Analysis

  • max time kernel
    2702933s
  • max time network
    167s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23/12/2023, 14:55

General

  • Target

    366349c9dc2b27e8d705e4a8edafd27c16348288bacd486da9314e0e5337a569.apk

  • Size

    12.2MB

  • MD5

    0182267bc4f185b6bef50af989211ce6

  • SHA1

    47cad25be4f5ebcac3a4255bd66b2f0a612d7259

  • SHA256

    366349c9dc2b27e8d705e4a8edafd27c16348288bacd486da9314e0e5337a569

  • SHA512

    86fdc7d4cea83d215b590afa6178e929c6314c3426f7e3bd18b043b8aeb79dc231289545c36f723c797cd7e7cb6b6c6ffc156f663f852eb9e7573015f4d02035

  • SSDEEP

    196608:B6VDK/pKj1DRRj56pTuOFtAyvFwAwaI2urSR6RorcthAFk/J6KXL//FgB9oTA14A:IxM+/Mqyt7RILKsenk/XnFgB9/14A

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.dkk.bldkb
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4478

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.dkk.bldkb/databases/cc/cc.db

    Filesize

    36KB

    MD5

    86752a4be6564d8370f2f0e403995003

    SHA1

    29f7d50675f6e59f3b808eb6dcc8619384412115

    SHA256

    50484dcdc6b9c2801773018386a8143a52a5153eb2eeeaf5be8bbe46a49ca90c

    SHA512

    79c9435c1e0d41a3f97784be3e5a3cd8c0bd2d32ecdf326808bacb00c76d876d0447617d6e72ef04cd4b996c92eda4eb7bb200987ae7928ce2e0e7c8e807a5ec

  • /data/data/com.dkk.bldkb/databases/cc/cc.db

    Filesize

    36KB

    MD5

    52aab6fbefd146b11cf232b5021f83d0

    SHA1

    d0dcf2f763f097be4f5eccc1e93fac6a8e7f8737

    SHA256

    aaf697bfa6b0bb1ed6f54be6407fb619e61ea7d39f7b3868690e348e9e56a332

    SHA512

    6cfe504b1232093515bd2f06e0f58744cd05f0195f52c0fa9594557b25ad90f7b33b2df6ada080c38a5635296d51453a86c90088c10f025285256a1b2c11b77d

  • /data/data/com.dkk.bldkb/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    4c48edcccc162cbfff8b081c7fa78a52

    SHA1

    aaf2d34b3660a7da0c87e7678942e9f1ce708975

    SHA256

    2a25a665b1987661a7f77d5a244218a629aeb59701865428f30960f5f9cae228

    SHA512

    5a83e8a6344d46396ffa49412a99814d84e8c0a0a04edc457e7f3711963879b22b67121c95a7035ea5e202557e9196e94206618cb67e54fda93efa343bd64d1a

  • /data/data/com.dkk.bldkb/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    3db357e2e373e7495b3c9eaa502a30ee

    SHA1

    01ab438efa1e40efc87fe666ae8f8c2eb213983c

    SHA256

    3588ea3cfbc2f4c4f7e372a779569fa7eb53a613d1cdc08ffa2442eec2e94334

    SHA512

    c2a70a9f439d1a6261a80888610261ae44643162022d86c9faa5321470bd21c40dad25a0bfde44531da2f7ba5f1d54700463cfee86346a16951c1950c9e92e8a

  • /data/data/com.dkk.bldkb/databases/cc/cc.db-journal

    Filesize

    12KB

    MD5

    2b323bac63d5e112a4618034fb2c9def

    SHA1

    6326f4964cf0fca5afb5636e02e68bd95a0036ac

    SHA256

    6afebfb89c9c93a8a45e16f38f1c9ec2da2f70536c90ea43c8d9c2991cc3cf82

    SHA512

    ddbc90993329b9eb2fb02ae1128421b27b4ef693d7e5668af8f0f6665f64b6e969dc42c970cfab9e63876eee66dd362b4c743545cc64c8e01c1cf2d3b3845e1f

  • /data/data/com.dkk.bldkb/databases/cc/cc.db-journal

    Filesize

    512B

    MD5

    79ee06ff97ca6d0211ca4457ffcd2ff1

    SHA1

    5d4e12c4944a76a61fee453550f14a9a1e2ae4f2

    SHA256

    a2726c8db4a517e175bdfe4635c609d080addc195e0ea2ed702921292e34e4a2

    SHA512

    30663998a73aa34166320291abcf87ccc65718dfd07ba1b9b42e97827f9ba7571ca74fe10949cf023e7b97bdbfc9ed429495d737b5ab9c8aef250788940c0d34

