Analysis

  • max time kernel
    2831315s
  • max time network
    160s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23-12-2023 14:02

General

  • Target

    2914e62b2ebcff986f570b0813dc6989417380be04374100b936ffc417673553.apk

  • Size

    17.6MB

  • MD5

    347d8c8e318b1a9914ced288de5a9d96

  • SHA1

    6d7eb34e745e60b5d1434904cf133229134d9625

  • SHA256

    2914e62b2ebcff986f570b0813dc6989417380be04374100b936ffc417673553

  • SHA512

    f51dcf3e07346e1d5f14900fc72b035f80ebb4559b33f75f7715992afdbbe72cde36f6258c315f73bbe073f94c3cf15e4740f78eef51f1755489f624bfbffb33

  • SSDEEP

    393216:CK3nDBbXHl8qAgKxKO/DxtLsYKmrgnpHh+FJhu+oqNhZW7:CK3nlbXWq5E/DxtLrKmUR8Pu+oyw

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.xueyoujy.xueyoujiaoyu
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4265
    • /data/app/com.xueyoujy.xueyoujiaoyu-Uz09fz2FkVo-iUm0OmLWhQ==/lib/x86//libweexjsb.so 46 60 1 /data/user/0/com.xueyoujy.xueyoujiaoyu/app_crash/crash_dump.log
      2⤵
        PID:4406

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • /data/data/com.xueyoujy.xueyoujiaoyu/cache/image_manager_disk_cache/1e71303d088694a13074b7f443b8fb8cc14716c74ccd5a3359ec4eb091636c2d.0.tmp

      Filesize

      658B

      MD5

      5f5ce651c65c3ace57f8111c03caa49f

      SHA1

      691bffece83755ada011f59f1f7166505ae9f763

      SHA256

      f61f6677dbe0ebf6528ed3dd09f0266869c8bfc32c30a9db31b8c29cf18d2581

      SHA512

      fdaae4fb84d388745b862fe255f225fed48228ac883b3568b65b2ecc8e53598c910675ce3f46e8dace72cb5a7deca73cad7b5bf12c4d48a5b81f5610da518e09

    • /data/data/com.xueyoujy.xueyoujiaoyu/cache/image_manager_disk_cache/3ca4a3624b8ee013e2204e2d7a3c85421265b4446c1edeaf8ca89f879090a0a1.0.tmp

      Filesize

      613B

      MD5

      cd2abe67b7311ef818c79deacd2de74e

      SHA1

      f265d7dbe337af3b4c81967510b27377361056c9

      SHA256

      18b375497d104d128d57e3e1b6c1463ed4676d2ad428f3d4e372655d08b7a79d

      SHA512

      52381eac0eebb21c9ea449e174e8b48fcc50b9eb962c84c4ebf8af8549a8a3a54f6d2abd9e81ff9d755fd78d5e0b8b201acf35d2f135d2261d17109bfc6b6a54

    • /data/data/com.xueyoujy.xueyoujiaoyu/cache/image_manager_disk_cache/6fa8847cbfba01ae15f8d65b8a0e11f0caf006842dca194333f7d5a0098bbfca.0.tmp

      Filesize

      624B

      MD5

      0f131b7a0bd04ef6353d562014bf55ea

      SHA1

      1ca10ba407d26a5cdf5186d16b81e50d20a3f605

      SHA256

      9297e94c919aed915e8ac89d81819cbf2df2f6229214416cd0735f92115f2ece

      SHA512

      053db4196106c2e70f14cb0417817b4c5eeda93e62188a1c56268bb7f9841264d81663c83574bf9d70dce6bd22a225bbee58aedc21a20882e2105799303345cc

    • /data/data/com.xueyoujy.xueyoujiaoyu/cache/image_manager_disk_cache/b7be1b565fc24a815746b6cf1ceb51d9bb976a61371f5ff880cb455f4fb816d3.0.tmp

      Filesize

      564B

      MD5

      f688d232f2cb60eb3c1457e47c20dccb

      SHA1

      805b69b4b57cb96c9ebb6a0f1cc4583993059a73

      SHA256

      2240fa4ea73da79b43a5ae929ac2e7e4ca97e17356059400fcd3006df5a4c7ba

      SHA512

      f8aa87866e77c2d15550fc0559c1da968726c983996f266f4d8ec516e4d2aaaa9d861b9d1bbda9c6186d24a1c6a70d471493bc323205ca941509e7eb2ec08e9e

