Analysis

  • max time kernel
    2875048s
  • max time network
    157s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 15:11

General

  • Target

    3a535281c0be3bf8c32dd2b6e658b53b1bbedb81e6dbad997b9b606c09a1695e.apk

  • Size

    4.1MB

  • MD5

    ae3c61143659cea3c97fefc06d789f9e

  • SHA1

    be9ba0e167c830454fdf0403a4e27417ac7c9935

  • SHA256

    3a535281c0be3bf8c32dd2b6e658b53b1bbedb81e6dbad997b9b606c09a1695e

  • SHA512

    e0b8a2a755f080be02ceb9c2f3a27e46a1a7ac4ff99491f5d094922b92aa4fd712ceaa2d9bf148cd32568a6a7ca883094fa727cb94c85e9af6413c25081a6e49

  • SSDEEP

    98304:cMjQnSHjhWEC22GBqTWhs1XW/++WysetrZ+LI+rdOmU:cMjQSNWECnCzUk+PyhCFrdRU

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Listens for changes in the sensor environment (might be used to detect emulation) 1 IoCs
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.urye.eazy
    1⤵
    • Listens for changes in the sensor environment (might be used to detect emulation)
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4260

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.urye.eazy/app_td-cache/tdandroidgame

          Filesize

          466B

          MD5

          125006eaae234e5b293569d663750739

          SHA1

          9e978400992f88c2d66efe716d3f95602d668bd3

          SHA256

          24e78286ae0f3c432fb150ecf761796a6b55d93a632b2739f3242cbfa21e5bc4

          SHA512

          67815ba4632e94275c9d44b5a192b00aa72416ef525cb130de37d35090d40db59dc3c058ceb175eb7fd39ebe4f801e25676308018816eb286bee52e71a348e5e

        • /data/data/com.urye.eazy/databases/.ua/ua.db

          Filesize

          32KB

          MD5

          d604a3bf1f8d992cc320ea5b1f7609bd

          SHA1

          247f88df0b55c7d523ea5398637711a0e4a483a4

          SHA256

          329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17

          SHA512

          67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

        • /data/data/com.urye.eazy/databases/.ua/ua.db-journal

          Filesize

          512B

          MD5

          c308f1466801a0e05e76b398ae1f9ec2

          SHA1

          d2c7570f12243ec6c6502b0a4ed0d4a87b48a488

          SHA256

          13994465549debfe26818725e3434da98688055d4477f041d8eba47ca98864fb

          SHA512

          9d0d6299318ef00b498ab59235c60699b051ec9adff5c3501e595784312222dd2950127bfd34f23149b9c240215dfaab97f8b894c27963bc1b1cab6e2f08154a

        • /data/data/com.urye.eazy/databases/.ua/ua.db-wal

          Filesize

          8KB

          MD5

          7f5d329a735aeaaa0cf28c8ad0dcfef7

          SHA1

          f356230a90f87206ae8e25c1798264ca22eea3d5

          SHA256

          65de551a7bb6155ec20e13e3e88474db411c28aa98b647c8e5ce0e93566f24ad

          SHA512

          8634657994bd93ec0efa58e5360b86f6dfe92eee23a2cac6558e8b3702f62034e30beb88b770b520436a1c81594400e4cbff1c8b9f4bc7eae833171dec693d27

        • /data/data/com.urye.eazy/databases/cc/cc.db-journal

          Filesize

          512B

          MD5

          d68b6bb8409aaddcb226511977a159e2

          SHA1

          5e94806e786e8776ca9e4adad1eb9b3bc6f15835

          SHA256

          42b24b94693f5c9bfc83138053e62d93507f6472fce0107d47ff3cf051f6e669

          SHA512

          d9d519a2cc21cbe7d65af74b37215fa4987fb5a02de1661c10faa784f3d3282bdb151eca19c6acb7acd05d9037264541e16104987835443ecad2fc9650a117d6

        • /data/data/com.urye.eazy/databases/cc/cc.db-wal

          Filesize

          16KB

          MD5

          080eb3764325bd48f1c73cbc743d93a3

          SHA1

          089203823acbfd8b6fd3e168f8da24feea8a6c41

          SHA256

          eaf8ae498acba1af4978c2aaada127a13822a5c3a5cf998ae7d34c04dbefe929

          SHA512

          96c19f91975aabb7f7f4e5624deb6a9ba41dbfe33fae5dc028e55daf9ad7799774cbe0d7acc56d0b7a3b380522ff4ad1fb3eccf79fb1f829cdd720b3bc0e4748

