Analysis

  • max time kernel
    2570549s
  • max time network
    148s
  • platform
    android_x86
  • resource
    android-x86-arm-20231215-en
  • resource tags

    androidarch:armarch:x86image:android-x86-arm-20231215-enlocale:en-usos:android-9-x86system
  • submitted
    23/12/2023, 16:56

General

  • Target

    50b68faa5d24df88c45d395486b54d249e06d0490d96bf0ba798cf6905caa586.apk

  • Size

    8.3MB

  • MD5

    cff18a729a56c523b6e67e06f4b10685

  • SHA1

    caea51b2f1a43e6f028c2171c2acdd04d2831bfb

  • SHA256

    50b68faa5d24df88c45d395486b54d249e06d0490d96bf0ba798cf6905caa586

  • SHA512

    29b19efc1e21375ff70fe0e03afa28244c03126111be5a2179d3ceb134007c7a3cea10069f67ec75fe3ed9f9f853013d90227de5ab2e2126313525d9cd37b8bd

  • SSDEEP

    98304:miOEq2zUficy2VY3DuvrCDpZvlrVh0D2zzrOnxnwGsWVJUFYR1JxLNZTDop79tT8:miRqlHMuzWrB6rV51PNZTIDT3wV

Score
4/10

Malware Config

Signatures

  • Uses Crypto APIs (Might try to encrypt user data) 1 IoCs

Processes

  • com.app.vipc.digit.tools
    1⤵
    • Uses Crypto APIs (Might try to encrypt user data)
    PID:4236
    • /system/bin/sh -c getprop ro.board.platform
      2⤵
        PID:4272
      • getprop ro.board.platform
        2⤵
          PID:4272

      Network

            MITRE ATT&CK Matrix

            Replay Monitor

            Loading Replay Monitor...

            Downloads

            • /data/data/com.app.vipc.digit.tools/databases/bugly_db_

              Filesize

              4KB

              MD5

              f2b4b0190b9f384ca885f0c8c9b14700

              SHA1

              934ff2646757b5b6e7f20f6a0aa76c7f995d9361

              SHA256

              0a8ffb6b327963558716e87db8946016d143e39f895fa1b43e95ba7032ce2514

              SHA512

              ec12685fc0d60526eed4d38820aad95611f3e93ae372be5a57142d8e8a1ba17e6e5dfe381a4e1365dddc0b363c9c40daaffdc1245bd515fddac69bf1abacd7f1

            • /data/data/com.app.vipc.digit.tools/databases/bugly_db_-journal

              Filesize

              512B

              MD5

              bc1e41298e1d7712137e8c787d162743

              SHA1

              17022472c310b028277297430531b71c6949c87c

              SHA256

              869408acb0a1a77252889921d2e27940e8a71ae1b7c047f91b049ea2c84e0afa

              SHA512

              43f9f2e4c3c5b699bdd7aeb65c9f861c14c1a8890358347e7be82b90555ea3e5b2a0f7a7ef85493a149a0432b73c7fcc6542b272aba1f48e8c94be34f483d951

            • /data/data/com.app.vipc.digit.tools/databases/bugly_db_-shm

              Filesize

              28KB

              MD5

              cf845a781c107ec1346e849c9dd1b7e8

              SHA1

              b44ccc7f7d519352422e59ee8b0bdbac881768a7

              SHA256

              18619b678a5c207a971a0aa931604f48162e307c57ecdec450d5f095fe9f32c7

              SHA512

              4802861ea06dc7fb85229a3c8f04e707a084f1ba516510c6f269821b33c8ee4ebf495258fe5bee4850668a5aac1a45f0edf51580da13b7ee160a29d067c67612

            • /data/data/com.app.vipc.digit.tools/databases/bugly_db_-wal

              Filesize

              56KB

              MD5

              c2f8bd0d58cdf27c62942485c2334afc

              SHA1

              9cfd9d9c63b00aa24fcb62bbdf53e036e8949894

              SHA256

              86bd61199d5ab831118ce7a9848f893ccf8179e8dce5b249b3cbbd43ba05a4fc

              SHA512

              bcddb31549f77a6b38489c6c8e6a19d188ba5413a1489e483097221e62b90fc2fef7eaa7b1ea7b360b7ac0f2764c85411f99c20b13e70539195c2aaa51e27e41

