Analysis

  • max time kernel
    2871205s
  • max time network
    160s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 15:08

General

  • Target

    3970bdd5b28357db03c2ad4b4e2baad1bb0e7c502947dde5a5018dcdbffce1c1.apk

  • Size

    15.6MB

  • MD5

    c4f68006ee772cc2b14b49e8916d7efc

  • SHA1

    d4580d48834f5be46fb1991fb89bb250e8a273d5

  • SHA256

    3970bdd5b28357db03c2ad4b4e2baad1bb0e7c502947dde5a5018dcdbffce1c1

  • SHA512

    8d123465c19d6f4bc2e08af89436ffa581576be6e2b593c0681ccab582df5901a33500c7d17b447332012fd3b76ed78fda0bd01837cb90880168c89e4ad9da13

  • SSDEEP

    393216:+AEzLOfO+JC44LRp4SwoSiJQnZBevvUmuD:+mftSLRpXkiGZ6qD

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Reads information about phone network operator.

Processes

  • com.yizhe_temai
    1⤵
      PID:4265
    • com.yizhe_temai:TcmsService
      1⤵
      • Requests cell location
      PID:4321

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • /data/data/com.yizhe_temai/files/WXOPENIM/openim/12-27_11_55_com.yizhe_temai_TcmsService_4321

            Filesize

            5KB

            MD5

            32b3a2432d24fe72446ca99b26f79573

            SHA1

            f339f6ea9a77f8646530cbd7cc950236169caf9b

            SHA256

            1e0fd700e7f48c809dec69b2c6f8d3229fed77a2c9357efeb92dd2551b7f63e2

            SHA512

            45409fc3a870e563f3e4ae7c4fa40c629d90e71f4d2a37b74eed9cb9e6afd853eba0d4d0bbfe06ab3e5549aaf34f3643748d07438b5f6d9d39b4c98eee525803

          • /data/data/com.yizhe_temai/files/xlog2023-12-27.txt

            Filesize

            37B

            MD5

            065189a6124ea1f258bbbed194bca02d

            SHA1

            189ca5a3a771766b6295cfec0d4de991d097a3a8

            SHA256

            be917ce3285ba1405dadf148a48765d7bab2b969d6e652ec573ed0b8defdeff6

            SHA512

            5e531a6139b0383c2d7631677779a54e5abe755267a17e9894a82354141c92165c48fca04febd5bd269f619d851fcb8df3d626b3ee72909e263c6b3271caf574

          • /data/data/com.yizhe_temai/files/xlog2023-12-27.txt

            Filesize

            37B

            MD5

            1814fe7a842ca5e3baa0ae00ed1cab8f

            SHA1

            6a837c600b0939749f8746fb960f6c9416eb201b

            SHA256

            5fecd9fef75d93cade519466ac996d89ff44464bd4c5b71aac39a4f145ae08a7

            SHA512

            340ed14ed713963c75a6d047648ecf3a7d0bdee7417c45da14a2e0ace63b1e48adc876cb5a3eb5dcbc646345c1ca31688f910dd55fab52935bd45561721ddbc0

          • /data/data/com.yizhe_temai/files/xlog2023-12-27.txt

            Filesize

            56B

            MD5

            feff348661b0ba9e6fc667827d0a1042

            SHA1

            c0a695919b507ca334a5b440d3f68a493c13e83d

            SHA256

            08dfd14c762dc85564190196da5c806a856602999e1456294676a00d1b0362a9

            SHA512

            6d178deba5ff981810f19632cf1b63f2f13c75b361571d48aabf4bedce0f308d0bd4fa4739dc9c54477aabfc8c7e2252a7b9ff8c47e4837f3a9fa4d755659b24

          • /data/data/com.yizhe_temai/files/xlog2023-12-27.txt

            Filesize

            68B

            MD5

            d008289917d72e3d7aa3a33b56c57ae2

            SHA1

            8319c6cc4f2cd5c6850e9e37def8511e3e9886aa

            SHA256

            eecaffdfdc5bbac25e66351245be5150cc3c552c938b0763377fc0f9b944c882

            SHA512

            4650ea99cffa493f464ba760bae106f11976c41202a30049c9a8c8c14c337adfc8d27586541f7e9b6d4438fbff80ed9f5245b4963c059d37085f6473cd093850

          • /data/data/com.yizhe_temai/files/xlog2023-12-27.txt

            Filesize

            44B

            MD5

            a7d92e21146e3978c90cd75197c11536

            SHA1

            b64514bc84d071c1b515054c8211c93246125401

            SHA256

            d6597cf064c3d230d711b387364bdfd593b836ed17ec4c92493e26ebdab70000

            SHA512

            ead3b110ed9ef86dff561405d002c514210176eac6f238f934ffcd3e9ee3a8b3cb7a3dd8b2853c29cc4511d7bd82981b8319fe824ee2f73aac2b705d1ec1b1f4

          • /data/data/com.yizhe_temai/files/xlog2023-12-27.txt

            Filesize

            42B

            MD5

            ae3c6c2eae1dec715432334ed11cb332

            SHA1

            62294a4a62b2c9d16519144f7d5e84e87c39549b

            SHA256

            277c74dfa9ad6c0b635d00c1d2edc3940371979e66fcc3c2f0920045b24cdfce

            SHA512

            97bd60c25577dea4cbc98c31b4bd5eebb7fe0010a67a530c2a744bbb354dbb7c80924b1b4786063a2bb01acbd6c33a96e60671f4d7b19a903ada3922876a6cb9

          • /data/data/com.yizhe_temai/files/xlog2023-12-27.txt

            Filesize

            36B

            MD5

            d8d7e04e6ea664bdc9575fce51a16bc7

            SHA1

            1fb7b2f936bf53e9279a9b4accf1cd0cef5b5394

            SHA256

            e1667314c37dd0bc0ad9a5c6d388bfc6cde2921d7e7ce0f7589f193bc13648c7

            SHA512

            f0fb29539d558e01ba6994c80a881d3700f3d9ef01e9be0fb211b98ae15b04dc424b2ec582952ccf413b80f423126a37be3060d6818be61f57657e7163367c88

          • /data/data/com.yizhe_temai/files/xlog2023-12-27.txt

            Filesize

            75B

            MD5

            5316179404a0ce7e4a20c57080f88dc3

            SHA1

            e32951f5f8bd5cd3d2197b8a7f52fd1f4ae44198

            SHA256

            a1ccb337a465f3e6bf9e355d96249366770846d390c64c5ef009687a2f4aa701

            SHA512

            ed3b0106fbf87e4496e4ecc5c176909f491fdfae4446e4f3961015ada074dc113472b0cd7a4d3458c566c75d0c834a97e70d229441d76e6cc4b01085db314499

          • /storage/emulated/0/.DataStorage/ContextData.xml

            Filesize

            111B

            MD5

            86fa1f238b4a96aac87f4d52b57e1834

            SHA1

            0fd66a538f42f7e2c3786136f71b004c177f66eb

            SHA256

            2eb54d74a88efbb46888f93cd110a3733b4f11df57fe7ad99380ef98ade55dae

            SHA512

            5d3117598c36a91b7b2d8d1e13d6399be9ed5967b910f354b1f4a3d5d22ed73bc8f90b6cbadf025c8bb52122fd6eabf0a386b65424cb91e30dd3e51bedb9c4ba

          • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

            Filesize

            65B

            MD5

            9781ca003f10f8d0c9c1945b63fdca7f

            SHA1

            4156cf5dc8d71dbab734d25e5e1598b37a5456f4

            SHA256

            3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

            SHA512

            25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

          • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

            Filesize

            111B

            MD5

            2914aa1bd8dbc86cae91d34272820ead

            SHA1

            c4e2f5f7e3c9d31535415146a844f5575e8074cb

            SHA256

            3d8feeda3bf2d25e8426b1cf67bd510ced6a18a96450f2b8e3654640a10dd53a

            SHA512

            69f6d7e59004aa85c5073ea68fb02fb96698e7bb1d937b89a280f281d3726564ddda8de14a9dcbf4d8c2aea9da1f8973c5e00e091219000653dfa8deb214bcc7

          • /storage/emulated/0/com.yizhe_temai/WXOPENIM/tcmslog/userTrack/2_20231227_r

            Filesize

            112B

            MD5

            d2a935d6193848abfe0d92b5154e63d7

            SHA1

            e8b8230048b6bbd74c0ff60a46f8b4b2a2b3e8c6

            SHA256

            36c520fe5a15014782e459ac8da5a3da455cb7756e334cc117a162e2b600222a

            SHA512

            dc3dd44ebb51a66a5ce647a4beaa6069c5266782c7f73624ee06993f2e5a8cf078dc95b9a5b005a91503909f78fe0a4395078b2f4fa956185a582d97b920b700