Analysis

  • max time kernel
    2606303s
  • max time network
    165s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    23/12/2023, 15:40

General

  • Target

    40637705644e9f440c7a3f82fbe7a643aade2df165740e434c783ca8d1597f6f.apk

  • Size

    18.0MB

  • MD5

    845ee692b3c79f57534a5e677fdcbcb7

  • SHA1

    e510b524052df06fe64ef3a9cd5367a5e0f64afd

  • SHA256

    40637705644e9f440c7a3f82fbe7a643aade2df165740e434c783ca8d1597f6f

  • SHA512

    982efa42f3a2768fb41a872e2165827fd6704f343f41052e512f7681c49987089f75da6448de4a6c7bf0e491caac9821ae08ec310a133888f30bd7eb2ab94962

  • SSDEEP

    393216:od9N7u835C7PBt9rVyQEHx8yCSQMZOR0fbNJXx5Gtd+57u3p:oh7u835C7PxrEPxPGvRibNJXx5GXca3p

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.thinkive.mobile.account_fz
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:5002
  • com.thinkive.mobile.account_fz:fz_message
    1⤵
      PID:5059
    • com.thinkive.mobile.account_fz:frontservice
      1⤵
        PID:5245

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db

              Filesize

              20KB

              MD5

              6a45600c83a1fb622c14ddf428c297a2

              SHA1

              f41c90db4ddf1979c8c71b7d30dc5e73f667effa

              SHA256

              2ebd4fe378f4a78bac7ec32e33e83d41cd73e1499d3fbe879276b6bb4bd9b036

              SHA512

              7a5240b7407fe125d533a4ba4f5ac8b22aaccf6c1944a43ed1c3a0b62cbe6f3dbed4d0aa098213b60855cf381a2e1410349f926fbd8c3e9daf329373b9d5a66d

            • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db

              Filesize

              20KB

              MD5

              b288bf6b0ceb756438f06719fb400241

              SHA1

              9501212227eb640de7ab5300570c29955c83b16d

              SHA256

              5f964e9abf50c294c9792a9dd68163295049514ec2131069601abbc0287250db

              SHA512

              a29469aa8b9e2e03c3f485f99cc91b02083d5a949fc425db6d9dba711a208d1a4368f51eb567bedc0d1fd235d4c3dc69aecd02cf4fd8ae9e97a85107ce0796a8

            • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db

              Filesize

              20KB

              MD5

              4e718954118b57d19b5815df278c9d3c

              SHA1

              58a2baa3df0ae0008682c855bd94a893055f5c80

              SHA256

              fd52b8ddf2a7e4e58cb8100761e17acf6fc820302d0458d25604b84ca740f368

              SHA512

              0898ac428f3c0de1f07f4b89cf819bd9b7090932a97b8394fbcd293431a0aae76fc252339a9d89c97eb07ba987c02b02802c4ff6e35fe6733db4c264193674c1

            • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db

              Filesize

              20KB

              MD5

              0dda0599e61aa1a6e26673965a0e4df3

              SHA1

              ccad267469ce97c796ec01102f03ad76f9b26896

              SHA256

              cc02ee4ed5a1ec08e69f7456914dca92706fbbf8a2fc1a6b977258c731275e5b

              SHA512

              349228696bfbc9fa208924925da480c0fd611b45b51f21e8f583fe38715d05eb331d49827fbe71091f22fcf7a076fc1d352bf6edd931953db7473856d6f50112

            • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db

              Filesize

              20KB

              MD5

              1f02a4e079947e27b2d61d2af5db47c5

              SHA1

              0785f080ebbf4b98217d60c4d20b82800a021c3f

              SHA256

              b8c3f5f0d2e4fc7bf511e51b3cfb32a31c3a3731c9101c624212a79cc0f5b471

              SHA512

              ff961e2b264781c9dc4cb7cc54dfceb701ed07992233ab24f2fdf36763cb3569e359ff081924cc079cb57d05aedbbaed535d53791de51de01b3b6ca3b1d36ee2

            • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db

              Filesize

              20KB

              MD5

              2b7b41ceb727a131476e552b533d695b

              SHA1

              715ed49bb43565cc10a4b20affddf7355388d4e1

              SHA256

              18139bc70dc86a065ef129abe1b72b195cdbfe2147a077e99bb41ef622e78d24

              SHA512

              17fdee853e2fd92ecb458fb1b33f7d733fc23c88955f7a3654bd842f5e28656c068403cd4d1e25ae60a92b59ad18bc4d1af12df3704829e547bd1bf7f31909b5

            • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db-journal

              Filesize

              512B

              MD5

              bddd700445e87087780ad0d362a6e691

              SHA1

              6935ea3730e8683d9a2c13d8965913ac393ea4d0

              SHA256

              e2dba9c6f53c9e66adeac8bca8cc75b2d39b1faff8c6b1a6edcaef49b1d5465b

              SHA512

              a1108748da73edaab2893fbf27c2c6aabf7a2b4c4074aedb9b577c16de6f23e3a2fc0b3737e61c49e6e4b61c6e57b67d61d338c6ed188a4916c059758dfba5b7

            • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db-journal

              Filesize

              8KB

              MD5

              83703b58530baabac32ab1b7befe7df5

              SHA1

              03c444af0b7aca544264ea5e3d8903a6fbd30343

              SHA256

              dc98c5c0615ff6e17ed5a3a49da5b9430643a9d05b666a3fc962f59205ac6fbe

              SHA512

              cbbc0a7c1a2879e47f5d0f1891701509620135318fa86854a4d62d268a06af553eb9778b715f23da75e83c38ac2750151e1de8037714e3248a9ea855b34809b3

            • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db-journal

              Filesize

              8KB

              MD5

              ff549f9312bca562a4f7e79e5cd0c4b7

              SHA1

              0297829b78ac289802ef6ca2fc7bc96bf52b4a84

              SHA256

              c31811b0c2a8c19cb14801c72ee239247439798a7316f1e180c5cb6b0d6d6404

              SHA512

              21ec55b2c359861f847fcf0a0116b14982e24fc49ad461dee2e3748b8dfdd39a99782c35e76050b559c741b1752517df7f227120d37a1ddc5999a6f0216616b2

            • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db-journal

              Filesize

              12KB

              MD5

              b7e784f0aace64c4a5480ce70b917994

              SHA1

              96046c2729e3f6394e89e3000292f7d325bdbcbf

              SHA256

              c237c972dffee2a5faec1fb2363c3b3782361fecf002e4afa1fc742edbc6a661

              SHA512

              0d688c9a65581f1992aa2098cc2bee5b8ee53e2317ea118a4a92d4b1a6d9c99907576e3c6c5d5e47cfe809f08613575ec78cee46f29fb4b90faf9040ee224c40

            • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db-journal

              Filesize

              12KB

              MD5

              07e2075ff39d846e8449f33187dc39f6

              SHA1

              659ad03652c9586eb4a3d8c69978dcb19bcb126b

              SHA256

              fa15fcfe7704171369e57c751c0893770d78f1fd543bae86b40962710980e924

              SHA512

              2ef47c8eaf4b12cfb6a55921dde828a581e28dd273b051893516a4ffb79a1041f56f55eec819cce39a61fc4fdbf3500e29fc95ca474dea4fd8fcff6d33284687

            • /data/data/com.thinkive.mobile.account_fz/databases/menusetting.db-journal

              Filesize

              12KB

              MD5

              f8561d01add9bba53042527e6493e1be

              SHA1

              eb86466fbe8c6f6a580f1164239107c98111e5bf

              SHA256

              d5aaf62217c62a7ef923477474ac6432241efc795fd82c33efee58b5d495fd64

              SHA512

              901b283152b75071db13164d0e015568cbc0f578d7e0d9a2747913d691f40dfe575a737a410eb59c605db550bc9ab1f0d9d44b81fca93599caa22d8b4c21e264

            • /data/data/com.thinkive.mobile.account_fz/databases/sharesdk.db

              Filesize

              12KB

              MD5

              163b0e3f017becbc89b9d7f330b78f09

              SHA1

              1ef9cd8ac8655190468d0ccece0a4738634ab0f9

              SHA256

              cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36

              SHA512

              6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd

            • /data/data/com.thinkive.mobile.account_fz/databases/sharesdk.db-journal

              Filesize

              512B

              MD5

              7b24bf1b7ea31d217c3a93be01ead5ed

              SHA1

              22e8b0725c4c28dd2b436ecbb8e842b90e8a0e22

              SHA256

              1fea4bd1edef2e2b71ed72b6b4c2ee12a5e7d637d7e7739f500957d629a7f710

              SHA512

              d96fb1ea61398bd69b48379937294957a4520e0426feb7c1e196b24b53137aef9914c19f21a857b69b6d8356b7805b9471a3f31cec358e7746de92dc78099ff9

