Analysis

  • max time kernel
    2834416s
  • max time network
    158s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 14:07

General

  • Target

    2a03ccb90b2be049d1c0e6824e02f7672918d13fede89ffcb0bc5b590be2f678.apk

  • Size

    7.3MB

  • MD5

    44002bf2bd4550b2fa230f1e54c268d5

  • SHA1

    c74a43a234b3ee33bac37438a34f966a2c88e765

  • SHA256

    2a03ccb90b2be049d1c0e6824e02f7672918d13fede89ffcb0bc5b590be2f678

  • SHA512

    5101346e729a8fa512cfbf80aa3bfa3ba47ab0325b60385287b57cb00ec6753f3bf1854345c070f87984234070cfda6189dd4b954257974fc5c8cadb814c1315

  • SSDEEP

    196608:jkV9/3PjTpr8NPk3muKaMgDckac6n2u+ygmdwXqh:jkjPrTp4NXaM4Mc9ffUB

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.yc.wzx
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4251
    • getprop ro.build.version.emui
      2⤵
        PID:4289

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.yc.wzx/cache/VAdNetSdk/reqQueue/-1415860144-1332186144

            Filesize

            1KB

            MD5

            643660f192b7d7a548e72f42b3d29fa1

            SHA1

            69a507ed57fa57d41fc32cb843fc14ce02fd30ce

            SHA256

            369392f5b43687b7a9a76d50e82a4f33b36e1a20097db2971d53a8ccafd2c3fb

            SHA512

            f50246ec8b838f14664894f0b9dee9cd2a2a20d7f33fe722186cbd06fb08c86fcc95f3331168f149c8ac90a7e3a725c70325eb515da2df1c55ba85d7658cec6a

          • /data/data/com.yc.wzx/databases/bd_embed_tea_agent.db-journal

            Filesize

            512B

            MD5

            97b4c7a53d963918d4595bd5cf9a812e

            SHA1

            eb7dbdeced7cda5755cef510688078fc63454060

            SHA256

            558ef36b1d9872e76828f31c0f1921f43e6cb374277056303fc185e0cc23f4c0

            SHA512

            ff3e77ae28e7f18e447cda3457709b1905b76ac4dd6aaae8abb7244daf26b4e63eb1c4e91c8c09898f41939cbeef87ba48d56091bed07ad0eab4e85527547e61

          • /data/data/com.yc.wzx/databases/bd_embed_tea_agent.db-wal

            Filesize

            16KB

            MD5

            e44a5435cfed2e158a55dc107e6f1b9a

            SHA1

            188721f16f71607f98326a4dd4ad8dbd4e08f879

            SHA256

            ddb450d61c0d410fafdedcdfbdc4b32f605e61aa99b263caa083e31a3d3455ae

            SHA512

            ba10b955c2d550217fa69066d1139136e10a02ef34908063de268ff1f961277224bb7deb4d54a91900696c01fc9dbdd97ed3b15a54aab5a85d0c2a43d86a96a3

          • /data/data/com.yc.wzx/databases/bytedance_downloader.db-journal

            Filesize

            512B

            MD5

            ec4a974a940366de344443239c1b1279

            SHA1

            43f1b30278a39398f305e4403fa6a996cfb4356a

            SHA256

            ea61ddc0c4c6c8db69d66058e00707e4dccc0b9fde2fe29abf1879de2a880dff

            SHA512

            d1fd74bc1707077d3861265356bc7507cf30da4d29c13a8117cae2242f093292a981a14aa3be7274de03efdcf980ea853f5e351afc880fbefe0dbc2dce574cf6

          • /data/data/com.yc.wzx/databases/bytedance_downloader.db-wal

            Filesize

            32KB

            MD5

            bc6f7ce5704e251f34a14ce148ecab38

            SHA1

            aac2be9c495148bf817d6d30124bab75d3c39988

            SHA256

            15ec34a3b56ef22e6532ac51c7c8757d4caf88b17f0b8952f9fe26a082e9b5e3

            SHA512

            fe68dd6d53d483a97137918a7122217765c164794e98c83d3a3473401746517a242c2b0923158d856f9f865b743aad7d6b456bebb52c25d2b0b1361cf846b508

