Analysis

  • max time kernel
    2570549s
  • max time network
    148s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23-12-2023 16:56

General

  • Target

    50b68faa5d24df88c45d395486b54d249e06d0490d96bf0ba798cf6905caa586.apk

  • Size

    8.3MB

  • MD5

    cff18a729a56c523b6e67e06f4b10685

  • SHA1

    caea51b2f1a43e6f028c2171c2acdd04d2831bfb

  • SHA256

    50b68faa5d24df88c45d395486b54d249e06d0490d96bf0ba798cf6905caa586

  • SHA512

    29b19efc1e21375ff70fe0e03afa28244c03126111be5a2179d3ceb134007c7a3cea10069f67ec75fe3ed9f9f853013d90227de5ab2e2126313525d9cd37b8bd

  • SSDEEP

    98304:miOEq2zUficy2VY3DuvrCDpZvlrVh0D2zzrOnxnwGsWVJUFYR1JxLNZTDop79tT8:miRqlHMuzWrB6rV51PNZTIDT3wV

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.app.vipc.digit.tools
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4236
    • /system/bin/sh -c getprop ro.board.platform
      2⤵
        PID:4272
      • getprop ro.board.platform
        2⤵
          PID:4272

      Network

      MITRE ATT&CK Matrix

      Replay Monitor

      Loading Replay Monitor...

      Downloads

      • /data/data/com.app.vipc.digit.tools/databases/bugly_db_

        Filesize

        4KB

        MD5

        f2b4b0190b9f384ca885f0c8c9b14700

        SHA1

        934ff2646757b5b6e7f20f6a0aa76c7f995d9361

        SHA256

        0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

        SHA512

        ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

      • /data/data/com.app.vipc.digit.tools/databases/bugly_db_-journal

        Filesize

        512B

        MD5

        bc1e41298e1d7712137e8c787d162743

        SHA1

        17022472c310b028277297430531b71c6949c87c

        SHA256

        869408acb0a1a77252889921d2e27940e8a71ae1b7c047f91b049ea2c84e0afa

        SHA512

        43f9f2e4c3c5b699bdd7aeb65c9f861c14c1a8890358347e7be82b90555ea3e5b2a0f7a7ef85493a149a0432b73c7fcc6542b272aba1f48e8c94be34f483d951

      • /data/data/com.app.vipc.digit.tools/databases/bugly_db_-shm

        Filesize

        28KB

        MD5

        cf845a781c107ec1346e849c9dd1b7e8

        SHA1

        b44ccc7f7d519352422e59ee8b0bdbac881768a7

        SHA256

        18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

        SHA512

        4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

      • /data/data/com.app.vipc.digit.tools/databases/bugly_db_-wal

        Filesize

        56KB

        MD5

        c2f8bd0d58cdf27c62942485c2334afc

        SHA1

        9cfd9d9c63b00aa24fcb62bbdf53e036e8949894

        SHA256

        86bd61199d5ab831118ce7a9848f893ccf8179e8dce5b249b3cbbd43ba05a4fc

        SHA512

        bcddb31549f77a6b38489c6c8e6a19d188ba5413a1489e483097221e62b90fc2fef7eaa7b1ea7b360b7ac0f2764c85411f99c20b13e70539195c2aaa51e27e41

      • /data/data/com.app.vipc.digit.tools/databases/cc/cc.db

        Filesize

        36KB

        MD5

        ce6135aa1b1fe4f2c2db2a546d2a5558

        SHA1

        79b59582154017aadab783dc266fcb158c252940

        SHA256

        7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

        SHA512

        2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

      • /data/data/com.app.vipc.digit.tools/databases/cc/cc.db-journal

        Filesize

        512B

        MD5

        8b03fc2bf35cda6f4cb6985782479a2f

        SHA1

        e367e58a86953429cc50077d931d87087539ecfb

        SHA256

        ce2dc1daf1c615fe0adcee9ede6d0374fd3a1809fa69483ef000492b22699c3d

        SHA512

        932c23dd1c9da1094dd02a721dd617504880eef04fb6f1dabe0f75f54cb6d58371cac6688b30cead620fc8f739f4fc7df9860fe0d9d8db4532a06c48ca274368