            • /data/data/com.thinkive.mobile.account_fz/databases/sharesdk.db-journal

              Filesize

              8KB

              MD5

              0d32e3a4c0c14b704ef76e15cf7f86fa

              SHA1

              8f696b82d716a9e730f58cd28c5cbd653d94985c

              SHA256

              bf0ae71d1fb897376f739eb313f0d238464f94c6d889acd42d03ad41fbcbc417

              SHA512

              8e8246d4c8ee83f9d61a83fd394baa5d5a55a26cd836da1cc819a0ac3b0add2ccff766bb66d2040a11de427f61577ecbe24fee3b7742f0f8304964c96409fb5a

            • /data/data/com.thinkive.mobile.account_fz/databases/zxg.db

              Filesize

              20KB

              MD5

              b6a0b3fb8ad1249d3df152e6ad91a02f

              SHA1

              0bfc8abec1b55190226caade69bd0fd10877d1ca

              SHA256

              ef9c812cfe2fad9ca992be151f1b9b31ffecc78e45ff2ac40cf336a272c5e386

              SHA512

              dd2c231cf893bd30374632f643b1d254212c4ef6a87119db8ed692ecf7b71fd2f12cf43d596826255ebee0bec0a2237ca53ad93c682b3c31d9c1d71357f0927c

            • /data/data/com.thinkive.mobile.account_fz/databases/zxg.db-journal

              Filesize

              512B

              MD5

              72efc9c052db008f244ca31cdd121775

              SHA1

              2522caa41a8521831b12d2a89787a93eaa4a6ef2

              SHA256

              ed1ba5c7e1520f4cdbfdb40d422136dc12bf2295e80d86b25e2664546330ccda

              SHA512

              a8bd0d38cbed6fe7a3912b63e7aab8774fb210423110d855eb767e64f42d6082db4ec5404c1d34b19b52b72ab0f2b54ea1615ffc6234772ba3fa25c65e0ac09a

            • /data/data/com.thinkive.mobile.account_fz/databases/zxg.db-journal

              Filesize

              8KB

              MD5

              f59d824aa807147ef48afb20f49670d6

              SHA1

              8aa4727cb9c911f7419ef0c1ed38996bd1dcbe9a

              SHA256

              5d242466d6ec3d01f75530593e80e092ec6f88d743aecec1f77c20faef51db7a

              SHA512

              df5e6e0f4a521f98c53c71ee841c829a7e5cdfdcdb7aeaa8dbd1738a85e47e6aae7ce60c69af961ad97882b6babddd25473f8c6677c009ae4900a69ab4047589

            • /data/data/com.thinkive.mobile.account_fz/databases/zxg.db-journal

              Filesize

              8KB

              MD5

              273956891f7c4ac473d69f7869d4e354

              SHA1

              9e7bbb03e92f80a147a6aa0d7db1a959947f8b5c

              SHA256

              867a29384ef18cf0b84d16a54783eaf4a0ae22da7c5f070e92a73c5c38ac5a5b

              SHA512

              bc8695148a3fdfca7734d8b43ee9ccf696ae239fa24d39a7b8c76c4b75d3fb0319ffc4d75471e137b14f6276d91a505cfd1de5e340aa88deb2f1ff16d3ebd91e

            • /data/data/com.thinkive.mobile.account_fz/databases/zxg_zxg_zxg123456.db

              Filesize

              20KB

              MD5

              20597100a8cc78ce1dd21b4e9434d3c2

              SHA1

              bbb4bc6032a1d833ec190e4fd14f4f7ab60789a3

              SHA256

              6cdea9350617b66b03496a380bddc612351ff1aebbd1c061eaa021d604cdf7e8

              SHA512

              431ec487fc0017912aff4f145e84473c07594505ea556f0049464bf070f89c3c50c7deee3bf58b253324bfc837f3d9721e1ed7c4b0cb02beaf0b204af3a8d56c

            • /data/data/com.thinkive.mobile.account_fz/databases/zxg_zxg_zxg123456.db-journal

