Analysis

  • max time kernel
    2535213s
  • max time network
    157s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 13:23

General

  • Target

    1fa08e4d962fc177dd390e639a36f9af97d6c14da8d495373c671eb5b7bc10ff.apk

  • Size

    17.1MB

  • MD5

    336e79f544a19ac1b306c1e795adfaad

  • SHA1

    734dbdd9a9c5ce6098ff4e2570051673405a6fe5

  • SHA256

    1fa08e4d962fc177dd390e639a36f9af97d6c14da8d495373c671eb5b7bc10ff

  • SHA512

    965fe5b6c4e8fab26276215bee09737296bbf342b5f1bc39c2ded764bc59d4b132d578785420a8d164c607576e80be79ab1f85b868f49e9b5aea2c8122c85d9e

  • SSDEEP

    393216:h1Ua1WSLWkDKPtHdXrgnpJ58c0+oqNhZgX00:jUavTuV9XUj58c0+oygX9

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • cn.ixunke.guilinligong
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4266
    • /data/app/cn.ixunke.guilinligong-4D9qpFca8OXEjCl5tA4WSQ==/lib/x86//libweexjsb.so 46 47 1 /data/user/0/cn.ixunke.guilinligong/app_crash/crash_dump.log
      2⤵
        PID:4296

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/cn.ixunke.guilinligong/cache/jsb.version

            Filesize

            1B

            MD5

            c4ca4238a0b923820dcc509a6f75849b

            SHA1

            356a192b7913b04c54574d18c28d46e6395428ab

            SHA256

            6b86b273ff34fce19d6b804eff5a3f5747ada4eaa22f1d49c01e52ddb7875b4b

            SHA512

            4dff4ea340f0a823f15d3f4f01ab62eae0e5da579ccb851f8db9dfe84c58b2b37b89903a740e1ee172da793a6e79d560e5f7f9bd058a12a280433ed6fa46510a

          • /data/data/cn.ixunke.guilinligong/cache/libweexjsb.so

            Filesize

            6KB

            MD5

            7daa126a59a44091b737186c77697355

            SHA1

            3d0edde6aad106a18b3c5e139bc5b17872544920

            SHA256

            075f5431397263562da0a61835f543ff13c708f4b5c4a4588a93f5ef08254c5a

            SHA512

            1dff58d4598278d53a4f571152142de312c2b1494b0c9f6a908e281845a041bfd4c864726fec0ece1c6d3994f13622ac7310aef479bca71e42a071f8d2307cfe

          • /data/data/cn.ixunke.guilinligong/files/cnc3ejE6/eje3cnc

            Filesize

            39B

            MD5

            7769d4507985f59116153463f09235a2

            SHA1

            b081e84d14300ac7a7947aade9c025fa83bc17fb

            SHA256

            5ba33c69421ad27727832442cb5939d5bc853acecd0d8162d7c10a6b96757dcf

            SHA512

            ce5bb431a31eaba24c0cf467bedb1abee2205b74c4533067058b09ce7e8f9480b8baa01866e3dc89d1800d07da6007f36c1b4fea811e3da164b187903480d29f

          • /data/data/cn.ixunke.guilinligong/lib-main/dso_deps

            Filesize

            304B

            MD5

            ae8d1e566f0dde39ab17ad3cd02d432e

            SHA1

            2d53bfad1b4da709f6ef0deb9a896dcfcc726c26

            SHA256

            b7ee645e45a76b35d56537b9ffa3dd6bf204b8fd01c47da345141e9d27a6fc06

            SHA512

            e74e180ca06e7d5ad8a4c82abf5e3bd6b8135a3e1bdb17a2706d6398a5cf72f1323f5c02efac0e6ccffd2fa2f5018f074fd7e016874b0bace6742e7309f8e3d6

          • /data/data/cn.ixunke.guilinligong/lib-main/dso_manifest

            Filesize

            5B

            MD5

            c06857e9ea338f3f3a24bb78f8fbdf6f

            SHA1

            c5a0a2529d2deb60fec041b4fbd722a2ebe31702

            SHA256

            957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

            SHA512

            29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

          • /data/data/cn.ixunke.guilinligong/lib-main/dso_state

            Filesize

            1B

            MD5

            93b885adfe0da089cdf634904fd59f71

            SHA1

            5ba93c9db0cff93f52b521d7420e43f6eda2784f

            SHA256

            6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

            SHA512

            b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

          • /data/data/cn.ixunke.guilinligong/lib-main/dso_state

            Filesize

            1B

            MD5

            55a54008ad1ba589aa210d2629c1df41

            SHA1

            bf8b4530d8d246dd74ac53a13471bba17941dff7

            SHA256

            4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

            SHA512

            7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

          • /data/data/cn.ixunke.guilinligong/shared_prefs_ext/test_app

            Filesize

            29B

            MD5

            fb05c7a56323828fac5302412a0435eb

            SHA1

            6dcfb28d4f5421f362b86b50acc5c69715e2210b

            SHA256

            c7714fab5f2942479a3fbffa88e583f3d20da7cede04d798d18cb57955bdd1ee

            SHA512

            ce7246cfbbed8202cd85e3e6d71003a05b532ad0fca49150bf3a7d95acb0ec0294e5e45b3d56540ea9c782ea23759384fe60a0206fee8ff15244eb879b6ff825

          • /storage/emulated/0/.imei.txt

            Filesize

            32B

            MD5

            94bbaadc23de88bf450535027027794d

            SHA1

            2eb161c0f7006edba9136747ae14b54400c42381

            SHA256

            c2506b540fce903924fbe08067f27dbcddad62132ff14302f198664152e31dc8

            SHA512

            19b1603d8df120c7b7e0a23da240fc6d551eac4b682ab49d9a4555126b328bdc0bd0c38ab95795082bced8de56ae36ce86814dbe5b0b111bfa7e6e73cf3599eb

          • /storage/emulated/0/Android/data/cn.ixunke.guilinligong/apps/__UNI__E9A0BED/temp/1703342143204

            Filesize

            1.0MB

            MD5

            48acb47a1a2c7e47be57e6e623d27adf

            SHA1

            7bb5af3fcf4d4a5b3f4a5a19355cf46a8cbccb93

            SHA256

            685d1214ed17d76e2947851c0b355ff40b9532451724d169c7571ac5860891c2

            SHA512

            6d3cf59d370d3278b343f77dba57896b088a699068333c07f852bfb0c46647a1f4a8572cfeae7e53ab6158716529fc99484a349ea9b7e89cb1fea057671cacfa