668f399acaaae3ba99695d26189b9ae0f36a1dad2f113c315cd48fc23bd8b523

Analysis

max time kernel
2588415s
max time network
164s
platform
android_x64
resource
android-x64-20231215-en
resource tags

androidarch:x64arch:x86image:android-x64-20231215-enlocale:en-usos:android-10-x64system
submitted
23/12/2023, 18:25

Sharing

Copy URL

Twitter E-mail

Report Analysis Logs

General

Target

668f399acaaae3ba99695d26189b9ae0f36a1dad2f113c315cd48fc23bd8b523.apk
Size

29.2MB
MD5

2edcde54179dfbaf697581b082a2ac7b
SHA1

a504e518cbb2e7c64ff11afd7eb074a66dad8a9d
SHA256

668f399acaaae3ba99695d26189b9ae0f36a1dad2f113c315cd48fc23bd8b523
SHA512

619fdf5a23ba190086a2954336383a89d634e8f160485439f295d10543635cf6fb68d757b07fe236785199992dddf79c2c08c04413f654081666c1963208b239
SSDEEP

786432:o+srtmiC4npAosluA3757vU3Xmf18M3qlfV3jrXoERZ62nzS7PkTXGbrf0Pf:gznSnluA375juWfSM34hjkEO2nzobrs3

Score

6^/10

Malware Config

Signatures

Queries the unique device ID (IMEI, MEID, IMSI)
Reads information about phone network operator.

Uses Crypto APIs (Might try to encrypt user data) 2 IoCs

description	ioc	Process
Framework API call	javax.crypto.Cipher.doFinal	xhd.com.ys
Framework API call	javax.crypto.Cipher.doFinal	xhd.com.ys:pushservice

xhd.com.ys
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:4988

xhd.com.ys:pushservice
1⤵
- Uses Crypto APIs (Might try to encrypt user data)
PID:5188

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads

/data/data/xhd.com.ys/databases/cc/cc.db

Filesize
36KB

MD5
67c12933d1e0e63d9801a6aa43092ce7

SHA1
b6936908554e4a1986b8eb08289e2d3545e8ff74

SHA256
abda5dd4cc2e7dbb951637c4b49d6990f9f34411fab4dee1a387dbcc8e7eed40

SHA512
db8b818daa3ff4ec7678645f84bf8b45c809bcbb758ea78b28982d071572655bba2d20e6f1ca4f0d057ab34fa655c5bc40457dc65050180351a2fc04a47175dd

Download Submit
/data/data/xhd.com.ys/databases/cc/cc.db

Filesize
36KB

MD5
0908e924aa236931dc7166fef6e00862

SHA1
7782648d6d8f6e835bd47058d4852932c096a467

SHA256
38f8548795ca7470b449dd1de9598c07a247ba59883c0764c9c96ff0b7d31d7f

SHA512
3c16fbc5172aed04cd206e776c46d26e911732c6e3631536410a71f1d217449475727ac9b3175e827c5ce645a1da9e05900258ee6ca27c936a9060f241361dee

Download Submit
/data/data/xhd.com.ys/databases/cc/cc.db-journal

Filesize
8KB

MD5
98c52c7806dabcec8430c950518931fb

SHA1
963354b5743fb796733b0a0a3fd873dda07ac3e2

SHA256
149031380eec0a7c394c33e81d5b461a12c94607d5acb4cfa54091eebf0e7b5e

SHA512
a5ce5905ef76316b0f7685022f17c4c6c1677a2294afa8c37000cee08c0ab75539e56eac559408bf9ae794e1b0e23122fc4c5c8676dc34793564d1dd2dfd6ed7

Download Submit
/data/data/xhd.com.ys/databases/cc/cc.db-journal

Filesize
8KB

MD5
083dd42dfba9e23ffc512b7d05a5c829

SHA1
76e97d4ec51fc4f24b310b42ef57f9ddb8466010

SHA256
042c20ee3ea953a2bf611611ea2f561df18b634ff4188f7ef271586bb8cf1121

SHA512
84b95fd36b7b01ca34cac628e4b3ffaae83eb35db864b9ef2f2c83ec85fc8800e687acc4707946be40bd56c57e2cbc6f84a65e2081f6161a121a4c70962d76de

