Analysis

  • max time kernel
    2863873s
  • max time network
    132s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 14:52

General

  • Target

    35cdf4a53be4a889571afb4c33d89ccebe2f0868e2f52c43a7ca42088f044308.apk

  • Size

    21.0MB

  • MD5

    c4eeff02146796c3657ac13fc36b8353

  • SHA1

    005412b71364047463612583447f2639f06c39e2

  • SHA256

    35cdf4a53be4a889571afb4c33d89ccebe2f0868e2f52c43a7ca42088f044308

  • SHA512

    63fb37c81c4bd26b295d9f55e56860e20cb2514cf9a17c98249ffffc1a161f5fdbf004488a7c134c1875d9eac882e1af92aee81ac37b54b7226dab03709b281b

  • SSDEEP

    393216:YHSLVNWeFuJVMbpPjY5AX42L0BPdaEXPGfdIgd0yz/LiRAGlhqyS5hevFrDz:YHSLHRuJVMxuc42L0BPdFXPyd0yDYEyR

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.finogeeks.finchat.swanapp.cus
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4244
    • /system/bin/sh -c getprop
      2⤵
        PID:4316
      • getprop
        2⤵
          PID:4316
        • getprop ro.product.cpu.abi
          2⤵
            PID:4359

        Network

              MITRE ATT&CK Matrix

              Replay Monitor

              Loading Replay Monitor...

              Downloads

              • /data/data/com.finogeeks.finchat.swanapp.cus/app_crashrecord/1004

                Filesize

                251B

                MD5

                e5e67dc52e37e7255329f4eb0886d583

                SHA1

                5784effa1985d36d364b6c4202256c12a4fb3afb

                SHA256

                262f2676c38ade9b7b5ddc921a5438487c76fc07ae5f3bad815f3b903a946392

                SHA512

                b65062f5d06dab0b3e8f9cbc8545f19cf6da955ad5400b8acf32ca8c468782e19bc6ee4aa64316dfdf7e9e3957c46be3b4d663b82d735176bfc86355e0fc5440

              • /data/data/com.finogeeks.finchat.swanapp.cus/app_crashrecord/1004

                Filesize

                58B

                MD5

                0d210bfb2a0e1f1b4c082a6a0f79de07

                SHA1

                bb8ed9e364db79d1d9f2fcde3f15091893222faa

                SHA256

                988722c23d78a46021d0e7ca9deee7aa8bb83288269174ffacb7316f381cca1d

                SHA512

                536e9867b0df29b15b789f8949be6ab37fcdeccb9d39ded981da7dc2052c9533d0ec0e6f9a5444132977605d372e1463d91bdde41b528ff2ca3f65ab152325c1

              • /data/data/com.finogeeks.finchat.swanapp.cus/app_tbs/core_private/download_upload

                Filesize

                56B

                MD5

                cc9f7d9f2cdceaa3191cee7896aee56c

                SHA1

                71416a498185357c7742bb0834a4bc3176b83ba7

                SHA256

                0246c70d04cee3771d9eff0eca94edb0b9f6a6b8b651e6d95cc40c2518310008

                SHA512

                ec3130de1931c8bf2595f6e7e7298d5d2b32ca1d065b9343f70ff362c7fbbf41c4ba317f3efe7cd0469b6bdb566f16fde78d6d7403035c54e4bc59d2a303ce17

              • /data/data/com.finogeeks.finchat.swanapp.cus/app_tbs/core_private/download_upload

                Filesize

                56B

                MD5

                557ac97e382a150501093d22e1571194

                SHA1

                cbc89361e9554eaa429e771209ff722665ebc9c1

                SHA256

                b4a370ab86126f17b88a47fe401455b8429bc35c30d978a54068913e26dee1c1

                SHA512

                1af37793eca7feed9190ed7e1a01847b95de49332561ff7832292ea7ac68eb9eacec56d34801c2f48ed4d43863b63691171bcc8107c9531b277a0d085155fc54

              • /data/data/com.finogeeks.finchat.swanapp.cus/app_tbs/core_private/download_upload

                Filesize

                84B

                MD5

                ffb7eb7d6013873dac33bbd39d6570c9

                SHA1

                ab2a80a9de9f284be767738acc73d3b209896727

                SHA256

                e6645092b147e2cd630e0405e5585b870a285425f48940ab0181099b9085d652

                SHA512

                fe179868fff9163ecccf3f07ab1e6e6e81da753e33ee7b35f2ca3be5c2b1907b333c76fedc2088e3450b2dab23d0d4db01c1fef7ce7cd9ea59d465c09e96a228

              • /data/data/com.finogeeks.finchat.swanapp.cus/app_tbs/core_private/download_upload

                Filesize

                84B

                MD5

                78dc9cb8557d306d8c79ae1ea87a3634

                SHA1

                6af585a826b79a528103f62582d4a5fa1b24dcb8

                SHA256

                f1dac0905e63741235a2045400d3f6fbf17e7fa8689140f42377b4724f616802

                SHA512

                2a8b9ec3971a74ee8038c73eccd85f3205fe92eb807256930ae4b92d021ca59353a65470ab1511687c7ac61c10d522da1f70752196dd66b7ddc84834713e225f

              • /data/data/com.finogeeks.finchat.swanapp.cus/app_tbs/core_private/download_upload

