4beb08c88a68c0432ee4ab75483670237fcb4e53c2e365a1fe78cd6c0395fee6

Analysis

max time kernel
2558630s
max time network
129s
platform
android_x86
resource
android-x86-arm-20231215-en
resource tags

androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
submitted
23/12/2023, 16:34

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

4beb08c88a68c0432ee4ab75483670237fcb4e53c2e365a1fe78cd6c0395fee6.apk
Size

13.2MB
MD5

4c85a2c268e78dacaa90bedb76fca4e6
SHA1

4941a5d39246e3a512d05281eda82ef7722c79ba
SHA256

4beb08c88a68c0432ee4ab75483670237fcb4e53c2e365a1fe78cd6c0395fee6
SHA512

75a8f90633ac1f7ac7781e41b7c10c87888d456e9410cdb0252035ea5d5a21b467b099f886d35d267ae16f1062a8357a2a66353413613af8b13de11dd7b97f42
SSDEEP

393216:x14mKZhMA16aOi8vw0RNJH/EaSk9ibYPdDWEmf3mD49F:xrRANOoYNJPSk9ibYPdm9F

Score

4^/10

Malware Config

Signatures

Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	com.zaozuo.android

com.zaozuo.android
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4510
- /system/bin/sh -c getprop ro.board.platform
  2⤵
  PID:4542
- chmod 700 /data/user/0/com.zaozuo.android/tx_shell/libshellx-2.10.7.1.so
  2⤵
  PID:4563
- getprop ro.board.platform
  2⤵
  PID:4542
- /system/bin/sh -c type su
  2⤵
  PID:4590
- logcat -d -v threadtime
  2⤵
  PID:4617
- logcat -d -v threadtime
  2⤵
  PID:4629
- /system/bin/sh -c getprop ro.miui.ui.version.name
  2⤵
  PID:4655
- getprop ro.miui.ui.version.name
  2⤵
  PID:4655
- /system/bin/sh -c getprop ro.build.version.emui
  2⤵
  PID:4680
- getprop ro.build.version.emui
  2⤵
  PID:4680
- /system/bin/sh -c getprop ro.lenovo.series
  2⤵
  PID:4707
- getprop ro.lenovo.series
  2⤵
  PID:4707
- /system/bin/sh -c getprop ro.build.nubia.rom.name
  2⤵
  PID:4734
- getprop ro.build.nubia.rom.name
  2⤵
  PID:4734
- /system/bin/sh -c getprop ro.meizu.product.model
  2⤵
  PID:4759
- getprop ro.meizu.product.model
  2⤵
  PID:4759
- /system/bin/sh -c getprop ro.build.version.opporom
  2⤵
  PID:4784
- getprop ro.build.version.opporom
  2⤵
  PID:4784
- /system/bin/sh -c getprop ro.vivo.os.build.display.id
  2⤵
  PID:4808
- getprop ro.vivo.os.build.display.id
  2⤵
  PID:4808
- /system/bin/sh -c getprop ro.aa.romver
  2⤵
  PID:4832
- getprop ro.aa.romver
  2⤵
  PID:4832
- /system/bin/sh -c getprop ro.lewa.version
  2⤵
  PID:4858
- getprop ro.lewa.version
  2⤵
  PID:4858
- /system/bin/sh -c getprop ro.gn.gnromvernumber
  2⤵
  PID:4883
- getprop ro.gn.gnromvernumber
  2⤵
  PID:4883
- /system/bin/sh -c getprop ro.build.tyd.kbstyle_version
  2⤵
  PID:4909
- getprop ro.build.tyd.kbstyle_version
  2⤵
  PID:4909
- /system/bin/sh -c getprop ro.build.fingerprint
  2⤵
  PID:4939
- getprop ro.build.fingerprint
  2⤵
  PID:4939
- /system/bin/sh -c getprop ro.build.rom.id
  2⤵
  PID:4964
- getprop ro.build.rom.id
  2⤵
  PID:4964

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/com.zaozuo.android/databases/bugly_db_legu

Filesize
4KB

MD5
f2b4b0190b9f384ca885f0c8c9b14700

SHA1
934ff2646757b5b6e7f20f6a0aa76c7f995d9361

SHA256
0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

SHA512
ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

Download Submit
/data/data/com.zaozuo.android/databases/bugly_db_legu-journal

Filesize
512B

MD5
dff713e9fc3b07b746d74c0fb40ca546

SHA1
3fe44107ee2aaf4ae8da044bc91315e6ea7e5ad8

SHA256
72efe033b8a673c7c2f220617fa35631945221d0e485a7e3cc061e777ea8d60f

SHA512
06c831d99ba5989919e56e877077d12c5fd8537ecb46c05f0477a3a82a478215e8cb2c4abc0fca3c59e091ec9a11bc8fb7dd27088a49cccafe4218bfa7f9b0ce

Download Submit
/data/data/com.zaozuo.android/databases/bugly_db_legu-shm

Filesize
28KB

MD5
cf845a781c107ec1346e849c9dd1b7e8

SHA1
b44ccc7f7d519352422e59ee8b0bdbac881768a7

SHA256
18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

SHA512
4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

Download Submit
/data/data/com.zaozuo.android/databases/bugly_db_legu-wal

Filesize
92KB

MD5
c0ab6de7c38bdfcfce68b75a7b6ddbc7

SHA1
f71fc27a82ab9e0726e20e4d0ee461d9adbf8859

SHA256
1307cccf3f9b5d6697ac9db23209624fad95d62c66810adb2d80e8d1cd901cb7

SHA512
56cf3600d89f7e0821381845eeff49012f6eeb77c946e89fe96b41b4280f8329f3151aa08e523ec987dbcb369b98dc636049cc208a92c7dc7d1494ec0df8a1fa

Download Submit
/data/data/com.zaozuo.android/tx_shell/libshellx-2.10.7.1.so

Filesize
116KB

MD5
318363abe451ce71c0016b7e17695704

SHA1
54dc2655db2599b06acdc9b81f3f1edaa0257fe1

SHA256
8c72ad538e32384723785a50d167a118a054060353bfcc43cf688869ee857d16

SHA512
1a4039793283eb174b85812c0fe6844fb40637e46bc5288168ff5c7b410e560c55a4c5ffaea9224368e2a72fb0578b8542cdbf146d9e14a56c482db62e0c05d5

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads