Analysis

  • max time kernel
    2708648s
  • max time network
    141s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23/12/2023, 15:14

General

  • Target

    fuhao.apk

  • Size

    5.4MB

  • MD5

    b501049a72c11b599fbf85c2235c381e

  • SHA1

    8723d9318b2fa434881c098888f059608f196cc0

  • SHA256

    835d8bdc3113734412323bf303b5d0fc446c46100feafdbc810231acaf5640df

  • SHA512

    36b6746195a3748711b827fbc74e4015c9f3f227c526f24effe83482f58df17508e326d000b79bc59a4a2a59fc66fa9393179588a87b8222888b5205caa48106

  • SSDEEP

    98304:TiemKK2HxAwVjWckaHDJ8zpedWYEYq3e189NMS8UUQjr99gZJQQeWk:OuRxCckgQedCRc89Nr8Ajr7QHe3

Score
8/10

Malware Config

Signatures

  • Requests cell location 1 IoCs

    Uses Android APIs to to get current cell location.

  • Reads information about phone network operator.

Processes

  • com.fhzjh.cmge
    1⤵
    • Requests cell location
    PID:4526

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/user/0/com.fhzjh.cmge/databases/douwan_sdk_db

    Filesize

    8KB

    MD5

    f580f2982b65f111a2756d9dc7ede0ca

    SHA1

    8ab4be5ffdc89a40a2c12a9a006b1649b8f7ef1a

    SHA256

    8ec55e187e46cffe0ab1b3fa391a77922c29da49078d96b419cb8b407757461e

    SHA512

    0a113a778530e68ed622df7aee6a58d8b5277cc827532695587408a93c1acef75d373dd1e60da0f9479ca345a6d5227fba57808f4cd47853e04b6342f6f9802a

  • /data/user/0/com.fhzjh.cmge/databases/douwan_sdk_db-journal

    Filesize

    512B

    MD5

    84f55c1f2c94f58d1f49dd8753930ccc

    SHA1

    8a9f81cf7f3d09c5616ae6b8399c796ec5cae006

    SHA256

    38a67e6797de28ec9ab9a453b06b3fc9acb6c3be2dde3f51212039287a1685a0

    SHA512

    5eb81e49c544373144fa90b5a8d515e2f42830e8701f617c42d7dc7fbeb0c290a5c2d5bab0445139eef26ebe3d78f31116a4764a7b10f1a32f46f2b994983831