Analysis

  • max time kernel
    2630328s
  • max time network
    165s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    23-12-2023 16:15

General

  • Target

    47260cfa96205403d495b1110acb11a30c58f78005cdc53fb7f05030e2f19a3c.apk

  • Size

    7.3MB

  • MD5

    db5c1b182e458fc68e6e0f9c7bfa755a

  • SHA1

    cab4d5428eaa294b67b1e6b110444406bfae278e

  • SHA256

    47260cfa96205403d495b1110acb11a30c58f78005cdc53fb7f05030e2f19a3c

  • SHA512

    2f2e92a583867b91c18d82d3199bc267b06dac986833b7d4da2ffb284e7b5595750af1793387ca01b14f73f170fc840b9f213b3a0396f73326d5f962698592ea

  • SSDEEP

    196608:7hsHjgPq3NPq1zruQF+URejRUbUtlbtj15u8qpxHvwF:7hegPq3NPq1zrxF+kcRS6nh5eRvU

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 2 IoCs

    Runs executable file dropped to the device during analysis.

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.macrocura.health
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4955

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/com.macrocura.health/app_bugly/rqd_record.eup

    Filesize

    351B

    MD5

    9c06bec28ab184bacd5b8f19777cd52f

    SHA1

    3145c606c5fedd873bdad7d30f4ff612ff9d956c

    SHA256

    b6f90726de3225406058ab2ff3474579c78b8ef3af3817a70df430f5aa96d2b4

    SHA512

    1a9becedc0abedb9fe0e5209bd3f4b8e66ea2121df6b71a3fd895e0200f16d523ada303cfefd2ba2e4ea42adbda3d7641f85a98ba3f061f81d90baba258a66eb

  • /data/data/com.macrocura.health/app_bugly/rqd_record.eup

    Filesize

    1KB

    MD5

    0e0b39b4d85d1ddf1295976246e736b9

    SHA1

    214a171eac1b6a1b01e20cf84ea20edc16cbfa4e

    SHA256

    f51747da51d0971f8310122d57be356b608142e3fb3f79193571a54b9c25a76c

    SHA512

    c91736aadb2b87e120856d849386b784b88aa3bd098268bb6c7a79eb4232abf6131ec09e9fa860be02f2a9cdf97e41eaad8a62ece9bad23c05443564381b895e

  • /data/data/com.macrocura.health/app_bugly/tomb_1703437370343.txt

    Filesize

    135B

    MD5

    aee20318337a1997f0dcb7929294713c

    SHA1

    aa166b250a757c2d0e9ddaee915352b528535e07

    SHA256

    67402f931b32284a5bc09b813eb1e48367069070c50880c22fa2e0359e502c25

    SHA512

    f884946a653204086c8f6407d40c57463fd7a53a128fd5d0a2dcd2c30536bc91c9cda664162d74baf5e58628875a9772c2af3aefd62727ce91d91f1e836d67b3

  • /data/data/com.macrocura.health/databases/bugly_db_legu

    Filesize

    12KB

    MD5

    163b0e3f017becbc89b9d7f330b78f09

    SHA1

    1ef9cd8ac8655190468d0ccece0a4738634ab0f9

    SHA256

    cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36

    SHA512

    6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd

  • /data/data/com.macrocura.health/databases/bugly_db_legu-journal

    Filesize

    512B

    MD5

    365f4b79433c07628adc3c72c29a6dcf

    SHA1

    2bc6a99c45172b6feeb6c5e605a2480d26677e8e

    SHA256

    631187b0f39d1464cf7caf25dba23cb2e02f9ba2f8ae13c880dc6a636debb994

    SHA512

    eb276064363e591b25c15949983dde33968df0fe80e02929779b47daec92a7922464fbeb357b60e49c89696d17c6c6c85b414339828df679ea64167cfb7536e4

  • /data/data/com.macrocura.health/databases/bugly_db_legu-journal

    Filesize

    8KB

    MD5

    c42f0ee513a3758b4ccd72383144786c

    SHA1

    f9af0db6b5c14c3a15aafe28edf4088a1a0eab92

    SHA256

    1dcf0b03c5f725af132693c55ae0f20616bb567ec2d69123084b052dda50dd09

    SHA512

    2e7693e5bd3eac226906a1fd8e5efe0e726d11a78fd4ab24cd0e0fd2143c48d51ff1eb06f39493a5b1248f11dfc83f4b7f7e0f14eb369047381b8d5e67963bae

  • /data/data/com.macrocura.health/databases/bugly_db_legu-journal

    Filesize

    8KB

    MD5

    0d95c84ae73fc2f7e39aee49c2420913

    SHA1

    a78bb978d9c4314eb76a0a9b91e4f98b6ba453e2

    SHA256

    8c00d5249558f8d0c24024bd554718bf583e1a3256bcd0e6ffbf18d451cbebd4

    SHA512

    20402cbe40ed34fe4279bca82d412d21e78b38d297eecf6f626101e294818a7f3b264bced724e40406251c8cedd0be1b304e25df57e80e1292bd4528d4877667

  • /data/data/com.macrocura.health/mix.dex

    Filesize

    292B

    MD5

    63f77f99bd2c2b772a479923bde11974

    SHA1

    c7632e7d301e4463fafce85f84e9c3d7da3fdbbe

    SHA256

    4c76a3af64cdd2f8713ffe2733dea50dbe714d0ca41c17d1847ee5b62a7ca615

    SHA512

    3aae4a89d1ed51fdd911cb367eb10afe3c2264e4222085891b18a60d5412f85d10bf5c8f3c6642db70abb9aa42732bac5c42c42ee32d587100f53c21b5beb16c