  • /data/data/com.dkk.bldkb/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    446a847236ac5659da3830436f39b791

    SHA1

    094223e37fefaa58fd919045b3f8fe2ec7a83b7b

    SHA256

    dda1295c0276042d702757ab4ef5245d3edaab7a7d787e9c4fd9d3af18523d63

    SHA512

    f3d1b2c88ae182943d8461069338cef992056404b083729b71005dbb2193bad904a77dde6321afc80de084bd27550f67790721568179e675a2fff150bf203596

  • /data/data/com.dkk.bldkb/databases/cc/cc.db-journal

    Filesize

    8KB

    MD5

    7ddb821091cd1239ced4209675047821

    SHA1

    dfa27dd9933ffd6472ff621d8a303e8fccae86dc

    SHA256

    6ccda0179013210ccfcb70065d5fe31051e518f1495779c3684442fe541da289

    SHA512

    fc08e7c32706c1f19913305f20869dadd95b82c3cd631b5d69421674b172ff76e9ec80e5614ba96cf5ea4a7ea38f2763879491b99c839428fb43c33a60f342d2

  • /data/data/com.dkk.bldkb/databases/ua.db

    Filesize

    32KB

    MD5

    4cac7d31fb94d5c9581893537f64c5ed

    SHA1

    96bef3288546196ac3058b5eeddbe9da1d999fe5

    SHA256

    d1b111041f8aab3269f3da846b2ea199498d99f6905174a9d641f0faedca41c5

    SHA512

    0ab95e51a640148ac007d47afd5b9fd03ae5a3b9053e5e19a4f0b8089e17e41e311790ee9fe486b6752926799577bee041ed67b64d8772794e9d2329a96ce747

  • /data/data/com.dkk.bldkb/databases/ua.db

    Filesize

    16KB

    MD5

    7f9e488faddec135df3d3f019617cab1

    SHA1

    62da758f22a6f1803170b6d1e85786bad6c8a4ed

    SHA256

    dc81e7f7735145c1e14e5b223d7d5e6a1d08d30c1e56d4ad3bd91a8366427f70

    SHA512

    ac97ec490edaa37705d4c193c95f1d7e4225cf2b689d5333f490e9208e1109c081b9fd5dec9e44643e285b01990f01bb05efdd32699d43ab3940e74489416b75

  • /data/data/com.dkk.bldkb/databases/ua.db

    Filesize

    16KB

    MD5

    fbc3474be504796224bbcfda3fb4c098

    SHA1

    8d01c99d7d54dce398f5028ed302c8cd214e76cb

    SHA256

    882a1c40fb37a99a901a4f03793febf614f637a4c465e0b1e350d1673f781a11

    SHA512

    be9b82968b6b7c62d1308c6bd7c4918ea3e37c9073661f08cb03b93fd834f18b4b50041ed49731f286e6ef722bff6df5377106666bafbe4755630ccce9a8bbaf

  • /data/data/com.dkk.bldkb/databases/ua.db

    Filesize

    32KB

    MD5

    75ba3d411218f0851675ae5bc860883e

    SHA1

    6152d1cba1f4ae4d9355df15901844baf3511263

    SHA256

    ceca1b3a4ba9bb0ae217a1e1086940045e763a1fb88a615997fbc7fc5ab2ed74

    SHA512

    2db76c8114799dd4874e7331021e84df2b2da7d25702cf89fdd4519131b33721951bf2dee37bd55f0cd3933963dd9e43a9ad9c7acf732b5290bf26bf3d4b1579

  • /data/data/com.dkk.bldkb/databases/ua.db-journal

    Filesize

    8KB

    MD5

    137f2516637dd87f50fbaf2178889cd5

    SHA1

    acd41617a69527d0d64fbcaf810b14c5f7fb0c36

    SHA256

    e89259f021548196adf4cdf6b0a81a4783370fae3a0a96d04691dafafd362a9f

    SHA512

    bfa33ec58195910bef1a9d9f0b21c6046c70640662de15697b30cd7ebae199d4cf875da1d5437c2aa3e173a7ebce53e879817489a4b491aa01f7d0743dcd8b7d