      • /data/data/com.app.vipc.digit.tools/databases/cc/cc.db-wal

        Filesize

        16KB

        MD5

        5587104919e744413d59e416d479eb84

        SHA1

        187687d1df141dc7fd8e26fea4cc44a10abbbace

        SHA256

        2d467a3381197df5caa9bd64ebe9ea38de4d2ed66bafeaf0cc2ed560058654dc

        SHA512

        95165ef6d621e843430e2136b529425bf0ce8f8a79899758b9265cad2e0a179ff43dadf4990282ecdd8abb6a2f748d7e2af8c464a426e030c612f92d7007c5a6

      • /data/data/com.app.vipc.digit.tools/databases/cc/cc.db-wal

        Filesize

        48KB

        MD5

        718eb004c81de249efb9019fcf3f938f

        SHA1

        b2d0ea32bf3cd39cdf63875e1c59dc57c4d19422

        SHA256

        95544c21a2daaa3612564a51120e5af1b1d5d9b461a1e8e8860c94122b49c0e1

        SHA512

        0dc95b1e199e162d35036ef33ebba27f4c99ad6d6a9b7ec36b26de1ac66f10a5135692b4378a949782bc46773c40cd23d8b1591d565d7a52de01a7c046205587

      • /data/data/com.app.vipc.digit.tools/databases/ua.db

        Filesize

        16KB

        MD5

        d707ac4980a0bb0f1792283d9e251cea

        SHA1

        6cd5e1711d914cc1e0eb0f551c674fad1b02fdf4

        SHA256

        6044330c4d3c51ea1904c93e0b78da398da971f54dece3984b405bbc3c8ab417

        SHA512

        edd9b1916a45a93356428731ba1da0e1e08e470c3c8f86776de9fd290e92fe298fc6ebae9feac1e5be33c4240f509ccbc222079415bf2c07763db9841d7b8773

      • /data/data/com.app.vipc.digit.tools/databases/ua.db

        Filesize

        32KB

        MD5

        d604a3bf1f8d992cc320ea5b1f7609bd

        SHA1

        247f88df0b55c7d523ea5398637711a0e4a483a4

        SHA256

        329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17

        SHA512

        67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

      • /data/data/com.app.vipc.digit.tools/databases/ua.db-journal

        Filesize

        512B

        MD5

        82341aae57af922ded9a8da09bd05063

        SHA1

        b96040f219a815dc5409a41b3bbb4a8fb000aba2

        SHA256

        d88f35da9c5398447ae1a5f24a601eccf668435a46c710f67c2e494cec1a8804

        SHA512

        7487d936fd578f90dc195d412c877c56fc8bc653f1ab15d0bd02b550898a615fe62d3fa3558075325e1bc57da9a2d711f4b1ade8e83417475610f0f5181f0152

      • /data/data/com.app.vipc.digit.tools/databases/ua.db-wal

        Filesize

        56KB

        MD5

        57ba1cb69e313d4b6d2b1798206d5715

        SHA1

        84be343919a5c41d2bf6551707e6a3b107326f5f

        SHA256

        8103351cad1c4a3ae308a0a9bc421831815b88f69ad667ad3f55628f63709871

        SHA512

        8b0cbc655dcc43743c885fd71bda35890bb04ca4f54a7a2f578123d7ce1b92916e1daf8cadcbeea2926dbbd2ded0ae29cc83d4cea46cf8acc6f12a86e1266603

      • /data/data/com.app.vipc.digit.tools/databases/ua.db-wal

        Filesize

        8KB

        MD5

        df11bac24148409b730a3794d2a2dcc0

        SHA1

        854ac4439679395e5e2c5987054d76bbea663866

        SHA256

        8c844f12a978240fbc022f65a35a7a70e64cf5cee55f0d1847fd482edbca23a0

        SHA512

        b4bbe3a050dbbedd25ce4c83e9955cbd30e613bf3055e37e7287af483ca7e08230e966fb912af17ba7c62eb54cdbac9a4e46024184709e639ef423a1d6ab2c68

