Analysis
-
max time kernel
2541475s -
max time network
164s -
platform
android_x64 -
resource
android-x64-20231215-en -
resource tags
androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system -
submitted
23/12/2023, 16:17
Static task
static1
Behavioral task
behavioral1
Sample
47bd466b85b6a71f937d868c964235ee25c77a9ece8453856190210727f16f15.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral2
Sample
47bd466b85b6a71f937d868c964235ee25c77a9ece8453856190210727f16f15.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral3
Sample
__xadsdk__remote__final__.apk
Resource
android-x86-arm-20231215-en
Behavioral task
behavioral4
Sample
__xadsdk__remote__final__.apk
Resource
android-x64-20231215-en
Behavioral task
behavioral5
Sample
__xadsdk__remote__final__.apk
Resource
android-x64-arm64-20231215-en
General
-
Target
47bd466b85b6a71f937d868c964235ee25c77a9ece8453856190210727f16f15.apk
-
Size
8.3MB
-
MD5
8ab737e4edc86ee0a4d7179760d560d5
-
SHA1
c8dd4bd913efe06b7cb44e6dd3958343e7468c6b
-
SHA256
47bd466b85b6a71f937d868c964235ee25c77a9ece8453856190210727f16f15
-
SHA512
8ab481c96c9a536aa04067510250965c382bf8f232c0768bbead099bd46bfcdf18d60b985cd63e230fa9911c1f1025a44d7dad372cb224e609e495247141d46d
-
SSDEEP
196608:lge53z2Y/bZaMyJFJ8zcoLhhfzBxKXzVFuxM9Ve9n:283z/TyJFa3hfxKXzVAKU
Malware Config
Signatures
-
Loads dropped Dex/Jar 1 IoCs
Runs executable file dropped to the device during analysis.
ioc pid Process /data/user/0/igudi.com.hanyu/app_baidu_ad_sdk/__xadsdk__remote__final__builtin__.jar 4998 igudi.com.hanyu -
Reads information about phone network operator.
-
Uses Crypto APIs (Might try to encrypt user data) 1 IoCs
description ioc Process Framework API call javax.crypto.Cipher.doFinal igudi.com.hanyu
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
39KB
MD5012f5c8c870611560791f2841162b008
SHA155855aa32228a4a564d7a3704453deea0888b9bc
SHA2561bc51b5ce95e6f20d2f121e794dd76911d97aca19e65645d5e07a821210cd40e
SHA512820e4dc337fa288002e8533a7267a0edc827e9d26c69d118dc83de6e65bf68b2d473a7262f3b6416b9582306bde880d7ed29920b9c4b22df689ced19d30c77c1
-
Filesize
543B
MD5cf52451e41fba94709155c6dca5a181d
SHA1f3e6b22f739db218239d3c5101b473a377fa49b7
SHA256677be1fdc85ee4e632518815444b746f8ce48dc8d152e134b8a94ba96f06fb99
SHA512e8b8911b5e12ec5d7406b7305930c53183528be722e2d0a3051949f95d00697fcd49701b52dfd30825e9ebd36184b0833869a73f3db6d37247ee31a988a04a01
-
Filesize
162B
MD58a0bd2ccde41aee3e68a3fd43b0e2c3a
SHA16eac6c2d74d578ec5c24f3dd61cdf2042ed3010c
SHA25684eeb074440e9d7ea556a0c371321b879a7ff92eb523b29316908450bf70eaec
SHA51252719f68482869bb1d8d6e803a76ab36cc00bf311f4ddff1b0445bf5193367ff5c05cdbc8828b00762e323f555f2b057439477ea99d7d1c1f15b7280bcdf77f5
-
Filesize
13B
MD5eb37c57d72a5e8371d4d9b584034ac7d
SHA1c2875ded9bcc3e1279c001cfdf6efff6b2007dcc
SHA2565a5e06893615a17fcfe8c501190b498720a52ab5fca2309a6126b4b52c56633b
SHA51282a3b27b95169c96b5b3c01930a5bb1a1119655df5994980c6cb0e31c955eea6ab7f91837c08f4ededfb2f6a8eed9930e913366372f57f48076196d4dadc520d
-
Filesize
245B
MD526f82f5a4568d2cf780c2662eb3d3851
SHA1cdfed1f8d5be95d10ec18ec0d69e37fe674ddae9
SHA2563e8400d1fd18133369860d379d3887b9199066f6b5753ac54ea858873827a386
SHA512acd0cc0763b51107777c01d84dce26be3202239259c7ef2c9f905bb0d7f1cd4db7c7d193b929dafda7834a50f9cd1ee7e181da0823da9b25bc901e872afb7fd3
-
Filesize
84KB
MD57bd98067ff38edda5c5addbbc4f5f10b
SHA1576af47719415b03cbca9cbb0432c1537f1bea68
SHA2566ca63a98b2d7d2c3e718995b80d11b98100e9329ebca6e85d24a5372e86b6930
SHA512d709a39e1b8155b1d56ea4f741c1235ce01ded1372e238f488ec97dc421793cc7680864c659210eeb0057a3826bddea9bc17c7df384c632cb81ca252831e3317
-
Filesize
33B
MD50f44edbc45401773c96dd5e2a39ba212
SHA1116c913e3b6f4f77f9549426bf6e4a4d279396d5
SHA256745fd71594e73895acc4a7b052c1c08184aa5239f3edf22c152826c49953fa28
SHA512b9ebcb18204d3b6a6e18cf1f140eda5bf40026e893415488d5d69c7288002512955ba6d9b2811609d48e1d3352f7c58fea88188d1b47747eeb6339dbd4a3b471
-
Filesize
16B
MD5f81c5bb08d6871156278d6214e12f96a
SHA180e5f30c604b778e1fde1576db0a073fc23542c1
SHA2563b034acdad93fe8182ff5278689ba3521ae2786547a33a25a22697b5c6f468fc
SHA51293ecd174f49537086f57465b0fddbf84e45bcb45d4d0023b9d4cc680aef808b523b8ff1a9decc6462759154d6cc83ffcffdddaec41cad175811775c5c1a5bd4c