Analysis

  • max time kernel
    2801632s
  • max time network
    130s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 13:27

General

  • Target

    PandaHome2.apk

  • Size

    8.5MB

  • MD5

    503bec78394bf6e9b598ad7fef78b023

  • SHA1

    78f7a5c53244e48291c73b0160b8d5e2cdaac7e5

  • SHA256

    d4ae8ee3c3a79bb7b6468ffe173316042d541ffb91fcbc8f4f75261cfab5904a

  • SHA512

    2664811c0338dc151a0198ca129ee971d01bf6608989e0075fe97ab4a42b320990111562deede729040dd1e5acda9c2f15f8daf4fd2a79a6a220d7275d7636d1

  • SSDEEP

    196608:3dk2gFao0cSaTrwHTYoIMMfy2gdeO8Q1hOn4bbyr3yQ+45:tpczTrwHU6CgR8Q1hrybz

Score
5/10

Malware Config

Signatures

  • Changes the wallpaper (common with ransomware activity). 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.nd.android.pandahome2
    1⤵
    • Changes the wallpaper (common with ransomware activity).
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4252
  • com.nd.android.pandahome2:hilauncherex_myphone
    1⤵
      PID:4304

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.nd.android.pandahome2/databases/91analytics_v2.db

            Filesize

            4KB

            MD5

            f2b4b0190b9f384ca885f0c8c9b14700

            SHA1

            934ff2646757b5b6e7f20f6a0aa76c7f995d9361

            SHA256

            0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

            SHA512

            ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          • /data/data/com.nd.android.pandahome2/databases/91analytics_v2.db-journal

            Filesize

            512B

            MD5

            43501299097ddbf6653a226eabedd298

            SHA1

            d7832dc43f6ed4ebbfd74c470372ea957e2e8610

            SHA256

            163609d51bf3ce9580ddcce6e8af656c7358443c5f09291b3ae7170af075c6e2

            SHA512

            911469a0d9041f3e9aa94b8c8c476e4fc1c8a2c60b5b6312e1a96d7d3945095848de14aa59d84ffe4c1cf86a0d6e6d17f7411e60ab2aa7eb257b287549502803

          • /data/data/com.nd.android.pandahome2/databases/91analytics_v2.db-shm

            Filesize

            28KB

            MD5

            ac3fa2093b905e4beb3ebe96038a6ef9

            SHA1

            c46f5de8a2f2fe858890abe53acb7b44547220a2

            SHA256

            389adc2e706adf9662a63511bd82e06b506dfb1cc7db11502400acc1778351f7

            SHA512

            a91e358b77e51c513928b87e4fab607672b0cdc891ee3b959cd3805637a542bf3eb5bb94cc83fca0dff7a4241313cc90ac976232d46a293a4cde532745cef4f9

          • /data/data/com.nd.android.pandahome2/databases/91analytics_v2.db-shm

            Filesize

            28KB

            MD5

            cf845a781c107ec1346e849c9dd1b7e8

            SHA1

            b44ccc7f7d519352422e59ee8b0bdbac881768a7

            SHA256

            18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

            SHA512

            4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

          • /data/data/com.nd.android.pandahome2/databases/91analytics_v2.db-wal

            Filesize

            48KB

            MD5

            4bd3bad1f847ab42fe8f95e56feb0cec

            SHA1

            03cd26b7524c240bde5195b977e63f388855cf04

            SHA256

            863b9b9730c17b9b3374d2ac36bc6adb0ba22141f778a59c952c8f169f2d8533

            SHA512

            d3e15bc9f93507e7757ccca31b84f2bd05f757f703d18195a2a184864017b29bf30b56d234458dc6531b6cf32556ec5cba77bd3c054559939ec8c1052d483af5

          • /data/data/com.nd.android.pandahome2/databases/app.db-journal

            Filesize

            512B

            MD5

            230823f25262b970f174962b4f32f8e9

            SHA1

            c49b107e9fefa8f4aeab8010e25e235488dd1317

            SHA256

            f8d575f5f8963ed079333a2f04eaf13c58ccc79333dc3f6b06a164c2714fa102

            SHA512

            917b314f1dc4d65bb1ce0b58b6d4a0f2139057959924246798674c32130e8f0126358fbca0db5969aa51c55632b466773ff1b6ae4bc511d873c4f89016340121

          • /data/data/com.nd.android.pandahome2/databases/app.db-wal

            Filesize

            4KB

            MD5

            1c7424964a4015605906856d12f5ecbe

            SHA1

            7b578191fc97c1db6f5f86d4c4c652660a0f96b6

            SHA256

            83a658a552ac5b860008305b5562e559abbfc8fc8e8bb2235c4045ae3d758f5b

            SHA512

            6efff4edf8af4677f03d23e0f4fb7c7d5486d59a1cb67f8544586e6052bb7ece9ee7af2e8de47e6d560aac8a081dabbf12190cc11af4f4f81c3937a60e63ddbe

