5

              da22c87f71d189bb12d906c33349d093

              SHA1

              d749f8c645c1dfe086aab54bbf36f3b223c970f3

              SHA256

              bf77b5c2b11b83c69fd1bdd3a4461d05cb66ed305b2f0af01a66b37b67a709b8

              SHA512

              32af2269a5d6a0b948325e6d9926f88dc50b26bde2dacb49983b146d36ba52c39960bf3ac3d85e072cf9691d8a1b16858cfbeb3535824f8f2a83206cb1b2d1cc

            • /data/data/com.shenxingtaibao.logistics.driver/files/widget/README.md

              Filesize

              50B

              MD5

              b21792f5b39666516d040ee35d9b935c

              SHA1

              38af5845ef7b74403c95e7c73e42b221b699fbab

              SHA256

              892e0320021d44a2b7db4a47998bbc254b2bf1ffe4223f42be5418b8f86be4ee

              SHA512

              75fe49b9a51b669728ff6f67ac3c48a656fe371cf7b30738d25fe6e24cfd98ccc7b67b3767ea10601e87ce4df31f60f9cbadc9dbf7043ae9971d9e1c9e6cc61a

            • /data/data/com.shenxingtaibao.logistics.driver/files/widget/aboutUs.html

              Filesize

              2KB

              MD5

              1d8d1d1d34855af5f706f3e4352ba1ea

              SHA1

              7403e5c69f5702f25f867acea5908aa972a9945b

              SHA256

              d5a0e68a0ebb13cdfb7217a75a4d0b1b014686b6e040463a7675c7a48f711454

              SHA512

              70e9bf50cd3efc1d3ffdb12c20e41f23a2d7131a5194874e7f217d50b0f6e31b20bc06c894b50abe8194dccc4221ff9eb7c24fba8eb10c9a0554f0c3b354815a

            • /data/data/com.shenxingtaibao.logistics.driver/files/widget/aboutUs_content.html

              Filesize

              3KB

              MD5

              68fba91275efedb977dd43db05cb3ab2

              SHA1

              933f041ffce4b5cbf062dcba3e48ef6502277884

              SHA256

              f3c30e4669c68ec5cac9be0843836caa85b6dce47c067199c0342166ce603a16

              SHA512

              6dffdecdca98b0e7e3daca974a7d8964c5bd461693fbde2c252fe4947ac345f4b822ce7978caaf1ea7fd670a1d47bc1b8fe4e480645147168cf5dfecafbf512a

            • /data/data/com.shenxingtaibao.logistics.driver/files/widget/aboutUs_content/css/images/logo.png

              Filesize

              7KB

              MD5

              52f2d4b40155c5810d99b68eef488f75

              SHA1

              0c47d101df9874ad5de03c6b34eb8aa41610e81e

              SHA256

              e1c8fdb20c292f2c7ef530009166d0af848a87497ca1bda78aba74e081dd34cd

              SHA512

              0d0520321f45fc5813e8bdc09e0af9826bf00343ba833b248003f2cbcc41a5d70d03c3fa7205389f871c8b1ff9daaf0605ea19095a635ce19cdd5b7724337ea8

            • /data/data/com.shenxingtaibao.logistics.driver/files/widget/aboutUs_content/css/images/slider.png

              Filesize

              63KB

              MD5

              3be4602ab29bb01298c5078f508af3a6

              SHA1

              1ab797c0d774338c6216aa5f26e8aa1294877696

              SHA256

              132983bccbf7a2af8ba66c074d6d2a27435941596cf7f0e1bd743a7d3f7a14a1

              SHA512

              14d50a25e98b54b304ee1765bf838dbe6a3bcf8fe8d4a35203bffe91c67218e9961c65592629e50c686606d58f68d00d110002d075560f86c618e3350a784227

            • /data/data/com.shenxingtaibao.logistics.driver/files/widget/aboutUs_content/css/main.css

