Analysis

  • max time kernel
    2606309s
  • max time network
    164s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23/12/2023, 15:40

General

  • Target

    40637705644e9f440c7a3f82fbe7a643aade2df165740e434c783ca8d1597f6f.apk

  • Size

    18.0MB

  • MD5

    845ee692b3c79f57534a5e677fdcbcb7

  • SHA1

    e510b524052df06fe64ef3a9cd5367a5e0f64afd

  • SHA256

    40637705644e9f440c7a3f82fbe7a643aade2df165740e434c783ca8d1597f6f

  • SHA512

    982efa42f3a2768fb41a872e2165827fd6704f343f41052e512f7681c49987089f75da6448de4a6c7bf0e491caac9821ae08ec310a133888f30bd7eb2ab94962

  • SSDEEP

    393216:od9N7u835C7PBt9rVyQEHx8yCSQMZOR0fbNJXx5Gtd+57u3p:oh7u835C7PxrEPxPGvRibNJXx5GXca3p

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.thinkive.mobile.account_fz
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4481
  • com.thinkive.mobile.account_fz:fz_message
    1⤵
      PID:4542
    • com.thinkive.mobile.account_fz:frontservice
      1⤵
        PID:4683

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/user/0/com.thinkive.mobile.account_fz/databases/menusetting.db

        Filesize

        20KB

        MD5

        44d03361356374d4c01f777bd8dd86a5

        SHA1

        e33c620d702fc9aff362e3aa2d32101a6e7a8ee2

        SHA256

        bd18f2b6b9931b5c97d1ae0abda35231d94737ae6de2a4c35b2d41efe14195e0

        SHA512

        d5c9f985f460658dbb209eef7a5315a7b4a59e6dcf295cd2e81f8645d33dbc3e71ec1fd4419e45b8112636dcac55853e86a0820837de3a2b72cf9a1df9e9eb70

      • /data/user/0/com.thinkive.mobile.account_fz/databases/menusetting.db

        Filesize

        20KB

        MD5

        023dd85d50e0b8924b9cba3ed7c50b74

        SHA1

        03be67e438dfe9d8e5929d088715c1487c2b0f24

        SHA256

        5e93198ae215d364d7b499022bcbbc0664166ae497b05c711e93d93b240786bc

        SHA512

        4ebbdfa85b4845b633fe13909b79209923480eece97302635ac5c644dfa7e677380115eb38cd026b988cc82155345d45e168cbb03ab9294736a0709fd9cf0adb

      • /data/user/0/com.thinkive.mobile.account_fz/databases/menusetting.db

        Filesize

        20KB

        MD5

        7e58a2ee9b3205b35da3447046556a05

        SHA1

        58b21cb2aab4365ccb08c76481085ce9f5d7c47c

        SHA256

        a973d2177df8262d313ea61dbe6dd176924fd6289bc047ad6bd2b0a2c0bbf946

        SHA512

        699b7996d2000fef868bddb0b8e83b4e47962c2d1ea0308715d3a7971fb878a28cc5bc4c3753fecbcfac591a2b4fc6b0a34d3e3d7deb110d7cbcbcc9c78c87ae

      • /data/user/0/com.thinkive.mobile.account_fz/databases/menusetting.db

        Filesize

        20KB

        MD5

        d1b5ee3fe76f8c77706605f3c4602e3c

        SHA1

        9e430ec3c9d52b1d02729cffabe1f3d73ef63dd2

        SHA256

        d472744486bc537e1e56ce7861462b6f4e6dfdedf9b1ea6f5b403823ff533f18

        SHA512

        f5811fedda2979437f112a5d417541f645be3b441ae1cdfa7abe3386a8a75db02298fcb870bfd17e036e03c95185fe057b2c3daa438265145e79cb7ff58fe789

      • /data/user/0/com.thinkive.mobile.account_fz/databases/menusetting.db

        Filesize

        20KB

        MD5

        4800c5dacff01499c591d206e8346527

        SHA1

        a9039aaacaf8773803c5667edda120e234d2eb9d

        SHA256

        7f16fe710498bf659db4160c76e4508c3f499aa704207f4d05b8f8281181d1da

        SHA512

        d6804f8dee81ee8e31e42a8398715012f0aa70a1ecae8b72f3ffda2736a9b48ed132ececb9fb13b4edf20099ece645e9524a15f46eedce31c855e5da6e9b3557