    • /data/data/com.xueyoujy.xueyoujiaoyu/cache/image_manager_disk_cache/b8dda2d35beddb55c00a6206c232d99798c8a160b7500533bf2a92aff4160a14.0.tmp

      Filesize

      581B

      MD5

      444a28ee7c96358db5ecfac57bde7a8d

      SHA1

      8375cae0a9143beb4ffee84115f6afa1489b72f6

      SHA256

      a0491ef611d3d989aef23c15fe153a7daaad82b6f8bf5e4c4d2da780cc706209

      SHA512

      2c3eea8db72ee9393d096eda8048d9ec191184a3ab5cfabcdf63dc10b5ba534c8c5411dedebd7c28999791e48c2a64a517e196d85bdb95b98043496bfb7496d0

    • /data/data/com.xueyoujy.xueyoujiaoyu/cache/image_manager_disk_cache/journal

      Filesize

      686B

      MD5

      9b3b1abb3afeacb0a7d9aa18e239f4e4

      SHA1

      8ac4793afe1246e1d8eacf3e3c39c201a35d9205

      SHA256

      18031b2993b55eda30ffa5ca882fd7ac9a72fca19947b2338a8ca29f80699b60

      SHA512

      8571782105e27b6c895450d580eccbc91dc1643b708682d4de01342ef68d0496b162b974a3cc5e012236bcc692a34a3ee231d12fb64c8dd16e4329b57ded76b7

    • /data/data/com.xueyoujy.xueyoujiaoyu/cache/image_manager_disk_cache/journal.tmp

      Filesize

      31B

      MD5

      8c92de9ce46d41a22f3b20f77404cc1d

      SHA1

      8671a6dca00edb72be47363a7071be65cf270373

      SHA256

      68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

      SHA512

      30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

    • /data/data/com.xueyoujy.xueyoujiaoyu/cache/weex/libs/weexjsb/x86/libweexjsb.so

      Filesize

      6KB

      MD5

      9bb067cd33b490d30f2c88054c732574

      SHA1

      d95a11e2be5c7a1fab9820e34cdd9e482523ea86

      SHA256

      fb993dc086feddf19af9700c7428386e3e4a5c67f273711c371ff4460a830ae9

      SHA512

      0b721c51332313c50ae466fff1b4bdb48a71791bca67ee83d2882a19e8abb59dc1406ed15d6dabbcd3ba922167fbf68a3828fd82edf4b2270ff0191b8fed0dbc

    • /data/data/com.xueyoujy.xueyoujiaoyu/databases/DCStorage

      Filesize

      4KB

      MD5

      f2b4b0190b9f384ca885f0c8c9b14700

      SHA1

      934ff2646757b5b6e7f20f6a0aa76c7f995d9361

      SHA256

      0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

      SHA512

      ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

    • /data/data/com.xueyoujy.xueyoujiaoyu/databases/DCStorage-journal

      Filesize

      512B

      MD5

      9e91be95c8708c783d461a9d67455b03

      SHA1

      1dc8d29c1bb98af038c3cf6881c85f106cf78f83

      SHA256

      ca69340e1620cc70b9885e46b716063fbf7ab86ae6e24f5df298cc9387eb2e6e

      SHA512

      c451158654539c2f16b3bf8c12e8d2bd59b8592e87d621f8c389779932445cac8de1230989edc09d641f9028a680cdd54498584bffb7e9612a2ec4f556cd362c

    • /data/data/com.xueyoujy.xueyoujiaoyu/databases/DCStorage-wal

      Filesize

      136KB

      MD5

      9ad839bcf38ad4d2821eb54d9896936a

      SHA1

      193b947b431d41aff91044dd24e92572b1a2e035

      SHA256

      0c8a51f2028219cce8bd66b2121f35e43eb9f89bf984a662002ff7a9bc060445

      SHA512

      58713438b486a9f99c24a1404eec7d7eeeeb0c2133c3d124ea68825f2d72148baea08de658125589794b0c755bd6f40ff86c6878db48f38d0058558b9c138c42