  • /data/data/com.dkk.bldkb/databases/ua.db-journal

    Filesize

    16KB

    MD5

    bf30aa87ffb49c56e0d80f022faee0f8

    SHA1

    db2261e8756f7fbb3b26b28e83d00c9845dba133

    SHA256

    c997d6301fc2d2d366f94d6c15394fdc5b4d51c5048679e6e9d9163c84c537c8

    SHA512

    8b54698d2ca783c3ffff0ea9e1d811858f933e48d9ccea5fabdcb6b5785ba2d384b52ae6f633064022bfc26a2feedff1a9792116c3b2ad13787295c50478456d

  • /data/data/com.dkk.bldkb/databases/ua.db-journal

    Filesize

    12KB

    MD5

    393d88727342d0b3414bca55f09bbead

    SHA1

    7e53d319f5426ba9e7ccc908034437273373cde1

    SHA256

    d7f36c30508c8ec66c379eba1f2e16a2e7858781c357ec7d929700d70acf7bcb

    SHA512

    6418562e598f59f0d4ea126025220850afb41b334dd3963bcf401e56f708e74d9d9993a1a22c5319ddb00b735d29a37af78e26a83eb7782fe074baf471d2db90

  • /data/data/com.dkk.bldkb/databases/ua.db-journal

    Filesize

    8KB

    MD5

    0737d78823993b2ec033d8650776d481

    SHA1

    e44a2332ee0ac0984e804511d975267c4d8e4981

    SHA256

    d478cf58a14a249e62e9d5946d708aa48c7db47c402d9f3710a11e2a2b6e62be

    SHA512

    0b7416f425ec7153672e829ba65ee47b9ddcf013c1d326f833b8c5a5a049d55b00274f83d6c3a8df15c970420ed3954e91b42a7f962246a76048e32000932dd6

  • /data/data/com.dkk.bldkb/databases/ua.db-journal

    Filesize

    512B

    MD5

    8023b4b0da205000ba6df80bc230785f

    SHA1

    95b4e6aa824df8be442dc6e83ae45333d238cd6e

    SHA256

    2b2b1714bd39b72fdc3f64cf4d01ea4c18fa0dd9a802ac1cbb2a2d7ab8dcfb9a

    SHA512

    3085dd9ff4786983da71009d9bf268b0202f639165e992154b3120c72b93b47a89c70574b82e763b92f900e2b1fef1c7142de3c697ca421664de9f97d21bc30e

  • /data/data/com.dkk.bldkb/databases/ua.db-journal

    Filesize

    8KB

    MD5

    de1624e63917233d02f0e657e252ed6f

    SHA1

    fbf174daa3f8357512e3fcb59dc0799769e6e1c9

    SHA256

    6864443098e0ae2803e906a99490225d1b96c15c529afebc81dcdd45a5ff447d

    SHA512

    781cbdb6a09bf35adf76ff7bbe7a18c29a2babfb9ef2b2bc0219c8e5a52779532449f29422ad3936c0994a78716194a3a8cb578c9730178ad8800f626dd4c036

  • /data/user/0/com.dkk.bldkb/cache/Analysis/avoscloud-analysis

    Filesize

    408B

    MD5

    9aaf5192b816847a7fbcdbcd8eddfa7a

    SHA1

    e23e3f4e1536699524f928f0e9674f0dbb1db90c

    SHA256

    d02ae22ec733660f8123231083c0a883104303b73fa708c8e1c74c448cae2e5c

    SHA512

    1b1829781cd7b86b99e9d362450aeadc0f3297c1d4be0d9bf4c90891e2a3985c91ff1313d94226b6df8899ec57c71504d6f3f56028257006daecfe150d5b8875

  • /data/user/0/com.dkk.bldkb/cache/Analysis/avoscloud-analysis

    Filesize

    408B

    MD5

    6c3b6b90af498d4f43d1ad16a62b4025

    SHA1

    d5599eb60c0d9ae73853e8395bb4973f87b4f5ad

    SHA256

    53d263b9af457a337adc15574b10131cfb99fd7edd59591156a24636d6e1fc8b

    SHA512

    c923115282b3509f6eec97d032165fd94eca8704a7b349d8cfb943180232d00f0cfe2c49bb71e8ad250f5d2a2aa52615f3221062bd49199c439b5095c6ecfa03