                Filesize

                84B

                MD5

                dad447d39dfd557d1d1b8ebbe25076ca

                SHA1

                5b1577bc78182580d1bb016c457261834dfb0456

                SHA256

                c5088bd67a1a54edbb02c7f608f48ccb93da43a0e1d8b77c78f769605e25a9dc

                SHA512

                dd1961adfea29901386804d71d8b3d0963eb12e2bd9c525ca4d137b4f9c3a8151ec997409883013486497b7c2bb3024c0152bd90fe7e0764e275e7276538557e

              • /data/data/com.finogeeks.finchat.swanapp.cus/databases/bugly_db_

                Filesize

                4KB

                MD5

                f2b4b0190b9f384ca885f0c8c9b14700

                SHA1

                934ff2646757b5b6e7f20f6a0aa76c7f995d9361

                SHA256

                0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

                SHA512

                ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

              • /data/data/com.finogeeks.finchat.swanapp.cus/databases/bugly_db_-journal

                Filesize

                512B

                MD5

                f8081f80f7b29fcee61e869d403c787b

                SHA1

                e533b3fe802beb2b6eaae8bf061522b6efacdbc3

                SHA256

                a0972d68bcb045b266eed6c9a2e426a6494ab94420176c8e3181dd2620f3fba2

                SHA512

                4d378836f1810314a1f40cb650ec046947350caa6916da0837158325b3215fb69ee9cda4c3499961b4dccc3b84ea5d11c7947fe335a45254ecb48625c3840611

              • /data/data/com.finogeeks.finchat.swanapp.cus/databases/bugly_db_-shm

                Filesize

                28KB

                MD5

                cf845a781c107ec1346e849c9dd1b7e8

                SHA1

                b44ccc7f7d519352422e59ee8b0bdbac881768a7

                SHA256

                18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

                SHA512

                4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

              • /data/data/com.finogeeks.finchat.swanapp.cus/databases/bugly_db_-wal

                Filesize

                68KB

                MD5

                43625083686b6b926495919ad6249075

                SHA1

                72666d0e7e64f051be5888af47c36f757d131e3c

                SHA256

                faf705436ba16f4673536917f77c8ce4b8f6369cc4cd5a5abf3a9daecbe7670c

                SHA512

                fa62ecb1c4891384056d5e439d75b75a144c8e06c26578d793cd81208141f600064d6e828838f4c2df23216b627839a033c73e795c0d8497179f63aa84540a45

              • /data/data/com.finogeeks.finchat.swanapp.cus/databases/finochatsdk_db-journal

                Filesize

                512B

                MD5

                f102bfd195d9204ba0aee6ccdd3c1f6f

                SHA1

                a050fafc7bf306760a7fdbee1e861d55b33b051b

                SHA256

                006671998677747ebf194b761aa2b030cbc903ccb4a5a20ad6682305b68f0d25

                SHA512

                559f4a244003d66c4bf9dfefc3d47bc9c733be01d1e15064dae49913da56157c0217500fe4e11193b11d7f803797c1e9aa0f7c2122cc40cb6f3fc5365eb5420b

              • /data/data/com.finogeeks.finchat.swanapp.cus/databases/finochatsdk_db-wal

                Filesize

                96KB

                MD5

                19873616fca77d653f7d01926bce8703

                SHA1

                2c33771830be25b993b8740326402366661eef27

                SHA256

                036e0abe1c1577887db955ed42ab5734e8d7849fb70fa61cf504456fbc92eea5

                SHA512

                7c88a8fb8f74e0cb664caae006f9fd7c1d150fb500c252a9323e601f4b04cb0a42dc8c793df39f7451bfa7dd7286d99e17825936d36275419ebf91682f48161a

              • /data/data/com.finogeeks.finchat.swanapp.cus/files/finapplet/js/framework/css/index.css

                Filesize

                28KB

                MD5

                eae6afae07437b448bc4b39774f29d2e

                SHA1

                196f0f315dc0331a85edc24760834dded98f3d36

                SHA256

                35fe7be31d9392765c0d17b1f12acf20e9e987bebb880e6dcaa5ea1ba1557bb9

                SHA512

                f7b0390d38536cbde6b346417e3bd26d6509281e8a1f370782268984531c1df170a5f835eeafbe5db3677300167c598413f2b8c08374fc702a1148975892f201

              • /data/data/com.finogeeks.finchat.swanapp.cus/files/finapplet/js/framework/script/service.js

                Filesize

                280KB

                MD5

                a9bee8465a3798dcd297366320c745a9

                SHA1

                a341b71f422775bdbaded00e11b032a3b6d75b32

                SHA256

                565fdb5ea162a798dc23f2c96ab509ffd98eb8a834a746526b59047c32bf4edb

                SHA512

                0da8e9e6bced6639dab2cb1320190e4fd97a2c7af63477b877ccc58c8d3ebcff5adcb94c385434c3fec069a89b42083a9b7f34caae6136c9dd64837738ec1ebd

              • /storage/emulated/0/Android/data/com.finogeeks.finchat.swanapp.cus/files/tbslog/tbslog.txt

                Filesize

                1KB

                MD5

                31a545b986d278ececb96d1c376d04d1

                SHA1

                0ebcb9c3e969e681ef333d40fc7694ad85a97469

                SHA256

                cfcfa5475ce998742b4748bf2b033d797ded1985a1d545e60bbcb236fe09967f

                SHA512

                a046cb3f8204a06a77e2704f9a9cbe3bf4f8eb13b8f3941e12028ed13a843c3dad27104b10b272a2091a2f708ea2ac13a15b26e8c24c202f624e326718c11d99