Analysis

  • max time kernel
    2618682s
  • max time network
    168s
  • platform
    android_x64
  • resource
    android-x64-arm64-20231215-en
  • resource tags

    androidarch:armarch:arm64arch:x64arch:x86image:android-x64-arm64-20231215-enlocale:en-usos:android-11-x64system
  • submitted
    23/12/2023, 15:58

General

  • Target

    441386ea1850687793bcb73e1959fdb84aa833b160b27b89b89299940eb5158c.apk

  • Size

    19.5MB

  • MD5

    003686e6288adef6c2da53c1c958f104

  • SHA1

    0205edec1a7489e070995b589a776d9eeb5fa880

  • SHA256

    441386ea1850687793bcb73e1959fdb84aa833b160b27b89b89299940eb5158c

  • SHA512

    9e72720b71bf546e41e391778273dcee901cf59780115125c32e0ad5a1628f5a2e7826ee964da366e22ec4ce95bac5c2b70ad57e0bfdbf9a65042e676f5b9e8a

  • SSDEEP

    393216:Tf1rBreoCHpbhKy5aKyUxQPjSM8rgnpJ58h+FJhu+oqNhZ7v+e:Tf1lPCtBBNUj588Pu+oyV

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Queries the unique device ID (IMEI, MEID, IMSI)
  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • uni.UNI1EA829D
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4468

Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/uni.UNI1EA829D/cache/weex/libs/weexjsb/x86/libweexjsb.so

          Filesize

          6KB

          MD5

          9bb067cd33b490d30f2c88054c732574

          SHA1

          d95a11e2be5c7a1fab9820e34cdd9e482523ea86

          SHA256

          fb993dc086feddf19af9700c7428386e3e4a5c67f273711c371ff4460a830ae9

          SHA512

          0b721c51332313c50ae466fff1b4bdb48a71791bca67ee83d2882a19e8abb59dc1406ed15d6dabbcd3ba922167fbf68a3828fd82edf4b2270ff0191b8fed0dbc

        • /data/data/uni.UNI1EA829D/shared_prefs_ext/test_app

          Filesize

          18B

          MD5

          a316948d27559f045d76a2222684c3f7

          SHA1

          972435cdd483e7b0a10c3906d0dbe7a97f9e85e4

          SHA256

          938fddf22f376f80b578dd40fa1f1bb0be401178f3ad3792a94d8c194068b264

          SHA512

          b3819370329e8825b9d09920f37137e6a0dcfd6bb7c9cfad5d701c54bd94fa2b4cdcf2becda44007b0ff80d9ed19916144b5b9cc1bc9827cf5b7e1cde9c7a882

        • /data/user/0/uni.UNI1EA829D/.00000000000/A3AEECD8.dex

          Filesize

          63KB

          MD5

          ed73a80eb949bacc52428b8d5a087fa5

          SHA1

          07e973549a2cee61ffeeb6439abc419cd8a489a9

          SHA256

          f0ead1ad60e0cc310c1a40685c28fc7a69aa346604552816c51dd3c1718a1e76

          SHA512

          4bc26c18ca3a2edfe38ca1e14ad1e1415268b4a69cdff3c0f8e2b8fa910c67c2e4bc4f32c21274e586e8e139122ea3dbde7ec507c4722b4a9a778ee2598090b8

        • /data/user/0/uni.UNI1EA829D/.00000000000/A3AEECD8.dex

          Filesize

          63KB

          MD5

          5061e4948844f7d366972ac8005e9f13

          SHA1

          a2b79a1c79afb095ddebf0f16a1f9db64482bcaf

          SHA256

          3aa6caecfcd101531539147e01382bc530b4fdc61e98937d63cc4648793c6a45

          SHA512

          223d18ce248912df18cdea3c8e864ea5e6ec058ca42cc5fde738188c54abcd260d7f24ac53d4987d3e32f4ae3e1e40e01354054d035bb100eef51b2d695f5299

        • /data/user/0/uni.UNI1EA829D/cache/image_manager_disk_cache/7de6294e1e84ef5677c0ad3df94fbe66144497a7e61aec9aca3a495380e03686.0.tmp