            • /data/data/com.app.vipc.digit.tools/databases/cc/cc.db

              Filesize

              36KB

              MD5

              ce6135aa1b1fe4f2c2db2a546d2a5558

              SHA1

              79b59582154017aadab783dc266fcb158c252940

              SHA256

              7b45f576c08c7f78220168cca4a0e33198b13e9bdc8b1da406ddb6887412000c

              SHA512

              2839075fe374c8567c839ae35ce2d33ec72fdaebf170aa7d224b555e5b0e74d4a43f2f67d17ed806dae841da883e9620d788ea052d06152678afa927307c7ce4

            • /data/data/com.app.vipc.digit.tools/databases/cc/cc.db-journal

              Filesize

              512B

              MD5

              8b03fc2bf35cda6f4cb6985782479a2f

              SHA1

              e367e58a86953429cc50077d931d87087539ecfb

              SHA256

              ce2dc1daf1c615fe0adcee9ede6d0374fd3a1809fa69483ef000492b22699c3d

              SHA512

              932c23dd1c9da1094dd02a721dd617504880eef04fb6f1dabe0f75f54cb6d58371cac6688b30cead620fc8f739f4fc7df9860fe0d9d8db4532a06c48ca274368

            • /data/data/com.app.vipc.digit.tools/databases/cc/cc.db-wal

              Filesize

              16KB

              MD5

              5587104919e744413d59e416d479eb84

              SHA1

              187687d1df141dc7fd8e26fea4cc44a10abbbace

              SHA256

              2d467a3381197df5caa9bd64ebe9ea38de4d2ed66bafeaf0cc2ed560058654dc

              SHA512

              95165ef6d621e843430e2136b529425bf0ce8f8a79899758b9265cad2e0a179ff43dadf4990282ecdd8abb6a2f748d7e2af8c464a426e030c612f92d7007c5a6

            • /data/data/com.app.vipc.digit.tools/databases/cc/cc.db-wal

              Filesize

              48KB

              MD5

              718eb004c81de249efb9019fcf3f938f

              SHA1

              b2d0ea32bf3cd39cdf63875e1c59dc57c4d19422

              SHA256

              95544c21a2daaa3612564a51120e5af1b1d5d9b461a1e8e8860c94122b49c0e1

              SHA512

              0dc95b1e199e162d35036ef33ebba27f4c99ad6d6a9b7ec36b26de1ac66f10a5135692b4378a949782bc46773c40cd23d8b1591d565d7a52de01a7c046205587

            • /data/data/com.app.vipc.digit.tools/databases/ua.db

              Filesize

              16KB

              MD5

              d707ac4980a0bb0f1792283d9e251cea

              SHA1

              6cd5e1711d914cc1e0eb0f551c674fad1b02fdf4

              SHA256

              6044330c4d3c51ea1904c93e0b78da398da971f54dece3984b405bbc3c8ab417

              SHA512

              edd9b1916a45a93356428731ba1da0e1e08e470c3c8f86776de9fd290e92fe298fc6ebae9feac1e5be33c4240f509ccbc222079415bf2c07763db9841d7b8773

            • /data/data/com.app.vipc.digit.tools/databases/ua.db

              Filesize

              32KB

              MD5

              d604a3bf1f8d992cc320ea5b1f7609bd

              SHA1

              247f88df0b55c7d523ea5398637711a0e4a483a4

              SHA256

              329940b4d46326d58e73c842dd099704061d0ef7338777bf31ad895f29013c17

              SHA512

              67e28f6713cb5c238a9664df128f01a89a2efb7c8c9330c1e45bc0d40ebab81fa20df5166743d84d81dc0386a89ff0329f022281c098339baa2e851ff0a1e1ab

            • /data/data/com.app.vipc.digit.tools/databases/ua.db-journal

              Filesize

              512B

              MD5

              82341aae57af922ded9a8da09bd05063

              SHA1

              b96040f219a815dc5409a41b3bbb4a8fb000aba2

              SHA256

              d88f35da9c5398447ae1a5f24a601eccf668435a46c710f67c2e494cec1a8804

              SHA512

              7487d936fd578f90dc195d412c877c56fc8bc653f1ab15d0bd02b550898a615fe62d3fa3558075325e1bc57da9a2d711f4b1ade8e83417475610f0f5181f0152

            • /data/data/com.app.vipc.digit.tools/databases/ua.db-wal

              Filesize

              56KB

              MD5

              57ba1cb69e313d4b6d2b1798206d5715

              SHA1

              84be343919a5c41d2bf6551707e6a3b107326f5f

              SHA256

              8103351cad1c4a3ae308a0a9bc421831815b88f69ad667ad3f55628f63709871

              SHA512

              8b0cbc655dcc43743c885fd71bda35890bb04ca4f54a7a2f578123d7ce1b92916e1daf8cadcbeea2926dbbd2ded0ae29cc83d4cea46cf8acc6f12a86e1266603

