Analysis

  • max time kernel
    2708642s
  • max time network
    153s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    23/12/2023, 15:14

General

  • Target

    fuhao.apk

  • Size

    5.4MB

  • MD5

    b501049a72c11b599fbf85c2235c381e

  • SHA1

    8723d9318b2fa434881c098888f059608f196cc0

  • SHA256

    835d8bdc3113734412323bf303b5d0fc446c46100feafdbc810231acaf5640df

  • SHA512

    36b6746195a3748711b827fbc74e4015c9f3f227c526f24effe83482f58df17508e326d000b79bc59a4a2a59fc66fa9393179588a87b8222888b5205caa48106

  • SSDEEP

    98304:TiemKK2HxAwVjWckaHDJ8zpedWYEYq3e189NMS8UUQjr99gZJQQeWk:OuRxCckgQedCRc89Nr8Ajr7QHe3

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Reads information about phone network operator.

Processes

  • com.fhzjh.cmge
    1⤵
    • Requests cell location
    PID:5059

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.fhzjh.cmge/databases/douwan_sdk_db

    Filesize

    12KB

    MD5

    163b0e3f017becbc89b9d7f330b78f09

    SHA1

    1ef9cd8ac8655190468d0ccece0a4738634ab0f9

    SHA256

    cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36

    SHA512

    6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd

  • /data/data/com.fhzjh.cmge/databases/douwan_sdk_db-journal

    Filesize

    8KB

    MD5

    2826e91c2ad2e830bcc49ddeeb0ffdc2

    SHA1

    43b3ebc6bdfe4d9964d70d409beff9781c406c2e

    SHA256

    41f48284a20bcfcd0033a087620d413dfe4d3b45533a7e2c811c27a8e82d0916

    SHA512

    48b28be88eb3f2ab0646413a61b6518d3f4c28da569f6c5f2392e0f91ada91b6099511c41677b55f6edbc3e590125a4a79bb94df02041dc834d288a6bd2a3c8e

  • /data/data/com.fhzjh.cmge/databases/douwan_sdk_db-journal

    Filesize

    512B

    MD5

    85d5f3a570ae4f0498ab0b5c225e057e

    SHA1

    82c50f977cdf68348c26c40322199fe35793f4a6

    SHA256

    520828e08896c2bd16660a68299157053c9b17d40b9a374b11353cf35a8f228a

    SHA512

    d46ac49f7e66d7012d33167470bef0934613eb694e83b11f3487d35ce8245867901da13ae870bb79018e24084f042345e4c56306516e9841ce769aa8d85e01cb

  • /data/data/com.fhzjh.cmge/databases/douwan_sdk_db-journal

    Filesize

    8KB

    MD5

    1e7e10028a210dab1403484439bff850

    SHA1

    c09f51a297151a19502b9eee1ce2f8648fc7c08e

    SHA256

    1cf6c2dbe9736b357b6ebb1612a0f7b9522d3067d9818e8f6794939d6531f0d7

    SHA512

    3cb1136b413fbfed21b096b21d15432db618c302a141c7ad8498b12d42fd3ec5f216ad7d8d3e80130830cd770c357eef1e8dfce5c89d1b6be11f43359a262f02

  • /storage/emulated/0/Android/data/code/com.fhzjh.cmge/DID.DAT

    Filesize

    32B

    MD5

    35796be840b968e7719d0b9487d59ec6

    SHA1

    9665a26fcc8b0294234cd4088bf6c989ac94d4ba

    SHA256

    72434b7e4367334b378f229d051d462e51c628fba22730f8826149f4af5d5fc9

    SHA512

    50844b89200225522706780a683a1d9be986b4293368a5af9e15f03d57580e705693d7cf83c6d6b0036d4744c643184129feeaddfc9421afcea2312f02c24b0e