    • /data/data/com.xueyoujy.xueyoujiaoyu/files/.imei.txt

      Filesize

      32B

      MD5

      14a1c267971d26d2f4b9302d71d2010b

      SHA1

      2c9c61125c79962ddce47d9b36d76eb0ad14d02a

      SHA256

      2387f6989aeb8ceed48f7bafd2a5b9754117ec05d35662402a6d13bf09de8709

      SHA512

      7901bdf28bf0b74630c44199cc7ba1f5504f89c291eaa2a6b8af1033b6c1fcf8fc0bd1b020945235641179bd0f0c6962fb3857b64f73e40f70fd77e82b56e5c2

    • /data/data/com.xueyoujy.xueyoujiaoyu/files/cnc3ejE6/eje3cnc

      Filesize

      35B

      MD5

      762298b93820a5cd8b6d8ec469078f7f

      SHA1

      d5b02a2ff3b235cd2b61ceff53a1d88b8984477d

      SHA256

      dc3f98a33c26c2796dc294b354831fd5ca9796295f4cb38479c80b145d4807db

      SHA512

      70f864211ce16679d0538abf9b7071d27c2d22ae458e32409d20065032c762dd186307ef33ede90abd9ac794a4ced8b163404e9799c05f0c515337249684311e

    • /data/data/com.xueyoujy.xueyoujiaoyu/lib-main/dso_deps

      Filesize

      316B

      MD5

      6c2aa02a15de6cbb55da348ccd910122

      SHA1

      2709b2f97bb2e9d2791c90b207df249188f61623

      SHA256

      ab2ee2d32884cf9574cc930366b447f10afa3c75a4ffc89f46b4d15adeea12a7

      SHA512

      487a50521e93569c3c9c31ec7e68600ad348a0529a6ebfdc5ca386d3718e2850cfe322f7746e3840dbebc9c0fb5be3ba01c4cc74a4d64e7bdd86870888d0827a

    • /data/data/com.xueyoujy.xueyoujiaoyu/lib-main/dso_manifest

      Filesize

      5B

      MD5

      c06857e9ea338f3f3a24bb78f8fbdf6f

      SHA1

      c5a0a2529d2deb60fec041b4fbd722a2ebe31702

      SHA256

      957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

      SHA512

      29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

    • /data/data/com.xueyoujy.xueyoujiaoyu/lib-main/dso_state

      Filesize

      1B

      MD5

      93b885adfe0da089cdf634904fd59f71

      SHA1

      5ba93c9db0cff93f52b521d7420e43f6eda2784f

      SHA256

      6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

      SHA512

      b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

    • /data/data/com.xueyoujy.xueyoujiaoyu/lib-main/dso_state

      Filesize

      1B

      MD5

      55a54008ad1ba589aa210d2629c1df41

      SHA1

      bf8b4530d8d246dd74ac53a13471bba17941dff7

      SHA256

      4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

      SHA512

      7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

    • /data/data/com.xueyoujy.xueyoujiaoyu/shared_prefs_ext/test_app

      Filesize

      29B

      MD5

      e35ac4e4320ce1319943fa7590edc52f

      SHA1

      aeeaa01ac466b8a869b3657746e307eb0e37bae6

      SHA256

      45e2a56857e824681ee0c5cd65bc97061f4f6244f198b4bdf766efff38c3dd48

      SHA512

      f425188bdffbd04df091e3178c39b91893e85a575d8eac07ae10f2c6da172520d03afc01c28946253eb2006c2c1b3f561ac5efe8f02983f481fea561d1a93399

    • /storage/emulated/0/Android/data/com.xueyoujy.xueyoujiaoyu/apps/__UNI__5D94F17/temp/1703638255364

      Filesize

      695KB

      MD5

      75d8e03e3c74b4a0f8d40c8cc9bd2fe9

      SHA1

      3087ebbe07e7e844700551a37f2cf62ae278c865

      SHA256

      9ff3d069fc40505164a32ccae2698e18e5b31cb34380c9766c6f5dc5339ce226

      SHA512

      791073789aa92f84cf6dbf28ae9e17e91f225f6853e7dc2f816fe6cf2645ce0dc9ff8d03d72bb66a067836f7b40e2cc1e9833e8af9e907a59707628158a628e7