Download Submit
/data/data/xhd.com.ys/databases/cc/cc.db-journal

Filesize
8KB

MD5
70295b18983603088ed6dd435c4cfac3

SHA1
ca12d9817971b7a76b3fa732bc5191f432863a28

SHA256
b276d7bb97d7add773a843eedd508e454cc5068eac8058d054eacea99343a12a

SHA512
40f534d4d5976212ef1ae1bf33959c81e2e1198c58b4b34676a03561fe1f2c7e61bf4824a59e0baf4b718ddb477b8838d8967f029b73a0593776a8511ae13eb3

Download Submit
/data/data/xhd.com.ys/databases/cc/cc.db-journal

Filesize
12KB

MD5
505d47ed9766d5da87221c67248aaa51

SHA1
6b71ba3f37b298c4651759b17c6b1fe7e9f2f16d

SHA256
d44d8b254d93226118f0e7ee159e6ca1dc0d04625c577385e10fa3f4d85937c4

SHA512
6f3cb66a15d17ce7be2779d342fed5e5c0ae2deac7d94f25a378b040c9f27eb357a5f660024627927c4561e8c53bc93f3d924e6c05afab08e1d84ee7880a1ce7

Download Submit
/data/data/xhd.com.ys/databases/cc/cc.db-journal

Filesize
512B

MD5
99016bcec02830d7ad3a78e90ec53255

SHA1
0e7939b4fd37b7fd3ab91f8eaf59fedbc421cdbe

SHA256
b3ce7ec2682f2e1a55a6bb19d74dd54bca5641009cd2bf5ed5e8f87f08dce7d5

SHA512
d6e2d23ab561239ee30003ed83d49acbab53f55069eb191d93d52cfce159ae882bfd51104f51506eea0424abbaf965b8856247379c453039dd38f900c06a5b95

Download Submit
/data/data/xhd.com.ys/databases/cc/cc.db-journal

Filesize
8KB

MD5
359804233ef02a16d70eabad41786efa

SHA1
b1bea6d3c545b878f751401baef5d4e45d60ae02

SHA256
054117850215f3561d9c745b3317f1a2846e34a70dc57e28c96364c0af765f73

SHA512
6ae91a0001d40bb654a8eddc7e379086d77161c14513b064af80ecc3879ee5ab02e5caccc8df1df4277f19d47a56545018c92be11d246acd5f321cecd170c068

Download Submit
/data/data/xhd.com.ys/databases/pushext.db

Filesize
32KB

MD5
b2e028d6c3bc7cb8ccc0e32af552ce28

SHA1
36a0cc674d6a6ec859feef723094fd699644aead

SHA256
98a5b4a14b48f70f706643394fb832a0dcebb0d62de4f48217b2f1fad3eb3ad8

SHA512
cc74cf050db263ee80027acd1c9b6a9281a8d53a675ae7a16c785a0694968dbdba3384909b60338fc7d5005dd93581107a540a61122640f0b6dd95d8b4809d33

Download Submit
/data/data/xhd.com.ys/databases/pushext.db-journal

Filesize
512B

MD5
b6ce12a73f134cdaaed650013fa07c2c

SHA1
22ea70dc850cfa138d4480bad5cd67b575291bb8

SHA256
f101e62dd64ddda722891217b871f9688462151a86278b04b9abf72e672a0719

SHA512
2d84c2d5a51c2a1cf10f2b4422abe9cd3a46091957cd292855cb1d884a3c2fe95bfe07662b212dc4e77a820f6c1e84ca8d7c72e644ff7f7b1c9a8d12d2fc7307

Download Submit
/data/data/xhd.com.ys/databases/pushext.db-journal

Filesize
8KB

MD5
bebf1013173bf652752e07d49a69925b

SHA1
6d1a1e2f733b77183921147cc3fa313943e64753

SHA256
c1457f9c82e52333919d1004632f4a7fb0745faccc10c8ad2092b8e7195e4b44

SHA512
5e79d2496202e29f51626634c16af5215766b008011ffd96bafb5d7bc6b0e0d7877d9f94855503d96647b0a7514cf95219f2e33e8aa1f376082419d47766a97b

