Analysis

  • max time kernel
    2723190s
  • max time network
    160s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 16:12

General

  • Target

    46a0ed087a34183be33ef76860bb6c4992f129073d01b825cbe54e04f00d2ae9.apk

  • Size

    21.8MB

  • MD5

    d8397572f479ce1c492781ca344a4c11

  • SHA1

    6ffb87c82c4792645b9fe735685aa94f87d11a5a

  • SHA256

    46a0ed087a34183be33ef76860bb6c4992f129073d01b825cbe54e04f00d2ae9

  • SHA512

    746ace31ec764b9c654a1715c2ecf7af983974f35f3f09347d11b62cb0380a2255d37223863748ef4ace26b1bb8984a5c3ac658e337bf7bbc0baa85550aadf01

  • SSDEEP

    393216:JWsOiySlYXz3p+WugVTkQYDL1XmNzNp+WugVTkQYDL1XJsB/dFOwtiImQK:JzqnLcWuyfYDL1XmncWuyfYDL1XJsB/C

Score
6/10

Malware Config

Signatures

  • Acquires the wake lock 1 IoCs
  • Reads information about phone network operator.

Processes

  • com.egeio
    1⤵
      PID:4262
      • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_max_freq
        2⤵
          PID:4331
        • /system/bin/cat /sys/devices/system/cpu/cpu0/cpufreq/cpuinfo_min_freq
          2⤵
            PID:4357
        • com.egeio:pushservice
          1⤵
          • Acquires the wake lock
          PID:4299

        Network

        MITRE ATT&CK Matrix

        Replay Monitor

        Loading Replay Monitor...

        Downloads

        • /data/data/com.egeio/databases/increment.db-journal

          Filesize

          512B

          MD5

          36b7850a4c84df4f1fcb180e5820d2da

          SHA1

          a931634434720ed180414fdf7198c2d00ee6582f

          SHA256

          b31de986b10eb014e69bca661042f1814f14eb72eac0041c267319eddc838723

          SHA512

          f094911c815fb830fe0c057227b5b9b4066f48691912baf5d284806a213a36203f4540ec3afe16c88c4941936314036d82911b2650080019380dc25806d9606f

        • /data/data/com.egeio/databases/increment.db-wal

          Filesize

          36KB

          MD5

          6d03998195256e22cf489de6e506a8f6

          SHA1

          75418d495107d2c9e2ae840eddbb515190e26132

          SHA256

          df419dfb798d9edc345c99c1be7323538a3e8667a4fd1367ed3e6365332b6714

          SHA512

          463ff48b055d8e117752adcfcc4de6ec381a681e0afee47d043dfc214ef62b1dbf29c4c231fd1619e38d8fbaea7d4195ec5cbbd5c7b05033700dbf49ef777db2

        • /data/data/com.egeio/databases/pri_tencent_analysis.db_com.egeio

          Filesize

          4KB

          MD5

          f2b4b0190b9f384ca885f0c8c9b14700

          SHA1

          934ff2646757b5b6e7f20f6a0aa76c7f995d9361

          SHA256

          0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

          SHA512

          ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

        • /data/data/com.egeio/databases/pri_tencent_analysis.db_com.egeio-journal

          Filesize

          512B

          MD5

          07e0a2e9fea928471eb037cb171c329f

          SHA1

          579afe1cd524ae9bdb6f81f7f64a5ae0cae7a4f5

          SHA256

          aef721233154d29dacc522d789f8bed0418132497bc3da10a56b2da3e8877eb3

          SHA512

          109cdcfc0a3e17fde73706e22458398c43271c024c5e67936712c6e6c9a196f09111d5dacc8d7f44672667eb66b2fa883e9a9a7245e89944978d1af9a3abe3e4

        • /data/data/com.egeio/databases/pri_tencent_analysis.db_com.egeio-wal

          Filesize

          52KB

          MD5

          f77700439c6ab47c5ab10b7dd3825419

          SHA1

          932965cd8d6683ab98e2148ec5dd15b3761b6ccb

          SHA256

          d05c5793c4dc4cb4cf7d0d807cbecd185bf987959cd250d204b5e98154f329bf

          SHA512

          704d3d84de437bdc9114a82ddac7926b1fe1c62f24a692634a69a1b2f58c8b81b9619944c84f86e650cf1cbb12faee2022d98795c82b80f99f021fc5308a1ac7

        • /data/data/com.egeio/databases/pushsdk.db

          Filesize

          32KB

          MD5

          1c4274aa7a9a5cac8c6d1df71e4588c6

          SHA1

          abaecd685e01cc68801292e3dc7085654a22feba

          SHA256

          3f6cd5f480ae69859b7841450f3d032c528ba385ebf9f371b9c8fdc6eb4231be

          SHA512

          1adb95935798607bd36cedcd183924d3068f50097d017b278da7caee7771532b61ec3606f6189b6dec8426eb038fe40be75079ce35894b1a8e0d1d815261150c

        • /data/data/com.egeio/databases/pushsdk.db-journal

          Filesize

          512B

          MD5

          ba16d0a567f80770b47a8307514be107

          SHA1

          957c9e32c38807f3f5cc989b631c4d55ba8b7e37

          SHA256

          497f5bdcbe906901ee61bb0d18f9844cf2ec61784e775980e328074e58111691

          SHA512

          761f8ce28cc5c60e48de8be5c54dffdfcabb3a144e29d6057e77fb8b0355d0d5d4fc8f14f814fd2485e27f42c45ff111cd2de637ee75f695b61c01747cc2977a