              Filesize

              703B

              MD5

              913b787b1517fccad890ff35b640dd74

              SHA1

              01ad222d0a652b57e798a367287c29843747e6bb

              SHA256

              15547db822089b7743ebe08dd306fc9b473afb39c82e2cac987a68e2e56f601e

              SHA512

              f42157e3171f29bb946df1a7b3a6448cb22ace880d079ab8ddb330031dde012a41ab75cfcef812fcecdfa482be8aa57bb0c7b5cb3a86c89ab7489a5495189520

            • /data/data/com.shenxingtaibao.logistics.driver/files/widget/agreements.html

              Filesize

              2KB

              MD5

              9d2b907c9f5210f9348b619060b311ce

              SHA1

              b6384760f48f67272095d20e93ca9507ed6b73cd

              SHA256

              1691249bc145842d5e0b23390c4dbcaafadb04890f43a964d07f3f752f458f64

              SHA512

              5f176ec3b762c5a2446d3c7f0469778170dd21d08b877c35a2f3df2fba23f93de46643dbf85fa834772a1182174ff3d74c6283fc7ddac64e00d3982ad5373c92

            • /data/data/com.shenxingtaibao.logistics.driver/files/widget/agreements_content.html

              Filesize

              13KB

              MD5

              967c5a35684df82f4bc4b10e98a00449

              SHA1

              771a89ef17603821a5c791ae2d336003ba9449f3

              SHA256

              5d5c5098fbc035c57ce2a7258b6d1e2eb2a3564c51d9ac39bb11b218e31c61df

              SHA512

              3865e9ede502a6edee119144397a13bf44817c589b4f582cafed1e6a097d71989e0f66af1132550a12e7468309feb5c5cf2430b34ba4bf6e58363ee0b082756e

            • /data/data/com.shenxingtaibao.logistics.driver/files/widget/agreements_content/css/main.css

              Filesize

              404B

              MD5

              9922c5f4b3d50291ee71df4101d40419

              SHA1

              cdad55481c4e983bd15bbfb110ced82d16f0ca94

              SHA256

              3b9c03277c80066ebe54901744f66759cd77d29cc80ef58725d4c08a316733ca

              SHA512

              58b3b5fbb59143ae1451ed122a3c1bdfe16b573634a5d0056ce0979c2b53d5eaf3c69947b03b0aca522eac7f02e190af65f9aa028a4e4532466ce72d15865d66

            • /data/data/com.shenxingtaibao.logistics.driver/files/widget/config.xml

              Filesize

              1KB

              MD5

              0c7618ea11ac855d6c5cac631def353d

              SHA1

              de4ab9600e4462e5f46eb952690f10f9161d1c3d

              SHA256

              2145c696117269fa6188b041b0ab7180e2dd61416a7ace13e057361ebbbb3935

              SHA512

              548b8a74c27114de15c280b71054cf9c06321d43f138122e1e22d156f19766d4713caadc83d9ca09298252e8ad5d1f718559bc8be3a47cd61b56ef49a0bfc15f

            • /data/data/com.shenxingtaibao.logistics.driver/files/widget/css/appcan.control.css

              Filesize

              6KB

              MD5

              574aacd06bb9e1e093fdb71e1deb72c2

              SHA1

              68ed481587a55d2ee170babbe6b71be7f90067a7

              SHA256

              0447cdff3916fe00d43b56dc2b77297041bf04331ce3bfe476a1acae6b05f5e2

              SHA512

              5b35ee51a62ae7ec2d420b01cc9f50e48c049dd8b7c261718f53bd8cd5be51d7f18c6cb6b59740983a206121b2fe6ce1c34d8ffbddb002beb72ce897e512e10b

            • /data/data/com.shenxingtaibao.logistics.driver/files/widget/css/appcan.icon.css

              Filesize

              4KB

              MD5

              0557ac02fd5e0cd20269940e71f70ef7

              SHA1

              17a89b6fb0349de128b6a3d88889931fa9b097c2

              SHA256

              cfd0bf13c2de23ddd05feedb0637a0b22b9caee0fb88c3d024392ec475603276

              SHA512

              30660ef2cde752e9b26b98e8020624c29a22be2940e3042578fe74a5f6f4fde3f0a420644e482cf912207275d739e3d7625deedcfdda3f15c7c673207122a287