        • /data/data/com.urye.eazy/databases/cc/cc.db-wal

          Filesize

          8KB

          MD5

          ec7b9d24ecaa5ea1d373564e4ea49c3a

          SHA1

          e746c6a141d587170df33dddd30c59905139b4d1

          SHA256

          c346514cfdf1a1f899de41aa40e9ea7a766ffc3fb736913d202bcaa5bc3ca690

          SHA512

          6aafeaa204ac329af354a6cb02879787663eec1326e6f19111a1a855f15cdded7aed3ab5fdd476eaa60298ef38873f3af518ce261b1f8e74e53700fe6f1e403b

        • /data/data/com.urye.eazy/databases/cj_register

          Filesize

          16KB

          MD5

          ccb7a941bf5f1df0e2171fb24a55dc63

          SHA1

          0a9a8a5ae71f384f8ccd617fa154774c7998b217

          SHA256

          48d920c119f421c48352222190964e3c39591fa11434cf7c857396a21834cef9

          SHA512

          e3a4a9c7360cb8ab363fe6c3d9d92bc57177dd9d4de2f07e4975328111306a8eea4c844d83ee6180e04153777f9b4e6bc88dee52bd45a036016f3ce60dde8714

        • /data/data/com.urye.eazy/databases/cj_register

          Filesize

          16KB

          MD5

          f621297e7552367f216cbdf76c34067a

          SHA1

          3285e69c4ca0b1f700f22b1a9ffd07683a3f1e54

          SHA256

          7113308126d4c93e13b6f49dc2bbabd5603d5ed4878dae85da0102325f0568e3

          SHA512

          210dbc05f83c7b9ad818b1c42692386589acf47176e34e974d1097de93d8214e3077ded13f1b97fc00130d295684f7f32b70317f26e5bc4aba40e7aac6fcd2b9

        • /data/data/com.urye.eazy/databases/cj_register

          Filesize

          16KB

          MD5

          6be67e35bc91341317d4830318459d93

          SHA1

          569ec37c5b2bd8b22226ffe943ca7e48697900bc

          SHA256

          461600be5e66e6efbc79da26763796c87907e855eeb72bd0b9afe41c432da604

          SHA512

          3f80c92506e75df7f34b175432d8b77b1117b6c898c1780b9fa3abd4fb59855effd857b0a29380d47fc7e49a277fd4e6b0ef4e44ada52ae817874c50cb15e395

        • /data/data/com.urye.eazy/databases/cj_register

          Filesize

          16KB

          MD5

          a35511c20b296657ed21ea7514f3d749

          SHA1

          8a5b7a50a4ab849783be84daa10678c9c722f042

          SHA256

          4ec5a27dda275a226ac8f98adf2b46fb86c9278b31a3da9daeee50062b609b98

          SHA512

          e63b67b4086e1777cde618293893217320b949dd4e58093c77f09e7a9e2bc205e035de73d564e7253ffe0db3c6738b411e59222e7a3edab3db19898e3f6f044c

        • /data/data/com.urye.eazy/databases/cj_register-wal

          Filesize

          4KB

          MD5

          80039be5e40447d3377ac1dce524d5db

          SHA1

          b4c907a71bd64e9a170490208c6b2d1f06d45bcf

          SHA256

          995fa77b8c232fa40efab2fff8df8ef166916837cb7805f81f0686cbd57cdeb1

          SHA512

          9a6b3ef2c097acb2bc2ce2551c230abfba551543c8113f1402e758cf7a0be1326234474198ed48886ddeceb594c35c6c5334b19b6d89de0f7a7c3e5dee675312

        • /data/data/com.urye.eazy/databases/cj_register-wal

          Filesize

          4KB

          MD5

          ad7e3aba62089f54cd366f00098d53be

          SHA1

          5043b6ee094d88c2564e8fc810470a4c066e7ddf

          SHA256

          adfd3c4979dc456fab16d5c450d3ac707c9d18dd2819267eccffa2fa4c04eca3

          SHA512

          8bcb5eeaa0a3f1a011d5b2a613900cc079e165f0dc0906271d1734f427d81ee2b05224a566df0aee41d0df00c528dd756a9c94c6441931c559fb52debbc4eb58

        • /data/data/com.urye.eazy/databases/cj_register-wal

          Filesize

          4KB

          MD5

          9a5a3530a2fee22d7655bc92923e3b75

          SHA1

          46467e64719ab8e4bbb5f36f98deecfb6f6255c9

          SHA256

          1b60d0a52862e0719c1eb7353cebbabeaf0bda250fdc9b91ada09c765eff21a4

          SHA512

          9a75207008e922cb1dedea7288c61462669ae18261a0b44fe09e68e50019f1b85d93be57b2a06cf60551b4df377c49555727d7bd66a08d11ca70d22e424e0b68

        • /data/data/com.urye.eazy/databases/cj_register-wal

          Filesize

          4KB

          MD5

          3dd062e1ee26f40f03cca57d972630ae

          SHA1

          86c793e183d4d601832e4e688a3e95056e486756

          SHA256

          4ef6e6f335e7dd29f2bcea99c80bf90072bb1719ab0ee93dca8c65e571c38575

          SHA512

          7620dc31e4273df4379f462ea2c137c6c84dd3cb7c4f1a99855544a0b001ca04791c476b89f4455fe11601f1febd81fb9c366b875dc66e9c5c81bed7eb888a4f

        • /data/data/com.urye.eazy/databases/cj_register-wal

          Filesize

          4KB

          MD5

          4c4b098ef7d255900ae89220a52ef249

          SHA1

          adeca6c4b8e5e97a822d2584c975381827c5ba6a

          SHA256

          2cb34a38d7b8d012b6130679beddd6db6815075959b1a328df6727bb4c968303

          SHA512

          8ee7f0ad6a659a05eb4d89aa7a2e336654fb49487d4206431fddcb32ee5ea21e686d940610f15b33f75e4cc35838da3848472f9afaa29b17ff6bd1e5115d5641

        • /data/data/com.urye.eazy/databases/mpush_game.db

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/data/com.urye.eazy/databases/mpush_game.db-journal

          Filesize

          512B

          MD5

          708e15a2020d1287144a6877fcc20fcb

          SHA1

          1bdf08d2eb2822f3b6bc20aaf6d9c87d19b6f982

          SHA256

          348fd882e2d98239e941120017e0d37b43727f874cce4e6b6f6e214de921ae76

          SHA512

          aeeb63670b624b561e9c7edebfd5292cf8bd779f988d42dfe9d47ac76a5823c1bf09d2c2f2ef22e7e7be6d18436f6e330a3d7cf6d8d02acaa4b6de8e9521ba89

        • /data/data/com.urye.eazy/databases/mpush_game.db-shm

          Filesize

          28KB

          MD5

          cf845a781c107ec1346e849c9dd1b7e8

          SHA1

          b44ccc7f7d519352422e59ee8b0bdbac881768a7

          SHA256

          18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

          SHA512

          4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

        • /data/data/com.urye.eazy/databases/mpush_game.db-wal

          Filesize

          48KB

          MD5

          418eec9d67435d402ebb7076388b32d9

          SHA1

          1e9485f086aa9eae5131590434a6c2a8ac011eec

          SHA256

          1a19dfd45ad04f847102af581b7925ac259e1a090133c21f4cdbeccbf5185e37

          SHA512

          cb09bcf35d072cc34b2c85b33d8675a7e454321ee30f4f3cffd2fb5dc63afeeca67b7f37c282d719568ab1dec9bd879921e51b380713d511fb17b37e81433b21

        • /data/data/com.urye.eazy/files/.umeng/exchangeIdentity.json

          Filesize

          162B

          MD5

          f7f3d2f501579f8956769679088898d3

          SHA1

          c1afee2aaa6203aa9280681ca13e030c427132a6

          SHA256

          16ba5251c8dcd4048b02c305d7cc3f31164c257a0917c6a517e93d72f20e54ff

          SHA512

          6745fe695f78a93771c1aafbb8545ba0905fd264933ba39ac4896d1f7add9acc5724fe873ea52c5216f2da5a9a03b550b174140af94c0fd19258b2222c674223

        • /data/data/com.urye.eazy/files/exid.dat

          Filesize

          57B

          MD5

          04e2a992609beb672bb8bc161792ea34

          SHA1

          197100cf40022eaaff6eac1196ff06b6ef09ef73

          SHA256

          69366fcec6277b28497426ba9f2b37c5e369fd75cfabeaeea85aea5798ec4e7e

          SHA512

          e991a16fa4bd874b104d56b7a35c9b5fa1a560d470ebb26769bf93771a25652fef2a41423900d22b19d1b202ad171227af42ef845a0d0f5475ad8d9206c7580a

        • /data/data/com.urye.eazy/files/mpush_gateway_preferences_file

          Filesize

          19B

          MD5

          6ed7f19572d045a5b7ef8c079e36c0d6

          SHA1

          a3e9e52106de281203fbabc33131fef7b1fbc602

          SHA256

          081b605597dadd810d53492bdc096c28002883214e6bdd0ba0fcdf5a9bc02d37

          SHA512

          1a6b137be6ff21b7894657146eac757f63c4f8ee7881aeb2dfec15ea416cbb8a0313add31bd110651acaee205a25f7afa725ac7e9a69676ccb0624bdfb9ca62a

        • /data/data/com.urye.eazy/files/mpush_version_preferences_file

          Filesize

          2B

          MD5

          4e732ced3463d06de0ca9a15b6153677

          SHA1

          887309d048beef83ad3eabf2a79a64a389ab1c9f

          SHA256

          5f9c4ab08cac7457e9111a30e4664920607ea2c115a1433d7be98e97e64244ca

          SHA512

          e053886e1b797bc5a80f932302f0201265a599d82e2502d41941d6e652614ef88fa058e009094d26655f880200df12c2100f690254fd1e5bae75d7441763cd33

        • /data/data/com.urye.eazy/files/umeng_it.cache

          Filesize

          498B

          MD5

          8a2c1d9836a88ecf5cba37919e1d5caf

          SHA1

          a34922b68b0edb8466daf4b5c4c14114cf860e5c

          SHA256

          6de33f53745f6ac23eed977bea44168627eea984ee6f84c4e3c2b794963d9da8

          SHA512

          0fd9cfdf013ca45591da06293c748703b2af9c86b01e3e3aa4f5a4165c079f7a475b62d4fe06bad0689acbdfc94f4b363afd4a538902f237b4dc95ef397fc786

        • /storage/emulated/0/.DataStorage/ContextData.xml

          Filesize

          111B

          MD5

          4e9a7732c29c950d02d30f7926d68eaf

          SHA1

          d9e80ced049f0651f3b540e6bb6c7d41d893eac3

          SHA256

          43e056afd5fde4fc651ae4ed6350c690c4cfbd673ecdaca6b028928187100fb6

          SHA512

          0966d1062a4ec19e25a551b2d27fdb6b49df27d84fceb9fddca4fd0b6c5324004fbf62cdd8bdfa543a98dad3a0a8dd4fd627c25ed2fc9155b8680a5c0e62d638

        • /storage/emulated/0/.DataStorage/ContextData.xml

          Filesize

          213B

          MD5

          96b9190076f1b84862775f7a7b45b760

          SHA1

          4c0dcbf2d7edc230dd0b065b6822ace87780770a

          SHA256

          ec1b2f8bd6178d27da1815f22697613a5b277977842958837ae3551b1ab50db2

          SHA512

          f6c5edfb0c2d9b9cc82ab47acf956070f8b7315bc05defb95bcb49f8cebd90cb72e8d8d236fb844909fda8772be40324fa9c5c4a5bf81a9c54292c9df094fcdc

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          65B

          MD5

          9781ca003f10f8d0c9c1945b63fdca7f

          SHA1

          4156cf5dc8d71dbab734d25e5e1598b37a5456f4

          SHA256

          3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

          SHA512

          25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          111B

          MD5

          53931862f1cdbb894b73f2d5d27a0d36

          SHA1

          5529b1cee9debe330f283e4d2f637b58eb91682f

          SHA256

          6d8705a0dce880fa18e74f4a97df041de9f7c98fda097e8a0a54d738ad6ad26f

          SHA512

          8e8f2fdfcec1b2229f2b5f0a4ccbfac8e86c63b976a0d7289dfe57fc04ee3a6171df2c2fb2abf756beee916ed26224ecd0d8560df6cdbe883fde11500633d8e6

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          167B

          MD5

          06f5f6f1c8ee551ff57c0396e7a28c71

          SHA1

          cf97bf8af2586f4305e866c24f918a295721a093

          SHA256

          5c302c47c652539a249e51d3599099371698dd1c505052e0642e0caff8ec7096

          SHA512

          a9a770d775983ec98c6f2d3719cc4a11d13f355169f1fab34d2a5d0d8c001525bda9291d9d5bb1b84b21711ee1f2b9e03b35765bc451d8be4ba9a6e3fdc9902f

        • /storage/emulated/0/.tcookieid

          Filesize

          33B

          MD5

          ebb9469d74cfcea1b0b5253d37c894a8

          SHA1

          64d1653d4b44e70f0ce9543a8e83e54ca61cbdbe

          SHA256

          0f64c0c071f4343806cd825fcb2a3c2430caf9bc8370fc60f7bc01fa93687daa

          SHA512

          15151862c70ad296d596ef9bd55be65a89d98d214f79c379b919775317b2a4960af901e6150ea62729d9111f76b7a47f2ee888bf3d0a3e76bce3077700c88066