            • /data/data/com.app.vipc.digit.tools/databases/ua.db-wal

              Filesize

              8KB

              MD5

              df11bac24148409b730a3794d2a2dcc0

              SHA1

              854ac4439679395e5e2c5987054d76bbea663866

              SHA256

              8c844f12a978240fbc022f65a35a7a70e64cf5cee55f0d1847fd482edbca23a0

              SHA512

              b4bbe3a050dbbedd25ce4c83e9955cbd30e613bf3055e37e7287af483ca7e08230e966fb912af17ba7c62eb54cdbac9a4e46024184709e639ef423a1d6ab2c68

            • /data/data/com.app.vipc.digit.tools/databases/ua.db-wal

              Filesize

              8KB

              MD5

              d6268f2dd61655d52cfe97ac84fd8271

              SHA1

              0e0d537f65560adbfc66e6d286c2234f89017b46

              SHA256

              82b227ef819693fdf2e9cd863173a61603ad8c5d326a889c1d1d4999e64b3b98

              SHA512

              fa87e62b4c6e198dfb9982fde16580b8cb5bd73dad3526566cbb9833f1427d89424a900b7066c93e9932e0a2aa5850f8bf20d03ed73df8c589e963a927f201fe

            • /data/data/com.app.vipc.digit.tools/files/.imprint

              Filesize

              1003B

              MD5

              c89e7087d17b9845219c7420071fe88b

              SHA1

              1f287d080dc4b935cfb5c0b927dc44b63535ec44

              SHA256

              ecd64648d439fc762627e9570c291eb897385258f2cbd0ef2ab493e65df9fa91

              SHA512

              da7afd64f1cbd98b4c62256ac3920119f06a4fd8a1e3e9a3ed7c493ba4014445e72492964255e665abcdaef83fc6e5fcfe008e09b5feec180d12b929ab5ad320

            • /data/data/com.app.vipc.digit.tools/files/.umeng/exchangeIdentity.json

              Filesize

              162B

              MD5

              c0130153d93fe27040257802c8789635

              SHA1

              6cadf41f91f574e884d28145546bf00c6f82b328

              SHA256

              248619d1e104f8f409f52d71d78405401166c8f8f7614d8f6ddae0892183965a

              SHA512

              0c1fc59c98aa73f251e1b1411efabd324b15b25cf4ae14c17a95630cef144469097886eea8e4c241b4b0632a226e699d413732524a7ea300b6004c0166efbef4

            • /data/data/com.app.vipc.digit.tools/files/exid.dat

              Filesize

              59B

              MD5

              812c9085942fed9b94d3fc32b0cbcbe7

              SHA1

              ee974333d4dd7b802dbfd1bf740de260a9426921

              SHA256

              f4fa0fcda827f55f42bc468a20f82a1681206d860fd02c784014fe49dcaf52d6

              SHA512

              e541dc1de7b074f490671ef3811c87af5982a09d773f2123e64e4d3889dc7090250e3d969854b15d1d4247016a92aebfad01242faa8b38674bbcd0dd5fd345d3

            • /data/data/com.app.vipc.digit.tools/files/umeng_it.cache

              Filesize

              415B

              MD5

              75198dad1fb86bf1209272f1587d0db4

              SHA1

              e8d3c2bafdc06773950209910862d58b5726c239

              SHA256

              b97550567cf7affa0c0df1bb79524a53a5b25476860117ab33a45c3414344ffd

              SHA512

              acbd5ea2c76d543dfcc20af71c4ee13739e1301c5993b3170e057b8f49af1872254020460532d0755d1a4a86b1ea8152285faf450cd9c5e655f53d78d6a3667c

            • /data/data/com.app.vipc.digit.tools/files/umeng_it.cache

              Filesize

              211B

              MD5

              80ec155c482cf78bb9ffc1d924b2d4f8

              SHA1

              161748fc7b7d5f59b7472ab3c165b75923179fa8

              SHA256

              57662db7d0a191823444ad760feb8eabe56524fb0cede54c4c458a48a31f4eb1

              SHA512

              e4443820c2e6935d245d0b8e4c3b03ae078fc1a7490b2f2dc95a8ed0a681546181095aaad058276087b1471b29406714c9e8fe0bb03e5ae09e3bbcbf4cc757b6