Analysis

  • max time kernel
    2541475s
  • max time network
    164s
  • platform
    android_x64
  • resource
    android-x64-20231215-en
  • resource tags

    androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
  • submitted
    23/12/2023, 16:17

General

  • Target

    47bd466b85b6a71f937d868c964235ee25c77a9ece8453856190210727f16f15.apk

  • Size

    8.3MB

  • MD5

    8ab737e4edc86ee0a4d7179760d560d5

  • SHA1

    c8dd4bd913efe06b7cb44e6dd3958343e7468c6b

  • SHA256

    47bd466b85b6a71f937d868c964235ee25c77a9ece8453856190210727f16f15

  • SHA512

    8ab481c96c9a536aa04067510250965c382bf8f232c0768bbead099bd46bfcdf18d60b985cd63e230fa9911c1f1025a44d7dad372cb224e609e495247141d46d

  • SSDEEP

    196608:lge53z2Y/bZaMyJFJ8zcoLhhfzBxKXzVFuxM9Ve9n:283z/TyJFa3hfxKXzVAKU

Score
7/10

Malware Config

Signatures

  • Loads dropped Dex/Jar 1 IoCs

    Runs executable file dropped to the device during analysis.

  • Reads information about phone network operator.
  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • igudi.com.hanyu
    1⤵
    • Loads dropped Dex/Jar
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4998

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

  • /data/data/igudi.com.hanyu/app_baidu_ad_sdk/__xadsdk__remote__final__builtin__.jar

    Filesize

    39KB

    MD5

    012f5c8c870611560791f2841162b008

    SHA1

    55855aa32228a4a564d7a3704453deea0888b9bc

    SHA256

    1bc51b5ce95e6f20d2f121e794dd76911d97aca19e65645d5e07a821210cd40e

    SHA512

    820e4dc337fa288002e8533a7267a0edc827e9d26c69d118dc83de6e65bf68b2d473a7262f3b6416b9582306bde880d7ed29920b9c4b22df689ced19d30c77c1

  • /data/data/igudi.com.hanyu/files/.um/um_cache_1703348447902.env

    Filesize

    543B

    MD5

    cf52451e41fba94709155c6dca5a181d

    SHA1

    f3e6b22f739db218239d3c5101b473a377fa49b7

    SHA256

    677be1fdc85ee4e632518815444b746f8ce48dc8d152e134b8a94ba96f06fb99

    SHA512

    e8b8911b5e12ec5d7406b7305930c53183528be722e2d0a3051949f95d00697fcd49701b52dfd30825e9ebd36184b0833869a73f3db6d37247ee31a988a04a01

  • /data/data/igudi.com.hanyu/files/.umeng/exchangeIdentity.json

    Filesize

    162B

    MD5

    8a0bd2ccde41aee3e68a3fd43b0e2c3a

    SHA1

    6eac6c2d74d578ec5c24f3dd61cdf2042ed3010c

    SHA256

    84eeb074440e9d7ea556a0c371321b879a7ff92eb523b29316908450bf70eaec

    SHA512

    52719f68482869bb1d8d6e803a76ab36cc00bf311f4ddff1b0445bf5193367ff5c05cdbc8828b00762e323f555f2b057439477ea99d7d1c1f15b7280bcdf77f5

  • /data/data/igudi.com.hanyu/files/CacheTime.dat

    Filesize

    13B

    MD5

    eb37c57d72a5e8371d4d9b584034ac7d

    SHA1

    c2875ded9bcc3e1279c001cfdf6efff6b2007dcc

    SHA256

    5a5e06893615a17fcfe8c501190b498720a52ab5fca2309a6126b4b52c56633b

    SHA512

    82a3b27b95169c96b5b3c01930a5bb1a1119655df5994980c6cb0e31c955eea6ab7f91837c08f4ededfb2f6a8eed9930e913366372f57f48076196d4dadc520d

  • /data/data/igudi.com.hanyu/files/umeng_it.cache

    Filesize

    245B

    MD5

    26f82f5a4568d2cf780c2662eb3d3851

    SHA1

    cdfed1f8d5be95d10ec18ec0d69e37fe674ddae9

    SHA256

    3e8400d1fd18133369860d379d3887b9199066f6b5753ac54ea858873827a386

    SHA512

    acd0cc0763b51107777c01d84dce26be3202239259c7ef2c9f905bb0d7f1cd4db7c7d193b929dafda7834a50f9cd1ee7e181da0823da9b25bc901e872afb7fd3

  • /data/user/0/igudi.com.hanyu/app_baidu_ad_sdk/__xadsdk__remote__final__builtin__.jar

    Filesize

    84KB

    MD5

    7bd98067ff38edda5c5addbbc4f5f10b

    SHA1

    576af47719415b03cbca9cbb0432c1537f1bea68

    SHA256

    6ca63a98b2d7d2c3e718995b80d11b98100e9329ebca6e85d24a5372e86b6930

    SHA512

    d709a39e1b8155b1d56ea4f741c1235ce01ded1372e238f488ec97dc421793cc7680864c659210eeb0057a3826bddea9bc17c7df384c632cb81ca252831e3317

  • /storage/emulated/0/Android/data/.class/android

    Filesize

    33B

    MD5

    0f44edbc45401773c96dd5e2a39ba212

    SHA1

    116c913e3b6f4f77f9549426bf6e4a4d279396d5

    SHA256

    745fd71594e73895acc4a7b052c1c08184aa5239f3edf22c152826c49953fa28

    SHA512

    b9ebcb18204d3b6a6e18cf1f140eda5bf40026e893415488d5d69c7288002512955ba6d9b2811609d48e1d3352f7c58fea88188d1b47747eeb6339dbd4a3b471

  • /storage/emulated/0/Android/data/cache/AppPackage.dat

    Filesize

    16B

    MD5

    f81c5bb08d6871156278d6214e12f96a

    SHA1

    80e5f30c604b778e1fde1576db0a073fc23542c1

    SHA256

    3b034acdad93fe8182ff5278689ba3521ae2786547a33a25a22697b5c6f468fc

    SHA512

    93ecd174f49537086f57465b0fddbf84e45bcb45d4d0023b9d4cc680aef808b523b8ff1a9decc6462759154d6cc83ffcffdddaec41cad175811775c5c1a5bd4c