        • /data/data/com.egeio/databases/pushsdk.db-wal

          Filesize

          68KB

          MD5

          26353b567576bd2bc6631eb7eb2b4442

          SHA1

          123c8a9faf785cd344e9fa40c785c8f77b119bcd

          SHA256

          ef5bceab3c21149c217baae96275efadcd904a6a539ac8812ae8d552fc923cbb

          SHA512

          b7c1bbfa4bbefacd1232f4f9711b2c826a6562727395fac97a03592746ef786c172f6d6999b1711f51d510194a139471b97acbe55ab34502517f333bfd98f2ec

        • /data/data/com.egeio/databases/tencent_analysis.db_com.egeio-journal

          Filesize

          512B

          MD5

          6568f3b9566918a53ad5ace74f34f2ee

          SHA1

          a45e3273e17533cd998b0f0965fcb6e4d05ae270

          SHA256

          f4733990920ee894d3ce33fe219157c3e319de88c44657c5a592ccf6dce36c04

          SHA512

          9ce93fb83b6811b1fdadc999a8b40f69830a9b77f5f14ba37dfbd7faea651bce4d3ae40243988b7d879461e7fc8f3bb072d90fff3f9c02fd7e5fdd644a45ac3d

        • /data/data/com.egeio/databases/tencent_analysis.db_com.egeio-shm

          Filesize

          28KB

          MD5

          cf845a781c107ec1346e849c9dd1b7e8

          SHA1

          b44ccc7f7d519352422e59ee8b0bdbac881768a7

          SHA256

          18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

          SHA512

          4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

        • /data/data/com.egeio/databases/tencent_analysis.db_com.egeio-wal

          Filesize

          72KB

          MD5

          a93cf67415c8b5b20bfb1251c128425c

          SHA1

          f8a5855feb501128bbd85a7d008255e2aa5f7ef4

          SHA256

          95a001541ec3e920b0fb3f95554cab5fd9b458c6faefaceb345c57e3a7367f79

          SHA512

          48f25f7a529e980c218e23cc6c4ff42b497d69e4d354043fd33ae9c0508d2e3fd8855bc90756ab956a4b920a087ecd3f6df10de424e881edcb6324205da392bc

        • /data/data/com.egeio/files/init.pid

          Filesize

          32KB

          MD5

          ba4e0d9444c6583a901f4029f99afe27

          SHA1

          00c70de2955df6220f5060325b8221e636cc47ae

          SHA256

          77644c7e4f9b582beaeed46b40ba6e7c229dd027a03ccf4bc3a8fa47d098557b

          SHA512

          0759ef1afa1ca34cadd12b0e1f2ee16aca6cb56a466d538685e7f3f5a5adece63d46dddce3af8a19a45af2bdc9198fe14560747c66bfff109bf29b5eddde8dd6

        • /storage/emulated/0/libs/app.db

          Filesize

          32B

          MD5

          93e936d47360ce2e99d10745c10fbba1

          SHA1

          efc0788acfe1f919a3351c2f4c2677ad368884e9

          SHA256

          04382a2b16ea265194aca05ae602ba8585f69357518125012c5415dbecb6b188

          SHA512

          90f7ed4aa62951b7d92650e89f6a92cc011fa6d8ed2e58eaf89fef73d69a70550f018b9dbb020f41bfe14b5c3205a74b184a24a25ac38c6623c37a9c9b33b4b2

        • /storage/emulated/0/libs/com.egeio.db

          Filesize

          4KB

          MD5

          82ed06695a69021f783fb1a51d399c37

          SHA1

          7028fdc99e3eb9d569ba2bf6ea2b0ef5c23bda47

          SHA256

          08642d904a72675e099300e2fe2aa1f540a7cae5124fb7a325e03d4a2935202f

          SHA512

          84762f4ca166a63e6b05f75381def1a5647d00f0cb5750d3cae4f49b86082be7571009595e6303a5d49a5e08c85026bf0d0c088a47c2c846e5cb609ac93984b8

        • /storage/emulated/0/libs/com.egeio.db

          Filesize

          82B

          MD5

          968c4cfdaf2b984b0e55000c850a9299

          SHA1

          cf302bebca6f0679dfb4bbeed2a3a389adb49f0c

          SHA256

          2d120b3a776bbc80418348c5bbc03ef4a8a34671df3db109decf30414b946684

          SHA512

          5533231cd9722f46b714bfdda9882dbfc170c92eee567b089fa382c8931b429f94e48086662e72af6cb5159d6f55b3bebeb08e12c773cd6bb6d813b73e4fcc81

        • /storage/emulated/0/libs/com.igexin.sdk.deviceId.db

          Filesize

          76KB

          MD5

          64dd79e0478a005c20ce1d08091c0438

          SHA1

          e63ec5ea3f430ee91cf1ef36b29f084d69b79b6e

          SHA256

          6356d63f7252aa70ef587b06d235558aad668a6d330421243fba67540825fcc4

          SHA512

          8b94ff1de8ca432b824db7797b6f5b430b52ac7595af631779bc596e28c0e3c8494b5de31b2c1f54939d1874f1d0a37ba2cc0e34123af7ca373f20ca5a705dc3