      • /data/data/com.app.vipc.digit.tools/databases/ua.db-wal

        Filesize

        8KB

        MD5

        d6268f2dd61655d52cfe97ac84fd8271

        SHA1

        0e0d537f65560adbfc66e6d286c2234f89017b46

        SHA256

        82b227ef819693fdf2e9cd863173a61603ad8c5d326a889c1d1d4999e64b3b98

        SHA512

        fa87e62b4c6e198dfb9982fde16580b8cb5bd73dad3526566cbb9833f1427d89424a900b7066c93e9932e0a2aa5850f8bf20d03ed73df8c589e963a927f201fe

      • /data/data/com.app.vipc.digit.tools/files/.imprint

        Filesize

        1003B

        MD5

        c89e7087d17b9845219c7420071fe88b

        SHA1

        1f287d080dc4b935cfb5c0b927dc44b63535ec44

        SHA256

        ecd64648d439fc762627e9570c291eb897385258f2cbd0ef2ab493e65df9fa91

        SHA512

        da7afd64f1cbd98b4c62256ac3920119f06a4fd8a1e3e9a3ed7c493ba4014445e72492964255e665abcdaef83fc6e5fcfe008e09b5feec180d12b929ab5ad320

      • /data/data/com.app.vipc.digit.tools/files/.umeng/exchangeIdentity.json

        Filesize

        162B

        MD5

        c0130153d93fe27040257802c8789635

        SHA1

        6cadf41f91f574e884d28145546bf00c6f82b328

        SHA256

        248619d1e104f8f409f52d71d78405401166c8f8f7614d8f6ddae0892183965a

        SHA512

        0c1fc59c98aa73f251e1b1411efabd324b15b25cf4ae14c17a95630cef144469097886eea8e4c241b4b0632a226e699d413732524a7ea300b6004c0166efbef4

      • /data/data/com.app.vipc.digit.tools/files/exid.dat

        Filesize

        59B

        MD5

        812c9085942fed9b94d3fc32b0cbcbe7

        SHA1

        ee974333d4dd7b802dbfd1bf740de260a9426921

        SHA256

        f4fa0fcda827f55f42bc468a20f82a1681206d860fd02c784014fe49dcaf52d6

        SHA512

        e541dc1de7b074f490671ef3811c87af5982a09d773f2123e64e4d3889dc7090250e3d969854b15d1d4247016a92aebfad01242faa8b38674bbcd0dd5fd345d3

      • /data/data/com.app.vipc.digit.tools/files/umeng_it.cache

        Filesize

        415B

        MD5

        75198dad1fb86bf1209272f1587d0db4

        SHA1

        e8d3c2bafdc06773950209910862d58b5726c239

        SHA256

        b97550567cf7affa0c0df1bb79524a53a5b25476860117ab33a45c3414344ffd

        SHA512

        acbd5ea2c76d543dfcc20af71c4ee13739e1301c5993b3170e057b8f49af1872254020460532d0755d1a4a86b1ea8152285faf450cd9c5e655f53d78d6a3667c

      • /data/data/com.app.vipc.digit.tools/files/umeng_it.cache

        Filesize

        211B

        MD5

        80ec155c482cf78bb9ffc1d924b2d4f8

        SHA1

        161748fc7b7d5f59b7472ab3c165b75923179fa8

        SHA256

        57662db7d0a191823444ad760feb8eabe56524fb0cede54c4c458a48a31f4eb1

        SHA512

        e4443820c2e6935d245d0b8e4c3b03ae078fc1a7490b2f2dc95a8ed0a681546181095aaad058276087b1471b29406714c9e8fe0bb03e5ae09e3bbcbf4cc757b6