Analysis

  • max time kernel
    2896755s
  • max time network
    166s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20231215-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20231215-enlocale:en-usos:android-13-x64system
  • submitted
    23-12-2023 13:09

General

  • Target

    1bd9c296a82faf3c1d26a22fd515952c800bce2e163cbecb6d5cf5f429ccf8b2.apk

  • Size

    15.9MB

  • MD5

    6b58ad489a7a4899afb27368acd769a0

  • SHA1

    d2284e2b2bae93a2a28e7e55b941995a3931eb63

  • SHA256

    1bd9c296a82faf3c1d26a22fd515952c800bce2e163cbecb6d5cf5f429ccf8b2

  • SHA512

    a65d407580213b13ecf4bdb484c6c0cf8809b18957c14fd7257e794c85bdbcef0d35f2eccdabd726fcefedd416621743df1e8bbff8bd8426397df213d7391a3a

  • SSDEEP

    393216:C5p7ovVD0hrBeEmKyBByQDPxO004/UtPEOgPEBfAvku5wfeU4:CItwPeECBBbDPxO0NUcOn0kIK4

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.smiqipai.miaoxiu
    1⤵
      PID:4277
    • com.smiqipai.miaoxiu:pushcore
      1⤵
      • Uses Crypto APIs (Might try to encrypt user data)
      PID:4327

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/user/0/com.smiqipai.miaoxiu/files/jpush_stat_cache.json

      Filesize

      185B

      MD5

      6d0bad9b71d43aae47088ba5077c4759

      SHA1

      4a5de4dc081962d4710ca18f00718bd8b6dbf3ec

      SHA256

      04f97ce2c163ed7f4058f72d25d31e5bbdf47607e9f83f928bde9d09b5cf801c

      SHA512

      3ae1bd44ede44eb8979c7cb9868fece2bdd8948fe52db1a35eb89d9f158e90f8199d976672adbc741ff7e84f52739f21e59f01281c07d8e8d41305f9e5dee811

    • /data/user/0/com.smiqipai.miaoxiu/files/jpush_stat_cache_history.json

      Filesize

      482B

      MD5

      bdffc386615c62ee6239321770fbfd97

      SHA1

      80c0c929002ca796d55dc1277293ee8ca782ff2d

      SHA256

      bdc2af473af7fdfdd244217daa25a161aab3fbc5ce40763515f8a8d374e28ab5

      SHA512

      af2f1953f8422bd592d2dea7477ccea029d66c6ef7413f6c607fc84bd7388369b773fea63b07af2a6a8a3ea8b2264e7a912c6d10d299911dc9c0b4596ea651fd

    • /data/user/0/com.smiqipai.miaoxiu/files/jpush_stat_cache_history.json

      Filesize

      162B

      MD5

      635201553914087790a3eebb4e99d6f6

      SHA1

      77a4ef05c83cd5251b5ee67f7b8f1d5aad785c6a

      SHA256

      4b7b601fb9c1dfd88f5bfb65fdc0109ff97b6b42f195c57f21e50132b73a5397

      SHA512

      9b980d1af6e4637cd9638cea33ac4e4e2f743bc7c5d9e8c5789fbd14bdb624ec841b327407948d7b804ff410f6b31127c512e81456a3af8b56c763f92b8bac60

    • /data/user/0/com.smiqipai.miaoxiu/files/jpush_stat_cache_history.json

      Filesize

      336B

      MD5

      0bd25a4926bdf6a03aaeb8191af57a24

      SHA1

      239d3c1bced05332c3bb42a514385203546a77c7

      SHA256

      b8f50f3bc252604b05b0a8dd6e18f6da372d09c8bb8ab7469d0027d4afb719df

      SHA512

      d156235dee698eba3a16032667d4f2ee8f1a18e8a1631dd5c56bf2a8d0c7213bc465379a50897c9fffbb66ca573068d74e2091d2c2efc9db793e6bc299ddee50

    • /storage/emulated/0/data/.push_deviceid

      Filesize

      32B

      MD5

      ec803b5894d0670e93b39dbb1ce9fdb7

      SHA1

      4853295e869780d2fc8611f0fd5d62a70b0bac13

      SHA256

      aa006a8fffd8319f0f3bfbedcdc5fc2f70ba9688dd49c674b66814b7d7b634a4

      SHA512

      c931d93797ecbfb1c5ce98605a68c6232cade38e94a7af518a907e717cdddd9bfe4c86a7be3cc8c426c5454ff5d5f4eb819bf0748ca0cfc50555e09fd95890a3