Download Submit
/data/data/xhd.com.ys/databases/pushext.db-journal

Filesize
8KB

MD5
e43a350ffb58b84dc38ada292ed36b05

SHA1
672c718162442bc054b176b1665e8b188c8b7889

SHA256
90b4951cf1f19261a306b1cb28a0aecc6a02864294d9ed0ecfec8baf637e92f8

SHA512
9ad711e6de83a96bc7598c5c2a608ac22edc0ffd0d3a037bb8c13c770c07ec4b4d27b508908d16db613b91a2240cc43a773ce313f056d41fd7c72c6d9550e74c

Download Submit
/data/data/xhd.com.ys/databases/pushext.db-journal

Filesize
8KB

MD5
f1257eec40272bf9b61a31cc13718aea

SHA1
2b2632a55507eea814002c8de0aba1ff2bf6504a

SHA256
8a6594c8a013352362f893a099c34e234b1bdfa5f92bfa823e1391125f192ac8

SHA512
7269d383d472d201481d8f99c13714fbac454f9a8bc4ccece86048e4a07dd287cafd5ef6800f7bc4a780723d154beba40fbb9b217e3ebdeade1dd2852b9fa66a

Download Submit
/data/data/xhd.com.ys/databases/pushext.db-journal

Filesize
8KB

MD5
72f1620acbd4bb90dd6d79f3c93e18bb

SHA1
c6fd73ac28637b3ca9f2f28d06772358441fb5c1

SHA256
76afc3ede6f6f1c1716d6d5342f8e329dbec26df320a30442da4c9ab64868a77

SHA512
28c7bfb5af66c129dc181c91c3c670df25d8057d7ebc5b8d32026b840994e508e6863fa105a1d0430866e35b77e9301cd159a92715f4e9686632fa7e6116be73

Download Submit
/data/data/xhd.com.ys/databases/pushg.db

Filesize
12KB

MD5
163b0e3f017becbc89b9d7f330b78f09

SHA1
1ef9cd8ac8655190468d0ccece0a4738634ab0f9

SHA256
cf01452c3b494692386f6c5faac340eb3eb894bd416391002d56645aa8a9ea36

SHA512
6a85a30d16fa58a4fbbb05d469778ee69ca79deaa74316ccb5be3ee07fdf78dde22e95db3edb1b88b18478e8747047445f85baaf9556b9a1e55d9a02a80baffd

Download Submit
/data/data/xhd.com.ys/databases/pushg.db-journal

Filesize
512B

MD5
a962fcb3047c2317079480fad0309cc1

SHA1
9051c2af27e218abc14d76aca004429d76ea6b55

SHA256
cbbf5f9f3c7c530a350375a9ba50290d124432e0fb1bffd06a010662d4174834

SHA512
b2dba264104abbeab6db9857b6a57979d55c8ae37b6dac843238abb6f2f84600311dd28dda16b410007957e2998135c721706b7272a597ee5cffe557166c0bd5

Download Submit
/data/data/xhd.com.ys/databases/pushg.db-journal

Filesize
8KB

MD5
2430db5cfc428f0140bfa76400cb22cc

SHA1
65eadc162ce82cdd9421b7386652af2b82d68a97

SHA256
69b897bbba835ec99657042553c1ab1bcb90dec9ff500358db7062cec4df964c

SHA512
a6f66f1c5ef7ddd70860ed44749f7a310908b91e344ba5f73bf2a4a9afa8d0b6e79d8b0783b5dd14944a2c906ae5e4cdc676a12f2eb16ee439174a6132d10b8e

Download Submit
/data/data/xhd.com.ys/databases/pushg.db-journal

Filesize
36KB

MD5
de1b522e2057193bfc60d5cf3a0e1005

SHA1
c02c8157250176a77083adb74b42178993369dbc

SHA256
9767a85271b23ce0efac6813345309840da7e6c3de19299cb8dead98d360de26

SHA512
03c6aef85d741e8a44a1b29fba696fc7c9fc7dd4ce995d1fee44399fe77b99cd8fe68235e13e03fc28d31e21404d0b128029a41e5839a9265b6c56c4de6c0911