            • /data/data/com.shenxingtaibao.logistics.driver/files/widget/css/fonts/font-awesome.min.css

              Filesize

              11KB

              MD5

              ed58a1e225c3be5521130e6e1e10344e

              SHA1

              f8d4434c064179bb5fdcb5350f58d46e45aba4ee

              SHA256

              ee94bf0771f20c79e61a1024f774277bc7d0c907fc26a6245241aa90b61bc3e8

              SHA512

              42f2266f53f9ee1786185d0058f451d18314801844179baf8f3d39600b09c0f6a723727d25797663a61d469932ae0c735f0638b5460714843a5c9c90aed64234

            • /storage/emulated/0/widgetone/log/push_log_2023_12.log

              Filesize

              17KB

              MD5

              74c4fb9edeb53e00c6cca19429cc4996

              SHA1

              a9f02d00137516e48755c6483dbfdebc3be75fb6

              SHA256

              ded0756d082b0045b4c7274c17e81225f14f5838f299ab2f272554c82830d8cf

              SHA512

              eda893ce4205ad114497e011848e329e6372ea301285ee95c0c7d5d460df5a3ed74e8ec05ada19a11d0a1411641de56b99be2a4bd17f1ec5132d0790ca59b39b

            • /storage/emulated/0/widgetone/log/push_log_2023_12.log

              Filesize

              55B

              MD5

              62a6ac4dc43ba41fe28e7265ab25cf15

              SHA1

              af22f5ca72e9fe39bbce4b26fdb49b10a0ddbe59

              SHA256

              9936c020d4bd80f027e852f6289a776c3e679cb205cb7f2e7a381876030607d6

              SHA512

              88228539c9ae184c99cc3913b707f70705ddf9f75f4bac90bfab7aa02127886c39b86eb4444f25b471fe7dafb8c478ee266e468ec1250d68537c2ba1ffbaea96

            • /storage/emulated/0/widgetone/log/push_log_2023_12.log

              Filesize

              2KB

              MD5

              dd3311e174f346feaacec5fcacf0984a

              SHA1

              cc2ee9f3144fe57f8f5a39a13b482aa9288aafac

              SHA256

              2e90202d12ccf3efc6e0e6dbf5698528204726874c9e4c119dd94d9cc4ba38ab

              SHA512

              02684fc82fd680d14e9272a28e1142c45de71e1d2570ac934f7a80f918c1f042f1fb084932d9b07b6fec2bd79d73403679fe8861b47a943910948eb602544a7b

            • /storage/emulated/0/widgetone/log/push_log_2023_12.log

              Filesize

              7KB

              MD5

              b6dcf2ac3d6bfef6e962608a9f0b961c

              SHA1

              d2867d7ae2dde3076ea3fe766e8c37a7113841fe

              SHA256

              f5521e176d9562250aa732641083ab345756f69619fd3aa029620454c4c534fb

              SHA512

              4094f0a10effdf5758cc3e083a0f38f92b03e28b1b6d0544938274d3316fa184a5401b05aa7840d496c5ff9a9eb9ce2cf860195c5d7e886efc1bdd1bc0be9a3a

            • /storage/emulated/0/widgetone/log/push_log_2023_12.log

              Filesize

              63KB

              MD5

              d79df046a6544e6b077b34a59552da2d

              SHA1

              97bfe4a9cf3f3187a721229e95ef4e0832d3e6a4

              SHA256

              dd0f1cd64d4c7d7ac50c927bd96e6b8beb60ef4580070a50172233a475d33fea

              SHA512

              7847af44ebe4c09e2d7c626152eb92fbbc18811037419e3926a6e1effe43d409cceb15207dc578fb1b3924a2116f056ae85bb128bb7bedf5e47dd8f4cbf46964