Analysis

  • max time kernel
    2551348s
  • max time network
    162s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23/12/2023, 16:41

General

  • Target

    4daa38fce214baf6f90b1ad60f9aa3d4c2d84a82adc2d76ecab6eed1901d3baa.apk

  • Size

    16.7MB

  • MD5

    bd0a0b59ddb720c1a6547d5081a46649

  • SHA1

    16915a7a9a17ac2a6ccbc4abc7774b609135853d

  • SHA256

    4daa38fce214baf6f90b1ad60f9aa3d4c2d84a82adc2d76ecab6eed1901d3baa

  • SHA512

    95b0ddf01c1f8587c8f2ca6de1689224be2138c8013aa32ab0d2e3f1730da20f5c6912ff89e22aa67fb273639da9c1e39f3dac2f5c024cc6bdc6695c292ba840

  • SSDEEP

    393216:SYv7Tmmzhp0JTWOoOIVCvsWUidhyZn8sSroeQyvRy7O2GPTKnKQ+B1o7cVLNu:7vnmMhpWqJr0vsWUEyZlSEeQyvEO2qkB

Score
6/10

Malware Config

Signatures

  • Reads information about phone network operator.
  • Checks the presence of a debugger
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • us.bestapp.biketicket
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4599

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/user/0/us.bestapp.biketicket/files/.imprint

          Filesize

          929B

          MD5

          5ff773af7c9f36cc67ffe0906fe0572c

          SHA1

          2fab9e79780d99b5d59ef497f0debf180b59dbd7

          SHA256

          3b7c31b40aef0a084d3a2bde5f95aaf0e37dce0a55dfc494ba1ec014badefeae

          SHA512

          35ba42357d176bc32ea3811000ef4a3f4a4e210afbd8a2d54c0f8370152dba3a7184298ca1192fc853bea661ae07538f5d5f8f24cc8f7c2c5075757d70796b5e

        • /data/user/0/us.bestapp.biketicket/files/.umeng/exchangeIdentity.json

          Filesize

          162B

          MD5

          a7dfaeaeb0c53c59a1a02cdb94b0dec5

          SHA1

          184abb96e17778a0827b0fe2693d02cc697f34ff

          SHA256

          ab10db15871de9731c51e8abbfb6e8e76f8e5ec93d9fccba87810c32e150b73e

          SHA512

          128f49ec790fc77eb26e807833798ee6057f355c4ff441efe329fd9fd82a742408dd1b487fe19407dcf3180b40f71a618893f278dfa89bbf33c7e10110fe3666

        • /data/user/0/us.bestapp.biketicket/files/umeng_it.cache

          Filesize

          431B

          MD5

          cb314cbad69ebb4825cc0c3a85a5420a

          SHA1

          41271227fc5195556b2f044ac6ada739f97ca3da

          SHA256

          7215e55af31b1c5d7ead59e76bc315a50a57b71c1b9b49744743e929ab707e49

          SHA512

          d3bfcea7b8f7de06f0fc5dda20db9c32bcea2fa01d8ae64d2ec208a404eeef240f44298d1512e9196d9869c1ccf5cc8afb459e05632b28986e5294b5e204a90f

        • /data/user/0/us.bestapp.biketicket/files/umeng_it.cache

          Filesize

          219B

          MD5

          635d84d79774550f1c2bd1c204795c26

          SHA1

          6ea544f6e6b76b8193613da096f8dc3590de499b

          SHA256

          dac8ca380854bdca834b06bd9d48cbf9f8c4007597fbdebd60498d2a8a908d29

          SHA512

          91634b423d479d771993d0b26ece5e0e1708dfadd5f7c6e52ab2ec39603731c09adefab060b88e18572f1a20e17c1beef1c7c3d5600baa028dab6cec1288bede

        • /storage/emulated/0/.DataStorage/ContextData.xml

          Filesize

          111B

          MD5

          8b577bc51b3a0d3a35f943e789103a13

          SHA1

          aa68098d9c02d12c900360576b8cd535c960dd94

          SHA256

          5bbf11a02f2862db746524cd2c916c89832d72567240e50bcfc7da3502bc7400

          SHA512

          fd9d4fc7872a65a8eb9a61711f7d416bd498d6cb217512f94851059fc5936716a8b792d535cbcc34f79189cffd4299da3108665c7a3adcca15593a0fcb01f8d5

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          65B

          MD5

          9781ca003f10f8d0c9c1945b63fdca7f

          SHA1

          4156cf5dc8d71dbab734d25e5e1598b37a5456f4

          SHA256

          3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

          SHA512

          25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          111B

          MD5

          15618ac1a10fc9e2e9a99bc317c7c127

          SHA1

          49b72210778dd139e752df1060e166b52a1a5592

          SHA256

          42c88434cc2196a11a3a43935aa303e01ae10cfbfdb619ea987890714d816af5

          SHA512

          78d6e98af6609306c889437c6c7554fe9b8a1ac0b31a86da69a65d1867ae0281d79b35c2d160f02fbc0e978dc38dc0f9fd782269d081badac0384dd18ebbebc6

        • /storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

          Filesize

          222B

          MD5

          da2552f906b44279ac5f6089c5ace0b9

          SHA1

          9503e15d96d14a54bd448346b619d095120816ba

          SHA256

          65c3c07e1b26103e7dab4b3ffa7af1e2b06d93ba19a492b63e69167a48845b49

          SHA512

          66839703cf7e7cd7623b3dc87197a76d4ba37464b07199d31ae8d830582ea28b6b727512641f81f73d7b986d9c608b6c2f8d52ad82c8a7e8b43b1df7a1eacb42