      • /data/user/0/com.thinkive.mobile.account_fz/databases/menusetting.db

        Filesize

        20KB

        MD5

        ca752f0b2cfdaacca70134c7cf239c49

        SHA1

        ffaa7423fad8a1b2697cb92b5d7a5d2cb270c6b2

        SHA256

        4c29a5435de86ba80756ac3e6101febde96ca4036393a96c518ee3c42ee73924

        SHA512

        657175766fec40c5feddfb89861c791c4265d911eca76bafce20480c8b3c408836703d1903c1ad3a0cd388de392eb8d85de4eaeb430c0099ee97c96318157f53

      • /data/user/0/com.thinkive.mobile.account_fz/databases/menusetting.db-journal

        Filesize

        512B

        MD5

        dd85ad497c75075a97ba59eb08f4c8a9

        SHA1

        bb58d98b0923eb93c8d74b82cc6f0dc0c3d8fe63

        SHA256

        73a5cfdb57a9319a91d6d65b2a0aa8146d378d4c356cc4fbddfd8aa372cbe38f

        SHA512

        4d4bc6c821731e981dba4713b215a2020f42dc414f4bd0207357fd3ff81e56a404512b97076b27e5b4917814e50d045b9a7a4ecf9222993cd9d22e4b7ee99ac2

      • /data/user/0/com.thinkive.mobile.account_fz/databases/menusetting.db-journal

        Filesize

        8KB

        MD5

        fe1f65e632bd6d632365637d4f175b4c

        SHA1

        d0e6ef0949184f25e3386ffd0bd56d14743a6a9e

        SHA256

        3c2ae4936cf34160f94f2b0e7ec20959bd438003034fcb73c379cb30f001255f

        SHA512

        33261972d61d25d69cf26f9064648bdef8324d5afd3b83ee68c23825e0e94bc15e36f35ba0f07ed27400cc3632dec6e636c7ce4d277ca523b35830c38f8c39cc

      • /data/user/0/com.thinkive.mobile.account_fz/databases/menusetting.db-journal

        Filesize

        8KB

        MD5

        418c7e1c4fd74c0ced849f009aff049f

        SHA1

        b1682b4829cf21507d4c2b68f8339c3620330738

        SHA256

        d3f70ee0668362f5593906847cbfe474bdd093adff336dbfea72cb755b0d1ba1

        SHA512

        d6360a88c78a2c4a36ec87a4ffc16eaaf725b6e46219163e9d3a19dbfc33fd8880d463ce4ae333b07780d2f232a961d1628f44544852565980b69758788bd20f

      • /data/user/0/com.thinkive.mobile.account_fz/databases/menusetting.db-journal

        Filesize

        12KB

        MD5

        42cf3a12e8a0cb29261ad43e053ffe0c

        SHA1

        fec880895f2be80247d930d11dc1eda04c9810e8

        SHA256

        12fe0ce47e3a637cd420b5a132b9eb5bb0c4537cf03f129c03eac85337eb60b0

        SHA512

        bc3d5afda65ce7bc13d4dd189ea154d2df468fbb993a28f8ddc5987cb2a216ed72879fe338d702b87acfea6aeea5d4fb4a3dd4a8ae513415f221e7791352bb72

      • /data/user/0/com.thinkive.mobile.account_fz/databases/menusetting.db-journal

        Filesize

        12KB

        MD5

        9e40086b5f12d58548eba0483ed57d1d

        SHA1

        e144fb72472bf357f61227ec13e63477745ad5a0

        SHA256

        38969062d7a8ea8104c19a337f4d0f960aced19f3cc17fb394287076a4ae2560

        SHA512

        23aca27ae12cc876bc3c8b04c0a593deca6557e0681aa19be3f2d83ca95403fa761e0a9dfa960d7451e162b0ef0220b34cb9df33acb6e0eb3b66f9aa1bc94318

