32ddfcdc3678b44367916459c2270c848b9376ebf2b0a9d4ead12bf14a1beddb

Analysis

max time kernel
2851997s
max time network
151s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
23/12/2023, 14:40

Sharing

Copy URL Twitter E-mail

Report Analysis Logs

General

Target

32ddfcdc3678b44367916459c2270c848b9376ebf2b0a9d4ead12bf14a1beddb.apk
Size

17.4MB
MD5

3649c08c6878ec089cf28fa59e1b06e4
SHA1

a8712ff1378e8db9763d66f566e45a4860f84447
SHA256

32ddfcdc3678b44367916459c2270c848b9376ebf2b0a9d4ead12bf14a1beddb
SHA512

be99c570dd438681f13c297c78e045ffa889d3a4c9e95ba0b1a10ff3d2a38d68381ecacc4f3310e57d76bda09afb93bb3cd9070ebe2e780545d9bb2189478296
SSDEEP

393216:QURN0J6JfqNmjrkEU+NFiUUNWbHUkntrrvUXig63rMPESFFcsfSd:QURN0JxmrnUUiUUNiTtsXi1YPEkCj

Score

6^/10

Malware Config

Signatures

Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	mail139.launcher

mail139.launcher
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4251

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/mail139.launcher/databases/folders-db

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/mail139.launcher/databases/folders-db-journal

Filesize
512B

MD5
d9f408dcd3c1ea7c39c373d8527f634d

SHA1
e0e50e5829ae50412dd5de7f842ee28c2b98461d

SHA256
a105cb1ca599abb491a17afcd9e193914194a966438159c5d4680a7b48502b57

SHA512
69ef4f465f95e0a0c186ee5da0cb450a7c8e239c70b37fec275dc75c6c9e277565574e2eeb160b0393b8d6b1e8a6adfbffa6937527335b4d6a54c7e61befe2bf

Download Submit
/data/data/mail139.launcher/databases/folders-db-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/mail139.launcher/databases/folders-db-wal

Filesize
28KB

MD5
95a288f3cad5da19166cca1dd59a7ace

SHA1
183bdd09cdee8490167daa7a0d983fcba0121d2a

SHA256
462c634d51680e06d6a1da6fc3c9106e62b0dfed45c4f2c50109961389bddb9f

SHA512
61bfd3911ef7409e30c3e9e84c12cd396c0ae017ba30c453ee6c93d2c9859c9badd8b76c440b79a213db55e06c1428825c43275876852cdcff861d7f0c2f8dfc

Download Submit
/data/data/mail139.launcher/files/.um/um_cache_1703658977643.env

Filesize
612B

MD5
7ee9d14bfa60e3eb1c82964ea32b39f0

SHA1
60582b4a66413a8f45a3da75c36bd368f86154cf

SHA256
dabafd7e16452def2359f488d28ca2b7e1aa2de14674a64138b8de81fe7f1f64

SHA512
30caa2cbe8e643b2fc389eb140a69b881d24ee5c364e3aca714d979e003a8ffb4a59988fa2ef069baae9fb8f88e4d3e1f31586f8a0fdc229a7f33d90f67a1128

Download Submit
/data/data/mail139.launcher/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
52ba1f272d1c4cd648f3166aae8d0e0a

SHA1
eea25f74f8543ec58906f0c67007aa07ca3b8773

SHA256
7849bf6b444ebc0efa288b78c7292346647ddaaba711add57296204f13875e28

SHA512
b79028b029fd1cd1fa06674ddeba3185e46b511832f984af0bb0908621d6b3f082f06be9f055795dd0efe1f21376736ed3dadb36e5065e677e4a31fe450c3f55

Download Submit
/data/data/mail139.launcher/files/libcuid.so

Filesize
129B

MD5
cadd45b300d99871fd2a98ec1ea3fc9c

SHA1
340799c6eba5c0d0b84a72afae99c3c3958f8839

SHA256
bccad44d38365d5916bf7402f124e3f10ca4068dbf9031332088fa3264f0e5a8

SHA512
617c45a1f147dc0cdec57f2a812467868c93f021a07ee13466cfed46c2aa1877be1b4970b47219d5837e7116fe7a753ace2e7866a2b694dff07c82cffdd00566

Download Submit
/data/data/mail139.launcher/files/umeng_it.cache

Filesize
310B

MD5
c8a392baa337ca5294b9da6002bd2946

SHA1
842aba60a8f462fe4c402b16dbd9cd201f7c0ea7

SHA256
57f3114fe613d3cb11f45d224c1171be1963a0bf2f109b731076f9803e6117bd

SHA512
5cddcda25e8e6dcfb6445028d66a130ccd0ebff8c5719b3d9aeee8751603e443916b4aa7534906f80f7ea1ef8861f61d36db0fbdfcabfbd035af163578c76589

Download Submit
/storage/emulated/0/Android/data/mail139.launcher/cache/uil-images/journal.tmp

Filesize
31B

MD5
8c92de9ce46d41a22f3b20f77404cc1d

SHA1
8671a6dca00edb72be47363a7071be65cf270373

SHA256
68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

SHA512
30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

Download Submit
/storage/emulated/0/AutoMailSDK/automail.xml

Filesize
323B

MD5
5c20392cf13cbd874d76b07b5ba6a7e7

SHA1
304456fa4c4244bbbc1ca83e3bf8f7b0346567af

SHA256
344b3c86971a44f51982db712cdef7267909c2badab5a58cb3e0d71827e4226d

SHA512
09cca52a5966b1ea742157b6c0b7e290270ac3a0b6f9673b4cc62bfe65ca1ebf4319c2c7044b5e35b5f720b5e8366b17578dfbbf51ef2b405ecd0e67a78887fc

Download Submit
/storage/emulated/0/backups/.SystemConfig/.cuid

Filesize
89B

MD5
675f73239f8c6d7a5d3805f93006d6da

SHA1
1efa80c93498668ac1c876ca1a0617a0fb445baa

SHA256
af8320bd2c7acb9fd31e7bd21cca27dd6abd2d0ce3f9b0638b70cfd213dafc29

SHA512
40ca29335adddab0af3f0f1ffae04da902a40d3bcd547a50dc938b0ab8d82a2fa5eed3bb7ea98b10c17a4fc42eaaf3dd862d9b3966c0e6be3e55f0c41396a52c

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads