Analysis

  • max time kernel
    2663857s
  • max time network
    150s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23-12-2023 15:31

General

  • Target

    3e3112958d36ff672b09585a5e4514cc191e622d7cc294171b15e353f4547be4.apk

  • Size

    19.5MB

  • MD5

    ea5ee2e95ed69221cf2c487a9b2fc7c6

  • SHA1

    d917f480a4884695b61a111b5db918fb1be06a2e

  • SHA256

    3e3112958d36ff672b09585a5e4514cc191e622d7cc294171b15e353f4547be4

  • SHA512

    09ea7b1bd8427a2c66242c6ac5ffb2aeb9a42c86d3a018fab681c83bea790cdd2ed258e31e075dd0133150a5681136e20fbabd284a9c778c000e22fea8224907

  • SSDEEP

    393216:yvn76lhfAFO89fsEsrP44WgLU6A6bRNh7tFXpUYEVfaaay3liRr:o76rfctfsEsrP4tgYG5/X+VVfEECr

Score
8/10

Malware Config

Signatures

  • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps) 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.podinns.android
    1⤵
    • Queries a list of all the installed applications on the device (Might be used in an attempt to overlay legitimate apps)
    PID:4261

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.podinns.android/files/.imprint

    Filesize

    842B

    MD5

    86397db15f3e7518eb43e12ba8d1525d

    SHA1

    fbf7cc7b3075e0022501767ef459655f73a735c2

    SHA256

    912bbc63b5e054e6aea82ac7029f4cf13a57b882a182b39889384ed51a637e52

    SHA512

    fb16d3bddf95805e660dbb52c713f542c383d03bdc069929a9bb7caf440374eba33598e579230189bd962bfdf5931bed07f463f777d26121a6165942153b3296

  • /data/data/com.podinns.android/files/PackageChannel.txt

    Filesize

    55B

    MD5

    bfb90f7a3ecdbd71c23582cbfcb793af

    SHA1

    07ff85609c0d2c66c0cedebe5f5b4324099e032d

    SHA256

    248339d1d8920c7e106d38834d7578a376e3fe8d1d0ec49a73f6bb85b1e3f3f6

    SHA512

    a6f6cf331764a8b1bd144849422cfae217dc9742e76c3be0aec48aaa47fc0c3e55054a3726ec7c2ea38d630246e15434573c72562e1c10c401140cd3bcfddbe2

  • /data/data/com.podinns.android/files/umeng_it.cache

    Filesize

    211B

    MD5

    1fe7981e640d7b7f85ffc839e74bc098

    SHA1

    cdcbe05ec645fb66c79a3f39dd8c125afbe6b143

    SHA256

    3ae695df2be2c5b91dbb633e5ae0d5cdca6d792209dbe62de8234b5153723649

    SHA512

    35c7e50e6262ccd2a3b6f79c72b104935098ef7e3fd7a031b8653f8a2070af8f37787f210f4b7269e32834337f0de7332fff8ca3dd297c31e7a9785b8775f83c

  • /data/data/com.podinns.android/files/umeng_it.cache

    Filesize

    108B

    MD5

    e9e1740f45d2e2fb6c8d16a3767b985e

    SHA1

    86f0b245c19e7bcc1f8e9e06b3bfa47162919d12

    SHA256

    1fdc308968e4ad6f423e6b1a3be6236e11a290b9a29f2ccfcae0e95b4169b6fd

    SHA512

    c983b623cd2ef74dfac71d6be42f11fff8a0205ca73e15685ea0f97c506c840f97d6bbc0c7b8c2329399eda3aa193cdaff0b20944ea73eee56a4ccdd8b2ca53d

  • /storage/emulated/0/Android/data/com.podinns.android/cache/uil-images/journal.tmp

    Filesize

    31B

    MD5

    8c92de9ce46d41a22f3b20f77404cc1d

    SHA1

    8671a6dca00edb72be47363a7071be65cf270373

    SHA256

    68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

    SHA512

    30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56