Analysis

  • max time kernel
    2692034s
  • max time network
    147s
  • platform
    android_x64
  • resource
    android-33-x64-arm64-20231215-en
  • resource tags

    androidarch:arm64arch:x64image:android-33-x64-arm64-20231215-enlocale:en-usos:android-13-x64system
  • submitted
    23/12/2023, 14:36

General

  • Target

    320af4466cb1b00c0a18fb6fe7bf9e0ea016fbfbab28a7b6b5edf7572fb18344.apk

  • Size

    15.2MB

  • MD5

    effea40526e27f1bdc49f651b0a249e6

  • SHA1

    b4681f18bab726aab451dba11d0c05ed57572106

  • SHA256

    320af4466cb1b00c0a18fb6fe7bf9e0ea016fbfbab28a7b6b5edf7572fb18344

  • SHA512

    439bd7ff085fe2055724bea2f5bff15e572decd0b77c4449ca01c3467096e04978aa79aab86912c0268f8f8337675e1727ecc63322aa400ed6fc67f255c81475

  • SSDEEP

    393216:r9MzqjFRQKpYoBN1DyjUeHIdHpsBGDuzgHejguZXU45aLKu6:Oz+nQKWYDheHIn8gH145AKu6

Score
5/10

Malware Config

Signatures

  • Checks the presence of a debugger
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • in.haojin.nearbymerchant
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4308

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/in.haojin.nearbymerchant/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65895547002E-0001-10D4-AA9E532BE705BeginSession.cls_temp

    Filesize

    77B

    MD5

    b33921db0f1e78b6a2c1fae84c8a81ed

    SHA1

    a6197c1f13405167fb900ac3312f0d43cc16bc69

    SHA256

    21f97a199a55e2ef50ad74ded5168957f2f6a2be1a4ff43cb85122a73b60c573

    SHA512

    d889e9e352f5357d34a151e956a59e314725485a5b5f7af9654d4c4c32dc7d2628ea19c065462c024693c99f1b7b506e86da341b9bb84dbb7f5c9c571143f933

  • /data/user/0/in.haojin.nearbymerchant/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65895547002E-0001-10D4-AA9E532BE705SessionApp.cls_temp

    Filesize

    122B

    MD5

    b9add1247d8092ca572c6f782f7f2ebb

    SHA1

    9ffd2d59646f8cf799f67485201db38cce20ae84

    SHA256

    c7378b9cfe0ff7206719f8eaa957570b01d868305c001c69e026ac506c8d3736

    SHA512

    63e1ba9235e26a0f0f56ae4a4acfb40754d2afc3cf74d3ecda123c12f44e1fd1b220db9d5de2747114f2bf9cf2362b80eb189cdddc88ef7417933900992c2313

  • /data/user/0/in.haojin.nearbymerchant/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65895547002E-0001-10D4-AA9E532BE705SessionDevice.cls_temp

    Filesize

    101B

    MD5

    f978dc5201d91e3b4bc1be3a2ead52b4

    SHA1

    c8d148986eda82e7344b5b9f642006eef95bc3fe

    SHA256

    5c492dfc2c84f5c5f60c9656aa6f59b5983a850c2238a0715e69747b6231b8b6

    SHA512

    a84ac9652cf1d5e1932a53558b10edfe36c365858da25c1d6a501bc447413f88d4a7aaed5244a7df9afca256c475cfedfad929536b0e88d733be44d07bfdd088

  • /data/user/0/in.haojin.nearbymerchant/files/.Fabric/com.crashlytics.sdk.android.crashlytics-core/65895547002E-0001-10D4-AA9E532BE705SessionOS.cls_temp

    Filesize

    15B

    MD5

    f8b3ebea29c91d82f009e5a9c6d11060

    SHA1

    99d88c4b39d9143084e777b93d9692a59a3d087d

    SHA256

    b7869422f5dcf3f24ae91560cec05ebb39852ed45baf3a31176f9b90de87aafe

    SHA512

    6f89bfe6bc1c0a68bca73ef92c53e1a308fd63f2228a25a6e34d117fc5cd253209eed56fe08f51d5643343a152acfdbfbb1c5dcea224e2750aed46074af369de

  • /data/user/0/in.haojin.nearbymerchant/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap

    Filesize

    491B

    MD5

    e5b8e4fa089276b7862fc4d55f360c9c

    SHA1

    6cd04659603d1a318ef2df9a339b6e3f3414a5c1

    SHA256

    ed01c9b8e05e78665603b426bb3bfba52986f5d327c26e506777c88f18c2f156

    SHA512

    b5e7fb6851a71bb07941c97712d39df78c67d85113324308bed8f63b5fff73ab1b2537902abae65317a22143882aa026d04ae6ec2e58962ef507826a14b1a6fc

  • /data/user/0/in.haojin.nearbymerchant/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics.tap.tmp

    Filesize

    16B

    MD5

    c33583fae4e0b61cde1c5b9227963237

    SHA1

    fe2ebe4d27469af1460f7e852031a04208ef629b

    SHA256

    35c6d6e5b93657e4a741a1cec71c21813fe05aab219909ebbb0f62fb0ae648dc

    SHA512

    fa09047004bec791b23f0dade0b64f8ab9bbd67555505e0d0818f6e89dfe56f474df80db0786d081d36adf23a5bacea40275ba043444a3a85d3d9612575bdd1e

  • /data/user/0/in.haojin.nearbymerchant/files/.Fabric/com.crashlytics.sdk.android:answers/session_analytics_to_send/sa_89be9368-ac84-49a6-bb36-2b83ae394101_1703499079724.tap

    Filesize

    382B

    MD5

    7ecfddc959759e5b95fc7eb1d9d0c4aa

    SHA1

    2a3983e14c656624d4e169b22395f6c4f8172330

    SHA256

    82177e814a3a743ddcc583db96bb8ee852a0b6763a3a3f6d133c7d09048ff3d0

    SHA512

    7d955f721ce3b7ed893b2ca0b210e5b4a71981e4b113be286ab4e5915a255a1611753fbdc9d67f8071c4fc1a1a903c4790b3aa993da5d89f324ff698481f5e67