Analysis

  • max time kernel
    2676827s
  • max time network
    160s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 15:40

General

  • Target

    40637705644e9f440c7a3f82fbe7a643aade2df165740e434c783ca8d1597f6f.apk

  • Size

    18.0MB

  • MD5

    845ee692b3c79f57534a5e677fdcbcb7

  • SHA1

    e510b524052df06fe64ef3a9cd5367a5e0f64afd

  • SHA256

    40637705644e9f440c7a3f82fbe7a643aade2df165740e434c783ca8d1597f6f

  • SHA512

    982efa42f3a2768fb41a872e2165827fd6704f343f41052e512f7681c49987089f75da6448de4a6c7bf0e491caac9821ae08ec310a133888f30bd7eb2ab94962

  • SSDEEP

    393216:od9N7u835C7PBt9rVyQEHx8yCSQMZOR0fbNJXx5Gtd+57u3p:oh7u835C7PxrEPxPGvRibNJXx5GXca3p

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.thinkive.mobile.account_fz
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4247
  • com.thinkive.mobile.account_fz:fz_message
    1⤵
      PID:4300
    • com.thinkive.mobile.account_fz:frontservice
      1⤵
        PID:4424

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db

        Filesize

        20KB

        MD5

        f268c93a5a0b01172cd9c85047aefe6f

        SHA1

        bf859d765fbaa64f2ed1ee9e51b4c13d7e5c4fac

        SHA256

        c69f97bc457b2a36dcd212de557c888b2819432ab558da4459c129928f411899

        SHA512

        91047cb505473830554de454763d779a1c6ea2e56b1eb6eec24ff2a65d57780f25a40199f6e004d837d290fa194b2f0a6b4bdbc25a0794a091c07a39bb8fba1f

      • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db

        Filesize

        20KB

        MD5

        920bc293861d2a12e1b31a05ec494f1f

        SHA1

        ec17286c1c6e5af7ee59d6bd9693b890ce540427

        SHA256

        a001befa2576e34f085022c0e760546b94cb68ca7609df7749ace616a9e8a729

        SHA512

        8546d5155adf58376848639330a43ca3ae3eb8d15daf7c11879a316a37bf3c5578496de569c82cd0d08e1d83dbb334f67924cb06d23fd6b59906ab544f9420ee

      • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db

        Filesize

        20KB

        MD5

        ec8a086fe89754e6cf02f7887b2eb966

        SHA1

        7a909176809e5e6f11875b7939c5c142ddd52c43

        SHA256

        2b0d5b06d9a22435b6d0c7b27a9168caa2030065a2d66a447cda9758aa61f68c

        SHA512

        72c2f2cefe496f1c731f5f502b6306a38c0bdf831f1e8d90cde3c7105c5e09a7294d6a66b7782df1f1f0a3fb8cbcac5f1c722386ec1042d84f3382df845082eb

      • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db

        Filesize

        20KB

        MD5

        bcd3191ea045d2b312552d7c67054c66

        SHA1

        41d51a2d83015a393581463493e8dacea9c24e5a

        SHA256

        c432519cc8bdf725ba75ba43b617c3e9c6163feed4f06a28468e6edf260c45ca

        SHA512

        42f2d5e3ac501e8489d159da8965af6b593ad0bf35862daa5a0585e3b3f2ca3726a6e354229d2006dd16c53caf7ee12ebeac9399b1a392d1b807bddc7a698ac9

      • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db

        Filesize

        20KB

        MD5

        afea1219ea87936a6036cf89a255e890

        SHA1

        f0a6189808ffa6aa496d68beee538910456ad59d

        SHA256

        bd83796da0528019046dd03d2ce62099601c8e9f3fe894afbbe1f10a86353277

        SHA512

        417afa2428706f3c1cdf0cedcaece0cf58e3704e95e59d92673d6f71311a06aa7392531fdab356fead9c552a8d299139510ecf62e019a51ab41ad2addea50ae3

      • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db

        Filesize

        20KB

        MD5

        119365a88ed14299c5c85a7d160135d8

        SHA1

        0a4bf2d5044e8ed1286d36717a94c8ed1568662b

        SHA256

        d367d94bcb4b03bf36819bb08e50ae80ecf50c3188c351370f7f9b2a58fffbde

        SHA512

        7e9cc7cefd0c2e6b25c135e9110f1f13a97db821418b32c317df529f6168f9c0302b567e8b2f1833501b1a5350e97f3ad1c43d649948a66c9b4f9c417102cc3b

      • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db-journal

        Filesize

        512B

        MD5

        6fa00f41a2ad28874c7280837bbcf834

        SHA1

        2578b9d6bf0db07db238fffd0feba361e62787c8

        SHA256

        49fc78214750bff4188d2c1d1b48f0afbc8064143391d7383a0db6fa602e24eb

        SHA512

        eed16bb2517ac496ae092f48803746a443fc11a74226a705159354c101d8922b4665cc3a712532fe4e546ed32d85066aae47169f614f6726b369a1dea7fd81e4

      • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db-shm

        Filesize

        28KB

        MD5

        cf845a781c107ec1346e849c9dd1b7e8

        SHA1

        b44ccc7f7d519352422e59ee8b0bdbac881768a7

        SHA256

        18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

        SHA512

        4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

      • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db-wal

        Filesize

        8KB

        MD5

        c6713e4bc82ed76265bc276b7526e68d

        SHA1

        99b93b899c194af8f73e6ef8513a1403b956473c

        SHA256

        41734235f6e264bd268e9420ad665b0438a66ce9228d67b2435c33236c3f92b1

        SHA512

        35c2de9d3398088d81dcd9455cef6948f7bb7dcebebbba6ed66bc32e512816f1ceb3cda9e708cc1e6b93b63a39f965718aa95be858d8a75f7c83ca2d2fa7ab6d

      • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db-wal

        Filesize

        8KB

        MD5

        e647aa3b54fd843db6e869a067a6bc0b

        SHA1

        2f249cfbe0ac95a818d42d6e0b075fb50848b7c2

        SHA256

        3b41767b0ac3688f324f51f105425c62f6484feadc1fe9b1ccd659f452c48574

        SHA512

        4876676f25daf42ff643cff6edc415ea6120c02f0d227876afd8879aad2496ad00e6e47981b571fec8d0306cddea0763747f9d1e28974246facd2af5718cca13

      • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db-wal

        Filesize

        32KB

        MD5

        b3401dbc46b03de23bb0a920b72ff892

        SHA1

        1babda3a361b4c1ee60cd9730637eecca29d5a89

        SHA256

        6875154bab0f028a14530820b22cddcbf65b8258f76c610bd6a48db37f89fe1e

        SHA512

        6ed4214f2c9674e0b4ec69c337f93a2bc6bc3712c851ba28b3b8f10606d7c28fb33bd6eeca7ff3923dbfb99166dcc6c31380d45a42227ceb04a8060adeef1eda

      • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db-wal

        Filesize

        8KB

        MD5

        b0a4ee287f81d9eed5a154ea297d8027

        SHA1

        7e0114729dfa729ce05acd53f03a29a624af90a4

        SHA256

        b58ffaef17f1e643f7fc8e433104de3a124929c014996a468432d7d64cb42c68

        SHA512

        2e73071c5e96c8a5e0336128141e02758e2e4d3fd634d52d2d57e621eb7131155c0ffca1f3eb169534964ac49dfbae6df0fa7f388069c69ba997721ea9efc30f

      • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db-wal

        Filesize

        8KB

        MD5

        59309115f16d915b1c1624064328cd3b

        SHA1

        47fcc282b15f769b27a46389f80d7bad98b1b428

        SHA256

        626fcfe632ff892c7fed18d090738ef2008ad7fb0265841b0f30b39143d9fd1d

        SHA512

        28825fdb645c87c610ef366d732760927d985d5143e304b7e4c6dba3bc21266bb5b286a6774f7f8778a81187a4709cd2419508e93754d320256a372e929066b3

      • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db-wal

        Filesize

        8KB

        MD5

        0d1156590acca18c9ef08a2bea43e05d

        SHA1

        b881cd8400fbb70180e183a7a1070c425c6b81a5

        SHA256

        a8dae8b29d67835d5a7b0cfc58820b5a69724edac8b7688aa8190f95e6843fbe

        SHA512

        60534445ded32e4245024ed8d152265a2766345f62b01812a7ecc7188528884aa558bd34ef79757a186c222e3137d1e36554ca37e86cb0af343fe0c34b55e625

      • /data/data/com.thinkive.mobile.account_fz/databases/sharesdk.db-journal

        Filesize

        512B

        MD5

        933d96516d91a612b2e85b17546d528f

        SHA1

        5669d0d4b8824a7d0af7f81c2cc078ebe0ed2ff7

        SHA256

        a92bfd445289075db298df60121fb47b66b1e64db89204a0ddfe05d7e0378304

        SHA512

        8ce8aec2c360842d44fd368ac94542e8bbd75a217984ce16a980a1ff36c1060fe7788d1edfc3cf2dc596a97ed3c51b7d8243e33721015fe7c004376c68948734

      • /data/data/com.thinkive.mobile.account_fz/databases/sharesdk.db-wal

        Filesize

        32KB

        MD5

        80624434a96d22827ecc76b86ce61a8a

        SHA1

        68926df90c270379cf6a9fe73f72e35317fedbfb

        SHA256

        c89d327c0391b3f06bc17b8d0c0b1bc50d4d7dbe2988661aced8d286db288c19

        SHA512

        9d51343ccd8d18da583a7d37c6ae505c227bb5f21758cd421e2752728190f121ad49df3922637ad3e5f12cabc12d1393c9242eec7bd4ca276bdcb25374f87e5d

      • /data/data/com.thinkive.mobile.account_fz/databases/zxg.db

        Filesize

        4KB

        MD5

        f2b4b0190b9f384ca885f0c8c9b14700

        SHA1

        934ff2646757b5b6e7f20f6a0aa76c7f995d9361

        SHA256

        0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

        SHA512

        ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

      • /data/data/com.thinkive.mobile.account_fz/databases/zxg.db-journal

        Filesize

        512B

        MD5

        ca4da0ac4fb1664606d69c134f30e827

        SHA1

        30b2a93ede5abee2c2ff85047126e4279954ba0d

        SHA256

        de7c829de3dec38862bd52f2fcfde55145f915023d9ed0b5625f09f1a91d7335

        SHA512

        3b8b80a2184e7aebfd9d15b2b51e24b83d68fafa5b4043ebe99bd6daf7bca299e2147a2efe6d5151766d21863cb667d87d2cce5f86b6ff77579dc227f83ee4a5

      • /data/data/com.thinkive.mobile.account_fz/databases/zxg.db-wal

        Filesize

        32KB

        MD5

        a83f1207544b60859fec7bffe2963bb1

        SHA1

        d33f1b3220d9a11335e2542c0693fba4aa79b42e

        SHA256

        d1b55e47d9507c712cd972275c4ebdec5bd3f809eca26db13360b77f61ff3495

        SHA512

        953e394515c413ba3a08b779fb42157e15f0d8fff8d489fcc330d411d106a3f681a000bef6a8dbf1597dc75b88f7394033d24dbe6a3610f3ef67d555117b7629

      • /data/data/com.thinkive.mobile.account_fz/files/gpcx20150702.db

        Filesize

        465KB

        MD5

        2d6ed6fc1d40b4239753c5ae456585bf

        SHA1

        a69a18508d4e87fd387cae0a4f2303660a34ef61

        SHA256

        b047275d2aacbcb30e3a24e3b900ba6e8113d55fd8f3fca0bdf917eefc26f395

        SHA512

        eeb5c66335c83300a6aba485c5df4861aabcc6a840c800f7ba70b59e4bc5293a6250199434c4caf6679d188d8737af39615ef5ca39e9999fd51570f91e54215d

      • /storage/emulated/0/ShareSDK/.dk

        Filesize

        107B

        MD5

        c9383021bd97affc44be4db7018c4d7b

        SHA1

        7e680409d1c86e35149bebc22f2cf8c484f0d23e

        SHA256

        b7b7e032170e3190a84359e5c37adede1d58b6bf4c455ef0c01f73335709bb65

        SHA512

        7303f068da97319891e2d25c1c737035f1cfdc365d75d954102b612000e54d7e2b5dfafe10bdf909563e2b46ec3ff9e546423bff6f0aa9496880eab1c1c36a81