          • /data/data/com.yc.wzx/databases/npth_log.db

            Filesize

            4KB

            MD5

            f2b4b0190b9f384ca885f0c8c9b14700

            SHA1

            934ff2646757b5b6e7f20f6a0aa76c7f995d9361

            SHA256

            0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

            SHA512

            ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

          • /data/data/com.yc.wzx/databases/npth_log.db-journal

            Filesize

            512B

            MD5

            77716d459553d3fe51dc01022c4e2897

            SHA1

            bb78a0a47e0a04f8fd39ea96f753e113bda0f80a

            SHA256

            8de7ecb6934cad4844c4a2222cd15d37dc622948def92477206067ba5c67f282

            SHA512

            648a39c57929e21496bd226c6e61e0db74db83a21c44d90f766be7ca61392bd26414c4c360dcb1f8fc0018f52da84fefc28331dcfb28cc32825c3e560cdb4732

          • /data/data/com.yc.wzx/databases/npth_log.db-wal

            Filesize

            32KB

            MD5

            dc4becf984416412a15293966840076c

            SHA1

            01d4c12229886b9b4a2ac829ae1ece1a3e12c79c

            SHA256

            cf7d829061434857e5f08a66f73c5527b426c730cc220a980591f2a9bb0b657d

            SHA512

            3725088b1f679ebc569735ae0d072a0c326bcc23426ebade96e9dc2910a5006f4230039bb676289f75e060010dc95a415feb08e5386218015f964acaddc077f2

          • /data/data/com.yc.wzx/databases/ttopensdk.db-journal

            Filesize

            512B

            MD5

            b002f65772916c158ca59ac53551e3d5

            SHA1

            5537b7fec8ddc742b58fb99ee01d3b4e9372a6c8

            SHA256

            adf22e6ee4d62c22de719beca3a4951fe64dcdea7e909724fc6aacd7b3a0f8cf

            SHA512

            cc4f9dccdaedcfe570b76fe317a793e8fd12334ad28504dc95a2ba7dd2d56020a82edeec325ca633885a5644c33fae1bf3cd0f99acb3c2f59359e750c725ed67

          • /data/data/com.yc.wzx/databases/ttopensdk.db-wal

            Filesize

            68KB

            MD5

            2e2d7e7f582ebc96f888e1db52118c51

            SHA1

            f3b382d45f72aa81b38de8e68aa0ed236a4d0984

            SHA256

            d7b012654735158ff092e4996cd404cb20802c1295114826e1c61f6ae3d552d9

            SHA512

            db16a65360e94c97105cafae2e891f9858e5f7efff1ad298185ffc3bd753c058cb1ec2e145c8f60a86e1990c17449124491a0016147f59875426119bfdfede58

          • /data/data/com.yc.wzx/databases/ua.db

            Filesize

            32KB

            MD5

            78b0e343412dfb6528e68da87f124af1

            SHA1

            01de4d49b9cca4bd0a2c0772d3107d0c0d72cf6e

            SHA256

            aef1bebfa4b35659e96d79ea512977e9a88c93cd98cc0a490abd19d43022c5d3

            SHA512

            69e7a85fe7ca69198baf6a286362703ee7ad6a3f8cf16c3f6ce6682d32ca262241141a80801d4054569e8d5d5948088f543e453ad9aedf896ba8d1c87c162b8c

          • /data/data/com.yc.wzx/databases/ua.db-journal

            Filesize

            512B

            MD5

            1573f4bf36429b62046f512ccdf8b54c

            SHA1

            57938fc0b886276581b5347d6226c458446eb242

            SHA256

            7d8017dfcb33eafb6a64e4f998418e0a8c1527a7e70bcfb4f60f82104af25b3a

            SHA512

            611acfd278ef707f7646186703b488784704d1eb12ea0b7ce4b23fc0fc05a1fdf9959ec046a65d3f3e29bb89d6692ad0f511be787a9dba7f6b114acd4417ffbe