          • /data/data/com.nd.android.pandahome2/databases/app.db-wal

            Filesize

            56KB

            MD5

            39cd6d888bc36db7e215a43d035b18e1

            SHA1

            67fb566684a348fc1255ab74500d35f8c45813dc

            SHA256

            ce7baca2eec3f88943f9aa28df590e51ecc91de2fc0881f4e80a4fda25350988

            SHA512

            e65dd9025c23f5ddb1bd64ac6cfa3e1619de40ee6d542ba37152849b0bc594b6e3356c1da3d63c3ba808f6bcdaedbd2e953ef11528c324ec8daee2b45f5ec789

          • /data/data/com.nd.android.pandahome2/databases/config.db

            Filesize

            20KB

            MD5

            24a8304035b7a361c98493053616e563

            SHA1

            308fea28046fa1964a119b0733729770b9b459fa

            SHA256

            df3357de9e60fa640e523804e87151a940fb4eae66fc3ec6947c5c99834f3964

            SHA512

            c574180b36362270aa14e6f683a759aaed3552c3b79b7771beea11c95c985a41d4149136a421f33759b1b06c5bda528d86b8a53353bf106d77616e6c3da3a9c6

          • /data/data/com.nd.android.pandahome2/databases/config.db-journal

            Filesize

            512B

            MD5

            e82fa278719b488b3f9e5dda73b3451a

            SHA1

            c1e22a4241797bf198a6d72d4776d6d45fc563d2

            SHA256

            0127ca0a1ebcf639bd3e051a022e7780495cbcd8ccd171fd961e035a3186ed61

            SHA512

            68372a6f8aa5c694d909dbe522123ce5684ec355323a688c282107fade3fdd4e7b8bc33b9559485f0dde190ee0885c413bc2916fa9fc3a1276c93363a2d2952d

          • /data/data/com.nd.android.pandahome2/databases/config.db-wal

            Filesize

            16KB

            MD5

            047cdfd899b2562aae14f0c62a2720dc

            SHA1

            a5d58412ff76bf8f3ee6112622f0cec9b4240ddc

            SHA256

            0a39da8a6caaaebde89b2f52d2d109b6fb94314a9dfbe765cb31d00bb33b66e4

            SHA512

            532a000a5c7a2b9ea90f6f2f81b1ee54ca72ec24dcc76d8e70d1e49a1eb9fa09241476e83581af84afc70307274d29011c23bcfab53f1ce7f54de99e7b0046ca

          • /data/data/com.nd.android.pandahome2/databases/config.db-wal

            Filesize

            8KB

            MD5

            93f584679ffdc9327f3c5c47a5ce6825

            SHA1

            981fe978734cc3c71bf791c0555d01dbf831b8fd

            SHA256

            75e86b1fd86f787dac94bfd0dc909335650f014929060d6d588bd732ef2729ea

            SHA512

            5a7e523d4679f3aee312d094780634dd4369a16441263b82e8f55c06a348f18cc98368c425992b39ed0fbfc9525e0f6aaead07251410a2219b7315db50ca9306

          • /data/data/com.nd.android.pandahome2/databases/data_center.db-journal

            Filesize

            512B

            MD5

            60eef3b5a4e553871247265751859290

            SHA1

            f05c3acd37ebb0307e6caa36b7d61419a6139476

            SHA256

            94f8a9d3adf95349f5d6886be515cb553b88ce6ee060f10330923f913a5538c7

            SHA512

            1a7373de3d641dd4a821313da38d8f0b181a9888c33a193d94d5e4d050fed92f962418036854b4c901ff4a59d5ec1205527ed2dae637138963197e139db3bf96

          • /data/data/com.nd.android.pandahome2/databases/data_center.db-wal

            Filesize

            16KB

            MD5

            b38f50f06fd12e9c87b8d1dff77c574b

            SHA1

            e12c651b9c4aebb30dc261cba24fd11cae393bd4

            SHA256

            f7861b34cbc44641af60427078276ea2dbcbfafed0ae22f3f5c40e3e19c922df

            SHA512

            52bb43c293eab75edb7ba632884f99a415f55951454721d4e231594d4486865d3dc03ab2934971a06f969857b34e7dd52994b0e92e0a7f50787be1504780d75f

