Analysis

  • max time kernel
    2605592s
  • max time network
    164s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    23/12/2023, 15:39

General

  • Target

    4038ca167634ebdf7c573587f5a6b9aebdcc4d1a740e021c82da8a5157f045f9.apk

  • Size

    5.7MB

  • MD5

    792807ebebb2d6624be71136f1af9379

  • SHA1

    634577b9b467c5b5fa3d869d48092d01ba460104

  • SHA256

    4038ca167634ebdf7c573587f5a6b9aebdcc4d1a740e021c82da8a5157f045f9

  • SHA512

    468ae05630aaec7a6e109231de14d2dda0200039fb065bb615bc6fe78076726ec657b6313362f22386f8b0f824012f9fbaea7c0915a4971f5b2240974d4021a0

  • SSDEEP

    98304:f6eX9BbfGz6DUWiiig2ASBv+RCIJZwp/3Bu785RNZCgW4NibfB9fi8qDYXfg:n9tGz6DHgg2tBGRCAZK/xcG9VNibd5o

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.

Processes

  • com.app51.qbaby
    1⤵
      PID:4988
    • com.app51.qbaby:push
      1⤵
        PID:5035

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/data/com.app51.qbaby/files/.um/um_cache_1703412574856.env

        Filesize

        603B

        MD5

        2709450d228b0dd93a9b177073fef6f7

        SHA1

        bda60ded9e68eb2540569b2164da410d1adc7723

        SHA256

        c0816fdea6b7646d4952da7e5366d796e9a5f89d9c9e5a0f300333c9071f1ac8

        SHA512

        c9a42507ccc08d5a875ae42ab3eeb56c4092548db8031ddb5d93d9ca9d98066cab36693cbc98a95777ff4a3eed891e940b036d58d9cea68673ff8add6ed5bcce

      • /data/data/com.app51.qbaby/files/umeng_it.cache

        Filesize

        245B

        MD5

        5c4225c4ba9b68ea20269ab7ba3361d0

        SHA1

        6f76d7e30b29a4cc13fcedd6b95854f17d4230aa

        SHA256

        6da2cc36718ff63326f4d5e500fe1c721a34e9c7284307688d92329b583e8359

        SHA512

        e5a4b9927f3111b8b29c8a35aac7557557a201c5793a3491c87d6cc0a748469b791e82a85339f8e1df3752989c0fc666a0bf7f14ffe048f8207f6c4f6c0a03d2

      • /storage/emulated/0/.DataStorage/ContextData.xml

        Filesize

        111B

        MD5

        de78ce505ed8167c594808baac1cebfc

        SHA1

        4fc73eadcf722b3ace8f34740928912d13c8e3e6

        SHA256

        85df14d1430ecf9fc917a7ea7f2792ce57875e56642c0ae07339dd641fcbeb1b

        SHA512

        2c3f98eb9e9e9581a840a1b815f51044cdf9608bde45661e7ff8b9d5d7ba19aeb639a02bd5a9523760a1f069cee0c398077925a5ec7b6f5dc476b74b8e5686a7

      • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

        Filesize

        65B

        MD5

        9781ca003f10f8d0c9c1945b63fdca7f

        SHA1

        4156cf5dc8d71dbab734d25e5e1598b37a5456f4

        SHA256

        3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

        SHA512

        25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

      • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

        Filesize

        245B

        MD5

        fe83d8ed62ce28f03ed25561994c47d2

        SHA1

        4f5719469342847f92e2f2487cad3af9e9d1dfdd

        SHA256

        bb71c748eefa8097fb43493e436542c904c1cab5eccfab0a6a80481e3451e1f0

        SHA512

        66f6f866496c8d9217ce3618cd71833579374a4a80b89df48793b088361fd59de5225c189f51475ac7c5fb1c31afbaa8731c0835c77dc1730ce18e1e6941a508

      • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

        Filesize

        408B

        MD5

        9663ce632a9111b11a304ca01d8e389c

        SHA1

        2f196632261ab2cf1e28d5475d6394c54338d77a

        SHA256

        0626c0929505586ae75a914ba9c14add9488d8e2576ec642db06de4c777c5c96

        SHA512

        6a1cc114924bbe66208e45d0375975f2d84340bebad39f2c261ddbecb786acc0dd5fb176ee348841923d8684699f8f9855e6e85698712d100f31f47e4a9c884a