      • /data/user/0/com.thinkive.mobile.account_fz/databases/menusetting.db-journal

        Filesize

        12KB

        MD5

        272c13a70221d13d9f1487d0f5d27752

        SHA1

        2e56d864a6d69c222ed917dfb383d5be7d80bd23

        SHA256

        8c8c6839d4838a1340b09f1044a6b03a88ac1b53423507e77740ed93b18b6ee3

        SHA512

        85d0c309655b732a00368e448d805216fc516464f40f62afb4ca021c3043e838c6d537ce3a1d933d4360575c57e9a22e4ac9fb5ccce6c740f19393565f617225

      • /data/user/0/com.thinkive.mobile.account_fz/databases/sharesdk.db

        Filesize

        12KB

        MD5

        171aedf968e17a2744d2585715606cb9

        SHA1

        bbeddeb3b89fcf809619c35b4a318a80e7d5b029

        SHA256

        d2ab452d9360848f46af866b870b5c6fc98230b09c72b89cb1a4b2778586678e

        SHA512

        78a0f517ee3d21c153dda6dbfec4187ebaee9d520d7b1b63f358bcb125d08aea53f26943907a56fdeba40161d9fc7e4fd63f9ae3154dd2ad887ba0162738285b

      • /data/user/0/com.thinkive.mobile.account_fz/databases/sharesdk.db-journal

        Filesize

        512B

        MD5

        7870af6ebe97794f9e0bb888307d1120

        SHA1

        dfa947fd9225b915ee4549a295d2b6391bea25c0

        SHA256

        778aebf65b89b26b193ca89aa62d0a01e270afaeaa53b74c3bd55edc08cfc17c

        SHA512

        4ac35a31c11aac847d01fc74ba7846f389dc9a2988e5cd4bdba52e4e03742e2b86d1920ead90b452fe41cffa79265936513bf87cbfcc2bedef4637fd8109579e

      • /data/user/0/com.thinkive.mobile.account_fz/databases/sharesdk.db-journal

        Filesize

        8KB

        MD5

        eb55ed718538672d3582b49c14d13370

        SHA1

        530d9321c6147a5acbadd33437d8f3750c5dacd7

        SHA256

        6ebec137d09986ba6f86a8d49aac7f413b00d7c33eabbfc3b5bb2d272e09a24f

        SHA512

        12605ee89c3ea760c169b21f9dfc3d9b24d56659783a379700e31af6a9a665fe736b943758c4375ee6656b2b417b81875adf960970eeeaf5216223395e6a41e9

      • /data/user/0/com.thinkive.mobile.account_fz/databases/sharesdk.db-journal

        Filesize

        8KB

        MD5

        47b8f757d2f47efee9bc9f9c4716ce81

        SHA1

        c1264266f6e6c531b1f37030173ce7b092047a75

        SHA256

        7461def54b7eb6e2607dfe91b588a27cf387a8cd832d20b89856e77308e93ef6

        SHA512

        ec133f8578c235f9259cb6b6fc8385d96b8b5ed0934e10e3711887183ee3fba2c40d88adf75023e339c8f29be5204926e72ed2230f828e9294134b8d0d0c9a4a

      • /data/user/0/com.thinkive.mobile.account_fz/databases/zxg.db

        Filesize

        20KB

        MD5

        eb489a934797c95eba8cce460b248227

        SHA1

        72b37b3f73965231d55b12598c3655a5e886d502

        SHA256

        f7519653f9697aecd799e648b4658af662ea226b7d5760d045c9c5eecc32cfce

        SHA512

        4a7fc1f9402348ac40664e7b78bd8534a6fc61ada3d267d0981b0882a0a3fc531c5bf26a189a23d281301cc8d3a698eaeb0aea602dfa515e4d570a91beb011bf