          Filesize

          480B

          MD5

          6ea1cf6ed708024327e098d92df5553c

          SHA1

          61b75ec027edb89ffe0540d3db52c238a40e48dd

          SHA256

          3e7506f860cb0d14c5f6ce7a91b697707f493540eb5a58894412cbfa73d1e364

          SHA512

          48d2479a448fc8aa5a41cc490e49da16e30a4efd69b1a9e525e3d766b92b21a59a1072c75fcc010063057b934e0cc16c8cdf773cc5b298cb5bbe72b3e6f3d128

        • /data/user/0/uni.UNI1EA829D/cache/image_manager_disk_cache/b6c690765244bd550e6439121d7f3b59476182331c5e285c25bfa1f7252aaeaa.0.tmp

          Filesize

          749B

          MD5

          e5f65355d8c4373ef3a96c22aeb56e0e

          SHA1

          fc7fbc5f44cbc357a880ba18e2113f7c8df2a2aa

          SHA256

          a3e67de7c3a251bb5075fb720271672ce90cde9de5670d761902c936fba348b0

          SHA512

          b2a88f075ef5c7bad91dc7432fcf7bd416883b363c580d53ad7d50311c37f0f9f3c51b59c7cd250bc783b7404a8a02008cc103fcf1cf1ff8fd1f19819c3f690b

        • /data/user/0/uni.UNI1EA829D/cache/image_manager_disk_cache/b927abdfbc1418234e9f438d5564a4791a6e97093d22c7e22b5973761ded025a.0.tmp

          Filesize

          577B

          MD5

          0ee1be3d1a38784bc60b65f8e62a0fba

          SHA1

          f5edc344a62b397f21bb1c470042e161079ea38f

          SHA256

          c39b6bb043f9dba6bae0b82d63106e2a803ebc43df0f7f09819387762406f6a9

          SHA512

          aa1b2e82434696ecec91ee9edf9158f960824391dd11a4cfb13e7d3aad0514721c2ab28f667a47e3889f0178b60a837dd984fc1e239f9727ee0361bbafcec0e0

        • /data/user/0/uni.UNI1EA829D/cache/image_manager_disk_cache/e1cf2e6779d9e9601595f66bf5b0af962db9ae8e5d161887a9f88970cbd4810e.0.tmp

          Filesize

          542B

          MD5

          f3380737667c1620a1a66a88f6318f80

          SHA1

          83f500257ff6e7d711681c0b95ac15353ac2960d

          SHA256

          bdd944ec5078587da843111c66427611522b9cc41b53593926cbdcaaea767dec

          SHA512

          e357f8b7160d31851364b82bc2570aa26bff94590c095336c03563d49f334d793092b2b55b80cd584b51c788d4b99ab7903782d0bdef2bb7cc11290ba4c45fc0

        • /data/user/0/uni.UNI1EA829D/cache/image_manager_disk_cache/journal

          Filesize

          615B

          MD5

          e2ac3bcda2eb302de96e39fa8fe35905

          SHA1

          0e4e7106c07fb26f0db266404fc0c13bbe799de5

          SHA256

          09f7cf3112202d1db2daf86c7ccacd1c07e46dbd514ae1eaa8d08dc3040b93ac

          SHA512

          7c76d0810385171ec4cf143698f6f8f856a3d41ea34cf58a3df5f229a4c368fc443ab9f4b2af55bb4051f991eb8194658d881bbef0f382f2bd14aed95e92015f

        • /data/user/0/uni.UNI1EA829D/cache/image_manager_disk_cache/journal.tmp

          Filesize

          31B

          MD5

          8c92de9ce46d41a22f3b20f77404cc1d

          SHA1

          8671a6dca00edb72be47363a7071be65cf270373

          SHA256

          68bb33ddeed9200be85a71f70b377985f9ee68e91578afbde8321463396f1274

          SHA512

          30f45fe9954215d6adafcc8f0a060a7ff41963a64f9b849a37f0d18fe045038d429ec13bf15226769c4ba78dad3c52f3d9e0dbbb4fcdea4828a1efe956e48f56