              Filesize

              512B

              MD5

              bd94746b3a71e5d2975099a93214e30b

              SHA1

              b382d4a590714820909863fc0d92fc91fe63267f

              SHA256

              b3fc776fbab4ff41c9b734388553c16cdd19883a308c0439540eaa6b6cf6cb42

              SHA512

              69eb6c68a038ee62aabb0da83968743f22c9c3b0d55f509fdb57af6011576abbf375a7e57793e6c9b9beca84c41883bde55b263cde02ec73e25e79a0d92e130b

            • /data/data/com.thinkive.mobile.account_fz/databases/zxg_zxg_zxg123456.db-journal

              Filesize

              8KB

              MD5

              896b3ea02c490566db8692045cdae8b4

              SHA1

              96e4bd1364f82925977abac6c0f148635390e179

              SHA256

              dabf569cc2101640ccb0584c16d7efad754430baac6c95e9184a091f93685a36

              SHA512

              ee55e8a69a6a225befb61a89c635c93a2b3acf95a9304e1f54ea14cdf3a345cdd70b7c91e35870d8ed13bf3d42ae45c9d35ef0c00adb0844b07ddfdf4e687000

            • /data/data/com.thinkive.mobile.account_fz/databases/zxg_zxg_zxg123456.db-journal

              Filesize

              8KB

              MD5

              f91c845ccf80dfcf7aebff9b52da52ef

              SHA1

              8642bc0b37c75d81526bd59a63182c9d3e25b631

              SHA256

              c36c4a67830a98a63e3b1e6b85997cea8e76bfbe332b520e19fdb77312dbb455

              SHA512

              b99e7fe79492c25d671098030d9c430004bf6f61227fb50001b0c6ea6765f8bc73ed22294664b060268d0ccda87e733c68a3d43c7d47881abb0565f1a4ebabae

            • /data/data/com.thinkive.mobile.account_fz/databases/zxg_zxg_zxg123456.db-journal

              Filesize

              12KB

              MD5

              0ad8c5f65ad6b85c888c5c18cb1085d5

              SHA1

              cff54b3946be121ae6d6b4273219901b2b172295

              SHA256

              9004de94db4c42c9d332c6d9fd3dccb159ac5481d993db4ca4ab3f7e258f7411

              SHA512

              20ab85372e0f9e1e7f27a550255b878086cc63701cd460af276eafbbc915f2cd361b31b7cb945b2689198efd5802e4f7407fcf832d7a260b511f211d626ce9a2

            • /data/data/com.thinkive.mobile.account_fz/databases/zxg_zxg_zxg123456.db-journal

              Filesize

              12KB

              MD5

              42b85b62428df6f40da7683018b0f361

              SHA1

              7df0485274cfaa43992dfd654c5fd991df4c1629

              SHA256

              f57e8e36f206e9b7ef3b40a8cafe5c15b76ee8b32acc17206a78f9de3021437a

              SHA512

              a3e93f1d525249d1720dbe41d4c30d0b77e59796f7e9df5a7fe0bdf84b3705df858de77697db8433f7687c6d1b85c265e1adaf6e02859231f44fd2b3daf7c924

            • /data/data/com.thinkive.mobile.account_fz/databases/zxg_zxg_zxg123456.db-journal

              Filesize

              12KB

              MD5

              4af2dd609e874206e5d1b702443b3209

              SHA1

              9e98320ce7eb7e0e1187628562c093006d09fc30

              SHA256

              b28bd3003a9f67c6975673ee2cef551515fb8ee6b0482ed15338a928a9b3f302

              SHA512

              eb07870f994687b23736acc7bdac1dcdda16038ac35711f29c44a148faf68d329d20c63be4dec3e5286e635056771d1460ccfecc5ec21f745aecdc072e3d506c

            • /data/data/com.thinkive.mobile.account_fz/files/gpcx20150702.db

              Filesize

              634KB

              MD5

              3f34cbe66fc11c74750daf4921447014

              SHA1

              f07fb6e9817d9ac834efdff098f08acdd502c385

              SHA256

              1170d9bab88218dbe471bf244f16b1219be260ca843e85c401ac14cd0be54086

              SHA512

              ea6ef8d1d1f13a0d583ba86bc9c2413bb7a4a1436e0020760eb5147dbbb68c35f690f42827ed32bd8f6064c844452fbe5af552ba01e94814386dd9b345d43cff