Download Submit
/data/data/xhd.com.ys/databases/pushg.db-journal

Filesize
12KB

MD5
45375af148d74eb7a5efafb7bb31fcee

SHA1
caab0f58da2e7796d68752376420b6638f9835a4

SHA256
664137528993dfc504a8dac378e633a2828c252811552701caa55d4ce6c94a3a

SHA512
19b6b02d1c6d13355b75347ed5bca98ba5f6cd79c875e5f1f9641ab3f9178fd48cc78227e164e14d32604139ed28b144c372f78a810e1c8d7b43346b76c82f39

Download Submit
/data/data/xhd.com.ys/databases/pushg.db-journal

Filesize
8KB

MD5
3bbab605ae4fd1daec6d4d4ba7ead9b1

SHA1
49359b8d6b781b856f010aab5d5ec9cb123d2fc5

SHA256
4918842a77ff6ae3695acc3fbeba3e8e0f65aeebc98f43b96b7744caf73d3332

SHA512
f1848f58466cbea440d02a89aa36a92be57cd359e5a86edd3305b4ae0c781efac7c772c3c9e84e2def6f933f2f278371f5bfee8c799bfed07d586aa9c3f3f945

Download Submit
/data/data/xhd.com.ys/databases/pushg.db-journal

Filesize
8KB

MD5
4856fee94e96cd9e62d1bf9244caf792

SHA1
ab9947285fa96933a947d3c7fff101f2f961a7c0

SHA256
d7587f56d0b5d355db4348797992a453177e53536b35b998262e6d4328099b13

SHA512
4b49fd4c6af29e65351de7b1f0f2c8da71bb7ab5b4c9c00825b565393ac3287f8aa64ca286aea6dfd50ab0693adaf95f64738f8ccc5a88e81a6d5563a6e9ab4c

Download Submit
/data/data/xhd.com.ys/databases/pushsdk.db

Filesize
12KB

MD5
ea628e04765adaf4238a5dcdff4bbd51

SHA1
a801947619ea8c368efe9c006a324dc6339ac60b

SHA256
885e337c2156e4dbf2176a9677ade50418740532d222ccae5ad4aa371b54c6a4

SHA512
c0287b0e7b690a7231a37d1745c49f3d861b22aa65dd769ba6a8b5ab9da55443f749957781ee05a405019c39e1be45d37a971b821bffd62a1d5620bc39119abe

Download Submit
/data/data/xhd.com.ys/databases/pushsdk.db-journal

Filesize
512B

MD5
37b301641f0e2df087a1aa1276f12b06

SHA1
f6db46bf474d4c9de15fe15ab812ac1df0acf485

SHA256
ad9a8d2d026a3f4a3bd7b814915f4adb1fcc297009e1724bc827262932768299

SHA512
06cf15bc1897677021620aa4184709057082506d8da29963c08a2831fc37b7818875379bb5973a8b7d1488472855f524c0822877cf106169f0490670dcdfaac8

Download Submit
/data/data/xhd.com.ys/databases/pushsdk.db-journal

Filesize
8KB

MD5
92384aac20a8ef8082e0f129c147e9e4

SHA1
a7dcdccab203045382ddcf4b7df6192cae6e76a0

SHA256
cf2e8eaf3819ce01110c182e8c7d7095f294db30b53790269fb125a27fc2815d

SHA512
fd953b543964ae4ed7fc69b26128d2b8a123c535ac89ce025cc46e7689c16093311d17ceb0cab09a9d85f48750d6fa669ec879de2d58c7df77fef6cb88a9470f

Download Submit
/data/data/xhd.com.ys/databases/pushsdk.db-journal

Filesize
8KB

MD5
b7a6d82bcee7cf87640e033a20973e9f

SHA1
29850824acb98ff2a132f65752b202625dadd781

SHA256
d7547804324f52251f435be460d9ad1d6b1611846ccb1ab4e4bd60c34af7d96c

SHA512
b607ddbdd4f4aa0e37fb9232ae63fb94d91b5fc720557bc5de24249a46bc7f09c545a96be29f401237173f3c3e8b41edcef7b396f644cef63f31a9d4ad1bf640