      • /data/user/0/com.thinkive.mobile.account_fz/databases/zxg.db-journal

        Filesize

        512B

        MD5

        569dd42db159b31a93f3c6e761ce5170

        SHA1

        915d12e9eb9cd9ecdb14ea60e024317f4fd48b03

        SHA256

        f93ffd4b52453d603933bca7cc39ec0ff484217eb0bc3f0d08f53ca8959942a1

        SHA512

        792b5a4a779556d88aeb63a17dd77358893ea7b14bc8bf1179b1f09ae70bf83c765024334615361d5cd6cd0abb651df3ef9e0de056b6e8c2c767397e743bbf1e

      • /data/user/0/com.thinkive.mobile.account_fz/databases/zxg.db-journal

        Filesize

        8KB

        MD5

        17d1c0b8b64f57ab630ba742f5856c94

        SHA1

        ae7ef92737c003827e59e7e2841f65247b54c5f1

        SHA256

        58612565e334e7da03600fe236669f259f090e121a795709bf09f32f67b4b4c1

        SHA512

        98a05f312a7df83dd1b646fe03d5222c57440ce89514eacd694f539e02831e1000b7dc89bf525f232a7f91f6d23228eab38fdaeac760a9817bbe3d24ecff839c

      • /data/user/0/com.thinkive.mobile.account_fz/databases/zxg.db-journal

        Filesize

        8KB

        MD5

        0f97d76c204b6ee6d1239901d6cc5019

        SHA1

        dfe275428a6a6ab969b5aa2e8d1795d0affdb57f

        SHA256

        dc3b7847e7907434cd0ee5308e1f81bc21106f0b0fe1b0c3fb0589108782117d

        SHA512

        a5593bb13eccce53d0e69b7d1914addf6d565af0648a6d86594e26a59669b1ee2a80e730d5246702599c4ef35f22c45f03c9a396554204c9713ffa3a83dc36c2

      • /data/user/0/com.thinkive.mobile.account_fz/databases/zxg_zxg_zxg123456.db

        Filesize

        20KB

        MD5

        45073798998c67b0b35f26ba75f6fa7a

        SHA1

        5d9f20dc8b4a68a642365429565cb00258777cd5

        SHA256

        9bf62ef8bf9b3a2c8204de7e41a4f6486be718016bbe420eeba8d3d867741a7f

        SHA512

        1cc21c676acded8ee99c26455e9e05634579ecc664ae4822c68639b992ecf045c8e08d84dd0d7651c8ff2d9e50302c3d422eea048a0194951c826074d23c9e19

      • /data/user/0/com.thinkive.mobile.account_fz/databases/zxg_zxg_zxg123456.db-journal

        Filesize

        512B

        MD5

        7d64f32cefa7a5df5f7049babcba05ba

        SHA1

        b0bbe9e0ecded4184ffab643d67b7375c958b00a

        SHA256

        0972b3fda2813b1f04198f16ffbf649534ab406eec4c57d49a4ed01b87cf3cfb

        SHA512

        d5581acfc6a330c67cc29c9d47ac4caf6021bd94d83c11624e15f22d5adc8f58836ca21132fac3490b0d81850f887e815c76dbd5d67ded9637ff91b6bd410a85

      • /data/user/0/com.thinkive.mobile.account_fz/databases/zxg_zxg_zxg123456.db-journal

        Filesize

        8KB

        MD5

        74e2d31a5799136b1566cab08a0337a9

        SHA1

        f7a89e75c27a21cc3dd4b8eae2afb995ca75b131

        SHA256

        dcf56d01bc5a372489be3d1015bc18f6a0817773ceb49d5efb470c4f80710ec7

        SHA512

        9e50ba0f8631c0e6f8d81d9026a8cace825eac167c2edc1b8a7217c0500ed822a9351866926036a377f1c1de0525dce222e05bfac228323849ab669b7a9392c0

      • /data/user/0/com.thinkive.mobile.account_fz/databases/zxg_zxg_zxg123456.db-journal

        Filesize

        8KB

        MD5

        06db83a10e076900153e8f90a200e2ac

        SHA1

        c8c38fa30d7e623c54eb47c2e8a71e842a475077

        SHA256

        6854f25f7821c70d4da3dbc6550378f4a62427a89a9621f4537a105aa10882cd

        SHA512

        6172e037bc663a0f01730092e29d6d332be928346c919a5f3d05e5132965cbf8f50435fc65ed95d26d7ce5022b5c41a04a9a6ad789b526b60bc61b85c09d79b3