        • /data/user/0/uni.UNI1EA829D/files/.imei.txt

          Filesize

          32B

          MD5

          a44c9fd52a11c500f4ea60e94db5718d

          SHA1

          278eb3b062c77654767cdd37712dc36ef922f0da

          SHA256

          34fe1ceb841d0d5bf7ca63f300c12a820323be21c23b115bfc46f085a8b2016b

          SHA512

          3a559bad204a5e0f789a8bcf78e5da6a2a9bfed1035bde81a05860e62c2838e3c637c52350dc8b20eaff68196c5f52bdbd6c3cc2a953bb4c3864147ea6a134de

        • /data/user/0/uni.UNI1EA829D/files/cnc3ejE6/eje3cnc

          Filesize

          35B

          MD5

          762298b93820a5cd8b6d8ec469078f7f

          SHA1

          d5b02a2ff3b235cd2b61ceff53a1d88b8984477d

          SHA256

          dc3f98a33c26c2796dc294b354831fd5ca9796295f4cb38479c80b145d4807db

          SHA512

          70f864211ce16679d0538abf9b7071d27c2d22ae458e32409d20065032c762dd186307ef33ede90abd9ac794a4ced8b163404e9799c05f0c515337249684311e

        • /data/user/0/uni.UNI1EA829D/lib-main/dso_deps

          Filesize

          380B

          MD5

          cabf016b3012f48592f47c9261f3878e

          SHA1

          cf6bd2dc00b83b3a15a662325b9d8e805b49dec9

          SHA256

          ac9d7cf1576bb953581ab3da8abb4648a31b009823d4d01ed2a520f3c01e6cea

          SHA512

          0c3249bea522262a65b871071a7874f441a61cff820cc3771ebe8ecabccef02364572cff6208854886230af1eabbfe717511419b660006ad55ec3d33af108909

        • /data/user/0/uni.UNI1EA829D/lib-main/dso_manifest

          Filesize

          5B

          MD5

          c06857e9ea338f3f3a24bb78f8fbdf6f

          SHA1

          c5a0a2529d2deb60fec041b4fbd722a2ebe31702

          SHA256

          957b88b12730e646e0f33d3618b77dfa579e8231e3c59c7104be7165611c8027

          SHA512

          29f61516876c25379a7bf4faa2b3ca6f6b53eac90e7de47671fec4a818d51441b4025cd7909f7c0a0d113ab6c5ff00cb3700c286bac7319185b77905feec4fb1

        • /data/user/0/uni.UNI1EA829D/lib-main/dso_state

          Filesize

          1B

          MD5

          93b885adfe0da089cdf634904fd59f71

          SHA1

          5ba93c9db0cff93f52b521d7420e43f6eda2784f

          SHA256

          6e340b9cffb37a989ca544e6bb780a2c78901d3fb33738768511a30617afa01d

          SHA512

          b8244d028981d693af7b456af8efa4cad63d282e19ff14942c246e50d9351d22704a802a71c3580b6370de4ceb293c324a8423342557d4e5c38438f0e36910ee

        • /data/user/0/uni.UNI1EA829D/lib-main/dso_state

          Filesize

          1B

          MD5

          55a54008ad1ba589aa210d2629c1df41

          SHA1

          bf8b4530d8d246dd74ac53a13471bba17941dff7

          SHA256

          4bf5122f344554c53bde2ebb8cd2b7e3d1600ad631c385a5d7cce23c7785459a

          SHA512

          7b54b66836c1fbdd13d2441d9e1434dc62ca677fb68f5fe66a464baadecdbd00576f8d6b5ac3bcc80844b7d50b1cc6603444bbe7cfcf8fc0aa1ee3c636d9e339

        • /storage/emulated/0/Android/data/uni.UNI1EA829D/apps/__UNI__1EA829D/temp/1703425621849 (deleted)

          Filesize

          862KB

          MD5

          052000a2f4357ce6c8f2d98f1a6a571c

          SHA1

          abaca13dbd59f66d2c73d79add11983bb577872e

          SHA256

          d9c815b54019d84f4be94618cea7196e60eac9b651f10ee032a5d2532fd78bcb

          SHA512

          2687d96ef4c88a36ce6a2f49c7b333deacafc6e6c2cb2157555598655d65dfcb2ebd78477a87d4e21f6ae1045b647607dd207ceef297c89e6ec498ef76e95593