Analysis

  • max time kernel
    2535237s
  • max time network
    158s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23-12-2023 13:23

General

  • Target

    1fa913986f10d154776be7565e06fe9ef9f9ee8593e12e8ddd0546ee253a55b3.apk

  • Size

    4.8MB

  • MD5

    2e47d3a6052916a751ea667e17740b22

  • SHA1

    fb9b3af2c7cf21db6064b27956007f41f52160d8

  • SHA256

    1fa913986f10d154776be7565e06fe9ef9f9ee8593e12e8ddd0546ee253a55b3

  • SHA512

    5a4efd0deb27dc6322c111c9ded347d2026e3515b53b35b081d18a8c15be8c4fecb654b26cf979ec3a3db5b56059f96a481ac07e9c19e8fe8b5921c6549a7337

  • SSDEEP

    98304:4e41a8HzraVhDVf+eGPHvrsKkbNK8U31xr5jnoXQ5Snn5U/5aBG:ufH/oSewvrhkbrU3/JCQkwsG

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.so.news.activity
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4206

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.so.news.activity/files/mobclick_agent_sealed_com.so.news.activity

    Filesize

    563B

    MD5

    6903c65626eaced8fb658ac6e6077e5e

    SHA1

    8aaffb488911178319c6ec76377c2c62e07ba7bc

    SHA256

    77acd074bb65f34574e6514f5b0d8aa53e53b41274d754aa737fa1c34ece54a3

    SHA512

    16def1e4f168e4c908cdc830f760b6e659602e4443599af47879d016d455f64a6079259cb7b15b8d5a0d1b1b5ff6b3198348734a05fe872af10d948a83091854

  • /data/data/com.so.news.activity/files/umeng_it.cache

    Filesize

    211B

    MD5

    9b59f55b52b83f38608dd054fa8afcd8

    SHA1

    6ac81d6536db4aa27587f45fa52eca96c8e46f07

    SHA256

    2de2344db45d2dd517dbc46b0f49c9d2629e7588fcba08566cdc637bc5704dc9

    SHA512

    ed730a2c67caa8efbb58aba85019cfb028d8ff274ce34ee98bb94d805e67d4c339e1776a44053c282a8efd2ebb9c5281d9b56aec98b12c30247fed9569a23fb1