Download Submit
/data/data/xhd.com.ys/databases/pushsdk.db-journal

Filesize
4KB

MD5
a6c323d5edca3ed89dcc879c515a818f

SHA1
07dfcd61b9f2a2d66391a87980c9a55dc21c468d

SHA256
d3804327367b6ddcd0c976201520e041cbd0310ebb3e39982d562c14e2213967

SHA512
cec15a0acdb884bbc0d7da0cb818596e9d0f316c89008acd3683b30b6375dd589f36bcddd50fc5154111bb6ccb9be0a1960c080e74e87094e460cfe189eccdf2

Download Submit
/data/data/xhd.com.ys/databases/pushsdk.db-journal

Filesize
36KB

MD5
36c86c6d86aad0526d8e5701eb2ae110

SHA1
265ef35f16b3bab4ac4863288787b65f48e37c14

SHA256
ad21be0c3da556906977103d5b8cc88708433772f49bd95a124bfa5429af76e4

SHA512
87f39833ddd0042bfabcb8b5ff9b664fe187981462fce3d01c9068ceb2bd0218a892ecd9ed74e3feffe1262f11410282bf642668ef105059524580bac8a8fd3f

Download Submit
/data/data/xhd.com.ys/databases/pushsdk.db-journal

Filesize
8KB

MD5
ba2dd0f0042ecb87912425e286019508

SHA1
b28a18b6042d6621039fd8058132cb57ce36a4f3

SHA256
31e97026bcbdb6db250e0fca4e5a2ca1d798172563313ee500fc50cfbaa0bae4

SHA512
fc27783ccbf8d438948e22278378943600909d4586e5e762a52fc869327ee81e58139f04cb1f3579b4952e27c7fb85df3a2d7c6861c30c0ffe472136d99bcbd5

Download Submit
/data/data/xhd.com.ys/files/.um/um_cache_1703395384840.env

Filesize
8KB

MD5
0d9054dbfe50413aee8692cdb21a999c

SHA1
25b1834e92cb4a715ffe285f2e86e9e39bfd7d18

SHA256
1bcb70206094821c61682022decbf300c99ac732eba77bcb45637c7dded396f6

SHA512
602e27112779c0a07b461beae3782833cbc6a3d88237f58175be3c7c2e900b6627756117548fa178569a320d45f6fc12ec83acf9bf1f2dbd5188d61d096b88ed

Download Submit
/data/data/xhd.com.ys/files/.umeng/exchangeIdentity.json

Filesize
162B

MD5
b58105ad09f918a02d2b198750d69f7f

SHA1
5f705508b8ea7d0e3fb25ecf0b05234c8ce59bd9

SHA256
1ea369d4eeec254657a8a779e9a8190d760e548ada04a66e1d6649fe21bd67d6

SHA512
a79e74cd71fb6860bf2b58c1dd5529a2497fb9f84f7e5142cecca57ad35d8a0964fef3e7b9ce2b15184e1b2805ec35cfd2ba88e23006d1c52237e3b7b30c3a58

Download Submit
/data/data/xhd.com.ys/files/cnc3ejE6/eje3cnc

Filesize
335B

MD5
585839d66722cfd02e40cb740cccb633

SHA1
374c19200fee201b26d0153487a281a934615884

SHA256
86a9bb4985cca6c9636c4fd071bef4b70ba7b3a5eb51af869a1299dc2b1574a8

SHA512
09bbe1bf1455861fd4732f2d1945c84bac34090906ac2fab75d144c22ffcf6bc585c8209e94a2b1919c8402df53966081a1af2993e12261ae4c4ac5568667d88

Download Submit
/data/data/xhd.com.ys/files/init_c1.pid

Filesize
32B

MD5
45a690099428b39ff0edeef50955d4fb

SHA1
c51a88ffd175c04b46d423b108d957a266b59bbd

SHA256
a9dfa9c36a15e551b5809006a85eba954fe2f57b27ffcefcecb5a9c53324511a

SHA512
69b901a8a7ced78b53e2f627984b31bac4af97cb0a86b62a9bad9c047daffb6fabd2b8be2ca458ab074e66570c89d85589951825d73c9fa3d8a9c6151c772a53

