Analysis

  • max time kernel
    2900024s
  • max time network
    148s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    23/12/2023, 14:16

General

  • Target

    2cbb23fd6262c50d214979987bbc2619f59e27c480e6affc4d985e472b192cbd.apk

  • Size

    23.9MB

  • MD5

    61372ec1e3debcda2beb7ad870421057

  • SHA1

    faf1c7043a1ffa77c01249ce89914224bcc1aa94

  • SHA256

    2cbb23fd6262c50d214979987bbc2619f59e27c480e6affc4d985e472b192cbd

  • SHA512

    9e74bb344372ecdec195b347c98fea7fcbc8844f83bd808fa06f8c29dfe6173b683bf0f1e303a45dd20cce48f623ba5df8fae53d2e47d7087e49f2adb2206bd1

  • SSDEEP

    393216:4jrTuMm4/g9hWpXxBmEUzmaYLxlqpU1SjTetzqita/UYmaYLxlqpU1SjTetzqiuG:4jOMpgaprmEIggaSXetema/UGggaSXex

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • cn.com.firstedu.kids
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4965

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/cn.com.firstedu.kids/files/cfg/a/satellitestyle.sty

          Filesize

          166KB

          MD5

          3f1348cd6165c9a66a9892565c917ca1

          SHA1

          96f0c939438c494cf3fd89246d458e92c0c7203b

          SHA256

          5fbe3817e4047e14c40b567be4955d7579c8bf7b7824bf8370f5e194ebf9767a

          SHA512

          405c3d1d5f4899cf723509f8e293f2ca1d95a79f7892e93401309372335a6a286f2eae9ee9312f69af10c5bcabd091cd90608898a129542b0abe0617c500d023

        • /data/data/cn.com.firstedu.kids/files/cfg/a/trafficstyle.sty

          Filesize

          4KB

          MD5

          6a86f30539dfc9332cd235fc48fcb62c

          SHA1

          5c202003f6346edb85175b8df7c460793f5512c6

          SHA256

          34bfd1e28c3625f50a23240c4b08ac50a90fd35c5e5f88aed1cf36fa8fe5e18f

          SHA512

          f63edb8270e6cd35e5c6896e2b9153144af0d29303e367a4fa81941b1b2bb0de57fa484badb7ec7f05ebdfa67d77b00c3651572c5f05e9314389887f5546d235

        • /storage/emulated/0/Android/data/cn.com.firstedu.kids/52kids#kanhaizi/log/20231227/000.html

          Filesize

          172B

          MD5

          76c1542610ba4332896bc53e336f3f3d

          SHA1

          395e5cf2b618abb6037eeddec7ec3861b4bae996

          SHA256

          4d9eec6e7b19254ef58fbc002d150b40cb41928bd338c686114fcc8548651928

          SHA512

          38b1fc3e8819efa71289aa8b43989f5bcef8cc79894460e134f8b4d9af03d5d56460c6f6b5fd142ef1de82e3d388a7bba9374a4e566aa878ced90f7197474ccd

        • /storage/emulated/0/Android/data/cn.com.firstedu.kids/52kids#kanhaizi/log/20231227/000.html

          Filesize

          85B

          MD5

          aea776f8b5e65ddd18084a5870fc3433

          SHA1

          a87fce8380b3d575b90c85159a9a93be649beea9

          SHA256

          3a4bc1c0e00ff5c451cd8e5061c26be759911685f9fa3a8f4ea3b53d4debe5c9

          SHA512

          59e65c0db8d40ee98f7de6f416161cf8c2254ed1f504bbfb4520777da354dc45492b741e431223e8a2d4bd67817980eb556f98ad69437e19bda5db507a725b87

        • /storage/emulated/0/Android/data/cn.com.firstedu.kids/52kids#kanhaizi/log/20231227/000.html

          Filesize

          82B

          MD5

          ceef281c4055c4eb81f381db1b94e57b

          SHA1

          a304f65630d62238f8807ef2ff8b3ca9b9d6273b

          SHA256

          a01a99b76544ac67867f5b320a523f2d31b65e310a5cb9f622f88769af744450

          SHA512

          1046a86546e3aec345017fc9f9bec4481e09df1ffec97920acb4edb28fa1d031b606039d38d8fb5ce3b2a59c7007b93054fa35184060d0e0ab7da47bd33660fa

        • /storage/emulated/0/Android/data/cn.com.firstedu.kids/cache/uil-images/journal.tmp

          Filesize

          31B

          MD5

          8c92de9ce46d41a22f3b20f77404cc1d

          SHA1

          8671a6dca00edb72be47363a7071be65cf270373

          SHA256

          68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

          SHA512

          30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56