      • /data/user/0/com.thinkive.mobile.account_fz/databases/zxg_zxg_zxg123456.db-journal

        Filesize

        12KB

        MD5

        85d5581efb3431d72e233ffe8bdbd91b

        SHA1

        bc5bd93a273a61fd315e04e39a48b24924a0c0d1

        SHA256

        5869c5481e0ad58353e0b680c2820ad515140e1bbb3c70ff9d8955024db277ce

        SHA512

        b76af4f35edd35bb5b8cb8a7e39177887d9706a01893b01216357dfd451ce746707ee0077fccca9f4643c770ce30a118941f284d66680a3c9c070cbc76e2e0ae

      • /data/user/0/com.thinkive.mobile.account_fz/databases/zxg_zxg_zxg123456.db-journal

        Filesize

        12KB

        MD5

        2781c6fab3dc5b628fe2563f03e3348b

        SHA1

        c10076610a5cc59fdc473809fc78deedf9131d42

        SHA256

        96e76e2e6e299b2722c64e96bb70f7f00eedf35ba6069e0bd88a312466dce878

        SHA512

        a02c275e4358433eb24a0669ca5a27264c3c64dda14297543576641e2c643932d198f29c555c92fdd4d77988b044cb91421adaaebd2216bb0cfdf1c88f9b9571

      • /data/user/0/com.thinkive.mobile.account_fz/databases/zxg_zxg_zxg123456.db-journal

        Filesize

        12KB

        MD5

        7e19038323ce89844693caaa2573069c

        SHA1

        a01dd5ee77b620278955ae9392866613581f4be1

        SHA256

        c2f3df8d9f8e868c6215a3ae93834434ca6a483bf619ac67bb31b4288eaab9e7

        SHA512

        e062b31b14e69c11e0593850bea502a1c885deb59a196bcfcf9f7c525554cc8362582dc3b51c7a4f6e6155a5f5a25989ceb9bdcbc8e1d229aad657d6b89e6e06

      • /data/user/0/com.thinkive.mobile.account_fz/files/gpcx20150702.db

        Filesize

        1.2MB

        MD5

        d0a88ae36b73fa8a527aa6d47ba51dbf

        SHA1

        0fdf8c1eccc70b6137bb526afe10335680b9d583

        SHA256

        3c1b3fced84d4b717decdb9df53f41b06753d6a21af85cec079a39409be4dc0a

        SHA512

        d9e0f56417c66adf3b8baa7c7984eb19d17e37a9fac8d58ade556762be5204d91b906eb249d3617c86650023dbc860094900c1b23c4572a0581c6208266f4888

      • /data/user/0/com.thinkive.mobile.account_fz/files/gpcx20150702.db

        Filesize

        12KB

        MD5

        ddea7ebe32083f281f03ecaab7df1bed

        SHA1

        3d39542f5f0862390c397fa0889346023bb7e32f

        SHA256

        d5b438fcb9ffe8b0d18ff31bbd2da4d9ff9c99b8230cdb89d4069ad5ad9e91a2

        SHA512

        915f54a4271c5375b7ffe8c38318f66c56f6f6aa7a88ef5a1f86c1bce9b439f50083137f2e3d8a2720805e7ebf76a9e3d24c4b40dbc240613462f883617541cb

      • /data/user/0/com.thinkive.mobile.account_fz/files/gpcx20150702.db-journal

        Filesize

        8KB

        MD5

        1bc73b1c1c4410cea39540279eb0f999

        SHA1

        7f9c313e141cb772c3c4d2617b96a36f4e27195f

        SHA256

        c2c400d3fe1c3bc402b55b40e91e6ee7148390450470a695e02faffa035e94c7

        SHA512

        f1e5b366b70e402910b292d2d222d224ebd0db7b82909b8372b80a1867efa06dd4c584a52f3e4cfa084851f196d0ce83ed3ace6218591b1ff24ae0fc6a1df5b3