          • /data/data/com.yc.wzx/databases/ua.db-wal

            Filesize

            52KB

            MD5

            03a9e481db2278984568aeacb18e1d48

            SHA1

            ed7b2bc68255d5ffd58014da369a889eddcfc60f

            SHA256

            b547ed7d70db3fc7407cb45b5868f367369c0a6600b99ed442667711a3b2b1c2

            SHA512

            f22be5f5cf7f4a84015062aa9c00c39f92074647357f0cc89758211af333c831e674832bbffa73e2c923d0c7cce8bd7c51b75bac930d9f11b8ac17befc25efd8

          • /data/data/com.yc.wzx/databases/ua.db-wal

            Filesize

            4KB

            MD5

            188f4f659ed31fe35890d9a3fa939fe4

            SHA1

            2638b10a4a29a199a0b38ab0f9ddc0e877cc1197

            SHA256

            58df0d215ef9878b21179bd698bfd7f3d9e5095b27b54e2ad844f9eaa3fb2a9f

            SHA512

            01d53b09089f98a273f3b57f50ab613f404369c63020edea5cedeb8f9c6f8f4bbbb0161e8e1a0123cb160c2e195deb64b23dc9c4bc1c4073156c4ed3ace1619b

          • /storage/emulated/0/Android/data/com.snssdk.api/cache/clientudid.dat

            Filesize

            36B

            MD5

            bb2002e174d3f6551226121e5d7bb3fc

            SHA1

            8c4c74193d837e639a20381446e180a0603bba8d

            SHA256

            eb36b27775fff2586f892a0ce520f13cee4603d062f05957b5a7975c5eb1e5d0

            SHA512

            d8d6cfac0f5ba149158c736171643e3ac41c0aca5621565ac329e97031ab6eb2d1c2c097d443c3200136c55220cc818dcdaa740de778e42495c5a31c977b869f

          • /storage/emulated/0/Android/data/com.yc.wzx/cache/tt_tmpl_pkg/template/36270120544a2ecd02163da0e2df7435.tmp

            Filesize

            143KB

            MD5

            d05f5d3e563d09e5da6f1b574511632d

            SHA1

            601c68706f0cd764ebb972641997e9bccecf700b

            SHA256

            30a99279b99e4654a47b50100c0c8bad40efa4d7e6cad10d8c07b128ab9bd77f

            SHA512

            bd59d252215c227fea193f9829e432742900b5eb48ca94e2518f5b20d06ba34077b6a6fec34fb361544fee75370c6676f8546c589a8745b47bcc6667a9344023

          • /storage/emulated/0/Android/data/com.yc.wzx/cache/tt_tmpl_pkg/template/temp_pkg_info.json.tmp

            Filesize

            617B

            MD5

            f98039fe10f474aa8ac2b3c57e4464cd

            SHA1

            a22275772da38f32f14c8bf176e0dab280d08c63

            SHA256

            b5f2625244f09660674984ab66454fe5a72bcaa02c3162f3f2e83190c3f84958

            SHA512

            305a50476172235d99a89791c520503a8bdcbd87a179f153b00d9ad5c05c88a4844350ca834b26d7e3f95ffb5ca0d81368baea1c36cd09ff4603d90c0bc838ec

          • /storage/emulated/0/com.yc.wzx/config/5ac714da7be6d534dd74c84a097f98e0

            Filesize

            352B

            MD5

            7b4620c92f4af9984707458992903377

            SHA1

            7f1d1e7e384851d6223076afb146eae0e00dab49

            SHA256

            40fb1417d0c62ab13df895ed863b4f4520522380d4dd7f83fce6777fc8bb6516

            SHA512

            e48c06ded16651270a4d793b4dd1eb3841b5ff670c1fe67cf1867afb55135c190301d53b48bca506881209d5b9a07d95f46c6312b94eea6cdf3014077b11ad0b