Download Submit
/data/data/xhd.com.ys/files/libcuid.so

Filesize
109B

MD5
6afbd33e6aeabf436c80b5ab39efb357

SHA1
85553f1e6cfc0eed5bc88e7b0952f5a28b35b31a

SHA256
d13df30b8a2f9363f18b92b5668d0958e3fa4abfe7fc8397de8c3230d9fa72b0

SHA512
5a94556df43cec27f0cf917f1257bbd82fcc80e423381fa6889e9886729ceb90cdfa9ed5b4d72230cb2ba7b3f33c8ad6c066ae354d75cf72ee09f069fd51549f

Download Submit
/storage/emulated/0/.DataStorage/ContextData.xml

Filesize
111B

MD5
457e9c3c3db45d236763d8721c594dff

SHA1
8cc9d89588590a0e7a8b27f8c21fdf8b026a0727

SHA256
11ea3eaad24be702b03525c09d10cccf70622479095275f3f89292c3e2b30070

SHA512
0a1b11782b7d78f573eea0f625e28a7c86a337466497c123d1962fd5a76291a7a9e4a8bedca3191e7ef5a10e179bf3c673edf16203bb42670ef4be1d8b4faa40

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
65B

MD5
9781ca003f10f8d0c9c1945b63fdca7f

SHA1
4156cf5dc8d71dbab734d25e5e1598b37a5456f4

SHA256
3325d2a819fdd8062c2cdc48a09b995c9b012915bcdf88b1cf9742a7f057c793

SHA512
25a9877e274e0e9df29811825bd4f680fa0bf0ae6219527e4f1dcd17d0995d28b2926192d961a06ee5bef2eed73b3f38ec4ffdd0a1cda7ff2a10dc5711ffdf03

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
111B

MD5
e0603696b3f376a2e673104ec1add97f

SHA1
06955756f3510e95de8697a9d036c7ff68c75287

SHA256
9f74b00fc15b8897663fe768d9fef4f0588c8b280fc69ab021772910ca1b0626

SHA512
f547dccc11cd509acbf4707c03884ebd1dd0de7c60fbebf4ea9d23972590875b5197edf927f4ed9c158a7a272ff83b18ed3eef5a7fd3600e2fb4f281fb2edd9d

Download Submit
/storage/emulated/0/.UTSystemConfig/Global/Alvin2.xml

Filesize
408B

MD5
2bb8baa007bf1ca950fb1d426f692c22

SHA1
958c3c49bc72f816776e581535249092500699aa

SHA256
aebbb2357f6f278ec5c369747392083657bc2c56696a9e62b3e7ed96f5d9bdd3

SHA512
f4e3d26a0348d698efe83c529c1825caeb0d9ea2a4cfef429c42827124eec64ed89b638be1f002f9d748fbe1930e2c8a7151bc4371ca953494a5d96480942f8e

Download Submit
/storage/emulated/0/.imei.txt

Filesize
32B

MD5
75e1e9c03b6de3a38d6cbe2b556c7c16

SHA1
f0c57a3502d55f0bb680f08ff2245cefe2502200

SHA256
45f888b6498801b8932ebc53abef9912c3cde236cd4a4b34ee13408e8af39bfc

SHA512
3db937f127f97094d36c035e281e0ae0d9ef893ccee6521c81333e466f39af17a1c9175e88337561470d11843c31a2c1de91a2372e0190aa65703f647160ee98

Download Submit
/storage/emulated/0/libs/xhd.com.ys.bin

Filesize
8KB

MD5
75f1aa957f9d67813003b13ffdeb8b5c

SHA1
b7e6e60d1c058e2c1de079a0b600a2733b6537c4

SHA256
58c5e3d4f6e76af3e9ee7b97c6b4e47248a871c5d365cb44de3c9d792703347b

SHA512
8289cf59e6f7824c8035a5d954063e772041cbbfda7f4379cfc4b06c373865ab1193a11c63149e058e617e14430026354274d40d39dad9bf8e5f495157e0e47f

Download Submit

Analysis

Sharing

General

Malware Config

Signatures

Processes

Network

MITRE ATT&CK Matrix

Replay Monitor

Loading Replay Monitor...

Downloads