  • /data/user/0/com.dkk.bldkb/cache/Analysis/avoscloud-analysis

    Filesize

    636B

    MD5

    7c8d5ee2aedf7a10ffe31a0ba162d26b

    SHA1

    44b7c45bf11a8c5b93904ef31cfb7a4ea14b740e

    SHA256

    ec30945e2a00ab346e2d7df525e585fec4c745914bc05ee3e2b70e7b35d968cb

    SHA512

    b4981b105ec1088e4e2ae9481fc0da0aa65fda7ba7aaf305094b1a6a14d8e761e9f85662548828c0f918e297895a5719cdd8147fbbc70b98ac9aff6f341e0d61

  • /data/user/0/com.dkk.bldkb/cache/Analysis/avoscloud-analysis

    Filesize

    856B

    MD5

    d0d0afe361957a32863db128ecfa8fd8

    SHA1

    48fed4450d1dd93fae1b4d16969ba5241a192316

    SHA256

    718e1b1c2f67c14eb613f3f77bd5b260fce6abf1873a2f9500dd7aabd17c61b7

    SHA512

    8a0d55f11b47ecee2f0929a46f9dcad336ee22baa7786903c3fd371945d3651f1cf4664de97d1cfc2e9653c65bbd60a3fe9158682ff7259ee614390083ec11c5

  • /data/user/0/com.dkk.bldkb/cache/CommandCache/3d0135a2145967ca1a6481ba15443a7d

    Filesize

    1KB

    MD5

    f8f4687a5bb1736f531e9b88054d6c59

    SHA1

    5df112ad8fc6a508298dd6fb11cd9323ef1946a6

    SHA256

    a07981bad6f5285ceb3fd89e4beed52884890cf17050f95d11c346137e6555e2

    SHA512

    5a5898e433a220128d3ac798763518520f7c21a04b82f52055ef4e09165a9b25c2784b31cc378077c00df0e9f563ae4ddb9ffa786c6b7a17414e65c27b7f3146

  • /data/user/0/com.dkk.bldkb/files/.um/um_cache_1703509959849.env

    Filesize

    1KB

    MD5

    13ca71d603d0abd8260a00bc861b4856

    SHA1

    7803bfc62e4f32e45c67e0a0d2dcb7adff8845ee

    SHA256

    e456bd614cfba4dbf2002c843d3debc664d90c38455444d9124515fd438d00ca

    SHA512

    ff3aabe8bd64260444e630991d204df766f4715f55c07e31a5630a9a56d54c5fa65a66068c86bc97206a6d80e0260fd6dbacb968aaa36429a8f7463e079c8b9f

  • /data/user/0/com.dkk.bldkb/files/.umeng/exchangeIdentity.json

    Filesize

    162B

    MD5

    3fa24ee5c260aac59dc0ff629c2887d9

    SHA1

    3417041a45dedb72b6fd9a66a82c8cd07114ec8c

    SHA256

    12eb6fe22a41b4238b8252b8375301dd651e6f6d8702e80e5307cbb815448cbf

    SHA512

    bca060d74aece548df625bf7804d296c7ee9ef029e4f77ae5a678e8d317d528dd94f8b5570b481f1a990c3b3c46bcadd3726589ea1c46390c7384d13c7ab9ae9

  • /data/user/0/com.dkk.bldkb/files/exid.dat

    Filesize

    59B

    MD5

    16297d6abecf98d7e71a73678e3a9b27

    SHA1

    32eeef981735047d3518a6795bad02e602b137e7

    SHA256

    bea8222c6135bac2f2b187eb61f53293769305334f3b466527a58025493198a3

    SHA512

    d43b59b8e5b65640c6446dc5e87f0eacd17c73fe3ece24d19ec5250e6bda16b7dd530889183f29e181baac513e6470c0d897b13b5c489968f6150106ff01a208

  • /data/user/0/com.dkk.bldkb/files/umeng_it.cache

    Filesize

    350B

    MD5

    e9721c7536734f1c85a962189afa7289

    SHA1

    98c3e98704234d725ebecf93dcc5be98edb62131

    SHA256

    c73f160a75e4f8a8552a0f8cd4a545d42d5f35a3e69908913880f3237eea7d37

    SHA512

    4c568f5a4255939f61983b5641e5faf22ae2b8bad556d0f49ab5f0a75063a4e7adbfcd6e3627da2fad79f9c92c37a4bc49830565f9b1eb0b087c9219cb067c94