          • /data/data/com.nd.android.pandahome2/databases/launcher.db-journal

            Filesize

            512B

            MD5

            ecaabfc793c3460acba07b35fca03487

            SHA1

            5f210b3073cee81c97107eb99f13576bad0b06bf

            SHA256

            f322f7643980f34cedc9cb16b6c44a2c023602a9e24a94640165f78e0e365914

            SHA512

            1ec4cb92b101c063d9ab6aa9380adac720da1a0d6b4283c59895aa1f71bd3474a64efb31edf1648d06c57b95e40dce0bc269fdebaaac343759de5ebe241d27a8

          • /data/data/com.nd.android.pandahome2/databases/launcher.db-wal

            Filesize

            36KB

            MD5

            4e3e6f9cfe904ee3506f06bd50d3c29a

            SHA1

            4906155742caaf863c133846a08e8761771ebf6c

            SHA256

            8abf8673d8dc262b07bc7da8f1dbb2f62716ebb7f38cfef41a4d95555f733087

            SHA512

            cdbad12cb77f69ce0c72e143c6a49ac77faf5f94cf14e496b2796639ca8541b24efa0177883be131858c4e95ef757ae126dc59b7674e8c71d81a323aa5b38062

          • /data/data/com.nd.android.pandahome2/databases/privatezone.db

            Filesize

            40KB

            MD5

            944ef9bdcd845f1f069a4b755271bf7b

            SHA1

            19dd7b060b8826760fde1425c51ad84b7f637c9c

            SHA256

            64b2d397e442de69195ed4e3739e8d5a6ed24bfbf77577baac23a0d9ed26df8f

            SHA512

            09d0f437e5b89e207860ed4f8901c7a9e6f8e6ccac090b2cbf77f5cc3ecca77286105b73b8f0c309b2de629df3e8df77eaf2c6838c9e88dbae47faf255ed44b8

          • /data/data/com.nd.android.pandahome2/databases/privatezone.db-journal

            Filesize

            512B

            MD5

            9ca0d436f6b0f658fa53cc55350dcb04

            SHA1

            af6e5fe50900a2fa23d07c3e5ce6afb2a6c0e457

            SHA256

            d0b8ac6b70f34ef64255f24a6ce8aa9de537f033c25385790b3fce58cbd461a3

            SHA512

            6f512a4544bc5b7e7b3b54bc4e45fc2e25cdedc7368fc48c0669e018640fd4b9bd4386ccf86d204f21177fcdf7f6b487b7c9c2f90e5fa8b619f47afce2fe26e7

          • /data/data/com.nd.android.pandahome2/databases/privatezone.db-wal

            Filesize

            52KB

            MD5

            0dec29a1e3e6579bce4c952d22c595c4

            SHA1

            2cf8203cc3c58b8b46f5031f06eb00811002de20

            SHA256

            3de265f1d90ff7389a56cedf6302a82014bbe892f2ed2bbcc0e7ad1114123e88

            SHA512

            6b4eda1acbd0da0cf8036a8c19cab03b5522b66764e2968223d10b83249d8da96c59be26469e9f5105e67a73323686e6c4f92866bba499602c8ecd1fe2eb3c70

          • /data/data/com.nd.android.pandahome2/files/channel.ini

            Filesize

            44B

            MD5

            9fb21b9c77645725bd6f0b127749d10a

            SHA1

            7609b0a0ba81cbe34878f1dc80173a4d60b04538

            SHA256

            c47e297412a8e9d713bd584a898367a6f439d14de5f5492c35f31dbefb42e8e0

            SHA512

            badd749bcd2a3137387ae37871b55d5eb08549c097a6ea1ab31caf40c5a2b275018447509d61df621d4b29a38c0624624bb79a7489dd3bf90106c6b720a8d0f6

          • /data/system/users/0/wallpaper_orig

            Filesize

            53KB

            MD5

            53c324a10af9d18bddd8da209fec4bc6

            SHA1

            5866b9497fb931dd808d2f39256cc8efaee7e704

            SHA256

            45bad7f36362b62071722d7747695d8c16cb5b85be1c9051761ebc152c4da1f0

            SHA512

            fa06754d575d7638770d5ad5904525cbdf7ef5d0110dc2ce47e3b6d2c10a759d333b1d8300269cd0843da879eda80e8dcb2f0fb337d8256b3f289d9ae334347e

          • /storage/emulated/0/PandaHome2/crash/crash-2023-12-26-16-37-57-1703608677441.log

            Filesize

            3KB

            MD5

            d3a98a040125a001c84f236729e4f87e

            SHA1

            f122732b04ced0519c674c6625ee1a515891ae03

            SHA256

            3132c58bb675be498190616551838a24c3c8fda7d8d4f855a9a48c482b6dc757

            SHA512

            eb2a4bfee12f685d09752c5f178182222adaafb9c56de66e65c20d60afff805b24143b557a0c3f1b825c6fcb4916c8219cac808dc7fb76c7495887d30ee4701b